Program executing apparatus and program executing method as well as program executing program

• US 20030046549A1
• Filed: 09/05/2002
• Published: 03/06/2003
• Est. Priority Date: 09/05/2001
• Status: Abandoned Application

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Sakata, Kazuhiro
• Application Number:
  US10/234,121
• Publication Number:
  US 20030046549A1
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

A method and an apparatus for executing a program obtained from an external device with protecting at least one privacy information requested to be utilized by the program is provided. At least one program is obtained from the at least one external device. A division is made to allow or inhibit the at least one program to utilize the at least one privacy information based on at least one mediation result obtained based on at least one conditional information to allow or inhibit the at least one program to utilize at least one privacy information.

Claims

1. A method for protecting at least one privacy information requested to be utilized by at least one program obtained from at least one external device, said method including:

obtaining at least one program from said at least one external device;

obtaining at least one privacy information utilizing policy, which corresponds to said at least one program, and said at least one privacy information utilizing policy indicating a utilizing policy to utilize the obtained privacy informations by said program;

generating at least one mediation result based on at least both said at least one privacy information utilizing policy and at least one privacy information management policy which indicates a management policy to allow said at least one program to utilize at least one privacy information; and

deciding to allow or inhibit said at least one program to utilize said at least one privacy information based on said at least one mediation result.

2. The method as claimed in claim 1, wherein said at least one external device comprises at least one server computer, and said at least one privacy information utilizing policy is obtained from said at least one server computer.

3. The method as claimed in claim 1, wherein said at least one external device comprises at least one server computer, and said at least one privacy information utilizing policy is obtained from at least one different external device from said at least one server computer.

4. The method as claimed in claim 1, wherein said program and said at least one privacy information utilizing policy corresponding to said program are given with a correspondence with each other and stored in a storage unit.

5. The method as claimed in claim 1, wherein said deciding step is made upon receipt of a privacy information utilizing request from said at least one program which is on execution process.

6. The method as claimed in claim 1, wherein said deciding step is made upon starting to execute said at least one program for allowing execution of said at least one program free from any interruption of said deciding step.

7. The method as claimed in claim 1, wherein said at least one privacy information has been stored in a privacy information storage unit.

8. The method as claimed in claim 7, wherein if said at least one privacy information absent in said privacy information storage unit is requested to be utilized by said program, then a request for entry of said at least one privacy information is issued to an external entity.

9. The method as claimed in claim 1, wherein if said at least one privacy information utilizing policy is not available from said external device, then a default privacy information utilizing policy is used.

10. The method as claimed in claim 1, further including:

obtaining, together with said at least one program, at least one program provider information which indicates at least one location from which said at least one program is provided, and

wherein said at least one privacy information utilizing policy is obtained based on said at least one program provider information.

11. The method as claimed in claim 1, further including:

storing said at least one mediation result generated into a storage unit; and

verifying whether or not said at least one mediation result is present in said storage unit, and only if said at least one mediation result is absent, said step of generating said at least one mediation result is made.

12. The method as claimed in claim 1, further including:

verifying whether or not said at least one privacy information management policy has a program dependency; and

if said at least one privacy information management policy is free of any program dependency, then said step of obtaining said at least one privacy information utilizing policy is not carried out, and said at least one mediation result is generated based on said at least one privacy information management policy only.

13. The method as claimed in claim 1, wherein said at least one privacy information utilizing policy is obtained upon receipt of a privacy information utilizing request from said at least one program which is on execution process.

14. The method as claimed in claim 1, wherein said at least one privacy information utilizing policy is obtained upon starting to execute said at least one program for allowing execution of said at least one program free from any interruption of said deciding step.

15. The method as claimed in claim 1, wherein said at least one privacy information utilizing policy is obtained together with said at least one program.

16. The method as claimed in claim 1, wherein said program and said at least one mediation result are given with a correspondence with each other and stored in a storage unit.

17. The method as claimed in claim 16, further including:

verifying whether or not said at least one mediation result is present in said storage unit, and only if said at least one mediation result is absent, said step of generating said at least one mediation result is made.

