Information management device, information management system and method, and information management program

Abstract

To allow information including a logic to be used without being disclosed to other persons.SOLUTION: An information managing device includes a control part for creating logic meta data on the basis of setting information sent from a first user terminal and disclosing the data, acquiring a used logic and object data in response to designation of the object data and the used logic sent from a second user terminal that browses the data, and storing them in a secret area, performing operation by using a used logic for the stored object data, and storing an operation result in the secret area. The control part further determines a used amount of the used logic on the basis of the setting information, provides a second user with the operation result stored in the secret area, provides the first and second users with a report on the used amount, and deletes the used logic, the object data, and the operation result stored in the secret area.SELECTED DRAWING: Figure 3

Description

Technical Field

[0001] Embodiments of the present invention relate to an information management apparatus, an information management system and method, and an information management program.

Background Art

[0002] Several devices for sharing data among multiple users have been proposed.

[0003] For example, Patent Document 1 discloses a device that stores the same user data in a plurality of user terminals and updates the user data on the user terminal of a certain user (updater), and also updates the user data on the user terminals of other users.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] By using data sharing technology, it becomes possible to provide a data distribution system in which a data owner allows other users to use the data and obtains a usage fee therefor.

[0006] On the other hand, even the owner of unique logic that processes or statistically processes data also desires to distribute the logic and obtain a usage fee. However, if the logic is shared with other users, there is a risk that the logic will be analyzed and imitated, so the conventional data sharing technology cannot be used.

[0007] The present invention has been made paying attention to the above circumstances, and an object thereof is to enable information including logic to be used without being disclosed to others.

Means for Solving the Problem

[0008] To solve the above problems, one aspect of the information management apparatus according to the present invention is an information management apparatus that manages the paid use of logic owned by a first user by a second user, and includes a communication interface that communicates with a first user terminal operated by the first user and a second user terminal operated by the second user, and a control unit that controls the information management apparatus. The control unit creates logic metadata describing the content of the logic based on the content of the logic and the setting information regarding the usage fee sent from the first user terminal, and a public processing unit that publishes the created logic metadata. In response to the designation of the usage logic corresponding to the published logic metadata and the target data for which an operation is to be performed using the usage logic sent from the second user terminal, an acquisition processing unit that acquires the usage logic and the target data and stores them in a secret area hidden from the first and second users, an arithmetic processing unit that performs an operation on the target data stored in the secret area using the usage logic stored in the secret area and stores the operation result in the secret area, a determination processing unit that determines the usage amount generated between the first user and the second user related to the use of the usage logic based on the setting information, and a provision processing unit that provides the operation result stored in the secret area to the second user and provides a report of the determined usage amount to the first and second users, and a deletion processing unit that deletes the usage logic, the target data, and the operation result stored in the secret area.

[0009] One aspect of the information management system according to the present invention includes one aspect of the information management apparatus according to the present invention and a storage unit including first and second user-exclusive storage areas connected to the information management apparatus via a network.

[0010] One aspect of the data sharing method according to the present invention is an information management device method for managing the paid use of logic owned by a first user by a second user. The computer creates logic metadata describing the content of the logic based on the content of the logic and the setting information regarding the usage fee sent from the first user terminal operated by the first user, and publishes the created logic metadata. In response to the designation of the usage logic corresponding to the published logic metadata and the target data for which calculations are to be performed using the usage logic sent from the second user terminal operated by the second user, the usage logic and the target data are acquired and stored in a secret area hidden from the first and second users. Calculations are performed on the target data stored in the secret area using the usage logic stored in the secret area, and the calculation results are stored in the secret area. A process of determining the usage amount generated between the first user and the second user regarding the use of the usage logic based on the setting information. A process of providing the calculation result stored in the secret area to the second user and providing a report of the determined usage amount to the first and second users. A process of deleting the usage logic, the target data, and the calculation results stored in the secret area.

[0011] One aspect of the information management program according to the present invention is a program that causes a computer to execute the processing by each processing unit included in one aspect of the information management device according to the present invention.

Effect of the Invention

[0012] According to each aspect of the present invention, information including logic can be used without being disclosed to others.

Brief Description of the Drawings

[0013]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

[0014] Hereinafter, embodiments of the present invention will be described with reference to the drawings.

[0015] [First Embodiment] [Configuration Example] [(1) System] FIG. 1 is a diagram showing the overall configuration of an information management system 1 according to a first embodiment of the present invention. The information management system 1 is a system that uses the logic owned by a logic owner to process data owned by a data owner while keeping the logic confidential, and provides the usage result to the data owner.

[0016] The information management system 1 includes, for example, data owner A terminal 10A, data owner B terminal 10B, data owner C terminal 10C, …, logic owner α terminal 20α, logic owner β terminal 20β, logic owner γ terminal 20γ, …, a cloud storage 30, and an information management device 40 according to the first embodiment of the present invention. When the data owner A terminal 10A, data owner B terminal 10B, data owner C terminal 10C, … are not particularly distinguished, they will be simply referred to as data owner terminals 10 hereinafter. Also, when the logic owner α terminal 20α, logic owner β terminal 20β, logic owner γ terminal 20γ, … are not particularly distinguished, they will be simply referred to as logic owner terminals 20 hereinafter. The data owner terminal 10, the logic owner terminal 20, the cloud storage 30, and the information management device 40 are connected via a network NW.

[0017] Each data owner terminal 10 is a PC, for example, placed in different companies, used by a registered user registered as a user of the information management system 1. In FIG. 1, one data owner terminal 10 is shown for each company, but each company may have a plurality of data owner terminals 10, for example, a plurality of data owner A terminals 10A. That is, the data owner A terminal 10A, the data owner B terminal 10B, the data owner C terminal 10C, … may each be a single terminal or a group of terminals including a plurality of terminals.

[0018] Each logic owner terminal 20 is a PC, for example, placed in different companies or individuals, used by a registered user registered as a user of the information management system 1. In FIG. 1, each logic owner terminal 20 may also be a group of terminals including a plurality of terminals, similar to the data owner terminal 10.

[0019] Note that one data owner terminal 10 and one logic owner terminal 20 may be configured as one physically single terminal arranged for one registered user.

[0020] Also, the information management system 1 may be configured as a system in one company. In this case, each data owner terminal 10 and each logic owner terminal 20 may be arranged in each branch office within one company, or may be arranged in different departments within one company.

[0021] The information management system 1 includes a dedicated storage area isolated from other data owner terminals 10 for each of the data owner terminals 10. That is, the information management system 1 includes a data owner A dedicated storage area 11A dedicated to the data owner A terminal 10A, a data owner B dedicated storage area 11B dedicated to the data owner B terminal 10B, a data owner C dedicated storage area 11C dedicated to the data owner C terminal 10C,.... These dedicated storage areas for each data owner terminal 10 may be provided in cloud storage, or may be provided in an in-house server or the like corresponding to the data owner terminal 10. In the example of FIG. 1, the data owner A dedicated storage area 11A, the data owner C dedicated storage area 11C,... are provided in the individual area 51 of the cloud storage 50, and the data owner B dedicated storage area 11B is provided in the individual area 12 of a data owner B server (not shown). Here, the individual areas 12 and 51 are storage areas dedicated to each data owner terminal 10 that are connected to the network NW and isolated from other data owner terminals 10 and each logic owner terminal 20. Also, the individual area 12 is connected to the data owner B terminal 10B by an in-house LAN or the like. Note that when the data owner A dedicated storage area 11A, the data owner B dedicated storage area 11B, the data owner C dedicated storage area 11C,... are not particularly distinguished, they will be simply referred to as the data owner dedicated storage area 11 hereinafter. Each data owner dedicated storage area 11 can store a plurality of data in the form of data files.

