WO2022269862A1

WO2022269862A1 - Customer extraction system, information management system, analysis request device, customer extraction method, and program

Info

Publication number: WO2022269862A1
Application number: PCT/JP2021/023956
Authority: WO
Inventors: 賢治太田; 修瀧野; 敏行森山; 慧高橋
Original assignee: 日本電信電話株式会社
Priority date: 2021-06-24
Filing date: 2021-06-24
Publication date: 2022-12-29

Abstract

This information management system comprises an information management recording unit, an attribute information encryption unit, an encrypted attribute information recording means, an encrypted extraction rule recording means, an extraction rule execution means, and a processing execution unit. The attribute information encryption unit outputs encrypted attribute information obtained by encrypting plain text attribute information. The encrypted attribute information recording means records encrypted attribute information. The encrypted extraction rule recording means records an encrypted extraction rule obtained by encrypting a rule for extracting a customer. The extraction rule execution means executes the encrypted extraction rule for the encrypted attribute information. The processing execution unit executes processing relating to a customer extracted by the extraction rule execution means. This analysis request device comprises an analysis recording unit, an extraction rule encryption unit, and an extraction rule request unit. The extraction rule encryption unit encrypts the rule for extracting a customer and generates the encrypted extraction rule.

Description

Customer Extraction System, Information Management System, Analysis Request Device, Customer Extraction Method, Program

The present invention relates to a customer extraction system, an information management system, an analysis request device, a customer extraction method, and a program for extracting customers based on customer information.

　Businesses that provide customer services possess customer information (personal information, corporate information, etc.), and have a storage system (for example, a customer management database, etc.). There is also an information trust function (information bank, etc.) for the purpose of promoting data utilization of personal information. An organization that holds such personal information is called a personal information holding organization (see Non-Patent Document 1). Non-Patent Literature 1 describes a service that distributes products, services, and advertisements tailored to individuals by using personal attribute information (personal information) collected by personal information holding organizations such as information banks. ing. In the following, the customer may be not only an individual but also a company, so an organization holding customer attribute information will be referred to as an information holding organization. In addition, the business owns, as its own know-how, purchase customer tendency information for each product based on the customer information. This purchasing customer tendency information becomes a rule for extracting purchasing customers (hereinafter referred to as a customer extraction rule). As a technique for processing information while keeping information confidential, a secure computation technique disclosed in Non-Patent Document 2 is known.

However, even though the customer extraction rules are the know-how of the business, it was necessary to disclose the customer extraction rules to the information holding organizations in order to apply them to the customer attribute information held by the information holding organizations. SUMMARY OF THE INVENTION An object of the present invention is to provide a technique for extracting customers while keeping the rules for extracting customers confidential.

The customer extraction system of the present invention comprises an information management system and an analysis request device. The information management system includes an information management recording section, an attribute information encryption section, encrypted attribute information recording means, encrypted extraction rule recording means, extraction rule execution means, and a process execution section. The information management recording unit records plaintext attribute information, which is plaintext information of predetermined attributes for customers. The attribute information encryption unit outputs encrypted attribute information obtained by encrypting the plaintext attribute information. The encrypted attribute information recording means records encrypted attribute information. The encrypted extraction rule recording means records an encrypted extraction rule, which is an encrypted rule for extracting customers. The extraction rule executing means executes the encrypted extraction rule on the encrypted attribute information. The processing execution unit executes processing related to the customers extracted by the extraction rule execution means. The analysis requesting device includes an analysis recording section, an extraction rule encryption section, and an extraction rule requesting section. The analysis recording unit records rules for extracting customers. The extraction rule encryption unit encrypts a rule for extracting customers and generates an encrypted extraction rule. The extraction rule requesting unit requests the information management system to apply the encryption extraction rule.

According to the customer extraction system and information management system of the present invention, secure computing technology is applied to the recording and execution of rules for extracting customers, so customers can be extracted while keeping the rules confidential.

