JP6664342B2 - Data distribution mediation device, data distribution mediation system, and data distribution mediation method - Google Patents

Description

  An embodiment of the present invention relates to a data distribution mediation device, a data distribution mediation system, and a data distribution mediation method.

  As a technology for providing IoT (Internet of Things) data including sensor data, for example, a technology for realizing autonomous decentralized interconnectivity independent of models and devices (Non-Patent Document 1), and a user who needs data (Non-Patent Document 2) for matching data holders who may provide data and constructing a trading market that enables exchange of necessary sensing data when necessary.

Everysense Japan Co., Ltd., “Introduction of IoT Data Exchange Market Business”, Data Distribution Environment Improvement Study Group Material, November 25, 2016, Internet <http://www.kantei.go.jp/jp/singi/it2/ senmon_bunka / data_ryutsuseibi / detakatsuyo_wg_dai5 / siryou1.pdf>, [Searched January 23, 2017] OMRON Corporation, "The Importance of the Sensing Data Distribution Market in the IoT World", Materials on the Liberal Democratic Party's Special Committee on IT Strategy, March 24, 2016, Internet <http://www.skill.or.jp/activities/ IoT-bukai / 9th / jimin_it-toku_document_20160324.pdf>, [Searched January 23, 2017]

  However, IoT data including the above sensor data is usually collected and analyzed by the owner (hereinafter, data owner) even if the data value is high for another analyst (hereinafter, data analyst). However, it is limited to use the information and to disclose it to a data analyst for use.

  Until now, when a data owner discloses data to a data analyst, decisions on the scope of use of the disclosed data and compensation for the disclosure are made through direct negotiations and contracts between the parties, and the labor costs of both parties involved in the disclosure And other costs were high.

For the data owner, (1) information leakage due to disclosure of data, leakage of know-how of the data owner implicitly included in the data, or (2) unauthorized use by a data analyst for unintended use, data There were various risks, such as not knowing if the value would be obtained by disclosure.
Also, it was difficult for data analysts to receive data content before formal contracts due to the risks inherent in the data owner.

  Therefore, for data analysts, (1) the inability to estimate what kind of value the data can create, (2) the inability to determine the data analysis method, and (3) the equipment and personnel required for the analysis. There were risks such as inability to make a decision, and (4) inability to evaluate the advantages and disadvantages of conducting an analysis determined by these.

  An object of the present invention is to provide a data distribution mediation device, a data distribution mediation system, and a data distribution system that can reduce the risk of a data owner and a data analyst when a data owner discloses data to a data analyst. It is to provide an intermediary method.

To achieve the above object, a first aspect of the data distribution intermediary device in the embodiment of the invention, the data registration transmitting device data owners used, machining conditions and the machining with the deterioration with data and the data of the disclosure condition data received respectively a definition file that defines each after, based on the definition file, to the data, a data processing unit that performs processing involving degraded and processed by the data processing unit Having a processed data storage unit for storing data, upon receiving the data disclosure request from a data receiving device used by a data analyst, retrieves data matching the disclosure request from the processed data storage unit, data the search, if consistent with the disclosure condition that the defined in the definition file, the data that matches the disclosure condition Sent to over data receiving device, the retrieved data is if it does not meet the evaluation needs disclosure conditions for each of the disclosure request by the data processing unit, to data the search, the data is the disclosure transmitting data processing which we row for evaluation matches the required disclosure condition for each request to the data registration transmitting apparatus, wherein by the data owner, the judgment result of whether the disclosure of the data to which the processing has been performed Is provided from the data registration transmitting apparatus, and the result is notified to the data receiving apparatus.

A second aspect of the data distribution intermediary device configured as described above, in the first embodiment, the processing of the data by the data processing unit, the correction data, extraction of the feature quantity of the data, apparatus comprising at least one of I will provide a.

A third aspect of the data distribution intermediary device configured as described above, in the first embodiment, deterioration of the data, the quantization of the data, discretization of the data, averages of the data, the frequency conversion of the data , An apparatus for applying noise to the data, and anonymizing the data.

A fourth aspect of the data distribution intermediary device configured as described above, in the first aspect, the disclosure condition, purpose of the data by the data analyst, the limiting of the disclosure of the data for the data analyst An apparatus is provided that includes at least one of a condition and the number of times the data is disclosed to the data analyst.

A first aspect of the data distribution mediation system according to the embodiment of the present invention is a data registration / transmission device used by a data owner, a data reception device used by a data analyst, and a data registration / transmission device and a data reception device. a data distribution intermediary system having a data flow mediating apparatus that mediates the exchange of information, the data distribution mediation device from the data registration transmitting device, data and after conditions and the processing of the processing with the degradation with respect to the data the received respectively disclose conditions and definition file which defines each data, based on the definition file, to the data, a data processing unit that performs processing involving deterioration, the data processed by the data processing unit And a processed data storage unit for storing the data disclosure request from the data receiving device. When the data matching the disclosure request retrieved from the processed data storage section, the retrieved data is, if consistent with the disclosure condition that the defined in the definition file, matching the disclosure condition data Is transmitted to the data receiving device, if the retrieved data does not meet the disclosure conditions that need to be evaluated for each disclosure request , the data processing unit, for the retrieved data, transmitting data processing which we row for evaluation for each disclosure request matches the disclosure conditions required for the data registration transmitting apparatus, wherein by the data owner, the determination of whether the disclosure of the data to which the processing has been performed There is provided a system for receiving a result from the data registration transmitting device and notifying the result to the data receiving device.

Aspects of the data flow mediated method according to the embodiment of the present invention is a method applied to the data distribution mediating apparatus, the data registration transmitting device data owner Ru used, processing with deterioration with data and the data condition and receiving the disclosure condition data after the processing were determined respectively definition file and, respectively, based on said definition file, to the data, performs processing with the degradation, processed data the processed data When the data is stored in the storage device and the data disclosure request is received from the data reception device used by the data analyst, data that matches the disclosure request is searched from the processed data storage device, and the searched data is stored in the fixed data storage device. If the data matches the disclosure condition defined in the definition file, the data that matches the disclosure condition is transmitted to the data receiving device, Retrieved data, if it does not meet the evaluation needs disclosure conditions for each of the disclosure requirements, the relative retrieved data, processing for the data matches the evaluation must disclosure conditions for each of the disclosure requirements There transmits a row of cracking data in the data registration transmitting apparatus, wherein by the data owner receives the determination result of whether the disclosure of the data to which the processing is made from the data registration transmitting device, the data the results A method is provided for notifying a receiving device.
A second aspect of the data distribution mediation system according to the embodiment of the present invention is a data registration / transmission apparatus which uses data whose quality is controlled in accordance with consideration paid by a data analyst to a data owner. A data distribution mediation system provided to a data receiving device used by a data analyst, the data distribution mediation system including data and conditions for processing with quality deterioration of the data, and including conditions relating to data quality after the processing. A data processing unit that performs processing with quality degradation on the data based on a definition file that defines the disclosure conditions of the data after the processing, and a processed data that stores the data processed by the data processing unit. A data storage unit, upon receiving the data disclosure request from the data receiving device, the data matching the disclosure request; Searched from the processed data storage unit, if the searched data matches the disclosure condition defined in the definition file, transmits data that matches the disclosure condition to the data receiving device, and performs the search If the data does not match the disclosure condition, the retrieved data is processed by the data owner so that the data matches the disclosure condition, and the data is processed with the quality deterioration. And a transmitting unit for receiving the result of the determination as to whether or not to disclose and notifying the result to the data receiving device.
A third aspect of the data distribution mediation system having the above configuration is the data distribution intermediation system according to the second aspect, in which a price for providing raw data, which is data before being processed by the data processing unit, is determined by the data analyst and the data A system is provided for transmitting the raw data to the data receiving device when agreed with an owner.