[0022] Furthermore, the information management system 1 includes a dedicated storage area isolated from other logic owner terminals 20 for each of the logic owner terminals 20. That is, the information management system 1 includes a logic owner α dedicated storage area 21α dedicated to the logic owner α terminal 20α, a logic owner β dedicated storage area 21β dedicated to the logic owner β terminal 20β, a logic owner γ dedicated storage area 21γ dedicated to the logic owner γ terminal 20γ,.... The dedicated storage areas of these respective logic owner terminals 20 may be provided in cloud storage or may be provided in an in-house server or the like corresponding to the logic owner terminal 20. In the example of FIG. 1, the logic owner α dedicated storage area 21α, the logic owner γ dedicated storage area 21γ,... are provided in the individual area 51 of the cloud storage 50, and the logic owner β dedicated storage area 21β is provided in the individual area 22 of a logic owner β server (not shown). Here, the individual area 22 is a storage area dedicated to each logic owner terminal 20 that is connected to the network NW and isolated from other logic owner terminals and each data owner terminal 10. In addition, the individual area 22 is connected to the logic owner β terminal 20β via an in-house LAN or the like. Incidentally, when the logic owner α dedicated storage area 21α, the logic owner β dedicated storage area 21β, the logic owner γ dedicated storage area 21γ,... are not particularly distinguished, they will be hereinafter simply referred to as the logic owner dedicated storage area 21. Each logic owner dedicated storage area 21 can store a plurality of logics in the form of logic files.

[0023] The cloud storage 30 is a first storage device including a public area 31. The public area 31 is a storage area accessible from any data owner terminal 10 and logic owner terminal 20 of registered users without restricting the data owner terminal 10 and the logic owner terminal 20. This public area 31 includes a logic group metadata shared storage area 311 that stores a plurality of logic metadata. The logic metadata is metadata that describes the content of the logic stored as a logic file in the logic owner dedicated storage area 21.

[0024] Here, the individual area 51 is configured as a second storage device physically different from the cloud storage 30, which is a first storage device having the public area 31. However, the individual area 51 may be configured as the cloud storage 30 that constitutes the public area 31 by logically separating them. Also, the individual areas 12 and 22 may be configured as the individual area 51 of the cloud storage 50, or may be configured as the cloud storage 30 by logically separating them.

[0025] Based on the logic usage conditions specified from each logic owner terminal 20, the information management device 40 creates metadata describing the content of the logic stored in the corresponding logic owner - dedicated storage area 21 and stores it in the logic group metadata shared storage area 311. Also, the information management device 40 uses the logic specified from any of the data owner terminals 10 that have browsed the metadata stored in the logic group metadata shared storage area 311 for the data stored in the corresponding data owner - dedicated storage area 11, and stores the usage result in the corresponding data owner - dedicated storage area 11. The information management device 40 has a secret storage area 41, which is a temporary storage unit isolated from each data owner terminal 10 and each logic owner terminal 20. When using the logic for the target data that is the target of using the logic, the information management device 40 reads the target data and the usage logic from the data owner - dedicated storage area 11 and the logic owner - dedicated storage area 21 and stores them in this secret storage area 41. Then, the information management device 40 uses the usage logic stored in the secret storage area 41 for the target data stored in this secret storage area 41 to obtain the usage result. After storing the usage result in the corresponding data owner - dedicated storage area 11, the information management device 40 deletes the target data and the usage logic stored in this secret storage area 41.

[0026] (2) Information management device 40 FIG. 2 and FIG. 3 are block diagrams showing an example of the hardware configuration and software configuration of the information management device 40, respectively.

[0027] The information management device 40 includes a control unit 42 having a hardware processor such as a Central Processing Unit (CPU). A storage unit having a program storage unit 43 and a data storage unit 44, and a communication interface (hereinafter abbreviated as communication I / F) 45 are connected to the control unit 42 via a bus 46.

[0028] Under the control of the control unit 42, the communication I / F 45 uses a communication protocol defined by the network NW to transmit various data among the data owner terminal 10, the logic owner terminal 20, the individual areas 12, 22, 51, and the public area 31.

[0029] The program storage unit 43 is configured by combining, for example, a non-volatile memory such as an HDD (Hard Disk Drive) or an SSD (Solid State Drive) that can be written to and read from at any time as a storage medium, and a non-volatile memory such as a ROM (Read Only Memory). In addition to middleware such as an OS (Operating System), this program storage unit 43 stores programs necessary for executing various control processes according to the first embodiment of this invention.

[0030] The data storage unit 44 is, for example, a combination of a non-volatile memory such as an HDD or an SSD that can be written to and read from at any time as a storage medium, and a volatile memory such as a RAM (Random Access Memory). As a storage unit necessary for implementing the first embodiment of this invention, this data storage unit 44 includes a usage condition storage unit 441, a user information storage unit 442, a billing information storage unit 443, and a temporary storage unit 444 as a secret storage area 41.

[0031] The usage condition storage unit 441 is used to store the conditions specified by the logic owner for the data owner to use the logic. FIG. 4 is a schematic diagram showing an example of the stored content of the usage condition storage unit 441. The usage condition storage unit 441 includes a condition storage unit for each of the logic owner terminals 20. That is, the usage condition storage unit 441 includes a logic owner α condition storage unit 4411α for the logic owner α terminal 20α, a logic owner β condition storage unit 4411β for the logic owner β terminal 20β,.... When the logic owner α condition storage unit 4411α, the logic owner β condition storage unit 4411β,... are not particularly distinguished, they will be simply referred to as the logic owner condition storage unit 4411 below.

[0032] Each logic owner condition storage unit 4411 stores the logic usage conditions for each of the logics stored in the logic owner exclusive storage area 21 corresponding to the corresponding logic owner terminal 20. For example, the logic owner α condition storage unit 4411α stores the logic usage conditions 4412 for each of the logics α1, α2,... stored in the logic owner α exclusive storage area 21α. The logic usage conditions 4412 include, for example, owner information, specific information, summary, usage fee, usage period, etc.

[0033] The owner information is identification information for uniquely identifying the logic owner, and can be, for example, a user ID which is identification information for uniquely identifying a registered user. Here, the registered user is, for example, a contract user who uses the information management system 1 including the information management device 40 by paying a specified usage fee, and can be the user of the data owner terminal 10 and the user of the logic owner terminal 20. The user ID is a number, a human-readable character string, or a combination of a character string and a number assigned by the information management device 40 during user registration. The user ID may also be a name arbitrarily specified by the user and not overlapping with other registered users.

[0034] The specific information is identification information for uniquely identifying the logic, and can be, for example, a logic ID which is identification information for uniquely identifying the logic. The logic ID can be a name arbitrarily specified by the registered user who is the logic owner when the logic owner stores the logic in the logic owner exclusive storage area 21. Also, the logic ID can be a number, a human-readable character string, or a combination of a character string and a number assigned by the information management device 40 when storing the logic.

