Data control assistance system, data control system, and data control assistance method

Abstract

Provided is a data control assistance system comprising: a storage device that stores one or more evaluation categories for data; and a control device configured to include a plurality of information processing devices, the control device acquiring an evaluation rule from each of a plurality of data transmission / reception control systems that respectively store evaluation rules for determining control content for data transmitted and received between the plurality of information processing devices, generating, on the basis of the acquired evaluation rules and an evaluation category, a new evaluation rule that encompasses the acquired evaluation rules and is based on the evaluation category, and transmitting the generated new evaluation rule to each of the data transmission / reception control systems.

Description

Data control support system, data control system, and data control support method

[0001] The present invention relates to a data control support system, a data control system, and a data control support method.

[0002] INCORPORATION BY REFERENCE This application claims priority to Japanese Patent Application No. 2023-107083, filed June 29, 2023, the contents of which are incorporated herein by reference. In recent years, business services have been provided that utilize various types of data, such as industrial data or personal data, and collaborate across multiple fields, industries, or companies. However, when providing such business services across multiple groups, data is shared between groups that have a specific relationship, such as an alliance or partnership. Therefore, for services and applications used in the services, different policies (policies regarding data handling) are set between the groups, and a data collaboration platform (system) that controls data transmission and reception may be constructed for each group.

[0003] Even when such a data sharing platform is established, it is desirable that data providers and users can exchange data safely in accordance with their own business policies. For example, it is necessary that data users use data in accordance with the data's intended use or terms of use, that data providers send reliable data, and that the reliability of both companies and data is maintained.

[0004] In this regard, as a technology for supporting data transmission and reception control, for example, Patent Document 1 (JP 2017-167747 A) describes a means for matching device-side metadata and data user-side metadata for multiple devices.

[0005] Furthermore, Patent Document 2 (JP 2018-142284 A) describes a technology for controlling access by calculating a risk index based on the risk factors of the data itself, the attributes of the data user, and the relationship between the data provider and the data user.

[0006] JP 2017-167747 A JP 2018-142284 A

[0007] If these technologies are used to control the distribution of data, it will be possible to check the data metadata, match data users with data providers, and control the distribution of data while taking into account the risks of the data.

[0008] However, these technologies do not take into account the case where data users and data providers belong to different data sharing platforms. In particular, when the business fields of different groups are different and the data evaluation methods (policies) differ for each data sharing platform, it is difficult to achieve appropriate data sharing in accordance with each policy.

[0009] The present invention has been made in consideration of the above background, and its purpose is to provide a data control support system, a data control system, and a data control support method that can support appropriate data transmission and reception control between systems even when the criteria for data transmission and reception control differ between the systems.

[0010] One aspect of the present invention for solving the above problem is a data control support system that includes a storage device that stores one or more evaluation categories for data, and a control device that executes an evaluation rule acquisition process that acquires evaluation rules from each of a plurality of data transmission / reception control systems that are configured to include a plurality of information processing devices and each store evaluation rules for determining control content for data transmitted and received between the plurality of information processing devices; an evaluation rule analysis and generation process that generates new evaluation rules based on the evaluation categories that include each of the acquired evaluation rules, based on each of the acquired evaluation rules and the evaluation categories; and an evaluation rule transmission process that transmits the new evaluation rules that have been generated to each of the data transmission / reception control systems.

[0011] According to the present invention, even if the criteria for determining data transmission and reception control differ between systems, it is possible to support appropriate data transmission and reception control between those systems. Other configurations and effects will become clear from the description of the following embodiments.

[0012] 1 is a diagram showing an example of the configuration of a data control system according to this embodiment. FIG. 1 is a diagram showing an example of hardware provided in a data provider computer and functions provided by the data provider computer. FIG. 2 is a diagram showing an example of data items provided in user information among attached information. FIG. 3 is a diagram showing an example of data items provided in system information among attached information. FIG. 4 is a diagram showing an example of data items provided in distributed data information among attached information. FIG. 5 is a diagram showing an example of hardware provided in a data user computer and functions provided by the data user computer. FIG. 6 is a diagram showing an example of hardware provided in a data distribution control computer and functions provided by the data distribution control computer. FIG. 7 is a diagram showing an example of a trust evaluation table. FIG. 8 is a diagram showing an example of a trust evaluation table. FIG. 9 is a diagram showing an example of a policy table. FIG. 10 is a diagram showing an example of hardware provided in a common trust management computer and functions provided by the common trust management computer. FIG. 11 is a diagram showing an example of a category table. FIG. 12 is a sequence diagram illustrating an example of processing related to control of transmission and reception of target data performed within the same data federation platform and between different data federation platforms, which is performed in the data control system. FIG. 13 is a diagram showing an example of a trust evaluation table editing screen. FIG. 14 is a flow diagram explaining the details of a trust evaluation table update processing. FIG. 15 is a flow diagram showing an example of a setting processing of a trust evaluation value and a correspondence standard.

[0013] 1 is a diagram showing an example of the configuration of a data control system 1 according to this embodiment. The data control system 1 includes a common trust management computer 10 and a plurality of data linkage platforms 20 related to each field, which are used by companies and the like that perform business in each field.

[0014] The data linkage platform 20 is an information processing system (data transmission / reception control system) for enabling companies in the corresponding fields to link and use data (hereinafter referred to as target data) used by each company. The data linkage platform 20 is managed by, for example, a system administrator in each field.

[0015] Specifically, the data linkage infrastructure 20 includes one or more data provider computers 30 , one or more data user computers 40 , and a data distribution control computer 50 .

