JP5723331B2 - Service providing method and service providing system - Google Patents

Description

  The present invention relates to a service providing method and a service providing system for providing services such as business applications and information to a service receiving provider via a network at a portal site, for example.

  More specifically, in the service providing method and the service providing system according to the present invention, the service providing business provides a service receiving service to a restaurant in the restaurant industry, a hotel / inn in the lodging industry, a movie theater in the entertainment industry, and the like. The portal site is collected and managed as a person, and functions necessary for those service enjoyers, for example, the original business support service (first service) such as the reservation function (reservation service) and the business system (business SaaS) are provided. The present invention relates to a service providing method and a service providing system.

  The configuration of the service providing system according to the present invention includes a service providing company (service providing company apparatus) that provides a service to a service receiving company (service receiving company apparatus) used by a user (user terminal), and the service providing The present invention relates to a service providing system including a service infrastructure provider (service infrastructure provider apparatus) that provides a service infrastructure of functions required by the provider apparatus.

  The service providing method and the service providing system according to the present invention further anonymize and analyze the original information collected and held by the service receiving service provider or the service providing service provider and analyze the service providing business based on the analysis result and the like. Providing an additional service (second service) to a user, a service receiving business operator, or a user.

Terms used in this specification are used in the following definitions.
“Users”: Individuals, organizations, and companies that use this system. Specific users (one individual, one group, one company that can identify one company) and unspecified users (individuals, groups, and companies are not specified) Possible or difficult to identify users). A terminal or the like used by the user in this system is referred to as a “user side terminal”. In the present invention, the term “individual” with respect to a user includes organizations and companies as the user.
“Service enjoyment provider”: an entity that receives the original business support service (first service) by this system, and the system configuration device provided on the service enjoyment provider side is referred to as “service enjoyment provider device”. Say. The meaning of the term “provided on the side” here does not mean that the term “provided in the service receiving service provider” is provided. The term “provided on the side” is used in the same manner hereinafter.
“Service Provider”: An entity that provides the original business support service (first service) using this system, and the system configuration device provided on the service provider side is referred to as “service provider device”. say.
“Service Platform Operator”: an entity that provides a service platform to a service provider and / or a service receiving provider, and receives information from the service receiving provider device and / or the service providing provider device based on a contract. It collects at any time, processes such information, and provides the processing information to the service receiving provider side and / or the service providing provider side. A system component device provided on the service infrastructure provider side is referred to as a “service infrastructure provider apparatus”.
“Original business support service (first service)”: A service that supports the original business such as the reservation function provided by the service provider to the service receiving business and the business SaaS.
“Additional service (second service)”: obtained by processing the user's original information (including information on the service receiving service provider or service providing service provider) collected by the service receiving service provider and / or the service providing service provider. Additional service provided to the service provider device based on the processing result (anonymized user information, etc.).
“User information”: refers to a collection of information related to a single user or a plurality of users (individuals, organizations, companies), and the attributes of the information constituting the user information include identifiers, quasi-identifiers, and other information. Definitions of identifiers, quasi-identifiers, and other information are based on commonly used definitions, but are simply as follows.
“Identifier”: Information that can directly identify one user (individual, group, company) from the information, and includes, for example, name (name), address, date of birth, telephone number, mail address, and the like.
“Quasi-identifier”: Information that is not an identifier but may be combined with other information to lead to information for identifying one user.
“Other information”: other information about the user. Some information is extremely confidential, and some information can be safely disclosed.
“Concealment process (masking process, filtering process)”: This process is performed to prevent user information from being disclosed with high confidentiality, and a specific method is conventionally known.
“Anonymization processing”: processing information regarding user identification as data that cannot be identified by one user alone. An identifier that has been anonymized by this anonymization process is called an anonymization identifier. For example, the anonymized identifier can be obtained by expressing the identifier by an ID obtained by randomizing the identifier. In the present invention, the concealment process and the anonymization process may be collectively referred to as an anonymization process.
“Processing of user information”: Performing processing including anonymization processing in addition to masking processing and filtering processing on user information.
“Execution instruction ID”: issued in response to an additional service (second service) provided by the service infrastructure provider to the service provider or user. In addition, when a user acts by providing an additional service (second service), it is added to the original user information. That is, this execution instruction ID is issued by the service infrastructure provider, provided from the service infrastructure provider to the service provider → user, and the user adds an additional instruction (second service) to which the execution instruction ID is added. ) Is added to the original user information and is provided from the user to the service receiving company → the service providing company → the service platform company together with the original user information. Accordingly, the execution instruction ID makes a round of, for example, service platform operator → service provider> user → service enjoying provider → service provider> service platform provider.

  In recent years, a service platform serving as a basis for a specific business service has been provided to a service provider that provides a specific business service to a service receiving business such as a restaurant using the Internet or the Web. However, service providing systems that support the business of service receiving businesses with business services based on the service infrastructure have become widespread.

  Such a service providing system includes a service platform operator device, a service provider operator device, a service receiving operator device, and a user terminal device. The service platform operator device is a system or device that provides a service provider device with a function (service) based on the service platform to be provided, for example, a SaaS (Software as a Service) type business system. The service provider device is a system or device that receives a business system (business SaaS) based on a service platform provided from a service platform operator device. Further, for example, it is a system or apparatus that customizes the business system according to the request of the service receiving business operator (or directly from the user) and provides it to the service receiving business operator. The service receiving provider device is a device that provides, for example, user information provided by the user to the service provider operator device side. The user terminal device is, for example, a terminal that inputs user information and provides it to the service receiving provider device side. Further, the user terminal device may be a device that can automatically collect information of the mobile terminal by holding the user's own mobile terminal.

  For example, Patent Document 1 (Japanese Patent Laid-Open No. 2009-93569) reduces the occurrence of burial costs and opportunity loss in business services that have started to be used in the SaaS mode when changing from the SaaS environment to the SI environment. When a business service is transferred from the SaaS business environment (Company A) to an SI environment (B city), a service address list is provided in B city to record the business service address, and the service is adapted to the business service transition. Update the address list address. In addition, when business data stored in Company A is also migrated, a data address list for recording business data addresses is provided in Company A and City B, and the addresses in both data address lists are updated as business data is migrated. To do. In these updates, a technique for changing an access method so that addresses are logically the same is disclosed.

  Non-Patent Document 1 discloses a technique titled “Personal Information Anonymization Technology”, which discloses an anonymization technology for using collected personal information as a corporate asset.

JP 2009-93569 A

http://www.meti.go.jp/policy/it_policy/daikoukai/igvp/contents/pdf/C-1.pdf

  According to the service providing system as described above, the service infrastructure provider can support the business of the service provider. Further, the service provider can support the business of the service enjoyer. And by these business support, the business of the whole system can be made efficient and the business efficiency can be improved.

  However, in the conventional service providing system, the service providing side and the service using side are independent from each other, so the relationship between the service platform provider side and the service provider side is It has a one-way relationship.

  In other words, the service infrastructure provider side provides the service infrastructure business SaaS and SI (System Integration), etc. in one direction, and the service provider side to the service receiving provider side. In other words, it is a mechanism that only provides a one-way service based on the service infrastructure from the service infrastructure provider side.

  In addition, the service provider provides the user information of a specific user (individual user, group user, company user) acquired from the service receiving provider that is the user, the law concerning the protection of personal information (personal information protection law) For each service provider or service enjoyment business so that it does not flow out to service infrastructure providers, other service providers, or other service enjoyment operators in a state where individuals are identified beyond regulations such as It is managed by a person. In addition, the user information on the service receiving business side includes original information of many unspecified users as information searched for in a situation where there is no user login, but this information is also included in the service receiving business operator. And as a service receiving business operator, it is useful information for the performance of business, and unnecessary leakage should be avoided.

  Therefore, in the conventional service providing system, the service infrastructure provider side does not recognize the information collected / acquired by the service receiving provider or the service providing provider. Of course, it is not possible to arbitrarily obtain consumer information (information relating to consumption behavior) collected as user information of a specific user, and using the user information, it is different from the reservation function or business SaaS. Any consideration is given to a mechanism for providing a service, that is, a new second service (a service based on information related to user information obtained from a specific user) to a specific user to the service receiving provider side. Absent.

  Non-Patent Document 1 discloses anonymization technology that can anonymize user information and provide it to other business entities, but it is also a one-sided information flow.

  Accordingly, the present invention is based on the original user information of specific users and unspecified users, which is different from the original business support service (first service) such as the reservation function originally provided by the service provider and the business SaaS. Providing a service providing system capable of providing a second service different from the first service performed on the basis of the anonymized user information to the service provider side or the service receiving provider side It is in. An object of the present invention is to provide a service providing system that can be provided to a service provider or a service receiving provider.

  Further, in the service providing system of the present invention, the provided anonymized user information can identify the individual of the anonymized user information if it is a legitimate personal information management company. System.

  In order to solve the above-mentioned problem, the present invention can directly identify a specific user among original user information of a service receiving business operator or a specific user (including an unspecified user) using a service provider device. Information processing means for anonymizing and processing anonymized user information such as unique identifiers and quasi-identifiers so that it is difficult to identify users, an information analysis means for analyzing anonymized user information, and anonymized users A second service to be provided to the target and a means for giving an advertising action instruction to the anonymized user.