  ADVANTAGE OF THE INVENTION According to this invention, when a data owner discloses data to a data analyst, it becomes possible to reduce the risk of a data owner and a data analyst.

1 is an overall configuration diagram showing an outline of an information mediation system according to an embodiment of the present invention. The figure which shows an example of the flow of a process regarding data registration, transmission, and processing by the information mediation system according to the embodiment of the present invention. 5 is a flowchart illustrating an example of a data registration process in the data registration transmission device of the information mediation system according to one embodiment of the present invention. The figure which shows an example of the sensor data stored in the sensor data DB, the raw data DB, and the processed data DB of the information mediation system which concerns on one Embodiment of this invention. The figure which shows an example of the data degradation condition definition file which the information mediation system concerning one Embodiment of this invention handles. 9 is a flowchart illustrating an example of data transmission and registration processing to the mediation system device in the data registration transmission device of the information mediation system according to the embodiment of the present invention. The figure which shows an example of the structure of the data transmitted to the mediation system data receiving part from the transmission side data transmission part of the information mediation system concerning one Embodiment of this invention. 5 is a flowchart showing an example of data processing in the mediation system device of the information mediation system according to one embodiment of the present invention. 5 is a flowchart illustrating an example of a data request process in the data receiving device of the information mediation system according to one embodiment of the present invention. The figure which shows an example of the structure of the data transmitted from the data disclosure request part to the disclosure request reception part of the information mediation system concerning one Embodiment of this invention. The figure showing an example of the structure of the data stored in the disclosure request history DB of the information mediation system according to one embodiment of the present invention. 9 is a flowchart illustrating an example of a process of confirming data deterioration status and approving disclosure in the data registration and transmission device of the information mediation system according to the embodiment of the present invention. 9 is a flowchart showing an example of a procedure for checking data deterioration status and registering a degree of deterioration in the mediation system device of the information mediation system according to one embodiment of the present invention. The figure which shows an example of the structure of the data transmitted from the mediation system data transmission part of the information mediation system which concerns on one Embodiment of this invention to the deterioration status confirmation part of a data registration transmission device. 9 is a flowchart illustrating an example of a process of receiving main operation data by the information mediation system according to the embodiment of the present invention.

  The present invention degrades data in accordance with the conditions specified by the data owner (hereinafter, data deterioration definition), evaluates the data deterioration status, enables the data owner to confirm, and thereby leaks information of the data owner and leaks know-how Reduce the risk of

  In addition, the present invention restricts unintended use of data by a data analyst and reduces the risk by applying a data deterioration method to return a correct result only in an analysis means designated by the data analyst. .

  In addition, the present invention discloses the data to the data analyst through means for reducing the risk of the data owner and securely disclosing the data as described above, and what value can be obtained within the restrictions Providing a means to verify this reduces the risk of the data owner not knowing what value to gain from disclosure of the data.

  Further, the present invention estimates what value can be created by a data analyst in advance by obtaining data disclosed by the above means, because the data is not available to the data analyst in advance. It reduces risks such as being unable to determine the data analysis method, being unable to determine the equipment and personnel required for the analysis, and being unable to evaluate the merits and demerits of performing the analysis determined by these.

  Data recipients can verify the value of the data by receiving and trying the data with the authority they get at a minimum (or no charge). If necessary, you can receive higher quality data by paying additional consideration.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. However, the description of each configuration described below should be appropriately changed depending on the system configuration and various conditions to which the invention is applied, and the scope of the invention is not limited to the following description.

  FIG. 1 is an overall configuration diagram showing an outline of an information mediation system according to an embodiment of the present invention. As shown in FIG. 1, the data distribution mediation system according to one embodiment of the present invention includes a data registration and transmission device 1, a mediation system device (data distribution mediation device) 100, and a data reception device 200.

  The data registration transmission device 1 is a device used by a data owner, and registers and transmits data by performing input or output between the sensor device 2, the sender input device 3, and the sender display device 4. I do.

  The data registration and transmission device 1 includes a data registration unit 10, a sensor data DB (database) 11, a sender-side data transmission unit 20, a deterioration status confirmation unit 30, and a disclosure approval unit 40. The definition file 31 can be stored.

  The mediation system device 100 includes a mediation system data reception unit 110, a raw data DB 111, a data processing unit 120, a processed data DB 127, a disclosure request reception unit 130, a transaction history DB 131, a disclosure request history DB 132, a recipe generation unit 140, and a recipe presentation unit. 150, a mediation system data transmission unit 160, a public DB 171 and a price adjustment unit 180.

  The data processing unit 120 includes a cleansing function unit 121, a feature amount extraction function unit 122, a data deterioration function unit 123, a traceability information adding unit 124, an alternative data creation unit 125, and a deterioration state confirmation unit 126.

  The data receiving device 200 is a device used by a data analyst (sometimes called a receiver or a user), and includes a receiver-side input device 201, a receiver-side display device 202, a receiver-side data receiver 210, It has a disclosure requesting unit 220, a recipe receiving unit 230, and a recipe requesting unit 240. Each operation will be described later.

  In addition, the sensor data DB (database) 11, the raw data DB 111, the processed data DB 127, the transaction history DB 131, the disclosure request history DB 132, and the disclosure DB 171 can be realized by a storage medium such as a nonvolatile memory.

  The data registration transmission device 1, the mediation system device 100, and the data reception device 200 each include a storage device such as an HDD or a temporary storage device such as a memory, and can record information at an arbitrary timing and hold the information. . The data registration transmitting device 1, the mediation system device 100, and the data receiving device 200 include a central processing unit (CPU), and execute processing of each unit. Further, for example, hardware such as an image processing device (GPU) and a field programmable gate array (FPGA) is added to the data registration transmission device 1, the mediation system device 100, and the data reception device 200, and some processing is performed at high speed. Therefore, the present invention can be implemented in place of the CPU.