FIG. 2 is a diagram showing an example of the functional configuration of the customer extraction system according to the first embodiment; FIG. FIG. 4 is a diagram showing an example of predetermined attribute information; The figure which shows the example of the rule for extracting a customer. The figure which shows the processing flow after attribute information is provided. FIG. 4 is a diagram showing a processing flow for recording a customer extraction rule in an information management system and a processing flow for executing the customer extraction rule; FIG. 8 is a diagram showing a processing flow for recording attribute information including additional information according to the first embodiment; FIG. 10 is a diagram showing a functional configuration example of a customer extraction system of modification 1; FIG. 11 is a diagram showing a processing flow for recording attribute information including additional information according to Modification 1; The figure which shows the functional structural example of a computer.

Hereinafter, embodiments of the present invention will be described in detail. Components having the same function are given the same number, and redundant description is omitted.

In the following description, N is a predetermined integer of 3 or more, n is an integer of 1 or more and N or less, K is a predetermined integer of 2 or more and N or less, M is an integer of 1 or more, and m is 1 or more of M or less. be an integer. FIG. 1 shows a functional configuration example of the customer extraction system of the first embodiment. The customer extraction system 10 includes an information management system 50 and an analysis requesting device 300 . The information management system 50 is composed of an information management device 100 and a secure computing system 200 . The secure computing system 200 is composed of N secure computing devices 200 ₁ , . . . , 200 _N . The information management device 100, the secure _computing devices 200 ₁ , . Similarly, _M information providing devices 400 ₁ , . In the present invention, the information providing device _400m is primarily assumed to be a mobile terminal owned by an individual, but may be a database owned by a company.

In the secure computing technology shown in Non-Patent Document 2, etc., data is divided into N pieces called "shares". , the data cannot be restored (the secret is not leaked). Therefore, by dividing the information to be kept anonymized into N shares and distributing one share to each of the secure computing devices 200 _n , the information can be anonymized. For example, N=3 and K=2, or other values may be used.

FIG. 2 shows an example of predetermined attribute information. For example, as attribute information, personal name, gender, age, address, telephone number, email address, and annual income are recorded in plain text (unencrypted) in the information management recording unit 190 of the information management device 100. . FIG. 3 shows an example of rules for extracting customers. Figure 3 shows
Purchase customer extraction rules for product A = Age 40 or older AND Gender is male AND Address is in Tokyo. The analysis recording unit 390 records rules for extracting customers as shown in FIG. There is no need to limit the number of rules to one, and a plurality of rules may be recorded.

As shown in FIG. 1, the information management system 50 is composed of an information management device 100 and a secure computing system 200 . The secure computing system 200 is composed of N secure computing devices 200 ₁ , . . . , 200 _N . The information management apparatus 100 includes an information management recording section 190 , an attribute information encryption section 110 and a process execution section 120 . The information management device 100 may also include an additional information requesting unit 130 . The secure computing device _200n includes an extraction rule execution unit _210n and a recording unit _290n . The extraction rule execution units 210 ₁ , . . . , 210 _N constitute an extraction rule execution means 210 . The recording unit 290n records the _n -th share of the encrypted attribute information and the n-th share of the encrypted extraction rule. Encrypted attribute information recording means 291 is a portion that records the share of the encrypted attribute information of the recording units 290 ₁ , . . . , 290 _N . Encrypted extraction rule recording means 292 is the part that records shares of the encrypted extraction rules of the recording units 290 ₁ , . . . , 290 _N .

The analysis requesting device 300 includes an extraction rule encryption unit 310 , an extraction rule requesting unit 320 and an analysis recording unit 390 . The analysis requesting device 300 may also include an additional information requesting section 330 . The analysis recording unit 390 records rules for extracting customers. For example, the rule shown in FIG. 3 is recorded. The extraction rule encryption unit 310 encrypts rules for extracting customers and generates encrypted extraction rules. The extraction rule requesting unit 320 requests the information management system to apply the encryption extraction rule. The additional information requesting unit 330 requests the information management system 50 to add additional information, which is attribute information that is lacking in order to apply the encryption extraction rule. The information providing device 400m includes an attribute information providing section _410m , an input/output _section _430m , and a recording section _490m . Information on various attributes held by individuals is recorded in the recording unit _490m .