[0035] The summary is a description of the content of the logic specified by the logic owner when storing the logic in the logic owner exclusive storage area 21. For example, it can include what kind of results are obtained for what kind of data, the corresponding data types, advantages, etc.

[0036] The usage fee is the consideration for using the logic specified by the logic owner when storing the logic in the logic owner exclusive storage area 21. That is, the usage fee is the amount that the data owner pays to the logic owner when using the logic for the data owned by the data owner himself / herself. This usage fee can be, but is not limited to, the fee for each use.

[0037] The expiration date is the period during which the logic can be used, specified by the logic owner when storing the logic in the logic owner exclusive storage area 21.

[0038] The user information storage unit 442 is used to store user information for each registered user who uses the information management device 40. The user information includes at least a user ID, contact information, and a payment method. The user ID is as described above. The contact information can include, for example, personal information such as the registered user's email address, company name, department, address, name, and phone number in addition to the email address. The payment method is information such as a payment account or card number for making payments such as usage fees of the information management system 1. Further, this payment method can also be used for depositing the logic usage fees collected from the user who is the data owner for the user who is the logic owner. Furthermore, the user information can include authentication information such as a password for authentication.

[0039] The billing information storage unit 443 is used to store billing information corresponding to the use of logic. FIG. 5 is a schematic diagram showing an example of the stored content of this billing information storage unit 443. The billing information storage unit 443 can be a database configured as a usage history in which records including the use date and time, user ID, logic ID, amount, and billing destination are added in response to each use of logic. Here, the user ID is the user ID of the registered user who is the logic owner, and the user ID of the registered user who is the data owner using the logic becomes the billing destination. The amount is the usage fee stored in association with the logic ID in the logic usage condition 4412.

[0040] As described above, the temporary storage unit 444 is used as the secret storage area 41 that stores the target data and the used logic when using the used logic for the target data. Further, the temporary storage unit 444 is used to temporarily store various data and information generated by the control unit 42 during processing.

[0041] The control unit 42 includes, as processing functions according to the first embodiment of the present invention, a usage condition acquisition processing unit 421, a metadata management processing unit 422, a data and logic acquisition processing unit 423, an arithmetic processing unit 424, and a result processing unit 425. Each of these processing units 421 to 425 is realized by causing a hardware processor of the control unit 42 to execute a program stored in, for example, the program storage unit 43.

[0042] The usage condition acquisition processing unit 421 performs a process of receiving, via the communication I / F 45, usage conditions for the logic stored in the logic owner dedicated storage area 21, which are transmitted from each logic owner terminal 20 and transmitted via the network NW. The usage condition acquisition processing unit 421 further performs a process of storing the received usage conditions as logic usage conditions 4412 in the corresponding logic owner condition storage unit 4411 in the usage condition storage unit 441.

[0043] The metadata management processing unit 422 performs a process of creating logic metadata representing the content of the corresponding logic based on the logic usage conditions 4412 stored in the usage condition storage unit 441. The metadata management processing unit 422 further performs a process of publicly disclosing the created logic metadata to the registered users of the information management system 1 by storing the logic metadata in the logic group metadata shared storage area 311 of the public area 31 via the network NW by the communication I / F 45.

[0044] The data and logic acquisition processing unit 423 performs a process of receiving, via the communication I / F 45, the designation of target data and usage logic transmitted from any of the data owner terminals 10 and transmitted via the network NW. The designation of the target data and usage logic is transmitted from the data owner terminal 10 of a user who is a data user and who, after browsing the logic metadata in the public area 31, wishes to use the logic for the data they own. The data and logic acquisition processing unit 423 further performs a process of reading, via the communication I / F 45 and via the network NW, the data and logic corresponding to the designated target data and usage logic from the data owner dedicated storage area 11 and the logic owner dedicated storage area 21, and storing them in the temporary storage unit 444 which is the secret storage area 41.

[0045] The arithmetic processing unit 424 performs an arithmetic operation on the target data stored in the temporary storage unit 444 using the usage logic also stored in the temporary storage unit 444, and stores the result in the temporary storage unit 444 which is the secret storage area 41. Further, the arithmetic processing unit 424 determines the amount to be charged to the user who is the data user based on the usage fee in the logic usage condition 4412 corresponding to the used logic, and updates the charging information stored in the charging information storage unit 443 with the determined usage amount. That is, the arithmetic processing unit 424 performs a process of additionally storing the history of usage fees in the charging information storage unit 443.

[0046] The result processing unit 425 reads out the calculation results stored in the temporary storage unit 444 and performs a process of writing them to the dedicated storage area for the data owner of the user who is the data user via the network NW by the communication I / F 45. Also, the result processing unit 425 reads out the charging information stored in the charging information storage unit 443 regarding the use of the logic and performs a settlement process related to the use of the logic. At the same time, the result processing unit 425 performs a process of transmitting a settlement report to the user who is the data user and the user who is the logic owner, whose contact information is stored in the user information storage unit 442, via the network NW by the communication I / F 45. And further, the result processing unit 425 performs a process of deleting the target data and the used logic stored in the temporary storage unit 444.

[0047] (Operation example) Next, the operation of the information management system 1 configured as described above will be explained.

[0048] Operations such as the user registration operation from each data owner terminal 10, the authentication operation when using the information management system 1, and file operation operations such as saving and reading data files to the corresponding dedicated storage area 11 for the data owner are known, so the description thereof will be omitted. Similarly, operations such as the user registration operation from each logic owner terminal 20, the authentication operation when using the information management system 1, and logic operation operations such as saving and reading logic to the corresponding dedicated storage area 21 for the logic owner also follow the operations of the data owner terminal 10, so the description thereof will be omitted.

[0049] Hereinafter, the processing operation of the information management device 40 regarding the use of the logic stored in the dedicated storage area 21 for the logic owner in a concealed state will be explained. FIG. 6 is a flowchart showing an example of the processing procedure of the information management device 40.

[0050] The control unit 42 of the information management device 40, as step S1, determines whether it has received, via the communication I / F 45, a condition setting instruction transmitted from any of the logic owner terminals 20 under the control of the usage condition acquisition processing unit 421 and transmitted via the network NW. A user who is a logic owner authenticates from the logic owner terminal 20 and can perform settings regarding the disclosure conditions on the setting screen after selecting the disclosure setting of the owned logic on the menu screen after authentication. Although not particularly illustrated, the control unit 42 can have the function of a web server that provides an authentication screen, a menu screen, and a setting screen to the logic owner terminal 20 as web browser screens. Then, in response to a predetermined transmission operation on the setting screen of the web browser, a condition setting instruction for the target logic is transmitted from the logic owner terminal 20. If it is determined that the condition setting instruction has been received, the control unit 42 determines YES in step S1 and proceeds to the processing operation of step S2. Also, if it is determined that the condition setting instruction has not been received, the control unit 42 determines NO in step S1 and proceeds to the processing operation of step S6.

[0051] In step S2, the control unit 42, under the control of the usage condition acquisition processing unit 421, acquires, via the communication I / F 45, the usage conditions of the logic that are transmitted from the logic owner terminal 20 via the network NW together with or subsequent to the condition setting instruction.

