JP5714533B2 - Information linkage system, information linkage method, and information linkage program - Google Patents

Description

  The present invention relates to an information linkage system, an information linkage method, and an information linkage program. Specifically, in the case of information linkage between information holding organizations, the security of information management is improved. TECHNICAL FIELD OF THE INVENTION

  In order to improve the efficiency of administrative affairs and improve the convenience of the public, the government collaborates with multiple organizations such as local governments, administrative organizations, and private companies (hereinafter referred to as “information holding organizations”), We are studying a mechanism that enables exchange of information. In order to realize such a mechanism for linking information among a plurality of organizations, an identifier (hereinafter referred to as “user ID”) that uniquely identifies a target individual is required among a plurality of information holding organizations.

  However, when information of users (ie, citizens, etc.) is managed using a unified user ID at all information holding organizations, when information leakage occurs at a certain information holding organization, other information is held. The security and cost impacts will be affected even to the institution. Specifically, when the leaked information leaked at a certain information holding organization is collated with the information of another information holding organization using the unified user ID as a key, the action history of the corresponding user is grasped. Security concerns. In addition, if such information leakage or a problem associated with it occurs, at least for the user who has leaked information, it is necessary to take countermeasures such as updating the user ID of the corresponding user in all information holding organizations. Occurs.

  As a technology to deal with these concerns, for example, user information is managed with a different number for each information holding organization, and association information of these numbers is managed by an organization that relays information linkage, and is necessary. Accordingly, a technique (see Non-Patent Document 1) or the like that enables information cooperation between information holding organizations by utilizing the association information accordingly. In such prior art, as a method of generating a different number for each information holding organization for information management of each user, the source PIN and the organization identifier of the information holding organization are combined based on the source PIN generated from the resident registration number. Thus, a method of implementing a one-way function (Hash) is employed. Since the source PIN can be known only by the relay organization that relays information, the correspondence between numbers that differ for each information-retaining organization regarding a certain user can be recognized only by the relay organization, and security considerations are required. Has been made.

LADISLAV HURAJ, "Toward a Unique Person Identifier Model in the Slovak Republic", [online], P.1415-1424, [searched January 31, 2012], Internet <http://www.wseas.us/e -library / transactions / computers / 2010 / 52-336.pdf>

  If the user information is managed with a different user ID for each information holding organization as in the prior art described above, if information leakage occurs in a specific information holding organization, the leaked information is the information of other information holding organizations. It can be avoided that the user and the information are specified. Even if information leakage occurs, the update range of the user ID is only the corresponding information holding organization that caused the information leakage. Therefore, the above-mentioned security and cost concerns can be reduced.

  However, by using the transaction ID described in the log data when the information cooperation is performed, there is a possibility that a person other than the relay organization can know the correspondence relationship of the user IDs that are different among the information holding organizations. For example, when two or more information holding organizations collate each other's log data, there is a possibility that the correspondence relationship between the information holding organizations may be grasped for the user ID used in each information holding organization.

  In addition, an audit of information collaboration is conducted by a third-party organization for the purpose of checking that information collaboration between information holding organizations is performed within the scope of the predetermined purpose and ensuring the transparency of information collaboration. It is assumed that In this case, the third-party organization confirms that appropriate information linkage is performed by analyzing log data related to information linkage. However, in the case of a specification that uses a different user ID for each user for each information holding organization, detailed analysis of log data cannot be performed. In order to carry out a detailed analysis of such log data, information necessary for associating user IDs among information holding organizations that can be known only by the relay organization (in the technique of Non-Patent Document 1, “source PIN”). ) Must be passed to a third party. However, since the information is information that is the root of the information linkage mechanism, it is desired that the information is not exposed as much as possible except for the relay organization.

  Accordingly, an object of the present invention is to provide a technique for improving the security of information management and for efficient analysis in a third party organization when information is linked between information holding organizations.

The information linkage system of the present invention that solves the above problem is a computer system that performs management when processing information of users managed by each of different information holding organizations in cooperation between the information holding organizations. A request for acquiring an individual transaction ID, which is identification information to be attached to transaction data exchanged during the cooperation process, is received from the terminal of the information source organization that desires cooperation processing with other information holding institutions regarding user information. And applying the predetermined key held in the storage unit to the information included in the acquisition request, generating an individual transaction ID for the information source organization of the cooperation source and transmitting it to the terminal, and holding the information of the cooperation source An information cooperation request is received from the terminal of the institution, and a predetermined key held in the storage unit is applied to the individual transaction ID included in the information cooperation request. A device that generates an individual transaction ID for a cooperation destination information holding organization, and a combination of the generated individual transaction ID for an information holding organization of a cooperation destination with information of a cooperation processing target included in the information cooperation request. Information linkage request is generated, the information linkage request for the linkage is transmitted to the terminal of the information holding organization of the linkage destination, and processing performed by the terminal in response to the information linkage request for linkage from the terminal Applying a predetermined key held in the storage unit to the individual transaction ID for the information holding organization of the cooperation destination included in the information cooperation result, and a device that receives the information cooperation result as a result, the information of the cooperation source A device for converting into an individual transaction ID for a holding organization, and the converted individual transaction ID for an information holding organization of the cooperation source as the information Set mobile result, the information association result, characterized in that it comprises an information processing apparatus and a device for executing processing for transmitting to the terminal of the cooperation-source information retaining agencies.

  In the above-described information cooperation system, the information processing device may include a device that stores, in a storage unit, log data including an individual transaction ID regarding a transaction corresponding to each process executed by the information processing device. .

  Further, in the above-described information cooperation system, an audit apparatus that includes a communication unit that communicates with another device via a network, and a storage unit that stores a key for data conversion of an individual transaction ID, and that audits the log data An individual transaction relating to a device that communicates with the information processing device and acquires the log data stored in the information processing device, and a transaction corresponding to each process executed at the terminal of the information holding organization A device that acquires log data including an ID by communicating with each terminal, and an individual transaction ID included in the acquired log data is decrypted using a data conversion key in the storage unit as an individual transaction ID. The encrypted identification information of the user to be linked and the specified information that uniquely identifies the transaction Tokushi, in each of these information key may be further contains the audit device and a device for performing a log analysis by a predetermined algorithm.

In the above-described information cooperation system, the apparatus that generates an individual transaction ID for the information source organization of the cooperation source in the information processing apparatus and transmits the individual transaction ID to the terminal is an individual transaction ID for the information source organization of the cooperation source. In addition to the generation process, the predetermined key in the storage unit is applied to the information included in the acquisition request, and the predetermined key held only by the auditing organization is the identification information to be attached to the transaction data exchanged in the cooperation process. An individual audit ID that can be decrypted is generated, the individual transaction ID for the information source organization of the cooperation source and the individual audit ID are transmitted to the terminal, and the individual transaction ID for the information destination organization of the cooperation destination is generated. In the process, an individual transaction ID for the information holding organization of the cooperation destination is generated. In addition to the above-described processing, the predetermined key in the storage unit is applied to the individual audit ID included in the information cooperation request to generate the individual audit ID for the information holding organization of the cooperation destination. The apparatus that receives the result combines the individual transaction ID in addition to the generated individual transaction ID for the information holding institution of the cooperation destination with the information of the cooperation processing target included in the information cooperation request, and information cooperation for cooperation Generate a request, send the information cooperation request for the cooperation to the terminal of the information holding institution of the cooperation destination, information cooperation that is the processing result made by the terminal in response to the information cooperation request for cooperation from the terminal A device that receives the result and converts the individual transaction ID for the information holding organization of the cooperation destination into the individual transaction ID for the information holding organization of the cooperation source, In addition to the process of applying the predetermined key in the storage unit to the individual transaction ID for the information holding organization of the cooperation destination included in the information cooperation result and converting it to the individual transaction ID for the information holding organization of the cooperation source Applying a predetermined key in the storage unit to the individual audit ID for the information holding organization of the cooperation destination included in the information linkage result, and converting the ID into the individual audit ID for the information holding organization of the cooperation source The apparatus for transmitting the information cooperation result to the terminal of the information source organization of the cooperation source, the information transaction ID and the individual audit ID for the information source organization of the cooperation source that has been converted, It is good also as setting to a result and transmitting the said information cooperation result to the terminal of the said information origin organization of a cooperation origin.

  In the above-described information cooperation system, the information processing apparatus further includes a device that stores, in a storage unit, log data including an individual audit ID regarding a transaction corresponding to each process executed by the information processing apparatus. Also good.

