Server device, information processing system, data providing device, information processing method, and program

Abstract

To achieve a more convenient data providing technique while maintaining security.SOLUTION: A server device comprises: a receiving section that receives, from a first data providing device among a plurality of data providing devices including the first data providing device and one or more second data providing devices, a transmission request for first mask data for replacing first data, which is a type of data to be concealed; a retrieval section that retrieves the first mask data from the one or more second data providing devices in response to the transmission request; a generation section that generates the first mask data when the first mask data is not retrieved; and a data transmission section that transmits the generated first mask data or the retrieved first mask data to the first data providing device.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to a server device, an information processing system, a data providing device, a method, and a program. [Background technology]

[0002] The construction of data distribution systems is underway to provide data obtained through corporate activities to other companies for utilization. Such systems require security measures to prevent the leakage of important business information and personal information. One method proposed to prevent information leakage is to conceal the data to be protected by using masked data.

[0003] In order to promote the use of data distribution systems, it is desirable to create a more convenient system while maintaining security. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2014-146068 [Patent Document 2] Japanese Patent Application Laid-Open No. 2014-066831 Summary of the Invention [Problem to be solved by the invention]

[0005] An object of the present invention is to realize a data providing technology that is more convenient while maintaining security. [Means for solving the problem]

[0006] The server device of the embodiment includes a receiving unit that receives a transmission request for first mask data that replaces first data, which is a type of data to be kept secret, from a first data providing device among a plurality of data providing devices including a first data providing device and one or more second data providing devices; a searching unit that searches for the first mask data from one or more second data providing devices in response to the transmission request; a generating unit that generates the first mask data if the first mask data is not found; and a data transmitting unit that transmits the generated first mask data or the found first mask data to the first data providing device. [Brief explanation of the drawings]

[0007] [Figure 1] FIG. 1 is a block diagram showing an example of the configuration of an information processing system according to an embodiment, which corresponds to a data distribution system. [Figure 2] FIG. 2 is a diagram illustrating an example of the data structure of the mask master data. [Figure 3] FIG. 3 is a sequence diagram illustrating an example of a data providing process according to the embodiment. [Figure 4] FIG. 4 is a diagram for explaining a specific example of the data providing process. [Figure 5] FIG. 5 is a flowchart illustrating an example of data use processing according to the embodiment. [Figure 6] FIG. 6 is a diagram for explaining a specific example of the data providing process. [Figure 7] FIG. 7 is a diagram illustrating an example of a business model. [Figure 8] FIG. 8 is an explanatory diagram illustrating an example of the hardware configuration of the device according to the embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0008] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Preferred embodiments of a server device, an information processing system, a data providing device, a method, and a program according to the present invention will be described in detail below with reference to the accompanying drawings.

[0009] Data distribution systems are effective for utilizing data in business. However, current data distribution systems sometimes fail to collect data from many participants. This can be attributed to factors such as the following for each participant in the data distribution system. Participants include, for example, data providers who provide data, and data users who use the provided data. (C1) Data provider elements Providing business-critical information to external parties is not recommended. When providing data, security measures such as preventing leaks are required. (C2) Data user side factors Difficulty in collecting data from a larger number of participants It is desirable to obtain as much information as possible from the collected data. -Secure data management is required

[0010] As a technology to make it easier to utilize anonymized data, a technology (hereinafter referred to as a comparative example) has been proposed that extracts combinations of records with identical content before anonymization and transmits the extracted combinations to the data user (such as an analysis server). However, this comparative example requires anonymization and extraction processes each time an analysis is performed. In addition, the raw data before anonymization must be stored in the device that performs the anonymization (such as an anonymization server). This can lead to problems such as reduced convenience and data leakage due to the storage of raw data.

[0011] In order to solve such problems, the present embodiment has the following functions, for example. (F1) A function for masking data on the data provider side before providing it: This creates an environment that allows data providers to provide data safely. (F2) A function to generate mask data for data with identical content so that the value is unique across the entire system, including multiple participants: The generated mask data is not stored in the device that implements this function (server device), but in the device on the data provider side. This maintains the security of management (avoiding data leaks).

[0012] These functions enable data users to use (analyze, etc.) multiple pieces of data provided by associating them using uniquely set mask data. In other words, there is no need for the process of extracting combinations of records with identical content, as in the comparative example above. This makes it possible to realize a more convenient data provision technology while maintaining security.