[0052] Then, in step S3, the control unit 42, under the control of the usage condition acquisition processing unit 421, causes the logic owner condition storage unit 4411 corresponding to the transmitting source logic owner terminal 20 to store the acquired usage conditions of the logic as logic usage conditions 4412 for the corresponding logic.

[0053] Thereafter, in step S4, the control unit 42 creates metadata under the control of the metadata management processing unit 422. That is, the control unit 42 reads out the logic usage conditions 4412 stored in the logic owner condition storage unit 4411 and creates metadata including at least an outline and a usage fee.

[0054] Then, in step S5, under the control of the metadata management processing unit 422, the control unit 42 stores the created metadata in the logic group metadata shared storage area 311 of the public area 31 via the network NW by the communication I / F 45. As a result, the created metadata will be made public to the registered users of the information management system 1. After that, the control unit 42 proceeds to the processing operation of step S1 above.

[0055] Also, in step S6, the control unit 42 determines, under the control of the data and logic acquisition processing unit 423, whether it has received, via the communication I / F 45, the target data and the use logic designation transmitted from any of the data owner terminals 10 via the network NW. The registered users of this information management system 1 authenticate from the data owner terminal 10. For example, on the browsing screen advanced by selecting the browsing of public data on the menu screen after authentication, they can browse the logic metadata stored in the logic group metadata shared storage area 311 of the public area 31. And for the data they own, users who desire to use the browsed logic metadata specify, on the browsing screen, the data stored in their own data owner dedicated storage area 11 and the logic metadata to be used, so that the target data and the use logic designation are transmitted from the data owner terminal 10. If it is determined that the target data and the use logic designation have been received, the control unit 42 determines YES in step S6 and proceeds to the processing operation of step S7. Also, if it is determined that the target data and the use logic designation have not been received, the control unit 42 determines NO in step S6 and proceeds to the processing operation of step S1 above.

[0056] In step S7, under the control of the data and logic acquisition processing unit 423, the control unit 42 acquires the specified target data and use logic from the data owner dedicated storage area 11 corresponding to the source data owner terminal 10 and the logic owner dedicated storage area 21 corresponding to the specified use logic via the network NW by the communication I / F 45.

[0057] Then, in step S8, under the control of the control unit 42, the acquired target data and usage logic are stored in the temporary storage unit 444, which is the secret storage area 41, under the control of the data and logic acquisition processing unit 423.

[0058] Next, in step S9, under the control of the control unit 42, the usage conditions of the logic stored as the logic usage conditions 4412 in the temporary storage unit 444 are read from the usage condition storage unit 441 under the control of the data and logic acquisition processing unit 423, and based on the usage conditions, the usage amount of the logic is determined.

[0059] Then, in step S10, under the control of the control unit 42, the charging information in the charging information storage unit 443 is updated according to the determined usage amount under the control of the data and logic acquisition processing unit 423. That is, the control unit 42 adds and stores a record including the current date and time, the user ID identifying the owner of the logic to be used, the logic ID identifying the logic to be used, the determined usage amount, and the user ID corresponding to the data owner terminal 10, which is the target data and the transmission source of the usage logic designation, in the charging information storage unit 443. Note that the control unit 42 can acquire the user IDs of the logic owner and the billing destination from the user information storage unit 442.

[0060] In step S11, under the control of the control unit 42, calculations are performed on the target data stored in the temporary storage unit 444, which is the secret storage area 41, using the usage logic also stored in the temporary storage unit 444 under the control of the arithmetic processing unit 424.

[0061] Then, in step S12, under the control of the control unit 42, the calculation result is stored in the temporary storage unit 444, which is the secret storage area 41, under the control of the arithmetic processing unit 424.

[0062] After that, in step S13, under the control of the result processing unit 425, the control unit 42 reads out the calculation result stored in the temporary storage unit 444 which is the secret storage area 41, and writes the read calculation result into the dedicated storage area 11 for the data owner corresponding to the data owner terminal 10 which is the transmission source of the target data and the use logic specification via the network NW by the communication I / F 45.

[0063] Also, in step S14, under the control of the result processing unit 425, the control unit 42 reads out the charging information regarding the current logic use stored in the charging information storage unit 443 and performs a settlement process. For example, based on the read charging information, the control unit 42 reads out the user information of the data owner and the logic owner from the user information storage unit 442, and performs a settlement process for the usage amount according to the settlement method included in each user information. That is, the control unit 42 performs a billing process for the user of the data owner and a payment process for the user of the logic owner. The payment process may also be a reduction in the usage fee of the information management system 1. Regarding the amount to be billed and / or paid, a settlement fee by the information management system 1 may be added.

[0064] Then, in step S15, under the control of the result processing unit 425, the control unit 42 transmits a settlement report to the user of the data owner and the user of the logic owner via the network NW by the communication I / F 45 according to the contact information included in the read user information.

[0065] After that, in step S16, under the control of the result processing unit 425, the control unit 42 deletes the information stored in the temporary storage unit 444 which is the secret storage area 41 in each processing operation shown in this flowchart including the target data and the use logic. Then, the control unit 42 proceeds to the processing operation of step S1 above.

[0066] (Function and Effect) As described above, the information management device 40 according to the first embodiment of the present invention is an information management device that manages the paid use of logic owned by a logic owner who is a first user by a data owner who is a second user. The information management device 40 includes a communication I / F 45 that communicates with a logic owner terminal 20 as a first user terminal operated by the logic owner and a data owner terminal 10 as a second user terminal operated by the data owner, and a control unit 42 that controls the information management device 40. The control unit 42 includes a use condition acquisition processing unit 421, a metadata management processing unit 422, a data and logic acquisition processing unit 423, an arithmetic processing unit 424, and a result processing unit 425. The use condition acquisition processing unit 421 and the metadata management processing unit 422 function as a publication processing unit that creates logic metadata describing the content of the logic based on the content of the logic and setting information regarding the usage fee sent from the logic owner terminal 20 and publishes the created logic metadata. The data and logic acquisition processing unit 423 functions as an acquisition processing unit that acquires the use logic and the target data in response to a designation of the use logic corresponding to the published logic metadata sent from the data owner terminal 10 and the target data for which an operation is to be performed using the use logic and stores them in a secret storage area 41 that is a secret area hidden from the logic owner and the data owner, and also functions as a determination processing unit that determines the amount of usage fees generated between the logic owner and the data owner related to the use of the use logic based on the setting information. The arithmetic processing unit 424 performs an operation on the target data stored in the secret storage area 41 using the use logic stored in the secret storage area 41 and stores the operation result in the secret storage area 41. The result processing unit 425 functions as a provision processing unit that provides the operation result stored in the secret storage area 41 to the data owner, and also functions as a deletion processing unit that deletes the use logic, the target data, and the operation result stored in the secret storage area 41. Therefore, the logic owner can make the logic owned by himself / herself be used by a data owner who is someone other than the logic owner without disclosing it.

[0067] Furthermore, in the information management apparatus 40 according to the first embodiment, it functions as a determination processing unit that determines the usage amount generated between the logic owner and the data owner regarding the use of the usage logic based on the setting information. The result processing unit 425 further functions as a settlement processing unit that performs settlement processing between each user based on the determined usage amount, and provides a settlement report regarding the settlement processing to each registered user, here, the logic owner and the data owner, as a report of the usage amount. Therefore, the logic owner can obtain the usage fee of the logic from the data owner.

