JP2013105274A - Character string conversion device, character string conversion method, and character string conversion program - Google Patents

Abstract

Even when personal information having a notation is included in electronic information, the masking of the personal information of the electronic information is accurately performed while suppressing the load of the mask processing.
When electronic information is input as input data, the character string conversion device 1 uses the item information of the personal information included in the electronic information browsed in the past as the priority mask information, and the identification information of the electronic information The important point mask information dictionary 60 stored every time is referred to, and it is determined whether or not the important point mask information matching the item information of the personal information included in the input data 10 exists in the dictionary 60. If it is determined that the priority mask information is present, a personal information character string is detected from the input data 10 based on the priority mask information. On the other hand, if it is determined that there is no priority mask information, a personal information character string is searched from the input data 10 based on the personal information character string data in the personal information dictionary 50. Then, the detected personal information character string is replaced with another character string.
[Selection] Figure 1

Description

  The present invention relates to a character string conversion technique for protecting personal information included in an electronic document.

  As the importance of protecting personal information increases, there is an increasing expectation for a technology that masks the personal information portion of an electronic document containing personal information such as first and last names and addresses so that it cannot be read. As an existing technique for masking a personal information part included in an electronic document, a technique for performing character string conversion or the like is known (Patent Document 1, etc.).

JP 2007-102540 A

  In the existing technology, if there is a character string that matches the personal information character string to be masked in the electronic document to be protected, it becomes a masking target, but the personal information in the document contains a notation or misconversion. If there is a location, the location may not be extracted as a masking target.

  For example, if “Taro Tanaka” or “Yokosuka City Hikarinooka 1-1” is personal information, and “Taro Tanaka” or “1 Konooka 1 in Yokosuka City” is described in the electronic document, the corresponding part is masked. May not be eligible.

  Therefore, if a fuzzy search is performed on the personal information character string to be masked, even a character string including a part in which some characters are erroneously converted or a character string having a notation can be detected as a mask target. .

  However, this method has a problem that the processing load for detecting the character string to be masked is increased and the number of portions that are erroneously masked increases.

  In particular, the browsing history data of a Web page includes not only a page in which a large number of personal information character strings exist, but also a page that does not include a personal information character string. For this reason, when personal information is masked for browsing history data of Web pages, if the personal information is detected by fuzzy search or the like for all Web page browsing history data, the processing load of the masking process increases. It is not efficient.

  SUMMARY OF THE INVENTION In view of the above circumstances, an object of the present invention is to accurately perform mask processing of personal information of electronic information while suppressing the load of mask processing even when the personal information includes notation fluctuations in the electronic information. .

  Therefore, as an aspect of the character string conversion device of the present invention, there is provided a character string conversion device for converting personal information included in an electronic document into another character string, and the personal information character string data to be protected is an item of personal information. Personal information dictionary stored every time and when the electronic information is inputted, the item information of the personal information included in the electronic information browsed in the past is the priority mask information stored for each identification information of the electronic information as the priority mask information An importance mask information detecting unit that refers to an information dictionary and determines whether or not the importance mask information matching the item information of the personal information included in the input electronic information exists in the dictionary; and the importance mask information includes The personal information character string is detected based on the priority mask information from the input electronic information when it is determined that the input information is present, while the input is performed when it is determined that the priority mask information does not exist. Personal information detection means for retrieving a personal information character string from child information based on personal information character string data in the personal information dictionary; and personal information mask processing means for replacing the detected personal information character string with another character string. Prepare.

  As an aspect of the character string conversion method of the present invention, a character string conversion device including a personal information dictionary storing personal information character string data to be protected for each item of personal information can be used to convert personal information included in an electronic document into other information. A method of converting a character string into a character string, wherein when electronic information is input, item information of personal information included in the electronic information browsed in the past is used as priority mask information for each identification information of the electronic information Determining whether or not there is important mask information in the dictionary that matches the item information of the personal information included in the inputted electronic information with reference to the stored important mask information dictionary; When it is determined that there is the priority mask information while searching the personal information character string based on the personal information character string data in the personal information dictionary from the input electronic information. A detecting personal information string based on the priority mask information from the input electronic information when the step of replacing the detected personal information character string to another string.

  Note that the present invention can also be implemented as a character string conversion program that causes a computer to function as each means constituting the character string conversion device.

  According to the above-described invention, even when personal information with swaying is included in the electronic information, the masking of the personal information of the electronic information can be performed with high accuracy while suppressing the load of the mask processing.

