SERVER DEVICE, INFORMATION MANAGEMENT METHOD, INFORMATION PROCESSING DEVICE, INFORMATION PROCESSING METHOD, AND PROGRAM

• US 20190325160A1
• Filed: 10/05/2017
• Published: 10/24/2019
• Est. Priority Date: 12/28/2016
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: MARUYAMA, SHINYA
• Granted Patent: US 11,194,931 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/67 Risk-dependent, e.g. selecting a security level depending on risk profiles

Abstract

[Object] It is desirable to provide a technology that makes it difficult to identify to which user leaked anonymous information relates even in a case in which the anonymous information has leaked. [Solution] Provided is a server device including: a risk value acquisition unit that acquires a risk value in a case in which a user'"'"'s anonymous information leaks; and a processing execution unit that associates an anonym ID for identifying the anonymous information with the anonymous information. In a case in which the risk value exceeds a predetermined threshold value, the processing execution unit executes at least any of processing of switching the anonym ID associated with the anonymous information or processing of differentiating anonym IDs associated with a plurality of pieces of division information obtained through division of the anonymous information.

Claims

1. A server device comprising:

a risk value acquisition unit that acquires a risk value in a case in which a user'"'"'s anonymous information leaks; and

a processing execution unit that associates an anonym ID for identifying the anonymous information with the anonymous information,

wherein in a case in which the risk value exceeds a predetermined threshold value, the processing execution unit executes at least any of processing of switching the anonym ID associated with the anonymous information or processing of differentiating anonym IDs associated with a plurality of pieces of division information obtained through division of the anonymous information.

2. The server device according to claim 1, wherein the processing execution unit associates first identification data with encrypted data of a user ID in a case in which the encrypted data is acquired from an information processing device and associates a first anonym ID in accordance with the first identification data with first anonymous information in a case in which the first anonymous information and the first anonym ID are acquired from the information processing device.

3. The server device according to claim 2,

wherein the risk value acquisition unit acquires a risk value in a case in which second anonymous information leaks if the first anonym ID and the second anonymous information are acquired from the information processing device, and

the processing execution unit associates second identification data with the encrypted data in a case in which the risk value exceeds the threshold value and associates a second anonym ID in accordance with the second identification data with the second anonymous information in a case in which the second anonym ID is acquired from the information processing device.

4. The server device according to claim 3, wherein the processing execution unit associates the first anonym ID with the second anonymous information in a case in which the risk value does not exceed the threshold value.

5. The server device according to claim 2, wherein the processing execution unit provides the first identification data associated with the encrypted data to the information processing device in a case in which the encrypted data is acquired again from the information processing device and executes a predetermined operation related to the first anonymous information associated with a first anonym ID in accordance with the first identification data in a case in which the first anonym ID is acquired from the information processing device.

6. The server device according to claim 1, wherein the processing execution unit associates first identification data with encrypted data of a user ID in a case in which the anonymous information and the encrypted data are acquired from an information processing device, associates second identification data with the encrypted data in a case in which the risk value exceeds the threshold value, and associates a first anonym ID in accordance with the first identification data with first division information and associates a second anonym ID in accordance with the second identification data with second division information in a case in which the first anonym ID and the second anonym ID are acquired from the information processing device.

7. The server device according to claim 6, wherein the processing execution unit provides the first identification data to the information processing device in a case in which the risk value does not exceed the threshold value and associates the first anonym ID in accordance with the first identification data with the anonymous information in a case in which the first anonym ID is acquired from the information processing device.

8. The server device according to claim 1, wherein the risk value acquisition unit acquires the risk value on a basis of at least any of the anonymous information or information related to the anonymous information.

9. An information management method comprising:

acquiring a risk value in a case in which a user'"'"'s anonymous information leaks;

associating an anonym ID for identifying the anonymous information with the anonymous information; and

in a case in which the risk value exceeds a predetermined threshold value, executing, by a processor, at least any of processing of switching the anonym ID associated with the anonymous information or processing of differentiating anonym IDs associated with a plurality of pieces of division information obtained through division of the anonymous information.

