JP6682465B2 - Terminal device, control method, and computer program - Google Patents

Description

  The present invention relates to a terminal device, a control method, and a computer program.

  In many services, a person who wants to use the service can apply for the desired service from his / her own terminal device. Generally, when a user desires to use a service, a service application screen is transmitted from the service provider, and the service application screen displays the user information acquired by the service provider and acquired by the service provider. Consent to the privacy policy that defines the handling is required. Here, the user information is, for example, personal information such as name, date of birth, address, telephone number, location information, service usage history, or individual information that can identify an individual by combining multiple pieces of information, This refers to privacy information, which is information about personal behavior or information that you do not want disclosed. The handling of user information is, for example, whether or not the acquired user information is provided to a third party and the storage period. The user is required to understand the contents and agree.

  Regarding a technique of accessing personal data, a technique of determining whether or not to permit access to a resource of the user based on the access policy of the user when detecting access to the resource of the user is known. (For example, see Patent Document 1).

JP, 2014-178727, A

  One of the problems is to improve safety when an application installed in a terminal device accesses user information stored in the terminal device.

  The present invention has been made in view of such circumstances, and an object thereof is to improve safety when an application installed in a terminal device accesses user information stored in the terminal device. Is to try.

According to one aspect of the present invention, a start time recording unit that records the time when an application is started for each application according to a start operation of a user, and an application whose degree of start is less than a reference is recorded in the start time recording unit. An inquiry unit that makes an inquiry about the user's consent that the selected application accesses the user data, and a control that controls access to the user data from the selected application based on the inquiry result of the inquiry unit. The control unit selects an application of the same type based on information on the type of the application, and whether there is an application having a degree of activation higher than a reference among a plurality of selected applications of the same type. Based on the record data of the start timing recording unit Determining, when the degree of the activation is intensive applications than the reference limits access to user data from of identity Ji types of applications other than intensive applications than the degree of the activation is based, is a terminal device .
In one aspect of the present invention, the application whose degree of activation is higher than a reference is an application whose elapsed time is less than a predetermined period from the time of the last activation, or an application in which the number of activations within a predetermined period is a predetermined number or more. There is a terminal device.
According to one aspect of the present invention, a start time recording unit that records the time when an application is started for each application according to a start operation of a user, and an application whose degree of start is less than a reference is recorded in the start time recording unit. An inquiry unit that makes an inquiry about the user's consent that the selected application accesses the user data, and a control that controls access to the user data from the selected application based on the inquiry result of the inquiry unit. And a consent recording unit that records the presence or absence of the user's consent to the privacy policy of the application, and the control unit controls the application from an application other than the application whose degree of activation is less than a reference. Access to user data It is controlled based on the recorded data of the consent recording unit, a terminal device.
One aspect of the present invention further comprises an inquiry recording unit that records the inquiry result of the inquiry unit for each application, and the inquiry unit converts the user data from the application in which the consent of the user is recorded in the consent recording unit. It is a terminal device that reflects the inquiry result of the user's consent to access to the consent recording unit based on the record data of the inquiry recording unit.
In one aspect of the present invention, the application whose degree of activation is less than a reference is an application in which a predetermined period or more has elapsed from the time of the last activation, or an application in which the number of activations within the predetermined period is less than a predetermined number. There is a terminal device.

