Data distribution mediation system and data distribution mediation method

Abstract

To ease a burden of a user in a consent procedure for data provision required to use a service.SOLUTION: A data intermediary system comprises a processor and a storage unit. The storage unit stores therein usage information of services used by a user in the past. The processor acquires information indicating a data item for which a provider of a first service to be used by a user requests the user on the basis of terms of use of the first service, selects a second service from services that the user has used in the past, on the basis of, the usage information, extracts a difference between the data items requested on the basis of, the terms of use of the first service and data items provided on the basis of, terms of use of the second service, outputs information indicating the extracted difference, and controls, when information indicating agreement to the terms of use of the first service is acquired, a flow of data requested on the basis of, the terms of use of the first service.SELECTED DRAWING: Figure 2A

Description

[Technical field]

[0001] The present invention relates to a technique for mediating data distribution. [Background technology]

[0002] When providing personal data to a third-party service provider, it is necessary to obtain consent from the user, who is the data owner. For example, JP 2020-24511 A (Patent Document 1) describes a technology that reduces the consent procedure for users. In Patent Document 1, personal data provided with consent from the user at a first time period is recorded. When providing personal data at a second time period after the first time period, the amount of information provided at the first time period is compared with the amount of information provided at the second time period, and if the amount of information differs, the need to obtain consent is determined according to the amount of change in the different information. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2020-24511 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, in Patent Document 1, it is necessary to compare the amount of information of data provided in the past to the same third party with the amount of information of data provided currently, and when providing data to a third party with whom data has not been provided in the past, there is a problem that there is no information to compare with in the past. Therefore, it is necessary to carry out consent procedures for third parties with whom data has not been submitted in the past, which increases the burden on users. [Means for solving the problem]

[0005] In order to achieve at least one of the above objects, a data distribution intermediary device according to the present invention includes a processor and a storage unit, the storage unit stores usage status information indicating usage status of a plurality of services that a user has used in the past, The usage status information includes at least one of the names of the services used by the user in the past, the names of the businesses providing the services, the categories of the services, the frequency of use, the period of use, the terms of use, and the credibility of the businesses providing the services; The processor acquires information indicating items of data that a provider of a first service that the user intends to newly use is requested to provide to the user based on the terms of use of the first service, and acquires information indicating items of data that a provider of a first service that the user intends to newly use is requested to provide to the user based on the usage status information. Among these, the services that are used frequently, the services that are used for a long period of time, or the services that are provided by businesses with high credibility Second Service As the system selects an item of data requested to be provided based on the terms of use of the first service, extracts a difference between an item of data provided based on the terms of use of the second service, outputs information indicating the extracted difference, and, if information indicating agreement to the terms of use of the first service is obtained, controls distribution of data from an operator holding the data requested to be provided based on the terms of use of the first service to an operator providing the first service. Effect of the Invention

[0006] According to one aspect of the present invention, it is possible to reduce the burden on a user in the procedure for agreeing to the provision of data for using a service. Note that objects, configurations, and effects other than those described above will be made clear in the following embodiments. [Brief description of the drawings]

[0007] [Figure 1] 1 illustrates an example of a data distribution system configuration according to a first embodiment of the present invention. [Figure 2A] 1 is a block diagram showing an example of a configuration of a data distribution intermediary device according to a first embodiment of the present invention. [Figure 2B] 1 is a block diagram showing an example of a hardware configuration of a data distribution intermediary device according to a first embodiment of the present invention. [Diagram 3] 4 is a sequence chart showing an example of a data distribution intermediation method according to the first embodiment of the present invention. [Figure 4]1 is a flowchart showing an example of a process in which the data distribution intermediary device according to the first embodiment of the present invention calculates the creditworthiness of a service provider. [Diagram 5] 11 is a flowchart showing an example of a process in which the data distribution intermediary device according to the first embodiment of the present invention extracts differences in terms of use. [Figure 6] FIG. 2 is an explanatory diagram illustrating an example of a service usage status table held by the data distribution intermediary device according to the first embodiment of the present invention. [Figure 7] FIG. 2 is an explanatory diagram illustrating an example of a data importance table held by the data distribution intermediary device according to the first embodiment of the present invention. [Figure 8] FIG. 2 is an explanatory diagram illustrating an example of a terms of use table held by the data distribution intermediary device according to the first embodiment of the present invention. [Figure 9] FIG. 4 is an explanatory diagram illustrating an example of a rules difference table held by the data distribution intermediary device according to the first embodiment of the present invention. [Figure 10] FIG. 2 is an explanatory diagram showing an example of a consent request screen displayed by a data owner terminal constituting the data distribution system according to the first embodiment of the present invention; [Figure 11] 13 is a flowchart showing an example of a process in which the data distribution intermediary device according to the second embodiment of the present invention extracts businesses to be compared. [Figure 12] 10 is a flowchart showing an example of a process in which the data distribution intermediary device according to the second embodiment of the present invention calculates a difference in terms of use. [Figure 13] FIG. 11 is an explanatory diagram illustrating an example of a user specification table held by a data distribution intermediary device according to a second embodiment of the present invention. [Figure 14A] FIG. 11 is an explanatory diagram showing an example of a screen on which a user is notified when a comparison based on types is performed in the second embodiment of the present invention. [Figure 14B] FIG. 11 is an explanatory diagram showing an example of a screen displayed to notify the user when a consent request to the user is omitted in the second embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0008] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. The steps are given the same reference numerals and duplicated explanations will be omitted. EXAMPLES

[0009] <Figure 1: Data distribution system configuration> FIG. 1 shows an example of a data distribution system configuration according to a first embodiment of the present invention.

[0010] 1, the data distribution system includes data providing devices 101, 102, ..., 10N (N is an integer greater than 0), a data distribution intermediary device 100, data utilizing devices 201, 202, ..., 20N, and data owner terminals 301, ..., 30N. The data distribution intermediary device 100 is connected to a communication network 40, to which the data providing devices 101, 102, ..., 10N are connected. The data distribution intermediary device 100 is also connected to a communication network 50, to which the data utilizing devices 201, 202, ..., 20N are connected. The data distribution intermediary device 100 is also connected to a communication network 60, to which the data owner terminals 301, ..., 30N are connected.

[0011] The communication networks 40, 50, and 60 may be the same network.

[0012] The data providing device 10N is a device used by a service provider that provides services to users, and personal data regarding the user is accumulated in the data providing device 10N when the user uses the service. Hereinafter, any of the data providing devices 101, 102, ..., 10N will be referred to as the data providing device 10N.