  Further, in the above-described information cooperation system, an audit for auditing the log data, comprising a communication unit that communicates with another device via a network, and a storage unit that stores each key for data conversion of an audit ID. An apparatus that communicates with the information processing apparatus and obtains the log data stored in the information processing apparatus, and an individual transaction associated with each process executed at a terminal of the information holding organization A device that acquires log data including an audit ID by communicating with each terminal, and an individual audit ID included in the acquired log data is decrypted by using a data conversion key of a storage unit. The identification information of the user to be linked, which is encrypted as the audit ID, and the predetermined information for uniquely identifying the transaction are acquired, and each information is used as a key to obtain a predetermined account. It may further include an audit apparatus and a device that performs log analysis by Gorizumu.

In addition, the information linkage method of the present invention communicates with other devices via a network in order to manage user information managed by each of different information holding organizations in cooperation between the information holding organizations. A computer having a communication unit that stores data and a storage unit that stores a key for converting data, the cooperation process from a terminal of the information source organization of the cooperation source that desires a cooperation process with another information holding organization regarding a certain user's information When receiving an acquisition request for an individual transaction ID, which is identification information to be attached to transaction data exchanged at the time, and applying a predetermined key held in the storage unit to information included in the acquisition request, the information holding organization of the cooperation source Process for generating an individual transaction ID for the terminal and transmitting it to the terminal, and receiving an information cooperation request from the terminal of the information source organization of the cooperation source, A process for generating a specific transaction ID for a cooperation destination information holding organization by applying a predetermined key held in the storage unit to the individual transaction ID included in the storage unit, and the generated individual transaction ID for the cooperation destination information holding organization In combination with the information of the cooperation processing target included in the information cooperation request, generates an information cooperation request for cooperation, transmits the information cooperation request for cooperation to the terminal of the information holding organization of the cooperation destination, Moreover, in the process of receiving the information cooperation result as the processing result made in the terminal in response to the information cooperation request for cooperation, and the individual transaction ID for the information holding organization of the cooperation destination included in the information cooperation result , Applying a predetermined key held in the storage unit, converting the individual transaction ID for the information source organization of the cooperation source, and the converted The process of setting the individual transaction ID for the information holding institution of the cooperation source in the information cooperation result, and transmitting the information cooperation result to the terminal of the information holding institution of the cooperation source, To do.

In addition, the information linkage program of the present invention manages user information managed by each different information holding organization in cooperation with other information holding organizations, so that it can manage with other devices via a network. A computer having a communication unit that communicates and a storage unit that stores a key for converting data is linked to the information from a terminal of the information source organization that wants to cooperate with other information holding organizations regarding the information of a certain user. Receiving a request for acquiring an individual transaction ID, which is identification information to be attached to transaction data exchanged at the time of processing, and applying a predetermined key held in the storage unit to information included in the acquisition request, and holding information on the cooperation source A process of generating an individual transaction ID for an institution and transmitting it to the terminal, and receiving an information cooperation request from the terminal of the information holding institution of the cooperation source, Applying a predetermined key held in the storage unit to the individual transaction ID included in the cooperation request to generate an individual transaction ID for the information holding institution of the cooperation destination, and an individual for the information holding institution of the generated cooperation destination Combining the transaction ID with the information of the cooperation processing target included in the information cooperation request, generating an information cooperation request for cooperation, and transmitting the information cooperation request for cooperation to the terminal of the information holding organization of the cooperation destination, A process for receiving an information cooperation result as a processing result made at the terminal in response to the information cooperation request for cooperation from the terminal, and an individual transaction for the information holding organization of the cooperation destination included in the information cooperation result Applying a predetermined key held in the storage unit to the ID, and converting the ID into an individual transaction ID for the information source organization of the cooperation source, The process of setting the converted individual transaction ID for the information holding organization of the cooperation source in the information cooperation result, and transmitting the information cooperation result to the terminal of the information holding organization of the cooperation source. Features.

  According to the present invention, it is possible to improve the security of information management in the case of information cooperation between information holding organizations, and to make analysis in a third party organization efficient.

It is a network block diagram including the information cooperation system in 1st Embodiment. It is a figure which shows the structural example of a transaction ID production | generation apparatus. It is a figure which shows the structural example of an information relay apparatus. It is a figure which shows the structural example of a user ID converter and a transaction ID converter. It is a figure which shows the structural example of an information cooperation apparatus. It is a figure which shows the structural example of an auditing device. It is a figure which shows the hardware structural example of each apparatus in embodiment of this invention. It is a flowchart which shows process sequence example 1 of the information cooperation method in 1st Embodiment. It is a flowchart which shows process sequence example 2 of the information cooperation method in 1st Embodiment. It is a flowchart which shows the process sequence example 3 of the information cooperation method in 1st Embodiment. It is a flowchart which shows process sequence example 4 of the information cooperation method in 1st Embodiment. It is a figure which shows the log data example output in the information cooperation apparatus of the cooperation origin in 1st Embodiment. It is a figure which shows the log data example output in the information cooperation apparatus of the cooperation destination in 1st Embodiment. It is a figure which shows the example of log data output in the information relay apparatus in 1st Embodiment. It is a flowchart which shows the process sequence example 5 of the information cooperation method in 1st Embodiment. It is a figure which shows the log data example (log data of a cooperation source information cooperation apparatus) after conversion converted by the auditing apparatus in 1st Embodiment. It is a figure which shows the log data example (log data of a cooperation destination information cooperation device) after conversion converted by the auditing device in 1st Embodiment. It is a figure which shows the log data example (log data of an information relay apparatus) after conversion converted by the auditing apparatus in 1st Embodiment. It is a figure which shows the structural example of the information cooperation system in 2nd Embodiment. It is a flowchart which shows the process sequence example 1 of the information cooperation method in 2nd Embodiment. It is a flowchart which shows the process sequence example 2 of the information cooperation method in 2nd Embodiment. It is a flowchart which shows the process sequence example 3 of the information cooperation method in 2nd Embodiment. It is a figure which shows the log data example output in the information cooperation apparatus of the cooperation origin in 2nd Embodiment. It is a figure which shows the log data example output in the information cooperation apparatus of the cooperation destination in 2nd Embodiment. It is a figure which shows the log data example output in the information relay apparatus in 2nd Embodiment. It is a flowchart which shows process sequence example 4 of the information cooperation method in 2nd Embodiment. It is a figure which shows the log data example after conversion (log data of a cooperation source information cooperation apparatus) converted by the auditing apparatus in 2nd Embodiment. It is a figure which shows the log data example after conversion (log data of a cooperation destination information cooperation device) converted by the auditing device in 2nd Embodiment. It is a figure which shows the log data example (log data of an information relay apparatus) after conversion converted by the auditing apparatus in 2nd Embodiment.

Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 is a network configuration diagram including the information linkage system 10 of the first embodiment. An information linkage system 10 shown in FIG. 1 is a computer system that improves the security of information management and makes efficient analysis at a third party organization when information is linked between information holding organizations. The information linkage system 10 in the first embodiment is connected to a network 20 such as the Internet or a wide area WAN, and is an information linkage apparatus 16 _{1 to} 16 _N installed in each information holding organization, which is a terminal of the information holding organization. (Collectively referred to as “information linkage device 16”) and an audit device 18 that analyzes and audits the logs output by the devices 11 to 14.

  The information linkage system 10 includes a plurality of devices 11 to 14 that cooperate with each other in the intra-organization network 19 connected to the network 20. The minimum configuration of the information linkage system 10 includes the devices 11 to 14. When the audit process is executed, the audit device 18 is included in the configuration.

  As shown in FIG. 1, the devices 11 to 14 connected to the intra-organization network 19 are information between the transaction ID generation device 11 and the information cooperation device 16 that assign a transaction ID when starting information cooperation. The information relay device 12 relays the cooperation, the user ID conversion device 13 converts the user ID in cooperation with the information relay device 12, and the transaction conversion device 14 converts the transaction ID. Note that each of the devices 11 to 14 connected to the intra-organization network 19 may be realized as a function by implementing a program in the same information processing device.

  Subsequently, each of the devices 11 to 14 and 18 included in the information cooperation system 10 of the present embodiment will be described. The functions of the devices 11 to 14 and 18 described below are implemented by programs that are read and executed by the devices 11 to 14 and 18 or the like, or operations of electronic circuits that realize necessary functions. This also applies to the information linkage apparatus 16.

  First, the transaction ID generation device 11 will be described with reference to FIG. The transaction ID generation device 11 includes a processing unit 20 a, an input / output unit 20 c that receives an instruction from an operator of the transaction ID generation device 11, and communication for communicating with other devices via the intra-organization network 19. Part 20d.