[0013] Fig. 1 is a block diagram showing an example of the configuration of an information processing system 10 according to an embodiment, which corresponds to a data distribution system. As shown in Fig. 1, the information processing system 10 includes data providing devices 100a, 100b, and 100c, a server device 200, and data utilization devices 300a, 300b, and 300c, which are connected via a network 400.

[0014] The network 400 may be of any type, such as the Internet, and may be a wired network, a wireless network, or a network in which both wired and wireless networks coexist.

[0015] The data providing devices 100a, 100b, and 100c have the same configuration, and when there is no need to distinguish between them, they are simply referred to as the data providing device 100. The number of data providing devices 100 is not limited to three, and may be one, two, four, or more.

[0016] The data utilization devices 300a, 300b, and 300c have the same configuration, and when there is no need to distinguish between them, they are simply referred to as data utilization devices 300. The number of data utilization devices 300 is not limited to three, and may be one, two, four, or more.

[0017] The data providing device 100 is a device that has the function of the data providing side (the above (F1)). That is, the data providing device 100 is a device that provides data in which at least a part of data (target data) among the data to be provided (provided data) is concealed by mask data.

[0018] The server device 200 is a device having a function for generating mask data (the above (F2)). The data utilization device 300 is a device having a function on the data user side.

[0019] Each of the above three devices (data providing device 100, server device 200, and data utilizing device 300) may be physically configured as a single device, or may be physically configured as multiple devices. For example, each of the above devices may be constructed in a cloud environment. Furthermore, some or all of the above three devices may be realized as multiple functions within a single device.

[0020] Each device will be described in detail below.

[0021] As shown in FIG. 1, the data providing device 100 includes a mask setting unit 101, a request sending unit 102, a mask processing unit 103, a providing unit 104, a mask sending unit 105, a restoration unit 106, and a memory unit 120.

[0022] The storage unit 120 stores various information used by the data providing device 100. For example, the storage unit 120 stores mask master data 121. FIG. 2 is a diagram showing an example of the data structure of the mask master data 121. As shown in FIG. 2, the mask master data 121 has a structure in which a target data DB (second data), which is data to be masked, corresponds to mask data MDB (second mask data) that replaces the target data. Note that while FIG. 2 shows the entire data including multiple records as mask master data 121, each of the multiple records may also be referred to as mask master data.

[0023] The target data DB corresponds to the type of data that is to be kept secret. The type of data that is to be kept secret may be any type, but for example, it may be a type that indicates important business information and personal information. Examples of types are given below, but the types of data that are to be kept secret are not limited to these. Personal information such as name, address, telephone number, credit card number, and insurance number Business information such as product names, store names, and company names

[0024] When multiple types of target data DBs are used, the mask master data 121 is stored for each type. For example, the mask master data 121 may be stored for each type in the storage unit 120. Each piece of mask master data may be further associated with identification information that identifies the type and stored in the storage unit 120.

[0025] Returning to the explanation of Fig. 1, the mask setting unit 101 identifies target data MA (first data) of a type to be concealed from among data included in data to be provided (provided data), and sets mask data MDA (first mask data) to replace the target data MA with the identified target data MA.

[0026] The mask setting unit 101 identifies target data MA included in the provided data, for example, according to a user's specification. The mask setting unit 101 reads mask data MDB associated with target data MB that matches the identified target data MA from the mask master data 121. The mask setting unit 101 sets the read mask data MDB as mask data MDA for the target data MA.

[0027] If the mask data MDB corresponding to the identified target data MA cannot be read from the mask master data 121, the mask setting unit 101 acquires the mask data MDA to replace the target data MA from the server device 200 via the request sending unit 102.

[0028] The request sending unit 102 sends a transmission request for requesting transmission of the mask data MDA to the server device 200. For example, if mask master data including target data MB that matches the target data MA is not stored in the storage unit 120, the request sending unit 102 sends a transmission request for the mask data MDA that replaces the target data MA to the server device 200. The transmission request includes, for example, information indicating the target data MA.

[0029] The mask setting unit 101 stores in the storage unit 120 new mask master data that associates the mask data MDA transmitted by the server device 200 in response to the transmission request with the target data MA.