[0013] The data utilization device 20N is a device used by a business entity that provides services to users, and requires personal data of users stored in the data providing device 10N in order to provide the services. Hereinafter, any data utilization device among the data utilization devices 201, 202, ..., 20N will be referred to as the data utilization device 20N.

[0014] The data owner terminal 30N is used by a user who owns personal data stored in the data providing device 10N and wishes to use a service provided by the data utilization device 20N, to perform a setting operation to determine whether or not the user's personal data may be provided to the data utilization device 20N, and to use the service. Hereinafter, any data owner terminal among the data owner terminals 301, ..., 30N will be referred to as a data owner terminal 30N.

[0015] The number of data providing devices 10N, the number of data utilizing devices 20N, and the number of data owner terminals 30N constituting the data distribution system are each arbitrary, and they do not have to be the same number.

[0016] The data owner terminal 30N according to this embodiment may be realized by dedicated hardware, or may be configured by a CPU (Central Processing Unit) and memory, etc., and may realize the functions of each part by the CPU executing a computer program for realizing the function. For example, the data owner terminal 30N may be a mobile communication terminal device such as a smartphone or a smart device for car navigation, or may be a stationary communication terminal (for example, a personal computer).

[0017] <Figure 2: Configuration of the data distribution intermediary device 100> FIG. 2A is a block diagram showing an example of the configuration of the data distribution intermediary device 100 according to the first embodiment of the present invention.

[0018] The data distribution intermediary device 100 comprises a communication unit 1100 , a data provision management unit 1200 , a terms of use management unit 1300 , a service provider management unit 1400 , a consent procedure management unit 1500 , a data distribution control unit 1600 , and a storage unit 2000 .

[0019] The communication unit 1100 communicates with the data providing device 10N via the communication network 40, with the data utilization device 20N via the communication network 50, and with the data owner terminal 30N via the communication network 60. For example, the communication unit 1100 receives the terms of the service the user wishes to use from the data utilization device 20N, and transfers them to the terms of use management unit 1300. The communication unit 1100 also transmits the terms finalized by the terms of use management unit 1300 to the data owner terminal 30N, and requests consent to the terms. The communication unit 1100 also transmits the terms finalized by the terms of use management unit 1300 to the data owner terminal 30N, and requests consent to the terms. N The consent procedure management unit 1500 receives the result of the consent from the user, and records the result of the consent.

[0020] The data provision management unit 1200 records and manages data provided from the data providing device 10N to the data utilization device 20N when the user utilizes a service provided by the data utilization device 20N.

[0021] The terms of use management unit 1300 acquires, from the data utilization device 20N, the terms agreed upon between the user and the service provider for the service provided by the data utilization device 20N that the user wishes to use, checks whether there are any errors, and manages the terms to be disclosed to the user.

[0022] The service provider management unit 1400 comprises a service usage management unit 1401 and a regulation difference extraction unit 1402 .

[0023] The service usage management unit 1401 manages the contents of the service, information on the service provider, the usage status of the service, the terms of use of the service, etc., for the service used by the user through the data owner terminal 30N.

[0024] The rules difference extraction unit 1402 selects one service provider from the list of service providers used by the user managed by the service usage management unit 1401, compares the service terms of use of that service provider with the service terms of use of a new service provider that the user wishes to use, and extracts the differences between the two rules.

[0025] The consent procedure management unit 1500 is composed of a consent notification generation unit 1501 and a consent acquisition unit 1502.

[0026] The consent notice generation unit 1501 generates a consent request notice to be sent to the data owner terminal 30N via the communication unit 1100, based on the results of the rule difference extraction unit 1403 extracting the differences between the service terms of the provider the user currently uses and the service terms of the provider the user wishes to use. The user who receives the notice generated by the consent notice generation unit 1501 determines whether or not to consent using the data owner terminal 30N, and sends the result to the data distribution intermediary device 100.

[0027] The consent acquisition unit 1502 acquires and manages the result of the user's consent received by the communication unit 1100.

[0028] The data distribution control unit 1600 controls the distribution of the user's personal data stored in the data providing device 10N to the data utilization device 20N based on the service terms of use that the user has agreed to, which are managed by the agreement procedure management unit 1500.

[0029] The memory unit 2000 stores data generated when implementing the functions of each of the communication unit 1100, data provision management unit 1200, terms of use management unit 1300, service provider management unit 1400, consent procedure management unit 1500, and data distribution control unit 1600, and provides the data required by each unit.

[0030] The data distribution intermediary device 100 according to the present embodiment may be realized by dedicated hardware, or may be configured with a CPU, memory, etc., and the functions of each unit are realized by the CPU executing a computer program for realizing the function of the unit. For example, the data distribution intermediary device 100 may be configured with a general-purpose computer such as a personal computer, and the functions of each unit of the data distribution intermediary device 100 shown in FIG. 2A may be realized by the computer executing a computer program for realizing the function of the unit.

[0031] FIG. 2B is a block diagram showing an example of a hardware configuration of the data distribution intermediary device 100 according to the first embodiment of the present invention.

[0032] The data distribution intermediation device 100 may be composed of a communication unit 1100, a CPU 3000, a memory 4000, and a storage unit 2000. In this case, computer programs for implementing the functions of the data provision management unit 1200, the terms of use management unit 1300, the service provider management unit 1400, the consent procedure management unit 1500, and the data distribution control unit 1600 are stored in the memory 4000, and the above functions are implemented by the CPU 3000 executing the programs. The functions of the above computer programs may be implemented by a single device, or may be implemented by multiple devices connected to each other so as to be able to communicate with each other. Based on the fact that the above functions can be implemented by a single device or multiple devices, the data distribution intermediation device may be read as a data distribution intermediation system.

[0033] Next, a data distribution mediation method according to this embodiment will be described.

[0034] <Figure 3: Procedure for using the service> The data distribution mediation method according to the present embodiment will be described with reference to Fig. 3. Fig. 3 is a sequence chart showing an example of the data distribution mediation method according to the first embodiment of the present invention. Specifically, Fig. 3 shows the procedure from when a user requests the use of a service to when the service is used.

[0035] In step S101, the data owner terminal 30N transmits a usage request for a service provided by the data utilization device 20N to the data distribution intermediation device 100 in response to a user operation. The service usage request is a message including a service ID and a user ID. The service ID is information for identifying a service provided by the data utilization device 20N. The user ID is information for identifying a user. The data distribution intermediation device 100 receives the service usage request via the communication unit 1100. The data distribution intermediation device 100 holds the received service usage request.