  The processing unit 20a includes an ID code acquisition unit 21 that acquires an ID code (user identification information) necessary for generating a transaction ID by making an inquiry to the user ID conversion device 13, and a transaction for uniquely identifying the transaction. The transaction ID original data generation unit 22 that generates ID original data (predetermined data), the transaction ID generation unit 23 that acquires an individual transaction ID by inquiring the transaction ID conversion device 14, and the respective units of the transaction ID generation device 11 are integrated. And a control unit 24 for controlling automatically.

  Next, the information relay device 12 will be described with reference to FIG. The information relay device 12 communicates with other devices via the organization network 19 and the processing unit 30a, the storage unit 30b, the input / output unit 30c that receives an instruction from the operator of the information relay device 12, and the like. Communication unit 30d.

  The processing unit 30a acquires the link code acquisition unit 31 that acquires the converted link code (first code) by making an inquiry to the user ID conversion device 13, and acquires the individual transaction ID that has been converted by making an inquiry to the transaction ID conversion device 14. A transaction ID acquisition unit 32, an information transmission / reception unit 33 that transmits / receives information to / from the plurality of information cooperation devices 16, and a control unit 34 that controls each unit of the information relay device 12. Note that the storage unit 30 b includes log data 35 that is a record (log) of transmission / reception of information with the plurality of information cooperation apparatuses 16. The link code is a code obtained by encrypting the ID code and the institution identifier of the information holding organization with a predetermined encryption key.

  Next, the user ID conversion device 13 and the transaction ID conversion device 14 (collectively referred to as “ID conversion device”) will be described with reference to FIG. The ID conversion device communicates with other devices via the processing unit 40a, the storage unit 40b, the input / output unit 40c that receives an instruction from the operator of the ID conversion device, and the network 19 within the organization. And a communication unit 40d.

  The processing unit 40a includes an ID conversion unit 41 that converts a link code and an individual transaction ID in response to a request from another device, and a control unit 42 that comprehensively controls each unit of the ID conversion device. In addition, the storage unit 40b includes a conversion key holding unit 43 that holds a conversion key used for conversion of a link code and individual transaction ID, and an engine identifier holding unit 44 that holds a different engine identifier for each information holding organization. .

  Next, the information cooperation apparatus 16 is demonstrated using FIG. The information cooperation device 16 is an information processing terminal managed by information holding organizations that mutually cooperate with each other, and accepts instructions from the processing unit 50a, the storage unit 50b, and the operator of the information cooperation device 16, and the like. An input / output unit 50c and a communication unit 50d for communicating with other apparatuses via the network 20 are provided.

  The processing unit 50 a includes a transaction ID acquisition unit 51 that acquires an individual transaction ID by making an inquiry to the transaction ID generation device 11, an information cooperation unit 52 that exchanges information with other devices, and each unit of the information cooperation device 16. And a control unit 53 that performs overall control. The storage unit 50b also stores a link code holding unit 54 that holds the link code of the user managed by the information holding organization having the information linkage apparatus 16, and business data related to the user managed by the corresponding information holding organization. It has a business data holding unit 55 to hold, and log data 56 that is a record (log) of transmission / reception of information in the information cooperation apparatus 16.

  Next, the auditing device 18 will be described with reference to FIG. The audit device 18 includes a processing unit 60a, a storage unit 60b, an input / output unit 60c that receives an instruction from an operator of the audit device 18, and a communication unit 60d that communicates with other devices via the network 20. And have.

  The processing unit 60a comprehensively controls each unit of the log conversion unit 61 that converts the individual transaction ID included in the log acquired from each device, the log analysis unit 62 that analyzes the converted log, and the auditing device 18. And a control unit 63. In addition, the storage unit 60b includes a conversion key holding unit 64 that holds a conversion key used for conversion of individual transaction IDs included in the log, log data 65 before conversion that is a log acquired from each device, and an individual audit device 18. And post-conversion log data 66 that is log data after the transaction ID is converted.

  The hardware configuration of each of the transaction ID generation device 11, the information relay device 12, the user ID conversion device 13, the transaction ID conversion device 14, the information linkage device 16, and the audit device 18 described above is as shown in FIG. Become.

  That is, each device receives information from the CPU 71, a memory 72 that is a volatile storage device such as a RAM, an external storage device 73 that is a nonvolatile storage device such as a hard disk, and a portable storage medium 79 such as a CD-ROM. A reading device 74 for reading, a communication device 75 for communicating with other devices via the network 20 or the network 19 within the organization, an input device 76 such as a keyboard and a mouse, an output device 77 such as a monitor and a printer, and the like It is constructed on a general electronic computer provided with an internal communication line 78 for transmitting and receiving data between these devices.

  In this case, each processing unit described above can be realized by the CPU 71 executing a predetermined program loaded on the memory 72 from the external storage device 73. That is, the communication units 20d, 30d, 40d, 50d, and 60d use the communication device 75 by the CPU 71, and the CPU 71 uses the input device 76 and the output device 77 for the input / output units 20c, 30c, 40c, 50c, and 60c. The storage units 20b, 30b, 40b, 50b, and 50b are realized by the CPU 71 using the memory 72 and the external storage device 73. The processing units 20a, 30a, 40a, 50a, and 60a are realized as processes of the CPU 71.

  The predetermined program may be stored in the external storage device 73 in advance, or stored in the storage medium 79 that can be used by the electronic computer, and read out as necessary via the reading device 74. Also good. Alternatively, the predetermined program is downloaded as necessary from a network that is a communication medium that can be used by the electronic computer or another device connected to a communication device 76 that uses a carrier wave propagating on the network. It may be introduced into the external storage device 73.

  Subsequently, an actual procedure of the information cooperation method in the first embodiment will be described with reference to the drawings. Various operations corresponding to the information cooperation method described below are performed by each of the devices 11 to 14 and 18 constituting the information cooperation system 10 by reading them into a memory or the like, or by an electronic circuit that realizes necessary functions. Realized by operation. This also applies to the information linkage apparatus 16.

  In addition, an information holding organization that wants to collaborate with other information holding organizations with respect to a certain user's information is referred to as a “source information holding organization”, and an information holding organization corresponding to the cooperation destination of this information source organization is “ Suppose that it is a partner information holding organization. As a specific example, a public institution that has received a request for service provision from a citizen is an “information-holding institution”, and information about the relevant citizen that is necessary for this public institution to provide services to the citizen. It is the “information holding organization of the partner” that provides us. In this case, the information provided by the partner information holding organization to the partner information holding organization includes information such as household head income, tax payment results, information on children's enrollment, etc. As a result of predetermined processing to be executed with respect to citizens (for example, processing to determine the amount of tax payment according to the income level of the householder, processing to determine whether or not each type of benefit can be paid by comparing child enrollment information with predetermined standards, etc.) Information can be assumed. Of course, in this embodiment, the type of such information and information holding organization is not limited. The aspect mentioned above is an example to the last.

  FIG. 8 is a flowchart showing a processing procedure example 1 of the information cooperation method in the first embodiment. The operation of the information cooperation system 10 of the first embodiment is divided into a transaction ID new acquisition step, an information cooperation step, and an audit step. First, the operation of the transaction ID new acquisition step will be described. Steps S8001 to S8009 in the flow of FIG. 8 correspond to a transaction ID new acquisition operation.

  Here, first, the information source device 16s of the cooperation source sends the individual transaction ID to the transaction ID generation device 11 of the information processing device 5 at the timing of receiving the information cooperation start instruction from the operator of the information cooperation device 16 or the like. The acquisition request is sent (step S8001). This request includes the link code of the user who is the target of the linkage process and the name of the linkage source information holding organization. The link code is a code encrypted by the information linkage apparatus 16 with a predetermined key held by the information linkage apparatus 16 together with the ID code as identification information of the corresponding user and the identification information of the information holding organization of the linkage source.

  On the other hand, the transaction ID generation device 11 that has received the individual transaction ID acquisition request from the information source cooperation device 16s as the cooperation source makes an ID code acquisition request to the user ID conversion device 13 (step S8002). The ID code acquisition request includes the link code included in the individual transaction ID acquisition request received in step S8001 and the name of the cooperation source information holding organization.

  The user ID conversion device 13 converts the link code included in the received ID code acquisition request using the link code conversion key held in the conversion key holding unit 43, and acquires the ID code (step S8003). Specifically, the link code is decrypted using the link code conversion key, and only the ID code portion is acquired from the ID code obtained as a result of the decryption and the institution identifier of the cooperation source information holding organization. Also, the user ID conversion device 13 responds to the transaction ID generation device 11 with the ID code obtained in step S8003 (step S8004).