  The present invention includes information processing means for processing original user information of a specific user into information that can be output, and the information processing means filters or masks information that cannot be output. An identifier that identifies one specific user after processing and processing into a form that enables information analysis, and a specific user that cannot be identified by itself alone, but may be identified by multiple information An identifier is anonymized so that one specific user cannot be specified, and is used as anonymized user information.

  The information analysis means includes an analysis processing unit that analyzes anonymized user information. The analysis processing unit uses the anonymized user information, for example, when the anonymized user is an individual, analyzes the anonymized user's purchase history, behavior history, preferences, etc. In such a case, the anonymized user's product purchase history, annual sales, advertising expenses, and the like are analyzed, and information that leads to sales promotion to a specific user is collected and analyzed. The analysis result (analysis information) by the analysis unit is output to the sales promotion support unit.

  In order to realize sales promotion support to a specific user from analysis of an anonymized user's purchase history or the like, it is necessary to have a correspondence table between the specific user and the anonymized user at any place. The correspondence table between the specific user and the anonymized user is stored and managed as highly confidential information.

  In this embodiment, the processing unit for filtering or masking processing and the identifier / quasi-identifier processing unit are arranged on the service provider device side, and the original user information of the specific user is stored on the service provider device side. Explains that the processing is anonymized. However, these processing units may be arranged on the service infrastructure company side and the original user information may be processed on the service infrastructure company side. In this case, a contract is required for each user to handle personal information on the service infrastructure company side. If this is possible, the service platform operator will perform both processing of the original user information and information analysis processing. This processing of the original user information was performed before the analysis processing by the information analysis unit. Or after the analysis process. When information processing is performed after the analysis processing, analysis by the information analysis unit analyzes non-anonymized user information (original user information as it is).

  In the arrangement of the processing section of the user information, as to the means for filtering or masking processing, it is very important from the meaning of trade secret protection in which apparatus to be arranged. It cannot be treated the same as the arrangement of means for

  The service infrastructure provider device has a product planning / sales promotion support unit as means for giving an additional service action instruction, for example, an advertisement action instruction, to a specific user as one of the second services. The product planning / sales promotion support unit directly provides the service provider with a service for providing analysis information based on the information analysis result as a second service for the specific user who is anonymized according to the analysis result described above. At the same time, direct advertising behavior to the anonymized user or advertising behavior instruction to the service provider is performed. At the time of this advertising action instruction, an execution instruction ID related to the second service is issued. The service provider device that receives the advertising behavior instruction refers to the correspondence table between the anonymized user and the specific user, and direct advertising behavior for the user corresponding to the anonymized user or the service receiving business operator side Advertisement execution instruction (advertisement execution instruction for a specific user).

The service providing method of the present invention includes a plurality of service provider companies that target a plurality of service receiving companies used by a plurality of specific users, and the plurality of service providers via the service provider companies. providing service providing system comprising a service infrastructure operators service infrastructure operators apparatus provided by the additional service of the second service originally business support services as a first service to the service receiver operator The service providing method includes the following steps.
(Step 1) An original user information collecting step for collecting user information of the plurality of specific users as original user information including an identifier, a quasi-identifier, and other information and to which an execution instruction ID is added (Step 2) Concealment processing step of original user information for performing masking processing and / or filtering processing on highly confidential information among the original user information of the plurality of specific users collected in the user information collection step (step 3) The concealment processing Anonymization processing step for performing anonymization processing so that one user cannot be specified for the identifier and the quasi-identifier included in the original user information for which the step has been completed (step 4). Step of storing as anonymized user information (step 5) Step of storing association between the anonymized user and the specific user (Step 6) Anonymized user information analyzing step of analyzing anonymized user behavior characteristics using the anonymized user information (Step 7) An analysis result output step for obtaining an analysis result by analyzing the anonymized user behavior characteristics using the anonymized user information (Step 8) Based on the analysis result obtained by the analysis result output step, a specific anonymized user is obtained. Action instruction step of issuing an action instruction together with issuance of an execution instruction ID (step 9) An analysis result providing step of providing the analysis result as an execution instruction to service provider devices of the plurality of service provider companies (step 10) When an action instruction is given to a specific anonymized user, the anonymized user already stored is specified. A step of executing an additional service as a second service for the specific user corresponding to the anonymized user with reference to the association with the user (step 11). Detecting the execution instruction ID added to the original user information and measuring the utilization of the analysis result with the ID.

  Specifically, in the service providing system of the present invention, almost all processing is executed by the service platform operator device, and the service platform operator device performs filtering processing / masking processing → anonymization processing → anonymized user. Data storage between the user and the specific user, information analysis, and execution of the second service.

Therefore, the service providing system of the present invention includes a service providing company device of a service providing company for a plurality of service receiving companies used by a plurality of specific users, and the service providing company device through the service providing company device. A service providing system comprising a service infrastructure provider device of a service infrastructure provider providing an original business support service as a first service to a plurality of service enjoying operators;
The service provider device is:
A service provider side computing means, a service provider side storage means, and a service provider side interface means,
The service provider side computing means is:
An original user information collection unit that collects the specific user information including the identifier of the specific user, the quasi-identifier, and other information and to which an execution instruction ID is added as original user information via the service provider side interface means;
A communication execution processing unit that outputs the specific user information as original user information to the service platform operator device via the service provider side interface means,
The service provider side storage means includes:
An original user information storage unit for registering original user information of the plurality of specific users;
In addition, the service infrastructure company equipment
Service infrastructure provider side computing means, service infrastructure provider side storage means, service infrastructure provider side interface means,
The service platform operator side computing means is:
Original user information collection unit that collects original user information transmitted from the service provider company device via the service platform provider side interface means;
A concealment processing unit that performs masking processing and / or filtering processing on highly confidential information among the original user information,
An identifier and a quasi-identifier of the particular user contained in concealment user information processed by the concealment process unit that a particular user can not be identified, the anonymity processing unit for converting the anonymous user information anonymization user,
An information analysis unit for analyzing the anonymized user information;
A service for providing an analysis result regarding the anonymized user as an execution instruction by the information analysis unit to the plurality of service provider devices, and an action instruction for the anonymized user based on the analysis result An additional service action instruction unit for instructing an action of an additional service as a second service composed of at least one of the services issued together with the issue of the execution instruction ID,
The service platform provider side storage means includes:
A concealed user information storage unit for storing the concealed user information;
Anonymized user / specific user correspondence storage unit for storing association between the anonymized user and the specific user;
Data utilization measurement that detects an execution instruction ID added to the original user information when the specific user executes the additional service, and measures the utilization of the analysis result by the user with the execution instruction ID And
The service platform operator device refers to the association between the anonymized user and the specific user in the anonymized user / specific user correspondence storage unit based on the action instruction from the additional service action instruction unit, and An additional service as a second service is executed for a specific user corresponding to the anonymized user, and a measured value of the utilization degree of the analysis result is used as billing information .

  In the service providing system of the present invention, part of the processing is performed by the service provider company device, and other processes are executed by the service infrastructure company device. The service provider company performs filtering processing and masking processing. The service platform operator device performs anonymization processing → corresponding data storage between anonymized users and specific users → information analysis → second service execution.

For this purpose, the service providing system of the present invention includes a plurality of service providing company devices targeted for a plurality of service receiving companies used by a plurality of specific users, and the service providing company device. A service providing system comprising a service infrastructure provider device of a service infrastructure provider providing an original business support service as a first service to the plurality of service enjoyment operators,
The service provider device is:
A service provider side computing means, a service provider side storage means, and a service provider side interface means,
The service provider side computing means is:
An original user information collection unit that collects the specific user information including the identifier of the specific user, the quasi-identifier, and other information and to which an execution instruction ID is added as original user information via the service provider side interface means;
A concealment processing unit that performs masking processing and / or filtering processing on highly confidential information among the specific user information;
An output unit that outputs the concealed information as concealed user information to the service infrastructure provider device via the service provider side interface means,
The service provider side storage means includes:
An original user information storage unit for registering original user information of the plurality of specific users;
In addition, the service infrastructure company equipment
Service infrastructure provider side computing means, service infrastructure provider side storage means, service infrastructure provider side interface means,
The service platform operator side computing means is:
The concealed user information collection unit that collects the concealed user information transmitted from the service provider company device via the service infrastructure provider side interface unit;
An anonymization processing unit for converting the information of the anonymized user as information of the anonymized user so that the specific user cannot identify the specific user identifier and the quasi-identifier included in the anonymized user information;
An information analysis unit for analyzing the anonymized user information;
For the service provider device, a service that provides an analysis result regarding the anonymized user by the information analysis unit, and an action instruction for the anonymized user based on the analysis result, an execution instruction ID An additional service action instruction unit for instructing an action of an additional service as a second service composed of at least one of services issued together with
Data utilization measurement that detects an execution instruction ID added to the original user information when the specific user executes the additional service, and measures the utilization of the analysis result by the user with the execution instruction ID And
The service platform provider side storage means includes:
A concealed user information storage unit that stores the concealed user information collected from the service provider company device via the service infrastructure provider side interface means;
Anonymized user information storage unit for storing the anonymized user information;
An anonymized user / specific user correspondence storage unit that stores the correspondence between the anonymized user and the specific user,
The service platform operator device refers to the association between the anonymized user and the specific user in the anonymized user / specific user correspondence storage unit based on the action instruction from the additional service action instruction unit, and An additional service as a second service is executed for a specific user corresponding to the anonymized user, and a measured value of the utilization degree of the analysis result is used as billing information .

