JP7619116B2 - Information processing device and computer program - Google Patents

Description

The present invention relates to an information processing device and a computer program.

Various public-private partnerships are underway to put into practice information banks (information trust functions) that will handle the distribution of personal data based on the consent of individuals. With the aim of increasing effective individual involvement (controllability) and promoting the distribution and use of personal data, information banks are systems in which individuals, with their consent, entrust the provision of their personal data to a trusted entity as a third party. Non-Patent Document 1 discloses the details of a study into the ideal certification scheme for information banks.

Ministry of Economy, Trade and Industry, "Guidelines for the Certification of Information Trust Functions ver. 2.0," October 2019, [Retrieved November 22, 2019], Internet <URL: https://www.meti.go.jp/press/2019/10/20191008003/20191008003-3.pdf>

However, in the past, in order to provide personal data to a third party, consent had to be given to all services and businesses at once, or consent had to be set up individually. This made it difficult to compare and complicated to set up, especially when there were multiple similar services.

The present invention has been made in consideration of the above circumstances, and aims to provide an information processing device and computer program that can expand the user's options when providing personal data.

The present application includes multiple means for solving the above problem, and as one example, an information processing device includes a storage unit that stores related information that associates categories that classify required services, services corresponding to the categories, service providers that provide the services, and personal data required to receive the services from the service providers, a selection information acquisition unit that acquires selection information indicating the selection of one category from among multiple categories, a selection unit that refers to the storage unit, displays the services classified by the selected category, and accepts the selection of a service provider that provides the selected service, and a display unit that displays personal data required to receive the service from the service provider selected by the selection unit, and displays a display for accepting whether or not to provide the personal data.

The present invention can expand users' options when providing personal data.

1 is a schematic diagram illustrating an example of a configuration of an information processing system according to an embodiment of the present invention. FIG. 2 is a block diagram showing an example of the configuration of a terminal device. FIG. 1 is a block diagram showing an example of a configuration of an information processing device. FIG. 2 is a schematic diagram showing a configuration of related information. FIG. 4 is a schematic diagram illustrating an example of a home screen. FIG. 13 is a schematic diagram illustrating an example of a service menu screen. FIG. 13 is a schematic diagram showing an example of a screen for a person who is a target for preventing aggravation. FIG. 13 is a schematic diagram showing an example of a screen showing an overview of instruction to prevent aggravation. FIG. 13 is a schematic diagram illustrating an example of a service details screen. FIG. 13 is a schematic diagram showing an example of a destination business operator confirmation screen. FIG. 13 is a schematic diagram showing a first example of a provided data item confirmation screen. FIG. 13 is a schematic diagram showing a second example of a provided data item confirmation screen. FIG. 13 is a schematic diagram showing an example of a data provision consent confirmation screen. FIG. 13 is a schematic diagram showing an example of a service application completion screen. 11 is a flowchart illustrating an example of a processing procedure of an information processing device.

Below, an embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a schematic diagram showing an example of the configuration of an information processing system according to this embodiment. The information processing system includes an information processing device 50. The information processing device 50 is a device used or operated by a person who operates an information bank (information trust function) business. The terminal device 10 can be connected to the information processing device 50 via a communication network 1. The terminal device 10 is a terminal device used by a user such as a consumer, and can be configured, for example, as a smartphone, tablet, personal computer, etc. The number of terminal devices 10 is not limited to one.

The information processing device 50 is connected via a communication network to server A (server 20a) of service provider A that provides service A, server B (server 20b) of service provider B that provides service B, server C (server 20c) of service provider C that provides service C, and so on. Service providers A, B, C, and so on are third parties from the user's perspective, and are entities that carry out businesses that provide required services using the user's personal data. In this specification, services A, B, C, and so on will be described as medical and health-related services, but the services are not limited to those related to medical and health.

A user entrusts an information bank operator with the provision of his/her personal data to a third party. In this case, the user is provided with the option to select the desired service from among services categorized by category. When the user selects the desired service, a service provider that will provide the selected service is selected, and the user can agree on whether or not to provide his/her personal data to the selected service provider. The service provider can use the provided personal data to perform the required service. The user can obtain the benefits of the service provided by the service provider.