  The transaction ID generation device 11 obtains an ID code from the user ID conversion device 13 and generates transaction ID original data (step S8005). The transaction ID original data is identification information for uniquely identifying a transaction at the time of information linkage. As a generation method, the ID code is given as an input value to a predetermined function (for example, a hash function) in which output values do not overlap or a program for generating an ID by incrementing a numerical value for each generation. Thus, transaction ID original data is generated.

  Next, the transaction ID generation device 11 sends an individual transaction ID generation request to the transaction ID conversion device 14 (step S8006). This request includes the ID code acquired in step S8004, the transaction ID original data generated in step S8005, and the cooperation source information holding institution name included in the ID acquisition request in step S8001.

  On the other hand, the transaction ID conversion device 14 receives an individual transaction ID generation request from the transaction ID generation device 11, and generates an individual transaction ID for the information holding organization of the cooperation source based on information included in the request. (Step S8007). Specifically, the transaction ID conversion device 14 generates the individual transaction ID by performing the processing shown in the flowchart shown in FIG. Here, the individual transaction ID generation processing will be described with reference to FIG. In this case, the transaction ID conversion device 14 searches the organization identifier holding unit 44 using the cooperation source information holding organization name included in the individual transaction ID generation request received from the transaction ID generation device 11 as a key, and the cooperation source information holding organization. Is acquired (step S1001). Next, the transaction ID conversion device 14 combines the acquired institution identifier, the transaction ID original data included in the individual transaction ID generation request, and the ID code (step S1002). The transaction ID conversion device 14 performs a cryptographic operation on the values combined in step S1002 using a transaction ID conversion key (step S1003), and acquires an individual transaction ID for the above-mentioned information source organization of the cooperation source ( Step S1004).

  Returning to the description of the flow of FIG. 8 again. The transaction ID conversion device 14 that has generated the individual transaction ID in this way responds to the transaction ID generation device 11 with the individual transaction ID for the cooperation source information cooperation device 16s generated in step S8007 (step S8008). 11 returns the individual transaction ID to the cooperation source n information cooperation device 16s (step S8009).

  The above new transaction acquisition step only needs to be performed once at the timing of starting information linkage.

  Next, the information cooperation step will be described. Steps S8010 to S8022 in the flow of FIG. 8 and the flow of FIG. 9 show the information cooperation operation of this embodiment. In this case, as described above, the cooperation source information cooperation device 16s that acquired the individual transaction ID in the new transaction ID acquisition step starts the information cooperation step. That is, the cooperation source information cooperation device 16s sends an information cooperation request to the information holding organization of the cooperation destination to the information relay device 12 (step S8010), and records indicating that the information cooperation request has been sent to the log data 56. Output (step S8011). In the information linkage request, the individual transaction ID (for the linkage source information holding organization) acquired in the transaction ID new acquisition step, the link code of the user that is the target of linkage processing, the linkage destination information holding organization name, The type of information to be linked to information (for example, a service to be provided with respect to the corresponding user, and information indicating processing and information necessary for the service) is described.

  Note that the information source device 16 of the cooperation source provides information that defines its own processing and the type of information cooperation necessary for executing the processing and the correspondence relationship with the other party, that is, the information holding organization of the cooperation destination, It is stored in the storage unit, etc., and when executing a process, the attribute information of the corresponding process is collated with the information on the corresponding relationship, and the necessity of information linkage and the information holding organization of the partner to be partnered are specified. It shall be possible.

  On the other hand, the information relay apparatus 12 receives the information cooperation request from the cooperation source information cooperation apparatus 16s, and outputs a record indicating that the information cooperation request has been received to the log data 35 (step S8012). In addition, the information relay device 12 acquires a link code included in the received information cooperation request, and sends the link code conversion request to the user ID conversion device 13. The conversion request includes the link code described in the information cooperation request received in step S8010 and the name of the cooperation destination information holding organization.

  On the other hand, the user ID conversion device 13 receives the link code conversion request from the information relay device 12 and converts the link code (step S8014). Specifically, the link code included in the link code conversion request is decrypted using the link code conversion key held in the storage unit 40b to obtain the ID code.

  Further, the user ID conversion device 13 acquires the institution identifier of the cooperation destination information holding organization from the institution identifier holding unit 44 of the storage unit 40b, using the name of the cooperation destination information holding organization included in the link code conversion request as a key. Among these acquired information, the user ID conversion device 13 combines the ID code and the institution identifier of the cooperation destination information holding institution, and performs encryption using the link code conversion key held in the storage unit 40b. Generate a link code for the linked information-retaining institution.

  The user ID conversion device 13 responds the generated link code to the information relay device 12 (step S8015).

  Subsequently, the user relay device 12 sends the individual transaction ID conversion request included in the information cooperation request to the transaction ID conversion device 14 (step S8016). This request includes the individual transaction ID described in the information cooperation request and the cooperation destination information holding institution name.

  At this time, in response to the above conversion request, the transaction ID conversion device 14 performs a process of converting the individual transaction ID for the information holding organization at the cooperation source into the individual transaction ID for the information holding organization at the cooperation destination (step S8017). . Specifically, the process shown in the flowchart of FIG. 11 is performed to generate an individual transaction ID for the information holding organization of the cooperation destination. Here, the generation processing of the individual transaction ID for the information holding organization of the cooperation destination will be described using FIG. In this case, the transaction ID conversion device 14 acquires the individual transaction ID for the information source organization of the cooperation source included in the individual transaction ID conversion request received from the information relay device 12, and stores the transaction ID conversion key stored in the storage unit 40b. (Step S1101).

  Since the transaction ID original data, ID code, and institution identifier before conversion are obtained by this decryption, the transaction ID conversion device 14 acquires the transaction ID original data and the ID code (step S1102).

  Further, the transaction ID conversion device 14 acquires the information holding institution name to be converted, that is, the cooperation destination included in the individual transaction ID conversion request, searches the institution identifier holding unit 44 using the holding institution name as a key, and The institution identifier of the possessing institution is acquired (step S1103).

  The transaction ID conversion device 14 combines the transaction ID original data acquired in step S1102, the ID code, and the institution identifier acquired in step S1103 (step S1104), and performs a cryptographic operation using the transaction ID conversion key held in the storage unit 40b. (Step S1105), and the individual transaction ID for the information holding organization of the conversion destination is generated (Step S1106).

  Returning to the description of the flow of FIG. 8 again. The transaction ID conversion device 14 responds to the information relay device 12 with the individual transaction ID for the information holding organization of the cooperation destination obtained as described above (step S8018).

  On the other hand, the information relay apparatus replaces the link code and individual transaction ID for the information holding organization of the cooperation destination acquired in steps S8015 and S8018 with the link code and individual transaction ID in the information cooperation request received in step S8010. Rewriting (step S8019) and sending it to the cooperation destination information cooperation apparatus 16r (step S8020). And the record which sent the information cooperation request is output to the log data 35 (step S8021).

  In this case, the cooperation destination information cooperation device 16r receives the information cooperation request from the information relay device 12, and outputs a record of the information cooperation request received to the log data 56 (step S8022). In addition, the cooperation destination information cooperation device 16r performs a predetermined process according to the received information cooperation request (step S9001), and returns the result as an information cooperation result to the information relay device 12 (S9002). A record in response to the result is output to the log data 56 (S9003). The information cooperation result includes the individual transaction ID described in the information cooperation request received in step S8020, the link code of the user to be linked, the name of the information holding institution that requested the information cooperation, the information Information related to the cooperation result is described.

  On the other hand, the information relay apparatus 12 receives the information cooperation result from the cooperation destination information cooperation apparatus 16r, and outputs the received record to the log data 35 (S9004). Then, the information relay device 12 requests the user ID conversion device 13 to convert the link code included in the information cooperation result (S9005).

At this time, the user ID conversion device 13 receives the link code conversion request and decrypts the link code included in the link code conversion request using the link code conversion key held in the storage unit 40b. A code is acquired (S9006). Further, the user ID conversion device 13 acquires the institution identifier of the information source organization of the cooperation source from the institution identifier holding unit 44 of the storage unit 40b using the name of the information source organization of the cooperation source included in the link code conversion request as a key. . The user ID conversion device 13 combines the ID code and the institution identifier of the information source organization of the cooperation source among the acquired information, and performs encryption by using the link code conversion key held in the storage unit 40b. Then, a link code for the information source organization of the cooperation source is generated, and this link code is returned to the information relay device 12 (step S9007).
Further, the information relay apparatus 12 acquires the individual transaction ID included in the information cooperation result, and requests the transaction ID conversion apparatus 14 to convert the individual transaction ID (S9008). At this time, the transaction ID conversion device 14 generates the individual transaction ID for the information holding organization of the cooperation source by performing the same processing as the above-described step S8017 (S9009), and responds with the individual transaction ID (S9010). ).