According to an aspect of the present invention, a start timing recording step in which a terminal device records a time at which an application is activated in response to a user's activation operation for each application, and the terminal device stores an application whose degree of activation is less than a reference level. An inquiring step of selecting based on the record data of the start time recording step and inquiring the user for consent that the selected application accesses the user data; and the terminal device converting the selected application into the user data. A control method for controlling access based on the inquiry result of the inquiry step , wherein the terminal device selects the same type of application based on application type information, and selects the same type. Launch inside multiple applications Whether or not there is an application whose degree is higher than the standard is determined based on the record data of the activation timing recording step, and when there is an application whose degree of activation is higher than the standard, the degree of activation is higher than the standard. This is a control method for restricting access to user data from applications of the same type other than the most common applications .
According to an aspect of the present invention, a start timing recording step in which a terminal device records a time at which an application is activated in response to a user's activation operation for each application, and the terminal device stores an application whose degree of activation is less than a reference level. An inquiring step of selecting based on the record data of the start time recording step and inquiring the user for consent that the selected application accesses the user data; and the terminal device converting the selected application into the user data. A control method comprising: controlling access based on a query result of the query step, wherein the terminal device further includes a consent recording step of recording whether or not the user consents to the privacy policy of the application. The terminal device is Access from applications other than less application than the degree of dynamic reference to the user data is controlled based on the recording data of the consent recording step, a control method.

According to one aspect of the present invention, a startup timing recording function that records a timing at which an application is activated in response to a user's activation operation for each application in the computer, and an startup timing recording function that stores an application whose degree of activation is lower than a reference An inquiry function that selects based on the recorded data and inquires the user that the selected application accesses the user data, and an access to the user data from the selected application based on the inquiry result of the inquiry function. A control function for controlling, and a computer program for realizing the control function, wherein the control function selects an application of the same type on the basis of information of the type of the application, and activates in a plurality of selected applications of the same type. Is higher than the standard Whether or not there is an application is determined based on the record data of the activation timing recording function, and if there is an application whose degree of activation is higher than the reference, then the application other than the application whose degree of activation is higher than the reference is determined. A computer program that restricts access to user data from applications of the same type .
According to one aspect of the present invention, a startup timing recording function that records a timing at which an application is activated in response to a user's activation operation for each application in the computer, and an startup timing recording function that stores an application whose degree of activation is lower than a reference An inquiry function that selects based on the recorded data and inquires the user that the selected application accesses the user data, and an access to the user data from the selected application based on the inquiry result of the inquiry function. And a control function for controlling, wherein the computer further realizes a consent recording function for recording the presence or absence of the user's consent to the privacy policy of the application. Degree is standard Access from remote non small application application to the user data is controlled based on the recording data of the consent recording function, a computer program.

  Advantageous Effects of Invention According to the present invention, it is possible to obtain an effect that it is possible to improve safety when an application installed in a terminal device accesses user information stored in the terminal device.

It is a figure which shows the structural example of the communication system which concerns on one Embodiment. It is a block diagram showing an example of outline functional composition of terminal unit 10N concerning one embodiment. It is a figure which shows the structural example of the starting timing recording data which the starting timing recording part 2010 which concerns on one Embodiment records. It is a figure which shows the structural example of the consent recording data which the consent recording part 2040 which concerns on one Embodiment records. It is a figure which shows the structural example of the inquiry recording data which the inquiry recording part 2050 which concerns on one Embodiment records. It is a flow chart which shows the example of the procedure of the control method concerning one embodiment. It is a figure which shows the structural example of the consent recording data which the consent recording part 2040 which concerns on one Embodiment records. It is a figure which shows the structural example of the application classification data which concerns on one Embodiment.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a diagram illustrating a configuration example of a communication system according to an embodiment. 1, the communication system includes terminal devices 101, 102, ..., 10N (N is an integer of N> 0), a privacy protection device 100, and service providing devices T01, T02, ..., T0M ( M is an integer of M> 0). The privacy protection device 100 is connected to a communication network 20 such as a mobile communication network, and the communication network 20 is connected to terminal devices 101, 102, ..., 10N. Further, the privacy protection device 100 is connected to a communication network 50 such as the Internet, and the service providing devices T01, T02, ..., T0M are connected to the communication network 50.

  The communication network 20 and the communication network 50 may be the same network.

  The service providing device T0M is used by a service provider to provide various services to the terminal device 10N. Hereinafter, any terminal device among the terminal devices 101, 102, ..., 10N will be referred to as a terminal device 10N. Further, of the service providing devices T01, T02, ..., T0M, any service providing device is referred to as a service providing device T0M.

