JP4175575B2 - Personal information search program - Google Patents

Description

  The present invention relates to a technique for searching a data aggregate (electronic file) including personal information that can identify a specific individual as a personal information aggregate (personal information file), and a technique for managing the searched personal information aggregate. In particular, for example, personal information aggregates (personal information files) distributed and stored in a plurality of client terminals (personal computers, etc.) in a company are automatically searched and placed under the management of the server. It relates to technology that made it possible.

  In recent years, with an increase in awareness of protection of personal information, it has been desired to reliably prevent inadvertent leakage and leakage of personal information and unauthorized use of personal information. In addition, along with the enforcement of the Personal Information Protection Law, a business operator handling personal information receives a request for disclosure or correction of personal information from each individual while preventing the leakage, leakage or unauthorized use of personal information. It is obliged to disclose and correct personal information.

  Here, the personal information is information that can identify a specific individual by itself or in combination, and includes, for example, name, date of birth, contact information (address, address, telephone number, e-mail address). Customer information, business partner information, etc. stored and handled in various companies often fall under the category of personal information, and in the future, companies that handle a lot of such personal information will be obligated as above as a personal information handling business operator. Must be fulfilled.

  In order to fulfill the obligations described above, it is essential to centralize personal information by introducing a central management system for personal information. However, in reality, personal information such as customer information and business partner information is dispersed in a company's personal computer (hereinafter sometimes abbreviated as PC) and servers in each department. Often exists. More specifically, individual employees store their personal information (customer information, etc.) on their PCs for their own work, or a central database or a subset of personal information collected by each employee. It exists in various PCs.

  For this reason, when constructing the centralized management system or attempting to fulfill the above obligations in a distributed state, the administrator must first separate the personal information that is scattered within the company. It is necessary to identify what kind of personal information exists in the company, but at present, the personal information is identified by the manager instructing each employee to be a company-wide It will be carried out with the cooperation of the department.

For example, in Patent Document 1 below, in accordance with the enforcement of the Personal Information Protection Law, a technology for providing a personal information protection service that prevents personal information from being leaked or leaked or being used illegally is “processing of a personal information protection service business. Method and apparatus "have been proposed and disclosed. However, the following Patent Document 1 does not disclose any technique related to the identification of personal information as described above.
JP 2002-183367 A

However, when personal information is identified with human cooperation such as reporting from each employee, not only is it time-consuming, but it is difficult to reliably identify all personal information without omission. In particular, when personal information is increasingly distributed, it is extremely difficult to identify personal information.
In addition, if there is an omission in the identification of personal information, not only the above obligations can be fulfilled, but the status of the personal information cannot be managed, and there is a risk of inadvertent leakage or leakage of personal information or unauthorized use of personal information. is there.

Therefore, it is desirable to ensure that all personal information distributed in the company is searched and managed. Under such circumstances, development of a technique for efficiently and reliably searching for an electronic file (personal information aggregate / personal information file) including a lot of personal information is desired.
The present invention has been made in view of such a situation, and an object thereof is to enable a personal information file to be searched efficiently and reliably in a short time.

In order to achieve the above object, the personal information search program according to the present invention (claim 1 ) provides personal information having a predetermined number or more of personal information elements that can identify a specific individual among the data in the storage unit. A computer for realizing a personal information search function for searching for a file, an extraction unit for extracting text data of a data aggregate included in the data, and a predetermined delimiter position from the text data extracted by the extraction unit Cutting means for cutting out the character section delimited by, and whether or not the character string in the character section cut out by the cutting means is a personal information element, and the character determined to be a personal information element The computer is used as personal information file determination means for determining whether or not the data aggregate is a personal information file based on the number of columns. The personal information file determination means adds “one or more full-width characters” + “city” or “ward” or “county” + “one or more full-width characters to the character string in the character section cut by the cutting means. As an address determination condition, a character string “character or half-width character” is included and the first character of the character string matches the initial character of 47 prefecture names or city names in Japan. It is determined whether or not the character string in the character section cut out by the cutting means is an address as the personal information element, and when the computer functions as the personal information file determining means, the character string is cut out by the cutting means. Whether the character string in the specified character section satisfies any one of the preset phone number determination condition, e-mail address determination condition, and address determination condition The first determination means for determining whether or not one of the telephone number, the e-mail address, and the address, which is a personal information element other than the name, corresponds to the first determination means. Character judging means for judging whether or not the number of characters in the character section determined to correspond to neither a telephone number, an e-mail address nor an address is within a predetermined range and whether the character in the character section is a Chinese character The character section that is determined by the character determination means to be within the predetermined range and to be a kanji character is preset as a character or character string included in the character section and a kanji or kanji string that cannot appear in the name. By checking against an inappropriate character or inappropriate character string, it can be determined whether or not the relevant character section includes the inappropriate character or inappropriate character string. And the number of character sections determined to correspond to any one of a telephone number, an e-mail address, and an address by the first determination unit and the inappropriate character or inappropriate As a second determination means for counting each of the number of character sections determined not to include a character string and determining whether the data aggregate is a personal information file based on the count result, the computer It is characterized by functioning.

At this time, the character determination means further determines whether or not the first character of the character string in the same character section matches a first letter of the last name belonging to the upper predetermined number of last names common to Japanese, and the matching means The inappropriate character is determined for the character section determined by the character determination means to be in the predetermined range and to be the Chinese character and the first character matches the initial character of the last name belonging to the upper predetermined number of surnames common to Japanese. Or you may collate with an inappropriate character string (Claim 2 ).

The second determining means regards the character string in the character section determined not to include the inappropriate character or the inappropriate character string by the matching means as the personal information element corresponding to the name, and the data set It may be determined whether or not the body is a personal information file (claim 3 ).

Further, the second determination means determines the number of character sections determined by the first determination means to correspond to any one of a telephone number, an e-mail address, and an address based on the counting result and the collation. A determination value that increases as the number of character sections determined not to include the inappropriate character or inappropriate character string by the means increases, and when the calculated determination value exceeds a predetermined threshold, the data It may be determined that the aggregate is a personal information file (claim 4 ).

Furthermore, in the first determination means, it is determined whether or not the character string in the character section cut out by the cutting means corresponds to a telephone number, and if it does not correspond to a telephone number, whether it corresponds to an e-mail address. If it does not correspond to an e-mail address, it is determined whether it corresponds to an address, and when it is determined that it corresponds to any one of a telephone number, an e-mail address, and an address, The determination process for the character string may be terminated (claim 5 ).

  According to the above-described personal information search program of the present invention, as an address determination condition, “one or more full-width characters” + “city” or “ward” or “county” + “one or more characters” is added to the character string in the character section to be determined. By specifying that the first character of the character string matches the first letter of the 47 prefecture name or city name. It is determined that the character section satisfying the determination condition is an address (personal information element). At this time, by comparing the first character of the character section to be determined with the first letter of the 47 prefecture name or city name, the character string that includes “city”, “city”, and “county” in the middle There is no longer erroneous determination of a character string that is unrelated to the address as an address, and the accuracy of the address is much shorter than when determining the exact match of 47 prefecture names or city names. A high character section can be searched efficiently and reliably.

Further, according to the personal information search program of the present invention, a character section that does not correspond to a personal information element other than a name and includes an inappropriate character or an inappropriate character string is considered not to be related to personal information, but other than a name. Character sections that do not correspond to personal information elements and do not contain inappropriate characters or inappropriate character strings are considered to be related to personal information, particularly full names. For character sections determined to fall under any one of numbers, e-mail addresses, and addresses), the determination process is terminated when the determination is made, and it is determined that it does not correspond to a personal information element other than a name Only character sections are checked against inappropriate characters or inappropriate character strings, and even one inappropriate character or inappropriate character string is included in the character section. Since the collation process can be terminated at the time of determination, the name collation process can be performed at a higher speed than the method of collating with all name strings included in the name list, that is, the personal information file Search processing can be performed at high speed. In addition, since all character sections that do not contain inappropriate characters or inappropriate character strings are considered to correspond to names, data aggregates that do not contain inappropriate characters or inappropriate character strings for names, that is, include name information It is possible to reliably search for a data aggregate that is highly likely to be a personal information file.

  In addition, by further providing the character determination means, the character section does not correspond to a personal information element other than a name and does not include an inappropriate character or an inappropriate character string, and the number of characters in the character section is within a predetermined range. In addition, it is possible to consider that the characters in the character section are Kanji characters as information about the name, so that the accuracy of name verification can be improved and the name verification process Can be performed at high speed. At this time, by setting the predetermined range to a general (appropriate) number range for the number of characters of the name, for example, 2 or more and 6 or less, the name collation accuracy can be further improved, and the name collation process Can be performed at a higher speed. In addition, since it is possible to exclude long character sections exceeding the predetermined range from the object to be collated by the collating means, it contributes to further speeding up the name collating process, that is, further speeding up the personal information file search process. Become.

Embodiments of the present invention will be described below with reference to the drawings.
[1] Configuration of Personal Information Management System According to this Embodiment FIG. 1 is a block diagram showing the configuration of a personal information management system as an embodiment of the present invention. As shown in FIG. The management system 1 includes a personal information management server 20 and a file access management server 30 in addition to a plurality of client terminals 10, and these terminals 10 and servers 20, 30 are connected to a network [for example, an in-house LAN (Local Area Network). ]] Are connected to each other via 40.

Each client terminal 10 is constituted by a terminal device such as a personal computer (PC) used by each employee (user) in the company or the like, and has a functional configuration as will be described later with reference to FIGS. Have.
The personal information management server 20 is connected to a plurality of client terminals 10 and the file access management server 30 via the network 40 so as to be able to communicate with each other, and manages personal information files in each client terminal 10, see FIG. However, it has a functional configuration as described later.

  In the present embodiment, the personal information file (personal information aggregate) holds a predetermined number or more of records including personal information, and the personal information identifies a specific individual by itself or in combination as described above. Information that can be performed (various personal information elements), such as name, date of birth, contact information (address, address, telephone number, mail address), etc. In addition to these, personal information includes titles, basic resident register numbers, account numbers, credit card numbers, license numbers, passport numbers, and the like.

  The file access management server 30 is connected to the plurality of client terminals 10 and the personal information management server 20 through the network 40 so as to be able to communicate with each other, and accesses to electronic files (data aggregate; in particular, personal information files in the present embodiment). And has a functional configuration as will be described later with reference to FIG.

[1-1] Functional Configuration of Client Terminal According to this Embodiment FIG. 2 is a block diagram showing the functional configuration of each client terminal 10 according to this embodiment. As shown in FIG. information management function information processing apparatus) 10, CPU (Central processin g unit for executing various processes; a processing unit) 10a, a data aggregate, such as personal information and a storage unit 10b capable of retaining the (electronic file) In addition, the quarantine table 10c provided from the personal information management server 20 and the P mark (privacy level mark; personal information file) of the data aggregate (electronic file) held in the storage unit 10b And a P mark table 10d holding a level determined by a determination value to be described later.

