Notification system, data linking device, and notification method

Abstract

A data linking device disclosed herein comprises an information acquisition unit, an inquiry unit, and a processing execution unit. The information acquisition unit acquires encrypted user location information, reservation data, map data, and a notification processing program from a location information providing device, a reservation management device, a map data providing device, and a program providing device, respectively. When the shareability of a result calculated using each of the pieces of information and the notification processing program is returned from each of the devices in response to an inquiry by the inquiry unit, the processing execution unit decrypts each of the encrypted pieces of information and the encrypted notification processing program. The processing execution unit executes the notification processing program a predetermined time before a reservation start time indicated by the reservation data, uses the map data to calculate a route and a departure time for arriving at the location of a facility, indicated by the reservation data, at the reservation start time from a location indicated by the user location information, and performs processing for notifying of the calculation result.

Description

Notification System, Data Linkage Device, and Notification Method

[0001] The present invention relates to a notification system, a data linkage device, and a notification method.

[0002] In recent years, even though a user has made a reservation at a restaurant or a hotel, etc., no-show, where the user fails to contact the store or ignores the store's contact and does not show up on the reserved date and time, has become a social problem. Such a no-show is also called a non-attendance cancellation. As a countermeasure against non-attendance cancellations, a News Release was issued by the Ministry of Economy, Trade and Industry on November 1, 2018. Among them, a study session of experts on the improvement of the external environment for the high value-added of the service industry (FY2017 entrusted research project of the Ministry of Economy, Trade and Industry) announced a "Report on Countermeasures against No-show (Non-attendance Cancellations at Restaurants)" (see Non-Patent Document 1). In the report of Non-Patent Document 1, reconfirmation of SMS (Short Message Service) by an IT (Information Technology) reservation system is mentioned.

[0003] As a countermeasure against the non-attendance cancellation problem, it is desirable to suppress non-attendance cancellations, immediate cancellations, lateness, etc. as much as possible and to encourage a state where the user can surely arrive at the store at the reserved time. Therefore, a method of notifying the user at a preset time, such as a time before a predetermined time of the reserved time, can be considered. However, with this method, even if the user notices the notification, depending on the time when the user notices, it may already be too late to make it to the reservation start time, so it cannot be said to be sufficient as a countermeasure against immediate cancellations and lateness suppression.

[0004] On the other hand, there is a system that notifies the user terminal whether the user is late for the scheduled arrival time (for example, see Patent Document 1). In this system, the required time information to a passing point or a destination, and the departure time are transmitted from the user terminal to the server device. The server device calculates the scheduled arrival time to the passing point or the destination from the received departure time, and determines whether the user is late for the scheduled arrival time.

[0005] Furthermore, there is an information processing system that, upon receiving data processing proposals from various organizations, obtains approval from each of them, reaches an agreement, acquires the data, generates a processing environment based on the proposed content, and executes the processing (see, for example, Patent Document 2). After executing the processing, this information processing system discards the created processing environment.

[0006] Japanese Patent Publication No. 2007-328587 Japanese Patent Publication No. 2024-54308

[0007] "No-show (Unauthorized Cancellation in Restaurants) Countermeasures Report," Expert Study Group on Improving the External Environment for High Value-Added Services in the Service Industry, 2018, Internet. <URL:https: / / www.aichi-inshoku.or.jp / ai_cms / wp-content / uploads / 2018 / 11 / 444fac2ea9f294cc5d5dbe02557ee654.pdf>

[0008] The technology described in Non-Patent Document 1 is a simple IT reservation system that sends a notification at a predetermined time (a specified time before the reservation time). However, such reconfirmation is not sufficient as a measure to prevent last-minute cancellations and lateness.

[0009] Furthermore, according to the technology described in Patent Document 1, it is expected that calculating and notifying users whether or not they are late for their scheduled arrival time will encourage last-minute cancellations and notification of lateness. However, with the technology described in Patent Document 1, if the user is already late, it may create a gap in the reservation time that the facility was originally scheduled to provide service. Therefore, it is difficult to use this as a proactive measure to address the needs of facilities that want to reduce lateness.

[0010] According to the technology described in Patent Document 2, data is received from multiple organizations, processed based on mutual agreement, and the data is kept confidential without any exchange between them, thus promoting the use of data between organizations. However, the timing of transmission is crucial for preventing no-shows. Therefore, sending processing results to specific users at specific times is not sufficient as a proactive measure from facilities that want to prevent unauthorized cancellations and tardiness.

[0011] In view of the above circumstances, the present invention aims to provide a notification system, a data linkage device, and a notification method that can help reduce unauthorized cancellations and lateness of reservations by users while ensuring the security of user information.

[0012] A notification system according to one aspect of the present invention comprises: a location information providing device that stores user location information indicating the location of a user; a reservation management device that stores reservation data indicating the location of a facility reserved by the user and the reservation start time, which is the start time of the reserved time; a map data providing device that stores map data indicating information about a map or transportation route; a program providing device that stores a notification processing program describing an algorithm that calculates the route and start time of travel from the user's location to the facility's location at the reservation start time using the map data and notifies the calculation result; and a data linkage device that executes the notification processing program using the user location information, the reservation data and the map data, wherein the data linkage device receives the encrypted user location information from the location information providing device, the encrypted reservation data from the reservation management device, and the encrypted map data from the map data providing device, and the program providing device The system includes: an information acquisition unit that acquires the encrypted notification processing program; an inquiry unit that inquires with the location information providing device, the reservation management device, the map data providing device, and the program providing device whether or not the user location information, the reservation data, the map data, and the calculation results using the notification processing program can be shared; and a processing execution unit that, when the location information providing device, the reservation management device, the map data providing device, and the program providing device return a response indicating that sharing is permitted, decrypts the encrypted user location information, the reservation data, the map data, and the notification processing program, executes the notification processing program a predetermined time before the reservation start time indicated by the reservation data, calculates the route and start time of travel from the user's location indicated by the user location information to the facility's location indicated by the reservation data at the reservation start time using the map data, and performs processing to notify the calculated route and start time of travel.

[0013] A data linkage device according to one aspect of the present invention includes an information acquisition unit that acquires encrypted user location information from a location information providing device that stores user location information indicating the location of a user; encrypted reservation data from a reservation management device that stores reservation data indicating the location of a facility reserved by the user and the reservation start time, which is the start time of the reserved time; encrypted map data from a map data providing device that stores map data indicating information about maps or transportation routes; and an encrypted notification processing program from a program providing device that stores a notification processing program describing an algorithm that calculates the route and start time of travel from the user's location to the facility's location at the reservation start time using the map data and notifies the calculation result; and the location information providing device, the reservation management device, and the map data providing device. The system includes: an inquiry unit that inquires with the supply device and the program supply device whether it is possible to share the user location information, the reservation data, the map data, and the calculation results using the notification processing program; and a processing execution unit that, when the location information supply device, the reservation management device, the map data supply device, and the program supply device return a response indicating that sharing is possible, decrypts the encrypted user location information, the reservation data, the map data, and the notification processing program, executes the notification processing program a predetermined time before the reservation start time indicated by the reservation data, calculates the route and start time of travel from the user's location indicated by the user location information to the facility's location indicated by the reservation data at the reservation start time using the map data, and performs processing to notify the calculated route and start time of travel.