[0068] Furthermore, in the information management apparatus 40 according to the first embodiment, at least one logic file owned by the logic owner is stored in the logic owner-exclusive storage area 21 that can be accessed only by the logic owner, and at least one data file owned by the data owner is stored in the data owner-exclusive storage area 11 that can be accessed only by the data owner. Then, the data and logic acquisition processing unit 423 as the acquisition processing unit acquires the corresponding logic file as the usage logic from among at least one logic file stored in the logic owner-exclusive storage area 21 in response to the designation of the usage logic and the target data, and acquires the corresponding data file as the target data from among at least one data file stored in the data owner-exclusive storage area 11, and the result processing unit 425 as the provision processing unit writes the calculation result into the data owner-exclusive storage area 11. Therefore, the logic owner can entrust the information management apparatus with the use management of the logic it owns, and there is no need to deal with the use of the logic by the data owner one by one.

[0069] [Second Embodiment] Next, the information management apparatus 40 according to the second embodiment of the present invention will be described. In the first embodiment, it is assumed that the data owner uses the logic provided by the logic owner for the data owned by the data owner. In contrast, in this second embodiment, a third party who does not own the data uses the data provided by the data owner and the logic provided by the logic owner.

[0070] Here, only the parts different from the first embodiment in the configuration example, operation example, and effects will be described, and the description of the same parts will be omitted.

[0071] (Configuration example) FIG. 7 is a diagram showing the overall configuration of the information management system 1 according to the second embodiment of the present invention. The information management system 1 further includes a user terminal 60 connected to the network NW. In FIG. 7, one user terminal 60 is shown, but the information management system 1 can include a plurality of user terminals 60 used by different users.

[0072] In addition, the public area 31 of the cloud storage 30 further includes a data group shared storage area 312 that stores a plurality of data file metadata or processed data. The data file metadata is metadata that describes the content of the data stored as a data file in the data owner dedicated storage area 11. The processed data is data obtained by processing the data stored as a data file in the data owner dedicated storage area 11. Processing includes, but is not limited to, abstraction (generalization) such as reducing the significant digits of data, anonymization such as deleting personal information or data source information, and the like.

[0073] In this embodiment, this public area 31 is widely publicly available not only to registered users as in the first embodiment.

[0074] FIG. 8 is a block diagram showing an example of the software configuration of the information management apparatus 40 according to the second embodiment of the present invention. In the present embodiment, the communication I / F 45 performs transmission of various data to and from the user terminal 60 using the communication protocol defined by the network NW under the control of the control unit 42. Further, the control unit 42 includes a data processing unit 426 instead of the metadata management processing unit 422 in the first embodiment.

[0075] Similar to the metadata management processing unit 422 in the first embodiment, the data processing unit 426 creates logic metadata about the logic to be published and stores it in the logic group metadata shared storage area 311. In addition, the data processing unit 426 creates data file metadata or processed data about the data to be published and stores it in the data group shared storage area 312.

[0076] FIG. 9 is a schematic diagram showing an example of the stored content of the usage condition storage unit 441. In the present embodiment, the usage condition storage unit 441 includes a condition storage unit for each of the data owner terminals 10 in addition to the logic owner condition storage unit 4411. That is, the usage condition storage unit 441 includes a data owner A condition storage unit 4413A for the data owner A terminal 10A, a data owner B condition storage unit 4413B for the data owner B terminal 10B,.... When the data owner A condition storage unit 4413A, the data owner B condition storage unit 4413B,... are not particularly distinguished, they are hereinafter simply referred to as the data owner condition storage unit 4413.

[0077] Each data owner condition storage unit 4413 stores data usage conditions for each of the data files stored in the data owner dedicated storage area 11 corresponding to the corresponding data owner terminal 10. For example, the data owner A condition storage unit 4413A stores data file usage conditions 4414 for each of the data files A1, A2,... stored in the data owner A dedicated storage area 11A. Similar to the logic usage condition 4412, the data file usage condition 4414 includes, for example, owner information, specific information, summary, usage fee, expiration date, etc.

[0078] The owner information is identification information for uniquely identifying the data owner, and can be, for example, a user ID.

[0079] The specific information is identification information for uniquely identifying the data, and can be, for example, a data file ID which is identification information for uniquely identifying a data file. The data file ID can be a name arbitrarily specified by the registered user who is the data owner when the data owner stores the data as a data file in the data owner - exclusive storage area 11. Also, the data file ID can be a number, a human - recognizable character string, or a combination of a character string and a number assigned by the information management device 40 when storing the data file.

[0080] The summary is what describes the content of the data specified by the data owner when storing the data file in the data owner - exclusive storage area 11. For example, it can include the type of the data, the machine or situation where the data was generated, etc.

[0081] The usage fee is the consideration for using the data specified by the data owner when storing the data file in the data owner - exclusive storage area 11. That is, the usage fee is the amount that the data user pays to the data owner when the data user uses the data. This usage fee can be a fee for each use, but is not limited to this.

[0082] The expiration date is the period during which the data can be used, specified by the data owner when storing the data file in the data owner - exclusive storage area 11.

[0083] The data processing unit 426 can create data file metadata based on this data file usage condition 4414.

[0084] In addition, the data file usage condition 4414 may include a processing method. The processing method is information specifying the processing method of the data file when creating processed data from the data file.

[0085] The data processing unit 426 can create processed data based on the processing method in this data file usage condition 4414.

[0086] In addition, the billing information storage unit 443 in this embodiment has storage contents different from those in the first embodiment. FIG. 10 is a schematic diagram showing an example of the storage contents of this billing information storage unit 443. The records of the billing information storage unit 443 include the use date and time, data user ID, data file ID, data amount, logic user ID, logic ID, logic amount, and billing destination.

[0087] The data user ID is the user ID of the registered user who is the data owner. The data file ID is the data file ID of the target data to be used specified by the user. The data amount is the usage fee stored in association with the data file ID in the data file usage condition 4414.

[0088] In addition, the logic user ID is the user ID of the registered user who is the logic owner. The logic ID is the logic ID of the use logic specified by the user. The logic amount is the usage fee stored in association with the logic ID in the logic usage condition 4412.

[0089] When the user who uses the logic is the data owner, the billing destination is the user ID of the data owner. In this case, since no usage fee for the data is incurred, the data amount is left blank. Also, when a user who does not own the data and the logic uses the data of the data owner and the logic of the logic owner, the billing destination information such as a settlement account or a card number for the user to pay usage fees and the like can be stored. This billing information can be input from the user terminal 60 when the user uses the data and the logic.

[0090] In the example of FIG. 10, the first record shows the billing information when data owner A uses logic α1 owned by logic owner α for data file A1 owned by the data owner himself / herself. Also, the third record shows the billing information when data owner A also uses logic α1 owned by logic owner α for data file B1 owned by another data owner B. On the other hand, the second record shows the billing information when the user of the user terminal 60 uses logic β2 owned by logic owner β for data file A1 owned by data owner A.

[0091] (Operation example) FIG. 11 is a flowchart showing an example of the overall processing procedure of the public area management process by the information management device 40 according to the second embodiment.