  Here, the storage unit 10b is a hard disk built in the client terminal 10 or a storage device connected / externally attached to the client terminal 10, such as a flexible disk, CD (CD-ROM, CD-R, CD-RW, etc.). , DVD (DVD-ROM, DVD-RAM, DVD-R, DVD-RW, DVD + R, DVD + RW, etc.), magnetic disk, optical disk, magneto-optical disk, as well as IC card, ROM cartridge, magnetic tape and other storage media Device. The quarantine table 10c and the P mark table 10d described above are held in a RAM (Random Access Memory), a hard disk, or the like that constitutes the client terminal 10.

  The CPU 10a functions as a personal information search means 11, a CPU usage rate monitoring means 12, an input / output monitoring means 13, a control means 14, an access monitoring means 15 and a transmission / reception means 16, and these functions are performed by the CPU 10a. As will be described later, this is realized by executing a personal information search program installed from the personal information management server 20.

  The personal information search means 11 functions as a text extraction engine that converts the electronic file (target file) stored in the storage unit 10b into a text file by executing a personal information search program installed from the personal information management server 20. At the same time, it functions as a search engine for searching for a personal information file from data in the storage unit 10b using the quarantine table 10c. That is, the personal information search means 11 refers to various electronic files (data aggregates) existing in the storage unit 10b of the client terminal 10 according to the condition (quarantine table 10c) instructed from the personal information management server 20, and personal information A file search is performed, and the target file (file determined to be a personal information file) is written to a log (local cache database). In the present embodiment, the P mark determined based on the search result (determination value) obtained by the personal information searching means 11 is registered in the P mark table 10d. Details of the functional configuration of the personal information searching means 11 will be described later with reference to FIG.

The CPU usage rate monitoring unit 12 monitors the usage rate of the CPU 10a that executes various processes in the client terminal 10, and the input / output monitoring unit 13 is a data input / output operation (I / O operation) in the storage unit 10b. ).
The control means 14 operates as described later with reference to FIGS. 7 and 8 by executing a personal information search program installed from the personal information management server 20, and is monitored by the CPU usage rate monitoring means 12. The personal information search means 11 is activated when the usage rate of the CPU 10a is less than or equal to a predetermined threshold value, while the personal information search means 11 is stopped when the usage rate exceeds the predetermined threshold value. The personal information search means 11 is operated when the occurrence of the input / output operation is detected by the means 13. In particular, the control means 14 of the present embodiment activates the personal information search means 11 when the usage rate of the CPU 10a falls below a predetermined threshold (minimum threshold), and personal information when the usage rate of the CPU 10a exceeds the predetermined threshold (highest threshold). The search means 11 is set in an idle state (search hall state), and the personal information search means 11 is operated like a screen saver.

  The access monitoring unit 15 monitors an electronic file (an electronic file given a P mark) determined to be a personal information file by the personal information searching unit 11 and accesses (for example, rename, copy, delete) the electronic file. , Data change due to movement, etc.) is written as log information and transmitted to the personal information management server 20 by the transmission / reception means 16.

  The transmission / reception means 16 transmits / receives various kinds of information to / from the personal information management server 20 (or the file access management server 30) via the network 40, and the result of self-search by the personal information search means 11 is sent to the personal information management server. It functions as a transmission means for transmitting to the network 20. When the transmission / reception means 16 functions as the transmission means, a difference between the search result (link destination information of the personal information file, determination value, etc.) and the search result transmitted last time is obtained, and the difference is sent to the personal information management server 20. In addition to sending, the information to be sent is encrypted.

[1-2] Detailed Functional Configuration of Personal Information Searching Unit of This Embodiment FIG. 3 is a block diagram showing a detailed functional configuration of the personal information searching unit 11 in each client terminal 10 of the present embodiment. As shown, the personal information searching means 11 of this embodiment has functions as an extracting means 111, a cutting means 112, a first determining means 113, a character determining means 114, a collating means 115, and a second determining means 116. These functions are also realized by the CPU 10a executing a personal information search program installed from the personal information management server 20 as will be described later.

  Here, the 1st determination means 113, the character determination means 114, the collation means 115, and the 2nd determination means 116 function as a personal information file determination means. As will be described later, the personal information file determination unit of the present embodiment determines whether or not the character string in the character section extracted by the extraction unit 112 as will be described later is a personal information element. Based on the determined number of character strings (counting result), it is determined whether or not the data aggregate to be determined is a personal information file.

The extraction unit 111 extracts text data (for example, CSV (Comma Separated Value) format data) of an electronic file in the storage unit 10b and stores it in a file buffer (not shown), and functions as the text extraction engine. It is. In the file buffer, 2-byte code characters (double-byte characters) are captured so as not to be lost at the end of the file buffer. Further, when data is cut out and taken in from a file buffer to a data shaping buffer (not shown), which will be described later, by the cutout means 112, the data is taken into the file buffer accordingly.

The cutout unit 112 cuts out character sections delimited at a predetermined delimiter position from the text data extracted by the extraction unit 111 and sequentially writes them in a buffer (not shown) as a determination target / collation target. .
Here, as the predetermined delimiter position, an appearance position of a delimiter character set in advance or a boundary position between a 1-byte code character and a 2-byte code character (a portion where a single-byte character / ASCII character is followed by a double-byte character) Or, a half-width character / ASCII character is followed by a half-width character / ASCII character), or a boundary position between a full-width arithmetic number “0” to “9” and a character excluding the full-width arithmetic number and the hyphen. The delimiter is a delimiter that is a delimiter of data. Specifically, a half-width space, half-width comma (half-width comma + half-width space is also considered a half-width comma), tab character (half-width), CR (Carrige Return) , LF (Line Feed
), “: (Colon)”, “; (semi-colon)”, “>”, “}”, “]”.

  The cutout unit 112 cuts out text data from the file buffer into the data shaping buffer one character at a time, and when the above-described delimiter position appears, the extraction ends. Also at this time, data is fetched so that the 2-byte code character (double-byte character) is not lost at the end of the data shaping buffer. Thus, in this embodiment, for example, addresses and names written in full-width characters such as “Taro Sato 0902341234 Minato-ku, Tokyo” or “Taro Sato sato@xxxx.com Tokyo Minato-ku” are written in half-width characters. If the text data such as a telephone number or e-mail address is mixed without being separated by a delimiter in the text data, for example, an address or name written in full-width characters such as “Taro Sato 0901341234 Tokyo Minato-ku” Even if there is a mixture of numbers and numbers such as phone numbers written in double-byte characters without being separated by delimiters in the text data, for each personal information element such as address, name, phone number, e-mail address, etc. Cut out the character sections "Taro Sato", "09012341234", "Minato-ku, Tokyo", "sato@xxxx.com", "09012341234" Possible to become.

  The data (determination target character section) thus taken into the data shaping buffer is taken into the data analysis buffer (not shown) from the data shaping buffer. Characters, katakana, hiragana, symbols other than kanji, etc. are removed. Examples of characters (unnecessary characters) to be removed at this time include a half-width space, a full-width space, a half-width hyphen, a full-width hyphen, an underbar, a parenthesis symbol, and so on. , #, $,%, =, +, *,? Symbol characters such as, \, /, and | are defined. In the present embodiment, it is assumed that the cutting means 112 has a function of removing unnecessary characters as described above.

  The first determination unit 113 uses a character string taken into the data analysis buffer, that is, a character string (hereinafter simply referred to as a character string) in a character section cut out by the cutting unit 112 to remove unnecessary characters. Other than the personal information element (specifically, any one of a telephone number, an e-mail address, and an address in the present embodiment), the telephone number determination means 113a and the e-mail address determination The function as the means 113b and the address determination means 113c is provided. Note that the first determination unit 113 of the present embodiment performs the character string determination process in order of lighter determination processing load, that is, in the order of telephone number, e-mail address, and address. The first determination unit 113 checks the size of the data fetched into the data analysis buffer. If the size is 3 bytes or less, the first determination unit 113 does not determine the data as personal information and does not perform the determination process. It may be.

  The telephone number determination means 113a determines whether or not the character string corresponds to a telephone number. If the character string satisfies the telephone number determination condition set in the quarantine table 10c, the character string is a telephone number. It judges that it corresponds to a number, notifies that to the 2nd judgment means 116, and ends the judgment processing by the 1st judgment means 113 to the above-mentioned character string. In the present embodiment, the phone number determination condition is that the character string is a sequence of 9 to 11 half-width numerals or full-width numerals, the first character (first character) is “0”, and the second character is “0”. ""

  The e-mail address determination unit 113b determines whether or not the character string corresponds to a telephone mail address when the telephone number determination unit 113a determines that the character string does not correspond to a telephone number. If the character string satisfies the e-mail address determination condition set in the quarantine table 10c, it is determined that the character string corresponds to the e-mail address, and that is notified to the second determination means 116. The determination process by the first determination unit 113 is terminated.

In the present embodiment, the e-mail address determination condition is “one or more ASCII characters” + “@ (at sign)” + “one or more ASCII characters” + “. (Dot)” in the character string.
”+“ ASCII character of one or more characters ”is included, and the last character of the character string is a half-width alphabetic character. In this case, the shortest e-mail address is, for example, “a @ aa”, and a character string that ends with a non-English character (for example, a number) such as “123@45.67” is determined not to be an e-mail address. It will be. According to the e-mail address determination condition, data less than 5 bytes is not subject to e-mail address determination, and no determination process is performed.

  The address determination unit 113c determines whether or not the character string corresponds to an address (residence) when the e-mail address determination unit 113b determines that the character string does not correspond to an e-mail address. When the character string satisfies the address determination condition set in the quarantine table 10c, it is determined that the character string corresponds to the address, and the second determination means 116 is notified of this.

  In the present embodiment, the address determination condition includes “1 to 13 full-width characters” + “city” or “ku” or “county” + “one or more full-width characters or half-width characters” in the character string. And the first character of the character string matches the initials of 47 prefecture names or city names in Japan. As a result, for example, a character string that includes a “ward” such as “acceptance classification name” in the middle but has no relation to the address is not erroneously determined as an address. At this time, if the arithmetic processing capability of the CPU 10a is sufficiently high, it may be added to the address determination condition that a 7-digit number corresponding to the postal code is included in addition to the character string. According to the address determination condition, data less than 5 bytes is not subject to determination of an e-mail address, and determination processing is not performed.

  The character determination unit 114 sets the character string in the quarantine table 10c when the first determination unit 113 determines that the character string does not correspond to any of a telephone number, an e-mail address, and an address. Whether the number of characters in the character string is within a predetermined range and all the characters in the character string are kanji characters, It is determined whether or not the first character matches the first character of the last name belonging to the predetermined number of surnames that are more common among Japanese.

In the present embodiment, the character determination condition is that, as described above, the number of characters in the character string is within a predetermined range and all the characters in the character string are kanji characters. Is set in a general (appropriate) number range, for example, 2 or more and 6 or less as the number of characters of the name. More specifically, the determination condition by the character determination means 114 is that the character string is a 2-byte code character of 4 bytes to 12 bytes and data within the range of 0x889F to 0xEEEC (Shift-JIS kanji region) ) And the second byte is 0x40-0x7E or 0x80-0xFC
(Shift-JIS specification), and the first letter matches the initial letters of the last names belonging to the top 3000 last names that are common in Japanese. By targeting the top 3000 surnames, more than 80% of Japanese can be covered.