[0014] An information acquisition step of a notification method according to one aspect of the present invention involves acquiring encrypted user location information from a location information providing device that stores user location information indicating the user's location, encrypted reservation data from a reservation management device that stores reservation data indicating the location of a facility reserved by the user and the reservation start time which is the start time of the reserved time, encrypted map data from a map data providing device that stores map data indicating information about maps or transportation routes, and encrypted notification processing program from a program providing device that stores a notification processing program describing an algorithm that calculates the route and start time of travel from the user's location to the facility location at the reservation start time using the map data and notifies the calculation result, and the location information providing device, the reservation management device, the map data providing device The system also includes an inquiry step of inquiring with the program provider whether it is possible to share the user location information, the reservation data, the map data, and the calculation results using the notification processing program, and a processing execution step of, when the location information provider, the reservation management device, the map data provider, and the program provider return that it is possible to share, decrypting the encrypted user location information, the reservation data, the map data, and the notification processing program, executing the notification processing program a predetermined time before the reservation start time indicated by the reservation data, calculating the route and start time of travel from the user's location indicated by the user location information to the facility's location indicated by the reservation data at the reservation start time using the map data, and notifying the calculated route and start time of travel.

[0015] This invention makes it possible to help reduce unauthorized cancellations and lateness by users who have made reservations, while ensuring the security of user information.

[0016] This is a schematic block diagram showing the system configuration of a notification system according to an embodiment of the present invention. This is a block diagram showing an example of the functional configuration of a terminal device according to the same embodiment. This is a block diagram showing an example of the functional configuration of a location information providing device according to the same embodiment. This is a block diagram showing an example of the functional configuration of a reservation management device according to the same embodiment. This is a block diagram showing an example of the functional configuration of a map data providing device according to the same embodiment. This is a block diagram showing an example of the functional configuration of a processing logic providing device according to the same embodiment. This is a block diagram showing an example of the functional configuration of a data linking device according to the same embodiment. This is a block diagram showing an example of the functional configuration of a notification device according to the same embodiment. This is a diagram showing the hardware configuration of an information processing device applied to the same embodiment.

[0017] Embodiments of the present invention will be described in detail below with reference to the drawings.

[0018] Figure 1 is a schematic block diagram showing the system configuration of notification system 1 according to one embodiment of the present invention. Notification system 1 implements notification services using a secure data linkage platform. The secure data linkage platform uses hardware encryption technology to process data while keeping confidential the data owned by each of the multiple data providers and the programs that analyze that data.

[0019] The notification system 1 includes a user terminal device 10, a location information provider's

[0020] The terminal device 10, the location information providing device 20, the reservation management device 30, and the notification device 70 can transmit and receive data via the network 81. In addition, the location information providing device 20, the reservation management device 30, the map data providing device 40, the processing logic providing device 50, the data linkage device 60, and the notification device 70 can transmit and receive data via the network 82.

[0021] Network 81 is a network using wireless communication, but it may also be a network using wired communication. Network 81 may be configured using, for example, a mobile phone network or the Internet, or it may be configured using a local area network (LAN). Network 82 may be configured by combining multiple networks.

[0022] Network 82 may be a wireless communication network or a wired communication network. Network 82 may be configured using, for example, the Internet or a LAN. Network 82 may be configured by combining multiple networks. Network 81 and network 82 may be the same network.

[0023] The user makes a reservation to use a facility. Examples of facilities that users can reserve include, but are not limited to, restaurants, accommodations, hospitals, and beauty salons. The terminal device 10 used by the user is a portable computer device such as a smartphone, tablet, or personal computer.

[0024] A location information provider is a business that owns and provides user information. For example, a location information provider is a business that holds user location information, such as a mobile communication carrier. In this case, the location information of the terminal device 10 owned by the user is used as the user's location information. The location information provider 20 owned by the location information provider stores user data. User data is data that includes at least user location information. For example, user data is data that links user identification information and user location information. For user location information, the mobile terminal location information acquired by the location information provider 20 of a mobile communication carrier that provides the mobile communication network used as network 81 can be used. The location information provider 20 may also acquire location information measured by a location measuring device such as a Global Positioning System (GPS) built into the terminal device 10 from the terminal device 10 and use that as mobile terminal location information, or it may acquire mobile terminal location information based on the location of one or more base stations, etc., from which the terminal device 10 is wirelessly communicating or capable of receiving wireless signals from the terminal device 10.

[0025] The reservation system operator provides information about the user's schedule or reservation. The reservation system operator is, for example, the operator of the facility to be reserved, or a reservation management service provider that is contracted by the operator to manage the acceptance of reservations. The reservation management device 30 owned by the reservation system operator stores reservation data. The reservation data is data that indicates information about the user's schedule or reservation. For example, the reservation data is data that links user identification information, the reservation start time, and the location of the facility reserved by the user.

[0026] A map data provider is a business that owns and provides information on either maps or transportation routes, or both. There may be one or more map data providers. Information on maps with different coverage or accuracy, or on different routes, may be provided by multiple map data providers. A map data provider's map data device 40 stores map data. Map data is data that represents information on either maps or routes, or both. Map data is used as the basis for calculating travel routes to a destination.

[0027] The processing logic provider is a business operator that owns a processing program in which the processing logic is described. The processing logic providing device 50 owned by the processing logic provider stores the notification processing program. The notification processing program is data that describes an algorithm (processing logic) that uses user data, reservation data, and map data to calculate a travel route and travel start time that will allow the user to arrive at the reserved facility by the reservation start time, using the user's position at a predetermined time as the travel start position, and notifies the user's terminal device 10. The user's position at a predetermined time is obtained from the user position information included in the user data, and the reservation start time and the location of the reserved facility are obtained from the reservation start time and facility location information included in the reservation data.

[0028] The data linkage device 60 realizes a secure data linkage platform. The secure data linkage platform is a platform operated by a data linkage platform provider. The data linkage platform provider is a neutral third party, separate from the businesses that own various types of data and the businesses that own the algorithms and programs that process that data. The data linkage device 60 manages the policies of each business through the secure data linkage platform. These policies include the terms of use for the data and programs provided by each business. The secure data linkage platform securely stores the data and programs held by each company on the platform in accordance with the policies and distributes the processing results.

[0029] The data linkage device 60 executes a notification processing program obtained from the processing logic provider 50 and uses user data obtained from the location information provider 20, reservation data obtained from the reservation management device 30, and map data obtained from the map data provider 40 to calculate a travel route and travel start time that will allow the user to arrive at the reserved facility by the reservation start time, using the user's location at a predetermined time as the travel start position. The data linkage device 60 outputs result data showing the calculation results of the travel route and travel start time to the notification device 70.

[0030] The notification service provider is a business that provides a service to notify users of information necessary to arrive at the reserved facility on time, based on a request from the reserved facility. The notification device 70 of the notification service provider receives result data indicating the travel route and travel start time calculated by the data linkage device 60 using the secure data linkage platform, and notifies the user's terminal device 10 of the received result data.

[0031] The notification service provider and the processing logic provider may be the same company or different companies. Similarly, the notification service provider and the data integration platform provider may be the same company or different companies.

[0032] Examples of the functional configurations of each device will be described. Figure 2 is a schematic block diagram showing a specific example of the functional configuration of the terminal device 10. The terminal device 10 is configured using information devices such as a smartphone, tablet, or personal computer. The terminal device 10 includes a communication unit 11, an input unit 12, an output unit 13, a storage unit 14, a control unit 15, and a location information acquisition unit 16.

[0033] The communication unit 11 is a communication device. The communication unit 11 may be configured, for example, as a network interface. The communication unit 11 communicates data with other devices via the network 81 in accordance with the control of the control unit 15. The communication unit 11 is a device that performs wireless communication, but it may also be a device that performs wired communication.