[0036] In step S102, the data distribution intermediary device 100 transmits a service terms of use transmission request for the service ID to the data utilization device 20N corresponding to the service ID included in the received service utilization request via the communication unit 1100. The data distribution intermediary device 100 holds information that associates the service ID with the data utilization device 20N in advance. The service terms of use transmission request is a message that includes the service ID and requests transmission of the terms established by the service provider. The request for the service terms of use is received by the data utilization device 20N.

[0037] In step S103, the data utilization device 20N transmits the service terms of use corresponding to the service ID included in the received service terms of use request to the data distribution intermediary device 100. The service terms of use data corresponding to the service ID is data including information expressing the terms of use determined by the service provider that provides the service corresponding to the service ID.

[0038] The terms of use data received via the communication unit 1100 is managed as a terms of use table by the terms of use management unit 1300. The terms of use table is stored in the storage unit 2000.

[0039] FIG. 8 is an explanatory diagram showing an example of a terms of use table held by the data distribution intermediary device 100 according to the first embodiment of the present invention.

[0040] As shown in Fig. 8, the terms of use table 800 includes an ID 801, an item name 802, and an item content 803. The ID 801 is information for identifying an item of the terms of use. The item name 802 indicates the name of the item. Examples of the item names include service overview, business operator, data used, data acquisition method, purpose of use, processing and use, provision to a third party, storage period, personal involvement, and contact information. The item content 803 describes the content of the terms of use for each item in the service.

[0041] Fig. 8 shows, as an example, terms of use for a "gourmet introduction service" provided by a business operator called "Company A." According to the terms of use illustrated here, in order to use the service, the user must provide the business operator with information such as "name," "email address," "location information," "visit history information," and "information written in reviews," and this information is acquired when the application is launched, and used after being anonymized for the purpose of optimizing the service. It is not provided to third parties (i.e., persons other than "Company A") and is stored until the application is uninstalled, and the user himself can be involved in disclosing, suspending use, correcting, deleting, and withdrawing consent to the information.

[0042] Word of mouth generally means oral communication. However, the word of mouth information in this embodiment is not limited to oral communication, but refers to information generated by users and mainly circulated among users. The content and distribution manner of the word of mouth information are not limited, but a typical example is information such as a user's own evaluation or impressions of a service used by the user, which is distributed via a social networking service (SNS) or a review site.

[0043] 8 illustrates an example in which the table is composed of three columns and eleven rows, but the number of columns and rows in the terms of use table 800 is not limited to this. For example, for each item such as "name" and "email address" held as "usage data", information such as the data acquisition method, purpose of use, processing and use, provision to a third party, storage period, and personal involvement may be set.

[0044] 3 again. In step S104, the terms of use management unit 1300 retrieves the terms of use of the service from the storage unit 2000 and checks whether there are any defects in the terms of use of the service. If there are any defects, the defective part is recorded and the result of the check is transmitted to the data utilization device 20N via the communication unit 1100.

[0045] In step S105, the data utilization device 20N receives the terms of use of the service confirmed by the terms of use management unit 1300, and if there is any inadequacy, corrects the terms of use of the service and finalizes the terms to be disclosed to the user. The finalized terms of use of the service are transmitted to the communication unit 1100 and stored in the storage unit 2000.

[0046] In step S106, the service usage management unit 1401 extracts a service provider to be compared from among the service providers already used by the user in order to extract the difference in the rules to be performed in step S107. At this time, the service usage management unit 1401 may calculate the degree of trust for the service provider already used by the user and select a comparison subject based on the trust. For example, the most trustworthy service provider among the service providers used by the user is selected as an appropriate service provider to be compared. However, as long as a service provider with a high trustworthiness is selected, the service provider with the highest trustworthiness may not necessarily be selected. For example, a service provider with a high trustworthiness may be selected by a method such as a user selecting from a plurality of service providers whose trustworthiness satisfies a predetermined condition (for example, a plurality of service providers with a high trustworthiness or a plurality of service providers whose trustworthiness is higher than a predetermined standard). An example of a method for calculating the trustworthiness will be described below with reference to FIG. 4.

[0047] <Figure 4: Processing to calculate the creditworthiness of a service provider> FIG. 4 is a flowchart showing an example of a process in which the data distribution intermediary device 100 according to the first embodiment of the present invention calculates the creditworthiness of a service provider.

[0048] In step S201, the service usage management unit 1401 acquires the usage status of the service being used by the user.

[0049] FIG. 6 is an explanatory diagram illustrating an example of a service usage status table held by the data distribution intermediary device 100 according to the first embodiment of the present invention.

[0050] As shown in FIG. 6, the service usage status table 600 includes an ID 601 , a service name 602 , a service provider name 603 , a service category 604 , a usage frequency 605 , a usage period 606 , rules 607 and a credibility 608 .

[0051] An ID 601 is information for identifying a service. A service name 602 is the name of the service. A service provider name 603 is the name of a provider that provides the service. A service category 604 is classification information of the service content. For example, categories of automobile-related services include maintenance, navigation, insurance, and entertainment.

[0052] The frequency of use 605 is the number of times the user uses the service in a certain period of time. The period of use 606 is the period during which the user uses the service. The terms 607 are information on the terms of use for the service. The credibility 608 indicates the degree of the user's trust in the business providing the service. The result of the credibility calculated by the service usage management unit 1401 is stored in the credibility 608.

[0053] FIG. 6 illustrates an example in which the service usage status table 600 is configured with eight columns, but the configuration of the service usage status table 600 is not limited to this.

[0054] 4 again. In step S202, the service usage management unit 1401 checks the number of services used by the user obtained in step S201, and stores the number of services as a counter value. If the counter value for the number of services is greater than 0, the process proceeds to step S203. If the counter value for the number of services is 0, the calculation of the credit rating is terminated.

[0055] In step S203, the service usage management unit 1401 extracts one service from the list of services used by the user acquired in step S201, and extracts data items provided by the user to use the service. First, the service usage management unit 1401 extracts the terms of use of the service from the service usage status table 600, and extracts data items to be used in the service from the terms of use of the service.

[0056] In step S204, service usage management unit 1401 checks the number of data items extracted in step 203, and holds the number of data items as a counter value. If the counter value for the number of data items is greater than 0, the process proceeds to step S205. Data Items If the counter value is 0, the process proceeds to step S207.

[0057] In step S205, the service usage management unit 1401 selects one data item from the data items extracted in step S203, and obtains the importance of the data item from the data provision management unit 1200. The importance of data indicates the degree of importance of the data to the data owner. For example, the importance of data may be a value indicating the magnitude of the impact (level of risk) when the data is used in a manner unintended by the user, such as being misused by another person. In this case, the importance may be rephrased as a risk value.