  In the service providing system of the present invention, most of the processing is performed by the service provider company device, and other processes are executed by the service infrastructure company device. The service provider company performs the filtering process and the masking process. → Anonymization processing → Correspondence data storage between anonymized users and specific users is performed, and the service infrastructure company device executes information analysis → second service.

For this purpose, the service providing system of the present invention includes a plurality of service providing company devices targeted for a plurality of service receiving companies used by a plurality of specific users, and the service providing company device. A service providing system comprising a service infrastructure provider device of a service infrastructure provider providing an original business support service as a first service to the plurality of service enjoyment operators,
The service provider device is:
A service provider side computing means, a service provider side storage means, and a service provider side interface means,
The service provider side computing means is:
An original user information collection unit that collects the specific user information including the identifier of the specific user, the quasi-identifier, and other information and to which an execution instruction ID is added as original user information via the service provider side interface means;
A concealment processing unit that performs masking processing and / or filtering processing on highly confidential information among the specific user information;
An identifier and a quasi-identifier of the particular user contained in concealment user information processed by the concealment process unit that a particular user can not be identified, the anonymity processing unit for converting the anonymous user information anonymization user,
An output unit that outputs the anonymized information as anonymized user information to the service platform operator device via the service provider side interface unit, and the service provider side storage unit includes:
An original user information storage unit for registering original user information of the plurality of specific users;
Anonymized user information storage unit for storing the anonymized information as anonymized user information;
An anonymized user / specific user correspondence storage unit that stores the correspondence between the anonymized user and the specific user,
In addition, the service infrastructure company equipment
Service infrastructure provider side computing means, service infrastructure provider side storage means, service infrastructure provider side interface means,
The service platform operator side computing means is:
And anonymous user information collection unit of the anonymous user information transmitted from the service provider device, collects through the front SL service platform provider side interface unit,
An information analysis unit for analyzing the collected anonymized user information;
To the service provider apparatus, said by the information analysis unit, the providing Hisage the analytic results of the anonymous user service, and the behavior instruction toward the anonymized user based on the analysis result, the execution instruction ID An additional service action instruction unit for instructing an action of an additional service as a second service composed of at least one of services issued together with
Data utilization measurement that detects an execution instruction ID added to the original user information when the specific user executes the additional service, and measures the utilization of the analysis result by the user with the execution instruction ID And
The service platform provider side storage means includes:
An anonymized user information storage unit that stores the anonymized user information collected from the service provider company device via the service infrastructure provider side interface means;
The service platform operator device refers to the association between the anonymized user and the specific user in the anonymized user / specific user correspondence storage unit based on the action instruction from the additional service action instruction unit, and An additional service as a second service is executed for a specific user corresponding to the anonymized user, and a measured value of the utilization degree of the analysis result is used as billing information .

Further, in the service providing system of the present invention, the additional service as the second service is an advertisement action instruction directed to a specific user corresponding to the anonymized user, and the additional service execution instruction unit In response to an instruction from the product planning / sales promotion support unit, an advertisement directed to a specific user corresponding to the anonymized user is transmitted via the service platform operator side interface means.
It is characterized by that.

  According to the present invention, in the service provider device, the service provider performs anonymization processing so that the user cannot identify the original user information of the specific user collected from the service receiving provider, or the service infrastructure business In the provider device, the anonymization processing is performed so that the user cannot identify the original user information of the specific user collected by the service provider from the service receiving business, and the anonymized user information after the processing or the processing Analyzing the anonymized user corresponding to the specific user using the previous original user information, or information on the specific user, for example, information such as behavior and preference, and the service provider along with the analysis information (service) according to the result Properly give action instructions for specific users to the device, for example, advertisement action instructions. Can. In other words, a third-party service platform operator can freely analyze user information (anonymized user information) from the service provider device, and can provide an accurate sales promotion support service based on the analysis information It becomes.

  In addition, since the service provider company device or the service platform company device processes the original user information, even if the processing information leaks from the service platform company device, it is identified from the processing information. It is possible to prevent the user from being specified.

  Problems, configurations, and effects other than those described above will become apparent from the following description of embodiments.

It is a figure which shows the whole process step of the service provision method of this invention. It is a figure which shows the whole service provision system outline | summary of this invention. It is a block diagram of the server for service providers of a service provider company. It is a block diagram of the server for service infrastructure providers of a service infrastructure provider apparatus. It is a functional block diagram which shows an example of an information processing part. It is a figure which shows an example of the correspondence of the original user information of a specific user, and the anonymization user information (processing information) of the anonymized individual user after processing the original user information. It is a functional block diagram which shows an example of the information analysis part of the server for service infrastructure providers. It is a figure which shows an example of the analysis result by the information analysis part of the server for service infrastructure providers. It is a figure which shows the other example of the analysis result by the information analysis part of the server for service infrastructure providers. It is a figure which shows the member ID registration processing sequence according to service provision provider before the service utilization start by the user of a service provision system. It is a figure which shows the process sequence at the time of service use by the user of a service provision system.

  The embodiment will be described below with reference to the drawings. First, a service providing system that supports a business of a service receiving business will be described.

  The service providing system is a service infrastructure provider system or apparatus (hereinafter referred to as a service infrastructure provider apparatus) that provides an application service or SI, that is, a service (first service) such as a reservation function or business SaaS to the service provider. And a service provider system or device (hereinafter referred to as a service provider device) that customizes and provides the first service to the service receiver according to the request of the service receiver (such as a restaurant). ). A service receiving business operator (such as a restaurant) provides a user (consumer) with food and drinks and merchandise, and receives user information (original information) from the user.

  In addition to SaaS, the service infrastructure provider device may be a device that provides a PaaS (Platform as a Service), an ASP (Application Service Provider) service, or the like that lends a platform including an OS, for example.

  Hereinafter, the restaurant industry (restaurants), service providers, and service infrastructure operators will be mainly described.

  First, an outline of the service providing system will be described. The service platform operator apparatus of the service providing system includes an application server (hereinafter referred to as a service platform provider server) that provides a reservation management service (application service) or the like to the service provider apparatus.

The service provider device customizes this reservation management service according to the request of the service receiving provider, and accepts and manages the reservation information of the user (consumer) from the service enjoying provider (hereinafter referred to as the service provider). (Referred to as server).
In other words, this is a mechanism for supporting the business of the service receiving business operator in cooperation with the service infrastructure business operator device and the service providing business operator device.

  A system having such a mechanism generally corresponds to an individual project basis for each service receiving company. Therefore, the service platform operator device provides the first service to the service provider device, and the service provider device provides the customized first service (service start) to the service receiving operator. And only managing user information (original information) based on the provided first service.

  An example of this service providing method is SaaS. SaaS means that the function (first service) provided by the information system (software) is used by the service provider and service receiving operator via the network without constructing or introducing a new system. It is an ICT utilization environment that makes possible.

In general, SaaS has an advantage that required services can be used quickly without the need for special system construction. In SaaS, it is not necessary to prepare a special environment in the company, so that the operation start time of the function (service) can be advanced and the cost can be reduced. In addition, although the Internet and WAN are used, the operation is almost the same as that using an in-house system due to technological innovation of the network and browser.
In addition, it is expected that the service provider company device and the service receiving company using SaaS and SI provided by the service platform company and the operation / maintenance will reduce costs and increase sales.

  Each service provider device is configured to independently manage original information (original user information) of a specific user regarding users (including individuals, groups, and companies) collected from the service receiving provider.

  That is, it has not been a mechanism that can actively provide services that lead to sales promotion for specific users using original user information. In other words, no consideration was given to actively using the original user information.

  One reason for this is that the original user information that each service provider device collects from the service provider includes personal information that identifies the individual, group, company, etc. of the specific user. to cause.

  Therefore, until now, depending on the terms and conditions of both service provider and service provider, it is possible to send and receive original user information, but in general, original user information including personal information is provided. It cannot be provided from a service provider device to a third party service infrastructure provider device or other service provider device.

  In other words, each service provider device is configured to function independently on an individual basis between the service platform operator and the service provider, due to restrictions such as the Personal Information Protection Act in Japan. Therefore, it has been impossible for each service provider and the service platform provider to legally use the original user information collected and managed by each service provider company.

  In view of this point, the present invention processes the original user information collected from the service receiving business operator and the user into anonymized user information, analyzes the anonymized user information, and is anonymized according to the analysis result. Via a second service provided to the user (for example, behavior, preferences, etc.) and an execution unit that executes the behavior (for example, advertising behavior) for the anonymized user, for example, via communication means such as e-mail or Web Another object is to provide a service providing system having a product planning / sales promotion support means for issuing instructions.

  The second service includes, for example, anonymized user behavior prediction using anonymized user information, popular menus, advertising expenses, and the like, and action instructions (for example, advertisement action instructions).

  According to such a system, a service providing system is constructed with a common service infrastructure for various industries, and specific user information (including data) obtained from the various industries is incorporated into the service infrastructure and analyzed. The second service (new value) that can contribute to sales promotion in each industry can be generated. With this second service, it is possible to construct a service providing system that can be expected to contribute to sales promotion for service provider companies in each industry.

