DATA ACCESS CONTROL SYSTEM, DATA ACCESS CONTROL METHOD, AND PROGRAM

Abstract

A data access control system, a data access control method, and a program are provided that enable a user to grasp personal information that is being used secondary between services. [Solution] A data access control system comprising: a memory unit that stores first personal information obtained by a user by using a first service; a permission processing unit that, when the first personal information corresponding to second personal information required for using a second service is stored in the memory unit, obtains permission from the user to allow the second service to use the first personal information corresponding to the second personal information; a data linkage processing unit that links the first personal information stored in the memory unit to the second service based on the permission; and a usage history management unit that records the usage history of the first personal information based on the linkage of the first personal information stored in the memory unit to the second service.

Description

[Technical field]

[0001] The present invention relates to a data access control system, a data access control method, and a program. [Background technology]

[0002] Conventionally, various techniques have been proposed for sharing personal information of a user between services with the user's permission.

[0003] For example, Patent Document 1 listed below discloses a technology that enables a service provided by operator A and a service provided by operator B to exchange desired personal information of a user, assuming that the user's permission has been obtained. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Patent No. 7171504 Summary of the Invention [Problem to be solved by the invention]

[0005] However, the technology disclosed in the above Patent Document 1 does not provide users with information indicating which personal information is provided to which service and is being used, so users cannot grasp how their personal information is being used secondary between services.

[0006] In view of the above-mentioned problems, an object of the present invention is to provide a data access control system, a data access control method, and a program that enable users to understand personal information that is being used secondary between services. [Means for solving the problem]

[0007] In order to solve the above-mentioned problems, a data access control system according to one aspect of the present invention includes: a storage unit that stores first personal information obtained by a user by using a first service; a matching processing unit that performs matching between the first personal information and the second personal information based on first item information indicating the item name of the first personal information obtained in the first service and second item information indicating the item name of the second personal information necessary for using the second service; a data extraction unit that extracts the first personal information to be provided to the second service from the first personal information stored in the storage unit based on a result of the matching; Necessary for use of the second service The above When the first personal information corresponding to the second personal information is stored in the storage unit, the first personal information corresponding to the second personal information is The first personal information extracted from a permission processing unit that obtains a permission for use from the user for the second service to use the first personal information stored in the storage unit based on the permission for use. The first personal information extracted from a data linking processing unit that links the first personal information stored in the storage unit to the second service; The first personal information extracted from and a usage history management unit that records a usage history indicating details regarding the linkage of the first personal information based on the linkage of the first personal information to the second service.

[0008] A data access control method according to one aspect of the present invention includes a storage step of storing first personal information, which is obtained by a user using a first service, in a storage unit; a matching process for matching the first personal information with the second personal information based on first item information indicating the item names of the first personal information obtained in the first service and second item information indicating the item names of second personal information required for use of the second service; a data extraction process for extracting the first personal information to be provided to the second service from the first personal information stored in the storage unit based on a result of the matching; Necessary for use of the second service The above When the first personal information corresponding to the second personal information is stored in the storage unit, the first personal information corresponding to the second personal information is The first personal information extracted from a permission process for obtaining a permission for use from the user for the second service to use the first personal information stored in the storage unit based on the permission for use; The first personal information extracted from a data linking process for linking the first personal information stored in the storage unit to the second service; The first personal information extracted from and a usage history management process for recording a usage history indicating details regarding the linkage of the first personal information based on the linkage of the first personal information to the second service.

[0009] A program according to one aspect of the present invention includes a computer, the computer comprising: a storage unit configured to store first personal information, which is obtained by a user using a first service, in a storage unit; a matching processing means for matching the first personal information with the second personal information based on first item information indicating the item names of the first personal information obtained in the first service and second item information indicating the item names of the second personal information required for use of the second service; a data extraction means for extracting the first personal information to be provided to the second service from the first personal information stored in the storage unit based on a result of the matching; Necessary for use of the second service The above When the first personal information corresponding to the second personal information is stored in the storage unit, the first personal information corresponding to the second personal information is The first personal information extracted from a permission processing means for acquiring a permission for use from the user for the second service to use the first personal information stored in the storage unit based on the permission for use. The first personal information extracted from a data linking processing unit for linking the first personal information stored in the storage unit to the second service; The first personal information extracted from and a usage history management means for recording a usage history indicating details regarding the linkage of the first personal information based on the linkage of the first personal information to the second service. Effect of the Invention

[0010] According to the present invention, a user can grasp personal information that is being used secondary between services. [Brief description of the drawings]

[0011] [Figure 1] FIG. 1 is a diagram showing an overview of a data linkage service according to an embodiment of the present invention. [Diagram 2] 1 is a block diagram showing an example of a configuration of a data linkage system according to an embodiment of the present invention. [Diagram 3] FIG. 2 is a block diagram showing an example of a functional configuration of a user terminal according to the present embodiment. [Figure 4] 1 is a block diagram showing an example of a functional configuration of a data access control system according to an embodiment of the present invention. [Diagram 5] 2 is a block diagram showing an example of a functional configuration of a first service system according to the present embodiment. FIG. [Figure 6] 2 is a block diagram showing an example of a functional configuration of a second service system according to the present embodiment. FIG. [Figure 7] FIG. 4 is a sequence diagram showing an example of a processing flow relating to the use of a first service according to the embodiment. [Figure 8] FIG. 4 is a sequence diagram showing an example of a processing flow relating to personal information obtained in the first service according to the embodiment. [Figure 9] FIG. 11 is a sequence diagram showing an example of a processing flow relating to the use of a second service according to the embodiment. [Figure 10] FIG. 11 is a sequence diagram showing an example of a processing flow relating to personal information obtained in the second service according to the embodiment and payment of a consideration. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0012] Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

[0013] <1. Overview of data linkage services> An overview of the data linkage service according to this embodiment will be described with reference to Fig. 1. Fig. 1 is a diagram showing an overview of the data linkage service according to this embodiment.

[0014] A data linking service is a service for linking (sharing) personal information of a user who is a user of each service between multiple services. As an example, Fig. 1 shows a data linking service SA that links personal information of a user US between a first service SA1 and a second service SA2. In the example shown in Fig. 1, the personal information of the user US is linked between the first service SA1 and the second service SA2 based on the control of the data linking system 1.

[0015] Here, the flow when the user US uses the data linkage service SA will be explained. First, the user US deposits personal information to the data linkage system 1 (step S1). The personal information deposited by the user here is information that can be commonly used in multiple services, such as name, date of birth, address, telephone number, and email address. The data linkage system 1 acquires permission from the user US to use the personal information deposited by the user US in the first service SA1 (step S2). When permission for use is obtained from the user US, the data linking system 1 links the personal information deposited by the user US to the first service SA1 (step S3). The first service SA1 provides a service to the user US based on the personal information linked from the data linking system 1 (step S4).

[0016] The data linkage system 1 obtains permission from the user US to deposit personal information obtained by the user US using the first service SA1 from the first service SA1 to the data linkage system 1 (step S5). When permission for use is obtained from the user US, the first service SA1 deposits personal information obtained by the user US using the first service SA1 into the data link system 1 (step S6).