[0034] The input unit 12 is configured using existing input devices such as a keyboard, pointing device (mouse, tablet, etc.), buttons, or touch panel. The input unit 12 is operated by the user when inputting user instructions to the terminal device 10. The input unit 12 may also be an interface for connecting the input device to the terminal device 10. In this case, the input unit 12 inputs the input signal generated in the input device in response to the user's input to the terminal device 10. The input unit 12 may also be configured using a microphone and a speech recognition device. In this case, the input unit 12 acquires the acoustic signal generated by the user's speech, performs speech recognition on the words spoken by the user, and inputs the recognized string information to the terminal device 10. The speech recognition process may be performed by the control unit 15. The input unit 12 can be configured in any way that allows user instructions to be input to the terminal device 10.

[0035] The output unit 13 outputs information in a format that the user can recognize. The output unit 13 may be an image display device such as a liquid crystal display or an organic EL (Electro-Luminescence) display. The output unit 13 may also be an interface for connecting an image display device to its own device (terminal device 10). In this case, the output unit 13 generates a video signal for displaying image data and outputs the video signal to the image display device connected to it. The output unit 13 may also be a device that outputs sound, such as a speaker. The output unit 13 may also be an interface for connecting an audio output device such as a speaker or headphones to the terminal device 10. In this case, the output unit 13 generates an audio signal for playing audio data and outputs the audio signal to the audio output device connected to it. The output unit 13 may also be configured as a touch panel integrated with the input unit 12.

[0036] The storage unit 14 is configured using a storage device such as a magnetic hard disk drive or a semiconductor storage device. The storage unit 14 stores data used by the control unit 15.

[0037] The control unit 15 is composed of a processor such as a CPU (Central Processing Unit) and memory (main memory). The control unit 15 functions when the processor executes a program. Note that all or part of the functions of the control unit 15 may be implemented using hardware such as an ASIC (Application Specific Integrated Circuit), a PLD (Programmable Logic Device), or an FPGA (Field Programmable Gate Array). The above program may be recorded on a computer-readable recording medium. Computer-readable recording media include, for example, portable media such as flexible disks, magneto-optical disks, ROMs, CD-ROMs, and semiconductor memory devices (e.g., SSDs: Solid State Drives), as well as storage devices such as hard disks and semiconductor memory devices built into computer systems. The above program may be transmitted via a telecommunications line.

[0038] The control unit 15 may, for example, execute an application installed on its own device (terminal device 10). A specific example of such an application is an application provided to the terminal device 10 as a dedicated application for the notification system 1. Another specific example of such an application is a web browser application. Such an application may be pre-installed on the terminal device 10, or it may be downloaded each time processing is performed. For example, if it is implemented as a web browser application, the terminal device 10 may download and execute the application from a device specified by the web server (for example, the web server itself or another server) in response to the terminal device 10 connecting to a specific web server. The control unit 15 operates according to the program of the application being executed.

[0039] The control unit 15 controls the terminal device 10 in response to user operations using the input unit 12 and information received from external devices. For example, the control unit 15 transmits information input by the user through the operation of the input unit 12 to an external device using the communication unit 11. For example, when the control unit 15 receives information transmitted from the notification device 70 via the network 81 to the communication unit 11, it generates screen data based on the received information and displays the screen data on the output unit 13. Such screen data includes images and characters that represent the information transmitted from the notification device 70. For example, when the control unit 15 receives information transmitted from the notification device 70 via the network 81 to the communication unit 11, it may generate audio data based on the received information and output the audio data from the output unit 13.

[0040] The location information acquisition unit 16 acquires location information of the current location of the terminal device 10. The location information acquisition unit 16 acquires location information of the current location by means of communication with a satellite positioning system or a base station of a mobile communication network, for example. Specific examples of satellite positioning systems include GPS (Global Positioning System) and Galileo. The location information acquisition unit 16 outputs the acquired location information to the control unit 15. The control unit 15 notifies the location information provider device 20 of the location information acquired by the location information acquisition unit 16 as user location information.

[0041] Figure 3 is a schematic block diagram showing a specific example of the functional configuration of the location information providing device 20. The location information providing device 20 is configured using information processing equipment such as a personal computer or a server device. The location information providing device 20 includes a communication unit 21, an input unit 22, an output unit 23, a storage unit 24, and a control unit 25.

[0042] The communication unit 21 is a communication device. The communication unit 21 may be configured, for example, as a network interface. The communication unit 21 communicates data with an external device via network 81 or network 82 in accordance with the control of the control unit 25. The communication unit 21 may be a device that performs wireless communication or a device that performs wired communication.

[0043] The configurations and functions of the input unit 22 and the output unit 23 are the same as those of the input unit 12 and the output unit 13 provided in the terminal device 10 shown in FIG. 2. The storage unit 24 is configured using a storage device such as a magnetic hard disk device or a semiconductor storage device. The storage unit 24 stores user data and user data usage condition information. The user data is information associating a user ID, user location information, and a user address. The user ID is information that uniquely identifies a user. The user location information indicates the current location of the user. The user address indicates the destination when sending a notification to the user's terminal device 10. The user data usage condition information indicates the usage conditions (policies) of the user data. Specifically, the usage conditions are information specifying an enterprise or user role permitted to use, usage period, range of available information (data items and content), usage amount, and the like.

[0044] The control unit 25 is configured using a processor such as a CPU and a memory (main storage device). The control unit 25 functions when the processor executes a program. Note that all or part of each function of the control unit 25 may be realized using hardware such as an ASIC, a PLD, or an FPGA. The above program may be recorded on a computer-readable recording medium. The above program may be transmitted via a telecommunication line. Further, similar to the control unit 15 provided in the terminal device 10, the control unit 25 may execute an application installed in the own device (location information providing device 20), such as an application of a WEB browser.

[0045] The control unit 25 controls the location information providing device 20 in response to user operations using the input unit 22 and information received from external devices. For example, the control unit 25 transmits data from the communication unit 21 to an external device according to instructions input by the user through the operation of the input unit 22. For example, when the control unit 25 receives information transmitted from an external device in the communication unit 21, it generates screen data based on the received information and displays the screen data on the output unit 23. Such screen data includes images and characters that represent the received information. Alternatively, for example, when the control unit 25 receives information in the communication unit 21, it may generate audio data based on the received information and output the audio data from the output unit 23. For example, when the control unit 25 receives user location information in the communication unit 21, it may update the user location information in the user data stored in the storage unit 24 based on the received user location information. For example, the control unit 25 reads user data and user data usage condition information from the storage unit 24 and transmits them to the data linkage device 60. Furthermore, the control unit 25 receives inquiries from the data linkage device 60 and sends back a response to the received inquiry.

[0046] Figure 4 is a schematic block diagram showing a specific example of the functional configuration of the reservation management device 30. The reservation management device 30 is configured using information processing equipment such as a personal computer or a server device. The reservation management device 30 includes a communication unit 31, an input unit 32, an output unit 33, a storage unit 34, and a control unit 35.

[0047] The configurations and functions of the communication unit 31, the input unit 32, and the output unit 33 are the same as the functions and configurations of the communication unit 21, the input unit 22, and the output unit 23 provided in the location information providing device 20 shown in FIG. 3, respectively. The storage unit 34 is configured using a storage device such as a magnetic hard disk device or a semiconductor storage device. The storage unit 34 stores reservation data and reservation data usage condition information. The reservation data includes a user ID and facility reservation information. The facility reservation information is information that associates a reservation start time, reservation facility information, and reservation facility location information. The reservation start time is the start time of the reserved time. The reservation facility information is information that identifies the facility reserved by the user. The reservation facility location information is information that indicates the location of the facility reserved by the user. Note that the reservation data may further include information on one or both of the means of transportation and the advance notice time. The means of transportation is the means of transportation used by the user to move to the reserved facility. The advance notice time indicates the time before which the user is to be notified before arriving at the reserved facility, which is a certain number of minutes earlier than the required time to reach the reserved facility. The reservation data usage condition information is information that specifies the usage conditions (policies) of the reservation data.