  The collating unit 115 is a character section determined by the first determining unit 113 as not corresponding to any of a telephone number, an e-mail address, and an address, and is further within the predetermined range by the character determining unit 114 and For a character section in which all characters are determined to be kanji, a character / character string included in the character section and an inappropriate character / inappropriate character string preset as a character / character string that cannot appear in the name Is checked to determine whether or not the character section includes an inappropriate character / unsuitable character string, and the result of the verification determination is notified to the second determination means 116.

Here, the inappropriate character / unsuitable character string is set in advance in the quarantine table 10c. For example, Tokyo, Osaka, Nagoya, Yokohama, Kyushu, Hokkaido, Kyoto, capital, individual, school, store, stock, prefecture , University, academy, TSE, research, management, general affairs, accounting, sales, general management, pharmaceutical, sales, school, education, specialization, architecture, machinery, corporation, factory, manufacturing, technology, commerce, books, unknown, deputy director, public , Publishing, Advertising, Broadcasting, Target, Wholesale, Retail, Planning, Human Resources, Information, Department, President, Regulatory, General Manager, Section Manager, Section Manager, Director, Head Office, Branch Office, Business, Business, Education, Precision, Petroleum, Transportation, Management , Strategy, material, engineer, electricity, production, tax, public relations, transportation, chief, computer, finance, office work, development, policy, production, economy, industry, finance, banking, research, English, quality, warranty, equipment, charge , Chief, Secretary, Audit, Support, Design, Insurance, Safe, Business, Representative, Transportation, 1st, 2nd, 3rd, 4th, 5th, 6th, 7th, 8th, 9th, Special Sales, Facility, Name, Mail, Name, Name, City Hall, Affiliation, Features, Childhood, Christianity, Association , Church, union, sect, commerce, nationwide, branch, contact, assembly, life, consumption, promotion, city hall, ward office, general, amendment, function, overview, composition, company, organization, association, deletion, document, deadline, valid Characters / character strings that cannot appear in general names such as, maintenance, that is, characters / character strings that are inappropriate as names.

  The second determination means (determination means) 116 is based on the determination result by the telephone number determination means 113a, the e-mail address determination means 113b and the address determination means 113c in the first determination means 113 and the verification determination result by the verification means 115. It is determined whether or not the target file is a personal information file.

  More specifically, the second determination unit 116 receives notification of determination results from the telephone number determination unit 113a, the e-mail address determination unit 113b, and the address determination unit 113c. Counts the number of character sections considered to be applicable, and receives the collation determination result from the collating means 115, and the character section determined by the collating means 115 as not including an inappropriate character / inappropriate character string as the name Count the number.

  Then, the second determination means 116 is based on the counting results (four count values; the number of telephone numbers, the number of e-mail addresses, the number of addresses, the number of names) for each of the telephone number, the e-mail address, the address, and the name. A determination value that increases as these count values increase is calculated. For example, the second determination means 116 may calculate the sum of four count values as the determination value, or set a weighting factor in advance for each of the telephone number, e-mail address, address, and name. The sum of the multiplication results of the weighting coefficient and the count value for the personal information element may be calculated as the determination value, and various methods for calculating the determination value are conceivable.

  When the determination value as described above is calculated, the second determination unit 116 determines whether or not the target file is a personal information file based on the determination value. Specifically, when the determination value exceeds a predetermined threshold, it is determined that the target file is a personal information file. When making such a determination, the second determination means 116 further assigns a P mark (private level mark) according to the size of the determination value to the target file and sets / registers it in the P mark table 10d. And rank. As described above, the P mark is a level indicating the high possibility that the target file is a personal information file. The larger the determination value, the higher the P mark is set.

For example, when the determination value is 10 or more, it is determined that the target file is a personal information file. When the determination value is 10 or more and less than 100, “P1” is assigned as the P mark, and when the determination value is 100 or more and less than 1000, “P2” is assigned as the P mark. When it is 1000 or more and less than 10,000, “P3” is assigned as the P mark, and when the determination value is 10000 or more, “P4” is assigned as the P mark. The predetermined threshold for determining the personal information file and the reference value for determining the P mark are set as appropriate from the personal information management server 20 (a management console 24 described later). In addition, although the P mark is ranked into four “P1” to “P4” here, the number of ranks is not limited to this.

  The P mark (P mark table 10d) assigned to the target file as described above is transmitted to the personal information management server 20 via the transmission / reception means 16 and the network 40, and as will be described later with reference to FIG. 23 is stored in the database 20b. Then, the electronic file to which the P mark is assigned is managed as a personal information file by the personal information management server 20 (personal information management means 25 described later) according to the rank of the P mark as described later.

[1-3] Functional Configuration of the Personal Information Management Server According to the Present Embodiment FIG. 4 is a block diagram showing the functional configuration of the personal information management server 20 according to the present embodiment. As shown in FIG. The information management server 20 includes a CPU 20a that executes various processes, a database (RDB: Relational DataBase) 20b that stores and saves log information and personal information files from each client terminal 10, and a log that is saved in the database 20b. The display unit 20c displays various information including information and personal information.

  The CPU 20a functions as client information collection means 21, installation means 22, collection means 23, management console 24, personal information management means 25, display control means 26, and transmission / reception means 27. These functions are provided by the CPU 20a. This is realized by executing a personal information management server program.

  The client information collecting unit 21 collects client information (host information) from a plurality of client terminals 10 that are communicably connected via the network 40 when searching and managing a personal information file. The client terminal 10 to be searched and managed (or the client terminal 10 in which the personal information search program described above is not installed) is recognized.

  The installation means 22 is a personal information search program that causes each client terminal 10 to perform a self-search for personal information via the network 40 (the personal information search means 11, the CPU usage rate monitoring means 12, the input / output monitoring in the client terminal 10). Means 13, control means 14, access monitoring means 15, and program for executing functions as transmission / reception means 16).

The collecting unit 23 receives and collects the results of self-search (link destination information of personal information file, determination value, P mark, etc.) executed by each client terminal 10 via the network 40 and the transmitting / receiving unit 27, and the database 20b.
The management console 24 sets and manages determination conditions (such as the quarantine table 10c, a predetermined threshold required for determining a personal information file and a P mark) to be instructed to each client terminal 10. . In the quarantine table 10c, the above-described telephone number determination condition, e-mail address determination condition, address determination condition, character determination condition (predetermined range) and inappropriate characters / unsuitable character strings are set.

  The personal information management means 25 manages personal information files in each client terminal 10 based on the search results collected by the collection means 23 and stored in the database 20b. The personal information search means 11 of each client terminal 10 An electronic file determined to be a personal information file (an electronic file with a P mark; hereinafter referred to as a personal information file) is a management target.

  The personal information management means 25 notifies the user (holder) of the personal information file of the caution information / warning information according to the judgment value (or P mark) of the personal information file transmitted from each client terminal 10. Or forcibly capture or collect a personal information file from the client terminal 10 storing the personal information file, or forcibly prohibit the personal information file from being output from the client terminal 10 to the outside. The personal information file is stored in a folder (not shown) accessible only to the administrator, or the file access management server 30 manages access to the personal information file.

  For example, when the rank of the P mark is “P1”, the recommendation by the warning information is not performed, but the fact that the personal information file of “P1” exists is recorded as a log. When the rank of the P mark is “P2”, notice information in a pop-up display is sent to alert the user of the personal information file. When the rank of the P mark is “P3”, the system administrator is notified by e-mail as warning information that there is a user storing the personal information file, and the personal information file is returned. To the user. When the rank of the P mark is “P4”, the personal information file is forcibly captured / collected from the client terminal 10 and the personal information file is forcibly prohibited from being output from the client terminal 10 to the outside. The personal information file is stored in a folder accessible only to the administrator, or the file access management server 30 manages the access to the personal information file. Even if the P mark rank is not “P4”, if the personal information file of “P3” is left for a predetermined number of days, the rank of the P mark is “P4” for the personal information file. You may make it perform the treatment similar to the case.

Further, the personal information management means 25 has a function of searching the personal information file stored in each client terminal 10 or the database 20b with various accuracy, and a function of causing the display control means 26 to display the search result on the display unit 20c. have.
The display control unit 26 controls the display state of the display unit 20c to display various types of information on the display unit 20c. The transmission / reception unit 27 transmits various types of information to and from each client terminal 10 via the network 40. Send and receive.

[1-4] Functional Configuration of File Access Management Server of this Embodiment FIG. 5 is a block diagram showing the functional configuration of the file access management server 30 of this embodiment. As shown in FIG. The access management server 30 manages, for example, a personal information file (a personal information file with a P mark rank “P4”) instructed from the personal information management server 20 (personal information management means 25). As will be described later, a CPU 30a that executes processing and a storage unit 30b that stores an encryption key, a decryption key, and the like are provided. In this case, the personal information file whose P mark rank is “P4” is a management target, but regardless of the rank of the P mark, all the electronic information that is determined to be a personal information file by the personal information searching means 11. The file may be a management target of the file access management server 30.

  The CPU 30a functions as a transmission / reception unit 31, a conversion unit 32, an encryption unit 33, and a determination unit 34, which will be described later. These functions are realized by the CPU 30a executing a program for a file access management server. Is done. Further, as will be described later, the storage unit 30b has an encryption key for encrypting the personal information file, a decryption key for decrypting the encrypted personal information file, and an access to the encrypted personal information file. Stores authority (to be described later) and user ID / password of a pre-registered user [registrant (employee) who is permitted to view encrypted files], and is configured by a hard disk or RAM, for example. .

The transmission / reception means 31 is realized by a communication function originally possessed by the file access management server 30, and includes a personal information file reception means 31a, an encrypted file transmission means 31b, an authentication information reception means 31c and a decryption which will be described later. It functions as the key transmission means 31d.
The personal information file receiving means 31 a receives a personal information file to be managed from the personal information management server 20 via the network 30.

  The conversion unit 32 converts the personal information file to be managed received by the personal information file receiving unit 31a into a completed document file such as a PDF (Portable Document Format) file that is difficult to falsify. The conversion means 32 is realized by, for example, a PDF driver. By starting the PDF driver, the personal information file is converted to PDF, and a PDF file as a completed document file is generated.

The encryption unit 33 encrypts the PDF file obtained by the conversion unit 32 using a predetermined encryption key.
The encrypted file transmission unit 31 b transmits a file encrypted (keyed) by the encryption unit 33 (hereinafter referred to as an encrypted file) to the personal information management server 20 via the network 40.

  In the management by the file access management server 30, the user has various access authorities (permissions such as viewing, printing, copying, etc.) for each encrypted file depending on the policy setting at the time of encryption by the encryption means 33 as described above. Set for each encrypted file. At that time, one type of policy is set in order to simplify the system operation, and the access right at each client terminal 10 for all encrypted files is determined by the policy setting [for example, all the in-houses where the system 1 is installed. As the access authority of all employees / all users (all registered users registered in the file access management server 30), only the viewing authority is set / granted automatically (forced), and access other than browsing, such as printing, It may be possible to prevent access such as copying, saving as another name, and screen capture (screen shot). .