[0017] The data linkage system 1 obtains permission from the user US to use the personal information deposited by the user US in the second service SA2 and to use the personal information deposited from the first service SA1 in the second service SA2 (step S7). When permission for use is obtained from the user US, the data linking system 1 links the personal information deposited by the user US and the personal information deposited from the first service SA1 to the second service SA2 (steps S8 and S9). The second service SA2 provides a service to the user US based on the personal information linked from the data linking system 1 (step S10).

[0018] The data linkage system 1 obtains permission from the user US to deposit personal information obtained by the user US using the second service SA2 from the second service SA2 to the data linkage system 1 (step S11). When permission for use is obtained from the user US, the second service SA2 deposits personal information obtained by the user US using the second service SA2 into the data link system 1 (step S12). The second service SA2 pays the first service SA1 a fee for using the personal information of the first service SA1 via the data link system 1 (step S13).

[0019] <2. Data linkage system configuration> The outline of the data linkage service according to the present embodiment has been described above. Next, the configuration of the data linkage system according to the present embodiment will be described with reference to Fig. 2. Fig. 2 is a diagram showing an example of the configuration of the data linkage system according to the present embodiment. The data linking system 1 shown in FIG. 2 is a system for operating the data linking service SA the outline of which has been explained with reference to FIG.

[0020] As shown in FIG. 2, the data link system 1 includes a user terminal 10, a data access control system 20, a first service system 30, and a second service system 40. The network NW may be configured to transmit and receive information using, for example, a Local Area Network (LAN), a Wide Area Network (WAN), a telephone network (mobile phone network, fixed telephone network, etc.), a regional Internet Protocol (IP) network, the Internet, a QKD network, etc.

[0021] (1) User terminal 10 The user terminal 10 is a terminal that a user operates to use the data link service. The user terminal 10 is, for example, a smartphone, a tablet terminal, a PC (Personal Computer), or the like. The user terminal 10 is communicably connected to a data access control system 20, a first service system 30, and a second service system 40 via a network NW.

[0022] A screen for controlling access to personal information from each service is displayed on the user terminal 10 by an application (hereinafter also referred to as an "access control application") for the user to use the data access control system 20. The user can manage access control (permission to use) to personal information by operating the screen displayed on the user terminal 10 by the access control application. Furthermore, a screen for using each service is displayed on the user terminal 10 by an application (hereinafter also referred to as a "service app") for the user to use each service. The user can use each service by operating the screen displayed on the user terminal 10 by the service app. The functions of the access control application and the service application may be provided by installing the access control application and the service application in the user terminal 10 (i.e., native application), or may be provided by a Web system (i.e., Web application). In the case of a Web application, the access control application and the service application are managed by a server, and the functions are provided via a Web browser.

[0023] (2) Data Access Control System 20 The data access control system 20 is a system for controlling access to personal information of users by each service. The data access control system 20 is configured by, for example, a PC, one or more servers (for example, cloud servers), or a combination of a PC and a server. The data access control system 20 is communicably connected to a user terminal 10, a first service system 30, and a second service system 40 via a network NW.

[0024] (3) First service system 30 The first service system 30 is a system used for a first service SA1 provided by a first operator. The first service system 30 is configured, for example, by a PC, one or more servers (for example, cloud servers), or a combination of a PC and a server. The first service system 30 is communicably connected to a user terminal 10 and a data access control system 20 via a network NW.

[0025] (4) Second service system 40 The second service system 40 is a system used for a second service SA2 provided by a second operator. The second service system 40 is configured, for example, by a PC, one or more servers (for example, cloud servers), or a combination of a PC and a server. The second service system 40 is communicably connected to the user terminal 10 and the data access control system 20 via the network NW.

[0026] <3. Functional configuration of user terminal> The configuration of the data linkage system 1 according to this embodiment has been described above. Next, the functional configuration of the user terminal 10 according to this embodiment will be described with reference to Fig. 3. Fig. 3 is a block diagram showing an example of the functional configuration of the user terminal 10 according to this embodiment. As shown in FIG. 3, the user terminal 10 includes a communication unit 110, an input unit 120, a storage unit 130, a control unit 140, and an output unit 150.

[0027] (1) Communications Department 110 The communication unit 110 has a function of transmitting and receiving various information. The communication unit 110 transmits and receives various information to and from the data access control system 20, the first service system 30, and the second service system 40, for example.

[0028] (2) Input unit 120 The input unit 120 has a function of accepting input. The input unit 120 is, for example, an input device that the user terminal 10 has as hardware, such as a button, a touch panel, a microphone, a mouse, a keyboard, and the like.

[0029] (3) Storage section 130 The storage unit 130 has a function of storing various information. The function of the storage unit 130 is to store various information such as a storage medium provided as hardware in the user terminal 10, for example, a hard disk drive (HDD). Drive), SSD (Solid State Drive), flash memory, EEPROM (Electrically Erasable Programmable It may be composed of Read Only Memory (RAM), Random Access read / write Memory (RAM), ROM (Read Only Memory), or any combination of these storage media.

[0030] (4) Control unit 140 The control unit 140 has a function of controlling the overall operation of the user terminal 10. The function of the control unit 140 is realized, for example, by causing a central processing unit (CPU) or a graphics processing unit (GPU), which are provided as hardware in the user terminal 10, to execute a program. As shown in FIG. 3, the control unit 140 includes an input processing unit 141 and an output processing unit 142.

[0031] (4-1) Input processing unit 141 The input processing unit 141 has a function of accepting a user's operation inputted to the input unit 120 and executing a process according to the content of the operation. The functions of the input processing unit 141 are executed by an access control application and a service application. When the input unit 120 accepts an operation to deposit personal information, the input processing unit 141 transmits the personal information input by the user from the communication unit 110 to the data access control system 20 . Furthermore, when the input unit 120 accepts an operation for permission to use personal information, the input processing unit 141 transmits the result of the permission to use input by the user from the communication unit 110 to the data access control system 20. Furthermore, when the input unit 120 accepts a personal information deposit permission operation, the input processing unit 141 transmits the result of the deposit permission input by the user from the communication unit 110 to the data access control system 20 . Furthermore, when the input unit 120 accepts an operation to use a service, the input processing unit 141 transmits a request for providing the service selected by the user from the communication unit 110 to the service system corresponding to the selected service.

[0032] (4-2) Output processing unit 142 The output processing unit 142 has a function of controlling the output in the output unit 150. The output processing unit 142 causes the output unit 150 to display a screen based on the information received by the communication unit 110 from the data access control system 20, the first service system 30, and the second service system 40.

[0033] (5) Output unit 150 The output unit 150 has a function of outputting various information. The output unit 150 is, for example, an output device provided in the user terminal 10 as hardware, such as a display device or a touch screen (touch panel), or an audio output device such as a speaker.

[0034] <4. Functional configuration of data access control system> The functional configuration of the user terminal 10 according to this embodiment has been described above. Next, the functional configuration of the data access control system 20 according to this embodiment will be described with reference to Fig. 4. Fig. 4 is a block diagram showing an example of the functional configuration of the data access control system 20 according to this embodiment. As shown in FIG. 4, the data access control system 20 includes a communication unit 210, a storage unit 220, and a control unit 230.

[0035] (1) Communications unit 210 The communication unit 210 has a function of transmitting and receiving various information. The communication unit 210 transmits and receives various information to and from the user terminal 10, the first service system 30, and the second service system 40, for example.