[0048] The control unit 35 is configured using a processor such as a CPU and a memory (main storage device). The control unit 35 functions when the processor executes a program. Note that all or part of each function of the control unit 35 may be implemented using hardware such as an ASIC, a PLD, or an FPGA. The above program may be recorded on a computer-readable recording medium. The above program may be transmitted via a telecommunication line. Also, the control unit 35 may execute an application installed in the self-device (reservation management device 30), such as an application of a WEB browser, in the same manner as the control unit 15 provided in the terminal device 10.

[0049] The control unit 35 controls the reservation management device 30 in response to user operations using the input unit 32 and information received from external devices. For example, the control unit 35 transmits data from the communication unit 31 to an external device according to instructions entered by the user operating the input unit 32. For example, when the control unit 35 receives information transmitted from an external device at the communication unit 31, it generates screen data based on the received information and displays the screen data on the output unit 33. Such screen data includes images and characters that represent the received information. Alternatively, for example, when the control unit 35 receives information at the communication unit 31, it may generate audio data based on the received information and output the audio data from the output unit 33. For example, the control unit 35 reads reservation data and reservation data usage condition information from the storage unit 34 and transmits it to the data linkage device 60. The control unit 35 also receives inquiries from the data linkage device 60 and sends back a response to the received inquiry.

[0050] Figure 5 is a schematic block diagram showing a specific example of the functional configuration of the map data providing device 40. The map data providing device 40 is configured using information processing equipment such as a personal computer or a server device. The map data providing device 40 includes a communication unit 41, an input unit 42, an output unit 43, a storage unit 44, and a control unit 45.

[0051] The configurations and functions of the communication unit 41, input unit 42, and output unit 43 are the same as those of the location information providing device 20 shown in Figure 3. However, the communication unit 41 does not need to perform data communication via the network 81. The storage unit 44 is configured using a storage device such as a magnetic hard disk drive or a semiconductor storage device. The storage unit 44 stores map data and map data usage condition information. The map data is data that shows information about a map and / or the routes of various transportation systems. The map data usage condition information is information that specifies the usage conditions (policies) for the map data.

[0052] The control unit 45 is composed of a processor such as a CPU and memory (main memory). The control unit 45 functions when the processor executes a program. Note that all or part of the functions of the control unit 45 may be implemented using hardware such as an ASIC, PLD, or FPGA. The program may be recorded on a computer-readable recording medium. The program may also be transmitted via a telecommunications line. Furthermore, the control unit 45, like the control unit 15 in the terminal device 10, may execute applications installed on its own device (map data providing device 40), such as a web browser application.

[0053] The control unit 45 controls the map data providing device 40 in response to user operations using the input unit 42 and information received from external devices. For example, the control unit 45 transmits data from the communication unit 41 to an external device according to instructions input by the user through the operation of the input unit 42. For example, when the control unit 45 receives information transmitted from an external device at the communication unit 41, it generates screen data based on the received information and displays the screen data on the output unit 43. Such screen data includes images and characters that represent the received information. Alternatively, for example, when the control unit 45 receives information at the communication unit 41, it may generate audio data based on the received information and output the audio data from the output unit 43. For example, the control unit 45 reads map data and map data usage condition information from the storage unit 44 and transmits it to the data linkage device 60. The control unit 45 also receives inquiries from the data linkage device 60 and sends back a response to the received inquiry.

[0054] Figure 6 is a schematic block diagram showing a specific example of the functional configuration of the processing logic providing device 50. The processing logic providing device 50 is configured using information processing equipment such as a personal computer or a server device. The processing logic providing device 50 includes a communication unit 51, an input unit 52, an output unit 53, a storage unit 54, and a control unit 55.

[0055] The configurations and functions of the communication unit 51, input unit 52, and output unit 53 are the same as those of the communication unit 21, input unit 22, and output unit 23 of the location information providing device 20 shown in Figure 3. However, the communication unit 51 does not need to perform data communication via the network 81. The storage unit 54 is configured using a storage device such as a magnetic hard disk drive or a semiconductor storage device. The storage unit 54 stores programs in which processing logic is described, such as notification processing programs. Furthermore, the storage unit 54 stores program usage condition information. Program usage condition information is information that specifies the usage conditions (policies) of the notification processing program.

[0056] The control unit 55 is configured using a processor such as a CPU and memory (main memory). The control unit 55 functions when the processor executes a program. Note that all or part of the functions of the control unit 55 may be implemented using hardware such as an ASIC, PLD, or FPGA. The program may be recorded on a computer-readable recording medium. The program may also be transmitted via a telecommunications line. Furthermore, the control unit 55, like the control unit 15 in the terminal device 10, may execute applications installed on its own device (processing logic provider 50), such as a web browser application.

[0057] The control unit 55 controls the processing logic provider 50 in response to user operations using the input unit 52 and information received from external devices. For example, the control unit 55 transmits data from the communication unit 51 to an external device according to instructions input by the user through the operation of the input unit 52. For example, when the control unit 55 receives information transmitted from an external device at the communication unit 51, it generates screen data based on the received information and displays the screen data on the output unit 53. Such screen data includes images and characters that represent the received information. Alternatively, for example, when the control unit 55 receives information at the communication unit 51, it may generate audio data based on the received information and output the audio data from the output unit 53. For example, the control unit 55 reads notification processing program and program usage condition information from the storage unit 54 and transmits it to the data linkage device 60. The control unit 55 also receives inquiries from the data linkage device 60 and sends back a response to the received inquiry.

[0058] Figure 7 is a schematic block diagram showing a specific example of the functional configuration of the data linkage device 60. The data linkage device 60 is configured using information processing equipment such as a personal computer or a server. The data linkage device 60 includes a communication unit 61, an input unit 62, an output unit 63, a storage unit 64, and a control unit 65.

[0059] The configuration and functions of the communication unit 61, input unit 62, and output unit 63 are the same as those of the communication unit 21, input unit 22, and output unit 23 of the location information providing device 20 shown in Figure 3. However, the communication unit 61 does not need to perform data communication via the network 81.

[0060] The storage unit 64 is configured using a storage device such as a magnetic hard disk drive or a semiconductor storage device. The storage unit 64 stores data used by the control unit 65. The storage unit 64 may function as, for example, a data storage unit 641, a processing logic storage unit 642, a policy storage unit 643, and an agreement storage unit 644.

[0061] The data storage unit 641 stores user data received from the location information provider 20, reservation data received from the reservation management device 30, and map data received from the map data provider 40. The processing logic storage unit 642 stores notification processing programs received from the processing logic provider 50. The policy storage unit 643 stores user data usage condition information received from the location information provider 20, reservation data usage condition information received from the reservation management device 30, map data usage condition information received from the map data provider 40, and program usage condition information received from the processing logic storage unit 642. The agreement storage unit 644 stores agreements between data and algorithm providers.

[0062] The control unit 65 is configured using a processor such as a CPU and memory. The control unit 65 functions as a platform unit 651 when the processor executes a program. Note that all or part of the functions of the control unit 65 may be implemented using hardware such as an ASIC, PLD, or FPGA. The program may be recorded on a computer-readable recording medium. The program may also be transmitted via a telecommunications line.