  The information relay device 12 writes the link code for the information source organization of the cooperation source acquired in step S9007 and the individual transaction for the information source organization of the cooperation source acquired in step S9010 in the information cooperation result received in step S9002. (S9011), the information cooperation result is sent to the information cooperation apparatus 16s of the cooperation source (S9012). Further, the information relay apparatus 12 outputs a record of sending the information cooperation result to the log data 35 (S9013).

  On the other hand, the information link device 16s as the link source receives the information link result from the information relay device 12, and outputs the received record to the log data 56 (S9014).

  Subsequently, in the information link step, the contents of the log data 35 and 56 output from the link source information link device 16s, the link destination information link device 16r, and the information relay device 12 are shown in FIGS. explain.

  FIG. 12 is a diagram illustrating an example of log data 35 output from the cooperation source information cooperation device 16s, and FIG. 13 is a diagram illustrating an example of log data 35 output from the cooperation destination information cooperation device 16r. The log on the first line in the log data 35 illustrated in FIG. 12 is the log output in step S8011 in FIG. 8, and the log on the second line indicates the image of the log output in step S9014 in FIG. Further, the log on the first line in the log data 35 illustrated in FIG. 13 is the log output in step S8022 in FIG. 8, and the log on the second line indicates the image of the log output in step S9003 in FIG.

  Each log data 35 in FIGS. 12 and 13 includes date and time 121, individual transaction ID 122, processing type 123, link code 124, information linkage source (From) 125, information linkage destination (To) 126, and message content. 127 etc. are included.

  Of these, the individual transaction ID 122 and the link code 124 describe the individual transaction ID and link code for the information holding organization that holds the log data. In other words, since individual transaction IDs and link codes have different values for each information holding institution, even if the information holding institution holding these log data 35 collates and matches the two log data, It is not possible to grasp the correspondence of the link code of the person.

  Next, the contents of the log data 56 output by the information relay apparatus 12 will be described with reference to FIG. The log of the first line in the log data 56 illustrated in FIG. 14 is the log output in step S8012 in FIG. 8, the log of the second line is the log output in step S8021 of FIG. 8, the log of the third line is FIG. In FIG. 9, the log output in step S9004 and the log on the fourth line indicate the images output in step S9013 in FIG. The information relay apparatus 12 outputs values such as items 121 to 127 similar to the information cooperation apparatus 16 as the log data 56. However, in the items of the individual transaction ID 122 and the link code 124, an individual transaction ID and a link code for the cooperation source information holding organization or the cooperation destination information holding organization are described. Even if this log data 56 is browsed, it is impossible to grasp the correspondence relationship between the link codes of the target users.

  Next, the operation of the audit step will be described. FIG. 15 is a flowchart for explaining the auditing operation in the present embodiment. In this case, the information collaboration device 16 (both the collaboration source information collaboration device 16s and the collaboration destination information collaboration device 16r) and the information relay device 12 of the information collaboration system 10 store the log data 35 and the log data 56 respectively in the audit device 18. (Steps S1501 and S1503). The log data may be sent online or using a medium or the like.

  On the other hand, the auditing device 18 acquires log data from the information linkage device 16 or the information relay device 12 of the information linkage system 10, and stores this log data in the storage unit 60b as log data 65 before conversion (step S1502, S1502). 1504).

  The auditing device 18 decrypts the value of the item of the individual transaction ID 121 with respect to all log data included in the pre-conversion log data 65 using the transaction ID conversion key held in the storage unit 60b, and converts the decrypted value The post-log data 66 is stored (step S1505). The auditing device 18 uses the converted log data 66 to analyze whether or not unauthorized information cooperation is performed (step S1506). For example, for a user who thinks that a certain attribute has been requested in a short time from a specific information holding organization in a concentrated manner, a large number of information holding organizations are within the prescribed time. Analyzes the situation such as cooperation being performed at a frequency exceeding the degree between.

  16, 17 and 18 are diagrams for explaining the contents of the post-conversion log data 66 converted in the auditing step. As a result of converting the log data illustrated in FIGS. 12, 13, and 14, the converted log data illustrated in FIGS. Specifically, the item of the individual transaction ID 122 in the log data of FIGS. 12, 13, and 14 is converted into the transaction ID original data 162, the ID code 163, and the institution identifier 164 in the converted log data 66 of FIGS. Is done. Since the post-conversion log data 66 is in a state in which the correspondence relation between the transaction ID original data 162 and the ID code 163 is known, the auditing apparatus 18 uses these pieces of information to make a user for each transaction at the time of information linkage. Can be identified uniquely and detailed log analysis can be performed.

  In the above embodiment, the link code conversion key is held only in the information relay apparatus 12, and the transaction ID conversion key is held in two places, the information relay apparatus 12 and the audit apparatus 18. The transaction ID conversion key is shared between the information relay apparatus 12 and the auditing apparatus 18 in a secure manner that does not leak each other.

  Further, although the case where the ID code is included in the generation of the individual transaction ID is described, it may be a link code for a third party instead of the ID code. In this case, in steps S8002 to S8004 of the transaction ID new acquisition step, instead of acquiring the ID code, a link code for a third party is acquired, and the ID code in the subsequent processing is used as the link code for the third party. This can be realized. The first embodiment of the present invention has been described above.

  Next, 2nd embodiment of this invention is described using FIGS. Unlike the first embodiment, the second embodiment generates an individual audit ID using information similar to the information used when generating an individual transaction ID, and adds it to log data. This individual audit ID can be decrypted by using a key possessed only by the auditing institution, and becomes an ID different for each information holding institution like the individual transaction ID.

  First, the structure of the information cooperation system in 2nd Embodiment is demonstrated using FIG. In the information linkage system 10 of the second embodiment, an audit ID conversion device 15 that converts an audit ID is added to the information processing device 5 in addition to the configuration of the first embodiment. The audit ID conversion device 15 is realized by the same configuration as the user ID conversion device 13 and the transaction ID conversion device 14 illustrated in FIG. The conversion key holding unit 43 of the audit ID conversion device 15 holds an encryption key acquired in advance from a third party organization. Note that the audit ID conversion device 15 holds only the encryption key, and only the third party holds the decryption key.

  Next, a transaction ID new acquisition step, an information linkage step, and an audit step in the information linkage method of the second embodiment will be described. First, the operation of the new transaction ID acquisition step will be described. Steps S2001 to S2012 in FIG. 20 are flowcharts for explaining a transaction ID new acquisition operation in the second embodiment.

  In this case, the cooperation source information cooperation device 16s receives the individual transaction ID and the individual audit ID from the transaction ID generation device 11 at the timing of receiving the information cooperation start instruction from the operator of the information cooperation device 16s. The acquisition request is sent (step S2001). This request includes the link code of the user to be linked and the name of the linking source information holding organization.

  The transaction ID generation device 11 that has received the individual transaction ID acquisition request from the cooperation source information cooperation device 16s makes an ID code acquisition request to the user ID conversion device 13 (step S2002). The ID code acquisition request includes the link code included in the individual transaction ID acquisition request received in step S2001 and the name of the information source organization that is the cooperation source.

  The user ID conversion device 13 converts the link code included in the received ID code acquisition request using the link code conversion key held in the conversion key holding unit 43, and acquires the ID code (step S8003). Specifically, the user ID conversion device 13 decrypts the link code using the link code conversion key, and only the ID code portion of the ID code obtained as a result of the decryption and the institution identifier of the cooperation source information holding organization is obtained. get. The user ID conversion device 13 responds to the transaction ID generation device 11 with the ID code obtained in step S2003 (step S2004).

  On the other hand, the transaction ID generation device 11 generates transaction ID original data (step S2005). The transaction ID original data is generated so as to be a number for uniquely identifying the information linkage transaction. This processing is the same as the transaction ID original data generation processing in the first embodiment.

  Next, the transaction ID generation device 11 sends an individual transaction ID generation request to the transaction ID conversion device 14 (step S2006). This request includes the ID code acquired in step S2004, the transaction ID source data generated in step S2005, and the name of the information holding organization of the cooperation source included in the ID acquisition request in step S2001.

  The transaction ID conversion device 14 receives the individual transaction ID generation request, and generates an individual transaction ID based on the information included in the request (step S2007). Specifically, the transaction ID conversion device 14 performs processing similar to the processing in the first embodiment described based on the flowchart of FIG. 10 and generates an individual transaction ID. The transaction ID conversion device 14 responds to the transaction ID generation device 11 with the individual transaction ID for the cooperation source information cooperation device 16s generated in step S2007 (step S2008).