  The authentication information receiving unit 31c receives the authentication information transmitted from the client terminal 10 or the personal information management server 20 via the network 40 when the client terminal 10 or the personal information management server 20 accesses the encrypted file. . Here, the authentication information is a file access indicating that the user of the client terminal 10 or the personal information management server 20 who is trying to open the encrypted file is a valid transmission destination (user / registrant) of the encrypted file. This information is necessary for the determination and authentication by the management server 30 and includes the user ID and password registered in advance in the file access management server 30 (storage unit 30b) for the user of the service by the file access management server 30. Yes. These user ID and password are input by the user operating the keyboard and mouse when opening the encrypted file.

  The determination unit 34 determines whether the client terminal 10 / personal information management server 20 that has transmitted the authentication information is a valid transmission destination of the encrypted file, based on the authentication information received by the authentication information reception unit 31c. In practice, it is determined whether or not the user ID and password input by the user match the user ID and password registered and stored in the storage unit 30b of the file access management server 30 in advance. Thus, it is determined and authenticated whether or not the user is a valid registrant.

  The decryption key transmitting means 31d reads out the decryption key for decrypting the encrypted file from the storage unit 30b when the determination means 34 authenticates that the user is a valid registrant, and the client terminal 10 or This is transmitted to the personal information management server 20 via the network 40.

  When the client terminal 10 or the personal information management server 20 receives the decryption key from the file access management server 30, the decryption key is decrypted using the decryption key to restore the original personal information file. Access (for example, browsing) according to the given access authority is performed on the personal information file thus provided.

[2] Operation of Personal Information Management System of the Present Embodiment Next, the operation of the personal information management system 1 of the present embodiment configured as described above will be described with reference to FIGS.

[2-1] Operation of Personal Information Searching Unit in Client Terminal In the personal information searching unit 11 of the present embodiment, the appearance frequency of the telephone number, e-mail address, address, and name is quantified as follows, The file is specified and searched. At that time, when the character section cut out by the cutting means 112 includes an inappropriate character / unsuitable character string preset as a character / character string that cannot appear in the personal information, the character section is As a character / character string that cannot be seen in the personal information in advance in the character section cut out by the cutting means 112, it is excluded because it is regarded as not corresponding to the personal information element (name in this embodiment). If the specified inappropriate character / inappropriate character string is not included, the character section is regarded as corresponding to the personal information element constituting the personal information, that is, the personal information element appears. , Count up the number of appearances.

  A flow chart (steps S101 to S118) shown in FIG. 6 shows a series of procedures for searching for a personal information file executed by the personal information search means 11 (personal information search program) described above in each client terminal 10 of the present embodiment. It explains according to.

  When constructing the personal information management system 1 of the present embodiment, first, a personal information management server program is installed in a computer that should function as the personal information management server 20, and the computer executes the personal information management server program. As a result, the personal information management server 20 functions. When starting the search / management of the personal information file, as will be described later with reference to FIG. 9 (steps S401 to S403), the personal information management server 20 causes the client terminal to search / manage the personal information file. 10 is recognized, and the personal information search program is installed on the recognized client terminal 10 via the network 40.

  When the CPU 10a of the client terminal 10 executes the personal information search program installed in this way, the CPU 10a causes the personal information search means 11, the CPU usage rate monitoring means 12, the input / output monitoring means 13, the control means 14, and the access monitoring means. 15 and the function as the transmission / reception means 16. When installing the personal information search program, the quarantine table 10c is also transmitted. The personal information search program is included in advance in the personal information management server program.

  In the client terminal 10, when the personal information search means 11 is operated at a timing described later with reference to FIGS. 7 and 8, the P mark table 10d and the storage unit 10b are referred to, and the P mark is not set in the storage unit 10b. The presence / absence of an electronic file is determined (step S101).

If there is an electronic file with no P mark set (YES route in step S101), one electronic file with no P mark set is selected and read from the storage unit 10b as a target file (step S102). The text data is extracted by the extraction means (text extraction engine) 111 and is taken into the file buffer (step S103).

  In this way, from the text captured in the file buffer, the character section is cut out by the cutout unit 112 at the predetermined break position described above, and is passed through the data shaping buffer as a determination target / collation target. The data is sequentially written in the data analysis buffer (step S104). When cutting out a character section, as described above, the cutting means 112 removes unnecessary characters other than alphanumeric characters, katakana, hiragana, and kanji characters, for example, half-width spaces, full-width spaces, half-width hyphens, full-width hyphens. , Underbar, parenthesis,! , #, $,%, =, +, *,? Symbol characters such as, \, /, and | are removed.

  Whether or not the character string (hereinafter simply referred to as a character string) in the character section from which the symbol character has been removed by the cutting means 112 corresponds to any one of a telephone number, an e-mail address, and an address. Are sequentially determined by the telephone number determination means 113a, the e-mail address determination means 113b, and the address determination means 113c (steps S105, S107, S109).

  First, the telephone number determination means 113a determines whether or not the character string corresponds to a telephone number (step S105). At this time, if the character string satisfies the telephone number determination condition set in the quarantine table 10c, that is, the character string is a sequence of 9 to 11 half-width numbers or full-width numbers, and the first character If the (first character) is “0” and the second character is other than “0”, it is determined that the character string corresponds to the telephone number (YES route in step S105), and that is the second determination means 116. In the second determination means 116, the count value corresponding to the number of appearances of the telephone number is incremented by 1 (step S106), and the process proceeds to step S114.

If it is determined that the character string does not correspond to a telephone number (NO route of step S105), the e-mail address determination means 113b determines whether or not the character string corresponds to a telephone mail address (step S107). ). At that time, if the character string satisfies the e-mail address determination condition set in the quarantine table 10c, that is, “one or more ASCII characters” + “@ (at mark)” + “one character or more characters in the character string”. ASCII
”+“. (Dot) ”+“ ASCII character of one or more characters ”is included, and if the last character of the character string is a half-width alphabetic character, the character string is added to the e-mail address. It is determined that it is applicable (YES route in step S107), and the fact is notified to the second determination unit 116. In this second determination unit 116, the count value corresponding to the number of appearances of the e-mail address is incremented by one. (Step S108), the process proceeds to Step S114.

  When it is determined that the character string does not correspond to an e-mail address (NO route in step S107), the address determination unit 113c determines whether the character string corresponds to an address (location) (step S109). ). In this case, if the character string satisfies the address determination condition set in the quarantine table 10c, that is, “1 to 13 double-byte characters” + “city” or “ku” or “ A character string “county” + “one or more full-width characters or half-width characters” is included, and the first character of the character string is the same as the initial name of 47 prefectures or city names in Japan. If so, it is determined that the character string corresponds to an address (YES route in step S109), and that is notified to the second determination means 116. In the second determination means 116, the address (location) is The count value corresponding to the number of appearances is incremented by 1 (step S110), and the process proceeds to step S114.

  When it is determined that the character string does not correspond to an address (NO route in step S109), that is, the first determination unit 113 determines that the character string does not correspond to any of a telephone number, an e-mail address, and an address. If the character string is determined by the character determination unit 114, the character string is set to the character determination condition (the number of characters is 2 or more and 6 or less, all characters are kanji characters, and the first character of the character string is set in the quarantine table 10c). It is determined whether or not the first letter of the last name belonging to the uppermost predetermined number of Japanese last letters is satisfied (step S111). When this character determination condition is not satisfied (NO route in step S111), the process proceeds to step S114.

  On the other hand, if this character determination condition is satisfied (YES route in step S111), the collation means 115 determines whether or not there is a character / character string included in the character section (the character string) and the name set in the quarantine table 10c. The appropriate character / unsuitable character string is collated, and it is determined whether or not the character section includes the inappropriate character / unsuitable character string (step S112). If there is at least one character / character string that matches the inappropriate character / inappropriate character string in the character section (YES route in step S112), the character / character string at that point The collation process is immediately terminated, and the process proceeds to step S114.

  If the character section does not include an inappropriate character / unsuitable character string (NO route in step S112), the result of the collation determination is notified to the second determination means 116. In the second determination means 116, The character section is considered to correspond to the name, and the count value corresponding to the number of appearances of the name is incremented by 1 (step S113), and the process proceeds to step S114.

  In step S114, it is determined whether or not there is a character section that has not yet been extracted from the text data extracted from the target file. If there is a character section (YES route), the process returns to step S104, and the same processing as described above (steps S104 to S113). ) Repeatedly. In this way, when all character sections are cut out from the text data and the determination processing, collation processing, counting processing, etc. for all character sections are completed (NO route in step S114), the second determination means 116 uses the telephone number, electronic Based on the count values for each of the mail address, address, and name, the above-described determination value is calculated (step S115).

  Then, the second determination means 116 determines whether or not the target file is a personal information file based on the determination value calculated in step S115 and ranks the P mark ( In this embodiment, “P1” to “P4” are performed) (step S116). The personal information file determination result and the P mark ranking result are registered in the P mark table 10d, and are also transmitted to the personal information management server 20 via the transmission / reception means 16 and the network 40 (step S117). In the personal information management server 20, the data is stored in the database 20b by the collecting means 23 (see step S404 in FIG. 9).

  Thereafter, it is determined again whether or not there is an electronic file with no P mark set in the storage unit 10b (step S118). If there is another electronic file with no P mark set (YES route in step S118), the process goes to step S112. Returning, the same processing as described above is executed. On the other hand, when there is no electronic file with no P mark set (NO route in step S118), the search operation for the personal information file is terminated.

[2-2] Operations of Control Unit and Access Monitoring Unit in Client Terminal Next, the operation timing of the personal information search unit 11 (personal information search program) will be described with reference to FIGS. Here, FIG. 7 and FIG. 8 are flowcharts for explaining the operation of the control means 14 in each client terminal 10 of the present embodiment.
The control means 14 according to the present embodiment operates according to the CPU usage rate according to the flowchart (steps S21 to S27) shown in FIG. 7, and the input / output operation (I / O operation) according to the flowchart (steps S31 to S33) shown in FIG. The operation control by is performed.

  In the operation control based on the CPU usage rate, the usage rate of the CPU 10a is monitored by the CPU usage rate monitoring means 12 (step S21), and it is determined whether or not the usage rate is equal to or lower than a predetermined threshold (step S22). When it is below the predetermined threshold value (YES route of step S22), the personal information searching means 11 is operated (step S23). After the operation, it is determined whether or not the search is finished (step S24). If not finished (NO route of step S24), the process returns to step S21. If it is determined in step S24 that the search has been completed (YES route), after the search result is notified (step S25), the process returns to step S21.

  If it is determined in step S22 that the usage rate is greater than the predetermined threshold (NO route), it is determined whether or not the personal information search means 11 is in operation (step S26). If it is not in operation (NO in step S26). If the route is in operation (YES route in step S26), the search operation by the personal information searching means 11 is interrupted (step S27), and then the procedure returns to step S21. In this way, the personal information searching means 11 can be operated like a screen saver.

  In the operation control by the input / output operation, the input / output monitoring unit 13 monitors the data input / output operation (I / O operation) in the storage unit 10b (step S31) and detects the occurrence of the input / output operation (step S31). YES route), the personal information searching means 11 is immediately activated (step S32), and after the search result is notified (step S33), the process returns to step S31. At this time, the electronic file to be input / output may be the above-described target file, and only the determination process (the processes in steps S103 to S117 in FIG. 6) may be performed as to whether or not the target file is a personal information file.