  The terminal device 10N is used by a user who desires to use the service provided by the service providing device T0M, for setting operation as to whether or not the user information of the user may be provided to the service provider, and for using the service.

  The privacy protection device 100 holds information (privacy policy consent information) indicating whether the user of the terminal device 10N agrees with the privacy policy of the service provider of the service providing device T0M. The privacy protection device 100 executes information processing related to protection of privacy of the user of the terminal device 10N based on the privacy policy agreement information. For example, the privacy protection device 100 may control the communication between the service providing device T0M and the terminal device 10N based on the privacy policy agreement information.

  FIG. 2 is a block diagram showing a schematic functional configuration example of the terminal device 10N according to the present embodiment. In FIG. 2, the terminal device 10N includes a start time recording unit 2010, an inquiry unit 2020, a control unit 2030, a consent recording unit 2040, an inquiry recording unit 2050, a user data storage unit 2060, and M applications app1. To appM and an application type data storage unit 2070. Hereinafter, when the applications app1 to appM are not particularly distinguished, they are referred to as the application app.

  The terminal device 10N according to the present embodiment may be realized by dedicated hardware, or is configured by a CPU (Central Processing Unit), a memory, and the like, and realizes the functions of each unit. The function may be realized by the CPU executing a computer program for performing the operation. For example, the terminal device 10N may be a mobile communication terminal device such as a smartphone or a tablet computer (tablet PC), or a stationary communication terminal device (for example, a stationary personal computer or a cable). It may be a set top box (STB) such as a television broadcast.

  The activation time recording unit 2010 records the time when the application app is activated in response to a user's activation operation, for each application app. FIG. 3 is a diagram showing a configuration example of the start timing recording data recorded by the start timing recording unit 2010 according to the present embodiment. In FIG. 3, in the start time record data, the start time of the application app is recorded in association with the identification information (application ID) of the application app. In the start time record data, one or a plurality of start times are recorded for one application app. For one application app, for example, the start time of a predetermined period (for example, the past one year) may be recorded in the start time record data. Alternatively, for one application app, for example, only the latest start time may be recorded in the start time record data.

  The inquiry unit 2020 selects an application app whose activation degree is lower than the reference based on the activation time record data of the activation time record unit 2010, and inquires the user that the selected application app accesses the user data. To do. The application app whose degree of activation is lower than the reference may be, for example, an application app that has passed a predetermined period (for example, three months) or more since the last activation time. Alternatively, the application app whose degree of activation is lower than the reference may be, for example, an application in which the number of times of activation within a predetermined period (for example, one month) is less than a predetermined number (for example, once).

  The control unit 2030 controls the terminal device 10N. The control unit 2030 controls access to user data from the application app selected by the inquiry unit 2020 (the application app whose activation degree is less than the reference) based on the inquiry result of the inquiry unit 2020.

The consent recording unit 2040 records whether or not the user consents to the privacy policy of the application app. FIG. 4 is a diagram showing a configuration example of consent record data recorded by the consent record unit 2040 according to the present embodiment. In FIG. 4, in the consent record data, “Yes” or “No” with the user's consent to the privacy policy of the application app is recorded in association with the application ID. Regarding the application app recorded in the consent record data indicating that the user has consented, it indicates that the user of the terminal device 10N has consented to the privacy policy of the application app. On the other hand, for the application app in which the consent record data indicates that the user does not consent, it means that the user of the terminal device 10N does not agree with the privacy policy of the application app.
The control unit 2030 controls the access to the user data from the application app other than the application app whose activation degree is lower than the reference, based on the consent record data.

  The inquiry recording unit 2050 records the inquiry result of the inquiry unit 2020 for each application app. FIG. 5 is a diagram showing a configuration example of inquiry recording data recorded by the inquiry recording unit 2050 according to the present embodiment. In FIG. 5, the inquiry record data includes “Yes” or “No” with the consent of the inquiry result obtained by associating the application ID with the application ID and asking the user for consent to access the user data. Will be recorded. Regarding the application app recorded with the consent of the user in the inquiry record data, it means that the user of the terminal device 10N has agreed that the application app will access the user data. On the other hand, regarding the application app in which the user's consent is recorded in the inquiry record data, it indicates that the user of the terminal device 10N does not agree that the application app will access the user data.