  The data registration transmitting device 1 and the mediation system device 100, and the mediation system device 100 and the data receiving device 200 are connected via a network such as the Internet, and a communication device (not shown) of each device transmits data. It operates in cooperation by transmitting and receiving.

  Further, the data distribution mediation system in the present embodiment uses a database (DB). The DB includes (1) storage of input data (hereinafter sometimes simply referred to as “addition”), and (2) return of stored data that matches specified search conditions (hereinafter simply “search”). And (3) deleting stored data (hereinafter sometimes simply referred to as “deletion”).

  Note that the raw data DB 111, the processed data DB 127, and the disclosure DB 171 may be provided not in the mediation system device 100 but in the data registration transmitting device 1. In this case, the mediation system device 100 transmits and receives necessary data from the data registration and transmission device 1 via a network as needed.

Hereinafter, an example of an operation in which each device operates or cooperates alone will be described.
FIG. 2 is a diagram showing an example of a flow of processing relating to data registration, transmission, and processing by the information mediation system according to the embodiment of the present invention.
FIG. 3 is a flowchart illustrating an example of a data registration process in the data registration transmission device of the information mediation system according to the embodiment of the present invention.
FIG. 4 is a diagram illustrating an example of sensor data stored in the sensor data DB, the raw data DB, and the processed data DB of the information mediation system according to the embodiment of the present invention.
FIG. 5 is a diagram showing an example of a data deterioration condition definition file handled by the information mediation system according to one embodiment of the present invention.

(Operation A1)
When the data registration unit 10 of the data registration transmission device 1 receives the input of the sensor data measured and recorded by the sensor device 2 from the sensor device 2 connected to the data registration transmission device 1, the data registration unit 10 stores the sensor data and the data. The included attribute information is registered in the sensor data DB 11 (Step S101, Step S102). The attribute information includes, for example, as shown in FIG. 4, the type of value detected by the sensor device 2, the position information (latitude and longitude) of the sensor device 2, the date, the unit name of the sensor device 2, the measured value, and the like.

  When a plurality of sensor devices 2 are connected, the data registration unit 10 treats sensor data separately for each sensor device identifier by assigning a sensor device identifier to each sensor device.

  Note that the sensor device identifier may be expressed in a hierarchical structure. For example, by adding a higher-order identifier such as a group ID, a plurality of sensor devices 2 belonging to the same group can be collectively handled in the same manner as a single sensor device 2. Further, the data registration unit 10 may assign the same sensor device identifier to different sensor devices 2 and handle them as a single device.

(Operation A2)
In response to an operation performed by the data provider on the input device 3 on the sender side, the data registration transmission device 1 issues a data registration instruction (not including the data deterioration condition definition file 31) from the input device 3 on the sender side. When received (NO in step S104), this instruction is stored in the storage device of the data registration and transmission device 1, and the registration instruction is transmitted via the sender-side data transmission unit 20 together with the sensor data registered in the sensor data DB 11 in step S102. To the mediation system device 100.

Upon receiving the registration instruction and the sensor data, the relay system data receiving unit 110 of the relay system apparatus 100 registers the sensor data in the raw data DB 111.
When transmitting data to the mediation system device 100, the data registration transmission device 1 can register disclosure conditions (data disclosure conditions) such as a disclosure range and a disclosure period before S104 (step S103).

  When there are a plurality of data registration transmission devices 1, the mediation system device 100 assigns a transmission device identifier to each data registration transmission device 1 and handles processing separately for each transmission device identifier. The same applies to the subsequent operations.

  Note that the transmitting device identifier may be expressed in a hierarchical structure. For example, by adding a high-order identifier such as an area ID, a plurality of data registration / transmission apparatuses 1 belonging to the same area can be collectively handled in the same manner as a single data registration / transmission apparatus 1. Furthermore, the mediation system device 100 may assign the same identifier to different sensor devices 2 and treat them as a single device.

  When there are a plurality of data degradation condition definition files 31, the mediation system apparatus 100 handles each process separately for each definition file identifier by assigning a definition file identifier to each definition file. The same applies to the subsequent operations.

  When the data registration unit 10 receives the sensor data in a state where the data registration instruction is stored in the storage device of the data registration transmission device 1, the sender side data is automatically automatically generated at an arbitrary timing such as sequentially or at regular intervals. The data may be transmitted from the transmission unit 20 to the mediation system data reception unit 110.

(Operation A3)
Upon receiving a data registration instruction (including the data degradation condition definition file 31 lacking data disclosure conditions) from the sender-side input device 3 (YES in step S104), the data registration transmission device 1 receives the data registration instruction. Is stored in the storage device of the data registration and transmission device 1, and the data deterioration condition definition file 31 is sent to the sender-side data transmission unit 20 (step S105).

FIG. 6 is a flowchart illustrating an example of data transmission and registration processing to the mediation system device in the data registration transmission device of the information mediation system according to the embodiment of the present invention.
Upon receiving the data deterioration condition definition file 31, the sender-side data transmission unit 20 accesses the sensor data DB 11, and combines the data registered in the sensor data DB 11 with the data deterioration condition definition file 31 to provide the mediation system device 100. (Step S201).

FIG. 7 is a diagram illustrating an example of the structure of data transmitted from the transmission-side data transmission unit to the mediation system data reception unit of the information mediation system according to one embodiment of the present invention.
As shown in FIG. 7, the data sent from the sender-side data transmitting unit 20 to the intermediary system data receiving unit 110 includes sensor data attributes (see FIG. 4), a data deterioration condition definition file 31 (see FIG. 5), and data Including the main body (see FIG. 4).

  Upon receiving data (including the data deterioration condition definition file 31) from the data registration transmitting device 1 (step S202), the mediation system data receiving unit 110 of the mediation system device 100 adds this data to the raw data DB 111 ( Step S203), the data deterioration condition definition file 31 in the data is stored in the storage device of the mediation system device 100, and the data deterioration condition definition file 31 is sent to the data processing unit 120.

FIG. 8 is a flowchart illustrating an example of a data processing process in the mediation system device of the information mediation system according to the embodiment of the present invention. Step S305 shown in FIG. 8 is not performed here.
When the data deterioration condition definition file 31 is received from the intermediary system data receiving unit 110, the data processing unit 120 registers it in the raw data DB 111 and sends it to the data processing unit 120 (step S301). The target data of the data deterioration condition to be performed is searched, the cleansing function unit 121 is called as necessary (YES in step S302), and the searched target data is cleansed (step S303). The cleansing includes, for example, at least one of the following (B1) to (B5).

(B1) Complement of missing values (B2) Deletion of outliers (B3) Resampling (B4) Unification of notation (B5) Data correction Also, the data processing unit 120 calls the feature amount extraction function unit 122 as necessary. Then, the feature amount of the searched target data is calculated (step S304). The feature amount includes, for example, at least one of the following (C1) to (C5).