[0036] (2) Storage section 220 The storage unit 220 has a function of storing various information. The function of the storage unit 220 is realized by a storage medium provided as hardware in the data access control system 20, such as an HDD, SSD, flash memory, EEPROM, RAM, ROM, or any combination of these storage media.

[0037] The storage unit 220 stores, for example, item information. The item information is information (for example, a list) indicating the item names of personal information related to each service. The item information is, for example, information indicating personal information necessary for using a service, personal information obtained by using a service, etc. The item information is prepared for each of the first service SA1 and the second service SA2. The storage unit 220 also stores, for example, personal information that the user registers in advance from the user terminal 10, personal information (first personal information) that the user obtains by using the first service SA1, and personal information that the user obtains by using the second service SA2. Each piece of personal information is information that is deposited in the data access control system 20 based on the user's permission to use it.

[0038] In the following, personal information that the user registers in advance from the user terminal 10 is also referred to as "registered personal information." Personal information required for use of the first service SA1 is also referred to as "first necessary personal information," and personal information required for use of the second service SA2 is also referred to as "second necessary personal information." Personal information obtained by the user using the first service SA1 is also referred to as "first used personal information," and personal information obtained by the user using the second service SA2 is also referred to as "second used personal information."

[0039] (3) Control unit 230 The control unit 230 has a function of controlling the overall operation of the data access control system 20. The control unit 230 is realized, for example, by causing a CPU or a GPU provided as hardware in the data access control system 20 to execute a program. As shown in FIG. 4, the control unit 230 includes a data link processing unit 231, a permission processing unit 232, a matching processing unit 233, a data extraction unit 234, a usage history management unit 235, a consideration processing unit 236, and an output control unit 237.

[0040] (3-1) Data link processing unit 231 The data association processing unit 231 has a function of performing processing related to data association. For example, the data association processing unit 231 acquires the registration personal information received by the communication unit 210 from the user terminal 10, and stores (registers) it in the storage unit 220.

[0041] Furthermore, the data linking processing unit 231 links the registered personal information stored in the storage unit 220 to the first service SA1 or the second service SA2 based on the user's permission to use. Specifically, the data linking processing unit 231 transmits the registered personal information to the first service system 30 or the second service system 40 via the communication unit 210. Furthermore, the data link processing unit 231 links the first personal information for use stored in the storage unit 220 to the second service SA2 based on the user's permission to use. Specifically, the data link processing unit 231 transmits the first personal information for use to the second service system 40 via the communication unit 210. Furthermore, the data association processing unit 231 associates the second personal information for use stored in the storage unit 220 with the first service SA1 based on the user's permission to use. Specifically, the data association processing unit 231 transmits the second personal information for use to the first service system 30 via the communication unit 210.

[0042] (3-2) Permission processing unit 232 The permission processing unit 232 has a function of performing processing related to various permissions by the user. For example, the permission processing unit 232 obtains permission to use personal information from the user via the user terminal 10. As an example, the permission processing unit 232 obtains permission to use from the user for the first service SA1 or the second service SA2 to use the registered personal information, for the first service SA1 to use the second personal information to be used, for the second service SA2 to use the first personal information to be used, and the like.

[0043] Furthermore, the permission processing unit 232 obtains a deposit permission for personal information from the user via the user terminal 10. As an example, the permission processing unit 232 obtains a deposit permission from the user for the first service SA1 to deposit the first personal information for use in the data access control system 20, and for the second service SA2 to deposit the second personal information for use in the data access control system 20.

[0044] (3-3) Matching processing unit 233 The matching processing unit 233 has a function of performing matching processing. In the matching processing, the matching processing unit 233 performs matching between the personal information of the link source and the personal information of the link destination. For example, the matching processing unit 233 performs matching between the used personal information obtained by using the service that is the link source of the personal information and the necessary personal information required for using the service that is the link destination of the personal information. The matching processing unit 233 extracts data that matches (conforms) between the used personal information and the necessary personal information by matching.

[0045] As an example, the matching processing unit 233 matches the first usable personal information with the second necessary personal information based on item information (first item information) indicating the item name of the first usable personal information obtained in the first service SA1 and item information (second item information) indicating the item name of personal information (second personal information) necessary for using the second service SA2. Through this matching, the matching processing unit 233 can confirm whether or not the personal information obtained by the user through use of the first service SA1 contains personal information necessary for the user to use the second service SA2.

[0046] (3-4) Data extraction unit 234 The data extraction unit 234 has a function of extracting data. For example, the data extraction unit 234 extracts necessary personal information from the personal information stored in the storage unit 220. As an example, the data extraction unit 234 extracts the first personal information to be provided to the second service SA2 from the first personal information to be used stored in the storage unit 220 based on the result of matching by the matching processing unit 233.

[0047] (3-5) Usage history management unit 235 The usage history management unit 235 has a function of managing the usage history of personal information. For example, when the personal information stored in the storage unit 220 is linked to each service, the usage history management unit 235 records details of the link as a usage history. As an example, the usage history management unit 235 records the usage history of the first personal information used, based on the fact that the first personal information used stored in the storage unit 220 is linked to the second service SA2. Details of the linkage indicated by the usage history include, for example, the name of the linked personal information item, the linkage source (access source), the linkage destination (access destination), the number of uses (number of accesses), and the amount of data.

[0048] (3-6) Compensation Processing Unit 236 The compensation processing unit 236 has a function of performing processing related to the payment of compensation for the use of personal information. For example, the compensation processing unit 236 calculates compensation for the use of personal information stored in the storage unit 220 based on the usage history, and causes the user to pay the compensation to the provider of the personal information. As an example, when the first usage personal information of the first service SA1 stored in the storage unit 220 is linked to the second service SA2, the compensation processing unit 236 causes the second service SA2 to pay compensation for the use of the first usage personal information to the first service SA1. In this case, the compensation processing unit 236 calculates compensation according to the usage of the first usage personal information by the second service SA2 based on the usage history. The usage of the first usage personal information can be calculated, for example, from the number of times of use and the amount of data indicated by the usage history.

[0049] Here, a specific description will be given of a method for calculating the compensation by the compensation processing unit 236. As an example, a method for calculating the compensation when the second service SA2 uses the first personal information for use of the first service SA1 will be described. First, the compensation processing unit 236 extracts the access source (in this case, the second service SA2), the access destination (in this case, the first service SA1), the number of accesses, and the data volume from the usage history stored in the memory unit 220. The compensation processing unit 236 calculates the compensation (e.g., fee) that the access source pays to the access destination based on the extracted number of accesses and data volume. At this time, the compensation processing unit 236 may automatically calculate the rate so that the fee can be set higher the more the number of accesses (i.e., the higher the demand) and lower the fee can be set lower the less the number of accesses (i.e., the lower the demand). Similarly, the compensation processing unit 236 may automatically calculate the rate for the amount of data so that the fee can be set higher the more the amount of data and lower the fee can be set lower. On the other hand, the compensation processing unit 236 may automatically calculate the rate so that the fee can be set lower the more the number of accesses or the amount of data and higher the fee can be set higher the more the number of accesses or the amount of data. The calculated fee may be in real currency such as yen or dollars, or may be in tokens such as alternative currencies or virtual currencies.