[0030] The mask processing unit 103 executes mask processing on the target data MA in accordance with the setting by the mask setting unit 101. The mask processing is processing to replace the target data MA with mask data MDA. For example, the mask processing unit 103 reads the mask data MDA corresponding to the target data MA from the storage unit 120, and replaces the target data MA included in the provided data with the read mask data MDA.

[0031] The providing unit 104 provides the provided data on which the masking process has been performed to, for example, the data utilization device 300. The providing unit 104 may transmit the provided data to the data utilization device 300 via an intermediary device such as the server device 200, or may transmit the provided data directly to the data utilization device 300 via the network 400.

[0032] When the mask transmission unit 105 receives a search request for mask data from the server device 200, it transmits mask data corresponding to the target data MA specified in the search request to the server device. For example, the mask transmission unit 105 reads out mask data corresponding to the target data MA specified in the search request from the mask master data 121. The mask transmission unit 105 transmits the read mask data to the server device 200. If the mask transmission unit 105 is unable to read out mask data corresponding to the specified target data MA, it replies to the server device 200 that there is no corresponding mask data.

[0033] The restoration unit 106 has a function for restoring data before masking (hereinafter referred to as original data) using mask master data. For example, the restoration unit 106 reads, from the storage unit 120, target data MB associated with mask data MDB that matches mask data MDC (third mask data) included in provided data (provided data) provided by executing masking. The restoration unit 106 restores the original data by replacing the mask data MDC included in the provided data with the read target data MB.

[0034] For example, the data providing device 100 may need to restore original data for some reason (such as a failure). In such a case, for example, the restoration unit 106 refers to the history of past data provision and identifies the data utilization device 300 that provided the provided data (provided data). The restoration unit 106 acquires the provided data from the identified data utilization device 300 and performs the restoration process described above to restore the original data. Note that if the restoration function is not required, the restoration unit 106 may not be provided.

[0035] At least a part of each of the above units (request sending unit 102, mask setting unit 101, mask processing unit 103, providing unit 104, mask sending unit 105, and restoration unit 106) may be realized by one or more processing units. Each of the above units is realized, for example, by one or more processors. For example, each of the above units may be realized by having a processor such as a CPU (Central Processing Unit) or a GPU (Graphics Processing Unit) execute a program, that is, by software. Each of the above units may be realized by a processor such as a dedicated IC (Integrated Circuit), that is, by hardware. Each of the above units may be realized by a combination of software and hardware. When multiple processors are used, each processor may realize one of the units, or may realize two or more of the units.

[0036] Next, a description will be given of the configuration of the server device 200. As shown in Fig. 1, the server device 200 includes a receiving unit 201, a searching unit 202, a generating unit 203, a data transmitting unit 204, and a storage unit 221.

[0037] The receiving unit 201 receives various information from external devices such as the data providing device 100 and the data utilizing device 300. For example, the receiving unit 201 receives a transmission request requesting transmission of mask data MDA to replace target data MA from a plurality of data providing devices 100. Hereinafter, among the plurality of data providing devices 100, the data providing device 100 that transmitted the transmission request may be referred to as a requesting device (first data providing device), and one or more data providing devices 100 other than the requesting device may be referred to as non-requesting devices (second data providing devices).

[0038] In response to the transmission request, the search unit 202 searches for mask data MDA from one or more non-requested devices. For example, the search unit 202 transmits a search request including information indicating target data MA to each of the one or more non-requested devices. The search unit 202 acquires mask data returned from the non-requested devices in response to the search request. In this way, the search unit 202 can search for mask data MDB associated with target data MB that matches the target data MA as mask data MDA from the mask master data 121 stored in the storage unit 120 by each non-requested device.

[0039] If the mask data MDA cannot be found from the unrequested device, the generator 203 generates new mask data for the target data MA.

[0040] For example, if the search unit 202 does not find the mask data MDA, the generation unit 203 generates mask data MDA for the target data MA so that the value becomes unique within the information processing system 10. Becoming a unique value means that a unique value is set within the information processing system 10 for target data with the same value. When multiple types of target data are used, the generation unit 203 generates mask data for each type so that the value becomes unique within the information processing system 10.

[0041] Any method may be used to generate master data of a unique value, but the following method may be used, for example. A unique value (counter value, time, etc.) that increases each time it is generated is used as mask data. -From multiple mask data candidates prepared in advance, one candidate is selected as the mask data for each generation. The selected candidate is configured so that it will not be selected again.