(C1) Data field name (C2) Unit of data and dimensions of unit (C3) Object recognition in image (C4) Speech recognition in voice (C5) Morphological analysis of text This includes performing a morphological analysis of the extracted text and calculating a further feature amount by regarding the feature amount of the data as data, and is repeatedly executed as necessary.
Further, the data processing unit 120 registers the processing result of the cleansing function unit 121 and the feature amount extraction function unit 122 in the processed data DB 127 (step S304 → step S306).
(Operation A4)
This operation A4 is an operation in the case where the deterioration process is performed after the cleansing and the feature amount calculation described in the operation A3. Upon receiving data from the sender-side data transmission unit 20, the mediation system data reception unit 110 of the mediation system device 100 registers the received data in the raw data DB 111 and extracts related data from the raw data DB 111. The data is sent to the data processing unit 120 (step S301). It is assumed that the data to be transmitted includes the data deterioration condition definition file 31.

  Then, after steps S303 and S304 described in the operation A3, the data processing unit 120 calls the data deterioration function unit 123 according to the definition of the data deterioration condition definition file 31 as necessary, and The data after the processing is degraded (step S305). The deterioration includes, for example, at least one of the following (D1) to (D12).

(D1) Quantization including grouping, categorizing, coarse-graining, etc. (D2) Discretization (D3) Averaging (D4) Frequency conversion (D5) Addition noise / multiplication noise application (D6) Deletion of identifier, hashing, etc. Anonymization (D7) k anonymization, pk anonymization (D8) skip gram
(D9) LDA (Latent Dirichlet Allocation)
(D10) Simple data deletion (sampling)
(D11) Conversion of signal to power such as conversion of voice to volume (D12) Value for base after base conversion such as principal component analysis or orthogonal transformation

Further, the deterioration condition includes at least one of the following disclosure conditions (E1) to (E5).
(E1) Permitted use purpose of requester (condition of use purpose by data receiver)
(E2) Whether or not to limit the processing contents of the requester (conditions for limiting the disclosure contents to the data receiver)
(E3) Number of disclosures to the same requester (E4) Total number of disclosures (E5) Parameters for each method of deterioration Further, the data processing unit 120 includes a cleansing function unit 121, a feature amount extraction function unit 122, and a data deterioration function unit 123. Are registered in the processed data DB 127 (step S306).

Next, the change of the deterioration condition definition by the sender will be described.
When a data deterioration condition change instruction including a data deterioration condition definition file 31 (here, a plurality of data deterioration condition definition files 31) is received from the sender-side input device 3, the data registration transmission device 1 receives the received deterioration condition change instruction. And transmits the deterioration condition change instruction to the mediation system device 100 via the sender-side data transmission unit 20.

  When the mediation system data receiving unit 110 of the mediation system device 100 receives the above-described deterioration condition change instruction, the data registration transmission device 1 makes the processed data DB 127 based on the definition file identifier of the change source included in the deterioration condition change instruction. After retrieving related data from and deleting the data, the data deterioration condition definition file 31 is changed according to the deterioration condition change instruction. The data registration transmitting apparatus 1 processes the result of processing using the cleansing function unit 121, the feature amount extraction function unit 122, and the data deterioration function unit 123 in the data processing unit 120 based on the changed data deterioration condition definition file 31. It is registered in the processed data DB 127 again.

(Operation A5)
Upon receiving an operation for a data disclosure request by the data analyst, the receiver-side input device 201 of the data receiving device 200 stores the disclosure request in the storage device of the data receiving device 200 and the data disclosure request unit 220 Send disclosure request to Upon receiving the disclosure request, the data disclosure requesting unit 220 transmits the disclosure request to the disclosure request receiving unit 130 of the intermediary system device 100 (Step S2001).

  Here, the disclosure request includes information for limiting data such as at least one of the following (F1) to (F5) and deterioration of data such as at least one of the following (F6) to (F12). Includes information that limits the degree.

(F1) Data field name (F2) Unit and dimension of data (F3) Object recognition in image (F4) Speech recognition in voice (F5) Morphological analysis of text (F6) Grouping, categorization, coarse-graining, etc. (F7) Degree of quantization (sampling rate)
(F8) Accuracy (dispersion) after application of addition noise and multiplication noise
(F9) k of anonymization
(F10) Frequency of n-gram of skip gram (F11) Topic of LDA (F12) Deletion of simple data The disclosure request is a disclosure request such as at least one of the following (G1) to (G3). The authority information of the issued data receiving apparatus 200 is included.

(G1) Requester name or identifier (G2) Purpose of use of requester (G3) Analysis process performed by requester In addition, the disclosure request includes the handling restriction information of the disclosure request, such as (G4) below.

(G4) Disclosure of Disclosure Request FIG. 9 is a flowchart showing an example of a data request process in the data receiving device of the information mediation system according to one embodiment of the present invention.
FIG. 10 is a diagram illustrating an example of the structure of data transmitted from the data disclosure request unit to the disclosure request reception unit of the information mediation system according to one embodiment of the present invention.
FIG. 11 is a diagram showing an example of the structure of data stored in the disclosure request history DB of the information mediation system according to one embodiment of the present invention.
Upon receiving the disclosure request (see FIG. 10) from the data disclosure requesting unit 220, the disclosure request receiving unit 130 of the intermediary system device 100 discloses this disclosure request together with the data body stored in the processed data DB 127 as a disclosure request history. It is registered in the request history DB 132 (see FIG. 11) (step S2002).
The disclosure request receiving unit 130 searches the processed data DB 127 for data matching the information for limiting the data of the disclosure request (step S2003).

  In step S2003, the disclosure request receiving unit 130 of the intermediary system device 100 searches whether the data disclosure authority for the requester is registered in the disclosure DB 171. If the user does not have the authority, the disclosure request receiving unit 130 returns the fact to the data disclosure requesting unit 220. If the user has the authority, the disclosure request receiving unit 130 searches the processed data DB 127 for data that matches the information for limiting the data included in the disclosure request.

(I) Processing when there is no data matching the information for limiting data (NO in step S2003) will be described.
The disclosure request receiving unit 130 sends a processing result (null) indicating that there is no matching data to the intermediary system data transmitting unit 160. Upon receiving this processing result (null), the intermediary system data transmission unit 160 transmits null to the recipient-side data reception unit 210 of the data reception device 200.

Also, the mediation system device 100 can register a data request with the data registration transmission device 1 (step S2005).
The disclosure request receiving unit 130 registers a disclosure request to the mediation system device 100 in the disclosure request history DB 132 (step S2006), and sends a data disclosure request to the data registration and transmission device 1 (step S2007). The data registration transmission device 1 that holds the data corresponding to the request performs the data registration according to the above-described steps S101 to S105 (step S2008).

(Ii) Processes (a) and (b) in the case where data matching the information for limiting data can be found (YES in step S2003 → step S2004) will be described.
(A) When data matching the information limiting the data satisfies the disclosure condition, the disclosure request receiving unit 130 sends the disclosure request and the matching data to the data processing unit 120.