[0063] The platform unit 651 realizes a secure data sharing platform. The secure data sharing platform uses hardware encryption technology to enable data processing while keeping the data owned by multiple data providers and the programs that analyze that data confidential. On the secure data sharing platform, the platform unit 651 functions as an information acquisition unit 652, a request reception unit 653, a query unit 654, an agreement recording unit 655, and a processing execution unit 656.

[0064] The information acquisition unit 652 writes user data received from the location information provider 20, reservation data received from the reservation management device 30, and map data received from the map data provider 40 to the data storage unit 641, and writes the notification processing program received from the processing logic provider 50 to the processing logic storage unit 642. Furthermore, the information acquisition unit 652 writes user data usage condition information received from the location information provider 20, reservation data usage condition information received from the reservation management device 30, map data usage condition information received from the map data provider 40, and program usage condition information received from the processing logic provider 50 to the policy storage unit 643.

[0065] The request receiving unit 653 receives an execution request for a notification processing algorithm from the notification device 70. The inquiry unit 654 inquires with the location information providing device 20, reservation management device 30, map data providing device 40, and processing logic providing device 50, which are the providers of the user data, reservation data, map data, and notification processing program used in the execution request received from the notification device 70, regarding the provision of data or algorithms. If an agreement to provide data or algorithms is obtained as a result of the inquiry by the inquiry unit 654, the agreement recording unit 655 writes information indicating that an agreement has been obtained to the agreement storage unit 644. If an agreement to provide data or algorithms is returned from each device, the processing execution unit 656 executes a notification processing program that describes a notification processing algorithm (processing logic) using user data, reservation data, and map data. The processing execution unit 656 outputs the results obtained from executing the notification processing program to the notification device 70.

[0066] Figure 8 is a schematic block diagram showing a specific example of the functional configuration of the notification device 70. The notification device 70 is configured using an information processing device such as a personal computer or a server. The notification device 70 includes a communication unit 71, an input unit 72, an output unit 73, a storage unit 74, and a control unit 75.

[0067] The configuration and functions of the communication unit 71, input unit 72, and output unit 73 are the same as those of the communication unit 21, input unit 22, and output unit 23 of the location information providing device 20 shown in Figure 3. The storage unit 74 is configured using a storage device such as a magnetic hard disk drive or a semiconductor storage device. The storage unit 74 stores data necessary for the control unit 75 to perform processing.

[0068] The control unit 75 is composed of a processor such as a CPU and memory (main memory). The control unit 55 functions when the processor executes a program. Note that all or part of the functions of the control unit 75 may be implemented using hardware such as an ASIC, PLD, or FPGA. The above program may be recorded on a computer-readable recording medium. The above program may be transmitted via a telecommunications line. Furthermore, the control unit 75 may execute applications installed on its own device (notification device 70), such as a web browser application, similar to the control unit 15 of the terminal device 10.

[0069] The control unit 75 controls the notification device 70 in response to user operations using the input unit 72 and information received from external devices. For example, the control unit 75 transmits data from the communication unit 71 to an external device according to instructions input by the user through the operation of the input unit 72. For example, when the control unit 75 receives information transmitted from an external device at the communication unit 71, it generates screen data based on the received information and displays the screen data on the output unit 73. Such screen data includes images and characters that represent the received information. Alternatively, for example, when the control unit 75 receives information at the communication unit 71, it may generate audio data based on the received information and output the audio data from the output unit 73. For example, the control unit 75 requests the data linkage device 60 to execute a notification processing algorithm. The control unit 75 also receives the execution result of the notification processing program for executing the notification processing algorithm from the data linkage device 60 and transmits the received execution result to the terminal device 10.

[0070] Next, we will explain the operation of notification system 1.

[0071] (Pre-processing) In pre-processing, the data linkage device 60 acquires various data and notification processing programs.

[0072] The control unit 25 of the location information providing device 20 acquires user location information from the terminal device 10 as needed and updates the user location information in the user data stored in the storage unit 24 with the received user location information. The control unit 25 may also receive user location information acquired based on the location of a base station or the like that is receiving the wireless signal from the terminal device 10. The control unit 25 reads the latest user data from the storage unit 24 at predetermined time intervals and transmits the encrypted user data, obtained by hardware-encrypting the read user data, to the secure data linkage platform of the data linkage device 60. At this time, the control unit 25 may also read user data usage condition information from the storage unit 24 and transmit it to the secure data linkage platform of the data linkage device 60.

[0073] The control unit 35 of the reservation management device 30 transmits encrypted reservation data, which is hardware-encrypted reservation data read from the storage unit 34, to the secure data linkage platform of the data linkage device 60. At this time, the control unit 35 may also read user reservation data usage condition information from the storage unit 34 and transmit it to the secure data linkage platform of the data linkage device 60.

[0074] The control unit 35 of the reservation management device 30 may send encrypted reservation data to the secure data linkage platform each time a new reservation or reservation change occurs, or it may send encrypted reservation data in batches at predetermined time intervals.

[0075] The control unit 45 of the map data provisioning device 40 transmits encrypted map data, which is hardware-encrypted map data read from the storage unit 44, to the secure data linkage platform of the data linkage device 60. At this time, the control unit 45 may also transmit map data usage condition information to the secure data linkage platform of the data linkage device 60.

[0076] The control unit 55 of the processing logic provider 50 transmits the encrypted notification processing program, which is the notification processing program read from the storage unit 54 and encrypted using hardware, to the secure data linkage platform of the data linkage device 60. At this time, the control unit 55 of the processing logic provider 50 may also read the notification processing program policy information from the storage unit 54 and transmit it to the data linkage device 60.

[0077] The information acquisition unit 652, which operates on the secure data linkage platform of the data linkage device 60, stores encrypted user data received from the location information providing device 20, encrypted reservation data received from the reservation management device 30, and encrypted map data received from the map data providing device 40 in the data storage unit 641. The information acquisition unit 652 also stores the encrypted notification processing program received from the processing logic providing device 50 in the processing logic storage unit 642. Furthermore, if information specifying usage conditions is attached to each data or program, the information acquisition unit 652 stores the information of the specified usage conditions as a policy, linked to the data, in the policy storage unit 643. In other words, the information acquisition unit 652 writes the program usage condition information to the encrypted notification processing program, the user data usage conditions to the encrypted user data, the reservation data usage condition information to the encrypted reservation data, and the map data usage condition information to the encrypted map data in the policy storage unit 643.

[0078] (Notification Processing) Figure 9 is a flowchart showing the notification processing of notification system 1. After the preprocessing described above, notification system 1 performs the processing shown in Figure 9.

[0079] The control unit 75 of the notification device 70 transmits a usage request to the secure data linkage platform of the data linkage device 60. Specifically, the usage request is information that includes at least the data to be used, the algorithm to be used, and the purpose of use. The data to be used indicates the data that the notification service provider wishes to use. The data to be used is configured to include the use of user data, reservation data, and map data. The algorithm to be used indicates the algorithm that the notification service provider wishes to use. The algorithm to be used is configured to include the use of a notification processing algorithm (notification processing logic). The request receiving unit 653, which operates on the secure data linkage platform of the data linkage device 60, receives the usage request from the notification device 70 (step S1).