[0092] In step S21, the control unit 42 of the information management device 40 determines, under the control of the usage condition acquisition processing unit 421, whether it has received, via the communication I / F 45, a condition setting instruction transmitted from any of the data owner terminals 10 or any of the logic owner terminals 20 and transmitted via the network NW. That is, the condition setting instruction is transmitted from the logic owner terminal 20 in step S1 of the first embodiment, but in this embodiment, it can also be transmitted from the data owner terminal 10. The user, who is the data owner, authenticates from the data owner terminal 10, and on the menu screen after authentication, selects the public setting of the owned data file and proceeds to the setting screen, where the user can set the public conditions. Then, in response to a predetermined transmission operation on the setting screen, a condition setting instruction for the target data is transmitted from the data owner terminal 10.

[0093] In step S22, the control unit 42 acquires, under the control of the usage condition acquisition processing unit 421, the usage conditions of the data file or logic that are transmitted from the data owner terminal 10 or the logic owner terminal 20 via the network NW, either together with or subsequent to the condition setting instruction, via the communication I / F 45.

[0094] Then, in step S23, the control unit 42 causes the data owner condition storage unit 4413 corresponding to the data owner terminal 10 or the logic owner terminal 20 of the transmission source or the logic owner condition storage unit 4411 to store the acquired usage conditions of the data file or logic as the data file usage conditions 4414 or the logic usage conditions 4412, under the control of the usage condition acquisition processing unit 421.

[0095] Thereafter, in step S24, the control unit 42 creates metadata or processed data under the control of the data processing unit 426. That is, when conditions for the logic are set, the control unit 42 reads out the logic usage conditions 4412 stored in the logic owner condition storage unit 4411 and creates logic metadata including at least an outline and usage fees. Also, when conditions for the data file are set, the control unit 42 reads out the data file usage conditions 4414 stored in the data owner condition storage unit 4413 and creates data file metadata including at least an outline and usage fees. Further, when the processing method is included in the data file usage conditions 4414, the corresponding data file is read out from the dedicated storage area 11 of the corresponding data owner, processed based on the processing method, and processed data is created. For the data file, it is also possible to create both data file metadata and processed data. The data file usage conditions 4414 may include a designation of which to create and disclose.

[0096] Then, in step S25, the control unit 42 stores the created metadata or processed data in the logic group metadata shared storage area 311 or the data group shared storage area 312 in the public area 31 via the network NW by the communication I / F 45 under the control of the data processing unit 426. As a result, the created metadata and / or processed data will be made public to the registered users of the information management system 1. Thereafter, the control unit 42 proceeds to the processing operation of step S21 above.

[0097] Also, in step S26, the control unit 42 determines, under the control of the data and logic acquisition processing unit 423, whether or not it has received, via the communication I / F 45, target data and a usage logic designation transmitted from any data owner terminal 10 or any user terminal 60 and transmitted via the network NW in this embodiment. That is, in this embodiment, the target data and the usage logic designation can also be transmitted from the user terminal 60.

[0098] In this embodiment, the user of the user terminal 60 is a general user who is not a registered user. Without performing authentication from the user terminal 60, a general user can, for example, view the logic metadata stored in the logic group metadata shared storage area 311 of the public area 31, the data file metadata stored in the data group shared storage area 312, and the processed data also stored in the data group shared storage area 312 on a viewing screen provided for general public viewing. Then, a general user who desires to use the viewed logic metadata for the data corresponding to any of the viewed data file metadata or processed data designates the data file metadata or processed data and the logic metadata on the viewing screen, and the target data and the use logic designation are transmitted from the user terminal 60. When it is determined that the target data and the use logic designation have been received, the control unit 42 determines YES in step S26 and proceeds to the processing operation of step S27. Also, when it is determined that the target data and the use logic designation have not been received, the control unit 42 determines NO in step S26 and proceeds to the processing operation of step S21 above.

[0099] In step S27, the control unit 42 determines whether the transmission source of the target data and the use logic designation is the user terminal 60 under the control of the data and logic acquisition processing unit 423. When it is determined that it is not the user terminal 60, the control unit 42 determines NO in step S27 and proceeds to the processing operation of step S29. Also, when it is determined that it is the user terminal 60, the control unit 42 determines YES in step S27 and proceeds to the processing operation of step S28.

[0100] In step S28, the control unit 42 inquires of the user terminal 60 of the transmission source about the billing destination and contact information such as the email address via the network NW by means of the communication I / F 45 under the control of the data and logic acquisition processing unit 423, and acquires the billing destination and contact information from the user terminal 60 of the transmission source. The control unit 42 temporarily stores the acquired billing destination and contact information in the temporary storage unit 444. Thereafter, the control unit 42 proceeds to the processing operation of step S29.

[0101] In step S29, under the control of the data and logic acquisition processing unit 423, the control unit 42 acquires the specified target data and usage logic from the data owner dedicated storage area 11 corresponding to the data file of the specified target data and the logic owner dedicated storage area 21 corresponding to the specified usage logic via the network NW by the communication I / F 45.

[0102] Then, in step S30, under the control of the data and logic acquisition processing unit 423, the control unit 42 stores the acquired target data and usage logic in the temporary storage unit 444 which is the secret storage area 41.

[0103] Next, in step S31, under the control of the data and logic acquisition processing unit 423, the control unit 42 reads out the usage conditions of the logic and data file stored as the logic usage condition 4412 and the data file usage condition 4414 in the temporary storage unit 444 from the usage condition storage unit 441, and determines the usage amount of the logic or the usage amounts of the logic and the data file based on the usage conditions. That is, when the transmission source of the target data and usage logic designation is the data owner terminal 10, the control unit 42 determines the usage amount of the logic. Also, when the transmission source of the target data and usage logic designation is the data owner terminal 10 of a registered user other than the owner of the target data or the user terminal 60 of a general user, the control unit 42 determines the usage amounts of the logic and the data file respectively.

[0104] Then, in step S32, under the control of the data and logic acquisition processing unit 423, the control unit 42 updates the charging information in the charging information storage unit 443 according to the determined usage amount. That is, the control unit 42 adds and stores in the charging information storage unit 443 a record including the current date and time, the data user ID identifying the owner of the target data, the data file ID identifying the target data, the determined usage amount of the data file, the logic user ID identifying the owner of the usage logic, the logic ID identifying the usage logic, the determined logic usage amount, and the billing destination. Note that the control unit 42 can obtain information about the owners of the logic and data from the user information storage unit 442. Also, for the billing destination, when the transmission source of the target data and the usage logic designation is the data owner terminal 10, or when it is the data owner terminal 10 of a registered user other than the owner of the target data, the control unit 42 obtains the user ID of the billing destination from the user information storage unit 442. When the transmission source of the target data and the usage logic designation is the user terminal 60 of a general user, the control unit 42 can read and use the billing destination stored in the temporary storage unit 444 and obtained in step S28 above.

[0105] Thereafter, in step S33, under the control of the arithmetic processing unit 424, the control unit 42 performs an operation on the target data stored in the temporary storage unit 444, which is the secret storage area 41, using the usage logic also stored in the temporary storage unit 444.