[0016] The data provider computer 30 is an information processing device managed by the company (data provider) that generated the target data. The data provider computer 30 acquires the target data from the sensor system 60 and the business system 70. The data provider computer 30 also acquires data related to the target data (hereinafter referred to as attached information; details will be described later) from the sensor system 60 and the business system 70.

[0017] The sensor system 60 is, for example, an IoT (Internet of Things) system that manages measurement data of predetermined devices or equipment, and transmits the measurement data and related data as target data and attached information, respectively, to the data provider computer 30. The business system 70 is, for example, a business management system such as ERP (Enterprise Resource Planning), and transmits information on the content of business to the data provider computer 30 as target data or attached information.

[0018] The data user computer 40 is an information processing device managed by a company (data user) that desires the target data. The data user computer 40 transmits a predetermined data provision request to the data distribution control computer 50, and receives the target data from the data provider computer 30 based on the data transmission and reception control by the data distribution control computer 50.

[0019] The data distribution control computer 50 controls the transmission and reception of target data between the data provider computer 30 and the data user computer 40 in the data linkage infrastructure 20 to which the data distribution control computer 50 belongs.

[0020] Specifically, when the data distribution control computer 50 receives a data provision request, it calculates an evaluation value (trust evaluation value) indicating the degree of reliability (trust evaluation) of the target data based on an evaluation rule (trust evaluation table 400 described later) for determining the control content for the target data transmitted and received between the data provider computer 30 and the data user computer 40. Furthermore, the data distribution control computer 50 performs control on the target data (for example, whether or not to transmit and receive the target data) according to the trust evaluation value. The evaluation rule is associated with a predetermined policy (described later) held by each data user or data provider.

[0021] Here, the evaluation categories (evaluation targets, evaluation items) in the evaluation rules defined by the trust evaluation table 400 differ depending on the data federation infrastructure 20 (i.e., business field). Therefore, the common trust management computer 10 collects and analyzes the trust evaluation tables 400 of each data federation infrastructure 20, thereby standardizing the evaluation categories of each trust evaluation table 400 so that target data can be sent and received between the data federation infrastructures 20, and generates (updates) a new trust evaluation table 400 that includes each trust evaluation table 400. Each updated trust evaluation table 400 is sent to the data distribution control computer 50 of each data federation infrastructure 20.

[0022] The data linkage infrastructure 20 and the common trust management computer 10, the information processing devices in the data linkage infrastructure 20, and the information processing devices in the common trust management computer 10 are communicatively connected to each other via a wired or wireless communication network 5 such as the Internet, a LAN (Local Area Network), a WAN, or a dedicated line. Next, each information processing device in the data control system 1 will be described in detail.

[0023] (Data Provider Computer) FIG. 2 is a diagram showing an example of the hardware included in the data provider computer 30 and the functions that the data provider computer 30 has.

[0024] The data provider computer 30 includes a processor 31 (control device) such as a CPU (Central Processing Unit), a memory 32 such as a RAM (Random Access Memory) or a ROM (Read Only Memory), a storage device 33 such as an HDD (Hard Disk Drive) or an SSD (Solid State Drive), an I / O device 34 such as a keyboard, mouse, touch panel, or display, and a network I / F 35 consisting of a NIC (Network Interface Card), a wireless communication module, a USB (Universal Serial Interface) module, or a serial communication module, etc.

[0025] The data provider computer 30 stores each data of the target data 37 and the attached information 38 .

[0026] The auxiliary information 38 is data related to the target data 37 and is data necessary for calculating an evaluation value (trust evaluation value) of the reliability of the target data 37. The auxiliary information 38 includes an evaluation target and one or more evaluation items for the evaluation target.

[0027] In this embodiment, with respect to the subject of evaluation, the attached information 38 includes user information 100, which is data regarding the evaluation of the management entity (e.g., owner, rights holder, or administrator; hereinafter referred to as the target user) of the target data 37, system information 200, which is data regarding the evaluation of the sensor system 60 or business system 70 (hereinafter referred to as the target system) that generated (manages) the target data 37, and circulation data information 300, which is data regarding the evaluation of the attributes of the target data 37 (hereinafter referred to as data attributes).

[0028] The data provider computer 30 also stores a data communication program 36 .

[0029] The data communication program 36 acquires target data 37 from the sensor system 60 and the business system 70. The data communication program 36 also transmits the target data 37 to the data user computer 40.

[0030] 3 is a diagram showing an example of data items included in user information 100 of the attached information 38. The user information 100 includes data items such as a user identifier 101 in which an identifier of each user (target user) to be evaluated is set, a user name 102 in which the name of each user is set, an attribute 103 in which the attribute of each user is set, and an evaluation item 104 in which an evaluation item related to each user is set.

[0031] Specifically, the evaluation items 104 have the following data items: transparency 105, in which the content of the evaluation item (transparency evaluation item) regarding the transparency of each user's business is set; quality 106, in which the content of the evaluation item (quality evaluation item) regarding the quality of each user's business is set; certainty 107, in which the content of the evaluation item (certainty evaluation item) regarding the certainty of each user's business is set; safety 108, in which the content of the evaluation item (safety evaluation item) regarding the safety of each user's business is set; responsibility 109, in which the content of the evaluation item (responsibility evaluation item) regarding the content of the responsibility of each user is set; and honesty 110, in which the content of the evaluation item (honesty evaluation item) regarding the honesty of each user is set.

[0032] 4 is a diagram showing an example of data items included in system information 200 of the attached information 38. The system information 200 includes data items such as a system identifier 201 in which an identifier of each system (target system) to be evaluated is set, a system name 202 in which the name of each system is set, a serial number 203 in which the number of each system is set, and evaluation items 204 in which evaluation items related to each system are set.