  Next, the transaction ID conversion device 14 sends an individual audit ID generation request to the audit ID conversion device 15 (step S2009). This request includes the same information as the individual transaction ID generation request sent in step S2006. That is, it includes the ID code acquired in step S2004, the transaction ID source data generated in step S2005, and the name of the information holding organization of the cooperation source included in the ID acquisition request in step S2001.

  On the other hand, the audit ID conversion apparatus 15 receives the individual audit ID generation request and generates an individual audit ID based on the information included in the request (step S2010). Specifically, the same processing as the processing shown in the flowchart shown in FIG. 10 is performed. That is, the audit ID conversion device 15 performs processing using the transaction ID conversion key in step S1003 as an audit ID conversion key, and generates an individual audit ID. The audit ID conversion device 15 responds to the transaction ID generation device 11 with the individual audit ID for the cooperation source information cooperation device 16s generated in step S2010 (step S2011).

  On the other hand, the transaction ID generation device 11 returns the individual transaction ID received in step S2008 and the individual audit ID received in step S2011 to the cooperation source information cooperation device 16s (step S2012).

  The above new transaction acquisition step only needs to be performed once at the timing of starting information linkage.

  Next, the information cooperation step in 2nd Embodiment is demonstrated. Steps S2013 to S2018, FIG. 21, and FIG. 22 in FIG. 20 are flowcharts for explaining the information cooperation operation of this embodiment.

  The cooperation source information cooperation device 16s that has acquired the individual transaction ID and the individual audit ID in the new transaction ID acquisition step starts the information cooperation step. In other words, the information link device 16s as the link source sends an information link request for the information holding organization as the link destination to the information relay device 12 (step S2013), and records indicating that the information link request has been sent to the log data 56. Output (step S2014). The information linkage request includes the individual transaction ID and individual audit ID acquired in the transaction ID new acquisition step, the link code of the user to be linked, the name of the information holding organization of the linkage destination, and the information of the information linkage target The type and the like are described.

  On the other hand, the information relay device 12 receives the information cooperation request from the cooperation source information cooperation device 16s and outputs a record indicating that the information cooperation request has been received to the log data 35 (step S2015). Further, the information relay device 12 acquires a link code included in the information cooperation request and sends the link code conversion request to the user ID conversion device 13. The conversion request includes the link code described in the information cooperation request received in step S2013 and the name of the cooperation destination information holding organization.

  In this case, the user ID conversion device 13 receives the link code conversion request from the information relay device 12 and converts the link code (step S2017). Specifically, the user ID conversion device 13 decrypts the link code included in the link code conversion request using the link code conversion key, and acquires the ID code and the cooperation source information possessing institution identifier. Further, the user ID conversion device 13 acquires the institution identifier of the cooperation destination information holding organization from the institution identifier holding unit 44 using the cooperation destination information holding organization name included in the link code conversion request as a key. Among these acquired information, the user ID conversion device 13 combines the ID code and the institution identifier of the cooperation destination information holding organization, and performs encryption using the link code conversion key for the cooperation destination information holding organization. Generate link code.

  The user ID conversion device 13 responds to the information relay device 12 with the converted link code (step S2018).

  Next, the user relay device 12 sends the individual transaction ID conversion request included in the information cooperation request to the transaction ID conversion device 14 (step S2101). This request includes the individual transaction ID described in the information cooperation request and the cooperation destination information holding institution name.

  On the other hand, the transaction ID conversion device 14 receives the conversion request and converts the individual transaction ID (step S2102). Specifically, the process shown in the flowchart of FIG. 11 is executed as in the process of the first embodiment. The transaction ID conversion device 14 obtains the individual transaction ID for the information holding organization of the cooperation destination obtained as a result, the transaction ID original data, the ID code, and the organization identifier acquired during the individual transaction ID conversion processing. 12 is responded (step S2103).

  Next, the information relay apparatus 12 sends an individual audit ID conversion request to the audit ID conversion apparatus 15 (step S2104). This request includes the transaction ID original data, the ID code, and the institution identifier among the information acquired in step S2103.

  In this case, the audit ID conversion device 15 receives the above conversion request and converts the individual audit ID (step S2105). Specifically, the audit ID conversion device 15 combines the transaction ID original data received in step S2104, the ID code, and the institution identifier, and encrypts them using the audit ID conversion key. The audit ID conversion device 15 transmits the individual audit ID for the information holding organization of the cooperation destination obtained as a result to the information relay device 12.

  On the other hand, the information relay device 12 receives the link code, individual transaction ID, and individual audit ID for the cooperation destination information holding organization acquired in step S2018, step S2103, and step 2106, respectively, in the information cooperation request received in step S2013. It is rewritten as the item value of the relevant information (step S2107) and sent to the information cooperation apparatus 16r of the cooperation destination (step S2108). Further, the information relay device 12 outputs a record of sending this information cooperation request to the log data 35 (step S2109).

  The information cooperation apparatus 16r of the cooperation destination receives the information cooperation request from the information relay apparatus 12, and outputs a record of receiving this information cooperation request to the log data 56 (step S2110). Also, the information link device 16r of the link destination performs processing according to the received information link request (step S2111), returns the result to the information relay device 12 as the information link result (S2201), and returns the information link result. The response record is output to the log data 56 (S2202). The information linkage result includes the individual transaction ID described in the information linkage request received in step S2108, the individual audit ID, the link code of the user to be linked, and the information of the linkage source that requested the information linkage. The name of the holding organization and information related to the information linkage result are described.

  On the other hand, the information relay device 12 receives the information cooperation result from the cooperation destination information cooperation device 16r and outputs the received record to the log data 35 (S2203). Then, the information relay device 12 requests the user ID conversion device 13 to convert the link code included in the information cooperation result (S2204). In this case, the user ID conversion device 13 performs the same processing as in step S2017 to convert the link code to the link source information holding organization (S2205), and returns the link code (S2206).

  In addition, the information relay apparatus 12 acquires the individual transaction ID included in the information cooperation result, and issues a conversion request for the individual transaction ID to the transaction ID conversion apparatus 14 (S2207). The transaction ID conversion device 14 converts the transaction ID into an individual transaction ID for the cooperation source information holding organization by performing the same processing as in step S2102 (S2208), and during the individual transaction ID and individual transaction ID conversion processing The acquired transaction ID original data, ID code, and organization identifier are returned to the information relay apparatus 12 (S2209).

  Next, the information relay apparatus 12 sends an individual audit ID conversion request to the audit ID conversion apparatus 15 (step S2210). This request includes the transaction ID original data, the ID code, and the institution identifier among the information acquired in step S2209.

  In this case, upon receiving the conversion request, the audit ID conversion device 15 performs the same processing as in step S2105 to convert the individual audit ID (step S2211). The audit ID conversion device 15 transmits the individual audit ID for the cooperation source information holding organization obtained as a result to the information relay device 12 (step S2212).

  On the other hand, the information relay device 12 uses the link code for the information source organization of the cooperation source acquired in step S2206, the individual transaction for the information source organization of the cooperation source acquired in step S2209, and the cooperation acquired in step S2212. The original individual ID for information holding organization is written in the information cooperation result received in step S2201 (S2213), this information cooperation result is sent to the information cooperation apparatus 16s of the cooperation source (S2214), and the information cooperation result is sent. The recorded record is output to the log data 35 (S2215).

  On the other hand, the information link device 16s as the link source receives the information link result and outputs the received record to the log data 56 (S2216).

  Subsequently, in the information collaboration step in the second embodiment, the contents of the log data 35 and 56 output from the collaboration source information collaboration device 16s, the collaboration destination information collaboration device 16r, and the information relay device 12 are shown in FIGS. , 25. However, differences from the log data (FIGS. 12 to 14) in the first embodiment will be described. 23 shows log data 35 output from the cooperation source information cooperation device 16s, FIG. 24 shows log data 35 output from the cooperation destination information cooperation device 16r, and FIG. 25 shows log data 56 output from the information relay device 12. It is a figure for demonstrating. As a difference from the first embodiment, an individual audit ID 233 is added to each log data. Therefore, as in the first embodiment, even if the log data 56 as shown in FIG. 25 is viewed, it is impossible to grasp the correspondence relationship between the link codes of the target users.

  Next, the operation of the audit step in the second embodiment will be described. FIG. 26 is a flowchart for explaining an auditing operation in the second embodiment. In this case, the information relay device 12 and the information cooperation device 16 of each information holding organization send the log data 35 and the log data 56 to the auditing device 18 (steps S2601, S2603), respectively. Such log data may be sent online or using a medium or the like.