[0106] Then, in step S34, under the control of the arithmetic processing unit 424, the control unit 42 stores the operation result in the temporary storage unit 444, which is the secret storage area 41.

[0107] After that, in step S35, the control unit 42 reads out the calculation result stored in the temporary storage unit 444 which is the secret storage area 41 under the control of the result processing unit 425, and writes the read calculation result to the dedicated storage area 11 for the data owner corresponding to the data owner terminal 10 which is the transmission source of the target data and the usage logic specification via the network NW by the communication I / F 45. Alternatively, the control unit 42 transmits the read calculation result to the user terminal 60 which is the transmission source of the target data and the usage logic specification. The transmission of this calculation result to the user terminal 60 may be displayed on the result display screen proceeding from the inquiry screen of the billing destination in step S28 above, or may be transmitted separately by e-mail or the like. In the latter case, the e-mail address may be input on the inquiry screen of the billing destination.

[0108] Next, in step S36, the control unit 42 reads out the billing information regarding the current logic usage stored in the billing information storage unit 443, or the billing information regarding the current use of the data file and the logic under the control of the result processing unit 425, and performs the settlement process. Note that for the user of the user terminal 60 which is a general user, in addition to the usage fees for the data file and the logic, the usage fee for the information management system 1 is added and billed.

[0109] Then, in step S37, the control unit 42 transmits a settlement report under the control of the result processing unit 425. That is, for the registered user, the settlement report is transmitted via the network NW by the communication I / F 45 using the contact information included in the read user information. Also, for the general user, the contact information acquired in step S28 and stored in the temporary storage unit 444 is read out, and the settlement report is transmitted via the network NW by the communication I / F 45 using the contact information.

[0110] After that, in step S38, under the control of the control unit 42, the information stored in the temporary storage unit 444, which is the secret storage area 41, in each processing operation shown in this flowchart, including the target data and the usage logic, is deleted under the control of the result processing unit 425. Then, the control unit 42 proceeds to the processing operation of step S21 above.

[0111] (Function and effect) As described above, in the information management device 40 according to the second embodiment of the present invention, as a public processing unit, instead of the metadata management processing unit 422 of the first embodiment, a data processing unit 426 is provided, and based on the content of the data file sent from the data owner terminal 10 and the setting information regarding the usage fee, data file metadata describing the content of the data file is created and published, and based on the setting information regarding the processing method of the data file sent from the data owner terminal 10 and the usage fee, at least one of creating and publishing the processed data by processing the data file is performed. Then, the data and logic acquisition processing unit 423 as an acquisition processing unit acquires the corresponding logic file as the usage logic from among at least one logic file stored in the logic owner exclusive storage area 21 in response to the designation of the usage logic and the target data from the user terminal 60, which is a third user terminal operated by a user who is a third user different from the logic owner and the data owner, and acquires the corresponding data file as the target data from among at least one data file stored in the data owner exclusive storage area 11. The data and logic acquisition processing unit 423 as a determination processing unit determines, as the usage amount, the amount generated between the logic owner, the data owner, and the user regarding the usage of the usage logic and the data file based on the setting information, and the result processing unit 425 as a provision processing unit provides a settlement report to the logic owner, the data owner, and the user. Therefore, not only the logic but also the data file can be used by a user, who is someone other than the logic owner and the data owner, without being disclosed to the user. And the logic owner can obtain a usage fee for the logic, and the data owner can obtain a usage fee for the data file, respectively, from the user.

[0112] [Third Embodiment] In the above-described second embodiment, the case where a user, who is a general user who does not own the data and the logic, uses the data of the data owner and the logic of the logic owner has been described. However, the logic may be used for the data owned by the user himself / herself.

[0113] FIG. 12 is a flowchart showing an example of the overall processing procedure of the public area management process by the information management apparatus 40 according to the third embodiment. FIG. 12 shows the parts different from the flowchart of FIG. 11 in the second embodiment.

[0114] That is, after obtaining the billing destination and the contact destination from the source user terminal 60 in step S28, in this embodiment, the control unit 42 proceeds to the processing operation of step S41.

[0115] In step S41, the control unit 42 determines, under the control of the data and logic acquisition processing unit 423, whether the target data specified from the user terminal 60 is data owned by the user himself / herself. If the specified target data is not a data file stored in the data owner exclusive storage area 11, the control unit 42 determines that the target data is user-owned data. If it is determined that the target data is not user-owned data, the control unit 42 determines NO in step S41 and proceeds to the processing operation of step S29 above. Also, if it is determined that the target data is user-owned data, the control unit 42 determines YES in step S41 and proceeds to the processing operation of step S42.

[0116] In step S42, under the control of the data and logic acquisition processing unit 423, the control unit 42 queries the target data from the source user terminal 60 via the network NW by means of the communication I / F 45, and acquires the target data from the source user terminal 60.

[0117] Then, in step S43, under the control of the data and logic acquisition processing unit 423, the control unit 42 stores the acquired target data in the temporary storage unit 444 which is the secret storage area 41.

[0118] Also, in step S44, under the control of the data and logic acquisition processing unit 423, the control unit 42 acquires the specified usage logic from the logic owner exclusive storage area 21 corresponding to the specified usage logic via the network NW by means of the communication I / F 45.

[0119] Then, in step S45, under the control of the data and logic acquisition processing unit 423, the control unit 42 stores the acquired usage logic in the temporary storage unit 444 which is the secret storage area 41. After that, the control unit 42 proceeds to the processing operation of step S31 above.

[0120] The processing operations after step S31 above are as described in the second embodiment. However, in this embodiment, the target data belongs to the user who is the user of the user terminal 60, and the data file stored in the data owner exclusive storage area 11 is not used. Therefore, the usage amount determined in step S31 above is, as in the first embodiment, related to the usage fee of the logic, and for the billing information stored in the billing information storage unit 443 updated in step S32 above, the data ID, data file ID, and data amount of the added record are blank. Therefore, naturally, the settlement report transmitted in step S37 above is also transmitted only to the registered user of the logic owner and the user.

[0121] (Function and Effect) As described above, in the information management apparatus 40 according to the third embodiment of the present invention, at least one logic file owned by the logic owner is stored in the logic owner exclusive storage area 21 that can be accessed only by the logic owner. The data and logic acquisition processing unit 423 as the acquisition processing unit acquires the corresponding logic file as the use logic from among at least one logic file stored in the logic owner exclusive storage area 21 in response to the designation of the use logic and the target data from the user terminal 60 operated by the user who is the second user, and acquires the target data from the user terminal 60. The result processing unit 425 as the provision processing unit transmits the calculation result and the settlement report to the user terminal 60. Therefore, the logic owner can allow the user, who is someone other than the logic owner, to use the logic owned by the logic owner without disclosing it.

[0122] [Other Embodiments] In the first to third embodiments described above, the information management apparatus 40 performs the settlement up to the usage amount of the logic or the usage amount of the logic and the data. However, it may perform the processing operations up to determining the usage amount and updating the billing information, and cause another settlement apparatus connected via the network NW to perform the actual settlement processing. In this case, since the settlement report is made from that settlement apparatus, the information management apparatus 40 only needs to simply report the usage amount.