  The inquiry unit 2020 may make an inquiry about the user's consent to access the user data from the application app in which the consent of the user is recorded in the consent record data, based on the inquiry record data. The inquiry unit 2020 may reflect the inquiry result in the consent record data.

  The user data storage unit 2060 stores user data. User data is data including user information. The user information is information on users who are registered as users in the terminal device 10N. The user information includes, for example, name, date of birth, address, telephone number, position information, service usage history and the like. As the user information, for example, information about the behavior of the user and privacy information that is information that is not desired to be disclosed can be cited.

  The application app is an application installed in the terminal device. The application app is activated by a user's activation operation or is activated automatically.

  The application app may be an application that communicates with the service providing apparatus T0M. For example, the application app may be an application of a service provided by the service providing device T0M. For example, the application app may be an application that accesses user data stored in the user data storage unit 2060 when the service providing apparatus T0M provides a service. For example, the application app accesses the user data stored in the user data storage unit 2060 when the service providing apparatus T0M provides the service, acquires the user information used for the service, and acquires the acquired user information. May be an application that transmits the message to the service providing apparatus T0M.

  For example, the application app may be an application that provides a service by itself. For example, the application app may be an application that accesses the user data stored in the user data storage unit 2060 when the application app itself provides the service. For example, when the application app provides the service by itself, the application app accesses the user data stored in the user data storage unit 2060 to acquire the user information used for the service, and acquires the acquired user information. It may be an application to be used.

  The application type data storage unit 2070 stores identification information (application type ID) that identifies the type of each application app.

  Next, the control method according to the present embodiment will be described with reference to FIG. FIG. 6 is a flowchart showing an example of the procedure of the control method according to the present embodiment.

(Step S11) The activation time recording unit 2010 records the time when the application app is activated in response to the user's activation operation in the activation time record data for each application app. The application app is activated by a user's activation operation or is activated automatically. The activation time recording unit 2010 detects that the user has performed an operation (application activation operation) for activating the application app on the terminal device 10N. The application activation operation is registered in the activation time recording unit 2010 in advance. As the application activation operation, for example, when an icon for activating the application app is displayed on the display screen of the touch panel of the terminal device 10N, the user specifies (touches) the icon.

  Upon detecting the application activation operation, the activation timing recording unit 2010 records the activation timing of the application app in the activation timing record data in association with the application ID of the application app activated by the application activation operation. In the example of the start time record data of FIG. 3, the start time of the application app is the date when the application app is started. When the same application app is activated a plurality of times on the same day, only one of the activated dates may be recorded in the activation time record data, or a plurality of the activated dates may be activated by the number of times of activation. It may be recorded in the start time record data. The activation timing of the application app may include the date and time when the application app was activated.

(Step S12) The inquiry unit 2020 determines whether or not the degree of activation of the application app is lower than the activation degree reference, based on the activation time record data. The activation degree standard is set in the terminal device 10N in advance. The application app whose activation degree is lower than the activation degree reference may be, for example, an application app that has passed a predetermined period (for example, three months) or more since the last activation time. Alternatively, the application app whose degree of activation is lower than the activation degree reference may be, for example, an application whose number of times of activation within a predetermined period (for example, one month) is less than a predetermined number (for example, once).

  As a result of the determination in step S12, if the activation degree of the application app is smaller than the activation degree reference, the process proceeds to step S14, and if not, the process proceeds to step S13.

(Step S13) The control unit 2030 sets user data from an application app (hereinafter, referred to as a high-frequency startup application app) other than an application app having a degree of startup smaller than a startup degree reference (hereinafter, referred to as a low-frequency startup application app). Access to the site is controlled based on consent record data.