It should be noted that the operation control based on the two kinds of timings described above may be adopted and executed simultaneously in parallel, or only one of them may be adopted and executed.
In each client terminal 10, the access monitoring means 15 monitors the electronic file to which the P mark is attached (the electronic file determined to be a personal information file by the personal information searching means 11), and the electronic file is checked. When access (for example, data change by renaming, copying, erasing, moving, etc.) occurs, the fact is written as log information and transmitted to the personal information management server 20 via the transmission / reception means 16 and the network 40. In the personal information management server 20, the data is stored in the database 20b by the collecting means 23.

[2-3] Operation of Personal Information Management Server Next, the operation of the personal information management server 20 will be described with reference to the flowchart (steps S401 to S413) shown in FIG.
As described above, when constructing the personal information management system 1 of the present embodiment, first, a personal information management server program is installed in a computer that should function as the personal information management server 20, and the computer is the personal information management server. Functions as a personal information management server 20 (client information collection means 21, installation means 22, collection means 23, management console 24, personal information management means 25, display control means 26 and transmission / reception means 27) Fulfill.

When starting the search and management of the personal information file, the client information collecting unit 21 collects client information from a plurality of client terminals 10 that are communicably connected via the network 40 (step S401). The presence / absence of the client terminal 10 that is the object of searching and managing the personal information file or the client terminal 10 that has not yet installed the personal information search program is recognized (step S402), and such a client terminal 10 exists (step S402). The YES route of S402), the personal information search program is installed on the client terminal 10 via the network 40 by the installation means 22 (step S403).

  After installation of the personal information search program, or when the client terminal 10 as described above does not exist (NO route of step S402), the personal information file executed by executing the personal information search program in each client terminal 10 Self-search results (link information of personal information file, determination value, P mark, etc.) are received and collected by the collecting means 23 via the network 40 and the transmitting / receiving means 27 and stored in the database 20b (step S404). ).

Thereafter, according to the self-search result of the collected personal information file [here, the P mark level (rank)], the personal information management means 25 manages and operates each personal information file as follows ( Steps S405 to S413).
First, the presence / absence of a personal information file having a P mark level “P1” is determined (step S405). If there is a personal information file having a P mark level “P1” (YES route in step S405), that fact is stored as a log in the database 20b. (Step S406).

  If there is no personal information file of P mark level “P1” (NO route of step S405), or after log recording in step S406, it is determined whether or not there is a personal information file of P mark level “P2” (step S407). When there is a personal information file of P mark level “P2” (YES route in step S407), attention information in a pop-up display is notified to alert the user of the personal information file (step S408).

  If there is no personal information file of P mark level “P2” (NO route of step S407), or after the notice information is notified in step S408, it is determined whether or not there is a personal information file of P mark level “P3” (step S409). ) If there is a personal information file of P mark level “P3” (YES route in step S409), the fact that there is a user who stores the personal information file is sent as warning information to the system administrator by e-mail, etc. And the user is instructed to return the personal information file (step S410).

  If there is no personal information file of P mark level “P3” (NO route of step S409), or after issuing alarm information notification and a return instruction in step S410, whether there is a personal information file of P mark level “P4”. If there is a personal information file with the P mark level “P4” (YES route in step S411), the personal information file is forcibly captured and collected from the client terminal 10 (step S412). The personal information file is placed under the management of the file access management server 30, and the file access management server 30 manages the access to the personal information file (step S413). If there is no personal information file of the P mark level “P4” (NO route of step S411), or after the processing in step S413 is completed, the process returns to step S401.

As described above, with respect to the personal information file of the P mark level “P4”, the personal information file is forcibly prohibited from being output from the client terminal 10 to the outside, or only the administrator can It may be stored in an accessible folder. Further, when a personal information file having a P mark level “P3” is left for a predetermined number of days, the same processing as that for a personal information file having a P mark level “P4” may be executed. Furthermore, all of the personal information files of the P mark levels “P1” to “P4” may be placed under the management of the file access management server 30.

[2-4] Operation of File Access Management Server Next, the operation of the file access management server 30 will be described with reference to FIGS. 10 and 11.
First, the file conversion operation by the file access management server 30 of this embodiment will be described with reference to the flowchart shown in FIG. 10 (steps S51 to S54).

  In the file access management server 30, a personal information file (electronic file to be managed) instructed to be placed under the management of the file access management server 30 is sent from the personal information management server 20 (personal information management means 25) via the network 40. When the personal information file is received by the personal information file receiving means 31a (YES route in step S51), the personal information file is converted into a PDF file by the converting means 32 (step S52), and further, the encryption means 33 performs a predetermined encryption. Encryption processing (keying processing) is performed using the key (step S53). Then, the encrypted file is transmitted to the personal information management server 20 via the network 40 by the encrypted file transmitting means 31b (step S54).

Next, an authentication operation by the file access management server 30 according to the present embodiment will be described with reference to the flowchart (steps S61 to S65) shown in FIG.
When the user of the client terminal 10 or the user (administrator) of the personal information management server 20 tries to view the contents of the encrypted file, the authentication information is input by the user and transmitted to the file access management server 30. The When the authentication information is received by the authentication information receiving means 31c via the network 40 (YES route in step S61), the determination means 34 searches the storage unit 30b with the user ID included in the authentication information, and the user The registration password corresponding to the ID is read from the storage unit 30b, the password included in the authentication information is compared with the registration password read from the storage unit 30b, and it is determined whether or not these passwords match (client authentication) Step S62) is performed.

  When these passwords match and it is authenticated that the user of the client terminal 10 or the personal information management server 20 is a valid registrant (legal transmission destination) (YES route in step S63), the decryption key transmission means By 31d, a decryption key for decrypting the encrypted file is read from the storage unit 30b and transmitted to the client terminal 10 or the personal information management server 20 via the network 40 (step S64).

  When the client terminal 10 or the personal information management server 20 receives the decryption key, the encrypted file is decrypted using the decryption key to restore the original personal information file. , Access according to the access authority given in advance is executed. For example, when only the viewing authority is given as the access authority as described above, the user can browse the contents of the restored personal information file, but access other than browsing, for example, print output by a printer, Access to copy to other recording media, screen copy (screen capture), and alias saving is not possible at all.

On the other hand, if the determination unit 34 of the file access management server 30 determines that the passwords do not match, or if the registered password corresponding to the user ID is not registered in the storage unit 30b, the user is authorized. The file access management server 30 notifies the client terminal 10 or personal information management server 20 of an error via the network 40 (step S65). ).

[3] Effect of Personal Information Search Program and Personal Information Management System of the Present Embodiment As described above, the personal information search realized by executing the personal information search program as an embodiment of the present invention in the computer (CPU 10a). According to the means 11, in the second determination means 116, the character section that does not correspond to any of the telephone number, the e-mail address, and the address and includes the inappropriate character / unsuitable character string is not related to the personal information. On the other hand, a character section that does not correspond to any of a telephone number, an e-mail address, and an address and does not include an inappropriate character / unsuitable character string is considered to be related to a name.

  Therefore, for the character section determined to correspond to any one of the telephone number, the e-mail address, and the address by the first determination means 113, the determination process is terminated when the determination is made, and the telephone number, the e-mail Only a character section determined not to correspond to either an address or an address is subjected to a matching process with an inappropriate character / unsuitable character string, and the matching unit 115 also includes one inappropriate character / unsuitable character string. However, when it is determined that it is included in the character section, the collation process can be terminated, so the name collation process is faster than the conventional method that collates with all name strings in the name list. In other words, the personal information file search process can be performed at high speed.

At this time, in the first determination unit 113, the determination process is performed at a higher speed by performing the determination process of the character string in the character section in order from the lighter determination process load, that is, in the order of the telephone number, the e-mail address, and the address. Can be executed efficiently.
In addition, since the second determination unit 116 regards all character sections that do not include inappropriate characters / unsuitable character strings as corresponding to names, electronic files that do not include inappropriate characters / unsuitable character strings for names, It is possible to reliably search for an electronic file that is highly likely to contain name information and is likely to be a personal information file. That is, the number of electronic files that are determined to be personal information files according to the present embodiment is larger than that of the conventional method, and an electronic file that is highly likely to be a personal information file (suspicious electronic file) can be reliably identified. it can.

  Furthermore, in this embodiment, the character determination means 114 determines whether the number of characters in the character section is 1 or more and 6 or less and all the characters in the character section are kanji characters, and the characters satisfying this character determination condition. Since only the section is a collation target by the collation means 115, the character section to be collated by the collation means 115 is narrowed down to a character section having a higher possibility of a name, and the collation accuracy of the name can be improved. At the same time, name verification processing can be performed at high speed. In addition, since a long character section having more than 6 characters is excluded from the collation target by the collating means 115, it contributes to further speeding up the name collating process, that is, further speeding up the personal information file search process. Become.

  In particular, according to the personal information search program of the present embodiment, when the cutting unit 112 cuts out text data as a determination target character section, the elements in the text data are not separated by clear delimiters. Also, the boundary position between 1-byte code character and 2-byte code character, that is, the boundary position between a half-width character and a full-width character (a portion where a half-width character is followed by a full-width character or a portion where a half-width character is followed by a half-width character), The text data is divided and cut out as character sections at the boundary position between the full-width arithmetic numbers and the characters excluding the full-width arithmetic numbers and hyphens.

This makes it possible to mix addresses and names written in double-byte characters and strings such as phone numbers and e-mail addresses written in single-byte characters without being separated by delimiters in text data. Address, name, phone number, and e-mail address even if the address, name, etc. written in and the numeric string such as a phone number written in full-width characters are mixed in the text data without being separated by a delimiter A character section can be cut out for each personal information element. Accordingly, it is possible to reliably determine personal information elements such as address, name, telephone number, and e-mail address, and to search the personal information file efficiently and reliably in a short time.

Further, as an e-mail address determination condition by the e-mail address determination means 113b, the character string in the character section to be determined includes “one or more ASCII characters” + “@ (at mark)” + “one or more ASCII characters” + “ . (Dot) "+" AS of one or more characters
“@ (At sign)” is used to display the unit price and unit by setting that the character string “CII character” is included and the last character of the character string is a half-width alphabetic character. A string of numbers that is “@ (at sign)” followed by “one or more half-width numbers” + “. (Dot)” + “one or more half-width numbers” (for example, “123@45.67 ") Can be reliably prevented from being erroneously determined as an e-mail address. Therefore, it is possible to reliably determine personal information elements such as an e-mail address, and it is possible to search for a personal information file efficiently and reliably in a short time.

In the electronic mail address, the character string after the last “. (Dot)” after “@” is always an alphabetic character string such as “com”, “net”, and “jp” at present. In general, “@” is often used to display a unit price or a unit. For example, one of an article
When displaying the price and weight per piece, “@” may be used, such as “@ 100.00” or “@ 10.55”. For this reason, the e-mail address determination condition is simply that “one or more ASCII characters” + “@ (at mark)” + “one or more ASCII characters” + “. (Dot)” in the character string in the character section to be determined. + If a character string that is “one or more ASCII characters” is included, the above character strings containing “@ 100.00” or “@ 10.55” may be mistakenly recognized as e-mail addresses. However, by adding that the last character of the character string is a single-byte alphabetic character to the e-mail address judgment condition, the character string including the numeric character strings “@ 100.00” and “@ 10.55” as described above It is possible to reliably prevent erroneous recognition as an e-mail address.