[0033] Specifically, the evaluation items 204 have the following data items: transparency 205, in which the contents of the transparency evaluation items for each system are set; quality 206, in which the contents of the quality evaluation items for each system are set; certainty 207, in which the contents of the certainty evaluation items for each system are set; and safety 208, in which the contents of the safety evaluation items for each system are set.

[0034] 5 is a diagram showing an example of data items included in the distribution data information 300 of the attached information 38. The distribution data information 300 includes data items such as a system identifier 301 in which an identifier for each piece of target data related to a data attribute to be evaluated is set, a data name 302 in which a name for each piece of target data is set, and an evaluation item 303 in which an evaluation item related to each data attribute is set.

[0035] Specifically, the evaluation item 303 has the following data items: transparency 304, in which the content of the transparency evaluation item for each data attribute is set; quality 305, in which the content of the quality evaluation item for each data attribute is set; and certainty 306, in which the content of the certainty evaluation item for each data attribute is set.

[0036] (Data User Computer) Next, FIG. 6 is a diagram showing an example of the hardware included in the data user computer 40 and the functions that the data user computer 40 has.

[0037] The data user computer 40 includes a processor 41 (control device) such as a CPU (Central Processing Unit), a memory 42 such as a RAM (Random Access Memory) or a ROM (Read Only Memory), a storage device 43 such as an HDD (Hard Disk Drive) or an SSD (Solid State Drive), an I / O device 44 such as a keyboard, mouse, touch panel, or display, and a network I / F 45 consisting of a NIC (Network Interface Card), a wireless communication module, a USB (Universal Serial Interface) module, or a serial communication module, etc.

[0038] The data user computer 40 stores a data communication program 46 and an application program 47 .

[0039] The data communication program 46 receives the target data 37 from the data provider computer 30 .

[0040] The application program 47 performs a predetermined process based on the target data 37 received from the data user computer 40 .

[0041] (Data Distribution Control Computer) Next, FIG. 7 is a diagram showing an example of the hardware included in the data distribution control computer 50 and the functions that the data distribution control computer 50 has.

[0042] The data distribution control computer 50 includes a processor 51 (control device) such as a CPU (Central Processing Unit), a memory 52 such as a RAM (Random Access Memory) or a ROM (Read Only Memory), a storage device 53 such as an HDD (Hard Disk Drive) or an SSD (Solid State Drive), an I / O device 54 such as a keyboard, a mouse, a touch panel, or a display, and a network I / F 55 configured from a NIC (Network Interface Card), a wireless communication module, a USB (Universal Serial Interface) module, a serial communication module, or the like.

[0043] The data distribution control computer 50 stores a trust evaluation table 400 and a policy table 500 .

[0044] The trust evaluation table 400 is data that associates a trust evaluation target, an evaluation item related to the evaluation target, a trust evaluation value corresponding to the evaluation target and evaluation criteria, and a policy corresponding to the trust evaluation value.

[0045] The policy table 500 is data that stores policies, which are standards related to trust evaluation values. Specifically, the policies are data of judgment criteria required to determine the control content of the target data 37 between the data provider computer 30 and the data user computer 40 (for example, whether or not to transmit the target data) using the trust evaluation value. Policies include, for example, a provision policy, which is a standard based on the operation of the data provider, a user policy, which is a standard based on the operation of the data user, and a management policy, which is a standard based on the operation of the system administrator in each field. Hereinafter, in this embodiment, it is assumed that the policy table 500 stores user policies, but this is not particularly limited.

[0046] 8 and 9 are diagrams showing an example of a trust evaluation table 400. The trust evaluation table 400 has data items including an attribute 401 in which an evaluation target (e.g., a target system, a target user, or a data attribute) for the target data is set, a classification 402 in which evaluation items (e.g., a transparency evaluation item or a responsibility evaluation item) for the evaluation target are set, a sub-classification 403 in which sub-items of the evaluation items (e.g., traceability, compliance with regulations, or solvency) are set, a level 404 in which a trust evaluation value corresponding to the evaluation specified by the attribute 401, the classification 402, and the sub-classification 403 is set, and a criterion 405 in which the content of a policy (hereinafter referred to as a correspondence criterion) corresponding to the trust evaluation value indicated by the level 404 is set.

[0047] Concerning the level 404 and the criterion 405, specifically, when the trust evaluation level of certain target data is the trust evaluation level indicated by the level 404, this corresponds to the policy (of the data user) being the policy indicated by the criterion 405. In the example of Fig. 8, when certain target data is manually entered data (without evidence), the trust evaluation levels of the items "transparency" and "traceability" that target the data attributes of the target data are "1".

[0048] The contents of the trust evaluation table 400 are set in advance based on, for example, social standards (international standards, group standards, social implicit rules, etc.) (however, as will be described later, they are updated by the common trust management computer 10). The trust evaluation table 400 is set in advance by, for example, a data provider, a data user, or an administrator in each field. Furthermore, the trust evaluation table 400 may be updated by a data user at any time.

[0049] Although the contents of the trust evaluation table 400 differ depending on the field, the data items are within the range of evaluation categories (evaluation targets and evaluation items) defined by the category table 600, as will be described later.

[0050] 10 is a diagram showing an example of a policy table 500. The policy table 500 has data items including an attribute 501 in which the target of the trust evaluation (e.g., target data, target user, data attribute) is set, a classification 502 in which evaluation items for the target of the evaluation (e.g., transparency evaluation items, responsibility evaluation items) are set, a sub-classification 503 in which sub-items of the evaluation items (e.g., traceability, compliance with regulations, solvency) are set, and a policy 504 in which a trust evaluation value related to the evaluation category related to the attribute 501, the classification 502, and the sub-classification 503 is set, which is a criterion for determining transmission / reception control of the target data (hereinafter referred to as a trust evaluation value threshold).