[0058] FIG. 7 is an explanatory diagram illustrating an example of a data importance table held by the data distribution intermediary device 100 according to the first embodiment of the present invention.

[0059] As shown in Fig. 7, a data importance table 700 includes an ID 701, a data item name 702, and importance 703. The ID 701 is information for identifying a data item. The data item name 702 is the name of the data item. The importance 703 indicates the degree of importance of the data item to the user. In Fig. 7, an example is given in which the data importance 703 is any value within the range of 0 to 1, but the numerical value of the data importance 703 is not limited to this.

[0060] The importance 703 may be specified by the user who is the data owner, or may be calculated statistically from the state of providing data to the business operator. For example, the data provision management unit 1200 may calculate the provision ratio of data provided to the business operator managed by the data provision management unit 1200, and the higher the ratio, the higher the importance. It may also be calculated from the ratio of users who select "no consent" when asked for consent to the provision of data. For example, the importance may be calculated so that the higher the ratio of users who do not consent to the provision of data, the higher the importance.

[0061] In FIG. 7, an example in which the data importance table 700 is configured with three columns will be described, but the configuration of the data importance table 700 is not limited to this.

[0062] Referring again to Fig. 4, in step S206, the service usage management unit 1401 calculates the sum of the importance of all data items used in the service. Specifically, the service usage management unit 1401 calculates the sum using the importance value acquired in step S205. After the calculation of the sum, the counter value of the number of data items is decremented, and the process returns to step S204. Steps S204 to S206 are repeated until the sum of the importance of all data items used in the service is calculated.

[0063] In step S207, the service usage management unit 1401 acquires information on service usage from the service usage status table 600. The information acquired here may be, for example, usage frequency 605 indicating the number of times a service is used in a certain period, or usage period 606 indicating the length of the period during which the user uses the service. When using usage frequency 605, it is necessary to adjust the unit for the service used by the user. For example, if the largest unit is month, a usage frequency of once a day is converted to 30 times a month. When using usage period 606, it is necessary to adjust to the smallest unit. For example, if the smallest unit is month, a usage period of one year is converted to 12 months.

[0064] In step S208, the service usage management unit 1401 calculates the data importance summed up in step S206 and the 2 The trust score is calculated using the information on service usage obtained in step 07. For example, the trust score can be calculated using the following formula (1).

[0065] Trustworthiness = Sum of data importance * Frequency of use * Duration of use (1)

[0066] When calculated using this formula, the more important data a user provides, the more frequently the service is used, and the longer the period of use, the higher the trust rating of the business operator is. However, the calculation of the trust rating is not limited to this formula. For example, the trust rating may be calculated based only on the data importance, only on the frequency of use, only on the period of use, or based on any two of them. Alternatively, the trust rating may be set based on criteria other than those mentioned above (e.g., the number of users using the service, etc.), or the user may set the trust rating at his / her own discretion.

[0067] In the above example, a business operator to be compared is selected based on the creditworthiness, and a service provided by the business operator is selected as the service to be compared, but the selection of a comparison target based on the information included in the service usage status table 600 is not limited to this. For example, the same business operator as the business operator providing the service the user wants to newly use may be selected as the comparison target, or a service belonging to the same category as the service the user wants to newly use may be selected as the comparison target.

[0068] In step S209, the service usage management unit 1401 records the credit score calculated in step S208 in the credit score 608 of the service usage status table 600. When the recording is completed, the counter value of the number of services is decremented, and the process returns to step S202. Steps S202 to S209 are repeated until the credit scores of all service providers used by the user are calculated.

[0069] Referring again to FIG.

[0070] In step S107, the rules difference extraction unit 1402 compares the rules of the new service provider to be used with the rules of one of the service providers currently used by the user extracted in step S106, and clarifies the similarities and differences between the two rules. An example of a method for extracting the rules difference will be described below with reference to FIG. 5.

[0071] <Figure 5: Processing to extract differences in terms of use> FIG. 5 is a flowchart showing an example of a process in which the data distribution intermediary device 100 according to the first embodiment of the present invention extracts differences in terms of use.

[0072] In step S301, the rules difference extraction unit 1402 acquires from the rules management unit 1300 the rules for the new service that the user wishes to use.

[0073] In step S302, the rules difference extraction unit 1402 acquires information on the service provider to be compared extracted in step S106 from the service usage management unit 1401, and acquires the rules of use of the service provider from the rules of use management unit 1300.

[0074] In step S303, the contract difference extraction unit 1402 acquires items to be compared between the terms of use of the service provider to be newly used acquired in step S301 and the terms of use of the comparison target acquired in step S302. A method of acquiring the comparison items is to acquire items described in the terms of use. For example, in the case of the terms of use as shown in FIG. 8, the service overview and the provider are usually different for each service, so other items can be acquired as comparison items. Items acquired in this case include, for example, data items used by the service (i.e., name, email address, etc.), data acquisition method, purpose of use, processing and use, provision to a third party, storage period, personal involvement, and inquiries. All items may be compared, or the user may specify the item in which he or she is most interested in advance and compare the item.

[0075] In step S304, the agreement difference extraction unit 1402 checks the number of comparison items acquired in step S303, and holds the number of comparison items as a counter value. If the counter value of the number of comparison items is greater than 0, the process proceeds to step S305. If the counter value of the number of comparison items is 0, the process of extracting differences in the terms of use ends.

[0076] In step S305, the rules difference extraction unit 1402 extracts one item from the comparison items acquired in step S303, and extracts the content of the comparison item from the terms of use of the service the user wishes to newly use, acquired in step S302. For example, when the rules difference extraction unit 1402 extracts a comparison item of data used by the service, it extracts the content of the usage data item from the terms of use table 800 of the new service to be used. Here, a case will be described where a name, email address, location information, visit history information, and review information are acquired as a list of usage data.

[0077] In step S306, the rules difference extraction unit 1402 extracts the contents of the comparison item extracted in step S304 from the terms of use to be compared acquired in step S303. For example, when the rules difference extraction unit 1402 extracts a comparison item of data used by a service, it extracts the contents of the usage data item from the terms of use table to be compared. Here, a case where a name, email address, credit card, and location information are acquired as a list of usage data will be described.