  When receiving the transmitted data and the disclosure request, the data processing unit 120 calls the traceability information adding unit 124. The traceability information adding unit 124 embeds a specific pattern, such as a pseudo random number generated for each data submitter, in the transmitted data. The data processing unit 120 saves the embedded result in the transaction history DB 131 together with the information indicating the authority of the data receiving device that issued the disclosure request among the above disclosure requests, and stores the corresponding record as the stored information. It returns to the disclosure request receiving unit 130. Subsequently, the disclosure request receiving unit 130 issues a disclosure permission code, and sends the disclosure permission code, the above disclosure request, and the above record to the mediation system data transmission unit 160.

  When receiving the disclosure permission code from the disclosure request receiving unit 130, the mediation system data transmitting unit 160 transmits the disclosure request and the record received together with the disclosure permission code to the receiver-side data receiving unit 210 of the data receiving device 200. I do.

  (B) When it cannot be determined that the data matching the information for limiting the data satisfies the disclosure condition, the following processes (b-1) and (b-2) are performed.

(B-1)
For example, if the matching data is data relating to disclosure conditions that need to be evaluated for each disclosure request, such as the following (H1) and (H2), the disclosure request receiving unit 130 transmits the data and the disclosure request To the data processing unit 120.

(H1) Whether to limit processing contents (H2) Parameters for each method of deterioration When receiving a disclosure request from the disclosure request receiving unit 130, the data processing unit 120 sets the data deterioration function unit 123 to satisfy the disclosure request. call.
For example, when the processing content included in the disclosure request is calculation of an average value, the data deterioration function unit 123 removes the periodic additive noise having the average value of 0 so that the average value of all sections of the disclosure request does not change. Add. This makes it possible to degrade the data so that various processing results such as variance and frequency analysis do not match the raw data.

  Further, for example, when the disclosure request is data only for Tokyo with respect to data that is a disclosure condition where k of k anonymization is 100, the data deterioration function unit 123 performs The data is degraded by deleting all gender fields so that the k anonymization of = 100 is established.

Subsequently, the data processing unit 120 calls the traceability information adding unit 124 in the same manner as in (a) above. The traceability information providing unit 124 embeds a specific pattern such as the above-mentioned pseudo random number into the transmitted data, and transmits the result of the embedding to the data receiving apparatus which has issued the disclosure request among the above disclosure requests. The information is stored in the disclosure DB 171 together with the information indicating the authority, and the corresponding record, which is the stored information, is returned to the disclosure request receiving unit 130.
Subsequently, when a record is returned from the data processing unit 120, the disclosure request receiving unit 130 sends this record and the above disclosure request to the mediation system data transmission unit 160.

When receiving the disclosure request and the record from the disclosure request receiving unit 130, the mediation system data transmitting unit 160 transmits these to the deterioration status checking unit 30 of the data registration transmitting device 1.
Upon receiving the disclosure request and the record from the mediation system data transmission unit 160 of the mediation system device 100, the deterioration status confirmation unit 30 of the data registration and transmission device 1 sends the information to the sender-side display device 4 together with the information indicating whether the disclosure is possible. The input screen for judging is displayed.

(B-2)
For example, when the calculation for each disclosure request does not satisfy unnecessary disclosure conditions (for example, at least one of the following (I1) to (I3)), the same processing as the above (i) is performed.

(I1) Permitted Purpose of Use of Requester (I2) Number of Disclosures to the Same Requester (I3) Total Number of Disclosures The disclosure request receiving unit 130 of the mediation system device 100 discloses a disclosure request from the data reception device 200 and mediation for the request. The processing result by the system device 100 is recorded in the transaction history DB 131.

  When there are a plurality of data receiving devices 200, the disclosure request receiving unit 130 can handle each operation separately for each receiving device identifier by assigning a receiving device identifier to each data receiving device 200. The same applies to the subsequent operations.

  When there are a plurality of disclosure requests, the disclosure request receiving unit 130 can handle each operation separately for each disclosure request identifier by assigning a disclosure request identifier to each disclosure request. The same applies to the subsequent operations.

  If the disclosure request receiving unit 130 receives the disclosure request and the data disclosure authority does not exist in the disclosure DB 171, the disclosure request receiving unit 130 suspends the processing and adds the data from the sender side input device 3. May wait until the data disclosure authority is given.

(Operation A6)
This operation A6 is an operation for notifying whether data can be disclosed. FIG. 12 is a flowchart illustrating an example of a data deterioration status confirmation and disclosure approval process in the data registration / transmission device of the information mediation system according to the embodiment of the present invention. The operation A6 corresponds to the operation after step S1003 in FIG.

  When the data registration transmission device 1 receives the information indicating the determination as to whether the data can be disclosed from the sender input device 3, the data registration transmission device 1 stores this information in the storage device of the data registration transmission device 1, and also displays the information indicating whether the disclosure is possible (hereinafter referred to as the information). , Disclosure availability) to the disclosure approval unit 40.

Upon receiving the disclosure permission, the disclosure approval unit 40 sends the disclosure permission to the sender-side data transmission unit 20. Upon receiving the disclosure permission, the sender-side data transmission unit 20 determines whether the disclosure permission indicates “data disclosure OK” or “disclosure NG” (step S1003).
When the disclosure permission indicates “data disclosure OK” (YES in step S1003), the sender-side data transmission unit 20 transmits “data disclosure OK” to the mediation system device 100 (step S1004). Also, when the disclosure permission indicates “disclosure NG” (NO in step S1003), the sender-side data transmission unit 20 transmits “disclosure NG” to the mediation system device 100 (step S1007).

  When the mediation system data receiving unit 110 of the mediation system device 100 receives the disclosure permission from the data registration transmission device 1, as shown in step S1004 above, the disclosure permission indicates the disclosure permission (“data disclosure OK”). Newly registers the authority information in the public DB 171 (step S1005).

  Next, the intermediary system data receiving unit 110 searches the public DB 171 for the authority information, and sends the disclosure permission code, the disclosure request, and the record of the applicable authority information in the public DB 171 to the intermediary system data transmission unit 160. . Upon receiving the disclosure permission code and the record, the intermediary system data transmitting unit 160 transmits the disclosure request and the record to the data receiving device 200 receiver-side data receiving unit 210 (step S1006).

If the disclosure is not possible ("disclosure NG") as in step S1007, the mediation system data receiving unit 110 deletes the data from the disclosure DB 171 (step S1008), and determines whether the disclosure is possible. Both the disclosure request and the availability of the disclosure are stored in the transaction history DB 131.
In addition, the intermediary system data receiving unit 110 sends a processing result (null) indicating that the disclosure is not made to the intermediary system data transmitting unit 160 (step S1009). Upon receiving null, the mediation system data transmission unit 160 transmits null to the recipient-side data reception unit 210 of the data reception device 200 (step S1010).

