摘要:
The present invention provides a distributed anonymization device capable of executing a distributed anonymization process without the risk of leaking data of users to other parties. This distributed anonymization device is provided with: a storing means for storing a user identifier and personal information in association with one another; a setting means for setting, as a dummy identifier, the identifier that does not correspond to the user identifier from among all of the externally-notified identifiers; a separating means for separating all the identifiers including the dummy identifier into groups; a transmitting means for transmitting to another device, the separation information indicating the content of the identifiers in each group; and a determining means for determining, each of groups, whether the proportion of identifiers in the abovementioned distributed anonymization device and the other device satisfy a predetermined anonymity index.
摘要:
To anonymize information from a service-providing apparatus and an information processing apparatus (device), this information processing apparatus is provided with: the an information receiver for receiving anonymized (concealed) information that has been anonymized with anonymizing information; the an anonymized random-number generator for generating random numbers or anonymized random numbers obtained by anonymizing the random numbers with anonymizing information; and a random-number-added information generator for generating random-number-added information on the basis of the anonymized information and the random numbers or anonymized random numbers.
摘要:
Hiding a service providing server from an authentication server is incompatible with involving the service providing server in the selection of the authentication server. An authentication mediation server (400) comprises a authentication server reliance condition storage unit (510) which stores a first identifier to specify at least one service providing server (100) in association with reliance conditions to authentication servers (200) in the service providing server (100); a user usage authentication server storage unit (520) which stores second identifiers to specify the respective plurality of authentication servers (200) in association with a third identifier to specify a user who uses the authentication servers (200); a high reliance authentication server calculation unit (460) which calculates degrees of reliance for the respective authentication servers (200), on the basis of the reliance conditions to the authentication servers (299) which are associated with the first identifier extracted from the authentication server reliance condition storage unit (519); and an authentication server selection unit (440) which selects a second identifier having the degree of reliance which satisfies a previously provided condition, from the second identifiers associated with the third identifier extracted from the user usage authentication server storage unit (520).
摘要:
An attribute information processing device includes: an attribute information acquiring unit that acquires attribute information; an attribute value acquiring unit that acquires at least two types of attribute values including a first-type attribute value and a second-type attribute value corresponding to an attribute value of the acquired attribute information; a generating unit that determines a function for obtaining an evaluation value from the acquired two or more types of attribute values, determines a acquisition source of the first-type attribute value to be a first-attribute providing device that can provide the first-type attribute value concerning attribute information serving as a comparison target, determines an acquisition source of the second-type attribute value to be a second-attribute providing device different from the first-attribute providing device, and generates attribute evaluation information containing information on the function, an evaluation value, information for identifying the first-attribute providing device, and information for identifying the second-attribute providing device; and an output unit that outputs the second-type attribute value and the attribute evaluation information.