Automated Management of Private Information

• US 20140344948A1
• Filed: 09/20/2012
• Published: 11/20/2014
• Est. Priority Date: 12/05/2011
• Status: Active Grant

• Current Assignee: Globalfoundries US Incorporated (GlobalFoundries, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Shioya, Tomohiro, Tsumura, Tadashi, Hayato, Kiriyama
• Granted Patent: US 9,280,682 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

A private information management apparatus, a method, and a program that allows individual users to easily set and apply their privacy rules. A private information management apparatus receives setting data from a user terminal and creates a privacy rule that defines a condition for restricting disclosure of private information and a restriction method. If undisclosed image data contains private information of a user, the private information management apparatus extracts metadata contained in this undisclosed image data, and determines whether or not the metadata satisfies the condition for restricting disclosure of the private information. If it is determined that the condition is satisfied, the private information management apparatus executes the restriction method defined by the privacy rule.

Claims

1. An computing apparatus for managing private information, comprising:

a profile memory unit configured to store profile data representing private information of a first user;

a first reception unit configured to receive first setting data from a terminal of the first user, the first setting data being based on a predetermined template used to create a privacy rule defining a condition for restricting disclosure of the private information and a restriction method;

a creation unit configured to create the privacy rule in accordance with the first setting data received by the first reception unit;

a privacy rule memory unit configured to store the privacy rule created by the creation unit;

a determination unit configured to, in a case where undisclosed image data requested to be disclosed on a predetermined website contains the private information represented by the profile data, extract metadata contained in the undisclosed image data and determine whether or not the metadata satisfies the condition for restricting disclosure of the private information; and

an execution unit configured to, in a case where it is determined by the determination unit that the metadata satisfies the condition, execute the restriction method defined by the privacy rule.

2. The computing apparatus according to claim 1, wherein the condition for restricting disclosure of the private information includes a range related to a capturing date and time of the undisclosed image data.

3. The computing apparatus according to claim 2, wherein the range related to the capturing date and time is a range from when a start instruction is received to when an end instruction is received from the terminal of the first user.

4. The computing apparatus according to claim 1, wherein the condition for restricting disclosure of the private information includes a range related to a capturing location of the undisclosed image data.

5. The computing apparatus according to claim 4, wherein the range related to the capturing location is a predetermined range including a determined location of the terminal of the first user.

6. The computing apparatus according to claim 1, wherein the first reception unit receives, from the terminal of the first user, the first setting data containing an instruction regarding a restriction method selected from among a predetermined number of preset restriction methods in order to define the restriction method to be used to restrict disclosure of the private information.

7. The computing apparatus according to claim 1, wherein the execution unit executes the restriction method in a case where a second user who made a request to disclose the undisclosed image data approves execution of the restriction method.

8. The computing apparatus according to claim 1, further comprising:

a second reception unit configured to receive, from the terminal of the first user, second setting data representing the restriction method in a case where it is determined by the determination unit that the metadata satisfies the condition, wherein

in the case where the second setting data is received, the execution unit executes the restriction method represented by the second setting data instead of the restriction method defined by the privacy rule.

9. The computing apparatus according to claim 8, further comprising

a transmission request unit configured to, in a case where it is determined by the determination unit that the metadata satisfies the condition, transmit the undisclosed image data to the terminal of the first user so as to request the terminal of the first user to transmit the second setting data.

10. A method for a computer to suppress leakage of private information, the computer including a profile memory unit configured to store profile data representing private information of a user, the method comprising:

receiving setting data from a terminal of the user, the setting data being based on a predetermined template used to create a privacy rule defining a condition for restricting disclosure of the private information and a restriction method;

creating the privacy rule in accordance with the setting data received in the reception step;

storing the privacy rule created in the creation step;

a determination step of, in a case where undisclosed image data requested to be disclosed on a predetermined website contains the private information represented by the profile data, extracting metadata contained in the undisclosed image data and determining whether or not the metadata satisfies the condition for restricting disclosure of the private information; and

an execution step of, in a case where it is determined in the determination step that the metadata satisfies the condition, executing the restriction method defined by the privacy rule.

11. A program causing the computer to execute each step of the method according to claim 10.