[0051] In this embodiment, the trust evaluation value threshold is the minimum value (threshold) of the trust evaluation value required to transmit target data from the data provider computer 30 to the data user computer 40. That is, in the example of the same figure, if the trust evaluation values ​​related to "data (attribute)", "transparency", and "traceability" of the target data are "2" or more, the data distribution control computer 50 controls the transmission of the target data from the data provider computer 30 to the data user computer 40.

[0052] Next, as shown in FIG. 7, the data distribution control computer 50 stores a trust evaluation program 56, a distribution control program 57, and a policy management program 58.

[0053] When the trust evaluation program 56 receives a data provision request for target data from the data user computer 40, it calculates a trust evaluation value of the target data based on the trust evaluation table 400 and the attached information 38.

[0054] The distribution control program 57 controls transmission and reception of target data from the data provider computer 30 to the data user computer 40 based on the trust evaluation value calculated by the trust evaluation program 56 and the policy table 500. For example, if the trust evaluation value for a certain evaluation category calculated by the trust evaluation program 56 exceeds the trust evaluation threshold, the distribution control program 57 transmits the target data from the data provider computer 30 to the data user computer 40.

[0055] The trust evaluation program 56 may be included in the distribution control program 57 .

[0056] The policy management program 58 collects and manages the policy tables 500 held by each data user computer 40. The policy management program 58 may also receive input of the policy table 500 from a data user, a data provider, or an administrator.

[0057] (Common Trust Management Computer) Next, FIG. 11 is a diagram showing an example of the hardware included in the common trust management computer 10 and the functions that the common trust management computer 10 has.

[0058] The common trust management computer 10 comprises a processor 11 (control device) such as a CPU (Central Processing Unit), a memory 12 such as a RAM (Random Access Memory) or a ROM (Read Only Memory), a storage device 13 such as an HDD (Hard Disk Drive) or an SSD (Solid State Drive), an I / O device 14 such as a keyboard, mouse, touch panel, or display, and a network I / F 15 consisting of a NIC (Network Interface Card), a wireless communication module, a USB (Universal Serial Interface) module, or a serial communication module, etc.

[0059] The common trust management computer 10 stores a category table 600 and a trust evaluation table 400 acquired from each data distribution control computer 50 .

[0060] 12 is a diagram showing an example of a category table 600. The category table 600 comprehensively defines the evaluation targets and evaluation items (evaluation categories) required for performing trust evaluation. In other words, the category table 600 is evaluation category definition information that includes all evaluation categories (including all business fields) that the trust evaluation table 400 of each data linkage platform 20 has.

[0061] Specifically, the category table 600 has data items of a classification 601 in which the subject of evaluation (e.g., the target user, the target system, and the data attributes) is set, and an evaluation item 602 in which the evaluation item related to the subject of evaluation is set.

[0062] Specifically, the evaluation item 602 has the following data items: transparency 603, for which a transparency evaluation item is set; quality 604, for which a quality evaluation item is set; certainty 605, for which a certainty evaluation item is set; safety 606, for which a safety evaluation item is set; responsibility 607, for which a responsibility evaluation item is set; and honesty 608, for which an honesty evaluation item is set.

[0063] Note that only evaluation items for the target user and the target system are set in the safety 606. Only evaluation items for the target user are set in the responsibility 607 and honesty 608.

[0064] The category table 600 is created in advance, for example, based on input by an administrator.

[0065] The functions of the functional units of each information processing device in the data control system 1 described above are realized by a processor reading a program from a memory or storage device. Each program can be recorded on, for example, a portable or fixed recording medium and distributed. All or part of these programs may be realized using virtual information processing resources provided using virtualization technology, process space separation technology, or the like, such as a virtual server provided by a cloud system. All or part of these programs may also be realized by a service provided by the cloud system via an API (Application Programming Interface), for example. Next, the processing performed by the data control system 1 will be described.

[0066] Figure 13 is a sequence diagram that explains an example of processing (hereinafter referred to as transmission / reception control processing) related to the control of transmission and reception of target data performed within the same data integration platform 20 and between different data integration platforms 20, which is performed in the data control system 1.

[0067] First, in the data linkage infrastructure 20A, the data user computer 40A generates and stores policy information (policy table 500). For example, the data user computer 40A receives input of policy information from a data user.

[0068] Thereafter, the data user computer 40A transmits the generated policy table 500 to the data distribution control computer 50A (s1), and the data distribution control computer 50A generates and stores the trust evaluation table 400 (s3).

[0069] (Trust Evaluation Table Editing Screen) FIG. 14 is a diagram showing an example of a trust evaluation table editing screen 1400 that is displayed in the processing of s3 and that accepts input of the trust evaluation table 400.

[0070] The trust evaluation table editing screen 1400 has a category selection field 1401 that accepts selection input of evaluation targets (target system, user to be addressed, data attributes) and evaluation items (transparency evaluation items, quality evaluation items) of the trust evaluation table 400 to be generated, a classification selection field 1402 and a sub-classification selection field 1403 that accept selection of evaluation targets and evaluation items to be edited from the evaluation targets and evaluation items selected in the category selection field 1401, and a policy editing field 1404 that accepts input of trust evaluation levels and response criteria corresponding to the evaluation targets and evaluation items selected in the classification selection field 1402 and the sub-classification selection field 1403.