[0042] The data transmitting unit 204 transmits the mask data MDA to the requesting device. For example, if the searching unit 202 is unable to find the mask data MDA, the data transmitting unit 204 transmits the mask data MDA generated by the generating unit 203 to the requesting device. If the searching unit 202 finds the mask data MDA, the data transmitting unit 204 transmits the found mask data MDA to the requesting device.

[0043] At least a part of each of the above units (receiving unit 201, searching unit 202, generating unit 203, and data transmitting unit 204) may be realized by one or more processing units. Each of the above units is realized, for example, by one or more processors. For example, each of the above units may be realized by having a processor such as a CPU or GPU execute a program, that is, by software. Each of the above units may be realized by a processor such as a dedicated IC, that is, by hardware. Each of the above units may be realized by a combination of software and hardware. When multiple processors are used, each processor may realize one of the units, or may realize two or more of the units.

[0044] The storage unit 221 stores various information used by the server device 200. For example, the storage unit 221 stores information used to generate mask data (counter values, mask data candidates, etc.). Note that the storage unit 221 does not store, for example, information (corresponding to mask master data) that associates the target data MA with the mask data generated for the target data MA. This makes it possible to prevent information corresponding to the mask master data from being leaked due to an attack on the server device 200, for example, and improve security.

[0045] Next, we will explain the configuration of the data utilization device 300. As shown in Figure 1, the data utilization device 300 includes a transmission unit 301, a reception unit 302, an analysis unit 303, an output control unit 304, and a storage unit 321.

[0046] The transmitting unit 301 transmits information to the data providing device 100 and external devices such as the server device 200. For example, when the data providing device 100 (restoring unit 106) requests the transmission of already-provided data, the transmitting unit 301 transmits the requested already-provided data to the data providing device 100.

[0047] The receiving unit 302 receives various information from the data providing device 100, the server device 200, etc. For example, the receiving unit 302 receives the provided data transmitted from the data providing device 100.

[0048] The analysis unit 303 executes an analysis process using the provided data. The analysis process may be any process. In this embodiment, provided data replaced with mask data generated to be unique across the entire information processing system 10 can be collected from multiple data providing devices 100. This allows more data to be collected, and multiple pieces of data to be easily associated using the mask data as a key for use in the analysis process.

[0049] The output control unit 304 controls the output of various information used in the data providing device 100. For example, the output control unit 304 executes a process of displaying the analysis results by the analysis unit 303 on a display device, and a process of transmitting the analysis results to an external device.

[0050] At least a part of each of the above units (transmitting unit 301, receiving unit 302, analyzing unit 303, and output control unit 304) may be realized by one or more processing units. Each of the above units is realized, for example, by one or more processors. For example, each of the above units may be realized by having a processor such as a CPU or GPU execute a program, that is, by software. Each of the above units may be realized by a processor such as a dedicated IC, that is, by hardware. Each of the above units may be realized by using a combination of software and hardware. When multiple processors are used, each processor may realize one of the units, or may realize two or more of the units.

[0051] The storage unit 321 stores various types of information used by the data utilization device 300. For example, the storage unit 321 stores provided data received from the data providing device 100, and results of analysis processing using the provided data.

[0052] The memory unit of each device (memory units 120, 221, 321) can be configured using any commonly used storage medium such as flash memory, memory card, RAM (Random Access Memory), HDD (Hard Disk Drive), and optical disk.

[0053] Next, a data providing process by the data providing device 100 according to the embodiment will be described. Fig. 3 is a sequence diagram showing an example of the data providing process according to the embodiment. Fig. 3 corresponds to an example in which the data providing device 100a provides provided data.

[0054] For example, when a user specifies provided data and target data to be masked in the provided data, the data providing device 100a (mask setting unit 101) identifies target data MA included in the provided data according to the specification (step S101). The mask setting unit 101 reads mask data MDA for the identified target data MA from the mask master data 121 (step S102).

[0055] The mask setting unit 101 determines whether the mask data MDA has been read (step S103). If the mask data MDA has not been read (step S103: No), the request sending unit 102 sends a request to send the mask data MDA corresponding to the target data MA to the server device 200 (step S104).

[0056] In response to the transmission request, the server device 200 (search unit 202) searches for mask data MDA corresponding to the target data MA from devices other than the requester (data providing devices 100b and 100c in the example of FIG. 3) (steps S105 and S106).