First, the service providing method of the present invention will be described. The service providing method according to the present invention includes a service providing company device of a service providing company for a plurality of service receiving companies used by a plurality of specific users, and the plurality of services via the service providing company device. Providing additional services as a second service by using a service providing system comprising a service infrastructure provider device of a service infrastructure provider providing an original business support service as a first service to a receiving provider The service providing method includes the following steps.
(Step 1) An original user information collecting step for collecting user information of the plurality of specific users as original user information including an identifier, a quasi-identifier, and other information and to which an execution instruction ID is added (Step 2) Concealment processing step of original user information for performing masking processing and / or filtering processing on highly confidential information among the original user information of the plurality of specific users collected in the user information collection step (step 3) The concealment processing Anonymization processing step for performing anonymization processing so that one user cannot be specified for the identifier and the quasi-identifier included in the original user information for which the step has been completed (step 4). Step of storing as anonymized user information (step 5) Step of storing association between the anonymized user and the specific user (Step 6) Anonymized user information analyzing step of analyzing anonymized user behavior characteristics using the anonymized user information (Step 7) An analysis result output step for obtaining an analysis result by analyzing the anonymized user's behavior characteristics using the anonymized user information (step 8 ') for the business according to the analysis result (analysis content) in the analysis result step Step of automatically executing planning support, sales promotion support, etc. (Step 8) Based on the analysis result obtained by the analysis result output step, an action instruction for a specific anonymized user is issued together with the issuance of the execution instruction ID. Action instruction step (step 9) When an action instruction is given to the specific anonymized user, the concealment already stored A step of executing an additional service execution instruction as a second service for the specific user corresponding to the anonymized user with reference to the association between the specific user and the specific user (step 10) A step of detecting the execution instruction ID added to the original user information when executing the additional service in the step 9 (step 11) The degree of utilization by the user of the analysis result by detecting the execution instruction ID Data utilization level measurement step to be measured (step 12) A step of charging, offsetting, settlement, etc. corresponding to the data utilization level measurement.
Here, in the analysis of the anonymized user information in step 6, if the information of the analysis result is provided only to the user on the service provider company side that is the information providing source, the behavior / A preference analysis is recommended. When providing the analysis result information to users on the service provider device side that is a third party other than the information provider, that is, when releasing it to a third party, the behavior and analysis corresponding to the disclosure May be performed. In addition, when disclosing the information of the analysis result, it may be divided into general public and specific partner.
In Step 6, based on the anonymized user information, for example, when analyzing the behavior characteristics of the anonymized user, a plurality of anonymized users collected from a plurality of service providers are used as follows. To analyze. For example, the procedure in this case is as follows.
First, each user of the service provider A is A1 to An (A1, A2, A3, A4, A5,... A8, A9,... A15 to An), and each user information of the user is a1 to an ( a1, a2, a3, a4, a5,... a8, a9,. And these users and user information are anonymized users XA1 to XAn (XA1,
XA2, XA3, XA4,
XA5... XA8, XA9,... XA15 to XAn) and anonymized user information xa1 to xan (xa1, xa2, xa3, xa4, xa5... Xa8, xa9,... Xa15 to xan).
Each user of the service provider B is B1 to Bn (B1, B2, B3, B4, B5,... B8, B9,... B15 to Bn), and each user information of the user is b1 to bn ( b1, b2, b3, b4, b5,... b8, b9,. And these users and user information are made anonymized users XB1 to XBn (XB1,
XB2, XB3, XB4,
XB5 ·· XB8, XB9, ··· XB15 to XBn) and anonymized user information xb1 to xbn (xb1, xb2, xb3, xb4, xb5 ·· xb8, xb9, ··· xb15 to xbn).
Next, for example, from the plurality of anonymized user information (xa1, xa4, xa8, xa9, xa15) from the device of the service provider A, an analysis that “a man in his twenties likes an action movie” is performed as an action analysis xa. If the analysis of the anonymized user information (xb2, xb7, xb20) from the device of the service provider B is performed as the behavior analysis xb, “a man in his twenties eats steak in Shibuya”
Anonymized user information (xa1, xa4, xa8, xa9, xa15) from the device of the service provider A used for the analysis or anonymized user information (xb2, xb7, xb20) from the device of the service provider B ), For example, the following list of anonymized users is created.
xa-compatible user: “anonymized user information of service provider A: xa1, xa4, xa8, xa9, xa15”;
xb compatible user: An anonymized user list of “anonymized user information xb2, xb7, xb20 of service provider B”.
Then, in the action instruction in Step 8, the service infrastructure provider uses any one of the above-mentioned anonymized user lists (corresponding list) depending on “which service provider operator the action instruction is to be given”. Provide action instructions to the provider.
For example, “users who have made an action movie reservation with Shibuya cinema (anonymized users XA1, XA15)” are selected from users A1 to An of service provider A, and a steakhouse coupon is issued to the user "Instruct you to do it."
In addition, the service provider A that has received the instruction provides the second service to the original users (A1, A15) of the anonymized users (XA1, XA15), that is, the users before the anonymization. Execute the action of the service corresponding to the instruction from the service platform operator. For example, an advertising action of “introducing a steak house near Shibuya Station” is performed.
Thus, when analyzing anonymized user information, a more effective analysis result can be obtained by performing analysis using a plurality of user information from a plurality of service provider companies, and as a result, the user It is possible to efficiently provide an appropriate service. In particular, it is effective when providing to each user of a plurality of service provider devices.
In addition, before step 8, a step (step 8 ′) of automatically executing product planning support, sales promotion support, or the like may be performed on the business in accordance with the analysis result (analysis content). In this case, for example, when the number of people in a specific area exceeds a certain value (for example, 1000) as a result of analysis, product planning support or sales promotion support is performed for the service provider. As a result, it is possible to provide the service accurately and to improve the service effect.

  In the present embodiment, an example of a service providing system mainly including a service provider company in the restaurant industry will be described.

FIG. 2 is a configuration diagram showing an overall outline of the service providing system of the present embodiment.
The service providing system includes a service providing company device 2 that accommodates a service receiving company such as a restaurant 1, and service providing company devices 2 ′, 2 ″, 2 ′ ″ that accommodate other service receiving companies. It has a service infrastructure provider system 3 and a communication network connecting them.

  The restaurant 1 is a store that provides food and drinks, merchandise, and the like to a plurality of specific users (consumers: individuals, groups, companies, etc.), and user information I0 regarding the specific users, for example, reservation information I1 and eating information I2 The terminal includes an input / output device 11 for inputting original information (hereinafter referred to as original user information) such as a personal computer.

The original user information of the user 111 includes primary information of an identifier (name, name, address, etc.) identifying the user and secondary information of a quasi-identifier (age, gender, etc.).
In addition, in the original user information of the restaurant (service receiving company) 1 itself, primary information of an identifier (such as a store name) that identifies the restaurant 1 and secondary information such as a quasi-identifier (such as a restaurant branch name that can specify a place) Is included.
In this example, the original user information of the user 111 will be described as an example for simplification of description.

  The personal computer on the restaurant 1 side can use the reservation function (first service) provided from the service infrastructure provider 3 via the service provider company device 2.

Therefore, the input / output device 11 is used to input original user information (such as eating information) regarding a specific user.
In addition, although the input of the original user information (eating information etc.) regarding a specific user has been described as being performed by the input / output device 11, this means that when the user visits the restaurant 1, the dedicated device is connected to the restaurant. 1 may be configured so that the person himself / herself can perform through the device.
The reservation using the reservation function is performed using, for example, a reservation page 22 ′ on the store page of the service provider web site of the service provider 2 from the personal computer on the service receiver 1 side.
Further, when the specific user executes the additional service (second service), the execution instruction ID is added to the original user information. The means for adding the execution instruction ID can be realized by embedding a parameter in a URL portion in, for example, an advertisement mail or banner display, as will be described later.

  The service provider device 2 (Company A) is a sales promotion support company (a restaurant industry) for service enjoyers, and includes a server 21 server 21. A service provider of the service provider device 2 (Company A) is a service receiving operator of the service platform operator device 3.

  Then, the service provider device 2 customizes the reservation function S1 (first service) provided by the service platform operator device 3 according to the request of the restaurant 1 (service enjoyment operator), for example. It has a function to be provided to the store 1.

  The service provider device 2 is provided in the reservation information I1 (member ID, store ID, menu ID, date and time, number of people (configuration), execution instruction ID, etc.) based on the reservation function of the restaurant 1 and the restaurant 1. Eating information (member ID, store ID, menu ID, date and time, number of people (configuration), execution instruction ID, etc.) I2 input to the input / output device 11 is collected, and the reservation information I1, eating information I2, and execution instruction are collected. It has a function of storing and managing ID and the like as original user information in the storage means (DB) 212.

  In addition, the service provider device 2 transfers the order data I5 or demand data (foodstuff, producer, quantity, desired price, etc.) I6 from the restaurant 1 to the service platform operator device 3, and the service platform operator 2 It has a function of transferring food production information (food, producer, production amount, desired price, etc.) I6 from the device 3 to the restaurant 1.

The service provider server 21 includes a storage unit 212 that stores original user information of a specific user and anonymized user information (processing information / data) to be described later, and an information processing unit of the calculation unit 211 of the server 21 for service provider 2112, and the like.
In this embodiment, information from the restaurant 1 side based on the reservation function S1 provided from the service provider device 2 to the service receiving provider (restaurant 1) is used as the original user information I1 and I2. Information on the user device 2 side, for example, information such as the annual sales and advertising expenses of the service provider itself not related to the reservation function S1, may be used as the original user information.