The block diagram which showed the structure of the character string converter which concerns on embodiment of this invention. The flowchart of the character string conversion process which concerns on embodiment of this invention. An example of the personal information dictionary which concerns on embodiment of this invention. An example of the important point mask information dictionary which concerns on embodiment of this invention. 1 is a block diagram showing a configuration of a network system according to an embodiment of the present invention.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. However, the present invention is not limited to these embodiments.

[Embodiment 1]
(Overview)
Conventionally, for the purpose of protecting personal information, for example, for an electronic document including personal information such as first and last names and addresses related to a service using a browsing history of a Web browser, the portion is replaced with another character string When it is converted to, it takes time to take into account fluctuations in the personal information.

  Therefore, the character string conversion apparatus 1 according to the first embodiment of the invention shown in FIG. 1 designates items that take into account fluctuations of personal information and items that are not taken into account for each identification information (for example, URL) of an electronic document to be processed. In addition, the masking process is performed corresponding to the notation fluctuation only for the items to be considered. As a result, personal information can be masked so as not to leak masking while suppressing the mask processing load.

(Device configuration)
As shown in FIG. 1, the character string conversion device 1 includes an input data reading unit 20, a personal information reading unit 30, a personal information dictionary 40, an important mask information detecting unit 50, an important mask information dictionary 60, a personal information detecting unit 70, The priority mask information management part 80, the personal information mask process part 90, and the mask character string storage part 112 are provided. The function units 20 to 90 and 112 of the character string conversion device 1 are realized by hardware resources of a server (computer). That is, the character string conversion device 1 includes at least hardware resources related to a computer such as a computing device (CPU), a storage device (memory, a hard disk device, etc.), a communication interface, and the like. These hardware resources cooperate with software resources (OS, applications, etc.) to implement the functional units 20 to 90, 112.

  The input data reading unit 20 reads Web page browsing history data (electronic document) including personal information as the input data 10 and registers it as internal data in the memory. The Web page browsing history data includes address information such as URL and site name of the corresponding page as identification information. The input data reading unit 20 also reads these attribute information.

  The personal information reading unit 30 reads a personal information character string from the personal information dictionary 40 and holds it as internal data in the memory. The personal information dictionary 40 stores personal information character string data to be protected for each item of personal information. The personal information dictionary 40 illustrated in FIG. 3 is, for example, for each item of personal information (name, phone number, mobile phone number, credit card number, postal code, mail address, address) of the client that owns the character string conversion device 1. Stores personal information character strings. The personal information dictionary 40 may take the form of a database in addition to the form of text data.

  The priority mask information detection unit 50 refers to the priority mask information dictionary 60 and determines whether or not the priority mask information dictionary 60 matches the data of the item of personal information included in the input data 10. .

  The priority mask information dictionary 60 stores data of single or plural items of personal information included in electronic information browsed in the past as priority mask information for each identification information of the electronic information. The priority mask information includes, for example, information on items that are highly likely as personal information included in the Web page browsing history data as electronic information. The emphasis mask information dictionary 60 illustrated in FIG. 4 is a combination of one or a plurality of data of personal information items (name, address, telephone number, card number, mail address) included in electronic information browsed in the past. The emphasis mask information is stored. The priority mask information is stored in association with identification information (for example, address information such as a URL of a Web page) of electronic information (for example, Web page browsing history data) including this information. Like the personal information dictionary 40, the priority mask information dictionary 60 may form a database in addition to text data. When it is determined that the identification information of the input data 10 is not registered in the priority mask information dictionary 60, the priority mask information of the input data 10 is treated as not registered.

  The personal information detection unit 70 detects a personal information character string from the input data 10 based on the priority mask information when the priority mask information detection unit 50 determines that the priority mask information is present. On the other hand, when it is determined that the priority mask information does not exist, the personal information character string is searched from the input data 10 based on the personal information character string data in the personal information dictionary 40.

  The priority mask information management unit 80 stores the personal information character string detected by the personal information detection unit 70 in the priority mask information dictionary 60 in association with the identification information of the input data 10.

  The personal information mask processing unit 90 replaces the personal information character string detected by the personal information detection unit 70 with another character string. Other character strings are stored in advance in the mask character string storage unit 112.

(Description of processing procedure)
The character conversion processing procedures S101 to S109 executed by the character string conversion device 1 will be described with reference to FIG.

  S101: When the input data reading unit 20 receives the input data 10 (Web page browsing history data including personal information), it reads it and registers it as internal data in the memory.

  S102: The personal information reading unit 30 reads a personal information character string from the personal information dictionary 40 and holds it as internal data.

  S103: The importance mask information detection unit 50 reads the importance mask information from the importance mask information dictionary 60 based on the identification information such as the URL information of the Web page and the site name included in the input data 10.