  Further, the mediation system device 100 may receive the data deterioration condition definition file 31 from the data registration transmitting device 1 as needed, and add data processed using the data processing unit 120 to the processed data DB 127.

  If the disclosure request whose disclosure has been suspended is returned to the disclosure request receiving unit 130 in accordance with the authority information of the receiving device additionally registered in the disclosure DB 171, the disclosure request is temporarily suspended. The state may be canceled and the processing may proceed.

(Operation A7)
When the data receiving device 200 receives a request for a recipe (a history in which information indicating whether or not to permit disclosure is added to the disclosure request) from the receiver-side input device 201, the data receiving device 200 stores the request in the storage device of the data receiving device 200 and , And sends a recipe request to the recipe request unit 240. Receiving the recipe request, the recipe requesting unit 240 transmits the request to the recipe presenting unit 150 of the mediation system device 100.

Receiving the recipe request, the recipe presenting unit 150 of the mediation system device 100 stores the request in the storage device of the mediation system device 100, and searches the disclosure request history DB 132 to acquire the disclosure request history (recipe). Then, the recipe is transmitted to the recipe receiving section 230 of the data receiving device 200.
Receiving the recipe, the recipe receiving section 230 of the data receiving device 200 sends the recipe to the recipient-side display device 202 so that the recipient can confirm the recipe.

  Further, in the embodiment of the present invention, a condition (recipe required condition) can be designated in a recipe request. The recipe request condition includes, for example, at least one of the following (J1) to (J5).

(J1) Data field name (J2) Unit and dimension of data (J3) Name of object recognized in image (J4) Text recognized in voice (J5) Character string for searching text data Upon receiving the input of the recipe request and the recipe request condition from the receiver-side input device 201, the data receiving device 200 stores these in the storage device of the data receiving device 200, and also stores the recipe request and the recipe search condition. Send to recipe requesting section 240. Receiving the recipe request and the recipe search condition, the recipe requesting unit 240 transmits the recipe request and the recipe search condition to the recipe presenting unit 150 of the mediation system device 100.

Receiving the recipe request and the recipe search condition, the recipe presenting unit 150 of the mediation system device 100 stores these in the storage device of the mediation system device 100 and searches the disclosure request history DB 132 according to the recipe search condition. A recipe that matches the search condition is acquired, and the acquired recipe is transmitted to the recipe receiving unit 230 of the data receiving device 200.
Receiving the recipe, the recipe receiving section 230 of the data receiving device 200 sends the recipe to the recipient-side display device 202 so that the recipient can confirm the recipe.

(Operation A8)
When the data receiving device 200 receives a recipe selected by the receiver on the recipient input device 201 from the recipient input device 201, the data receiving device 200 sends the recipe as a disclosure request to the storage device of the data receiving device 200. It is stored and sent to the data disclosure request unit 220. The subsequent operation is the same as the operation A4.

(Operation A9)
This operation is for the data provider to delete the data.
When receiving the data deletion instruction from the sender input device 3, the data registration transmission device 1 saves the instruction in the storage device of the data registration transmission device 1, and transmits the data to the mediation system via the sender data transmission unit 20. Transmit to the device 100.

  Upon receiving the above deletion instruction, the relay system data receiving unit 110 of the relay system apparatus 100 deletes the data specified by the deletion instruction from the raw data DB 111 and the processed data DB 127.

  Further, when the sender-side data transmission unit 20 receives the deletion instruction, the sender-side data transmission unit 20 may automatically delete the data specified by the deletion instruction from the sensor data DB 11.

  Also, the sender-side data transmission unit 20 may detect that the data specified by the deletion instruction has been deleted from the sensor data DB 11 and automatically transmit the data deletion instruction to the mediation system data reception unit 110. good.

(Operation A10)
This operation is for the data provider to delete the definition of the data deterioration condition.
When receiving the data deterioration condition deletion instruction from the sender input device 3, the data registration transmission device 1 stores the instruction in the storage device of the data registration transmission device 1, and relays the instruction via the sender data transmission unit 20. The data is transmitted to the system device 100.

  Upon receiving the instruction to delete the deterioration condition definition, the intermediate system data receiving unit 110 of the intermediate system device 100 deletes the data specified by the instruction to delete the deterioration condition definition from the processed data DB 127.

(Operation A11)
This operation is for the data provider to stop releasing the data.
When the data registration / transmission device 1 receives the data publication stop instruction from the sender-side input device 3, the data registration / transmission device 1 stores this instruction in the storage device of the data registration / transmission device 1, and mediates via the sender-side data transmission unit 20. The data is transmitted to the system device 100.

  Upon receiving the above-described disclosure stop instruction, the relay system data receiving unit 110 of the relay system apparatus 100 sets a secret flag in the raw data DB 111 and the processed data DB 127. In the subsequent processing, data for which the secret flag is set is treated as not existing.

  Upon receiving the publication suspension instruction, the mediation system data reception unit 110 may register the data designated by the publication suspension instruction in the disclosure request reception unit 130 or the mediation system data transmission unit 160 as a blacklist. . In this case, when the request or data registered in the blacklist is received by the disclosure request receiving unit 130 or the mediation system data transmitting unit 160 in the subsequent operation, the request or data registered in the blacklist is filtered to determine whether the request or data is registered. Treat as not.

(Operation A12)
This operation is for the data provider to resume the publication of the data whose publication has been stopped in the operation A11.
When the data registration and transmission device 1 receives the data resumption instruction from the sender side input device 3, the data registration and transmission device 1 stores the instruction in the storage device of the data registration and transmission device 1, and mediates via the sender side data transmission unit 20. The data is transmitted to the system device 100.

  Upon receiving the above-described disclosure restart instruction, the relay system data receiving unit 110 of the relay system apparatus 100 resets the non-disclosure flag set in the raw data DB 111 and the processed data DB 127 in accordance with the instruction, and performs the normal processing in the subsequent processing. To be able to handle data.

  When the intermediary system data receiving unit 110 has registered the information specified by the disclosure stop instruction as a blacklist in the disclosure request receiving unit 130 or the intermediary system data transmitting unit 160, the information is deleted from the blacklist. To handle data as usual in the processing of.

(Operation A13)
This operation is for the data provider to register the data disclosure authority.
When the data registration transmission device 1 receives the data disclosure right registration instruction from the sender input device 3, the data registration transmission device 1 stores the instruction in the storage device of the data registration transmission device 1, and also transmits the instruction via the sender data transmission unit 20. The data is transmitted to the mediation system device 100.

  Upon receiving the above-described disclosure right registration instruction, the relay system data receiving unit 110 of the relay system apparatus 100 registers the authority indicated by the disclosure right registration instruction in the disclosure DB 171. Here, the authority information includes, for example, a publication destination such as an IP and a recipient ID, a period, a column name, and consideration information received from the recipient.