  In the consent record data, the control unit 2030 stores the consent data associated with the application ID of the high-frequency startup application app in the user data storage unit 2060 from the high-frequency startup application app when the consent is “Yes”. Access to user data is not restricted. As a result, the high-frequency activation application app whose consent “yes” is recorded in the consent record data can access the user data stored in the user data storage unit 2060 according to its own privacy policy.

  On the other hand, in the consent record data, when the consent presence / absence associated with the application ID of the high-frequency activation application app is “absence”, the control unit 2030 stores the high-frequency activation application app in the user data storage unit 2060. Restrict access to stored user data. As the access restriction, for example, the high-frequency activation application app may not be allowed to access the user data stored in the user data storage unit 2060. The user data to be inaccessible from the high-frequency startup application app may be all user data among the user data stored in the user data storage unit 2060, or a part of the user data. May be. For example, among the user data stored in the user data storage unit 2060, the user data including the user information related to the privacy of the user may be made inaccessible from the high-frequency activation application app. As user information relating to user privacy, for example, personal information such as name, date of birth, address, telephone number, location information, service usage history, or individual information that can identify an individual by combining multiple information, , Information about individual behavior, privacy information that is information that is not desired to be disclosed, and the like. As a result, the high-frequency startup application app in which consent “none” is recorded in the consent record data is limited in access to the user data stored in the user data storage unit 2060 even in accordance with its own privacy policy. .

  After step S13, the process of FIG. 6 ends.

(Step S14) The inquiry unit 2020 inquires the user that the low-frequency startup application app will access the user data. For example, the inquiry unit 2020 displays a consent inquiry message that allows the user to select whether or not the low-frequency startup application app will access the user information, on the display screen of the terminal device 10N. The user can select to agree or disagree with respect to the consent inquiry message.
In the above example, the inquiry unit 2020 displays the consent inquiry message on the display screen of the terminal device 10N, but the present invention is not limited to this. For example, the terminal device 10N may display a warning message on the display screen and display a screen on which the presence or absence of consent can be selected by the user's arbitrary selection on the display screen.
Further, a message recommending that the service is frequently used by the user at a relatively short interval (more than the standard frequency of use) may be displayed on the display screen, the message recommending that the service be changed to a setting that allows the user information to be provided. .

(Step S15) The inquiry recording unit 2050 records the inquiry result of the inquiry unit 2020 in the inquiry recording data for each low-frequency activation application app. For example, the inquiry unit 2020 records the agreement “present” in the inquiry record data in association with the application ID of the infrequently-started application app selected to agree with the consent inquiry message. On the other hand, the inquiry unit 2020 records the agreement “absent” in the inquiry record data in association with the application ID of the low-frequency activation application app that is selected but does not agree with the consent inquiry message.

(Step S16) The control unit 2030 controls access to the user data from the low-frequency startup application app based on the inquiry record data.

  When the presence or absence of consent associated with the application ID of the low-frequency startup application app is “Yes” in the inquiry recording data, the control unit 2030 stores the low-frequency startup application app in the user data storage unit 2060. Access to user data is not restricted. As a result, the low-frequency startup application app whose consent “yes” is recorded in the inquiry record data can access the user data stored in the user data storage unit 2060 according to its own privacy policy.

  On the other hand, when the consent record associated with the application ID of the low-frequency startup application app is “no” in the inquiry record data, the control unit 2030 stores the low-frequency startup application app in the user data storage unit 2060. Restrict access to stored user data. As the access restriction, for example, the user data stored in the user data storage unit 2060 may not be accessible from the low-frequency startup application app. The user data to be inaccessible from the infrequently-started application app may be all user data among the user data stored in the user data storage unit 2060, or a part of the user data. May be. For example, among the user data stored in the user data storage unit 2060, the user data including the user information relating to the privacy of the user may be made inaccessible from the low-frequency startup application app. The user information relating to the user's privacy is the same as that of the high-frequency activation application app described above. As a result, the infrequently-started application app whose consent “none” is recorded in the inquiry record data is limited in access to the user data stored in the user data storage unit 2060 even in accordance with its own privacy policy. .