The information processing unit 2112 processes the original user information such as the reservation information I1 and the eating information I2 collected from the restaurant 1 so that the origin, that is, the specific user cannot be specified, and processes the processed information (reservation information and eating information). (Information processing information) I1 and I2 have a function of outputting to the service infrastructure company apparatus 3.
Details of these parts including the information processing part 2112 will be described later.

  The service provider company 2 '(Company B) is a sales promotion support company (Web advertisement, marketing industry) for service enjoyers such as an advertising agency that performs web advertisement for the customer 111' for the service enjoyers. ).

  The service provider device 2 ″ (Company C) is a device of a sales promotion support company (entertainment industry) for service users having hotels, movie theaters, and other entertainment facilities. And although not shown, it has an information processing part etc. similarly to the service provision provider apparatus 2. FIG.

  In other words, the service provider device 2 ″ is not shown in the figure, but the original user information (visit information / reservation information, etc.) of a specific user of, for example, a restaurant (service enjoyment operator) is the same as the service provider device 2. Information (member ID + region + date and time set information) I3 and the like processed by performing anonymization and the like are provided to the service platform operator device 3.

  In this example, the service provider device 2 ″ is provided with a business system (business SaaS) from the service platform operator device 3.

  The service provider device (Company D) 2 ′ ″ is a producer platform, and for example, the ingredients production information (food ingredients, producer, desired price) from the producer (farmer, food processing manufacturer, etc.) 111 ′ ″. Etc.) I6 is provided to the service platform operator apparatus 3, and order data and demand data (food ingredients, producer, quantity, desired price, etc.) I5 are provided to the producer 111 ′ ″ from the service platform provider apparatus 3. It has a function.

The service platform operator device (Company H) 3 is a device of a sales promotion support company (service backbone industry) for a service provider.
Then, the service platform operator device 3 provides the first service, for example, a reservation function (reservation service) to the service provider operator device 2, and the business system (business SaaS) as the service provider operator device 2 ″ ( C)).

The service platform operator device 3 has a function of providing a service platform such as a reservation function S1 and a business system S1 ″ to the service provider devices 2, 2 ′, and the like.
It also has a function of providing a necessary service infrastructure to other service providers 2 ′, 2 ′ ″.

  Then, the service infrastructure provider device 3 performs the above-described function, so that the anonymized user information from the service provider operator devices 2 and 2 ′ and the information analysis unit 3112 of the computing means for analyzing the anonymized user information, The product planning / sales promotion support unit 3113, the storage unit 312 that stores analysis information obtained by analysis by the information analysis unit 3112, and the like.

  In addition to the function of providing the reservation function (first service) S1 to the service provider apparatus 2 side, the service infrastructure provider apparatus 3 performs a product planning / promotion support unit 3113 for executing functions as described below. Have That is, the product planning / sales promotion support unit 3113 is also an additional service action instruction unit that issues an advertisement action instruction as an additional service (second service), for example.

  That is, the anonymized user information is analyzed using, for example, the reservation information I1 ′ and the eating information I2 ′ that are anonymized user information processed on the service provider device 2 side, and the analysis result is analyzed. This is a function of instructing an advertisement action to the service provider apparatus 2 according to the above.

Further, it is a function of providing information S2 ′ such as popular menu information and behavior prediction information in the analysis result to the service provider company 2 ′ of the advertising agency.
The configuration and detailed functions of these units will be described later.

  The service infrastructure company device 3 measures the utilization degree of the anonymized user information and the analysis result, and provides the advertisement effect result (including execution instruction ID) information S3 to the service provider company device 2 ′ of the advertising agency. It has a data utilization degree measurement unit 3115 for executing the function. The advertisement effect result information is, for example, detected an execution instruction ID sent together with original information provided from the user side, and counts the number of accesses to the ID to obtain an advertisement result. The execution instruction data utilization degree measurement unit 3115 has a function of detecting an execution instruction ID. Further, it has a function of measuring the utilization degree of the analysis result (second service) by detecting the ID and using the usage frequency (number of times, the expensive value of the service). The utilization level can also be used for billing, offsetting, settlement, etc. according to the utilization level.

FIG. 3 is a diagram illustrating the configuration of the service provider server 21 of the service provider apparatus 2. The server 21 includes calculation means 211, storage means (storage device including DB) 212, and interface means (communication interface) 213. The computing unit 211 includes an original user information collection unit 2111, an information processing unit 2112, and a communication execution processing unit (for example, an information communication unit using e-mail or the like) 2113.

  The original information collection unit 2111 collects original user information (reservation information, eating information I1, I2, etc.) from the restaurant 1 via the interface means (communication interface) 213.

  The information processing unit 2112 is intended to perform processing so that the origin of the original user information cannot be specified, and performs desired processing on the original user information and outputs it as anonymized user information. Details will be described later.

If a contract such as confidentiality is exchanged between the service provider side and the service infrastructure provider side, the original user information is sent as it is from the service provider company 2 side to the service infrastructure provider apparatus 3 side. You may do it.
In this case, the information processing unit 2112 does not need to be provided on the service provider company device 2 side.

The communication execution processing unit 2113 transmits the processed anonymized user information to the service infrastructure company device 3 via the interface unit 213. In addition, an analysis result (popular menu information, behavior prediction information, etc.) from the service platform company device 3 and a user on the restaurant 1 side receive, for example, an instruction to issue an advertising behavior and execute an advertisement via the interface unit 213 A communication execution processing unit 2113 for giving instructions and the like. The advertisement execution instruction by the communication execution processing unit 2113 is performed via an email or a browser.

The storage unit 212 includes DBs 2121, 1222, and 2123 serving as various storage units that store original user information I1 and I2, anonymized user information I1 ′ and I2 ′, a table in which anonymized users are associated with specific users, and the like.
The DB 2122 (see FIG. 6) of the storage unit 212 includes, for example, a service member ID that identifies the user 111 (a service member ID 12345 of the specific user A, a service member ID 67890 of the specific user B, and the anonymized user ID (anonymous) Anonymized IDxxxx of anonymous user X and anonymized IDyyyyy of anonymized user Y are registered in association with each other, and concealed user information and anonymized user information, which will be described later, are registered in DB 2123. It may be registered in separate DBs, which makes it possible to determine who the specific user is the anonymized user.The interface means 213 is the restaurant 1 and the service infrastructure company device 3 Is a communication interface for sending and receiving various information, data, mail, etc.

  FIG. 4 is a diagram illustrating a configuration of the service infrastructure provider server 31 of the service infrastructure provider apparatus 3. The server 31 includes a calculation unit 311, a storage unit (storage device including a DB) 312, and an interface unit (communication interface) 313.

  The calculation means 311 includes a processing information collection unit 3111 that collects anonymized user information, an information analysis unit 3112, and a product planning / sales promotion support unit 3113.

The processing information collection unit 3111 collects anonymized user information (processed reservation information I1 ′, eating information, I2 ′, etc.) of the service provider company 2.
The information analysis unit 3112 analyzes, for example, trends and preferences of the anonymized user using the anonymized user information.

  The product planning / sales promotion support unit 3113 (additional service action instruction unit) sends analysis information (popular menu, behavior prediction information, etc.) to the service provider device 2 according to the analysis result of the information analysis unit 3112, and An advertisement action instruction (including execution instruction ID) S2 is output.

  Further, the product planning / sales promotion support unit 3113 may provide analysis result information (popular menu, behavior prediction information, etc.) S2 'to the service provider apparatus 2'.

  As a means for providing the advertising action instruction and analysis result by the product planning / sales promotion support unit 3113 to the service provider device 2, 2 ', for example, directly transmitting to the service provider device 2, 2' by e-mail or direct mail. To do so. Alternatively, for example, a method of alerting indirectly through a browser or the like may be used. In short, any means may be used as long as it is provided using a known method.

  The storage unit 312 includes DBs 3122 and 3123 for storing anonymized user information I1 'and I2', analysis results (analysis result information) S2 and S2 ', in addition to the DB 3121 for storing the first service. The analysis information storage DB 3123 may be omitted as necessary.

  The interface unit 313 is a communication interface that transmits and receives anonymized user information and the like with the service providers 2 to 2 ″ ″.

  FIG. 5 is a diagram illustrating a configuration example of the information processing unit 2112 of the server 21 for service provider. The information processing unit 2112 includes an original user information input unit 21120, a filtering or masking processing unit 21121, an information classification processing unit 21122, an anonymization processing processing unit 21123, and an anonymized user information output unit 21124.

  The filtering or masking processing unit 21121 filters or masks only the data that is not desired to be exposed in the original user information so as not to leak out.

  The information classification processing unit 21122 is input to the original user information input unit 21121, and the original user information output from the filtering or masking processing unit 21121 includes, for example, an identifier (name, name, member ID, email address, address, etc.), It has each classification part 21122a-21122c which classifies into a semi-identifier (sex, age, etc.) and other information (eating information, reservation information, visit information, etc.).

  The reason for separating the original user information is that the original user information such as the reservation information I1 and the eating information I2 can be specified with information (name, name, member ID, e-mail) that can directly specify a specific user even with one piece of information. An identifier such as an address or an address) A single user cannot identify a specific user directly, but information that can indirectly identify a specific user by combining a plurality of information (gender, age) Quasi-identifiers), information (other information) that you do not want to be exposed to the outside. Then, the anonymization processing by the anonymization processing unit 21123 in the subsequent stage is performed efficiently and appropriately on information that cannot be output to the outside using these identifiers, quasi-identifiers, and other information.