[0071] In this embodiment, the trust evaluation table editing screen 1400 is displayed on the screen of the data distribution control computer 50, but it may also be displayed on the data provider computer 30 or the data user computer 40, etc. (the data user or administrator may create the trust evaluation table 400).

[0072] 13, when the data distribution control computer 50A receives a request to provide target data held by the data provider computer 30A in the data federation infrastructure 20A from the data user computer 40 in the data federation infrastructure 20A, the data distribution control computer 50A calculates a trust evaluation value of the target data for each evaluation category (for each evaluation target and evaluation item) based on the attached information 38 corresponding to the target data and the trust evaluation table 400. Then, the data distribution control computer 50A causes the data provider computer 30A to transmit the target data, accompanied by information on each calculated trust evaluation value, to the data user computer 40A (s5).

[0073] At this time, the data distribution control computer 50A controls the transmission and reception of data according to the calculated trust evaluation value. In this embodiment, the data distribution control computer 50A executes the transmission of the target data only when the calculated trust evaluation value for a certain evaluation category exceeds the trust evaluation threshold indicated in the policy table 500 received in s1.

[0074] By the above processes s1 to s5, transmission and reception of target data between the data provider computer 30A and the data user computer 40A within the same data linkage infrastructure 20A is controlled.

[0075] Meanwhile, each data distribution control computer 50 (data distribution control computers 50A, B) in the data control system 1 transmits the trust evaluation table 400 it holds to the common trust management computer 10 at a predetermined timing (for example, a predetermined time, a predetermined time interval, or as specified by the administrator) (s11).

[0076] The common trust management computer 10 executes a trust evaluation table update process to generate a new trust evaluation table 400 by integrating each trust evaluation table 400 based on the received trust evaluation tables 400 and the category table 600 (s13).

[0077] The common trust management computer 10 transmits the generated trust evaluation table 400 to each data distribution control computer 50 (s15). Each data distribution control computer 50 updates the existing trust evaluation table 400 with the received trust evaluation table 400. The data distribution control computer 50 may also receive an input of whether or not to perform an update.

[0078] In addition, when the common trust management computer 10 detects a new data integration platform 20 that sends and receives target data (for example, when it receives specified request information from the new data integration platform 20), it may send the trust evaluation table 400 generated in s13 to the data distribution control computer 50 in that data integration platform 20 (s16).

[0079] In addition, the common trust management computer 10 compares the trust evaluation table 400 updated in s13 with the trust evaluation table 400 received in s11 (before the update), and identifies any policy information (hereinafter referred to as missing information) that is missing from the trust evaluation table 400 received in s11 (s17).

[0080] Specifically, the common trust management computer 10 extracts information that is not included in the criteria 405 of the trust evaluation table 400 received in s11 from each piece of information in the criteria 405 of the trust evaluation table 400 updated in s13.

[0081] For example, if the policies associated with the evaluation categories of "data," "transparency," and "traceability" in the trust evaluation table 400 updated in s13 are "automatic input (no IoT sensor)" and "automatic input (IoT sensor)," and if the policy associated with the evaluation categories of "data," "transparency," and "traceability" in the trust evaluation table 400 received in s11 is "automatic input," the missing information is "(no IoT sensor)" and "(IoT sensor present)."

[0082] Then, the common trust management computer 10 transmits a request for collection of the missing information (collection request) to each data provider computer 30 (s19).

[0083] The data provider computer 30 that has received the collection request acquires data that forms the basis of the missing information (for example, sensor measurement data that is IoT data) (s21). The data provider computer 30 may receive the missing information from the sensor system 60 or the business system 70, or may receive the missing information from a public information processing system such as the Internet.

[0084] Thereafter, when the data distribution control computer 50B in the data federation infrastructure 20B receives a request to provide the target data held by the data provider computer 30A in the data federation infrastructure 20A from the data user computer 40B in the data federation infrastructure 20B, it calculates a trust evaluation value of the target data for each evaluation category (for each evaluation target and evaluation item) based on the attached information 38 corresponding to the target data and the trust evaluation table 400 updated in s15 (s23).Then, the data distribution control computer 50B causes the data provider computer 30A to transmit the target data, accompanied by information on each calculated trust evaluation value, to the data user computer 40B in accordance with the policy (s25).

[0085] At this time, the data distribution control computer 50B controls the transmission and reception of data according to the calculated trust evaluation value. In this embodiment, the data distribution control computer 50B executes the transmission of the target data only when the calculated trust evaluation value for a certain evaluation category exceeds the trust evaluation threshold indicated in the policy table 500 received in s1.

[0086] By the above processing of s11 to s25, it becomes possible to control the transmission and reception of target data between different data link platforms 20.

[0087] <Trust Evaluation Table Update Processing> FIG. 15 is a flowchart illustrating the details of the trust evaluation table update processing s13.

[0088] The trust evaluation table analysis and generation program 16 selects one of the evaluation targets (e.g., a target system, a target user, or a data attribute) and compares the evaluation target with multiple trust evaluation tables (here, a first trust evaluation table 400 and a second trust evaluation table 400).

[0089] First, the trust evaluation table analysis and generation program 16 determines whether the evaluation items and evaluation sub-items (specifically, the contents of the category 402 and the sub-category 403) of the second trust evaluation table 400 have (match) the evaluation items and evaluation sub-items (specifically, the contents of the category 402 and the sub-category 403) of the first trust evaluation table 400 (s131). For example, the trust evaluation table analysis and generation program 16 checks whether the evaluation items are both "transparency" and "responsibility" and whether the evaluation sub-items are both "traceability," "regulatory compliance," and "solvent ability."