  Further, as an address determination condition by the address determination means 113c, “one or more full-width characters” + “city” or “ku” or “county” + “one or more full-width characters or half-width characters is added to the character string in the character section to be determined. ”And the first character of the character section to be judged and the initials of the 47 prefectures or city names. , When a character string that includes "county" in the middle but is not related to the address at all is mistakenly determined as an address, and when 47 prefecture names or city names are determined to match completely Compared with an extremely short time, it is possible to efficiently and reliably search for a character section with high accuracy as an address.

  Furthermore, the first character of the character string to be determined matches the initial character of the last name belonging to the upper predetermined number (for example, the top 3000 types) common to Japanese in the character determination condition (name determination condition) by the character determination unit 114. By adding this, it is possible to efficiently and reliably search for a character section having a high degree of accuracy as a name in a very short time compared with the case of determining complete match of the last name.

On the other hand, according to the personal information management system 1 as an embodiment of the present invention, the personal information file can be automatically specified and searched by executing the personal information search program described above in each client terminal 10. It is possible to create personal information files (electronic files that are highly likely to be personal information files) that exist in a distributed manner, for example, within a company, without human cooperation and without placing a special burden on the person in charge. It is possible to search and put it in a state where it can be found and managed. Accordingly, it is possible to reliably respond to requests for disclosure and correction of personal information, and to reliably prevent inadvertent leakage and leakage of personal information and unauthorized use of personal information.

  At this time, the usage rate (usage load) of the CPU 10a is monitored in each client terminal 10, and when the usage rate is equal to or less than a predetermined threshold, the personal information search means (search engine) 11 is operated to load the CPU 10a. It is possible to identify personal information files without hanging them.

  Each client terminal 10 monitors the data input / output operation (I / O operation) with respect to the storage unit 10b, and operates the personal information search means (search engine) 11 when the input / output operation occurs. In the case where new data is input to the storage unit 10b in FIG. 6 or when data is output from the storage unit 10b in the client terminal 10 (for example, not only when data is output from the storage unit 10b to be attached to an email, Whether or not the electronic file included in the input / output data is a personal information file when data is output from the storage unit 10b to be written to an external storage medium such as a CD, DVD, magnetic disk, optical disk, or magneto-optical disk). Can be monitored and the movement of the personal information file can be monitored. It is possible to more reliably prevent prepared outflow-leakage.

  Further, each client terminal 10 monitors an electronic file determined by the access monitoring means 15 as a personal information file (in this embodiment, a file given a P mark), and accesses the electronic file (for example, renaming, When a data change due to copying, erasing, moving, etc. occurs, the fact is transmitted to the personal information management server 20 as log information, so access (operation / change) to an electronic file that is likely to be a personal information file History) is tracked and managed (tracked) by the personal information management server 20, and unauthorized use of personal information can be prevented more reliably.

  The personal information file searched by the personal information search means 11 is managed by the personal information management server 20 (personal information management means 25) according to the P mark (rank / level) given to each personal information file. Notification of warning / warning information to users (holders) and system administrators of personal information files, forcibly capturing and collecting personal information files from the client terminal 10 (storage unit 10b), personal information files Is forcibly prohibited from being output from the client terminal 10 (storage unit 10b), the personal information file is stored in a folder accessible only to the administrator, and access to the personal information file is managed by file access It can be managed by the server 30, and personal information is inadvertently leaked or leaked, or personal information is fraudulent. Or the like can be prevented more reliably.

[4] Modification In the above-described embodiment, the personal information management system 1 adopting the client-server configuration has been described. However, a system (personal information) having a configuration as shown in FIG. The management system 1A) can also manage personal information similar to the embodiment described above. Here, FIG. 12 is a block diagram showing a configuration of a modified example (personal information management system 1A) of the personal information management system of the present invention.

A system 1A shown in FIG. 12 includes a plurality of terminals (PCs) 50 and a management terminal (PC) 60 that is connected to these terminals 50 via a network (in-house LAN) 40 so as to be communicable. Yes.
Similarly to the client terminal 10 described above, the terminal 50 is a terminal device such as a personal computer (PC) used by each employee (user) in the company or the like, and is a personal information management target.

The management terminal 60 has an information collection function for collecting inventory information from a plurality of terminals 50 via the network 40 in an agentless manner. This information collection function is realized by, for example, WMI [Windows (registered trademark) Management Instrumentation]. By using this WMI, each terminal [specifically, the same network that does not exceed NAT (Network Address Translator) is used. Identification information that can identify each terminal 50 [for example, host name, MAC (Medium Access Control) address, IP
(Internet Protocol address, etc.) are collected as inventory information without an agent. Based on the collected inventory information, the management terminal 60 can grasp how many terminals (PCs) 50 exist in the designated segment (address block). Accordingly, when the personal information management system 1A of the present invention is introduced into a system having a general configuration as shown in FIG. 12, the number of terminals 50 to be personal information managed without installing a client program. And identification information (IP address, etc.) can be grasped.

Then, the management terminal 60 outputs the inventory information collected by WMI as described above as CSV (Comma Separated Value) format file data, and based on the file data, when the personal information management system 1A was introduced, the management terminal 60 described above. A distribution plan for distributing the personal information search program by distribution means described later is created. The distribution plan may be automatically created on the management terminal 60, or may be created by an operator who refers to the display on the management terminal 60 or the print output from the management terminal 60.

  Further, when the resource information (CPU performance, storage capacity, software information, version information, etc.) of each terminal 50 is collected as inventory information and the file data includes the resource information, It is also possible to create a distribution plan taking into account resource information. In this case, for example, based on the resource information, the environment of the terminal 50 (CPU performance, storage capacity, software information, version information, etc.) is suitable for installation and execution of the personal information search program. The distribution plan is created so that the personal information search program is distributed to the terminal 50 having a suitable environment.

  Furthermore, in the system 1A shown in FIG. 12, it is possible to exchange e-mails between the terminals 50 and the management terminal 60 by a general e-mail function, and this e-mail function is used. Functions as distribution means and collection means described later are realized.

  Here, the distribution means distributes the personal information search program to cause a part or all of the plurality of terminals 50 to execute the self-search of the personal information file in accordance with the distribution plan created as described above. In the system 1A shown in FIG. 12, the personal information terminal program is distributed to each terminal 50 by transmitting an e-mail attached with the personal information search program.

The e-mail attached with the personal information search program may be transmitted from the management terminal 60, or an asset management server (not shown) for managing assets (resources) in the plurality of terminals 50 as a part of the distribution means. The personal information search program may be distributed from the asset management server in connection with the network 40.
The personal information search program distributed to each terminal 50 as described above is executed by designating the program through the absolute path from the management terminal 60.

The collecting means is for collecting the results of the self-search performed by executing the personal information search program in each terminal 50 in a place designated by the administrator (for example, the storage unit of the management terminal 60). In the system 1A shown in FIG. 12, each terminal 50 sends an e-mail attached with the result of the self-search to the location designated by the administrator, whereby the result of the self-search is collected at the location designated by the administrator. It has come to be.

Next, the procedure for introducing the personal information management system 1A of the present invention into the system as shown in FIG. 12 will be described according to the flowchart (steps S71 to S76) shown in FIG. 13 with reference to FIG.
First, the management terminal 60 is connected to the network 40, and inventory information is collected from each terminal 50 by the WMI of the management terminal 60 (step S71; see arrow A1 in FIG. 14). As a result, as described above, the number of terminals 50 and the IP addresses of personal information management targets in the specified segment (address block; same network) can be grasped without installing the client program.

  The inventory information collected in this way is output as CSV format file data (step S72). Based on the file data (inventory information), the personal information management target terminal 50 in the segment is specified. A distribution plan for the personal information search program is created (step S73). In addition, the file data collected and output as described above are accumulated and stored for several generations, and the newly acquired inventory information file data is compared with the accumulated and stored file data, and newly introduced terminals and deleted Difference list data such as a terminal may be output as a distribution plan.

  Thereafter, by using a general e-mail function and transmitting the e-mail attached with the personal information search program to the personal information management target terminal 50 in accordance with the distribution plan created as described above, the individual The information terminal program is distributed to the personal information management target terminal 50 (step S74; see arrow A2 in FIG. 14). At this time, when an asset management server for managing assets (resources) in the terminal 50 is connected to the network 40, the personal information search program can be distributed from the asset management server.

  Then, the personal information search program distributed to the personal information management target terminal 50 is executed by designating the program through the absolute path from the management terminal 60 (step S75; see arrow A3 in FIG. 14). When the personal information search program is started, the personal information file is searched for in each terminal 50 in the same manner as described above, and the search result is attached to the e-mail and specified by the administrator (for example, the management terminal 60). The personal information file is managed in the same manner as in the above-described embodiment based on the collected result (step S76).

  Thus, according to the system 1A shown in FIG. 12, the inventory information of each terminal 50 is collected agentlessly by the WMI of the management terminal 60, and the personal information search program is distributed based on the inventory information. -The personal information search program can be distributed to each terminal 50 and the personal information file in each terminal 50 can be managed with a very simple configuration without constructing a server system.

At this time, by distributing the personal information search program according to the distribution plan created based on the inventory information collected from each terminal 50, the personal information search program can be distributed efficiently. At this time, the personal information search program can be executed by creating a distribution plan based on the resource information (CPU performance, storage capacity, software information, version information, etc.) of each terminal 50. A personal information search program can be distributed to the terminal 50 having a possible environment, and a situation in which a trouble occurs due to a resource problem when the personal information search program is executed can be prevented. .

  The personal information search program is executed on each terminal 50 by the management terminal 60, and the result of the self-search performed by executing the personal information search program on each terminal 50 is sent to the location designated by the administrator by e-mail. By collecting, it is possible to execute the self-search in each terminal 50 and collect the result of the self-search with a very simple configuration without constructing a client-server system. Therefore, as in the personal information management system 1 described above, it is possible to reliably search for personal information files that exist in a distributed manner, for example, within a company, without obtaining human cooperation and without placing a special burden on the person in charge. Can be put out and managed. Accordingly, it is possible to reliably respond to requests for disclosure and correction of personal information, and to reliably prevent inadvertent leakage and leakage of personal information and unauthorized use of personal information.

[5] Others The present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention.
For example, in the above-described embodiment, the case where the personal information file is searched and managed has been described. However, the present invention also applies to the case where confidential information (information with confidentiality obligation) is searched and managed in a company or the like. It is possible to obtain the same operational effects as in the above-described embodiment, and to reliably prevent inadvertent outflow / leakage of confidential information and unauthorized use of confidential information. In that case, as an inappropriate character or inappropriate character string, a character or a character string that cannot appear in the confidential information is set.

  In the above-described embodiment, the name determination condition is set such that inappropriate character / unsuitable character string preset as a kanji / kanji character string that cannot appear in the name is not included in the character section to be determined. However, it may be further added to the address determination condition that an inappropriate character / unsuitable character string preset as a kanji / kanji character string that cannot appear in the address is not included in the character section to be determined. .