FIG. 4 is a diagram showing a processing flow after attribute information is provided. FIG. 5 is a diagram showing a processing flow for recording a customer extraction rule in the information management system and a processing flow for executing the customer extraction rule. FIG. 6 is a diagram illustrating a processing flow for recording attribute information including additional information according to the first embodiment. The attribute information providing unit _410m sends plaintext attribute information, which is plaintext information of predetermined attributes for the customer, to the information management device 100 ( _S411m ). The information management device 100 records the plaintext attribute information in the information management recording unit 190 (S191). The types of predetermined attributes are personal name, gender, age, address, telephone number, e-mail address, and annual income in the example of FIG.

The attribute information encryption unit 110 outputs encrypted attribute information (N shares of the plaintext attribute information) obtained by encrypting the plaintext attribute information, and transmits the encrypted attribute information (nth share) to the secure computing device 200 _n . Send (S110). The recording unit _290n of the secure computing device 200n records the encrypted attribute information (the _n -th share of the plaintext attribute information) ( _S291n ). Summarizing steps S291 ₁ , . . . , S291 _N , the encrypted attribute information recording means 291 records the encrypted attribute information (S291).

The analysis recording unit 390 records rules for extracting customers in advance. Then, the extraction rule encryption unit 310 encrypts the rule for extracting the customer, generates the encrypted extraction rule (N shares of the extraction rule), and sends the encrypted extraction rule ( _n second share) is transmitted (S310). The recording unit _290n of the secure computing device 200n records the encrypted extraction rule (the _n -th share of the extraction rule) ( _S292n ). Summarizing steps S292 ₁ , . . . , S292 _N , the encryption extraction rule recording means 292 records the encryption extraction rule (S292).

The extraction rule requesting unit 320 requests the information management system 50 to apply the encryption extraction rule (S320). The extraction rule executing means 210 of the secure calculation system 200 of the information management system 50 executes the requested customer extraction rule using secure calculation (S250), and the information management device 100 acquires the extraction result (S342). The analysis using secure calculation may be executed by cooperative processing of the extraction rule execution units 210 ₁ , . . . , 210 _N . The processing execution unit 120 executes processing related to the customers extracted by the extraction rule execution means 210 (S120). "Customer-related processing" may be transmission of predetermined information to the customer (such as transmission of an advertisement), or transmission of customer information to the analysis requesting device 300 (in other words, a business operator that intends to provide products, services, etc.). may be sent.

Next, a case where the analysis requesting device 300 also includes the additional information requesting unit 330 and the information management device 100 also includes the additional information requesting unit 130 will be described. If the attribute information recorded by the information management recording unit 190 alone is insufficient for applying a rule for extracting customers, the additional information requesting unit 330 requests additional attribute information. Information is requested from the information management system 50 (S330). Based on the request from the analysis requesting device 300, the additional information requesting unit 130 of the information management system 50 requests additional information from the information providing devices ₄₀₀ ₁ , . ).

When the owner of information such as an individual permits the provision of additional attribute information, the attribute information providing unit _410m of the information providing device _400m adds all or part of already provided attribute information. The plaintext attribute information associated with the information is transmitted to the information management device 100 (S412 _m ). The information management device 100 records the plaintext attribute information combined with the already held attribute information in the information management recording unit 190 (S192).

After that, the process is the same as in FIG. The attribute information encryption unit 110 outputs encrypted attribute information (N shares of the plaintext attribute information) obtained by encrypting the plaintext attribute information, and transmits the encrypted attribute information (nth share) to the secure computing device 200 _n . Send (S110). The recording unit _290n of the secure computing device 200n records the encrypted attribute information (the _n -th share of the plaintext attribute information) ( _S291n ). Summarizing steps S291 ₁ , . . . , S291 _N , the encrypted attribute information recording means 291 records the encrypted attribute information (S291).

According to the customer extracting system 10 and the information management system 50, the secure computing technology is applied to the recording and execution of rules for extracting customers, so customers can be extracted while keeping the rules confidential.
[Modification 1]

In step S330 of the first embodiment, the analysis requesting device 300 transmits to the information management system 50 in plain text what information is required as additional attributes. In other words, even when there are multiple analysis requesting devices 300 (when there are multiple business operators requesting customer extraction), the information holding organization determines which analysis requesting device 300 (which business operator) adds the additional attribute information. I know what caused it. In Modified Example 1, the information holding organization does not easily know which company has added the additional attribute information. FIG. 7 shows a functional configuration example of the customer extraction system of Modification 1. As shown in FIG. FIG. 8 shows a processing flow for recording attribute information including additional information in Modification 1. In FIG.