[0050] (3-7) Output control unit 237 The output control unit 237 has a function of controlling the output of various information. For example, the output control unit 237 transmits the usage history recorded by the usage history management unit 235 to the user terminal 10, and the usage history is displayed on the user terminal 10. The usage history is transmitted to the user terminal 10 via the communication unit 210. By checking the usage history displayed on the user terminal 10, the user can understand how his / her personal information is being used secondary between services.

[0051] <5. Functional configuration of the first service system> The functional configuration of the data access control system 20 according to this embodiment has been described above. Next, the functional configuration of the first service system 30 according to this embodiment will be described with reference to Fig. 5. Fig. 5 is a diagram showing an example of the functional configuration of the first service system 30 according to this embodiment. As shown in FIG. 5, the first service system 30 includes a communication unit 310, a storage unit 320, and a control unit 330.

[0052] (1) Communications unit 310 The communication unit 310 has a function of transmitting and receiving various information. The communication unit 310 transmits and receives various information to and from the user terminal 10 and the data access control system 20, for example.

[0053] (2) Storage section 320 The storage unit 320 has a function of storing various information. The function of the storage unit 320 is realized by a storage medium provided as hardware in the first service system 30, such as a HDD, SSD, flash memory, EEPROM, RAM, ROM, or any combination of these storage media.

[0054] The storage unit 320 stores, for example, registered personal information that is permitted to be used by the user and is linked from the data access control system 20, and first usage personal information that is obtained by the user using the first service SA1.

[0055] (3) Control unit 330 The control unit 330 has a function of controlling the overall operation of the first service system 30. The control unit 330 is realized, for example, by causing a CPU or a GPU that the first service system 30 has as hardware to execute a program. As shown in FIG. 5, the control unit 330 includes a personal information processing unit 331, a service processing unit 332, and an output control unit 333.

[0056] (3-1) Personal Information Processing Unit 331 The personal information processing unit 331 has a function of performing processing related to personal information. For example, the personal information processing unit 331 generates item information indicating personal information related to the first service SA1, and transmits it to the data access control system 20. The item information is, for example, information indicating personal information required for using the first service SA1, personal information obtained by using the first service SA1, etc. The item information is transmitted to the data access control system 20 via the communication unit 310.

[0057] Furthermore, the personal information processing unit 331 prepares personal information requested by the data access control system 20 and transmits it to the data access control system 20. The personal information is, for example, the first personal information for use that is permitted to be deposited in the data access control system 20 by the user.

[0058] (3-2) Service processing unit 332 The service processing unit 332 has a function of performing processing related to the first service SA1. For example, the service processing unit 332 performs processing for a user to access the first service SA1, processing for a user to register in the first service SA1, processing for providing the first service SA1 to the user, and the like.

[0059] (3-3) Output control unit 333 The output control unit 333 has a function of controlling the output of various information. For example, the output control unit 333 transmits information about a screen for the user to use the first service SA1 to the user terminal 10, and causes the user terminal 10 to display the screen. The information about the screen is transmitted to the user terminal 10 via the communication unit 310.

[0060] <6. Functional configuration of the second service system> The functional configuration of the first service system 30 according to the present embodiment has been described above. Next, the functional configuration of the second service system 40 according to the present embodiment will be described with reference to Fig. 6. Fig. 6 is a diagram showing an example of the functional configuration of the second service system 40 according to the present embodiment. As shown in FIG. 6, the second service system 40 includes a communication unit 410, a storage unit 420, and a control unit 430.

[0061] (1) Communications Department 410 The communication unit 410 has a function of transmitting and receiving various information. The communication unit 410 transmits and receives various information to and from the user terminal 10 and the data access control system 20, for example.

[0062] (2) Storage section 420 The storage unit 420 has a function of storing various information. The function of the storage unit 420 is realized by a storage medium provided as hardware in the second service system 40, such as a HDD, SSD, flash memory, EEPROM, RAM, ROM, or any combination of these storage media.

[0063] The memory unit 320 stores, for example, registered personal information whose use is permitted by the user and linked from the data access control system 20, first usage personal information whose use is permitted by the user and linked from the data access control system 20, and second usage personal information obtained by the user by using the second service SA2.

[0064] (3) Control unit 430 The control unit 430 has a function of controlling the overall operation of the second service system 40. The control unit 430 is realized, for example, by causing a CPU or a GPU that the second service system 40 has as hardware to execute a program. As shown in FIG. 6, the control unit 430 includes a personal information processing unit 431, a service processing unit 432, and an output control unit 433.

[0065] (3-1) Personal Information Processing Unit 431 The personal information processing unit 431 has a function of performing processing related to personal information. For example, the personal information processing unit 431 generates item information indicating personal information related to the second service SA2, and transmits it to the data access control system 20. The item information is, for example, information indicating personal information required for using the second service SA2, personal information obtained by using the second service SA2, etc. The item information is transmitted to the data access control system 20 via the communication unit 410.

[0066] Furthermore, the personal information processing unit 431 prepares personal information requested by the data access control system 20 and transmits it to the data access control system 20. The personal information is, for example, second personal information for use that is permitted to be deposited in the data access control system 20 by the user.

[0067] (3-2) Service processing unit 432 The service processing unit 432 has a function of performing processing related to the second service SA2. For example, the service processing unit 432 performs processing for a user to access the second service SA2, processing for a user to register for the second service SA2, processing for providing the second service SA2 to the user, and the like.

[0068] (3-3) Output control unit 433 The output control unit 433 has a function of controlling the output of various information. For example, the output control unit 433 transmits information about a screen for the user to use the second service SA2 to the user terminal 10, and causes the user terminal 10 to display the screen. The information about the screen is transmitted to the user terminal 10 via the communication unit 410.

[0069] <7. Processing flow> The functional configuration of the second service system 40 according to this embodiment has been described above. Next, the flow of processing according to this embodiment will be described with reference to Figs.

[0070] (1) Flow of processing for use of the first service A process flow relating to the use of the first service SA1 according to this embodiment will be described with reference to Fig. 7. Fig. 7 is a sequence diagram showing an example of a process flow relating to the use of the first service SA1 according to this embodiment. Note that the process shown in Fig. 7 includes processes corresponding to steps S1 to S4 described with reference to Fig. 1.

[0071] 7, first, the user terminal 10 transmits personal information to the data access control system 20 (step S101). The process of step S101 is a process performed by the user to deposit personal information in the data access control system 20, and corresponds to step S1 shown in FIG. Specifically, when the input unit 120 of the user terminal 10 accepts an operation to deposit personal information from the user, the input processing unit 141 transmits the personal information input by the user from the communication unit 110 to the data access control system 20 .

[0072] The data association processing unit 231 of the data access control system 20 registers the personal information (step S102). Specifically, the data association processing unit 231 stores the personal information received by the communication unit 210 from the user terminal 10 in the storage unit 220.

[0073] The first service system 30 transmits item information of personal information related to the first service SA1 to the data access control system 20 (step S103). Specifically, the personal information processing unit 331 of the first service system 30 generates item information indicating personal information required for using the first service SA1 and personal information obtained by using the first service SA1, and transmits the item information to the data access control system 20 via the communication unit 310. The data link processing unit 231 of the data access control system 20 registers the item information (step S104). Specifically, the data link processing unit 231 stores the item information received by the communication unit 210 from the first service system 30 in the storage unit 220.