(Step S17) The inquiry unit 2020 stores the inquiry result of the user's consent to access the user data from the low-frequency startup application app in which the consent “yes” of the user is recorded in the inquiry record data in the inquiry record data. Based on this, it will be reflected in the consent record data. The inquiry unit 2020 searches the inquiry record data for the application ID of the infrequently-started application app in which the consent “yes” of the user is recorded in the consent record data. The inquiry unit 2020 extracts, from the application IDs found as a result of the search, the application ID for which consent “none” is recorded in the inquiry record data. The inquiry unit 2020 changes the record of the consent record data from the consent “present” to the consent “absent” for the extracted application ID.

  For example, the application app with the application ID “appid2” of consent “present” illustrated in the consent record data of FIG. 4 has the last start time “May 2016” as illustrated in the start time record data of FIG. It is a low-frequency startup application app that has passed a predetermined period (three months as an example here) from “10 days” (as an example here, today is March 5, 2017). As a result of inquiring the user about the fact that the infrequently-started application app “appid2” accesses the user data, the inquiry unit 2020 obtains an answer “not agree” from the user. As a result, the inquiry unit 2020 records the agreement “absent” in association with the application ID “appid2” based on the inquiry result “not agree”, as illustrated in the inquiry record data of FIG. Then, regarding the application ID “appid2”, the inquiry unit 2020 shows the presence or absence of consent of the consent record data based on the consent “absence” of the inquiry record data from FIG. Changed to "No" after updating. As a result, the inquiry result of the inquiry unit 2020 is reflected in the record of the consent record data.

  After step S17, the process of FIG. 6 ends.

  According to the present embodiment, it is determined whether or not the application app is the infrequently-started application app, and the infrequently-started application app as a result of the determination asks the user for consent to access the user data, and The access to the user data from the frequency activation application app is controlled based on the inquiry result. The infrequently-started application app is an application app that the user uses relatively infrequently. Therefore, conventionally, even if the user's intention has changed after the user consents to access the user data at the time of installing the low-frequency startup application app or at the first startup, there is no opportunity to confirm the consent. There were cases.

However, according to the present embodiment, the access to the user data from the infrequently-started application app is controlled based on the result of the inquiry about consent of the user that the infrequently-started application app accesses the user data. As a result, it is possible to improve the safety when the application app installed in the terminal device 10N accesses the user information included in the user data.
As a modification of step S12 described above, when the application app is activated, the inquiry unit 2020 records the activation degree after the determination of the previous activation degree of the application app as the activation timing. It may be calculated based on the data, and it may be determined whether the calculated degree of activation is smaller than the activation degree reference. In this case, the activation timing record data also records the timing at which the degree of activation is determined in association with the application ID. By doing so, the user's consent can be confirmed and the latest user's intention of the application can be reflected in the access control particularly for the application app that has not been started for a relatively long period of time.

[Modification of control method]
A modified example of the control method according to the present embodiment will be described with reference to FIG. FIG. 8 is a diagram showing a configuration example of application type data according to the present embodiment. The application type data is stored in the application type data storage unit 2070. In FIG. 8, in the application type data, the application type ID of the application app and the presence / absence of access restriction of the same type application are recorded in association with the application ID of the application app.

  The control unit 2030 extracts the application ID having the same application type ID from the application type data. The control unit 2030 determines whether or not there is an application app having a higher degree of activation than the activation degree reference among the applications of the application ID having the same application type ID, based on the activation time record data. As a result of the determination, the control unit 2030 associates with the application ID of the application app whose activation degree is higher than the activation degree reference in the application type data when there is an application app whose activation degree is higher than the activation degree reference. Application access restriction “none” of the same type application is recorded, while an application app of the same application type ID (hereinafter, referred to as a non-frequently-started application app) other than the application app whose activation degree is larger than the activation degree standard. The access restriction “present” of the same type application is recorded in association with the ID. The control unit 2030 restricts access to the user data from the non-frequently-started application app based on the presence / absence of access restriction of the same type application of the application type data.