[0090] If the evaluation items and evaluation sub-items of the second trust evaluation table 400 have the evaluation items and evaluation sub-items of the first trust evaluation table 400 (s131: YES), the trust evaluation table analysis and generation program 16 executes the processing of s132, and if the evaluation items and evaluation sub-items of the second trust evaluation table 400 do not have all of the evaluation items and evaluation sub-items of the first trust evaluation table 400 (s131: NO), the trust evaluation table analysis and generation program 16 executes the processing of s136.

[0091] In s136, the trust evaluation table analysis and generation program 16 adds the contents of the evaluation items and sub-items of the first trust evaluation table 400 that are not included in the second trust evaluation table 400 to the second trust evaluation table 400. Thereafter, the trust evaluation table update processing s13 ends.

[0092] In s132, the trust evaluation table analyzing and generating program 16 identifies the differences and inclusion relationships of each configuration for each evaluation item and evaluation subitem, and compares the combination of trust evaluation value and correspondence criterion in the first trust evaluation table 400 with the combination of trust evaluation value and correspondence criterion in the second trust evaluation table 400. In other words, the trust evaluation table analyzing and generating program 16 determines whether the combination of trust evaluation value and correspondence criterion in the second trust evaluation table 400 corresponds to the combination of trust evaluation value and correspondence criterion in the first trust evaluation table 400.

[0093] For example, the trust evaluation table analysis and generation program 16 compares, in the category “transparency” and the subcategory “traceability,” the combination of “Level 1” and “No manual input evidence” and the combination of “Level 2” and “Manual input evidence” in the first trust evaluation table 400 with the combination of “Level 1” and “No acquisition from IoT sensor” and the combination of “Level 2” and “No acquisition from IoT sensor” in the second trust evaluation table 400. Then, the trust evaluation table analysis and generation program 16 determines that “No manual input” corresponds to “Automatic input” and that “Automatic input” includes “Acquisition from IoT sensor” and “No acquisition from IoT sensor.” Furthermore, the trust evaluation table analyzing and generating program 16 determines that the trust evaluation level of "with evidence" is higher than that of "without evidence" (because "evidence" has been added), and that the trust evaluation level of "acquired from IoT sensor" is higher than that of "not acquired from IoT sensor" (because "IoT sensor" has been added). As a result of the above, the trust evaluation table analyzing and generating program 16 determines that the above four combinations do not correspond to each other (do not have the same combination of trust evaluation level and the same correspondence criteria).

[0094] If the combination of the trust evaluation value and the correspondence criterion related to the second trust evaluation table 400 corresponds to the combination of the trust evaluation value and the correspondence criterion of the first trust evaluation table 400 (s132: YES), the trust evaluation table analyzing and generating program 16 executes the process of s135. If the combination of the trust evaluation value and the correspondence criterion related to the second trust evaluation table 400 corresponds to the combination of the trust evaluation value and the correspondence criterion of the first trust evaluation table 400 (s132: NO), the trust evaluation table analyzing and generating program 16 executes the process of s133.

[0095] In s135, the trust evaluation table analyzing and generating program 16 determines that there is no need to change the second trust evaluation table 400, and then the trust evaluation table updating process s13 ends.

[0096] In s133, the trust evaluation table analyzing and generating program 16 updates the combinations of trust evaluation values ​​and correspondence criteria in the first trust evaluation table 400 and the second trust evaluation table 400 for any incompatible combinations so that the combinations of trust evaluation values ​​and correspondence criteria in the second trust evaluation table 400 correspond to the combinations of trust evaluation values ​​and correspondence criteria in the first trust evaluation table 400 (s134). Thereafter, the trust evaluation table updating process s13 ends.

[0097] For example, the trust evaluation table analysis and generation program 16 sets "no manual input evidence" to trust evaluation level 1, "manual input evidence present" to trust evaluation level 2, "automatic input (no IoT sensor)" to trust evaluation level 3, and "automatic input (with IoT sensor)" to trust evaluation level 4 in the first trust evaluation table 400 and the second trust evaluation table 400. As a result, the first trust evaluation table 400 and the second trust evaluation table 400 are determined to have the same trust evaluation level using common correspondence criteria (the first trust evaluation table 400 and the second trust evaluation table 400 are essentially integrated).

[0098] The trust evaluation table analyzing and generating program 16 repeats the above-mentioned processing of s131 to s136 for all evaluation targets (for example, target systems, target users, and data attributes).

[0099] The determination of the correlation (correspondence, inclusion, etc.) between the trust evaluation level and the correspondence criteria and the update of the trust evaluation table 400 described in s132 to s135 may be based on, for example, the judgment (input setting) of the administrator, or may be performed automatically by the trust evaluation table analysis and generation program 16 based on a predetermined algorithm.

[0100] For example, FIG. 16 is a flow diagram showing an example of a process for setting trust evaluation values ​​and correspondence criteria performed by the trust evaluation table analysis and generation program 16 for the attribute “data”, the category “transparency”, and the subcategory “traceability”.

[0101] The trust evaluation table analyzing and generating program 16 determines whether or not the criteria 405 of the trust evaluation table 400 includes a configuration that uses "automatic input" (s161). If the criteria 405 of the trust evaluation table 400 includes a configuration that uses "automatic input" (s161: YES), the trust evaluation table analyzing and generating program 16 executes the process of s162. If the criteria 405 of the trust evaluation table 400 does not include a configuration that uses "automatic input" (s161: NO), the trust evaluation table analyzing and generating program 16 executes the process of s164.