[0074] Next, the data access control system 20 obtains permission to use the personal information in the first service SA1 (step S105). Note that the process of step S105 corresponds to step S2 shown in FIG. Specifically, the permission processing unit 232 of the data access control system 20 obtains permission to use from the user via the user terminal 10 for the use of the registered personal information in the first service SA1.

[0075] The user terminal 10 transmits the permission result to the data access control system 20 (step S106). Specifically, when the input unit 120 of the user terminal 10 accepts the permission to use the personal information, the input processing unit 141 transmits the permission to use input by the user from the communication unit 110 to the data access control system 20. The data access control system 20 registers the permission result (step S107). Specifically, the permission processing unit 232 of the data access control system 20 causes the storage unit 220 to store the result of the permission for use received by the communication unit 210 from the user terminal 10.

[0076] Next, the user terminal 10 transmits a request for provision of the service to the first service system 30 (step S108). Specifically, when the input unit 120 of the user terminal 10 accepts an operation for using the service, the input processing unit 141 transmits a request for provision of the first service SA1 selected by the user to the first service system 30 via the communication unit 110. Next, the first service system 30 accesses the personal information (step S109). Specifically, the service processing unit 332 of the first service system 30 accesses the personal information stored in the storage unit 220 of the data access control system 20 to obtain the personal information necessary for providing the first service SA1.

[0077] The permission processing unit 232 of the data access control system 20 checks whether the service that has accessed the personal information has been permitted to be used (step S110). If the service has been permitted to be used (step S110 / YES), the process proceeds to step S111. On the other hand, if permission for use has not been granted (step S110 / NO), the permission processing unit 232 requests permission for use from the user. If the user performs a permission operation, the process is repeated from step S106. Instead of requesting permission for use, the permission processing unit 232 may transmit a notification to the user terminal 10 indicating that the first service SA1 cannot be used, or may cause the user terminal 10 to display an error screen.

[0078] When the process proceeds to step S111, the data access control system 20 transmits the personal information to the first service system 30 (step S111). Note that the process of step S111 corresponds to step S3 shown in FIG. Specifically, the data linking processor 231 of the data access control system 20 transmits the registered personal information to the first service system 30 via the communication unit 210. At this time, the data linking processor 231 may transmit only the necessary personal information to the first service system 30 based on the item information registered in step S104.

[0079] Next, the first service system 30 provides the first service SA1 (step S112). Note that the process of step S112 corresponds to step S4 shown in FIG. Specifically, the service processing unit 332 of the first service system 30 transmits to the user terminal 10, via the communication unit 310, information for the user to utilize the first service SA1.

[0080] (2) Processing flow of personal information obtained through the first service A process flow relating to personal information obtained in the first service SA1 according to this embodiment will be described with reference to Fig. 8. Fig. 8 is a sequence diagram showing an example of a process flow relating to personal information obtained in the first service SA1 according to this embodiment. Note that the process shown in Fig. 8 includes processes corresponding to steps S5 to S6 described with reference to Fig. 1.

[0081] 8, first, the data access control system 20 obtains permission to deposit personal information obtained in the first service SA1 (step S201). Note that the process of step S201 corresponds to step S5 shown in FIG. Specifically, the permission processing unit 232 of the data access control system 20 obtains a deposit permission from the user via the user terminal 10 for depositing the first personal information to the data access control system 20 .

[0082] The user terminal 10 transmits the result of the permission to the data access control system 20 (step S202). Specifically, when the input unit 120 of the user terminal 10 accepts the personal information deposit permission operation, the input processing unit 141 transmits the result of the deposit permission input by the user from the communication unit 110 to the data access control system 20. The data access control system 20 registers the result of the permission (step S203). Specifically, the permission processing unit 232 of the data access control system 20 causes the storage unit 220 to store the result of the deposit permission received by the communication unit 210 from the user terminal 10.

[0083] Next, the permission processing unit 232 of the data access control system 20 checks whether the user has already given permission to deposit the first personal information for use (step S204). If the user has already given permission to deposit the first personal information for use (step S204 / YES), the process proceeds to step S205. On the other hand, if the deposit has not been permitted (step S204 / NO), the permission processing unit 232 requests the user to permit the deposit. If the user permits the deposit, the process is repeated from step S202. Instead of requesting the deposit, the permission processing unit 232 may transmit a notification to the user terminal 10 indicating that the deposit of the first personal information for use has not been permitted, or may cause the user terminal 10 to display an error screen.

[0084] When the process proceeds to step S205, the data access control system 20 requests personal information from the first service system 30 (step S205). Specifically, the data linking processing unit 231 of the data access control system 20 transmits a request for the first use personal information that the user has permitted to deposit to the first service system 30 via the communication unit 210.

[0085] The first service system 30 transmits the personal information requested by the data access control system 20 (step S206). Note that the process of step S206 corresponds to step S6 shown in FIG. Specifically, the personal information processing unit 331 of the first service system 30 transmits the first personal information for use, which the user has permitted to be deposited in the data access control system 20, to the data access control system 20 via the communication unit 310.

[0086] The data access control system 20 registers the personal information received from the first service system 30 (step S207). Specifically, the data linking processing unit 231 of the data access control system 20 stores the first personal information for use received by the communication unit 210 from the first service system 30 in the storage unit 220.

[0087] (3) Processing flow for use of the second service A process flow relating to the use of the second service SA2 according to this embodiment will be described with reference to Fig. 9. Fig. 9 is a sequence diagram showing an example of a process flow relating to the use of the second service SA2 according to this embodiment. Note that the process shown in Fig. 9 includes processes corresponding to steps S7 to S10 described with reference to Fig. 1.

[0088] 9, first, the second service system 40 transmits item information of personal information related to the second service SA2 to the data access control system 20 (step S301). Specifically, the personal information processing unit 431 of the second service system 40 generates item information indicating personal information required for using the second service SA2 and personal information obtained by using the second service SA2, and transmits the item information to the data access control system 20 via the communication unit 410. The data link processing unit 231 of the data access control system 20 registers the item information (step S302). Specifically, the data link processing unit 231 stores the item information received by the communication unit 210 from the second service system 40 in the storage unit 220.

[0089] Next, the data access control system 20 performs a matching process (step S303). Specifically, the matching processing unit 233 of the data access control system 20 performs matching between the first available personal information and the second necessary personal information based on the first item information indicating the first available personal information in the first service SA1 and the second item information indicating the second necessary personal information in the second service SA2.

[0090] Next, the data access control system 20 extracts personal information (step S304). Specifically, the data extraction unit 234 of the data access control system 20 extracts the first available personal information to be provided to the second service SA2 from the first available personal information stored in the storage unit 220 based on the matching result by the matching processing unit 233. Here, the data extraction unit 234 extracts personal information that matches (conforms to) the first available personal information and the second necessary personal information indicated by each item information from the first available personal information in the storage unit 220.

[0091] Next, the data access control system 20 generates and presents a list of items (step S305). Specifically, the matching processing unit 233 of the data access control system 20 generates a list showing the items of the personal information matched in the matching process, and transmits the list to the user terminal 10 via the communication unit 210.

[0092] Next, the data access control system 20 obtains permission to use the personal information in the second service SA2 (step S306). Note that the process of step S306 corresponds to step S7 shown in FIG. Specifically, the permission processing unit 232 of the data access control system 20 obtains permission to use from the user via the user terminal 10 for the use of the registered personal information in the second service SA2 and the use of the first usage personal information in the second service SA2.