In the information management system 51 of the customer extraction system 11 , the information management device 101 does not have the additional information requesting section 130 . Instead, secure computing system 201 comprises additional attribute request means 230 . The additional attribute request means 230 is composed of additional attribute request units 230 ₁ , . . . , 230 _N of the _secure computing devices 201 ₁ , . The analysis requesting device 301 includes an encrypted additional information requesting section 335 instead of the additional information requesting section 330 . The information providing device _401m also includes an additional attribute decoding unit _420m . Other configurations are the same as those of the first embodiment. The processing flow after the attribute information is provided is the same as in FIG. 4, and the processing flow for recording the customer extraction rule in the information management system and the processing flow for executing the customer extraction rule are the same as in FIG. is.

A modification will be described according to FIG. If the attribute information recorded by the information management recording unit 190 alone is insufficient to apply the rule for extracting customers, the encrypted additional information requesting unit 335 of the analysis requesting device 301 determines the type of additional attribute. is encrypted to generate encrypted additional attributes indicating the types of additional attributes (N shares indicating the types of additional attributes), and the information management system 51 is requested to obtain information on the additional attributes (S335). The secure computing system 201 of the information management system 51 receives the request, and the additional attribute requesting means 230 provides information on the additional attribute based on the request from the analysis requesting device 301. A request is made to the devices 401 ₁ , . . . , 401 _M (S230). In other words, the secure computing device 201 _n receives one of N shares (n-th share) indicating the type of additional attribute, and the additional attribute requesting unit 230 _n responds to the request from the analysis requesting device 301. Based on this, information on additional attributes is requested from the information providing devices 401 ₁ to 401 _M (S230 _n ).

The information providing device 401 _m receives K or more shares among the shares indicating the types of additional attributes, and the additional attribute decoding unit 420 _m decodes the types of additional information (S420 _m ). When the owner of information such as an individual permits the provision of additional attribute information, the attribute information providing unit _410m of the information providing device _400m adds all or part of already provided attribute information. The plaintext attribute information associated with the information is transmitted to the information management device 100 (S412 _m ). The information management device 100 records the plaintext attribute information combined with the already held attribute information in the information management recording unit 190 (S192).

According to the customer extraction system 11 and the information management system 51, secure computing technology is applied to the recording and execution of rules for extracting customers, so customers can be extracted while keeping the rules confidential, as in the first embodiment. Furthermore, it is possible to prevent the information holding organization from easily recognizing which business operator requested the additional attribute information.

[Program, recording medium]
In the above-described various processes, the recording unit 2020 of the computer 2000 shown in FIG. It can be implemented by

A program that describes this process can be recorded on a computer-readable recording medium. Any computer-readable recording medium may be used, for example, a magnetic recording device, an optical disk, a magneto-optical recording medium, a semiconductor memory, or the like.

In addition, the distribution of this program is carried out, for example, by selling, assigning, lending, etc. portable recording media such as DVDs and CD-ROMs on which the program is recorded. Further, the program may be distributed by storing the program in the storage device of the server computer and transferring the program from the server computer to other computers via the network.

A computer that executes such a program, for example, first stores the program recorded on a portable recording medium or the program transferred from the server computer once in its own storage device. Then, when executing the process, this computer reads the program stored in its own recording medium and executes the process according to the read program. Also, as another execution form of this program, the computer may read the program directly from a portable recording medium and execute processing according to the program, and the program is transferred from the server computer to this computer. Each time, the processing according to the received program may be executed sequentially. In addition, the above-mentioned processing is executed by a so-called ASP (Application Service Provider) type service, which does not transfer the program from the server computer to this computer, and realizes the processing function only by its execution instruction and result acquisition. may be It should be noted that the program in this embodiment includes information that is used for processing by a computer and that conforms to the program (data that is not a direct instruction to the computer but has the property of prescribing the processing of the computer, etc.).

In addition, in this embodiment, the device is configured by executing a predetermined program on a computer, but at least part of these processing contents may be implemented by hardware.