[0102] In s162, the trust evaluation table analyzing and generating program 16 determines whether or not a configuration using an "IoT sensor" is included in the criteria 405 of the trust evaluation table 400. If the criteria 405 of the trust evaluation table 400 includes a configuration using an "IoT sensor" (s162: YES), the trust evaluation table analyzing and generating program 16 executes the process of s163. If the criteria 405 of the trust evaluation table 400 does not include a configuration using an "IoT sensor" (s162: NO), the trust evaluation table analyzing and generating program 16 executes the process of s167.

[0103] In s163, the trust evaluation table analysis and generation program 16 determines whether or not a configuration using "blockchain" is included in the criteria 405 of the trust evaluation table 400. If a configuration using "blockchain" is included in the criteria 405 of the trust evaluation table 400 (s163: YES), the trust evaluation table analysis and generation program 16 executes the processing of s168. If a configuration using "blockchain" is not included in the criteria 405 of the trust evaluation table 400 (s163: NO), the trust evaluation table analysis and generation program 16 executes the processing of s166.

[0104] In s165, the trust evaluation table analyzing and generating program 16 sets the level 404 of the trust evaluation table 400 to "level 5".

[0105] In s166, the trust evaluation table analyzing and generating program 16 sets the level 404 of the trust evaluation table 400 to "level 4".

[0106] In s167, the trust evaluation table analyzing and generating program 16 sets the level 404 of the trust evaluation table 400 to "level 3".

[0107] In s164, the trust evaluation table analysis and generation program 16 determines whether or not the criteria 405 of the trust evaluation table 400 includes a configuration that uses "evidence." If the criteria 405 of the trust evaluation table 400 includes a configuration that uses "blockchain" (s164: YES), the trust evaluation table analysis and generation program 16 executes the process of s168. If the criteria 405 of the trust evaluation table 400 does not include a configuration that uses "blockchain" (s164: NO), the trust evaluation table analysis and generation program 16 executes the process of s169.

[0108] In s168, the trust evaluation table analyzing and generating program 16 sets the level 404 of the trust evaluation table 400 to "level 2".

[0109] In s169, the trust evaluation table analyzing and generating program 16 sets the level 404 of the trust evaluation table 400 to "level 1".

[0110] In this way, the trust evaluation table analyzing and generating program 16 can identify the correspondence between the correspondence criteria and the trust evaluation value by determining whether or not each configuration is included in the criteria 405 of the trust evaluation table 400, and by determining each trust evaluation value corresponding to the presence or absence of each configuration. Note that the correspondence between each configuration and each trust evaluation value may be determined, for example, based on a predetermined database in advance, or may be determined by processing (symbol processing, natural language processing, etc.) the data contents of the criteria 405 and level 404 of the trust evaluation table 400.

[0111] As described above, the common trust management computer 10 (data control support system) of this embodiment acquires a trust evaluation table 400 from each of multiple data integration platforms 20 that store the trust evaluation table 400 for determining the control content for target data transmitted and received between the data provider computer 30 and the data user computer 40, and based on each acquired trust evaluation table 400 and the category table 600, generates a trust evaluation table 400 based on the category table 600 that includes each acquired trust evaluation table 400, and transmits the newly generated trust evaluation table 400 to each of the data integration platforms 20.

[0112] In other words, the data control support system of this embodiment generates (updates) a new trust evaluation table 400 that incorporates the trust evaluation tables 400 of each data integration platform 20, so that each data integration platform 20 can use the generated trust evaluation table 400 to determine the control content for the target data based on common criteria.

[0113] As described above, the data control support system of this embodiment can support appropriate data transmission and reception control between systems even if the criteria for data transmission and reception control differ between the systems.

[0114] In addition, in this embodiment, the category table 600 includes evaluation items for at least one of the evaluation targets, namely, the target user, the target system, and the data attributes, as evaluation categories related to the reliability of the target data, and the data control support system generates a new trust evaluation table 400 based on the evaluation items for the above evaluation targets.

[0115] This allows each data integration platform 20 to objectively and clearly determine the reliability of the target data regarding data distribution based on the attributes of people, organizations, systems, objects, or data, and to perform appropriate data transmission and reception control.

[0116] In addition, in this embodiment, the category table 600 includes at least one of the following evaluation items for the evaluation target: transparency evaluation item, quality evaluation item, certainty evaluation item, safety evaluation item, responsibility evaluation item, and honesty evaluation item as evaluation categories related to the reliability of the target data, and the data control support system generates a new trust evaluation table 400 based on the above evaluation items.

[0117] This allows each data linkage platform 20 to evaluate the evaluation target in a multifaceted and objective manner with regard to data distribution, and to perform appropriate data transmission and reception control.

[0118] In addition, the data control support system of this embodiment identifies information (policy) necessary to determine the control content for data that is missing from the trust evaluation table 400 received from the data integration platform 20, among the evaluation rules of the generated new trust evaluation table 400, and transmits information (missing information) that identifies the identified information to the data integration platform 20.

[0119] This allows the data linkage platform 20 to collect information about policies that are necessary when controlling the transmission and reception of target data using the new trust evaluation table 400.

[0120] Furthermore, the data linkage infrastructure 20 in the data control system 1 of this embodiment calculates a trust evaluation value related to the new trust evaluation table 400 based on the received missing information.

[0121] This allows the data linkage platform 20 to use the new trust evaluation table 400 to appropriately evaluate the target data.

[0122] Furthermore, the data linkage platform 20 in the data control system 1 of this embodiment controls the transmission and reception of target data based on the calculated trust evaluation value.