18. A method for protecting at least one privacy information requested to be utilized by at least one program obtained from at least one external device, said method including:

obtaining at least one program from said at least one external device; and

deciding to allow or inhibit said at least one program to utilize said at least one privacy information based on at least one mediation result obtained based on at least one conditional information to allow or inhibit said at least one program to utilize at least one privacy information.

19. The method as claimed in claim 18, wherein said at least one conditional information is given from at least one of an external device and an external entity.

20. The method as claimed in claim 18, wherein said at least one conditional information comprises at least one mediation result obtained based on at least one privacy information management policy which indicates a management policy to allow said at least one program to utilize at least one privacy information, provided that said at least one privacy information management policy is free of any program dependency.

21. The method as claimed in claim 18, wherein said at least one conditional information comprises at least one mediation result obtained based on both at least one privacy information management policy which indicates a management policy to allow said at least one program to utilize at least one privacy information and at least one privacy information utilizing policy indicating a utilizing policy to utilize the obtained privacy informations by said program, provided that said at least one privacy information management policy has a program dependency.

22. The method as claimed in claim 18, wherein said at least one external device comprises at least one server computer, and said at least one privacy information utilizing policy is obtained from said at least one server computer.

23. The method as claimed in claim 21, wherein said at least one external device comprises at least one server computer, and said at least one privacy information utilizing policy is obtained from at least one different external device from said at least one server computer.

24. The method as claimed in claim 21, wherein said program and said at least one privacy information utilizing policy corresponding to said program are given with a correspondence with each other and stored in a storage unit.

25. The method as claimed in claim 21, wherein said deciding step is made upon receipt of a privacy information utilizing request from said at least one program which is on execution process.

26. The method as claimed in claim 18, wherein said deciding step is made upon starting to execute said at least one program for allowing execution of said at least one program free from any interruption of said deciding step.

27. The method as claimed in claim 18, wherein said at least one privacy information has been stored in a privacy information storage unit.

28. The method as claimed in claim 27, wherein if said at least one privacy information absent in said privacy information storage unit is requested to be utilized by said program, then a request for entry of said at least one privacy information is issued to an external entity.

29. The method as claimed in claim 21, wherein if said at least one privacy information utilizing policy is not available from said external device, then a default privacy information utilizing policy is used.

30. The method as claimed in claim 21, further including:

obtaining, together with said at least one program, at least one program provider information which indicates at least one location from which said at least one program is provided, and

wherein said at least one privacy information utilizing policy is obtained based on said at least one program provider information.

31. The method as claimed in claim 18, further including

storing said at least one conditional information into a storage unit;

and

verifying whether or not said at least one conditional information is present in said storage unit, and only if said at least one conditional information is absent, said step of generating said at least one conditional information is made.

33. The method as claimed in claim 21, wherein said at least one privacy information utilizing policy is obtained upon receipt of a privacy information utilizing request from said at least one program which is on execution process.

34. The method as claimed in claim 21, wherein said at least one privacy information utilizing policy is obtained upon starting to execute said at least one program for allowing execution of said at least one program free from any interruption of said deciding step.

35. The method as claimed in claim 21, wherein said at least one privacy information utilizing policy is obtained together with said at least one program.

36. The method as claimed in claim 18, wherein said program and said at least one conditional information are given with a correspondence with each other and stored in a storage unit.

37. The method as claimed in claim 36, further including:

verifying whether or not said at least one conditional information is present in said storage unit, and only if said at least one conditional information is absent, said step of generating said at least one conditional information is made.

38. A computer-readable-program to be executed for implementing a process for protecting at least one privacy information requested to be utilized by at least one program obtained from at least one external device, said computer-readable-program including:

obtaining at least one program from said at least one external device;

obtaining at least one privacy information utilizing policy, which corresponds to said at least one program, and said at least one privacy information utilizing policy indicating a utilizing policy to utilize the obtained privacy informations by said program;

generating at least one mediation result based on at least both said at least one privacy information utilizing policy and at least one privacy information management policy which indicates a management policy to allow said at least one program to utilize at least one privacy information; and

deciding to allow or inhibit said at least one program to utilize said at least one privacy information based on said at least one mediation result.