[0057] The server device 200 (the generation unit 203) determines whether the mask data MDA has been found (step S107). If the mask data MDA has not been found (step S107: No), the generation unit 203 generates the mask data MDA for the target data MA so that the mask data MDA is a unique value within the information processing system 10 (step S108).

[0058] If the mask data MDA is found (step S107: Yes), or after the mask data MDA is generated, the data transmitting unit 204 transmits the mask data MDA to the requesting device, that is, the data providing device 100a (step S109).

[0059] The data providing device 100a (mask setting unit 101) stores the mask master data in which the mask data MDA transmitted from the server device 200 is associated with the target data MA in the storage unit 120 (step S110).

[0060] After storing the mask master data MDA, and if the mask data MDA can be read (step S103: Yes), the mask processing unit 103 replaces the target data MA with the mask data MDA (step S111).

[0061] The providing unit 104 transmits the provided data in which the target data MA has been replaced with the mask data MDA to the data utilization device 300 (step S112), and ends the data providing process.

[0062] Next, a specific example of the data providing process will be described below: Fig. 4 is a diagram for explaining a specific example of the data providing process.

[0063] For example, it is assumed that the user designates the provided data 351 and "CCC" included in the provided data 351 as target data (step S201).

[0064] The mask setting unit 101 refers to the mask master data 121 and checks whether mask data associated with the specified target data is stored (step S202). In this example, since no mask master data including the target data “CCC” is stored, the mask setting unit 101 transmits a transmission request for mask data for the target data “CCC” to the server device 200 via the request transmitting unit 102 (step S203).

[0065] The server device 200 (search unit 202) searches for mask data for the target data "CCC" from data providing devices 100 other than the data providing device 100a (data providing devices 100b and 100c in the example of FIG. 4) (step S204). In the example of FIG. 4, neither of the mask master data 121 stored in the data providing devices 100b and 100c contains mask data for the target data "CCC". Therefore, mask data for the target data "CCC" is not searched for.

[0066] Therefore, the generating unit 203 newly generates mask data 352 (step S205). Fig. 4 shows an example in which "333" is generated as the mask data 352. The generated mask data 352 is transmitted by the data transmitting unit 204 to the data providing device 100a.

[0067] The mask setting unit 101 stores the mask master data 121, which associates the received mask data 352 ("333") with the target data MA ("CCC"), in the storage unit 120 (step S206). Of the two mask master data 121 in the data providing device 100a, the mask master data 121 on the right side shows an example of the mask master data after being updated to include the newly generated mask data 352.

[0068] The mask processing unit 103 reads the mask data MDA (“333”) corresponding to the target data DA (“CCC”) from the updated mask master data 121 (step S207), and outputs the output data 353 in which the target data MA is replaced with the read mask data MDA (step S208).

[0069] Although the output data 353 is output to one data utilization device 300a in FIG. 4, the output data 353 may be output to a plurality of data utilization devices 300a.

[0070] Next, a description will be given of the data utilization process performed by the data utilization device 300 according to the embodiment. Fig. 5 is a flowchart showing an example of the data utilization process according to the embodiment.

[0071] The data utilization device 300 (receiving unit 302) receives the provided data provided from the data providing device 100 (step S301). The analysis unit 303 analyzes the received provided data (step S302). The output control unit 304 outputs the analysis results by the analysis unit 303 (step S303).

[0072] In this embodiment, it is also possible to perform analysis processing using provided data collected from a plurality of data providing devices 100. An example of analysis processing will be described below.

[0073] For example, the data providing device 100a provides the following output data from the following provided data, similarly to FIG. · Provided data: “Date CCC Product C 100 yen” Output data: “Date 333 Product C 100 yen”

[0074] From the data providing device 100b, for example, the following output data is obtained from the following provided data including the same target data "CCC". · Provided data: “Date CCC Product B 1000 yen” Output data: “Date 333 Product B 1000 yen”

[0075] The analysis unit 303 can perform analysis processing by associating the provided data obtained from different data providing devices 100 (data providing devices 100a, 100b) using, for example, the uniquely set mask data "333" as a key. In this way, in this embodiment, there is no need for processing to extract combinations of records with the same content as in the comparative example.

[0076] Next, a specific example of the restoration process will be described. Fig. 6 is a diagram for explaining a specific example of the data providing process. Fig. 6 shows an example in which the data providing device 100a restores the provided data 351, which is the original data, from the output data 353, which is the provided data.