[0123] Note that the order of the processing steps shown in the flowcharts of FIGS. 6 and 11 is an example and is not limited to this order. For example, steps S9 and S10 and steps S11 to S13 in FIG. 6 may be in the reverse order. Each processing step may change the processing order or the like, or may be performed in parallel, as long as there is no conflict with the preceding or subsequent processing steps.

[0124] Although the embodiments of the present invention have been described in detail above, the description up to this point is merely an exemplification of the present invention in every aspect. Needless to say, various improvements and modifications can be made without departing from the scope of the present invention. That is, in practicing the present invention, a specific configuration according to the embodiment may be appropriately adopted.

[0125] In short, the present invention is not limited to the above-described embodiments as they are, and at the implementation stage, the components can be modified and embodied without departing from the gist thereof. Also, various inventions can be formed by appropriately combining a plurality of components disclosed in the above-described embodiments. For example, some components may be deleted from all the components shown in each embodiment. Further, components from different embodiments may be appropriately combined.

Explanation of Reference Numerals

[0126] 1… Information management system 10… Data owner terminal 10A… Data owner A terminal 10B… Data owner B terminal 10C… Data owner C terminal 11… Data owner dedicated storage area 11A… Data owner A dedicated storage area 11B… Data owner B dedicated storage area 11C… Data owner C dedicated storage area 12, 22, 51… Individual area 20… Logic owner terminal 20α… Logic α owner terminal 20β… Logic β owner terminal 20γ… Logic γ owner terminal 21… Logic owner dedicated storage area 21α… Logic owner α dedicated storage area 21β… Logic owner β dedicated storage area 21γ… Logic owner γ dedicated storage area 22… Individual area 30, 50… Cloud storage 31… Public area 311…Logic group metadata shared memory area 312…Data group shared memory area 40…Information management device 41…Secret memory area 42…Control unit 421…Usage condition acquisition processing unit 422…Metadata management processing unit 423…Data and logic acquisition processing unit 424…Arithmetic processing unit 425…Result processing unit 426…Data processing unit 43…Program memory unit 44…Data storage unit 441…Usage condition storage unit 4411…Logic owner condition storage unit 4411α…Logic owner α condition storage unit 4411β…Logic owner β condition storage unit 4412…Logic usage condition 4413…Data owner condition storage unit 4413A…Data owner A condition storage unit 4413B…Data owner B condition storage unit 4414…Data file usage condition 442…User information storage unit 443…Billing information storage unit 444…Temporary storage unit 46…Bus 60…User terminal NW…Network

Claims

1. An information management device for managing the paid use of logic owned by a first user by a second user, comprising: a communication interface for communicating with a first user terminal operated by the first user and a second user terminal operated by the second user; a control unit for controlling the information management device; wherein the control unit includes: a publishing processing unit that creates logic metadata describing the content of the logic based on the content of the logic and setting information regarding usage fees sent from the first user terminal, and publishes the created logic metadata; an acquisition processing unit that, in response to the designation of usage logic corresponding to the published logic metadata and target data for performing calculations using the usage logic sent from the second user terminal, acquires the usage logic and the target data and stores them in a secret area concealed from the first and second users; a calculation processing unit that performs calculations on the target data stored in the secret area using the usage logic stored in the secret area, and stores the calculation result in the secret area; a determination processing unit that determines the usage amount generated between the first user and the second user regarding the use of the usage logic based on the setting information; a providing processing unit that provides the calculation result stored in the secret area to the second user, and provides a report of the determined usage amount to the first and second users; a deletion processing unit that deletes the usage logic, target data, and calculation result stored in the secret area; An information management device.

2. At least one logic file owned by the first user is stored in a first user exclusive storage area accessible only by the first user, At least one data file owned by the second user is stored in a second user exclusive storage area accessible only by the second user, The acquisition processing unit, in response to the designation of the usage logic and the target data, acquires the corresponding logic file from among the at least one logic file stored in the first user exclusive storage area as the usage logic, and acquires the corresponding data file from among the at least one data file stored in the second user exclusive storage area as the target data. ​ The information management device according to claim 1, wherein the providing processing unit writes the calculation result into the second user dedicated storage area. **Claim 3**: At least one logic file owned by the first user is stored in a first user dedicated storage area that can be accessed only by the first user. At least one data file owned by the second user is stored in a second user dedicated storage area that can be accessed only by the second user. The acquisition processing unit, in response to the designation of the usage logic and the target data, acquires the corresponding logic file from among the at least one logic file stored in the first user dedicated storage area as the usage logic, and acquires the corresponding data file from among the at least one data file stored in the second user dedicated storage area as the target data. The disclosure processing unit creates and discloses data file metadata describing the content of the data file based on the content of the data file and the setting information regarding the usage fee sent from the second user terminal. creates and discloses processed data by processing the data file based on the processing method of the data file and the setting information regarding the usage fee sent from the second user terminal. performs at least one of the above. The acquisition processing unit, in response to the designation of the usage logic and the target data from a third user terminal operated by a third user different from the first and second users, acquires the corresponding logic file from among the at least one logic file stored in the first user dedicated storage area that is also concealed from the third user as the usage logic, and acquires the corresponding data file from among the at least one data file stored in the second user dedicated storage area that is also concealed from the third user as the target data. The determination processing unit determines, as the usage amount, the amount that occurs between the first user, the second user, and the third user regarding the use of the usage logic and the data file based on the setting information. The providing processing unit provides the first, second, and third users with a report of the usage amount. The information management device according to claim 1, wherein the providing processing unit transmits the calculation result to the third user terminal. **Claim 4** At least one logic file owned by the first user is stored in a first user-exclusive storage area that can be accessed only by the first user. In response to the specification of the usage logic and the target data, the acquisition processing unit acquires a corresponding logic file from among the at least one logic file stored in the first user-exclusive storage area as the usage logic, and acquires the target data from the second user terminal. The information management apparatus according to claim 1, wherein the providing processing unit transmits a report of the calculation result and the usage amount to the second user terminal.

5. The information management apparatus further includes a settlement processing unit that performs a settlement process between users based on the determined usage amount. The information management apparatus according to any one of claims 1 to 4, wherein the providing processing unit provides each user with a settlement report regarding the settlement process as a report of the usage amount.

6. The information management apparatus according to any one of claims 2 to 4, a storage unit including at least the first user-exclusive storage area, connected to the information management apparatus via a network. An information management system comprising the same.

7. An information management method for managing the paid use of logic owned by a first user by a second user, comprising: a computer creating logic metadata describing the content of the logic based on the content of the logic and setting information regarding usage fees sent from a first user terminal operated by the first user, and publishing the created logic metadata; in response to the specification of usage logic corresponding to the published logic metadata and target data for performing calculations using the usage logic sent from a second user terminal operated by the second user, acquiring the usage logic and the target data and storing them in a secret area concealed from the first and second users; performing a calculation on the target data stored in the secret area using the usage logic stored in the secret area, and storing the calculation result in the secret area; determining a usage amount generated between the first user and the second user regarding the use of the usage logic based on the setting information; providing the second user with the calculation result stored in the secret area, and providing the first and second users with a report of the determined usage amount. A process of deleting the usage logic, target data, and the calculation result stored in the secret area; An information management method comprising the above. **Claim 8** An information management program for causing a computer to execute processing by each processing unit included in the information management apparatus according to any one of Claims 1 to 5.

Images