ANONYMIZATION APPARATUS, ANONYMIZATION METHOD, AND COMPUTER PROGRAM
First Claim
1. An anonymization apparatus, comprising:
- a record extracting unit that extracts, with respect to history information including a plurality of records each of which includes unique identification information associated with at least a quasi-identifier and sensitive information, on the basis of smallness of ambiguity of a property existing between the plurality of records that are able to satisfy desired anonymity and share a specific unique identifier, a record with other unique identifier different from the specific unique identifier from the history information; and
an anonymizing unit that gives commonality to and thereby abstracts the quasi-identifier each included in the plurality of records, so that an individual attribute in the plurality of records extracted by the record extracting unit satisfies the desired anonymity.
1 Assignment
0 Petitions
Accused Products
Abstract
Provided is an anonymization apparatus for optimally and fully performing anonymization, in anonymizing history information, in a state where a specific property existing in a plurality of records with an identical identifier is maximally maintained.
This anonymization apparatus includes record extracting means for extracting, with respect to history information including a plurality of records each of which includes unique identification information associated with at least a quasi-identifier and sensitive information, on the basis of smallness of ambiguity of a property existing between the plurality of records that are able to satisfy desired anonymity and share a specific unique identifier, a record with other unique identifier different from the specific unique identifier from the history information and anonymizing means for giving commonality to and thereby abstracting the quasi-identifier each included in the plurality of records, so that an individual attribute in the plurality of records extracted by the record extracting means satisfies the desired anonymity.
16 Citations
10 Claims
-
1. An anonymization apparatus, comprising:
-
a record extracting unit that extracts, with respect to history information including a plurality of records each of which includes unique identification information associated with at least a quasi-identifier and sensitive information, on the basis of smallness of ambiguity of a property existing between the plurality of records that are able to satisfy desired anonymity and share a specific unique identifier, a record with other unique identifier different from the specific unique identifier from the history information; and an anonymizing unit that gives commonality to and thereby abstracts the quasi-identifier each included in the plurality of records, so that an individual attribute in the plurality of records extracted by the record extracting unit satisfies the desired anonymity. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. An anonymization method, comprising:
-
extracting, with respect to history information including a plurality of records each of which includes unique identification information associated with at least a quasi-identifier and sensitive information, on the basis of smallness of ambiguity of a property existing between the plurality of records that are able to satisfy desired anonymity and share a specific unique identifier, a record with other unique identifier different from the specific unique identifier from the history information by using a computer; and giving commonality to and thereby abstracting the quasi-identifier each included in the extracted plurality of records, so that an individual attribute in the plurality of records satisfies the desired anonymity, by using the computer or a different computer. - View Dependent Claims (9)
-
-
10. A non-transitory computer-readable media storing an computer program, causing a computer to execute:
-
a record extracting function for extracting, with respect to history information including a plurality of records each of which includes unique identification information associated with at least a quasi-identifier and sensitive information, on the basis of smallness of ambiguity of a property existing between the plurality of records that are able to satisfy desired anonymity and share a specific unique identifier, a record with other unique identifier different from the specific unique identifier from the history information; and an anonymizing function for giving a commonality to and thereby abstracting the quasi-identifier each included in the plurality of records, so that an individual attribute in the plurality of records extracted by the record extracting function satisfies the desired anonymity.
-
Specification