  S104: The emphasis mask information detection unit 50 refers to the personal information character string held in step S102 and the emphasis mask information read in step 103, and whether or not the emphasis mask information matches the personal information character string. Judging.

  S105: If it is determined in step S104 that the priority mask information is present, the personal information detection unit 70 detects a personal information character string from the input data 10 by an ambiguous search based on the priority mask information read in step 103. .

  S106: If it is determined in step S104 that there is no priority mask information, the personal information detection unit 70 searches the input data 10 for a personal information character string based on the personal information character string held in step S102. Note that an ambiguous search based on character strings of all personal information included in the personal information dictionary 40 may be executed.

  S107: The priority mask information management unit 80 associates the personal information character string detected in step S105 or step S106 with the identification information of the input data 10 as one of the priority mask information of the input data 10, and the priority mask information dictionary 60. Save to.

  In step 107, when the importance mask information is already registered for the identification information (for example, address information) of the electronic information stored in the importance mask information dictionary 60, the latest detection result (individual) obtained in step S105 Information character string) is reflected in the existing emphasis mask information.

  Moreover, you may determine the item of several personal information selected by the statistical process based on the browsing history of the stored electronic information as priority mask information. For example, the priority mask information is determined by selecting a plurality of items of personal information having a higher frequency (for example, co-occurrence frequency) used in electronic information browsed in the past.

  Further, when it is determined in step S103 that the identification information of the input data 10 is not registered in the priority mask information dictionary 60, the personal information included in the input data 10 is an item (for example, name, phone number, mobile phone number, Credit card number, zip code, email address, address). The personal information divided into the items is associated with the identification information and added to the priority mask information dictionary 60 as new priority mask information.

  S108: The personal information mask processing unit 90 sets the personal information character string detected in step S105 or step S106 as a mask target portion. Then, the mask target portion is replaced with another character string extracted from the mask character string storage unit 112. Examples of other character strings include symbols such as “*”.

  In step S108, a character string defined for each item of personal information may be substituted. Specifically, as an aspect of a mask character string for replacing a mask target portion, for example, “* personal information item code: number of characters *”, “start symbol” + “personal information item identifier” + “separator” + “end” The character string is combined in the order of “symbol”. When the mask character string including the identification information of the personal information item is used as described above, it is possible to analyze the personal information type of the mask target portion. For example, there is a case where a Web browsing history collection server (not shown) that can communicate with the character string conversion device 1 via a network analyzes the personal information type of the mask target portion.

  S109: The personal information mask processing unit 90 stores the input data 10 in which the personal information character string is replaced with another character string in step S108 in the storage unit in the character string conversion apparatus 1. When there is a request for input data 10 from an external terminal (for example, a web browsing history collection server), data in which the personal information character string is masked in this procedure 109 is output as output data 100.

(Effect of this embodiment)
Therefore, according to the character string conversion device 1, even when personal information having a description change is included in the electronic information, the mask processing of the personal information of the electronic information can be accurately performed while suppressing the load of the mask processing. In particular, it is possible to reduce the load of the personal information masking process by suppressing the processing load due to the masking process related to the personal information type that does not exist in the electronic information. In addition, when the personal information included in the electronic information is masked, it is not necessary to reflect the personal information included in the electronic information in the priority mask information dictionary 60 when the input of the electronic information is accepted next time. The load of mask processing is reduced.

  Furthermore, the masking accuracy of the personal information is further improved by updating the mask information of the mask mask information dictionary 60 based on the personal information included in the input electronic information.

  Then, by selecting a plurality of types of personal information through statistical processing based on the browsing history of the stored electronic information, the masking accuracy of the personal information is further improved and the mask processing load is further reduced.

[Embodiment 2]
In the network system according to the second embodiment shown in FIG. 5, the character string conversion device 1 is installed in all the client terminals 2 existing in the system. Each client terminal 2 has the function units 20 to 50, 70 to 90, and 112 of the character string conversion device 1 shown in FIG. The importance mask information dictionary 60 is stored in the importance mask information accumulation server 3.

  The client terminal 2 stores the personal information included in the Web page browsing history data 201 in the priority mask information dictionary 60 in the priority mask information storage server 3 via the Internet 4 during the masking process (execution of steps S101 to S109 described above). The stored importance mask information 202 is referred to. The personal information newly detected in the process of this mask processing is added to the priority mask information dictionary 60 as new priority mask information 202.