39. A computer-readable-program to be executed for implementing a process for protecting at least one privacy information requested to be utilized by at least one program obtained from at least one external device, said computer-readable-program including:

obtaining at least one program from said at least one external device; and

deciding to allow or inhibit said at least one program to utilize said at least one privacy information based on at least one mediation result obtained based on at least one conditional information to allow or inhibit said at least one program to utilize at least one privacy information.

40. A hardware device for implementing a process for protecting at least one privacy information requested to be utilized by at least one program obtained from at least one external device, said hardware device including:

a first functional unit for obtaining at least one program from said at least one external device; and

a second functional unit for deciding to allow or inhibit said at least one program to utilize said at least one privacy information based on at least one mediation result obtained based on at least one conditional information to allow or inhibit said at least one program to utilize at least one privacy information.

41. An apparatus for executing at least one program obtained from at least one external device, said apparatus including:

a program obtaining unit for obtaining at least one program from said at least one external device as well as at least one privacy information utilizing policy, which corresponds to said at least one program, and said at least one privacy information utilizing policy indicating a utilizing policy to utilize the obtained privacy informations by said program;

a mediation unit for generating at least one mediation result based on at least both said at least one privacy information utilizing policy and at least one privacy information management policy which indicates a management policy to allow said at least one program to utilize at least one privacy information; and

a deciding unit for deciding to allow or inhibit said at least one program to utilize said at least one privacy information based on said at least one mediation result.

42. The apparatus as claimed in claim 41, wherein said at least one external device comprises at least one server computer, and said at least one privacy information utilizing policy is obtained from said at least one server computer.

43. The apparatus as claimed in claim 41, wherein said at least one external device comprises at least one server computer, and said at least one privacy information utilizing policy is obtained from at least one different external device from said at least one server computer.

44. The apparatus as claimed in claim 41, further including a storage unit for storing said program and said at least one privacy information utilizing policy corresponding to said program with a correspondence with each other.

45. The apparatus as claimed in claim 41, wherein said deciding unit is performed receipt of a privacy information utilizing request from said at least one program which is on execution process.

46. The apparatus as claimed in claim 41, wherein said deciding unit is performed upon starting to execute said at least one program for allowing execution of said at least one program free from any interruption of said deciding step.

47. The apparatus as claimed in claim 41, further including a privacy information storage unit for storing said at least one privacy information.

48. The apparatus as claimed in claim 47, wherein if said at least one privacy information absent in said privacy information storage unit is requested to be utilized by said program, then said apparatus issues a request for entry of said at least one privacy information to an external entity.

49. The apparatus as claimed in claim 41, wherein if said at least one privacy information utilizing policy is not available from said external device, then a default privacy information utilizing policy is used.

50. The apparatus as claimed in claim 41, wherein

said obtaining unit obtains, together with said at least one program, at least one program provider information which indicates at least one location from which said at least one program is provided, and

said obtaining unit further obtains said at least one privacy information utilizing policy based on said at least one program provider information.

51. The apparatus as claimed in claim 41, further including:

a mediation result storage unit for storing said at least one mediation result generated; and

a verifying unit for verifying whether or not said at least one mediation result is present in said storage unit, and only if said at least one mediation result is absent, said mediation unit is performed.

52. The apparatus as claimed in claim 41, further including:

a verifying unit for verifying whether or not said at least one privacy information management policy has a program dependency; and

if said at least one privacy information management policy is free of any program dependency, then said obtaining unit does not obtain said at least one privacy information utilizing policy, and said mediation unit generates said at least one mediation result based on said at least one privacy information management policy only.

53. The apparatus as claimed in claim 41, wherein said obtaining unit obtains said at least one privacy information utilizing policy upon receipt of a privacy information utilizing request from said at least one program which is on execution process.

54. The apparatus as claimed in claim 41, wherein said obtaining unit obtains said at least one privacy information utilizing policy upon starting to execute said at least one program for allowing execution of said at least one program free from any interruption of said deciding step.

55. The apparatus as claimed in claim 41, wherein said obtaining unit obtains said at least one privacy information utilizing policy together with said at least one program.