[0080] When the request receiving unit 653 receives a usage request, it may receive a response from the notification device 70 indicating whether or not it can comply with the usage conditions for each data and algorithm that the notification service provider wishes to use. That is, if the provider's usage conditions information is linked to one or more of the encrypted user data, encrypted reservation data, and encrypted map data obtained by encrypting each data indicated by the usage request data, and the encrypted notification processing program obtained by encrypting the program of the notification processing algorithm indicated by the usage request algorithm, and stored in the storage unit 64, the request receiving unit 653 reads out that usage conditions information and notifies the notification device 70. The provider's usage conditions information includes user data usage conditions information, reservation data usage conditions information, map data usage conditions information, and program usage conditions information.

[0081] The control unit 75 of the notification device 70 outputs the usage conditions information received from the data linkage device 60 to the output unit 73. The notification service provider inputs a response via the input unit 72 indicating whether or not they can comply with the usage conditions, based on the outputted usage conditions information. The control unit 75 transmits the input response to the data linkage device 60. Alternatively, the control unit 75 may transmit a response determined by whether or not the received usage conditions information matches the compliant usage conditions previously registered in the storage unit 74. When the platform unit 651 of the data linkage device 60 receives a response from the notification device 70 indicating that the notification service provider can comply with the usage conditions, it executes the following processes from step S2 onwards. If it receives a response indicating that they cannot comply, it terminates the process shown in Figure 9.

[0082] Furthermore, the reservation facilities included in the reservation data requested as data to be used in response to the request are reservation facilities that have requested notification services from the notification service provider. Therefore, the scope of reservation data subject to the request is at least reservation data relating to reservation facilities that have requested notification services from the notification service provider.

[0083] The inquiry unit 654 of the data linkage device 60 inquires with the providers of the data and algorithms requested for use, as set in the usage request, whether or not to permit their use (step S2). Specifically, the inquiry unit 654 sends an inquiry to the location information provider's location information provider's location information provider's location information provider's reservation management device 30 of the reservation system provider's reservation data, the map data provider's map data provider's map data provider's map data provider's map data provider's map data provider's map data provider's map data provider's map data provider's map data provider's map data provider's map data provider's map data provider's map data provider's reservation management device 40 of the The conditions specified by the notification service provider may be information that has been previously received from the notification device 70 and stored in the storage unit 64, or information that the notification device 70 has included in the request for use and transmitted.

[0084] The control unit 25 of the location information providing device 20 outputs the received inquiry to the output unit 23. At this time, the conditions specified by the notification service provider are also output to the output unit 23. The control unit 25 transmits the response to the inquiry entered by the location information provider via the input unit 22 to the data linkage device 60 in accordance with the output. Alternatively, the control unit 25 may transmit a response determined by whether or not the conditions specified by the notification service provider match the permission conditions previously registered in the storage unit 24.

[0085] The reservation management device 30, the map data provision device 40, and the processing logic provision device 50 each perform the same processing as the location information provision device 20 and transmit the response to the inquiry to the data linkage device 60. Specifically, the control unit 35 of the reservation management device 30 outputs the received inquiry to the output unit 33. The control unit 35 transmits to the data linkage device 60 the response to the inquiry entered by the reservation service provider via the input unit 32 in response to the output, or the response determined by whether the conditions received by the inquiry match the permission conditions previously registered in the storage unit 34.

[0086] The control unit 45 of the map data provision device 40 outputs the received inquiry to the output unit 43. The control unit 45 then transmits to the data linkage device 60 an answer to the inquiry entered by the map data provider via the input unit 42, or an answer determined by whether the conditions received from the inquiry match the permission conditions previously registered in the storage unit 44.

[0087] The control unit 55 of the processing logic provider 50 outputs the received query to the output unit 53. The control unit 55 then transmits to the data linkage device 60 an answer to the query input by the processing logic provider via the input unit 52, or an answer determined by whether the conditions received by the query match the permission conditions previously registered in the storage unit 54.

[0088] Furthermore, if the notification service provider and the notification processing logic provider are the same, the inquiry unit 654 of the data linkage device 60 does not need to send an inquiry to the processing logic provider device 50.

[0089] When the agreement recording unit 655 of the data linkage device 60 receives responses granting permission to share processing results from all of the location information providing device 20, reservation management device 30, map data providing device 40, and processing logic providing device 50, it deems that an agreement regarding the sharing of processing results has been formed between the notification service provider, which is the source of the request for use of each data and algorithm, and the respective data and algorithm provider companies, and records information regarding the agreement in the agreement storage unit 644 (step S3). The information regarding the agreement includes, for example, the request for use, the conditions specified by the notification service provider, information identifying the location information providing device 20, reservation management device 30, map data providing device 40, and processing logic providing device 50 that sent the response granting permission to share, and the date and time the response was received.

[0090] After an agreement is reached between companies in step S3, the agreement recording unit 655 of the data linkage device 60 registers policy information corresponding to the agreed conditions in the agreement storage unit 644 (step S4). This policy information includes user data usage conditions information, reservation data usage conditions information, map data usage conditions information, and program usage conditions information. The processing execution unit 656 applies these policies to the transmission and reception of processing results.

[0091] The processing execution unit 656, which operates on the secure data linkage platform of the data linkage device 60, receives user identification information from the notification device 70 of the notification service provider. The processing execution unit 656 decrypts the encrypted user data, encrypted reservation data, encrypted map data, and encrypted notification processing program within a protected area such as a volatile storage area isolated from other resources. The processing execution unit 656 uses the user data, reservation data, and map data obtained through decryption to execute the notification processing algorithm described in the notification processing program (step S5).

[0092] Specifically, the processing execution unit 656 identifies reservation data in which user identification information received from the notification device 70 is set, and obtains the reservation start time and reservation facility location information from the identified reservation data. The processing execution unit 656 obtains the current user location information from the user data at a predetermined time before the reservation start time (for example, two hours before). The processing execution unit 656 uses the user's current location indicated by the obtained user location information as the starting position for movement, and calculates the movement route and movement start time to arrive at the reservation facility location indicated by the reservation facility location information by the reservation start time, using map data. The processing execution unit 656 transmits processing result data containing the calculated movement route information, movement start time information, and the user address obtained from the user data to the notification device 70 of the notification service provider (step S6).

[0093] After the processing execution unit 656 of the data linkage device 60 transmits the processing result data to the requester, it deletes the decrypted data and notification processing program that were stored within the range of a volatile memory area, etc. (step S7).

[0094] The control unit 75 of the notification device 70 of the notification service provider sends a notification containing information about the travel route and the travel start time to the user address at a predetermined time before the travel start time, based on the processing result data received from the data linkage device 60 (step S8). The control unit 15 of the terminal device 10 outputs the travel route information and the travel start time information included in the notification received from the notification device 70 to the output unit 13.

[0095] (Modification 1) In the above-described embodiment, the notification device 70 of the notification service provider specifies the identification information of the user to be notified each time in the notification processing of step S5, but the embodiment is not limited to this. For example, the notification device 70 may transmit information of the reservation target facility and service provision period specified by the notification service provider to the data linkage device 60. The request receiving unit 653 of the data linkage device 60 extracts reservation data from the reservation data stored in the data storage unit 641, in which the reservation start time is included in the service provision period indicated by the information received from the notification device 70, and which includes information of the reservation target facility indicated by the information received from the notification device 70. The platform unit 651 of the data linkage device 60 uses each extracted reservation data as the target of the notification processing and notifies the user's terminal device 10 a predetermined time before the reservation. In this case, after the reservation management device 30 provides the information of the reservation target facility and the information of the service provision period to the secure data linkage platform at the start of the notification service provision (or when the service provision contract period is renewed), the secure data linkage platform performs the following processing.