[0077] The restoration unit 106 acquires the output data 353 from the data utilization device 300a, which is the destination of the output data 353 (step S401). The restoration unit 106 reads out the target data "CCC" corresponding to the mask data "333" included in the output data 353 from the mask master data 121 (step S402). The restoration unit 106 replaces the mask data "333" included in the output data 353 with the read out target data "CCC" to restore the provided data 351, which is the original data (step S403).

[0078] In this embodiment, each data providing device 100 stores and manages mask master data 121 including mask data related to the provided data provided by the device itself. Therefore, in the restoration process, if the provided data can be obtained from the data utilization device 300 of the destination, the original data can be easily restored by referring to the mask master data 121.

[0079] Next, an example of a business model to which the data distribution system (information processing system 10) of this embodiment can be applied will be described. Fig. 7 is a diagram for explaining an example of the business model.

[0080] The example business model of FIG. 7 is divided into three elements: a source layer 710, a service layer 720, and a data consumer 730.

[0081] The source layer 710 provides data to be utilized. The data is provided by, for example, the following elements. Each element is expected to receive compensation for providing data to the service layer 720. Corporate groups that include multiple companies ·Individual ·Companies Government agencies or individuals who hold publicly known information

[0082] The service layer 720 provides functions that form the basis of data distribution. The functions provided by the service layer 720 include, for example, the following functions. It is expected that the service layer 720 will receive compensation for providing these functions. Ability to collect and provide data - Function to provide data that has undergone secondary processing, etc. Analytical functions · Functions to provide data utilization systems or analysis systems required by data users for data management and data utilization.

[0083] The data user 730 is an element that uses the provided data. The data user 730 is, for example, an individual or a corporation. The data user 730 can use the provided data and processed data provided by the service layer 720. The data user 730 can also receive from the service layer 720 a function or system that can be used to use the data, and can use the data using the provided function or system. It is expected that the data user 730 will pay a fee for the use of the data and the function or system.

[0084] The data providing device 100, server device 200, and data utilizing device 300 of this embodiment can be realized as elements corresponding to the source layer 710, service layer 720, and data consumer 730 in FIG. 7, respectively.

[0085] As described above, in the embodiment, the data providing device can mask data before providing it ((F1) above), and the server device can generate mask data so that the mask data is a unique value across the entire system ((F2) above). Because mask data that is a unique value across the entire system is used, the data utilizing device does not need to perform processing such as associating multiple pieces of data for each data utilization. Furthermore, the data associating the mask data with the target data is not stored in the server device, but is stored (distributed management) in the data providing device. Furthermore, the data providing device can restore the original data using the master data that is managed in a distributed manner. This makes it possible to realize a more convenient data providing technology while maintaining security.

[0086] Next, the hardware configuration of the devices (data providing device, server device, data utilizing device) of the embodiment will be described with reference to Fig. 8. Fig. 8 is an explanatory diagram showing an example of the hardware configuration of the devices of the embodiment.

[0087] The device of the embodiment includes a control device such as a CPU (Central Processing Unit) 51, a storage device such as a ROM (Read Only Memory) 52 and a RAM (Random Access Memory) 53, a communication I / F 54 that connects to a network and communicates, and a bus 61 that connects each part.

[0088] The programs executed by the device of the embodiment are provided in advance in the ROM 52 or the like.

[0089] The program executed by the device of the embodiment may be configured to be provided as a computer program product by being recorded in an installable or executable file format on a computer-readable recording medium such as a CD-ROM (Compact Disk Read Only Memory), a flexible disk (FD), a CD-R (Compact Disk Recordable), or a DVD (Digital Versatile Disk).

[0090] Furthermore, the program executed by the device of the embodiment may be stored on a computer connected to a network such as the Internet and provided by being downloaded via the network. Also, the program executed by the device of the embodiment may be provided or distributed via a network such as the Internet.

[0091] The programs executed by the device of the embodiment can cause a computer to function as each part of the device described above. In this computer, the CPU 51 can read the programs from a computer-readable storage medium onto a main storage device and execute them.