(Operation A14)
This operation is an operation for deleting the data disclosure authority registered by the data provider in operation A13.
When the data registration transmission device 1 receives an instruction to delete the publication right of data from the sender input device 3, the data registration transmission device 1 stores the instruction in the storage device of the data registration transmission device 1, and also transmits the instruction via the sender data transmission unit 20. The data is transmitted to the mediation system device 100.

  Upon receiving the above-described publication right deletion instruction, the brokerage system data receiving unit 110 of the mediation system device 100 deletes the data of the publication right indicated by the publication right deletion instruction from the disclosure DB 171.

(Operation A15)
This operation is an operation for the data mediator or the provider to check the state of deterioration of the data. FIG. 13 is a flowchart illustrating an example of a procedure of data deterioration status confirmation and deterioration degree registration in the mediation system device of the information mediation system according to one embodiment of the present invention.
FIG. 14 is a diagram illustrating an example of the structure of data transmitted from the mediation system data transmission unit of the information mediation system according to the embodiment of the present invention to the deterioration status confirmation unit of the data registration transmission device.

In the mediation system data transmission unit 160 of the mediation system device 100, the deterioration status confirmation unit 126 acquires the raw data and the processed data from the raw data DB 111 and the processed data DB 127, respectively, and sends them to the deterioration status confirmation unit 126 (step). S401, S402). The deterioration status confirmation unit 126 measures the degree of data deterioration by comparing the transmitted data (step S403).
The measurement of the degree of deterioration indicates, for example, a result of comparing a value subjected to statistical processing such as an average, a median, a variance, a maximum, and a minimum with an original value.

Here, the deterioration status confirmation unit 126 determines that the data deterioration definition of the data sender exists (YES in step S404), and the deterioration status confirmation unit 126 determines that the processed data satisfies the definition (step S405). YES), the deterioration degree measurement result is registered in the processed data DB 127 (step S407).
When the data deterioration definition of the data sender does not exist (NO in step S404), the deterioration state checking unit 126 proceeds to step S407.
If the processed data does not satisfy the data deterioration definition (NO in step S404), the processing shifts to reprocessing in the data deterioration function unit 203 (step S406), and returns to step S401.
The above-described deterioration status confirmation processing may be performed by the sender-side input device 3.

(Operation A16)
This operation is for the data user to request the raw data from the data provider after confirming the processed data. FIG. 15 is a flowchart illustrating an example of a process of receiving main operation data by the information mediation system according to the embodiment of the present invention.
The data receiving device 200 confirms the processed data (step S2011), and if the data recipient has an intention to exchange raw data (YES in step S2012), the data disclosure request unit 220 of the data receiving device 200 The raw data disclosure request and the desired price of the raw data are sent (presented) to the 100 disclosure request receiving unit 130 (step S2013).

  Upon receiving the disclosure request, the disclosure request receiving unit 130 registers the inquiry history in the disclosure request history DB 132 and sends the disclosure request to the disclosure approval unit 40 of the sender-side input device 3. A request for disclosure of raw data and a desired price are presented to the sender-side display device 4 of the sender (step S2014).

  When the data provider (sender) and the user (recipient) have agreed on the exchange of raw data, that is, when an operation indicating the price agreement and the OK of the raw data exchange has been performed on the sender-side input device 3 (step S2015) YES), the disclosure request receiving unit 130 of the mediation system device 100 sends the result of this operation to the data disclosure requesting unit 220 of the data receiving device 200.

  At the same time, the data processing unit 120 adds the traceability information by the traceability information adding unit 124 (step S2016), and sends the added result to the data receiving device 200 (step S2017).

  On the other hand, if an operation indicating that the sender did not agree on the price is performed on the sender-side input device 3 (NO in step S2015), the process returns to step S2014, and the price adjustment unit 180 of the mediation system device 100 Will make adjustments until agreement between the provider and both parties is reached.

(Operation A17)
This operation is an operation for generating a recipe.
The recipe generation unit 140 associates (1) the data disclosure request of the data reception device 200, (2) the purpose of data use, and (3) the determination result of whether or not the data registration transmission device 1 can disclose the data disclosure request. The recipe is generated and transmitted to the disclosure request history DB 132 via the recipe presentation unit 150.

(Operation A18)
This operation is an operation for searching for alternative data.
If the mediation system device 100 receives a data disclosure request from the data reception device 200 and does not have the data registration transmission device 1 that holds data according to the request, the substitute data creation unit 125 sets the similar data ( For example, data having a degree of discretization (sampling rate) that is coarser than the disclosure request, data other than the file format that satisfies the disclosure request, and a data acquisition period that satisfies only part of the disclosure request) are searched from the processed data DB 127, The retrieved data is used as substitute data.

(Operation A19)
This operation is an operation for determining whether or not data can be disclosed, and is an operation before the operation A6.
When receiving the processed data from the mediation system data transmission unit 160 of the mediation system device 100 (step S1001), the degradation status confirmation unit 30 of the data registration transmission device 1 satisfies the criteria of the data degradation condition definition file 31 for the processed data. Is confirmed (step S1002), and disclosure permission / inhibition is determined (step S1003). The subsequent operation is the same as the operation A6.

  However, the mediation system device 100 may also have the function of the deterioration status confirmation unit 30. In this case, the sender-side display device 4 is physically or logically connected to the deterioration status confirmation unit 30 in the mediation system device 100.

Here, the various configurations shown in FIG. 1 will be supplemented.
The sender input device 3 may be an integrated device with the sender display device 4.
The receiver input device 201 may be an integrated device with the receiver display device 202.
In the sender display device 4, the data registration and transmission device 1 may also have the function. In the receiver-side display device 202, the data receiving device 200 may have the same function.
The data degrading function unit 123 may be provided in the data registration transmitting device 1, in which case the processed data is transmitted to the mediation system device 100.
In the data registration transmission device 1, a sensor device may also have the function.
The disclosure request history DB 132 may have the function of the transaction history DB 131.

  As described above, in the data distribution mediation system according to the embodiment of the present invention, in a system in which a data provider such as sensor data provides data to a data receiver, the data provider has authority such as consideration paid by the data receiver. The value of data can be protected by controlling the quality of data to be provided according to. Also, the recipient of the data can determine the value to pay after judging how much the data is worth.

  Note that the present invention is not limited to the above-described embodiment, and can be variously modified in an implementation stage without departing from the scope of the invention. In addition, the embodiments may be appropriately combined and implemented, and in such a case, the combined effects can be obtained. Further, the above-described embodiment includes various inventions, and various inventions can be extracted by combinations selected from a plurality of disclosed constituent features. For example, even if some components are deleted from all the components shown in the embodiment, if the problem can be solved and an effect can be obtained, a configuration from which the components are deleted can be extracted as an invention.