  Therefore, separating the original user information into identifiers, quasi-identifiers, and other information is effective in performing information processing by the processing unit 21123.

The semi-anonymization processing unit 21123a of the anonymization processing unit 21123 converts the identifier (ID 12345) of the specific user A into an anonymization identifier (IDxxxx) as shown in FIG.
As a result of this conversion, the service platform operator 3 and other service provider devices 2 ′ to 2 ′ ″ that do not have a table indicating the correspondence between the two may receive the original user information of the anonymized user. The specific user A cannot be specified.

Further, the semi-anonymization processing unit 21122a is able to specify a semi-identifier (for example, Totsuka-ku, Yokohama City ○○ address, 62 years old, male, etc.), for example, as shown in FIG. For example, it is processed into a male in his / her 60s living in Yokohama).
As a method for anonymizing information (data), for example, a k-anonymization method may be referred to. This k-anonymization method is well-known by the National Institute of Advanced Industrial Science and Technology (AIST) http://www.aist.go.jp, etc., and will not be described in detail.

  FIG. 6 is a diagram illustrating an example of a table (DB table) indicating a correspondence relationship between an original user and an anonymized user on the service provider company device 2 (or service infrastructure company device 3) side.

  For example, as information on the specific user A, as original user information, an identifier (name, name, ID, e-mail address, address, etc.), a semi-identifier (gender, age, etc.), and other information (dining information / reservation information * 1, Including visit / reservation information * 2). Further, as anonymized user X, as anonymized user information, an identifier (name, name, ID, e-mail address, address, etc.), semi-identifier (gender, age, etc.), other information (dining information / reservation information * 1, Including visit / reservation information * 2).

Here, the identifier is anonymized and made a quasi-identifier. For example, the ID is converted into another ID that cannot be specified externally by the user (ID12345 → IDxxxx).
The quasi-identifier is processed to the extent that the quasi-identifier cannot be identified (Yokohama City XX address, 65 years old, male → male in 60s living in Yokohama).

  FIG. 7 is a block diagram illustrating a configuration example of the information analysis unit 3112 of the service infrastructure provider apparatus 3.

  The information analysis unit 3112 includes a processing information / anonymized user information input unit 31121, a processing information collection / analysis processing unit 31122, an analysis information generation processing unit 31123, and an analysis result information output unit 31124.

  The processing information collection / analysis processing unit 31122 includes, for example, an information collection / analysis unit 31122a related to user behavior, an information collection / analysis unit 31122b related to preferences, an information collection / analysis unit 31122c related to companies and office workers such as annual sales and advertising expenses, Etc.

  The information collection / analysis unit 31122a related to the user's behavior collects and analyzes information related to the behavior, for example, information such as date and time, from the anonymized user information input to the anonymized user information input unit 31121.

  The information collecting / analyzing unit 31122b related to preferences collects and analyzes information related to preferences, such as store information and menu IDs, from the anonymized user information input to the anonymized user information input unit 31121.

  The information collection / analysis unit 31122c related to the company and the company employee such as annual sales and advertising expenses is information on sales from the anonymized user information input to the anonymized user information input unit 31121, for example, annual sales, business type, advertising costs, date and time, Collect and analyze information such as location.

  The analysis information generation processing unit 31123 includes an anonymized user behavior prediction unit 31123a, a popular menu specifying unit 31123b according to the anonymized user's preference, and an information specifying unit 31123c according to company information.

  The anonymized user behavior prediction unit 31123a predicts the behavior of the anonymized user based on the analysis information (analysis information related to behavior) from the anonymized user information collection / analysis processing unit 31122, and predicts the behavior as a behavior analysis result. Output information.

  The popular menu specifying unit 31123b specifies the popular menu of the anonymized user based on the analysis information (analysis information related to the menu etc.) from the anonymized user information collection / analysis processing unit 31122, and the popular menu information is obtained as a preference analysis result. Is output.

  The information specifying unit 31123c specifies information in accordance with the request of each company (user) based on the analysis information (analysis information related to the company) from the anonymized user information collection / analysis processing unit 31122. "The manufacturing industry of 20 billion yen spends 1 million yen per month of advertising expenses" and "Company employees in their 40s who work for large companies with annual sales of more than 100 billion yen have more opportunities to eat out on Wednesdays." The information shown is output.

  The analysis result (analysis information) output unit 31124 outputs information based on each analysis result generated by the analysis information generation processing unit 31123 to the subsequent product planning / sales promotion support unit 3113.

  8 and 9 are diagrams illustrating an example of the analysis result of the analysis information generation processing unit 31123, and show the relationship between the anonymized user information after processing the original user information and each information of the analysis result.

  That is, FIG. 8 shows an example in which “behavior prediction information”, “popular menu information”, etc. are generated as analysis result information from each information of eating information, reservation information, and other information after processing the original user information. Yes.

  Figure 9 shows that from the same information, "Manufacturing industry with annual sales of 10 to 20 billion yen spends 1 million yen per month of advertising expenses" or "Employees in their 40s working for large companies with annual sales of 10 billion yen or more. "I often have a chance to go drinking on Wednesday" shows an example of generating information as analysis results.

Next, a processing sequence of the service supply system of the present invention will be described.
FIG. 10 is a flowchart showing a service member ID registration processing sequence before starting service use of the service providing system.

  First, in step S001, the service platform operator apparatus 3 of the service providing system reads the service platform, that is, the reservation service and the first service S1 of the business SaaS from the reservation function & business SaaSDB that is the first service storage DB 3121. To the service provider device 2. On the service provider device 2 side, in step S002, for example, the first service of the reservation function is customized and provided to the restaurant 1 side.

  The user 111 who uses the restaurant 1 performs a use start registration work in step S003. That is, user information (including e-mail address) is input using the reservation function of the restaurant 1.

  Then, in step S004, this user information is transmitted from the restaurant 1 to the service provider apparatus 2 as original user information.

  The service provider device 2 receives the original user information, performs original user information registration processing in step S005, and registers the original user information in a DB (original user information storage DB) 2121 of the storage unit 212. In step S006, a member ID for each service provider is issued, and this ID is transmitted to the user 111 via the restaurant 1 in step S007.

  Further, in step S008, the service provider device 2 stores the member ID for each service provider (service member ID for identifying the user 111) in the DB 212 of the storage unit 212 (anonymized user / specific user correspondence information storage DB) 2122. Registered as a member ID for each service provider.

  In step S009, an anonymization process for the original user information is performed. As this anonymization process, the anonymization process which makes a specific user unidentifiable as mentioned above is performed. Further, filtering or masking processing of data that is not desired to be taken out from the service provider device 2 is performed as necessary.

In step S 010, anonymized user information registration processing is performed, and anonymized user information is registered in DB (anonymized user information storage DB) 2123 .

  After that, the service provider company device 2 requests the service infrastructure provider apparatus 3 to issue the service receiving provider anonymized user ID in step S011, and transmits the anonymized user information in step S012.

  Then, the service infrastructure company apparatus 3 performs anonymized user ID issuing processing in step S013, issues a service receiving company anonymized user ID to the service providing company apparatus 2, and in step S014, anonymous Send a user ID.

At this time, the service infrastructure company 3 registers the anonymized user ID after anonymization in the DB 3122 in step S015. In step 016, the service provider device 2 associates the service provider specific member ID with the anonymized user ID and registers them in the DB 2122.
With the above processing, the ID registration processing before the start of service use is completed.

  In this embodiment, the anonymized user ID is issued on the service platform company apparatus 3 side, but the anonymized user ID is issued on the service company apparatus 2 side, and the member ID for each service provider is provided in the DB 2122. You may make it register correspondingly.

  FIG. 11 is a flowchart showing a processing sequence when using a service of the service providing system.

First, in step S021, the user 111 inputs reservation information (including service member ID, execution instruction ID) I1 through the website of the service provider device 2. In addition, using the input / output device 11 of the restaurant 1, the eating information (including service member ID, execution instruction ID) I2 is input.
Here, the execution instruction ID is added to the original user information when the user 111 executes the additional service (second service) from the service infrastructure company device 3 as described above.
For example, in this advertisement execution instruction mail, the execution instruction ID is embedded as a parameter in the URL portion “Click here to display”. The parameter of the execution instruction ID may be embedded in the banner display, for example.
As a result, the user 111 can measure the degree of utilization that “the URL in the advertisement mail has been opened” only by opening the URL.
In addition, when making a reservation using the service enjoyment provider page (reservation page) 22 ′ (see FIG. 2), the execution instruction ID can be embedded in the reservation information I1 at this time.
In the case of a service form in which a coupon page is displayed by opening the URL, the execution instruction ID is embedded again in the page with a two-dimensional barcode or the like, and the store 11 (see FIG. 2). The execution instruction ID can be embedded in the eating information I2 by reading the coupon at the time of transaction.
Further, the execution instruction ID issued on the service infrastructure provider side is configured to return from the user side to the service infrastructure provider side that is the execution instruction ID issuer via the service providing system. As a result, the execution instruction ID circulates, for example, as service platform operator → service provider> user → service enjoying provider → service provider> service platform provider.
As a result, the execution instruction ID can be detected on the service infrastructure provider side. By detecting this execution instruction ID, it is possible to measure the degree of utilization of whether or not the second service is actually used on the user side.