[0078] In step S307, the regulation difference extraction unit 1402 collates the contents of the comparison items extracted in steps S305 and S306 to identify the same parts and different parts. In the above example, the data used by the newly desired service is name, email address, location information, visit history information, and information written in reviews. On the other hand, the data used by the service to be compared is name, email address, credit card, and location information. When comparing the item of usage data, a list of data items of name, email address, and location information can be identified as the same parts. As the difference, it can be identified that the newly desired service uses visit history information and information written in reviews, but does not use credit card information.

[0079] In step S308, the rules difference extraction unit 1402 registers the same parts and different parts between the rules of the new service to be used and the rules of the service to be compared, extracted in step S307.

[0080] FIG. 9 is an explanatory diagram illustrating an example of a rules difference table held by the data distribution intermediary device 100 according to the first embodiment of the present invention.

[0081] As shown in Fig. 9, the rules difference table 900 includes comparison items 901, same contents 902, and different contents 903. The comparison items 901 are the names of items described in the terms of use. The same contents 902 are contents that are the same in both rules in the comparison items 901. The different contents 903 are contents that are different between the two rules in the comparison items 901. Fig. 9 illustrates an example in which the rules difference table 900 is composed of three columns, but the configuration of the rules difference table 900 is not limited to this.

[0082] In the example of Figure 9, a comparison of items included in usage data (e.g., name, email address, location information, etc.) between the terms of use of the new service to be used and the terms of use of the comparison service shows that items B and C are included in both. On the other hand, items J and K are included only in the terms of use of the new service to be used. In addition, both services have in common that data is anonymized and that the individual can be involved in disclosure, suspension of use, and correction. The terms of use of the comparison service permit the provision of data to third parties, but the terms of use of the new service to be used do not permit it.

[0083] 5 again. After registering the same parts and different parts in the terms of use of the new service to be used and the terms of use of the service to be compared, the rules difference extraction unit 1402 decrements the counter value of the number of comparison items and returns to step S304. Steps S304 to S308 are repeated until processing is completed for all comparison items. When processing is completed for all comparison items, the process of extracting differences in the rules ends.

[0084] Referring again to FIG.

[0085] In step S108, the consent notification generation unit 1501 generates a consent request notification including the terms of use of the new service the user wishes to use, confirmed in step S105, and the difference between the terms of use of the new service the user wishes to use and the terms of one of the service providers the user uses, extracted in step S107. The consent notification generation unit 1501 transmits the created consent request notification to the data owner terminal 30N via the communication unit 1100.

[0086] In step S109, the data owner terminal 30N notifies the user that it has received the consent request notice, and displays the contents of the received consent request notice on its screen.

[0087] FIG. 10 is an explanatory diagram showing an example of a consent request screen displayed by the data owner terminal 30N constituting the data distribution system according to the first embodiment of the present invention.

[0088] 10, consent request screen 1000 includes a service name 1001, differences 1002 with the terms of one of the service providers the user is using, buttons 1003 and 1004 for the user to indicate whether or not they agree, and detailed terms of use 1005. However, the format of consent request screen 1000 is not limited to that shown in Fig. 10. Based on the information displayed on consent request screen 1000, the user indicates whether or not they agree to the terms of use of a new service they wish to use, and transmits that information to data distribution intermediation device 100.

[0089] In step S110, the consent acquisition unit 1502 acquires information indicating the result of the user's consent given in step S109 via the communication unit 1100, and records and manages that information, for example, which user consented to which service and to what terms of use.

[0090] In step S111, the data distribution intermediary device 100 requests data required for a new service that the user wishes to use from the data providing device 10N, based on the terms of use to which the user has agreed, recorded in step 110. The message requesting data provision includes a user ID for identifying the user, a data item, and information indicating that the user has agreed.

[0091] In step S112, the data providing device 10N confirms that the user has agreed to the request from the data distribution intermediary device 100, searches for the necessary data using the user ID and data items, and transmits the data to the data distribution intermediary device 100.

[0092] In step S113, the data provision management unit 1200 of the data distribution intermediary device 100 executes the processing required to provide the user's personal data required for the newly desired service received in step S112 to the data utilization device 20N, and controls the data distribution control unit 1600 so that the data can be provided to the correct data utilization device 20N.

[0093] In step S114, the data distribution intermediary device 100 5 The data to be provided to the data utilization device 20N is recorded in. The data recorded here includes a time stamp, a user ID, a service ID, and a data item.

[0094] In step S115, the data distribution intermediary device 100 actually transfers the data recorded in step S114 to the data utilization device 20N via the communication unit 1100. The message transferred to the data utilization device 20N includes a user ID for identifying the user, a service ID for identifying the service, and data items required for the service.

[0095] In step S116, the data utilization device 20N provides the service that the user desires to utilize via the data owner terminal 30N based on the user data received in step S115.

[0096] According to this embodiment, the service provider that the user trusts (for example, the most trusted service provider) is selected from among the service providers that the user uses, and the terms of use of that service provider are compared with the terms of use of the service provider that the user wants to use, and the same and different contents are clarified. This provides the user with information to decide whether or not to agree when requesting consent, and the user can use this to make a quick decision, thereby reducing the burden of the consent procedure. Furthermore, when performing the comparison, if two or more highly trusted service providers are extracted, the differences between the respective terms of use and the terms of use of the newly desired service may be extracted, and the respective differences may be notified to the user. EXAMPLES

[0097] Next, a second embodiment of the present invention will be described. In the second embodiment, processing is performed according to items and conditions designated in advance by the user in the extraction of comparison targets in step S106, the extraction of differences in regulations in step S107, and the notification of regulations in step S108 in the first embodiment. Except for the differences described below, each part of the system in the second embodiment has the same function as each part in the first embodiment shown in Figures 1 to 10 with the same reference numerals, and therefore the description thereof will be omitted.

[0098] First, the process of step S106 in the second embodiment will be described below with reference to FIG.

[0099] <Figure 11: Processing to extract businesses to compare> FIG. 11 is a flowchart showing an example of a process in which the data distribution intermediary device 100 according to the second embodiment of the present invention extracts businesses to be compared.

[0100] In step S401, the service usage management unit 1401 acquires information on a comparison target designated in advance by a user. The information designated in advance by the user, including the comparison information, is managed by a user designation table stored in the storage unit 2000.

[0101] FIG. 13 is an explanatory diagram illustrating an example of a user specification table held by the data distribution intermediary device 100 according to the second embodiment of the present invention.

[0102] 13, the user specification table 1310 includes a user ID 1311, comparison target information 1312, comparison item information 1313, and consent request omission information 1314. These will be described in detail later. However, the configuration of the user specification table 1310 is not limited to that shown in FIG.