10. A program for causing a computer to function as a server device comprising:

a risk value acquisition unit that acquires a risk value in a case in which a user'"'"'s anonymous information leaks; and

a processing execution unit that associates an anonym ID for identifying the anonymous information with the anonymous information,

wherein in a case in which the risk value exceeds a predetermined threshold value, the processing execution unit executes at least any of processing of switching the anonym ID associated with the anonymous information or processing of differentiating anonym IDs associated with a plurality of pieces of division information obtained through division of the anonymous information.

11. An information processing device comprising:

an anonym ID generation unit that generates an anonym ID for identifying a user'"'"'s anonymous information; and

an anonym ID provision unit that provides the anonym ID and the anonymous information to a server device,

wherein in a case in which a risk value when the anonymous information leaks exceeds a predetermined threshold value, the anonym ID generation unit executes at least any of processing of newly generating an anonym ID associated with the anonymous information or processing of generating anonym IDs associated with a plurality of pieces of division information obtained through division of the anonymous information.

12. The information processing device according to claim 11,

wherein the anonym ID generation unit provides encrypted data of the user ID to the server device, acquires first identification data associated with the encrypted data from the server device, and generates a first anonym ID in accordance with the first identification data, and

the anonym ID provision unit provides the first anonym ID and first anonymous information to the server device.

13. The information processing device according to claim 12,

wherein the anonym ID generation unit provides the first anonym ID and second anonymous information to the server device, and in a case in which a risk value when the second anonymous information leaks exceeds a threshold value, acquires second identification data associated with the encrypted data from the server device, and generates a second anonym ID in accordance with the second identification data, and

the anonym ID provision unit provides the second anonym ID to the server device.

14. The information processing device according to claim 13, wherein in a case in which the risk value when the second anonymous information leaks does not exceed the threshold value, the anonym ID generation unit provides the first anonym ID to the server device.

15. The information processing device according to claim 12,

wherein the anonym ID generation unit provides the encrypted data again to the server device, acquires the first identification data associated with the encrypted data from the server device, and generates a first anonym ID in accordance with the first identification data, and

the anonym ID provision unit provides the first anonym ID to the server device.

16. The information processing device according to claim 11,

wherein the anonym ID generation unit provides the anonymous information and encrypted data of a user ID to the server device, and in a case in which a risk value when the anonymous information leaks exceeds a threshold value, acquires first identification data and second identification data associated with the encrypted data from the server device, and generates a first anonym ID in accordance with the first identification data and a second anonym ID in accordance with the second identification data, and

the anonym ID provision unit provides the first anonym ID and the second anonym ID to the server device.

17. The information processing device according to claim 16,

wherein the anonym ID generation unit provides the anonymous information and the encrypted data to the server device, and in a case in which the risk value does not exceed the threshold value, acquires the first identification data associated with the encrypted data from the server device, and generates the first anonym ID in accordance with the first identification data, and

the anonym ID provision unit provides the first anonym ID to the server device.

18. The information processing device according to claim 11, wherein the risk value is acquired by the server device on a basis of at least any of the anonymous information or information related to the anonymous information.

19. An information processing method comprising:

generating an anonym ID for identifying a user'"'"'s anonymous information;

providing the anonym ID and the anonymous information to a server device; and

in a case in which a risk value when the anonymous information leaks exceeds a predetermined threshold value, executing, by a processor, at least any of processing of newly generating an anonym ID associated with the anonymous information or processing of generating anonym IDs associated with a plurality of pieces of division information obtained through division of the anonymous information.

20. A program for causing a computer to function as an information processing device comprising:

an anonym ID generation unit that generates an anonym ID for identifying a user'"'"'s anonymous information; and

an anonym ID provision unit that provides the anonym ID and the anonymous information to a server device,

wherein in a case in which a risk value when the anonymous information leaks exceeds a predetermined threshold value, the anonym ID generation unit executes at least any of processing of newly generating an anonym ID associated with the anonymous information or processing of generating anonym IDs associated with a plurality of pieces of division information obtained through division of the anonymous information.