  The auditing device 18 receives and acquires the log data transmitted by the information relay device 12 and the information cooperation device 16 of each information holding organization, and the log data acquired here is the log data 65 before conversion in the storage unit 60b. (Steps S2602, 2604).

  Subsequently, the auditing device 18 decrypts the value of the item of the individual audit ID 233 with respect to all the log data included in the pre-conversion log data 65 using the audit ID conversion key, and stores it in the post-conversion log data 66. (Step S2605). The auditing device 18 uses the post-conversion log data 66 to analyze whether or not unauthorized information cooperation is performed (step S2606). For example, for a user who thinks that a certain attribute has been requested in a short time from a specific information holding organization in a concentrated manner, a large number of information holding organizations are within the prescribed time. Analyzes the situation such as cooperation being performed at a frequency exceeding the degree between.

  27, 28, and 29 are diagrams for explaining the contents of post-conversion log data converted in the audit step in the second embodiment. The results of converting the log data of FIGS. 23, 24, and 25 are converted log data illustrated in FIGS. 27, 28, and 29, respectively. Specifically, the individual audit ID 233 items in the log data of FIGS. 23, 24, and 25 are converted into transaction ID original data 273, ID code 274, and organization identifier 275 in the converted log data of FIGS. Has been. Since the post-conversion log data 66 is in a state in which the correspondence relation is known for the transaction ID original data 273 and the ID code 274, the auditing apparatus 18 uses these pieces of information for each transaction during information linkage. Can be identified uniquely and detailed log analysis can be performed.

  In the second embodiment, the link code conversion key is held only by the information relay apparatus 12, and the transaction ID conversion key is held only by the information relay apparatus 12. Further, the audit ID conversion key of the audit ID conversion key is held in the audit ID conversion device 15, and the key required for decryption of the audit ID conversion key is held in the audit device 18. For example, when a public key encryption method key is used as the audit ID conversion key, the public key is held in the audit ID conversion device 15 and the secret key is held in the audit device 18.

  Further, as in the first embodiment, the case where the ID code is included in the generation of the individual transaction ID and the individual audit ID has been described, but it may be a link code for a third party instead of the ID code. In this case, in steps S2002 to S2004 of the transaction ID new acquisition step, instead of acquiring the ID code, a link code for a third party is acquired, and the ID code in the subsequent processing is used as the link code for the third party. This can be realized. The second embodiment of the present invention has been described above.

  Although the best mode for carrying out the present invention has been specifically described above, the present invention is not limited to this, and various modifications can be made without departing from the scope of the invention.

  In this embodiment, the link code and the individual transaction ID for each information cooperation apparatus are recorded in the log output in each information holding organization that exchanges information and cooperates. For this reason, for example, even if two or more information holding organizations collate each other's log data, there is no fear that the correspondence relationship of the link codes of these information holding organizations will be grasped, so the user is specified based on the log. Therefore, the security is improved as compared with the prior art. In addition, since the transaction ID original data and the ID code can be generated by decrypting the individual transaction ID in the third party organization, the log can be analyzed based on these information and appropriate auditing can be performed. That is, even if a link code conversion key is not distributed to a third party, it can be converted into log data that can be analyzed by a third party.

  Therefore, according to the present embodiment, when information is linked between information holding organizations, the security of information management can be improved, and analysis at a third party organization can be made efficient.

  At least the following will be clarified by the description of the present specification. That is, in the information cooperation system of the present embodiment, the information processing apparatus has a device that stores, in a storage unit, log data including an individual transaction ID related to a transaction corresponding to each process executed by the information processing apparatus. Also good.

  In addition, the information cooperation system of the present embodiment includes a communication unit that communicates with other devices via a network, and a storage unit that stores a data conversion key for an individual transaction ID, and audits the log data. An auditing device that communicates with the information processing device, acquires the log data stored in the information processing device, and a transaction corresponding to each process executed at the terminal of the information holding organization, An apparatus for acquiring log data including an individual transaction ID by communicating with each terminal, and an individual transaction ID by decrypting the individual transaction ID included in the acquired log data using a data conversion key of the storage unit. The identification information of the cooperation target user, which is encrypted as the ID, and the predetermined information that uniquely identifies the transaction Tokushi, in each of these information key may be further contains the audit device and a device for performing a log analysis by a predetermined algorithm.

  Further, in the information processing apparatus of the information linkage system of the present embodiment, the device that generates an individual transaction ID for the cooperation destination information holding organization and transmits it to the terminal is the individual transaction for the cooperation destination information holding organization. In addition to ID generation processing, a predetermined key held only by an auditing organization, which is identification information to be attached to transaction data exchanged during the cooperation processing by applying a predetermined key in the storage unit to information included in the acquisition request Generate an individual audit ID that can be decrypted by transmitting the individual transaction ID for the cooperation destination information holding organization and the individual audit ID to the terminal, and generate an individual transaction ID for the cooperation destination information holding organization. In this process, an individual transaction ID for the information holding organization of the cooperation destination is generated. In addition to processing, a specific key in the storage unit is applied to the individual audit ID included in the information cooperation request to generate an individual audit ID for the information holding organization of the cooperation destination, and the information cooperation result In addition to the generated individual transaction ID for the linked information-holding organization, the device that receives the ID is combined with the information to be processed in the cooperation process included in the information cooperation request, to obtain an information cooperation request for cooperation. The information cooperation request for the cooperation is transmitted to the terminal of the information holding organization of the cooperation destination, and the information cooperation result that is the processing result made by the terminal in response to the information cooperation request for cooperation from the terminal The device for converting the individual transaction ID for the information holding institution of the cooperation destination into the individual transaction ID for the information holding institution of the cooperation source, In addition to the process of applying the predetermined key in the storage unit to the individual transaction ID for the information holding organization of the cooperation destination included in the information cooperation result and converting it to the individual transaction ID for the information holding organization of the cooperation source Applying a predetermined key in the storage unit to the individual audit ID for the information holding organization of the cooperation destination included in the information linkage result, and converting the ID into the individual audit ID for the information holding organization of the cooperation source The apparatus for transmitting the information cooperation result to the terminal of the information source organization of the cooperation source, the information transaction ID and the individual audit ID for the information source organization of the cooperation source that has been converted, It is good also as setting to a result and transmitting the said information cooperation result to the terminal of the said information origin organization of a cooperation origin.

  In addition, the information processing apparatus in the information cooperation system according to the present embodiment further includes a device that stores, in a storage unit, log data including an individual audit ID regarding a transaction corresponding to each process executed by the information processing apparatus. It is good.

  The information linkage system of the present embodiment includes a communication unit that communicates with other devices via a network, and a storage unit that stores each key for data conversion of an audit ID, and audits the log data. An audit device that performs communication with the information processing device, acquires the log data stored in the information processing device, and a transaction corresponding to each process executed at the terminal of the information holding organization By decrypting the log data including the individual audit ID by communicating with each terminal and the individual audit ID included in the acquired log data by using the data conversion key of the storage unit The identification information of the user to be linked and the predetermined information for uniquely identifying the transaction, which are encrypted as the individual audit ID, are acquired, and each information is used as a key to obtain a predetermined account. It may further include an audit apparatus and a device that performs log analysis by Gorizumu.

5 Information processing apparatus 10 Information cooperation system 11 Transaction ID generation apparatus 12 Information relay apparatus 13 User ID conversion apparatus 14 Transaction ID conversion apparatus 15 ID conversion apparatus 16 for audit Information cooperation apparatus (terminal of information holding organization)
16s information linkage device (terminal of information source organization of linkage source)
16r Information cooperation device (terminal of information holding organization of cooperation destination)
18 Auditing device 19 Internal network 20 Networks 20a, 30a, 40a, 50a, 60a Processing units 30b, 40b, 50b, 60b Storage units 20c, 30c, 40c, 50c, 60c Input / output units 20d, 30d, 40d, 50d, 60d Communication unit 21 ID code acquisition unit 22 Transaction ID original data generation unit 23 Transaction ID generation unit 24, 34, 42, 53, 63 Control unit 31 Link code acquisition unit 32 Transaction ID acquisition unit 33 Information transmission / reception unit 35, 56 Log data 41 ID conversion unit 43 Conversion key holding unit 44 Organization identifier holding unit 51 Transaction ID acquisition unit 52 Information linkage unit 54 Link code holding unit 55 Business data holding unit 61 Log conversion unit 62 Log analysis unit 64 Conversion key holding unit 65 Log data before conversion 66 Log data after conversion 71 CPU
72 Memory 73 External storage device 74 Reading device 75 Communication device 76 Input device 77 Output device 78 Internal communication line 79 Portable storage medium