[0103] In step S401, the service usage management unit 1401 refers to the comparison target information 1312. The comparison target information 1312 includes a comparison business ID 1312A and a comparison target condition 1312B. The comparison business ID 1312A is identification information of a business that is always extracted as a comparison target when making a comparison. The comparison target condition 1312B indicates a condition that is always used when extracting a comparison target. The service usage management unit 1401 acquires the comparison business ID 1312A and the comparison target condition 1312B from the user specification table 1310.

[0104] In step S402, the service usage management unit 1401 refers to the information acquired in step S401 and checks whether or not there is a value for the comparison business ID 1312A. If there is a value for the comparison business ID 1312A, the process proceeds to step S405. A If the value is not present, the process advances to step S403.

[0105] In step S403, the service usage management unit 1401 refers to the information acquired in step S401 and acquires the comparison condition 1312B.

[0106] In step S404, the service usage management unit 1401 extracts service providers that meet the conditions obtained in step S403 from the service usage status table 600 as shown in Fig. 6. For example, when the condition that the usage period is the longest is obtained as the comparison condition 1312B, the service usage management unit 1401 extracts from the service usage status table 600 the service provider that the user has been using for the longest time.

[0107] In step S405, the service usage management unit 1401 registers the comparison business ID 1312A designated by the user or the business extracted in step S404 as a comparison business.

[0108] Next, the process of step S107 in the second embodiment will be described below with reference to FIG.

[0109] <Figure 12: Processing to extract differences in regulations> FIG. 12 is a flowchart showing an example of a process in which the data distribution intermediary device 100 according to the second embodiment of the present invention calculates a difference in terms of use.

[0110] In step S501, the rules difference extraction unit 1402 acquires information on comparison items designated in advance by the user. Here, the rules difference extraction unit 1402 acquires the comparison item information 1313 in the user designated table 1310 shown in Fig. 13. The comparison item information 1313 includes type comparison 1313A and item comparison 1313B.

[0111] The type comparison 1313A is information for comparing a predetermined type with the terms of use of a service that the user wants to use newly, and for determining which type the terms of use of the service that the user wants to use newly falls into. The type is information that is specified for the purpose of uniquely identifying the contents and characteristics of the terms of use, or the format, such as an anonymization type in which the terms of use state that anonymization is described, or a no-third-party-provision type in which the terms of use state that third parties are not provided. Therefore, types other than those exemplified in FIG. 13 may be used.

[0112] The item comparison 1313B is information that specifies items that the user considers important, and difference extraction is performed only for the items specified by the user. The regulation difference extraction unit 1402 acquires the type comparison information 1313A and the item comparison information 1313B.

[0113] In step S502, the rules difference extraction unit 1402 checks whether or not type comparison is specified in the type comparison information 1313A acquired in step S501. If there is a value in the type comparison information 1313A, type comparison is specified, so the process proceeds to step S503. If there is no value in the type comparison information 1313A, type comparison is not specified, so the process proceeds to step S505.

[0114] In step S503, the rules difference extraction unit 1402 acquires the condition for type comparison acquired in step S501. For example, when the user designates anonymity processing type, anonymity processing is acquired as the condition.

[0115] In step S504, the contract difference extraction unit 1402 performs a comparison of the terms of use by type based on the comparison conditions acquired in step S503, and clarifies the type of the terms of use of the service the user wants to newly use. If a type comparison is specified, the comparison by type takes precedence. Once the comparison by type is completed, the process of extracting the usage contract difference ends. An example of a screen notifying the user in step S109 of FIG. 3 in this case will be described with reference to FIG. 14A.

[0116] FIG. 14A is an explanatory diagram showing an example of a screen notifying the user when a comparison based on types is performed in the second embodiment of the present invention.

[0117] 14A, notification screen 1410 includes service name 1411, comparison result 1412 based on the type of terms of use, buttons 1413 and 1414 for the user to indicate whether or not they agree, and details of the terms of use 1415. However, the notification screen is not limited to the one shown in FIG. 14A.

[0118] In step S505, the regulations difference extraction unit 1402 checks whether or not there is a comparison item in the item comparison information 1313B acquired in step S501. If there is a value in the item comparison information 1313B, a comparison item has been specified, and the process proceeds to step S506. If there is no value in the item comparison information 1313B, a comparison item has not been specified, and the process proceeds to step S508.

[0119] In step S506, the rules difference extraction unit 1402 acquires the list of comparison items acquired in step S501.

[0120] In step S507, the rules difference extraction unit 1402 extracts the differences in the terms of use only for those items based on the list of comparison items acquired in step S506. Once the rules differences have been extracted, the process of extracting differences in usage standards ends.

[0121] In step S508, the rules difference extraction unit 1402 extracts the differences in the terms of use for all items in the same manner as in embodiment 1. When the differences in the rules are extracted, the process of extracting differences in the usage standards ends.

[0122] Next, step S108 in the second embodiment will be described below.

[0123] In step S108, the consent notification generating unit 1501 omits the consent request in accordance with the conditions specified by the user. As shown in Fig. 13, the user specification table 1310 includes consent request omission information 1314. The consent request omission information 1314 includes conditions for consent 1314A and conditions for disapproval 1314B. Both of these are conditions specified by the user. If the conditions for consent 1314A are met, the process of requesting consent from the user is omitted, and an indication of intent to consent is always returned. If the conditions for disapproval 1314B are met, the process of requesting consent from the user is omitted, and an indication of intent to disapproval is always returned.

[0124] The consent notification generating unit 1501 acquires the consent condition 1314A and the non-agreement condition 1314B from the user specification table 1310, and checks whether either the consent condition 1314A or the non-agreement condition 1314B is satisfied, referring to the difference information of the terms of use clarified in step S107. If none of the conditions apply, the same process as in the first embodiment is performed. If the consent condition 1314A or the non-agreement condition 1314B is satisfied, instead of requesting consent, the result of consent or non-agreement and the reason for it are displayed to the user. In this case, an example of a screen notified to the user in step S109 of FIG. 3 will be described with reference to FIG. 14B.

[0125] FIG. 14B is an explanatory diagram showing an example of a screen notifying the user when a consent request to the user is omitted in the second embodiment of the present invention.

[0126] 14B, the notification screen 1420 includes a service name 1421, a judgment result 1422, a judgment reason 1423, a cancel button 1424, and details of the terms of use 1425. However, the notification screen is not limited to the one shown in FIG. 14B.