  In addition, the method described in each embodiment can be implemented by a computer (computer) as a program (software means) such as a magnetic disk (floppy (registered trademark) disk, hard disk, or the like), an optical disk (CD-ROM, It can be stored in a recording medium such as a DVD, MO, or a semiconductor memory (ROM, RAM, flash memory, etc.), and can also be transmitted and distributed via a communication medium. The programs stored in the medium include a setting program for causing the computer to execute software means (including not only the execution program but also tables and data structures) to be executed by the computer. A computer that implements the present apparatus reads a program recorded on a recording medium, and in some cases, constructs software means using a setting program, and executes the above-described processing by controlling the operation of the software means. The recording medium referred to in this specification is not limited to a medium for distribution, but includes a storage medium such as a magnetic disk or a semiconductor memory provided in a computer or a device connected via a network.

  DESCRIPTION OF SYMBOLS 1 ... Data registration transmission device, 2 ... Sensor device, 3 ... Sender-side input device, 4 ... Sender-side display device, 10 ... Data registration part, 11 ... Sensor data DB, 20 ... Sender-side data transmission part, 30 ... Deterioration status confirmation unit, 31 ... Data degradation condition definition file, 40 ... Disclosure approval unit, 100 ... Mediation system device, 110 ... Mediation system data reception unit, 111 ... Raw data DB, 120 ... Data processing unit, 121 ... Cleansing function Unit, 122: feature amount extraction function unit, 123: data deterioration function unit, 124: traceability information addition unit, 125: alternative data creation unit, 126: deterioration status confirmation unit, 127: processed data DB, 130: disclosure request reception 131, a transaction history DB, 132, a disclosure request history DB, 140, a recipe generation unit, 150, a recipe presentation unit, 160, an intermediary system Data transmission unit, 171 Public DB, 180 Price adjustment unit, 200 Data receiving device, 201 Receiver input device, 202 Receiver display device, 210 Receiver data receiving unit, 220 Data Disclosure requesting unit, 230: recipe receiving unit, 240: recipe requesting unit.

Claims (8)

From the data registration transmitter device data owner uses, data and the processing with the deterioration with data condition and the disclosure condition data after the processing were determined respectively definition file and the received respectively, to the definition file A data processing unit for performing processing involving deterioration on the data,
A processed data storage unit for storing data processed by the data processing unit,
Upon receiving the disclosure requirements of the data from the data receiving device data analyst uses the data that matches the disclosure request retrieved from the processed data storage section, the retrieved data is defined in the definition file If the disclosure conditions are met, transmit data that meets the disclosure conditions to the data receiving device,
If the retrieved data does not meet the disclosure conditions that need to be evaluated for each disclosure request , the data processing unit may disclose the retrieved data that needs to be evaluated for each disclosure request. transmitting data processing which we row to meet the condition in the data registration transmitting apparatus, wherein by the data owner receives the determination result of whether the disclosure of the data to which the processing is made from the data registration transmitting device A data distribution mediating device for notifying the result to the data receiving device. Processing of the data by the data processing unit,
The data distribution mediation apparatus according to claim 1, further comprising at least one of correction of the data and extraction of a feature amount of the data. Degradation of the data,
The data according to claim 1, comprising at least one of quantization of the data, discretization of the data, averaging of the data, frequency conversion of the data, application of noise to the data, and anonymization of the data. Distribution mediation device. The disclosure condition,
2. The data according to claim 1, wherein the data includes at least one of a purpose of use of the data by the data analyst, a condition for limiting disclosure of the data to the data analyst, and a number of times the data is disclosed to the data analyst. Distribution mediation device. A data distribution mediation system having a data registration transmission device used by a data owner, a data reception device used by a data analyst, and a data distribution mediation device mediating exchange of information between the data registration transmission device and the data reception device. So,
The data distribution mediation device,
Wherein the data registration transmitting apparatus, received data and the processing with the deterioration with data condition and the disclosure condition data after the processing were determined respectively definition file and respectively, based on the definition file, the data to a data processing unit that performs processing involving degradation,
A processed data storage unit for storing data processed by the data processing unit,
Upon receiving the disclosure requirements of the data from said data receiving device, the data that matches the disclosure request retrieved from the processed data storage section, the retrieved data is if the disclosure conditions wherein is defined in definition file If so, transmitting data that meets the disclosure conditions to the data receiving device,
If the retrieved data does not meet the disclosure conditions that need to be evaluated for each disclosure request , the data processing unit may disclose the retrieved data that needs to be evaluated for each disclosure request. transmitting data processing which we row to meet the condition in the data registration transmitting apparatus, wherein by the data owner receives the determination result of whether the disclosure of the data to which the processing is made from the data registration transmitting device And a data distribution mediation system for notifying the result to the data receiving device. A method applied to a data distribution mediating apparatus, the data registration transmitting device data owner Ru used, decided on by processing with deterioration with data and the data condition and the disclosure condition data after processing each definition file and a receive respectively, on the basis of the definition file, to the data, performs processing with the degradation,
Saving the processed data in a processed data storage device,
Upon receiving the disclosure requirements of the data from the data receiving device data analyst uses to retrieve data that matches the disclosure request from said processed data storage device, wherein the retrieved data is defined in the definition file If the disclosure conditions are met, transmit data that meets the disclosure conditions to the data receiving device,
If the retrieved data does not meet the disclosure conditions that need to be evaluated for each of the disclosure requests , the retrieved data must meet the disclosure conditions that need to be evaluated for each of the disclosure requests . processing transmits a row of cracking data in the data registration transmitting apparatus, wherein by the data owner receives the determination result of whether the disclosure of the data to which the processing is made from the data registration transmitting device, wherein the result A data distribution mediation method for notifying a data receiving device. A data distribution mediation system for providing data whose quality is controlled in accordance with a price paid by a data analyst to a data owner from a data registration transmitting device used by the data owner to a data receiving device used by the data analyst. hand,
And data, set the machining conditions involving degradation of quality for the data, and the containing conditions relating to the quality of the data after the processing, definition files the disclosure condition data after the processing were determined respectively A data processing unit for performing processing with quality deterioration on the data based on
And processed data storage section for storing data processed by said data processing unit,
When receiving the disclosure request of the data from the data receiving device, the data that matches the disclosure request is searched from the processed data storage unit, and the searched data matches the disclosure condition defined in the definition file. If so, transmitting data that meets the disclosure conditions to the data receiving device,
Data said retrieved data, if it does not match the previous SL disclosure conditions, over the previous SL retrieved data, which for this data matches before Symbol disclosure condition, the machining involving the deterioration of the quality was performed And a transmitting unit for notifying the data receiving apparatus of the result of the determination as to whether or not to allow disclosure by the data owner.   When the price for providing raw data, which is data before being processed by the data processing unit, is agreed between the data analyst and the data owner, the raw data is transmitted to the data receiving device. The data distribution mediation system according to claim 7, wherein the data distribution mediation system transmits the data.