[0096] (1) The processing execution unit 656 decodes (decompresses) the map data and stores it in a protected area such as a volatile memory area.

[0097] (2) At predetermined intervals (for example, every day), the processing execution unit 656 decodes (decodes) the reservation data included in the notification target time interval from the reservation data and stores it in a protected area such as a volatile memory area. For example, the processing execution unit 656 decodes reservation data whose reservation start time falls within 24 hours after the processing execution time as reservation data included in the notification target time interval.

[0098] (3) The processing execution unit 656 expands (decodes) the user data identified by the user ID set in each reservation data into a protected area such as a volatile storage area at a predetermined time before the reservation start time of each reservation data. The processing execution unit 656 executes a notification processing program and uses the user's current location obtained from the user data as the starting position to calculate the travel route and travel start time required to reach the location of the reserved facility by the reservation start time, using map data. The processing execution unit 656 transmits the calculated travel route information, travel start time information, and the user address obtained from the user data to the notification device 70 of the notification service provider.

[0099] (Modification 2) In addition to the user ID and facility reservation information, the reservation data may also include information on the mode of transportation selected by the user. In this case, when the processing execution unit 656 of the data linkage device 60 executes the notification processing program in step S5 of Figure 9 to calculate the travel route, it prioritizes calculating the travel route using the mode of transportation selected by the user and outputs the calculation result.

[0100] (Modification 3) In addition to reservation information, the reservation data may also include information that identifies the execution time of a notification service set by the user or the reservation facility. The information that identifies the execution time of the notification service is, for example, the minimum time required to arrive at the reservation facility. This time is calculated based on the user's planned departure location.

[0101] In this case, the processing execution unit 656 of the data linkage device 60 obtains information from the reservation data that identifies the execution time of the notification service, and executes the notification processing algorithm described in the notification processing program at the execution time determined based on the obtained information. The processing execution unit 656 transmits the execution result to the notification device 70 of the notification service provider.

[0102] The reservation data may also include advance notification time information indicating "how many minutes before the reservation time the user should be notified." In this case, the processing execution unit 656 executes the notification processing program before the time obtained by adding the advance notification time to the minimum time required to arrive at the reserved facility, and transmits the execution result to the notification service provider.

[0103] By using the notification service of this embodiment, it is possible to provide users with notifications that can deter last-minute cancellations and lateness, based on the request of the reservation facility that wants to deter no-shows. Furthermore, since notifications can be sent to users without the reservation facility or the notification service provider knowing the user's location information, which is necessary to calculate a travel route that will get them on time for their reservation, it is possible to implement a notification service without infringing on the user's privacy.

[0104] Figure 10 is a schematic diagram of an example hardware configuration of an information processing device 90 applied to this embodiment. The information processing device 90 comprises a processor 91, a main memory 92, a communication interface 93, an auxiliary storage device 94, an input / output interface 95, and an internal bus 96. The processor 91, the main memory 92, the communication interface 93, the auxiliary storage device 94, and the input / output interface 95 are connected to each other via the internal bus 96 so as to be able to communicate with each other. The information processing device 90 may be applied to, for example, a terminal device 10, a location information providing device 20, a reservation management device 30, a map data providing device 40, a processing logic providing device 50, a data linkage device 60, and a notification device 70. In this case, for example, the communication unit 11, communication unit 21, communication unit 31, communication unit 41, communication unit 51, communication unit 61, and communication unit 71 may be configured using the communication interface 93. For example, the storage unit 14, storage unit 24, storage unit 34, storage unit 44, storage unit 54, and storage unit 64 may be configured using the auxiliary storage device 94. Furthermore, the control units 15, 25, 35, 45, 55, 65, and 75 may be configured using a processor 91 and a main memory 92.

[0105] In this embodiment, the data linkage device 60 and the notification device 70 are configured as separate devices, but they may be configured as a single integrated device. In this case, the processing execution unit 656 transmits the processing execution result to the terminal device 10.

[0106] Furthermore, the data linkage device 60 may be implemented using multiple information processing devices. For example, the data linkage device 60 may be implemented using a cloud or other similar device. For example, in the data linkage device 60, the storage unit 64 and the control unit 65 may be implemented in different information processing devices. For example, the storage unit 64 of the data linkage device 60 may be distributed and implemented in multiple information processing devices. Note that the implementation of each functional unit of the data linkage device 60 in each information processing device is arbitrary. Also, one functional unit of the data linkage device 60 may be realized by multiple information processing devices. For example, the storage unit 64 may be realized by multiple information processing devices, and the control unit 65 may be realized by multiple information processing devices.

[0107] Similarly, the location information provider 20, reservation management device 30, map data provider 40, processing logic provider 50, and notification device 70 may be implemented using multiple information processing devices. For example, the location information provider 20, reservation management device 30, map data provider 40, processing logic provider 50, and notification device 70 may be implemented using a cloud or other device. When the location information provider 20, reservation management device 30, map data provider 40, processing logic provider 50, and notification device 70 are implemented using multiple information processing devices, the implementation of each functional unit in each information processing device can be arbitrary. Furthermore, one functional unit of the location information provider 20, reservation management device 30, map data provider 40, processing logic provider 50, and notification device 70 may be realized by multiple information processing devices.

[0108] Furthermore, for technical details of the secure data linkage platform, the technology described in, for example, Japanese Patent Publication No. 7440796 (Reference 1) can be utilized. In the technology of Reference 1, the information processing system performs data processing as follows.

[0109] The information processing system comprises a data processing device, data input / output device A and database A for organization A, and data input / output device B and database B for organization B. Data input / output devices A and B each establish an encrypted, secure communication channel with the data processing device, for example, using server-client authentication via TransportLayerSecurity (TLS). Communication between the data processing device and each data input / output device A and B takes place through the established secure session. Data input / output devices A and B each transmit schemas obtained from databases A and B to the data processing device. Schemas define the data structure of the data each organization holds in its database. Data input / output device A obtains the schemas for organization A's database A and organization B's database B from the data processing device. The data administrator of organization A refers to the schema information, writes a processing function to execute the desired processing, and transmits it to the data processing device.

[0110] Data input / output device A sends a data processing proposal to the data processing device. The data processing proposal includes a conditional expression representing the scope of data to be shared from organization A, a conditional expression representing the scope of data to be shared from organization B, and the processing content. The conditional expression is, for example, a SELECT statement containing an SQL WHERE clause. The data processing device sends an authorization request for the data processing proposal to organization B. The data administrator of organization B reviews the data processing proposal included in the authorization request. The data processing proposal includes the scope of shared data from organization A, the scope of shared data from organization B, and the processing content. Once the data administrator of organization B agrees to the data processing proposal, data input / output device B notifies the data processing device that it has authorized the data processing proposal. When the data processing device receives authorization from organization B, it considers that an agreement has been reached regarding organization A's proposal, creates an application execution environment to execute the proposed processing, and begins executing the data processing. The application execution environment is designed so that it cannot be accessed from outside except for the input of shared data from data input / output devices A and B, and executes only the processing indicated in the data processing proposal. For example, a Docker container can be used for the application execution environment. The data processing device stores and manages the agreed-upon data processing proposals in its storage device.

[0111] The data processing device obtains shared data from data input / output device A that matches the conditional expression representing the scope of data to be shared from organization A. The data processing device obtains shared data from data input / output device B that matches the conditional expression representing the scope of data to be shared from organization B. The shared data received from organizations A and B is stored in a database built within the application execution environment. The data processing device executes the agreed-upon proposal and sends the processing results to data input / output devices A and B. After sending the processing results, the data processing device deletes the Docker container and completely erases the data in a specific area using the shred command, and deletes the application execution environment along with the shared data received from organizations A and B.