[0127] For example, in the example of USER2 in Fig. 13, the terms of use of the service with the largest number of users is extracted as the comparison target, and the usage data items of the terms of use are compared with the usage data items of the terms of use of the service the user wants to use newly. If the condition for consent, "difference of 10% or less", is met as a result, "Agree" is displayed as the judgment result 1422, and "difference of 10% or less" is displayed as the judgment reason 1423. If the user operates the cancel button 1424, this consent is cancelled. The notification screen 1420 may further include a confirmation button (not shown), and consent may be confirmed by the user operating this confirmation button.

[0128] As described above, according to the second embodiment of the present invention, each user can arbitrarily specify a business operator to be compared with the terms of use of the business operator of the service he or she wishes to newly use (comparison business operator ID 1312A). Alternatively, the user can arbitrarily specify conditions for selecting a business operator to be compared. In addition, the user can arbitrarily specify one or more data items to be compared from among the data items of the terms of use as shown in FIG. 8, for example.

[0129] In addition, a condition for agreeing or not agreeing to the provision of data based on the terms of use can be specified for each user. For example, a condition may be specified that the user agrees when the difference between the terms of use of the service provider to be newly used and the terms of use of the service provider to be compared is equal to or less than a predetermined standard (for example, 10%). Alternatively, a condition that the terms of use of the service provider to be newly used should satisfy may be specified. In the latter case, for example, at least one value of the data used, data acquisition method, purpose of use, processing and use, provision to a third party, storage period, and personal involvement shown in FIG. 8 can be specified as a condition. For example, the user agrees if the data has been anonymized, or does not agree if the data is provided to a third party. Then, if the terms of use of the service provider to be newly used satisfy the condition, a determination may be made as to whether or not the data provision is agreed to, regardless of the result of the comparison with the service provider to be compared.

[0130] This allows users to freely specify conditions for the consent procedure, and extracts businesses to be compared and items to be compared according to the conditions specified by the user. This makes it possible to make appropriate comparisons according to the user's wishes, for example by comparing data on items that the user considers important and omitting comparisons on data on items that the user does not consider important. In addition, consent requests can be omitted according to the conditions for consent and conditions for non-consent specified by the user, reducing the burden on the user in the consent procedure.

[0131] Furthermore, the system according to the embodiment of the present invention may be configured as follows.

[0132] (1) A data distribution intermediation system having a processor (e.g., CPU 3000) and a storage unit (e.g., at least one of memory 4000 and storage unit 2000), in which the storage unit holds usage status information (e.g., service usage status table 600) indicating usage status of multiple services that a user has used in the past, and the processor acquires information indicating an item of data that a provider providing a first service that the user intends to use for the first time requests the user to provide based on the terms of use of the first service (e.g., step S103), selects a second service from the multiple services that the user has used in the past based on the usage status information (e.g., step S106), extracts a difference between the item of data that is requested to be provided based on the terms of use of the first service and the item of data provided based on the terms of use of the second service (e.g., step S107), outputs information indicating the extracted difference (e.g., step S108), and, if information indicating agreement to the terms of use of the first service is acquired, controls distribution of data from the provider holding the data that is requested to be provided based on the terms of use of the first service to the provider providing the first service (e.g., steps S111 to S115).

[0133] This reduces the burden on the user in the process of agreeing to provide data to use the service.

[0134] (2) In (1) above, the usage information includes at least one of the service names of multiple services used by the user in the past, the name of the provider, the service category, frequency of use, period of use, terms of use, and the credibility of the provider, and the processor selects as the second service a service that has been used frequently, has been used for a long period of time, or is provided by a provider with high credibility from among the multiple services used by the user in the past.

[0135] This makes it possible to extract data provided for service use and frequency of use from the service usage status, and to extract appropriate services to compare. In addition, by comparing the service terms of the extracted operator with the service terms of the operator the user wants to use and clarifying the differences between the two terms, it is possible to reduce the number of items to be confirmed when deciding whether or not to agree.

[0136] (3) In (2) above, the memory unit holds importance information (e.g., data importance table 700) indicating the importance of data items provided based on the terms of use of multiple services that the user has used in the past, and the processor calculates the sum of the importance of data items provided based on the terms of use for each of the multiple services that the user has used in the past, and calculates the credibility such that the higher the sum of the importance, the higher the credibility.

[0137] This makes it possible to extract appropriate services to be compared.

[0138] (4) In (3) above, importance is an indicator of the magnitude of risk if the data is misused.

[0139] This makes it possible to extract appropriate services to be compared.

[0140] (5) In (3) above, the processor calculates the credibility (for example, using formula (1)) so that the more frequently the service is used, the higher the credibility, the longer the period of use, and the higher the importance, the higher the credibility, and selects a service provided by a business operator with a high credibility as the second service.

[0141] This makes it possible to extract appropriate services to be compared.

[0142] (6) In (2) above, the memory unit holds information (e.g., item comparison 1313B) specifying the items of data to be compared, and the processor extracts, for the items of data to be compared, the differences between the items of data requested to be provided based on the terms of use of the first service and the items of data provided based on the terms of use of the second service.

[0143] This makes it possible to extract items to be compared according to conditions specified by the user.

[0144] (7) In (2) above, the memory unit holds at least one of a first condition (e.g., condition for agreeing 1314A) that the difference must satisfy in order for the user to agree to the terms of use of the first service and a second condition (e.g., condition for not agreeing 1314B) that the difference must satisfy in order for the user to not agree to the terms of use of the first service, and the processor determines that the user agrees to the terms of use of the first service if the difference satisfies the first condition, and determines that the user does not agree to the terms of use of the first service if the difference satisfies the second condition.

[0145] This allows for appropriate comparison based on the user's wishes, and also reduces the burden on the user in the consent procedure by omitting consent requests depending on conditions.

[0146] (8) In (2) above, the memory unit retains at least one of a third condition (e.g., condition for consent 1314A) that the terms of use of the first service must satisfy in order for the user to agree to the terms of use of the first service, and a fourth condition (e.g., condition for non-consent 1314B) that the terms of use of the first service must satisfy in order for the user to not agree to the terms of use of the first service, and the processor determines that the user agrees to the terms of use of the first service if the terms of use of the first service satisfy the third condition, regardless of the difference, and determines that the user does not agree to the terms of use of the first service if the terms of use of the first service satisfy the fourth condition, regardless of the difference.

[0147] This makes it possible to omit the consent request depending on the conditions, reducing the burden on the user in the consent procedure.

[0148] (9) In (8) above, the third and fourth conditions are conditions related to at least one of the items of data required to be provided pursuant to the terms of use of the first service, the method of acquiring the data, the purpose of using the data, whether the data will be anonymized, whether the data will be provided to a third party, the period for which the data will be stored, and the handling of the data in which the user can be involved.