10, 11 Customer extraction system 50, 51

Information management system

100, 101 Information management device 101 Information management device 110 Attribute information encryption unit 120 Processing execution unit 130 Additional information request unit 190 Information management recording unit 200, 201 Secure computing system 200 _n , 201 _n secret computing device 210 extraction rule execution unit 210 _n extraction rule execution unit 230 additional attribute request unit 230 _n additional attribute request unit 290 _n recording unit 291 encrypted attribute information recording unit 292 encrypted extraction

rule recording unit

300, 301 analysis Request device 310 Extraction rule encryption unit 320 Extraction rule request unit 330 Additional information request unit 335 Encrypted additional information request unit 390 Analysis recording unit 400 _m , 401 _m Information providing device 410 _m Attribute information providing unit 420 _m Additional attribute decoding unit 430 _m input/output unit 490 _m recording unit

Claims

A customer extraction system comprising an information management system and an analysis requesting device,
The information management system is
an information management and recording unit for recording plaintext attribute information, which is plaintext information of a predetermined attribute for a customer;
an attribute information encryption unit that outputs encrypted attribute information obtained by encrypting the plaintext attribute information;
encrypted attribute information recording means for recording the encrypted attribute information;
Encrypted extraction rule recording means for recording an encrypted extraction rule, which is an encrypted rule for extracting a customer;
extraction rule execution means for executing the encrypted extraction rule on the encrypted attribute information;
a processing execution unit that executes processing related to customers extracted by the extraction rule execution means;
The analysis requesting device
an analysis recording unit that records rules for extracting customers;
an extraction rule encryption unit for encrypting rules for extracting customers and generating encrypted extraction rules;
A customer extraction system, comprising: an extraction rule requesting unit that requests application of the encrypted extraction rule to the information management system.
The customer extraction system according to claim 1,
A customer extracting system, wherein the process related to the extracted customer performed by the process execution unit is transmission of predetermined information to the customer or transmission of customer information to the analysis requesting device.
The customer extraction system according to claim 1 or 2,
The analysis requesting device
an additional information requesting unit for requesting the information management system to add additional information, which is attribute information lacking in order to apply the encrypted extraction rule;
The information management system is
A customer extraction system, comprising: an additional information requesting unit that requests the additional information from outside the customer extraction system based on a request from the analysis requesting device.
The customer extraction system according to claim 1 or 2,
The analysis requesting device
An encrypted additional information request unit that encrypts the types of attributes that are lacking in order to apply the encrypted extraction rule and transmits the information to the information management system;
The information management system is
A customer extracting system, comprising additional attribute requesting means for transmitting the encrypted attribute type received from the analysis requesting device to the outside of the customer extracting system and requesting addition of information.
an information management and recording unit for recording plaintext attribute information, which is plaintext information of a predetermined attribute for a customer;
an attribute information encryption unit that outputs encrypted attribute information obtained by encrypting the plaintext attribute information;
encrypted attribute information recording means for recording the encrypted attribute information;
Encrypted extraction rule recording means for recording an encrypted extraction rule, which is an encrypted rule for extracting a customer;
extraction rule execution means for applying the encrypted extraction rule to the encrypted attribute information;
an information management system comprising: a processing execution unit that executes processing related to customers extracted by the extraction rule execution means.
an analysis recording unit that records rules for extracting customers;
an extraction rule encryption unit for encrypting rules for extracting customers and generating encrypted extraction rules;
and an extraction rule requesting unit that requests the information management system to apply the encrypted extraction rule.
A customer extraction method using an information management system and an analysis requesting device,
The information management system records plaintext attribute information, which is plaintext information of a predetermined attribute,
The analysis requesting device records rules for extracting customers in advance,
The information management system outputs and records encrypted attribute information obtained by encrypting the plaintext attribute information,
the analysis requesting device encrypts a rule for extracting a customer and generates an encrypted extraction rule;
the information management system records encrypted extraction rules;
The analysis requesting device requests the information management system to apply the encrypted extraction rule,
the information management system extracting customers by executing the encrypted extraction rule on the encrypted attribute information;
A customer extraction method, wherein the information management system executes a process related to the extracted customer.
A program for causing a computer to function as one of an information management device, a secure computing device, or an analysis request device that constitutes the information management system according to claim 1 or 2.