[0112] According to the embodiment described above, the notification system comprises a location information providing device that stores user location information, a reservation management device that stores reservation data, a map data providing device that stores map data, a program providing device that stores a notification processing program, and a data linkage device that executes the notification processing program using the user location information, reservation data, and map data. The location information indicates the user's location. The user reservation data includes information on the location of the facility reserved by the user and the reservation start time, which is the start time of the reserved time. The map data indicates information on a map or transportation routes. The notification processing program contains an algorithm that calculates the route and travel start time from the user's location to the facility location at the reservation start time using the map data, and notifies the user of the calculation results.

[0113] The data linkage device comprises an information acquisition unit, an inquiry unit, and a processing execution unit. The information acquisition unit acquires encrypted user location information from the location information provider, encrypted reservation data from the reservation management device, encrypted map data from the map data provider, and encrypted notification processing programs from the program provider. Hardware encryption is used for encryption, for example. The program provider corresponds to, for example, the processing logic provider 50 in this embodiment. The inquiry unit queries the location information provider, reservation management device, map data provider, and program provider to determine whether the user location information, reservation data, map data, and calculation results using the notification processing programs can be shared. The processing execution unit decrypts the encrypted user location information, reservation data, map data, and notification processing programs when the location information provider, reservation management device, map data provider, and program provider return a response indicating that sharing is permitted. The processing unit executes a notification processing program a predetermined time before the reservation start time indicated by the reservation data. This program calculates the route and departure time from the user's location to the facility location indicated by the reservation data using map data, and then notifies the user of the calculated route and departure time.

[0114] The processing unit may decrypt the decrypted user location information, reservation data, map data, and notification processing program in the volatile storage area, and erase them from the volatile storage area after the execution of the notification processing program is completed.

[0115] While embodiments of this invention have been described in detail above with reference to the drawings, the specific configuration is not limited to these embodiments and includes designs and the like that do not depart from the spirit of this invention.

[0116] 1 Notification System 10 Terminal Device 11 Communication Unit 12 Input Unit 13 Output Unit 14 Storage Unit 15 Control Unit 16 Location Information Acquisition Unit 20 Location Information Provision Device 21 Communication Unit 22 Input Unit 23 Output Unit 24 Storage Unit 25 Control Unit 30 Reservation Management Device 31 Communication Unit 32 Input Unit 33 Output Unit 34 Storage Unit 35 Control Unit 40 Map Data Provision Device 41 Communication Unit 42 Input Unit 43 Output Unit 44 Storage Unit 45 Control Unit 50 Processing Logic Provision Device 51 Communication Unit 52 Input Unit 53 Output Unit 54 Storage Unit 55 Control Unit 60 Data Linkage Device 61 Communication Unit 62 Input Unit 63 Output Unit 64 Storage Unit 65 Control Unit 70 Notification Device 71 Communication Unit 72 Input Unit 73 Output Unit 74 Storage Unit 75 Control Unit 81 Network 82 Network 90 Information Processing Device 91 Processor 92 Main Memory 93 Communication Interface 94 Auxiliary Storage 95 Input / Output Interface 96 Internal Bus 641 Data Storage Unit 642 Processing Logic Storage Unit 643 Policy Storage Unit 644 Agreement Storage Unit 651 Platform Unit 652 Information Acquisition Unit 653 Request Reception Unit 654 Inquiry Unit 655 Agreement Recording Unit 656 Processing Execution Unit

Claims

1. A location information providing device that stores user location information indicating the user's location; a reservation management device that stores reservation data indicating the location of the facility reserved by the user and the reservation start time, which is the start time of the reserved time; a map data providing device that stores map data indicating information about maps or transportation routes; a program providing device that stores a notification processing program which describes an algorithm that calculates the route and start time of travel from the user's location to the facility's location at the reservation start time using the map data and notifies the user of the calculation results; and a data linkage device that executes the notification processing program using the user location information, the reservation data, and the map data. The data linkage device includes an information acquisition unit that acquires encrypted user location information from the location information providing device, encrypted reservation data from the reservation management device, encrypted map data from the map data providing device, and encrypted notification processing program from the program providing device; and an inquiry unit that inquires with the location information providing device, the reservation management device, the map data providing device, and the program providing device whether or not the user location information, the reservation data, the map data, and the calculation results using the notification processing program can be shared. A notification system comprising: a processing execution unit that, upon receiving a shared information return from the location information providing device, the reservation management device, the map data providing device, and the program providing device, decrypts the encrypted user location information, the reservation data, the map data, and the notification processing program, and executes the notification processing program a predetermined time before the reservation start time indicated by the reservation data, thereby calculating the route and start time of travel from the user's location indicated by the user location information to the facility location indicated by the reservation data at the reservation start time using the map data, and then notifies the calculated route and start time of travel.

2. The notification system according to claim 1, wherein the processing execution unit decrypts the decrypted user location information, reservation data, map data, and notification processing program in a volatile storage area, and erases them from the volatile storage area after the execution of the notification processing program is completed.

3. An information acquisition unit that acquires encrypted user location information from a location information providing device that stores user location information indicating the user's location, encrypted reservation data from a reservation management device that stores reservation data indicating the location of the facility reserved by the user and the reservation start time which is the start time of the reserved time, encrypted map data from a map data providing device that stores map data indicating information about maps or transportation routes, and encrypted notification processing program from a program providing device that stores a notification processing program describing an algorithm that calculates the route and start time of travel from the user's location to the facility location at the reservation start time using the map data and notifies the calculation result, and an inquiry unit that inquires with the location information providing device, the reservation management device, the map data providing device and the program providing device whether or not the calculation result using the user location information, the reservation data, the map data and the notification processing program can be shared. A data linkage device comprising: a processing execution unit that, when a shareable message is returned from the location information providing device, the reservation management device, the map data providing device, and the program providing device, decrypts the encrypted user location information, the reservation data, the map data, and the notification processing program, and executes the notification processing program a predetermined time before the reservation start time indicated by the reservation data, thereby calculating the route and start time of travel from the user's location indicated by the user location information to the facility location indicated by the reservation data at the reservation start time using the map data, and performs processing to notify the calculated route and start time of travel.

4. Information acquisition step: Obtaining encrypted user location information from a location information providing device that stores user location information indicating the user's location; encrypted reservation data from a reservation management device that stores reservation data indicating the location of the facility reserved by the user and the reservation start time, which is the start time of the reserved time; encrypted map data from a map data providing device that stores map data indicating information about maps or transportation routes; and encrypted notification processing program from a program providing device that stores a notification processing program describing an algorithm that calculates the route and start time of travel from the user's location to the facility location at the reservation start time using the map data and notifies the calculation result; Inquiry step: Inquiring with the location information providing device, the reservation management device, the map data providing device and the program providing device whether or not the calculation result using the user location information, the reservation data, the map data and the notification processing program can be shared. A notification method comprising: a processing execution step in which, when a shared information is returned from the location information providing device, the reservation management device, the map data providing device, and the program providing device, the encrypted user location information, the reservation data, the map data, and the notification processing program are decrypted, and the notification processing program is executed a predetermined time before the reservation start time indicated by the reservation data, thereby calculating the route and start time of travel from the user's location indicated by the user location information to the facility's location indicated by the reservation data at the reservation start time using the map data, and notifying the calculated route and start time of travel.

Images