Claims (8)

A computer system for managing user information managed by each of different information holding organizations when processing the information in cooperation between the information holding organizations,
A request for acquisition of an individual transaction ID, which is identification information to be attached to transaction data exchanged during the cooperation processing, from the terminal of the cooperation source information holding organization that desires cooperation processing with another information holding organization regarding a certain user's information A device that receives and applies a predetermined key held in the storage unit to the information included in the acquisition request, generates an individual transaction ID for the information holding organization of the cooperation source , and transmits it to the terminal;
An individual transaction for an information holding organization of a cooperation destination by receiving an information cooperation request from the terminal of the information holding organization of the cooperation source and applying a predetermined key held in the storage unit to the individual transaction ID included in the information cooperation request A device for generating an ID;
The generated individual transaction ID for the information-holding organization of the cooperation destination is combined with the information of the cooperation processing target included in the information cooperation request to generate an information cooperation request for cooperation, and the information cooperation request for the cooperation is An apparatus for transmitting to the terminal of the information-holding organization of the cooperation destination, and receiving from the terminal an information cooperation result as a processing result made in the terminal in response to the information cooperation request for cooperation;
An apparatus for converting the individual transaction ID for the information holding organization of the cooperation source by applying a predetermined key held in the storage unit to the individual transaction ID for the information holding organization of the cooperation destination included in the information cooperation result When,
An apparatus for executing the process of setting the converted individual transaction ID for the information holding organization of the cooperation source in the information cooperation result and transmitting the information cooperation result to the terminal of the information holding organization of the cooperation source;
An information linkage system including an information processing apparatus including:   The information processing apparatus according to claim 1, wherein the information processing apparatus includes a device that stores, in a storage unit, log data including an individual transaction ID related to a transaction corresponding to each process executed by the information processing apparatus. Cooperation system. An auditing device that includes a communication unit that communicates with another device via a network, and a storage unit that stores a key for data conversion of an individual transaction ID, and audits the log data,
An apparatus that communicates with the information processing apparatus and acquires the log data stored in the information processing apparatus;
An apparatus for acquiring log data including an individual transaction ID related to a transaction corresponding to each process executed at the terminal of the information holding organization by communicating with each terminal;
By decrypting the individual transaction ID included in the acquired log data using the data conversion key of the storage unit, the identification information of the cooperation target user and the transaction encrypted as the individual transaction ID are obtained. 3. The information linkage system according to claim 2, further comprising an auditing device including a device that acquires predetermined information uniquely specified and performs log analysis using a predetermined algorithm using each information as a key. . In the information processing apparatus, an apparatus for generating and transmitting to the terminal an individual transaction ID for the information source organization of the cooperation source ,
In addition to the process of generating the individual transaction ID for the information source organization of the cooperation source, an identification to be attached to the transaction data exchanged during the cooperation process by applying a predetermined key in the storage unit to the information included in the acquisition request Generate an individual audit ID that can be decrypted with a predetermined key held only by the auditing organization, and send the individual transaction ID and the individual auditing ID for the information source organization of the cooperation source to the terminal,
In the process of generating an individual transaction ID for the information holding institution of the cooperation destination, in addition to the process of generating an individual transaction ID for the information holding institution of the cooperation destination, in the individual audit ID included in the information cooperation request, Applying a predetermined key in the storage unit to generate an individual audit ID for a linked information holding organization,
An apparatus for receiving the information cooperation result is
In addition to the generated individual transaction ID for the linked information holding organization, the individual audit ID is combined with the information of the cooperation process target included in the information cooperation request to generate an information cooperation request for cooperation. Information cooperation request is transmitted to the terminal of the information holding organization of the cooperation destination, and the information cooperation result as the processing result made in the terminal in response to the information cooperation request for cooperation is received from the terminal. ,
An apparatus that converts the individual transaction ID for the information holding organization of the cooperation destination into the individual transaction ID for the information holding organization of the cooperation source,
In addition to the process of applying a predetermined key in the storage unit to the individual transaction ID for the information holding institution of the cooperation destination included in the information cooperation result and converting it to the individual transaction ID for the information holding institution of the cooperation source Applying a predetermined key in the storage unit to the individual audit ID for the information holding organization of the cooperation destination included in the information cooperation result, and converting it to the individual audit ID for the information source organization of the cooperation source Is what
An apparatus for transmitting the information cooperation result to the terminal of the information holding organization of the cooperation source,
The converted individual transaction ID and individual audit ID for the information source organization of the cooperation source are set in the information cooperation result, and the information cooperation result is transmitted to the terminal of the information source organization of the cooperation source. is there,
The information cooperation system according to claim 1. The information processing apparatus includes:
The information cooperation system according to claim 4, further comprising a device that stores, in a storage unit, log data including an individual audit ID regarding a transaction corresponding to each process executed by the information processing device. An auditing device for auditing the log data, comprising a communication unit that communicates with another device via a network, and a storage unit that stores each key for data conversion of an audit ID,
An apparatus that communicates with the information processing apparatus and acquires the log data stored in the information processing apparatus;
An apparatus for acquiring log data including an individual audit ID for a transaction corresponding to each process executed at the terminal of the information holding organization by communicating with each terminal;
The identification information of the cooperation target user encrypted as the individual audit ID by decrypting the individual audit ID included in the acquired log data using the data conversion key of the storage unit, and 6. The information linkage according to claim 5, further comprising: an auditing device that includes predetermined information for uniquely identifying a transaction, and a device that performs log analysis using a predetermined algorithm using each information as a key. system. A communication unit that communicates with other devices via a network and a key that converts data in order to manage user information managed by each different information holding organization in cooperation between information holding organizations. A computer having a storage unit storing
A request for acquisition of an individual transaction ID, which is identification information to be attached to transaction data exchanged during the cooperation processing, from the terminal of the cooperation source information holding organization that desires cooperation processing with another information holding organization regarding a certain user's information Processing to receive and apply a predetermined key held in the storage unit to information included in the acquisition request, generate an individual transaction ID for the information holding organization of the cooperation source , and transmit to the terminal;
An individual transaction for an information holding organization of a cooperation destination by receiving an information cooperation request from the terminal of the information holding organization of the cooperation source and applying a predetermined key held in the storage unit to the individual transaction ID included in the information cooperation request Processing to generate an ID;
The generated individual transaction ID for the information-holding organization of the cooperation destination is combined with the information of the cooperation processing target included in the information cooperation request to generate an information cooperation request for cooperation, and the information cooperation request for the cooperation is Processing to transmit to the terminal of the information holding institution of the cooperation destination, from the terminal, receiving the information cooperation result as the processing result made in the terminal in response to the information cooperation request for cooperation;
A process of applying a predetermined key held in the storage unit to the individual transaction ID for the information holding organization of the cooperation destination included in the information cooperation result and converting the individual transaction ID for the information holding organization of the cooperation source When,
A process of setting the converted individual transaction ID for the information source organization of the cooperation source in the information cooperation result, and transmitting the information cooperation result to the terminal of the information source organization of the cooperation source;
An information linkage method characterized by executing A communication unit that communicates with other devices via a network and a key that converts data in order to manage user information managed by each different information holding organization in cooperation between information holding organizations. A computer having a storage unit storing
A request for acquisition of an individual transaction ID, which is identification information to be attached to transaction data exchanged during the cooperation processing, from the terminal of the cooperation source information holding organization that desires cooperation processing with another information holding organization regarding a certain user's information Processing to receive and apply a predetermined key held in the storage unit to information included in the acquisition request, generate an individual transaction ID for the information holding organization of the cooperation source , and transmit to the terminal;
An individual transaction for an information holding organization of a cooperation destination by receiving an information cooperation request from the terminal of the information holding organization of the cooperation source and applying a predetermined key held in the storage unit to the individual transaction ID included in the information cooperation request Processing to generate an ID;
The generated individual transaction ID for the information-holding organization of the cooperation destination is combined with the information of the cooperation processing target included in the information cooperation request to generate an information cooperation request for cooperation, and the information cooperation request for the cooperation is Processing to transmit to the terminal of the information holding institution of the cooperation destination, from the terminal, receiving the information cooperation result as the processing result made in the terminal in response to the information cooperation request for cooperation;
A process of applying a predetermined key held in the storage unit to the individual transaction ID for the information holding organization of the cooperation destination included in the information cooperation result and converting the individual transaction ID for the information holding organization of the cooperation source When,
A process of setting the converted individual transaction ID for the information source organization of the cooperation source in the information cooperation result, and transmitting the information cooperation result to the terminal of the information source organization of the cooperation source;
An information linkage program characterized by causing

Images