  Further, in the above-described embodiment, the case where the personal information elements other than the name are the three elements of the telephone number, the e-mail address, and the address has been described. However, the present invention is not limited to this, and other than the name. As the personal information element, for example, date of birth, basic resident register number, account number, credit card number, license number, passport number, etc. may be used.

  Further, while the search by the personal information search means 11 of each client terminal 10 (search for all electronic files stored in the storage unit 10b) is not completed, access to the electronic file in the storage unit 10b of the client terminal 10 is completed. (For example, data change by renaming, copying, erasing, moving, etc .; more specifically, output to an external recording medium, mail attachment, etc.) may be prohibited. In this case, the presence or absence of an electronic file determined to be a personal information file is confirmed, and the electronic file determined to be a personal information file is placed under the management of the personal information management server 20 (or file access management server 30). Up to this point, access to the electronic file in the storage unit 10b of the client terminal 10 is prohibited, so that it is possible to prevent the leakage and leakage of personal information more reliably.

In the above-described embodiment, the personal information search program in each client terminal 10 is self-searched by executing the personal information search program in each client terminal 10. It is also possible to search for a personal information file in the downloaded data by downloading the stored data and executing the personal information search program in the personal information management server 20. Similar effects can be obtained.

  By the way, the functions as the above-described personal information searching means 11, CPU usage rate monitoring means 12, input / output monitoring means 13, control means 14, access monitoring means 15 and transmission / reception means 16 in each client terminal 10 (all or As described above, a part of the functions) is performed by a computer (including a CPU, an information processing apparatus, and various terminals) executing a predetermined application program (personal information search program) installed from the personal information management server 20. Realized.

  In addition, the functions of the client information collection means 21, installation means 22, collection means 23, management console 24, personal information management means 25, display control means 26, and transmission / reception means 27 in the personal information management server 20 (each of the means) All or some of the functions are realized by a computer (including a CPU, an information processing apparatus, and various terminals) executing a predetermined application program (a program for a personal information management server) as described above.

  The personal information management server program including the personal information search program is, for example, a flexible disk, CD (CD-ROM, CD-R, CD-RW, etc.), DVD (DVD-ROM, DVD-RAM, DVD-R, DVD-). (RW, DVD + R, DVD + RW, etc.) and the like are provided in a form recorded on a computer-readable recording medium. In this case, the computer reads the personal information management server program from the recording medium, transfers it to the internal storage device or the external storage device, and uses it. Further, the program may be recorded in a storage device (recording medium) such as a magnetic disk, an optical disk, or a magneto-optical disk, and provided from the storage device to a computer via a communication line.

  Here, the computer is a concept including hardware and an OS (operating system), and means hardware operating under the control of the OS. Further, when the OS is unnecessary and the hardware is operated by the application program alone, the hardware itself corresponds to the computer. The hardware includes at least a microprocessor such as a CPU and means for reading a computer program recorded on a recording medium. The personal information search program and the application program as the personal information management server program are stored in the computer as described above to the personal information search means 11, the CPU usage rate monitoring means 12, the input / output monitoring means 13, the control means 14, and the access. Includes program code for realizing the functions of the monitoring means 15, the transmission / reception means 16, the client information collection means 21, the installation means 22, the collection means 23, the management console 24, the personal information management means 25, the display control means 26, and the transmission / reception means 27 It is out. Also, some of the functions may be realized by the OS instead of the application program.

  Furthermore, as a recording medium in the present embodiment, in addition to the flexible disk, CD, DVD, magnetic disk, optical disk, and magneto-optical disk described above, an IC card, ROM cartridge, magnetic tape, punch card, computer internal storage device (RAM) In addition, various computer-readable media such as an external storage device or a printed matter on which a code such as a barcode is printed can be used.

[6] Appendix (Appendix 1)
A personal information search program for causing a computer to realize a personal information search function for searching a personal information file having a predetermined number or more of personal information elements that can identify a specific individual from data in a storage unit,
Extraction means for extracting text data of a data aggregate included in the data;
A cutting means for cutting out a character section delimited at a predetermined delimiter position from the text data extracted by the extracting means; and
It is determined whether or not the character string in the character section cut out by the cutting means is a personal information element, and the data aggregate is stored in a personal information file based on the number of character strings determined to be personal information elements. As a personal information file determination means for determining whether or not
The personal information search program characterized in that the predetermined delimiter position includes a preset delimiter appearance position or a boundary position between a 1-byte code character and a 2-byte code character.

(Appendix 2)
The personal information search program according to appendix 1, further including a boundary position between a full-width arithmetic numeral and a character excluding a full-width arithmetic numeral and a hyphen as the predetermined delimiter position.

(Appendix 3)
A personal information search program for causing a computer to realize a personal information search function for searching a personal information file having a predetermined number or more of personal information elements that can identify a specific individual from data in a storage unit,
Extraction means for extracting text data of a data aggregate included in the data;
A cutting means for cutting out a character section delimited at a predetermined delimiter position from the text data extracted by the extracting means; and
It is determined whether or not the character string in the character section cut out by the cutting means is a personal information element, and the data aggregate is stored in a personal information file based on the number of character strings determined to be personal information elements. As a personal information file determination means for determining whether or not
The personal information file judging means adds “one or more ASCII (American Standard Code for Information Interchange) characters” + “@ (at mark)” + “one or more characters” to the character string in the character section cut by the cutting means. E-mail address determination condition that a character string “ASCII character” + “. (Dot)” + “one or more ASCII characters” is included and that the last character of the character string is a half-width alphabetic character A personal information search program for determining whether or not a character string in a character section cut out by the cutting means is an e-mail address as the personal information element.

(Appendix 4)
A personal information search program for causing a computer to realize a personal information search function for searching a personal information file having a predetermined number or more of personal information elements that can identify a specific individual from data in a storage unit,
Extraction means for extracting text data of a data aggregate included in the data;
A cutting means for cutting out a character section delimited at a predetermined delimiter position from the text data extracted by the extracting means; and
It is determined whether or not the character string in the character section cut out by the cutting means is a personal information element, and the data aggregate is stored in a personal information file based on the number of character strings determined to be personal information elements. As a personal information file determination means for determining whether or not
The personal information file determination means adds “one or more full-width characters” + “city” or “ku” or “county” + “one or more full-width characters” to the character string in the character section cut by the cutting means. And the first character of the character string matches the initials of 47 prefectures or city names in Japan as an address determination condition. A personal information search program for determining whether or not a character string in a character section is an address as the personal information element.

(Appendix 5)
A personal information search program for causing a computer to realize a personal information search function for searching a personal information file having a predetermined number or more of personal information elements that can identify a specific individual from data in a storage unit,
Extraction means for extracting text data of a data aggregate included in the data;
A cutting means for cutting out a character section delimited at a predetermined delimiter position from the text data extracted by the extracting means; and
It is determined whether or not the character string in the character section cut out by the cutting means is a personal information element, and the data aggregate is stored in a personal information file based on the number of character strings determined to be personal information elements. As a personal information file determination means for determining whether or not
The personal information file determining means is such that the number of characters in the character section cut out by the cutting means is within a predetermined range, the character in the character section is kanji, and the character string in the character section is The first character matches the initial character of the last name that belongs to the highest number of surnames common to Japanese people, and the inappropriate character or inappropriate character string preset as a kanji or character string that cannot appear in the name is the same character A personal information search program for determining whether or not a character string in a character section cut out by the cutting means is a name as the personal information element, with a name defining condition not included in a section .

(Appendix 6)
Any one of appendix 3 to appendix 5 characterized in that the predetermined delimiter position includes a preset delimiter appearance position or a boundary position between a 1-byte code character and a 2-byte code character. The personal information search program according to claim 1.
(Appendix 7)
The personal information search program according to appendix 6, wherein a boundary position between a full-width arithmetic numeral and a character excluding the full-width arithmetic numeral and a hyphen is further included as the predetermined delimiter position.

(Appendix 8)
When the computer functions as the personal information file determination means,
By determining whether or not the character string in the character section cut by the cutting means satisfies any one of the preset telephone number determination condition, e-mail address determination condition, and address determination condition, First determination means for determining whether or not any one of a telephone number, an e-mail address, and an address, which is a personal information element other than a name,
Whether or not the number of characters in the character section determined not to correspond to any of the telephone number, the e-mail address, and the address by the first determination means is within a predetermined range, and whether or not the character in the character section is a Chinese character Character judging means for judging,
A character section that is determined by the character determining means to be within the predetermined range and to be a kanji character is a character or character string included in the character section and a kanji or kanji character string that is not set in advance in the name. Collating means for determining whether or not the character section includes the inappropriate character or the inappropriate character string by verifying the appropriate character or the inappropriate character string, and
The number of character sections determined to correspond to any one of a telephone number, an e-mail address, and an address by the first determination means and the inappropriate character or inappropriate character string is not included by the matching means. The number of character sections determined is counted, and the computer is caused to function as second determination means for determining whether the data aggregate is a personal information file based on the count result. The personal information search program according to any one of appendix 1 to appendix 4.

(Appendix 9)
The character determination means further determines whether or not the first character of the character string in the same character section matches the initial characters of the last name belonging to the predetermined number of surnames that are more common in Japanese;
For the character section in which the collating means is determined by the character judging means to be the first letter of the last name that is within the predetermined range and is a Chinese character and the first character belongs to a higher number of surnames higher than Japanese, The personal information search program according to appendix 8, wherein the personal information is compared with an inappropriate character or an inappropriate character string.

(Appendix 10)
The second determination means regards the character string in the character section determined not to include the inappropriate character or the inappropriate character string by the matching means as a personal information element corresponding to the name, and the data aggregate The personal information search program according to appendix 8 or appendix 9, wherein it is determined whether or not the file is a personal information file.

(Appendix 11)
The second determination means determines the number of character sections determined by the first determination means as corresponding to any one of a telephone number, an e-mail address, and an address based on the counting result and the collation means. A determination value that increases as the number of character sections determined not to include the inappropriate character or the inappropriate character string increases, and the data aggregate when the calculated determination value exceeds a predetermined threshold The personal information search program according to any one of Supplementary Note 8 to Supplementary Note 10, wherein the personal information file is determined to be a personal information file.

(Appendix 12)
In the first determination means, it is determined whether or not the character string in the character section cut out by the cutting means corresponds to a telephone number, and if it does not correspond to a telephone number, whether or not it corresponds to an e-mail address. If it does not correspond to an e-mail address, it is determined whether or not it corresponds to an address, and when it is determined that it corresponds to any one of a telephone number, an e-mail address, and an address, the character string The personal information search program according to any one of Supplementary Note 8 to Supplementary Note 11, wherein the determination process is terminated.

(Appendix 13)
Multiple client devices,
A personal information management server connected to the plurality of client terminals so as to communicate with each other via a network and managing personal information files in a storage unit of the plurality of client terminals;
The personal information management server
Installation means for installing the personal information search program described in any one of appendix 1 to appendix 12 to cause each client terminal to perform a self-search of the personal information file via the network;
It is configured to include a collection means for receiving the result of self-search performed at each client terminal via the network and storing it in a database,
Each of the plurality of client terminals
Personal information search means for searching for a personal information file from data in the storage unit of each client terminal by executing the personal information search program installed from the personal information management server;
A personal information management system comprising transmission means for transmitting a result of self-search by the personal information search means to the personal information management server via the network.