[0123] This allows the data linkage platform 20 to appropriately control the transmission and reception of target data based on the trust evaluation value.

[0124] Furthermore, the data linkage platform 20 in the data control system 1 of this embodiment accepts input of trust evaluation information and stores the input trust evaluation information in the trust evaluation table 400 .

[0125] This allows the trust evaluation table 400 to be created with appropriate content.

[0126] The present invention is not limited to the above-described embodiments, and can be implemented using any components within the scope of the present invention. The above-described embodiments and modifications are merely examples, and the present invention is not limited to these contents as long as the characteristics of the invention are not impaired. Furthermore, although various embodiments and modifications have been described above, the present invention is not limited to these contents. Other aspects conceivable within the scope of the technical idea of ​​the present invention are also included within the scope of the present invention.

[0127] For example, part of the hardware provided in each device of this embodiment may be provided in another device.

[0128] Furthermore, each program of each device may be provided in another device, a program may consist of multiple programs, or multiple programs may be integrated into one program.

[0129] Furthermore, the evaluation targets and evaluation items described in this embodiment are merely examples, and are not limited to those described in this embodiment.

[0130] Furthermore, in this embodiment, the subject of determining whether or not the target data can be distributed and the distribution method is the reliability (trust evaluation) of the target data, but the present invention can also be applied to evaluations of other targets (for example, evaluation of the purpose of use of the target data, evaluation of the terms of the contract concluded between the data user and data provider regarding the target data, evaluation of the company related to the target data, evaluation of the protection level of the target data, evaluation of the risk of data leakage of the target data).

[0131] In addition, in this embodiment, the data user computer 40 collects data based on the missing information, but the data distribution control computer 50 may collect the data and transmit it to the data user computer 40.

[0132] In addition, in this embodiment, the data distribution control computer 50 transmits the target data when the trust evaluation value for a certain evaluation category exceeds the trust evaluation threshold, but it may also be configured to transmit the target data only when the trust evaluation value for a specified evaluation category (for example, all evaluation categories) exceeds the trust evaluation threshold.

[0133] In addition, in this embodiment, the data distribution control computer 50 controls the transmission and reception of target data by determining whether or not data can be transmitted and received, but other types of control may also be performed. For example, the data distribution control computer 50 may control the subject data to undergo predetermined processing.

[0134] 1 Data control system, 10 Common trust management computer, 20 Data collaboration platform, 30 Data provider computer, 40 Data user computer, 50 Data distribution control computer

Claims

1. A data control support system comprising: a storage device storing one or more evaluation categories for data; and a control device configured to include a plurality of information processing devices and executing an evaluation rule acquisition process for acquiring evaluation rules from each of a plurality of data transmission / reception control systems each storing an evaluation rule for determining control content for data transmitted and received between the plurality of information processing devices; an evaluation rule analysis and generation process for generating new evaluation rules based on the evaluation categories that include each of the acquired evaluation rules, based on each of the acquired evaluation rules and the evaluation categories; and an evaluation rule transmission process for transmitting the new evaluation rules generated to each of the data transmission / reception control systems.

2. The data control support system of claim 1, wherein the storage device includes evaluation items for at least one of the evaluation objects, namely, the entity managing the data, the system managing the data, and the attributes of the data, as evaluation categories related to the reliability of the data, and the control device generates the new evaluation rule based on the evaluation items for the evaluation objects in the evaluation rule analysis and generation process.

3. The data control support system of claim 2, wherein the storage device includes at least one evaluation item of the transparency, quality, reliability, safety, responsibility, and honesty of the evaluation object as an evaluation category related to the reliability of the data, and the control device generates the new evaluation rule based on the evaluation items for the evaluation object in the evaluation rule analysis and generation process.

4. The data control support system of claim 1, wherein the control device performs a missing information analysis process to identify information from the newly generated evaluation rules that is missing from the evaluation rules received from the data transmission / reception control system and is necessary to determine the control content for the data, and to transmit the identified information to the data transmission / reception control system.

5. A data control system comprising: a plurality of data transmission / reception control systems each including a plurality of information processing devices, each storing an evaluation rule for determining the control content for data transmitted and received between the plurality of information processing devices; a storage device storing one or more evaluation categories for data; and a data control support system comprising: a control device that executes an evaluation rule acquisition process for acquiring the evaluation rule from each of the plurality of data transmission / reception control systems; an evaluation rule analysis and generation process for generating a new evaluation rule based on the evaluation category that includes each of the acquired evaluation rules based on the acquired evaluation rules and the evaluation category; and an evaluation rule transmission process for transmitting the new evaluation rule generated to each of the data transmission / reception control systems.

6. The data control system according to claim 5, wherein the data transmission / reception control system calculates an evaluation value relating to the new evaluation rule based on the received information.

7. The data control system according to claim 5, wherein the data transmission / reception control system controls the transmission / reception of the data based on the calculated evaluation value.

8. The data control system according to claim 5, wherein the data transmission / reception control system executes an evaluation rule input process for receiving an input of the evaluation rule and storing the input evaluation rule.

9. A data control support method, in which an information processing device stores one or more evaluation categories for data, and is configured to include multiple information processing devices, and executes an evaluation rule acquisition process to acquire evaluation rules from each of multiple data transmission / reception control systems, each of which stores evaluation rules for determining control content for data transmitted and received between the multiple information processing devices; an evaluation rule analysis and generation process to generate new evaluation rules based on the evaluation categories that encompass each of the acquired evaluation rules, based on each of the acquired evaluation rules and the evaluation categories; and an evaluation rule transmission process to transmit the new evaluation rules generated to each of the data transmission / reception control systems.

Images