[0093] Regarding obtaining permission to use the first personal information to be used, when the first personal information to be used corresponding to the second necessary personal information is stored in the memory unit 220, the permission processing unit 232 obtains permission to use from the user for the second service SA2 to use the first personal information to be used corresponding to the second necessary personal information. The first personal information for use from which the permission processing unit 232 obtains a permission for use is also the first personal information for use extracted by the data extraction unit 234.

[0094] The user terminal 10 transmits the permission result to the data access control system 20 (step S307). Specifically, when the input unit 120 of the user terminal 10 accepts the permission to use the personal information, the input processing unit 141 transmits the permission to use input by the user from the communication unit 110 to the data access control system 20.

[0095] The permission processing unit 232 of the data access control system 20 checks the permission result received by the communication unit 210 from the user terminal 10 (step S308). If the permission result indicates that permission has been granted (step S308 / YES), the process proceeds to step S309. On the other hand, if the permission result indicates that permission has not been granted (step S308 / NO), the process proceeds to step S310.

[0096] When the process proceeds to step S309, the data access control system 20 grants an access right (step S309). Specifically, the permission processing unit 232 of the data access control system 20 grants the second service system 40 an access right to the registered personal information and the first use personal information registered in the data access control system 20. After the granting, the process proceeds to step S310. When the process proceeds to step S310, the data access control system 20 registers the permission result (step S310). Specifically, the permission processing unit 232 of the data access control system 20 stores the result of the permission for use received by the communication unit 210 from the user terminal 10 in the storage unit 220.

[0097] Next, the user terminal 10 transmits a request for provision of the service to the second service system 40 (step S311). Specifically, when the input unit 120 of the user terminal 10 accepts an operation for using the service, the input processing unit 141 transmits a request for provision of the second service SA2 selected by the user to the second service system 40 via the communication unit 110. Next, the second service system 40 accesses the personal information (step S312). Specifically, the service processing unit 432 of the second service system 40 accesses the personal information stored in the storage unit 220 of the data access control system 20 to obtain the personal information necessary for providing the second service SA2.

[0098] The permission processing unit 232 of the data access control system 20 checks whether the service that has accessed the personal information has been permitted to use (the access right has been granted) (step S313). If the service has been permitted to use (step S313 / YES), the process proceeds to step S314. On the other hand, if permission for use has not been granted (step S313 / NO), the permission processing unit 232 requests permission for use from the user. If the user performs a permission operation, the process is repeated from step S307. Instead of requesting permission for use, the permission processing unit 232 may transmit a notification to the user terminal 10 indicating that the second service SA2 cannot be used, or may cause the user terminal 10 to display an error screen.

[0099] When the process proceeds to step S314, the data access control system 20 transmits the personal information to the second service system 40 (step S314). Note that the process of step S314 corresponds to steps S8 and S9 shown in FIG. Specifically, the data linking processor 231 of the data access control system 20 transmits the registered personal information and the first used personal information to the second service system 40 via the communication unit 210. At this time, the data linking processor 231 may transmit only the necessary personal information to the second service system 40 based on the item information registered in step S302.

[0100] Next, the data access control system 20 records the usage history of the personal information (step S315). Specifically, the usage history management unit 235 of the data access control system 20 records, as the usage history, details of the linkage of the personal information that has been linked to the second service system 40 among the personal information stored in the storage unit 220.

[0101] Next, the second service system 40 provides the second service SA2 (step S316). Note that the process of step S316 corresponds to step S10 shown in FIG. Specifically, the service processing unit 432 of the second service system 40 transmits to the user terminal 10 via the communication unit 410 information for the user to utilize the second service SA2.

[0102] (4) Processing flow of personal information obtained through the second service and payment of consideration The process flow relating to the personal information obtained in the second service SA2 and the payment of the consideration according to this embodiment will be described with reference to Fig. 10. Fig. 10 is a sequence diagram showing an example of the process flow relating to the personal information obtained in the second service SA2 and the payment of the consideration according to this embodiment. Note that the process shown in Fig. 10 includes the processes corresponding to steps S11 to S13 described with reference to Fig. 1.

[0103] 10, first, the data access control system 20 obtains permission to deposit personal information obtained in the second service SA2 (step S401). Note that the process of step S401 corresponds to step S11 shown in FIG. Specifically, the permission processing unit 232 of the data access control system 20 obtains a deposit permission from the user via the user terminal 10 for depositing the second personal information to the data access control system 20 .

[0104] The user terminal 10 transmits the result of the permission to the data access control system 20 (step S402). Specifically, when the input unit 120 of the user terminal 10 accepts the personal information deposit permission operation, the input processing unit 141 transmits the result of the deposit permission input by the user from the communication unit 110 to the data access control system 20. The data access control system 20 registers the result of the permission (step S403). Specifically, the permission processing unit 232 of the data access control system 20 causes the storage unit 220 to store the result of the deposit permission received by the communication unit 210 from the user terminal 10.

[0105] Next, the permission processing unit 232 of the data access control system 20 checks whether the user has already given permission to deposit the second personal information for use (step S404). If the user has already given permission to deposit the second personal information for use (step S404 / YES), the process proceeds to step S405. On the other hand, if the deposit has not been permitted (step S404 / NO), the permission processing unit 232 requests the user for permission to deposit. If the user performs a deposit permission operation, the process is repeated from step S402. Instead of requesting permission to deposit, the permission processing unit 232 may transmit a notification to the user terminal 10 indicating that the deposit of the second personal information for use has not been permitted, or may cause the user terminal 10 to display an error screen.

[0106] When the process proceeds to step S405, the data access control system 20 requests personal information from the second service system 40 (step S405). Specifically, the data linking processing unit 231 of the data access control system 20 transmits a request for the second use personal information that the user has permitted to deposit to the second service system 40 via the communication unit 210.

[0107] The second service system 40 transmits the personal information requested by the data access control system 20 (step S406). Note that the process of step S406 corresponds to step S12 shown in FIG. Specifically, the personal information processing unit 431 of the second service system 40 transmits the second personal information for use, which the user has permitted to be deposited in the data access control system 20, to the data access control system 20 via the communication unit 410.

[0108] The data access control system 20 registers the personal information received from the second service system 40 (step S407). Specifically, the data linking processing unit 231 of the data access control system 20 stores the second personal information for use received by the communication unit 210 from the second service system 40 in the storage unit 220.

[0109] Next, the data access control system 20 calculates the compensation (step S408). Specifically, the compensation processing unit 236 of the data access control system 20 calculates the compensation according to the usage of the first personal information by the second service SA2 based on the usage history. After the calculation, the compensation processing unit 236 causes the second service SA2 to pay the compensation for using the first personal information to the first service SA1 (step S409). Note that the process of step S409 corresponds to step S13 shown in FIG. 1. Specifically, the consideration processing unit 236 transmits consideration information indicating the calculated consideration to the second service system 40 via the communication unit 210. The second service SA2 pays the consideration to the first service SA1 based on the consideration information.