56. The apparatus as claimed in claim 41, further including:

a storage unit for storing said program and said at least one mediation result with a correspondence with each other.

57. The apparatus as claimed in claim 56, further including:

a verifying unit for verifying whether or not said at least one mediation result is present in said storage unit, and only if said at least one mediation result is absent, said mediation unit is performed.

58. An apparatus for executing at least one program obtained from at least one external device, said apparatus including:

an obtaining unit for obtaining at least one program from said at least one external device; and

a deciding unit to allow or inhibit said at least one program to utilize said at least one privacy information based on at least one mediation result obtained based on at least one conditional information to allow or inhibit said at least one program to utilize at least one privacy information.

59. The apparatus as claimed in claim 58, wherein said at least one conditional information is given from at least one of an external device and an external entity.

60. The apparatus as claimed in claim 58, wherein said at least one conditional information comprises at least one mediation result obtained based on at least one privacy information management policy which indicates a management policy to allow said at least one program to utilize at least one privacy information, provided that said at least one privacy information management policy is free of any program dependency.

61. The apparatus as claimed in claim 58, wherein said at least one conditional information comprises at least one mediation result obtained based on both at least one privacy information management policy which indicates a management policy to allow said at least one program to utilize at least one privacy information and at least one privacy information utilizing policy indicating a utilizing policy to utilize the obtained privacy informations by said program, provided that said at least one privacy information management policy has a program dependency.

62. The apparatus as claimed in claim 58, wherein said at least one external device comprises at least one server computer, and said at least one privacy information utilizing policy is obtained from said at least one server computer.

63. The apparatus as claimed in claim 61, wherein said at least one external device comprises at least one server computer, and said at least one privacy information utilizing policy is obtained from at least one different external device from said at least one server computer.

64. The apparatus as claimed in claim 61, further including a storage unit for storing said program and said at least one privacy information utilizing policy corresponding to said program are given with a correspondence with each other.

65. The apparatus as claimed in claim 61, wherein said deciding unit is performed upon receipt of a privacy information utilizing request from said at least one program which is on execution process.

66. The apparatus as claimed in claim 58, wherein said deciding unit is performed upon starting to execute said at least one program for allowing execution of said at least one program free from any interruption of said deciding step.

67. The apparatus as claimed in claim 58, further including a privacy information storage unit for storing said at least one privacy information.

68. The apparatus as claimed in claim 67, wherein if said at least one privacy information absent in said privacy information storage unit is requested to be utilized by said program, then said apparatus issues a request for entry of said at least one privacy information to an external entity.

69. The apparatus as claimed in claim 61, wherein if said at least one privacy information utilizing policy is not available from said external device, then a default privacy information utilizing policy is used.

70. The apparatus as claimed in claim 61, further including:

said obtaining unit obtains, together with said at least one program, at least one program provider information which indicates at least one location from which said at least one program is provided, and

said obtaining unit further obtains said at least one privacy information utilizing policy based on said at least one program provider information.

71. The apparatus as claimed in claim 58, further including:

a storage unit for storing said at least one conditional information; and

a verifying unit for verifying whether or not said at least one conditional information is present in said storage unit, and only if said at least one conditional information is absent, said at least one conditional information is generated.

73. The apparatus as claimed in claim 61, wherein obtaining unit obtains said at least one privacy information utilizing policy upon receipt of a privacy information utilizing request from said at least one program which is on execution process.

74. The apparatus as claimed in claim 61, wherein obtaining unit obtains said at least one privacy information utilizing policy upon starting to execute said at least one program for allowing execution of said at least one program free from any interruption of said deciding step.

75. The apparatus as claimed in claim 61, wherein obtaining unit obtains said at least one privacy information utilizing policy together with said at least one program.

76. The apparatus as claimed in claim 58, further including a storage unit for storing said program and said at least one conditional information are given with a correspondence with each other.

77. The apparatus as claimed in claim 76, further including:

a verifying unit for verifying whether or not said at least one conditional information is present in said storage unit, and only if said at least one conditional information is absent, said at least one conditional information is generated.