[0092] Although several embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be embodied in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their modifications are included within the scope and spirit of the invention, and are also included in the scope of the invention and its equivalents as defined in the claims. [Explanation of symbols]

[0093] 100 Data providing device 101 Mask setting section 102 Request sending unit 103 Mask processing section 104 Provision Department 105 Mask transmitter 106 Restoration Department 120 Storage section 121 Mask Master Data 200 Server device 201 Receiving unit 202 Search Department 203 Generation part 204 Data Transmission Unit 221 Storage section 300 Data utilization device 301 Transmission Unit 302 Receiving unit 303 Analysis Department 304 Output control section 321 Storage section 400 Network

Claims

1. a receiving unit that receives, from a first data providing device among a plurality of data providing devices including a first data providing device and one or more second data providing devices, a transmission request for first mask data that replaces first data, which is data of a type to be concealed; a search unit that searches for the first mask data from one or more of the second data providing devices in response to the transmission request; a generating unit that generates the first mask data when the first mask data is not found; a data transmitting unit that transmits the generated first mask data or the searched first mask data to the first data providing device; A server device comprising:

2. the generation unit generates the first mask data having a unique value among the plurality of data providing devices for the type of data having the same value. The server device according to claim 1 .

3. the search unit searches, as the first mask data, for the second mask data associated with the second data that matches the first data from one or more mask master data that associates one or more second data of the type with one or more second mask data that replaces the one or more second data, the second mask data being stored in a storage unit of each of the one or more second data providing devices; The server device according to claim 1 .

4. An information processing system including a plurality of data providing devices and a server device, Each of the plurality of data providing devices a storage unit that stores one or more mask master data in which one or more second data, which are data of a type to be concealed, are associated with one or more second mask data that replace the one or more second data; a request sending unit that sends, to the server device, a request to send first mask data that replaces the first data, when the mask master data including the second data that matches the first data included in the provided data is not stored in the storage unit; a mask setting unit that stores new mask master data in the storage unit, the new mask master data being associated with the first data and the first mask data transmitted by the server device in response to the transmission request; a mask processing unit that reads out the first mask data corresponding to the first data from the storage unit and replaces the first data with the read first mask data, The server device a receiving unit that receives the transmission request from a first data providing device among the plurality of data providing devices; a search unit that searches for the first mask data from one or more second data providing devices other than the first data providing device among the plurality of data providing devices in response to the transmission request; a generating unit that generates the first mask data when the first mask data is not found; a data transmitting unit that transmits the generated first mask data or the searched first mask data to the first data providing device; Information processing system.

5. a storage unit that stores one or more mask master data in which one or more second data, which are data of a type to be concealed, are associated with one or more second mask data that replace the one or more second data; a request sending unit that sends, to the server device, a request to send first mask data that replaces the first data, when the mask master data including the second data that matches the first data included in the provided data is not stored in the storage unit; a mask setting unit that stores new mask master data in the storage unit, the new mask master data being associated with the first data and the first mask data transmitted by the server device in response to the transmission request; a mask processing unit that reads out the first mask data corresponding to the first data from the storage unit and replaces the first data with the read out first mask data; A data providing device comprising:

6. the server device is connected to the data providing device and one or more second data providing devices that provide the type of data; the server device includes a generation unit that generates mask data that takes a unique value between the data providing device and one or more of the second data providing devices for the data of the type having the same value; the mask setting unit stores new mask master data in the storage unit, the new mask master data being generated by the generation unit in response to the transmission request and the first data. The data providing device according to claim 5 .

7. a restoration unit that restores data by reading, from the storage unit, the second data associated with the second mask data that matches the third mask data included in the provided data, and replacing the third mask data with the read second data. The data providing device according to claim 5 .

8. An information processing method executed by a server device, a receiving step of receiving a transmission request for first mask data to replace first data, which is data of a type to be concealed, from a first data providing device among a plurality of data providing devices including a first data providing device and one or more second data providing devices; a retrieval step of retrieving the first mask data from one or more of the second data providing devices in response to the transmission request; a generating step of generating the first mask data when the first mask data is not found; a data transmitting step of transmitting the generated first mask data or the searched first mask data to the first data providing device; An information processing method including:

9. On the computer, a receiving step of receiving a transmission request for first mask data to replace first data, which is data of a type to be concealed, from a first data providing device among a plurality of data providing devices including a first data providing device and one or more second data providing devices; a retrieval step of retrieving the first mask data from one or more of the second data providing devices in response to the transmission request; a generating step of generating the first mask data when the first mask data is not found; a data transmitting step of transmitting the generated first mask data or the searched first mask data to the first data providing device; A program to execute.

Images