  In this network system, the Web browsing history collection server 5 can acquire the Web page browsing history data 203 from the client terminal 2 via the Internet 4. The personal information included in the Web page browsing history data 203 is masked by steps S101 to S109 executed by the client terminal 2.

  According to the network system of the present embodiment described above, the Web browsing history collection server 5 can efficiently collect the Web page browsing history data 203 in which the personal information is masked from the individual client terminals 2.

  Further, when the personal information included in the Web page browsing history data 201 is masked, when the input of the data 201 is accepted from the next time onward, the personal information included in the data 201 is converted into the priority mask information in the priority mask information storage server 3. It is not necessary to reflect in the dictionary 60. Therefore, the network usage load of the client terminal 2 is reduced.

[Aspect as Program of the Present Invention]
The present invention can be realized by configuring a program that causes a computer to function as a part or all of the functional units 20 to 90 and 112 constituting the character string conversion apparatus 1 and causing the computer to execute the program. Alternatively, it can be realized by configuring a program that causes a computer to execute a part or all of the above steps S101 to S109 executed by the character string conversion device 1, and causing the computer to execute the program. The program can be read by a computer-readable recording medium such as FD (Floppy (registered trademark) Disk), MO (Magneto-Optical disk), ROM (Read Only Memory), memory card, CD (Compact Disk). -ROM, DVD (Digital Versatile Disk)-It is possible to record on a ROM, CD-R, CD-RW, HDD, SSD, removable disk, etc., and store or distribute it. Furthermore, the above program can be provided via a network such as the Internet or e-mail.

DESCRIPTION OF SYMBOLS 1 ... Character string converter 40 ... Personal information dictionary 50 ... Emphasis mask information detection part (importance mask information detection means)
60 ... Important mask information dictionary 70 ... Personal information detection unit (personal information detection means)
80 ... Important mask information management unit (important mask information management means)
90. Personal information mask processing section (personal information mask processing means)

Claims (10)

A character string conversion device that converts personal information contained in an electronic document into another character string,
Personal information dictionary storing personal information character string data to be protected for each item of personal information,
When electronic information is input, the item information of the personal information included in the electronic information browsed in the past is referred to as the priority mask information dictionary stored for each identification information of the electronic information as the priority mask information. Priority mask information detecting means for determining whether or not there is priority mask information in the dictionary that matches the item information of the personal information included in the electronic information;
When it is determined that the emphasis mask information is present, the personal information character string is detected from the input electronic information based on the emphasis mask information, while the input is performed when it is determined that the emphasis mask information is not present. Personal information detecting means for searching a personal information character string based on personal information character string data in the personal information dictionary from electronic information;
A character string conversion device comprising personal information mask processing means for replacing the detected personal information character string with another character string.   2. The personal information detection unit detects a personal information character string from the input electronic information by a fuzzy search based on the priority mask information when it is determined that the priority mask information is present. The character string converter described.   The character string conversion apparatus according to claim 1 or 2, wherein the other character string includes an identifier of an item of personal information.   4. The character according to claim 1, wherein the priority mask information includes a plurality of items of personal information selected by statistical processing based on a browsing history of stored electronic information. Column conversion device.   The apparatus further comprises important mask information management means for storing the personal information character string detected by the personal information detecting means in association with the identification information of the inputted electronic information in the important mask information dictionary. Item 5. The character string conversion device according to any one of Items 1 to 4. A character string conversion method including a personal information dictionary storing personal information character string data to be protected for each item of personal information is a character string conversion method for converting personal information contained in an electronic document into another character string. ,
When the electronic information is input, the item information of the personal information included in the electronic information browsed in the past is referred to as the importance mask information, and the input electronic data is referred to the importance mask information dictionary stored for each identification information of the electronic information. Determining whether or not the importance mask information matching the item information of the personal information included in the information exists in the dictionary;
When it is determined that the emphasis mask information does not exist, it is determined that the emphasis mask information exists while searching for a personal information character string based on the personal information character string data in the personal information dictionary from the input electronic information. Detecting a personal information character string based on the emphasis mask information from the input electronic information when
And replacing the detected personal information character string with another character string.   The personal information character string is detected by fuzzy search based on the priority mask information from the input electronic information when it is determined that the priority mask information is present in the step of detecting the personal information. 6. The character string conversion method according to 6.   8. The character string conversion method according to claim 6, wherein the other character string includes an identifier of an item of personal information.   9. The method according to claim 6, further comprising the step of storing the personal information character string detected in the searching step in the priority mask information dictionary in association with the identification information of the input electronic information. The character string conversion method according to claim 1.   A character string conversion program for causing a computer to function as each means constituting the character string conversion device according to any one of claims 1 to 5.

Images