[0110] The process flow according to this embodiment has been described above. As described above, the data access control system 20 of this embodiment includes a memory unit 220 that stores first personal information obtained by a user by using the first service SA1, a permission processing unit 232 that, when first personal information corresponding to second personal information required for using the second service SA2 is stored in the memory unit 220, obtains permission from the user to use the first personal information corresponding to the second personal information by the second service SA2, a data linkage processing unit 231 that links the first personal information stored in the memory unit 220 to the second service SA2 based on the permission, and a usage history management unit 235 that records the usage history of the first personal information based on the linkage of the first personal information stored in the memory unit 220 to the second service SA2.

[0111] With this configuration, when the first personal information obtained by using the first service SA1 is linked to the second service SA2, the usage history is managed. This allows the user to know about the personal information that is being used secondary between services by referring to the usage history. Therefore, the data access control system 20 according to this embodiment enables the user to grasp the personal information that is being secondarily used between services.

[0112] Furthermore, the data access control system 20 according to this embodiment manages the personal information for use obtained for each of the multiple services that has been approved for deposit by the user, and provides the deposited personal information for use that has been approved for use by the user to other services. If a service provider (servicer) can obtain approval for use from the user via the data access control system 20, it can obtain personal information with a set of attributes. This eliminates the need for the service provider to independently collect personal information required for the user to use the service, and enables the service provider to provide the service to the user more efficiently.

[0113] In addition, the data access control system 20 according to this embodiment records a usage history when the service provider provides the use personal information deposited by the user with the user's permission to another service with the user's permission. Furthermore, the data access control system 20 calculates the price to be paid by the service provider who used the use personal information to the service provider who has the use personal information based on the usage history. This allows the service provider to receive the price when providing the personal information that it possesses to another service.

[0114] The operator of the data linkage system 1 and the data access control system 20 may be a for-profit organization such as a company that derives revenue from operating fees, or it may be a non-profit, neutral organization that does not receive operating fees.

[0115] <8. Examples> The present embodiment has been described above. Next, examples of the present embodiment will be described.

[0116] (1) First embodiment In the first example, an example in which the data linkage system 1 according to the present embodiment is applied to a health information service will be described.

[0117] A health information service is a service that provides users with the results of analyzing their PHR (Personal Health Record) data. In the health information service, a first service acquires PHR data, and a second service performs analysis using the PHR data acquired by the first service.

[0118] The first service is, for example, a service that uses step count data as PHR data. The first service provides the step count data (usage personal information) acquired by the first service to the second service under the permission of the user.

[0119] The second service is, for example, a service that uses dietary data as PHR data. The second service combines the step count data acquired by the first service with the dietary data acquired by its own service to analyze the user's health and present the analysis results to the user.

[0120] The analysis in the second service may be performed using AI (Artificial Intelligence). In this case, in the second service, a trained model is generated by machine learning based on training data that combines step count data acquired in the first service and dietary data acquired in the service itself. The trained model is a model that has learned about the relationship between the step count data and dietary data and the user's health. Therefore, when the step count data and dietary data are input, the trained model can output an analysis result about the user's health. This allows the service provider to provide an AI health recommendation service using AI.

[0121] In the second service, it is assumed that the service provider originally planned to procure the step count data by itself or from users of the service. In this case, the provider of the second service can efficiently obtain the step count data from other services by using the data linkage system 1 without collecting the data by itself. In addition, the provider of the second service pays a usage fee for the step count data to the provider of the first service, which allows the provider of the first service to make a profit by utilizing the data collected by the company.

[0122] The user of the service will be notified of each permission for use from both the first service and the second service. This allows the user to know which service the user has permission for use. The data access control system 20 may also provide the user with a list showing the permission status. By referring to the list, the user can know which service the user has permission for use of which personal information.

[0123] (2) Second Example In the second embodiment, an example in which the data linkage system 1 according to the present embodiment is applied to a conference room rental information service will be described.

[0124] The conference room rental information service is a service that provides users with the results of analyzing their location data. In the conference room rental information service, a first service acquires location data, and a second service performs analysis using the location data acquired by the first service.

[0125] The first service is, for example, a service that uses location data. The first service provides the location data (usage personal information) acquired by the first service to the second service under the permission of the user.

[0126] The second service is, for example, a conference room reservation service. The second service analyzes the conference rooms to be recommended to the user based on the location data acquired by the first service, and presents the analysis results to the user. For example, the second service recommends conference rooms close to the user's location data.

[0127] In the second service, it was originally intended to grasp where users had needs for conference rooms and which conference rooms should be contracted as conference rooms to be used in the service, but there was no means to efficiently obtain user location data for that purpose. Therefore, the provider of the second service can efficiently obtain location data from other services by using the data linkage system 1 without collecting the data in-house. This allows the provider of the second service to analyze the location data and make contracts with conference rooms that are expected to be used frequently.

[0128] The payment of the usage fee and the grasping of the usage permission status are the same as in the first embodiment, so the description thereof will be omitted.

[0129] (3) Third Example In the third embodiment, an example in which the data linkage system 1 according to the present embodiment is applied to a nutritional value utilization service will be described.

[0130] The nutritional value utilization service is a service that provides a user with the results of analyzing the user's lunch data. In the nutritional value utilization service, a first service acquires the lunch data, and a second service performs an analysis using the lunch data acquired by the first service.

[0131] The first service is, for example, a service that sells lunch boxes to students such as high school students. The first service provides lunch data (usage personal information) acquired by the first service to the second service with the permission of the user.

[0132] The second service is, for example, a service that sells meal kits to students. The second service analyzes the meal kits to be sold to student users based on the lunch data acquired by the first service, and presents the analysis results to the users. For example, the second service sells bento boxes that eliminate uneven distribution of nutritional value based on the user's lunch data.

[0133] The second service originally wanted to know what meals the user usually eats in order to provide a service that would eliminate the imbalance in the user's diet, but did not have a means to efficiently obtain the user's lunch data for that purpose. Therefore, by using the data linkage system 1, the provider of the second service can efficiently obtain lunch data from other services without having to collect the data in-house. This allows the provider of the second service to develop and sell meal kits that eliminate the imbalance in nutritional value by analyzing the lunch data.

[0134] The payment of the usage fee and the grasping of the usage permission status are the same as in the first embodiment, so the description thereof will be omitted.

[0135] (4) Other Examples The services to which the data linkage system 1 according to the present embodiment is applied are not limited to those in the above-described examples. For example, the data linkage system 1 may be applied to recommending content or items to service users, targeting advertisements to service users, and people flow analysis services, in the same manner as in the above-described examples.

[0136] <9. Variations> Above, an example of the present embodiment has been described. Next, a modified example of the present embodiment will be described. The modified examples described below may be applied to the embodiment alone or in combination. The modified examples may be applied in place of the configuration described in the embodiment, or may be applied in addition to the configuration described in the embodiment.

[0137] The data linkage system 1 according to the embodiment described above may have a function for verifying the authenticity of personal information. For example, the data linkage system 1 may be provided with a public personal authentication function using a digital certificate (JPKI: Japanese Public Key Infrastructure). In addition, the data linkage system 1 may be equipped with an online identity verification function (eKYC: electronic Know Your Customer) that allows a third party to verify the identity of a user using identification documents and image data of the user's appearance, including the user's face, for example. Furthermore, the data linkage system 1 may be provided with a digital certification function (VC: Verifiable Credentials) that can verify contents online.