  As the access restriction, for example, the user data stored in the user data storage unit 2060 may not be accessible from the non-frequently-started application app. The user data to be inaccessible from the non-frequently-started application app may be all user data among the user data stored in the user data storage unit 2060, or a part of the user data. It may be. For example, among the user data stored in the user data storage unit 2060, the user data including the user information relating to the privacy of the user may be made inaccessible from the non-frequently-started application app. The user information relating to the user's privacy is the same as that of the high-frequency activation application app described above. As a result, among the plurality of application apps with the same application type ID, the non-frequently-started application app is restricted from accessing the user data stored in the user data storage unit 2060 even if it follows its own privacy policy. .

  The determination of whether or not there is an application app whose activation degree is higher than the activation degree criterion is based on whether or not there is an application app whose activation degree is lower than the activation degree criterion. It may be the same as or different from the activation degree reference (first activation degree reference) when determining whether or not. The second activation degree standard is set in the terminal device 10N in advance. The application app whose degree of activation is higher than the second activation degree criterion may be, for example, an application app that has been less than a predetermined period (for example, one month) from the time of the last activation. Alternatively, the application app whose degree of activation is higher than the activation degree reference may be, for example, an application whose number of times of activation within a predetermined period (for example, one month) is a predetermined number (for example, 5 times) or more.

  According to this modification, when there is an application app having a higher degree of activation than the second activation degree criterion among a plurality of applications of the same type, the non-high frequency activation application app of the same type is Restrict access to user data. As a result, it is possible to reduce the access to the user information from the same type of application app while maintaining the convenience of the user for the certain type of application app. This has the effect of improving the safety when the application installed in the terminal device accesses the user information stored in the terminal device.

  Although the embodiment of the present invention has been described in detail above with reference to the drawings, the specific configuration is not limited to this embodiment, and includes design changes and the like within a range not departing from the gist of the present invention.

The computer program for realizing the functions of the above-described devices may be recorded in a computer-readable recording medium, and the program recorded in this recording medium may be read by the computer system and executed. The "computer system" may include an OS and hardware such as peripheral devices.
The “computer-readable recording medium” is a writable non-volatile memory such as a flexible disk, a magneto-optical disk, a ROM, a flash memory, a portable medium such as a DVD (Digital Versatile Disc), or a built-in computer system. A storage device such as a hard disk.

Further, the "computer-readable recording medium" means a volatile memory (for example, a DRAM (Dynamic) in a computer system that serves as a server or a client when a program is transmitted via a network such as the Internet or a communication line such as a telephone line. Random Access Memory)), which also holds the program for a certain period of time.
The program may be transmitted from a computer system that stores the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the "transmission medium" for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.
Further, the program may be a program for realizing some of the functions described above. Further, it may be a so-called difference file (difference program) that can realize the above-mentioned functions in combination with a program already recorded in the computer system.

20 ... Communication network, 50 ... Communication network, 101-10N ... Terminal device, T01-T0M ... Service providing device, 100 ... Privacy protection device, 2010 ... Activation timing recording unit, 2020 ... Inquiry unit, 2030 ... Control unit, 2040 ... Consent recording unit, 2050 ... Inquiry recording unit, 2060 ... User data storage unit, app1 to appM ... Application, 2070 ... Application type data storage unit

Claims (9)