  Then, in step S022, the original user information (raw data) of the reservation information I1 and the eating information I2 is transmitted from the restaurant 1 side to the service provider apparatus 2.

  In step 023, the service provider company device 2 processes the original user information, that is, performs personal information anonymization processing. The anonymization process is performed by the method described above. At this time, the service provider device 2 anonymizes the anonymized ID (anonymized user) to the member ID (specific users A, B...) By service provider registered in the DB 2122 of the storage unit 212. X, Y...) Are registered in association with each other. That is, the anonymized ID (anonymized user X, Y...) After anonymization is associated with the specific user (specific user A, B...) Corresponding to the service provider specific ID in the DB 2122. Has correspondence table. Thereby, the specific users A and B can be specified from the anonymized users X and Y, and the second service for the anonymized user can be fed back to the specific user.

  Next, in step S024, the anonymized user information (anonymized ID / data after anonymization) is transmitted to the service infrastructure company apparatus 3.

  In step S025, the service infrastructure provider apparatus 3 performs processing for analyzing the anonymized user information. In step S026, the analysis result information is registered in the DB 3123.

In step S027, the service platform company apparatus 3 performs product planning / sales promotion support processing (analysis information & advertisement action instruction notification).
Next, in step S028, an action instruction to the specific user corresponding to the anonymized user, for example, an advertisement action instruction is given to the service provider apparatus 2 along with the transmission of the analysis information of the analysis result.

  In step S029, the service provider device 2 that has received the advertisement action instruction performs a communication execution process, and issues an advertisement execution instruction to the restaurant 1 via communication means such as e-mail. For this advertisement execution instruction, in step S023, use a correspondence table between service provider IDs (specific users) registered in the DB 2121 of the storage unit 212 and anonymized IDs (anonymized users) after anonymization. To do. By referring to this correspondence table, it is possible to specify who the advertisement execution instruction from the service infrastructure provider apparatus 3 side is to be the communication instruction addressed to the service receiving provider side (specific user). Here, the service provider device 2 may execute direct advertisement communication to the user 111 in step S030.

  In step S030, when advertising communication is executed from the restaurant 1 side, advertising communication (advertising behavior) is performed to the user 111 via the service provider company device 2. The restaurant 1 side receives an identifier for identifying the user, for example, an e-mail address from the user 111 at the time of ID registration before the start of use (step S003). Can do. This sales promotion advertisement may be performed by a method such as a browser or a banner advertisement.

  As in the present embodiment, in the service infrastructure business device 3, the user (member, etc.) stores the original user information of the user (member, etc.) collected from the restaurant (service receiving enterprise) 1 by the service provider company 2. Processing such as anonymization is performed so that it cannot be specified, and is used as anonymized user information.

  Also, the anonymized user information after processing is analyzed using the anonymized user information, for example, behaviors and preferences, etc., along with analysis information according to the result, an advertisement mail for the specific user with respect to the service provider company 2 Therefore, it is possible to provide an accurate sales promotion service based on analysis information to a specific user.

  In addition, since the original user information is processed and converted into anonymized user information on the service provider company device 2 or the service infrastructure company apparatus 3 side, it is free on the service infrastructure company apparatus 3 side that is a third party. By analyzing the information, sales promotion support can be provided to the restaurant (service enjoyment company) 1.

In the embodiment described above, the information processing unit 2112 is arranged on the service provider company device 2 side. However, when the information processing unit is provided on the service platform company device 3 side, the service platform company device 3 is provided. An information processing unit may be provided so that the information processing described above is performed after the information analysis processing by the information analysis unit 3112.
Thereby, the analysis processing by the information analysis unit 3112 can analyze the original user information and can expect a more accurate analysis result.

In addition, by providing an information processing unit on the service infrastructure provider apparatus 3 side, when providing the analysis result from the service infrastructure provider apparatus 3 to the service provider entity apparatuses 2, 2 ′, the analysis information of the analysis result Therefore, the origin (specific user) of the original user information cannot be specified.
In this case, for example, as described above, a specific user (for example, specific users A, B...) And an anonymized user (anonymized users X, Y. ) And a correspondence table in which the anonymized user information is associated with the original user information of the specific user. Thereby, on the service provider company 2 side which receives provision of anonymized user information, it can be specified what user the anonymized user information corresponds to.

  In the first embodiment and the second embodiment, the service infrastructure provider device 3 analyzes the anonymized user information from one service provider operator device 2, and uses the analysis result as a second service as one service provider. It is assumed to be provided to the device 2.

  However, the service infrastructure business apparatus 3 receives the visit information related to the user 111 from the service provider company other than the service provider 2 such as the information provider 2 ″ such as the hotel, movie theater, etc. of FIG. -Reservation information (processed anonymized user information: member ID, region, date and time set information) I3 is received.As information from the information provider, location information, prediction analysis, weather, temperature, etc. In other words, information from the information provider can be taken into account when providing the second service.

  In this case, the information analysis unit 3112 and the product planning / sales promotion support unit 3113 of the service infrastructure business device 3 accumulate user preference information based on the visit information / reservation information I3 and the like, and anonymized user information of the anonymized user It is preferable to introduce a collaborative filtering (Collaboration Filtering) system that estimates the preference of an anonymized user using preference information similar to the preference based on the analysis.

In other words, as shown in FIG. 11 , in the analysis by the information analysis unit 3112 in step S025, information (visit / reservation information, etc.) I3 relating to the user 111 is received from the hotel, movie theater, etc. of the service provider 2 ″. Thus, an appropriate service including analysis information is provided to the user 111 including this information.

  In addition, the product planning / sales promotion support unit 3113 of the service infrastructure provider 3 may have another service provider device that is not the service provider device 2, for example, a service provider / advertisement agency 2 'as shown in FIG. On the other hand, a function for providing popular menu information, behavior prediction information S ′ and the like as analysis results is provided.

  In this case, since the service base business device 3 handles the information from the service provider device 2 as anonymized user information, the analysis result by the information analysis unit 3112 is used as the service provider / advertisement agency 2 ′ side. Even if it is provided, there is no particular problem.

  In the case where the analysis result is provided from the service infrastructure provider apparatus 3 to another service provider entity apparatus 2 ′ or the like, for example, as shown in FIG. The degree of utilization of the information (data) by the user may be measured, and charging, offsetting, settlement, etc. may be performed according to the degree of utilization.

  Further, the service platform operator apparatus 3 includes a plurality of service providing company apparatuses, for example, as shown in FIG. 2, between each service providing company apparatus 2 and a producer platform (service providing company apparatus) 2 ′ ″. A matching processing unit 3114 for performing a matching process between information, for example, order data / demand data (foodstuff, producer, quantity, desired price, etc.) I5 and foodstuff production information (foodstuff, producer, production quantity, desired price, etc.) I6 Provide.

The service infrastructure business device 3 receives the order data or demand data (foodstuff, producer, quantity, desired price, etc.) I5 from the service provider device 2 in step S031 of FIG. Food product production information (food material, producer, production amount, desired price, etc.) I6 is received from the producer platform 2 ″ ′, and matching processing is performed in step S036. In steps S031 and S032 , the same processing as step S023 described above may be performed as necessary from the viewpoint of preventing information leakage.

  As a result, in step S034, food production information (foodstuff, producer, production amount, desired price, etc.) is provided to the service provider device 2, and in step S035, the producer platform or Order data or demand data (foodstuff, producer, quantity, desired price, etc.) can be provided to the producer.

  In addition, this invention is not limited to the Example mentioned above, Various modifications are included. For example, the above-described embodiments have been described in detail for easy understanding of the present invention, and are not necessarily limited to those having all the configurations described. Further, a part of the configuration of one embodiment can be replaced with the configuration of another embodiment, and the configuration of another embodiment can be added to the configuration of one embodiment. Further, it is possible to add, delete, and replace other configurations for a part of the configuration of each embodiment.

  Each of the above-described configurations, functions, processing units, processing means, and the like may be realized by hardware by designing a part or all of them with, for example, an integrated circuit. Each of the above-described configurations, functions, and the like may be realized by software by interpreting and executing a program that realizes each function by the processor. Information such as programs, tables, and files for realizing each function can be stored in a recording device such as a memory, a hard disk, or an SSD (Solid State Drive), or a recording medium such as an IC card, an SD card, or a DVD.

  Further, the control lines and information lines indicate what is considered necessary for the explanation, and not all the control lines and information lines on the product are necessarily shown. Actually, it may be considered that almost all the components are connected to each other.