[0138] In the above-described embodiment, it has been described that the user can refer to the usage history to know about his / her personal information that is being secondary used between services, but the interface is not particularly limited. For example, the usage history may be displayed by a user interface such as a portal site of the application. It may also be an interface with multiple apps lined up inside it, like a wallet app. In addition, even if there is no portal site or launcher with a list like the above-mentioned portal site or wallet app, each service linked to the system may confirm the permission to use the service or present new services as a result of use. For example, it is a system in which emails and messages are delivered to service users from individual services without a list portal.

[0139] In the above embodiment, an example has been described in which data that matches (conforms) between the used personal information and the necessary personal information is extracted in the matching process by the matching processing unit 233, but the example is not limited to this. For example, the matching processing unit 233 may not only extract data in which the item names (labels) of the matching personal information match, but may also extract data in which the contents correspond even if the item names do not match. For example, in the case of the first embodiment described above, the item name of the data required by the second service is step count data, but the data corresponding to the step count data registered in the first service is registered under the item name of pedometer information. In this case, the matching processing unit 233 may perform matching taking into consideration the difference between the expression (item name) in the first service and the expression (item name) in the second service. That is, the matching processing unit 233 determines that the pedometer information of the first service is the step count data required by the second service, and extracts the pedometer information.

[0140] In the above-described embodiment, an example in which the service (e.g., the first service SA1) that is the source of the personal information linkage has been described, but the present invention is not limited to such an example. For example, the service that is the source of the personal information linkage may be multiple. In this case, the data access control system 20 may link personal information required by a service to which the personal information is to be linked (e.g., the second service SA2) from one source service, or from multiple source services. When there are multiple services that can be the source of cooperation, the data access control system 20 may determine the source of cooperation by taking into consideration, for example, the quality of the data and the fee that the destination of cooperation will pay. For example, when the destination of cooperation prioritizes the quality of the data, the data access control system 20 determines all services that have high-quality data as the source of cooperation. Here, when it is desired to suppress the fee paid by the destination of cooperation, the services that can be the source of cooperation may be further narrowed down.

[0141] The above describes the modified embodiment of the present invention. In addition, some or all of the functions of the data linkage system 1, the user terminal 10, the data access control system 20, the first service system 30, and the second service system 40 in the above-mentioned embodiment may be realized by a computer. In that case, a program for realizing the functions may be recorded in a computer-readable recording medium, and the program recorded in the recording medium may be read into a computer system and executed to realize the functions. In addition, the "computer system" here includes hardware such as an OS and peripheral devices. In addition, the "computer-readable recording medium" refers to a portable medium such as a flexible disk, an optical magnetic disk, a ROM, a CD-ROM, and a storage device such as a hard disk built into a computer system. Furthermore, the "computer-readable recording medium" may also include a medium that dynamically holds a program for a short period of time, such as a communication line when a program is transmitted via a network such as the Internet or a communication line such as a telephone line, and a medium that holds a program for a certain period of time, such as a volatile memory inside a computer system that is a server or client in that case. Furthermore, the above program may be for realizing part of the functions described above, or may be capable of realizing the functions described above in combination with a program already recorded in a computer system, or may be realized using a programmable logic device such as an FPGA (Field Programmable Gate Array).

[0142] Although the embodiment of the present invention has been described in detail above with reference to the drawings, the specific configuration is not limited to the above, and various design changes, etc. are possible within the scope that does not deviate from the gist of the present invention. [Explanation of symbols]

[0143] 1...data linkage system, 10...user terminal, 20...data access control system, 30...first service system, 40...second service system, 110...communication unit, 120...input unit, 130...storage unit, 140...control unit, 141...input processing unit, 142...output processing unit, 150...output unit, 210...communication unit, 220...storage unit, 230...control unit, 231...data linkage processing unit, 232...permission processing unit, 233 ...matching processing unit, 234...data extraction unit, 235...usage history management unit, 236...value processing unit, 237...output control unit, 310...communication unit, 320...storage unit, 330...control unit, 331...personal information processing unit, 332...service processing unit, 333...output control unit, 410...communication unit, 420...storage unit, 430...control unit, 431...personal information processing unit, 432...service processing unit, 433...output control unit, NW...network

Claims

1. a storage unit that stores first personal information obtained by a user through use of a first service; a matching processing unit that performs matching between the first personal information and the second personal information based on first item information indicating the item names of the first personal information obtained in the first service and second item information indicating the item names of second personal information necessary for use of the second service; a data extraction unit that extracts the first personal information to be provided to the second service from the first personal information stored in the storage unit based on a result of the matching; a permission processing unit that, when the first personal information corresponding to the second personal information necessary for using the second service is stored in the storage unit, obtains a usage permission from the user for the second service to use the first personal information extracted from the first personal information corresponding to the second personal information; a data linking processing unit that links the first personal information extracted from the first personal information stored in the storage unit to the second service based on the usage permission; a usage history management unit that records a usage history indicating details regarding the linkage of the first personal information, based on the linkage of the first personal information extracted from the first personal information stored in the storage unit to the second service; A data access control system comprising:

2. a compensation processing unit that, when the first personal information of the first service stored in the storage unit is linked to the second service, causes the second service to pay a compensation for the use of the first personal information to the first service; The data access control system of claim 1 further comprising:

3. The compensation processing unit calculates the compensation according to the amount of use of the first personal information through the second service based on the usage history. The data access control system according to claim 2 .

4. The details of the linkage indicated by the usage history are the name of the linked personal information item, the link source of the personal information, the link destination of the personal information, the number of times the personal information is used, and the data volume of the personal information. The data access control system according to claim 1 .

5. a storage step of storing in a storage unit first personal information obtained by the user through use of the first service; a matching process for matching the first personal information with the second personal information based on first item information indicating the item names of the first personal information obtained in the first service and second item information indicating the item names of second personal information necessary for use of the second service; a data extraction step of extracting the first personal information to be provided to the second service from the first personal information stored in the storage unit based on a result of the matching; a permission process for obtaining, from the user, permission for the second service to use the first personal information extracted from the first personal information corresponding to the second personal information, when the first personal information corresponding to the second personal information required for use of the second service is stored in the storage unit; a data linking process step of linking the first personal information extracted from the first personal information stored in the storage unit to the second service based on the usage permission; a usage history management step of recording a usage history indicating details regarding the linkage of the first personal information extracted from the first personal information stored in the storage unit based on the linkage of the first personal information to the second service; 23. A data access control method executed by a computer, comprising:

6. Computer, a storage means for storing in a storage unit first personal information obtained by a user through use of the first service; a matching processing means for matching the first personal information with the second personal information based on first item information indicating the item names of the first personal information obtained in the first service and second item information indicating the item names of second personal information necessary for use of the second service; a data extraction means for extracting the first personal information to be provided to the second service from the first personal information stored in the storage unit based on a result of the matching; a permission processing means for acquiring, when the first personal information corresponding to the second personal information necessary for use of the second service is stored in the storage unit, a permission for use from the user for the second service to use the first personal information extracted from the first personal information corresponding to the second personal information; a data linking processing means for linking the first personal information extracted from the first personal information stored in the storage unit to the second service based on the usage permission; a usage history management means for recording a usage history indicating details of the linkage of the first personal information, based on the linkage of the first personal information extracted from the first personal information stored in the storage unit to the second service; A program to function as a

Images