A start time recording unit that records the time when the application is started according to the user's start operation,
An inquiring unit that selects an application whose degree of activation is less than a reference based on the record data of the activation time recording unit, and inquires the user that the selected application accesses the user data.
A control unit for controlling access to user data from the selected application based on a query result of the query unit ,
The control unit selects an application of the same type on the basis of application type information, and determines whether or not there is an application having a higher degree of activation than a reference among a plurality of selected applications of the same type. If there is an application whose degree of activation is higher than the reference, determined based on the record data of the recording unit, access to user data from the same type of application other than the application whose degree of activation is higher than the reference Restrict,
Terminal device. The application whose degree of activation is greater than the reference is an application that has been less than a predetermined period from the time of the last activation, or an application in which the number of activations within the predetermined period is a predetermined number or more,
The terminal device according to claim 1 . A start time recording unit that records the time when the application is started according to the user's start operation,
An inquiring unit that selects an application whose degree of activation is less than a reference based on the record data of the activation time recording unit, and inquires the user that the selected application accesses the user data.
A terminal device comprising: a control unit that controls access to user data from the selected application based on an inquiry result of the inquiry unit,
Further comprising a consent recording unit that records whether or not the user consents to the privacy policy of the application,
The control unit controls access to user data from an application other than an application whose degree of activation is less than a reference based on recorded data of the consent recording unit,
Terminal device. Further comprising an inquiry recording unit for recording the inquiry result of the inquiry unit for each application,
The inquiring unit records the inquiry result of the user's consent to access the user data from the application in which the consent recording of the user is recorded in the consent recording unit, based on the record data of the inquiry recording unit. Reflected in the department,
The terminal device according to claim 3 . The application whose degree of activation is less than the reference is an application in which a predetermined period or more has elapsed from the time of the last activation, or an application in which the number of times of activation within the predetermined period is less than a predetermined number of times.
The terminal device according to any one of claims 1 to 4 . A start time recording step in which the terminal device records, for each application, the time when the application is started in response to the user's start operation;
An inquiring step in which the terminal device selects an application whose degree of activation is less than a reference based on the record data of the activation time recording step, and inquires the user that the selected application accesses the user data. ,
A control step in which the terminal device controls access to user data from the selected application based on an inquiry result of the inquiry step ;
The terminal device selects an application of the same type on the basis of information on the type of application, and determines whether or not there is an application whose degree of activation is higher than a reference among a plurality of selected applications of the same type. If there is an application whose degree of activation is higher than the standard determined based on the recording data of the recording step, access to the user data from the same type of application other than the application whose degree of activation is higher than the standard. Restrict,
Control method. A start time recording step in which the terminal device records, for each application, the time when the application is started in response to the user's start operation;
An inquiring step in which the terminal device selects an application whose degree of activation is less than a reference based on the record data of the activation time recording step, and inquires the user that the selected application accesses the user data. ,
A control step in which the terminal device controls access to user data from the selected application based on an inquiry result of the inquiry step;
The terminal device further includes a consent recording step of recording whether or not the user consents to the privacy policy of the application.
The terminal device controls access to user data from an application other than an application whose degree of activation is less than a reference based on record data of the consent recording step,
Control method. On the computer,
A start time recording function that records the time when each application is started according to the user's start operation,
An inquiry function that selects an application whose degree of activation is less than a reference based on the record data of the activation time recording function, and inquires the user that the selected application accesses the user data.
A computer program for realizing a control function for controlling access to user data from the selected application based on a query result of the query function ,
The control function selects the same type of application based on the information of the type of application, and determines whether or not there is an application having a higher degree of activation than a reference among a plurality of selected same type applications. If there is an application whose degree of activation is higher than the reference, it is judged based on the recorded data of the recording function, and the user data is accessed from the same type of application other than the application whose degree of activation is higher than the reference. Restrict,
Computer program. On the computer,
A start time recording function that records the time when each application is started according to the user's start operation,
An inquiry function that selects an application whose degree of activation is less than a reference based on the record data of the activation time recording function, and inquires the user that the selected application accesses the user data.
A computer program for realizing a control function for controlling access to user data from the selected application based on a query result of the query function,
On the computer,
Further realize the consent record function that records whether or not the user consents to the privacy policy of the application,
The control function controls access to user data from an application other than an application whose degree of activation is less than a reference based on record data of the consent record function,
Computer program.

Images