1 restaurant (service enjoyment company)
2, 2, “2”, 2 ″ ′ Service provider company device 21 Service provider server 211 Calculation unit 212 Storage unit (storage device including DB)
213 Interface means (interface means)
2112 Information processing unit 3 Service infrastructure provider device 31 Service infrastructure provider server 311 Calculation means 312 Storage means (storage device including DB)
313 Interface means (interface means)
3112 Information Analysis Department

Claims (7)

A service provider company device of a service provider that targets a plurality of service receiving companies used by a plurality of specific users, and a first service provider for the plurality of service receiving companies via the service provider company device. the service providing system including a native service infrastructure operators service infrastructure operators apparatus for providing business support services as a service is a service providing method for providing additional services as a second service, the following steps A service providing method comprising:
(1) An original user information collecting step for collecting user information of the plurality of specific users as original user information including an identifier, a quasi-identifier, and other information and to which an execution instruction ID is added (2) the original user information Concealment processing step of original user information that performs masking processing and / or filtering processing on highly confidential information among the original user information of the plurality of specific users collected in the collecting step (3) The concealment processing step ends Anonymization processing step of performing anonymization processing so that one user cannot be specified for the identifier and quasi-identifier included in the original user information (4) Anonymized user information Step (5) for storing as the anonymized user and the specific user (6) Anonymized user information analysis step of analyzing anonymized user behavior characteristics using the anonymized user information (7) Anonymized user behavior using the anonymized user information Analysis result output step for obtaining an analysis result by analysis of characteristics (8) Action instruction step for issuing an action instruction for a specific anonymized user together with issuance of an execution instruction ID based on the analysis result obtained by the analysis result output step (9) An analysis result providing step of providing the analysis result as an execution instruction to a service provider device of the plurality of service providers (10) Already stored when an action instruction is given to the specific anonymized user And referring to the association between the anonymized user and the specific user, the second for the specific user corresponding to the anonymized user Step (11) of executing an additional service as a service Step of detecting the execution instruction ID added to the original user information when the specific user executes the additional service in Step 10 (12) ) the original user information data utilization degree with a detection of the execution instruction ID to be added to measure the utilization by a user of the analysis results for the measurement steps A service provider company device of a service provider that targets a plurality of service receiving companies used by a plurality of specific users, and a first service provider for the plurality of service receiving companies via the service provider company device. A service providing system comprising a service infrastructure provider device of a service infrastructure provider that originally provides a business support service as a service of
The service provider device is:
A service provider side computing means, a service provider side storage means, and a service provider side interface means,
The service provider side computing means is:
An original user information collection unit that collects the specific user information including the identifier of the specific user, the quasi-identifier, and other information and to which an execution instruction ID is added as original user information via the service provider side interface means;
A communication execution processing unit that outputs the specific user information as original user information to the service platform operator device via the service provider side interface means,
The service provider side storage means includes:
An original user information storage unit for registering original user information of the plurality of specific users;
In addition, the service infrastructure company equipment
Service infrastructure provider side computing means, service infrastructure provider side storage means, service infrastructure provider side interface means,
The service platform operator side computing means is:
Original user information collection unit that collects original user information transmitted from the service provider company device via the service platform provider side interface means;
A concealment processing unit that performs masking processing and / or filtering processing on highly confidential information among the original user information,
An identifier and a quasi-identifier of the particular user contained in concealment user information processed by the concealment process unit that a particular user can not be identified, the anonymity processing unit for converting the anonymous user information anonymization user,
An information analysis unit for analyzing the anonymized user information;
A service for providing an analysis result regarding the anonymized user as an execution instruction by the information analysis unit to the plurality of service provider devices, and an action instruction for the anonymized user based on the analysis result An additional service action instruction unit for instructing an action of an additional service as a second service composed of at least one of the services issued together with the issue of the execution instruction ID,
The service platform provider side storage means includes:
A concealed user information storage unit for storing the concealed user information;
Anonymized user / specific user correspondence storage unit for storing association between the anonymized user and the specific user;
Data for detecting the execution instruction ID added to the original user information when the specific user executes the additional service, and measuring the utilization of the analysis result by the user by detecting the execution instruction ID A utilization measuring unit, and
The service platform operator device refers to the association between the anonymized user and the specific user in the anonymized user / specific user correspondence storage unit based on the action instruction from the additional service action instruction unit, and A service providing system characterized in that an additional service as a second service is executed for a specific user corresponding to an anonymized user, and a measured value of the utilization of the analysis result is used as billing information. The service providing system according to claim 2,
The additional service as the second service is an advertisement action instruction directed to a specific user corresponding to the anonymized anonymized user. According to an instruction from the additional service action instruction unit, An advertisement directed to a specific user corresponding to an anonymized user whose sales promotion support unit has been anonymized is transmitted via the service platform operator side interface means.
A service providing system characterized by that. Service provider companies of a plurality of service providers targeted for a plurality of service enjoying companies used by a plurality of specific users, and the plurality of service enjoying providers via the service provider companies A service providing system comprising a service infrastructure provider device of a service infrastructure provider that originally provides a business support service as a first service,
The service provider device is:
A service provider side computing means, a service provider side storage means, and a service provider side interface means,
The service provider side computing means is:
An original user information collection unit that collects the specific user information including the identifier of the specific user, the quasi-identifier, and other information and to which an execution instruction ID is added as original user information via the service provider side interface means;
A concealment processing unit that performs masking processing and / or filtering processing on highly confidential information among the specific user information;
The service provider side storage means has an output unit for outputting to the concealment process information a secret匿化the service provider side interface unit the service infrastructure operator device via a user information,
An original user information storage unit for registering original user information of the plurality of specific users;
In addition, the service infrastructure company equipment
Service infrastructure provider side computing means, service infrastructure provider side storage means, service infrastructure provider side interface means,
The service platform operator side computing means is:
The concealed user information collection unit that collects the concealed user information transmitted from the service provider company device via the service infrastructure provider side interface unit;
An identifier and a quasi-identifier of the particular user included in the concealment user information that a particular user can not be identified, the anonymity processing unit for converting the anonymous user information,
An information analysis unit for analyzing the anonymized user information;
For the service provider device, a service that provides an analysis result regarding the anonymized user by the information analysis unit, and an action instruction for the anonymized user based on the analysis result, an execution instruction ID An additional service action instruction unit for instructing an action of an additional service as a second service composed of at least one of services issued together with
Data for detecting the execution instruction ID added to the original user information when the specific user executes the additional service, and measuring the utilization of the analysis result by the user by detecting the execution instruction ID A utilization measuring unit, and
The service platform provider side storage means includes:
A concealed user information storage unit that stores the concealed user information collected from the service provider company device via the service infrastructure provider side interface means;
Anonymized user information storage unit for storing the anonymized user information;
An anonymized user / specific user correspondence storage unit that stores the correspondence between the anonymized user and the specific user,
The service platform operator device refers to the association between the anonymized user and the specific user in the anonymized user / specific user correspondence storage unit based on the action instruction from the additional service action instruction unit, and A service providing system characterized in that an additional service as a second service is executed for a specific user corresponding to an anonymized user, and a measured value of the utilization of the analysis result is used as billing information. The service providing system according to claim 4,
The additional service as the second service is an advertisement action instruction directed to a specific user corresponding to the anonymized anonymized user. According to an instruction from the additional service action instruction unit, An advertisement directed to a specific user corresponding to an anonymized user whose sales promotion support unit is anonymized is transmitted via the service provider side interface means.
A service providing system characterized by that. Service provider companies of a plurality of service providers targeted for a plurality of service enjoying companies used by a plurality of specific users, and the plurality of service enjoying providers via the service provider companies A service providing system comprising a service infrastructure provider device of a service infrastructure provider that originally provides a business support service as a first service,
The service provider device is:
A service provider side computing means, a service provider side storage means, and a service provider side interface means,
The service provider side computing means is:
An original user information collection unit that collects the specific user information including the identifier of the specific user, the quasi-identifier, and other information and to which an execution instruction ID is added as original user information via the service provider side interface means;
A concealment processing unit that performs masking processing and / or filtering processing on highly confidential information among the specific user information;
An identifier and a quasi-identifier of the particular user contained in concealment user information processed by the concealment process unit that a particular user can not be identified, the anonymity processing unit for converting the anonymous user information anonymization user,
An output unit that outputs the anonymized information as anonymized user information to the service platform operator device through the service provider side interface means, and
The service provider side storage means includes:
An original user information storage unit for registering original user information of the plurality of specific users;
Anonymized user information storage unit for storing the anonymized information as anonymized user information;
An anonymized user / specific user correspondence storage unit that stores the correspondence between the anonymized user and the specific user,
In addition, the service infrastructure company equipment
Service infrastructure provider side computing means, service infrastructure provider side storage means, service infrastructure provider side interface means,
The service platform operator side computing means is:
And anonymous user information collection unit of the anonymous user information transmitted from the service provider device, collects through the front SL service platform provider side interface unit,
An information analysis unit for analyzing the collected anonymized user information;
To the service provider apparatus, said by the information analysis unit, the providing Hisage the analytic results of the anonymous user service, and the behavior instruction toward the anonymized user based on the analysis result, the execution instruction ID An additional service action instruction unit for instructing an action of an additional service as a second service composed of at least one of services issued together with
Data for detecting the execution instruction ID added to the original user information when the specific user executes the additional service, and measuring the utilization of the analysis result by the user by detecting the execution instruction ID A utilization measuring unit, and
The service platform provider side storage means includes:
An anonymized user information storage unit that stores the anonymized user information supplied from the service provider company device via the service infrastructure provider side interface means;
The service platform operator device refers to the association between the anonymized user and the specific user in the anonymized user / specific user correspondence storage unit based on the action instruction from the additional service action instruction unit, and A service providing system characterized in that an additional service as a second service is executed for a specific user corresponding to an anonymized user, and a measured value of the utilization of the analysis result is used as billing information. The service providing system according to claim 6,
The additional service as the second service is an advertisement action instruction for a specific user corresponding to the anonymized user, and product planning / promotion support is provided by an instruction from the additional service action instruction unit. An advertisement directed to a specific user corresponding to a user whose part is anonymized is transmitted via the service platform operator side interface means.
A service providing system characterized by that.

Images