[0149] This makes it possible to omit the consent request depending on the conditions, reducing the burden on the user in the consent procedure.

[0150] The present invention is not limited to the above-mentioned embodiment, and various modifications are included. For example, the above-mentioned embodiment has been described in detail for better understanding of the present invention, and is not necessarily limited to those having all the configurations described. Also, it is possible to replace a part of the configuration of one embodiment with the configuration of another embodiment, and it is also possible to add the configuration of another embodiment to the configuration of one embodiment. Also, it is possible to add, delete, or replace a part of the configuration of each embodiment with another configuration.

[0151] In addition, the above-mentioned configurations, functions, processing units, processing means, etc. may be realized in part or in whole by hardware, for example, by designing them as integrated circuits. In addition, the above-mentioned configurations, functions, etc. may be realized in software by a processor interpreting and executing a program that realizes each function. Information such as a program, table, file, etc. that realizes each function can be stored in a storage device such as a non-volatile semiconductor memory, a hard disk drive, or an SSD (Solid State Drive), or in a computer-readable non-transitory data storage medium such as an IC card, an SD card, or a DVD.

[0152] In addition, the control lines and information lines are shown as those considered necessary for the explanation, and not all control lines and information lines in the product are shown. In reality, it can be considered that almost all components are connected to each other. [Explanation of symbols]

[0153] 100 Data distribution intermediary device 101, 102, ..., 10N Data providing device 201, 202, ..., 20N Data utilization device 301,...,30N Data owner terminal 40 Communication Network 50 Communication Network 60 Communication Network 1100 Communications Department 1200 Data Management Department 1300 Terms of Use Management Department 1400 Service Business Management Department 1401 Service Usage Management Department 1402 Regulation Difference Extraction Unit 1500 Consent Procedure Management Department 1501 Consent notification generation unit 1502 Consent Obtaining Department 1600 Data Distribution Control Unit 2000 storage section

Claims

1. A data distribution intermediation system having a processor and a storage unit, The storage unit holds usage status information indicating usage status of a plurality of services used by a user in the past; The usage status information includes at least one of the names of the services used by the user in the past, the names of the businesses providing the services, the categories of the services, the frequency of use, the period of use, the terms of use, and the credibility of the businesses providing the services; The processor, a provider providing a first service that the user intends to newly use acquires information indicating an item of data that the provider is requested to provide to the user based on a terms of use of the first service; selecting, as a second service, a service that has been used frequently, a service that has been used for a long period of time, or a service provided by a business operator with a high degree of credibility from among a plurality of services that have been used by the user in the past based on the usage status information; extracting a difference between an item of data requested to be provided based on a term of use of the first service and an item of data provided based on a term of use of the second service; outputting information indicating the extracted difference; A data distribution intermediation system characterized by controlling the distribution of data from an operator who holds data required to be provided based on the terms of use of the first service to an operator who provides the first service when information indicating agreement to the terms of use of the first service is obtained.

2. The data distribution intermediation system according to claim 1, The storage unit holds importance information indicating the importance of items of data provided based on terms of use of a plurality of services used by the user in the past; The processor, Calculate the sum of the importance of the items of data provided under the terms of use for each of a plurality of services used by the user in the past; A data distribution intermediation system, characterized in that the credibility is calculated such that the higher the sum of the importance levels, the higher the credibility.

3. The data distribution intermediation system according to claim 2, A data distribution intermediation system, wherein the importance is an index showing the magnitude of risk if the data is misused.

4. A data distribution intermediation system according to claim 2, The processor, calculating the trustworthiness such that the trustworthiness is higher the higher the frequency of use, the trustworthiness is higher the longer the period of use, and the trustworthiness is higher the higher the importance; A data distribution intermediation system, comprising: a service provided by a business operator having a high degree of credibility selected as the second service.

5. A data distribution intermediation system according to claim 1, The storage unit holds information for designating an item of data to be compared; A data distribution intermediation system characterized in that the processor extracts, for the data items to be compared, differences between the data items requested to be provided based on the terms of use of the first service and the data items provided based on the terms of use of the second service.

6. A data distribution intermediation system according to claim 1, the storage unit holds at least one of a first condition that the difference should satisfy in order for the user to agree to a term of use of the first service and a second condition that the difference should satisfy in order for the user to not agree to a term of use of the first service; The processor determines that the user agrees to the terms of use of the first service if the difference satisfies the first condition, and determines that the user does not agree to the terms of use of the first service if the difference satisfies the second condition.

7. A data distribution intermediation system according to claim 1, the storage unit holds at least one of a third condition that the terms of use of the first service must satisfy in order for the user to agree to the terms of use of the first service, and a fourth condition that the terms of use of the first service must satisfy in order for the user to not agree to the terms of use of the first service; The processor determines that the user agrees to the terms of use of the first service regardless of the difference if the terms of use of the first service satisfy the third condition, and determines that the user does not agree to the terms of use of the first service regardless of the difference if the terms of use of the first service satisfy the fourth condition.

8. The data distribution intermediation system according to claim 7, A data distribution intermediation system, characterized in that the third condition and the fourth condition are conditions related to at least any of the items of data requested to be provided based on the terms of use of the first service, the method of acquiring the data, the purpose of use of the data, whether or not the data will be anonymized, whether or not the data will be provided to a third party, the storage period of the data, and the handling of the data in which the user can be involved.

9. A data distribution intermediation method executed by a data distribution intermediation system having a processor and a storage unit, comprising: The storage unit holds usage status information indicating usage status of a plurality of services used by a user in the past; The usage status information includes at least one of the names of the services used by the user in the past, the names of the businesses providing the services, the categories of the services, the frequency of use, the period of use, the terms of use, and the credibility of the businesses providing the services; The data distribution mediation method includes: a step of the processor acquiring information indicating an item of data that a provider of a first service that the user intends to newly use is to request the user to provide based on a terms of use of the first service; a step of the processor selecting, based on the usage status information, from among a plurality of services previously used by the user, a service that has been used frequently, a service that has been used for a long period of time, or a service provided by a business operator with a high degree of credibility as a second service; A step of extracting a difference between an item of data requested to be provided based on a term of use of the first service and an item of data provided based on a term of use of the second service by the processor; a step of the processor outputting information indicating the extracted difference; a step of controlling the distribution of data from an operator that holds data required to be provided based on the terms of use of the first service to an operator that provides the first service when information indicating agreement to the terms of use of the first service is input by the processor.

Images