(Appendix 14)
The personal information management server further comprises personal information management means for managing a personal information file searched by the personal information search means based on a search result received by the collection means. The personal information management system according to appendix 13.

(Appendix 15)
Each of the plurality of client terminals monitors the personal information file in the own terminal, and when access to the personal information file occurs in the own terminal, causes the transmission means to transmit the fact to the personal information management server The personal information management system according to appendix 14, further comprising an access monitoring means.

(Appendix 16)
16. The personal information management system according to appendix 14 or appendix 15, wherein the personal information management means notifies the user of the personal information file of warning information.
(Appendix 17)
The personal information according to any one of appendix 14 to appendix 16, wherein the personal information management means forcibly collects the personal information file from a client terminal storing the personal information file Management system.

(Appendix 18)
Any one of appendix 14 to appendix 16, wherein the personal information management means forcibly prohibits the personal information file from being output to the outside from a client terminal storing the personal information file The personal information management system according to one item.
(Appendix 19)
19. The personal information management system according to appendix 17 or appendix 18, wherein the personal information management means stores the personal information file in a folder accessible only to an administrator.

(Appendix 20)
A file access management server connected to the personal information management server so as to be able to communicate with each other and managing access to the electronic file;
20. The personal information management system according to any one of appendix 14 to appendix 19, wherein the personal information management means causes the file access management server to manage access to the personal information file.

(Appendix 21)
A personal information management server that is connected to a plurality of client terminals so as to communicate with each other via a network, and that manages personal information files in the plurality of client terminals,
Installation means for installing the personal information search program described in any one of appendix 1 to appendix 12 to cause each client terminal to perform a self-search of the personal information file via the network;
A personal information management server, comprising: a collection means for receiving a result of self-search performed at each client terminal via the network and storing the result in a database.

(Appendix 22)
As an object to be managed by the personal information management server, an information processing apparatus connected to the personal information management server via a network so that they can communicate with each other,
A personal information search means for searching for a personal information file from the data in the storage unit of the information processing apparatus by executing the personal information search program described in any one of the supplementary notes 1 to 12;
An information processing apparatus with a personal information management function, comprising: transmission means for transmitting a result of self-search by the personal information search means to the personal information management server via the network.

(Appendix 23)
Usage rate monitoring means for monitoring the usage rate of an arithmetic processing unit that executes processing in the information processing apparatus;
When the usage rate monitored by the usage rate monitoring unit is less than or equal to a predetermined threshold value, the personal information search unit is operated. On the other hand, when the usage rate exceeds a predetermined threshold value, the operation of the personal information search unit is performed. The information processing apparatus with a personal information management function according to appendix 22, further comprising control means for stopping the control.

(Appendix 24)
Input / output monitoring means for monitoring input / output operations of data in the storage unit of the information processing apparatus;
24. The supplementary note 22 or the supplementary note 23, further comprising a control means for operating the personal information search means when the input / output monitoring means detects the occurrence of the input / output operation. Information processing device with personal information management function.

(Appendix 25)
The personal information file searched by the personal information searching means is monitored, and when access to the personal information file occurs, an access monitoring means is further provided for transmitting the fact to the personal information management server by the transmitting means. The information processing apparatus with a personal information management function according to any one of Supplementary Note 22 to Supplementary Note 24, which is configured.

(Appendix 26)
A program that causes a computer to function as a personal information management server that manages personal information files in a plurality of client terminals that are communicably connected via a network,
Including the personal information search program described in any one of Appendix 1 to Appendix 12,
Installation means for installing the personal information search program to cause each client terminal to perform a self-search for a personal information file via the network; and
A program for a personal information management server, which causes the computer to function as a collecting means for receiving a result of self-search performed by each client terminal via the network and storing it in a database.

(Appendix 27)
A management terminal connected to a plurality of terminals in a communicable manner and having an information collecting function for collecting inventory information from the plurality of terminals in an agentless manner;
Based on the inventory information collected by the information collection function of the management terminal, any one of the supplementary notes 1 to 12 to cause a part or all of the plurality of terminals to perform a self-search for a personal information file A personal information management system comprising distribution means for distributing the personal information search program described in the section.

(Appendix 28)
The management terminal outputs the inventory information collected by the information collection function as file data in CSV (Comma Separated Value) format,
28. The personal information management system according to appendix 27, wherein the distribution means distributes the personal information search program according to a distribution plan of the personal information search program created based on the file data.

(Appendix 29)
29. The personal information management system according to appendix 28, wherein the distribution plan is created based on resource information of each terminal included in the file data.
(Appendix 30)
30. The personal information management system according to any one of appendix 27 to appendix 29, wherein the distribution means distributes the personal information search program using electronic mail.

(Appendix 31)
An appendix 27 to appendix 29, wherein an asset management server that manages assets in the plurality of terminals is provided as the distribution means, and the asset management server distributes the personal information search program. The personal information management system described.
(Appendix 32)
The personal information according to any one of appendix 27 to appendix 31, wherein the management terminal causes the personal information search program distributed and installed to some or all of the plurality of terminals to be executed. Management system.

(Appendix 33)
The system further comprises collection means for collecting the results of self-search performed by executing the personal information search program in a part or all of the plurality of terminals at a place designated by an administrator. The personal information management system according to any one of Appendix 27 to Appendix 32.

(Appendix 34)
The personal information management system according to appendix 33, wherein electronic mail is used as the collecting means.

It is a block diagram which shows the structure of the personal information management system as one Embodiment of this invention. It is a block diagram which shows the function structure of the client terminal (information processing apparatus with a personal information management function) of this embodiment. It is a block diagram which shows the detailed function structure of the personal information search means in the client terminal (information processing apparatus with a personal information management function) of this embodiment. It is a block diagram which shows the function structure of the personal information management server of this embodiment. It is a block diagram which shows the function structure of the file access management server of this embodiment. It is a flowchart for demonstrating operation | movement of the personal information search means in each client of this embodiment. It is a flowchart for demonstrating operation | movement of the control means in each client of this embodiment. It is a flowchart for demonstrating operation | movement of the control means in each client of this embodiment. It is a flowchart for demonstrating operation | movement of the personal information management server of this embodiment. It is a flowchart for demonstrating the file conversion operation | movement by the file access management server of this embodiment. It is a flowchart for demonstrating the authentication operation | movement by the file access management server of this embodiment. It is a block diagram which shows the structure of the modification of the personal information management system of this invention. It is a flowchart for demonstrating the introduction procedure of the personal information management system shown in FIG. It is a figure for demonstrating the introduction procedure of the personal information management system shown in FIG.

Explanation of symbols

1,1A Personal information management system 10 Client terminal (information processing device with personal information management function)
10a CPU (arithmetic processing unit)
10b Storage unit 10c Quarantine table 10d P mark table 11 Personal information search means (search engine, text extraction engine)
DESCRIPTION OF SYMBOLS 111 Extraction means 112 Extraction means 113 1st determination means 113a Telephone number determination means 113b E-mail address determination means 113c Address determination means 114 Character determination means 115 Collation means 116 2nd determination means (determination means)
12 CPU usage rate monitoring means 13 Input / output monitoring means 14 Control means 15 Access monitoring means 16 Transmission / reception means (transmission means)
20 Personal information management server 20a CPU
20b database 20c display unit 21 client information collection unit 22 installation unit 23 collection unit 24 management console 25 personal information management unit 26 display control unit 27 transmission / reception unit 30 file access management server 30a CPU
30b Storage unit 31 Transmission / reception means 31a Personal information file reception means 31b Encrypted file transmission means 31c Authentication information reception means 31d Decryption key transmission means 32 Conversion means 33 Encryption means 34 Determination means 40 Network (in-house LAN)
50 Personal information management terminal (PC)
60 Management terminal (PC)

Claims (5)

A personal information search program for causing a computer to realize a personal information search function for searching a personal information file having a predetermined number or more of personal information elements that can identify a specific individual from data in a storage unit,
Extraction means for extracting text data of a data aggregate included in the data;
A cutting means for cutting out a character section delimited at a predetermined delimiter position from the text data extracted by the extracting means; and
It is determined whether or not the character string in the character section cut out by the cutting means is a personal information element, and the data aggregate is stored in a personal information file based on the number of character strings determined to be personal information elements. As a personal information file determination means for determining whether or not
The personal information file determination means adds “one or more full-width characters” + “city” or “ku” or “county” + “one or more full-width characters or half-width characters to the character string in the character section cut by the cutting means. A character string “character” is included, and the first character of the character string matches the first letter of 47 prefecture names or city names in Japan as an address determination condition. And determining whether the character string in the character section cut out by is an address as the personal information element,
When the computer functions as the personal information file determination means,
By determining whether or not the character string in the character section cut by the cutting means satisfies any one of the preset telephone number determination condition, e-mail address determination condition, and address determination condition, First determination means for determining whether or not any one of a telephone number, an e-mail address, and an address, which is a personal information element other than a name,
Whether or not the number of characters in the character section determined not to correspond to any of the telephone number, the e-mail address, and the address by the first determination means is within a predetermined range, and whether or not the character in the character section is a Chinese character Character judging means for judging,
A character section that is determined by the character determining means to be within the predetermined range and to be a kanji character is a character or character string included in the character section and a kanji or kanji character string that is not set in advance in the name. Collating means for determining whether or not the character section includes the inappropriate character or the inappropriate character string by verifying the appropriate character or the inappropriate character string, and
The number of character sections determined to correspond to any one of a telephone number, an e-mail address, and an address by the first determination means and the inappropriate character or inappropriate character string is not included by the matching means. The number of character sections determined is counted, and the computer is caused to function as second determination means for determining whether the data aggregate is a personal information file based on the count result. A personal information search program. The character determination means further determines whether or not the first character of the character string in the same character section matches the initial characters of the last name belonging to the predetermined number of surnames that are more common in Japanese;
For the character section in which the collating means is determined by the character judging means to be the first letter of the last name that is within the predetermined range and is a Chinese character and the first character belongs to a higher number of surnames higher than Japanese, The personal information search program according to claim 1 , wherein the personal information is collated with an inappropriate character or an inappropriate character string. The second determination means regards the character string in the character section determined not to include the inappropriate character or the inappropriate character string by the matching means as a personal information element corresponding to the name, and the data aggregate and judging whether the personal information file, the personal information search program according to claim 1 or claim 2. The second determination means determines the number of character sections determined by the first determination means as corresponding to any one of a telephone number, an e-mail address, and an address based on the counting result and the collation means. A determination value that increases as the number of character sections determined not to include the inappropriate character or the inappropriate character string increases, and the data aggregate when the calculated determination value exceeds a predetermined threshold There and judging that the personal information file, the personal information search program according to any one of claims 1 to 3. In the first determination means, it is determined whether or not the character string in the character section cut out by the cutting means corresponds to a telephone number, and if it does not correspond to a telephone number, whether or not it corresponds to an e-mail address. If it does not correspond to an e-mail address, it is determined whether or not it corresponds to an address, and when it is determined that it corresponds to any one of a telephone number, an e-mail address, and an address, the character string wherein the determining processing is ended for personal information search program according to any one of claims 1 to 4.

Images