Figure 2 is a block diagram showing an example of the configuration of the terminal device 10. The terminal device 10 includes a control unit 11 that controls the entire device, a communication unit 12, a storage unit 13, a display panel 14, and an operation unit 15. The control unit 11 can be configured with a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), etc.

The communication unit 12 is composed of a required communication module, etc., and provides a communication function with the information processing device 50 via the communication network 1. The communication unit 12 can transmit and receive information with the information processing device 50.

The storage unit 13 can be configured with a semiconductor memory or the like, and can store information received via the communication unit 12, processing results by the control unit 11, and required information. For example, medical/health service apps can be downloaded from the information processing device 50 or other app providing servers and stored in the storage unit 13. The medical/health service apps are loaded into the RAM of the control unit 11 and executed by the CPU, thereby carrying out processing of the medical/health service apps.

The display panel 14 can be configured with a liquid crystal panel or an organic EL (Electro Luminescence) display, etc. The operation unit 15 can be configured with, for example, a touch panel incorporated in the display panel 14, and can perform predetermined operations performed by the user on the display panel 14. The operation unit 15 can also perform operations on a keyboard displayed on the display panel 14. The operation unit 15 may also be a hardware keyboard, a mouse, etc.

The terminal device 10 can be connected to devices (not shown) such as biosensors or measuring instruments (e.g., blood pressure monitors, pedometers, etc.) via short-range communication. The devices can detect vital data and output it to the terminal device 10. The vital data is data related to a living organism, and includes, for example, blood pressure, heart rate, weight, number of steps, sleep time, and food intake. The vital data may be detected by the device and output to the terminal device 10, or may be detected directly by an application in the terminal device 10 (e.g., a medical/health service app).

The terminal device 10 may transmit account information (e.g., name, date of birth, age, sex, email address, phone number, etc.) and lifestyle information (e.g., information on diet, information on exercise and movement, hobbies, etc.) input by the user via the operation unit 15 to the information processing device 50. Personal data such as the account information, lifestyle information, and vital data may be registered in advance in the information processing device 50 or a specified server using a medical/health service app or the like.

Figure 3 is a block diagram showing an example of the configuration of an information processing device 50. The information processing device 50 includes a control unit 51 that controls the entire device, a first communication unit 52, a second communication unit 53, a storage unit 54, a related information DB 55, a user interface unit 56, and a personal data providing unit 57. The control unit 51 can be composed of a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), etc.

The first communication unit 52 is composed of a required communication module, etc., and provides a communication function with the terminal device 10 via the communication network 1. The first communication unit 52 can transmit and receive information with the terminal device 10.

The second communication unit 53 is composed of a required communication module, etc., and provides a communication function with the servers 20a, 20b, 20c, etc. of service providers A, B, C, etc. via the communication network 1. The second communication unit 53 can transmit and receive information with the servers 20a, 20b, 20c, etc. The control unit 51 can provide personal data agreed upon by the user to the servers 20a, 20b, 20c, etc. via the second communication unit 53. In addition, the second communication unit 53 can obtain the user's health checkup information, medical examination information, healthcare device information, and app information from a server (not shown) that holds medical healthcare information via the communication network 1.

The storage unit 54 can be configured with a semiconductor memory or a hard disk, etc., and can store information received via the first communication unit 52 or the second communication unit 53 and required information.

The related information DB55 functions as a storage unit and stores related information that associates categories that classify medical and health-related services, services that correspond to the categories, service providers that provide the services, and personal data that can be provided to the service providers.

Figure 4 is a schematic diagram showing the configuration of related information. Related information is composed of columns for category, service, business operator, personal data, and dummy data. Categories are classifications of medical and health-related services, and in Figure 4, they are represented by numbers for convenience. Categories can be, for example, "for those who are seeking to maintain and improve their health," "for those who are seeking specific health guidance," "for those who are seeking to prevent serious illness," "contribution to the development of new services," "contribution to next-generation medical care," and the like, but are not limited to these. Of the above-mentioned categories, "for those who are seeking to maintain and improve their health," "for those who are seeking specific health guidance," and "for those who are seeking to prevent serious illness" may be collectively referred to as a category called "personal services." In addition, "contribution to the development of new services" and "contribution to next-generation medical care" may be collectively referred to as a category called "future contribution."

The services correspond to categories, and for convenience, are represented in FIG. 4 as services A, B, C, D, .... For example, a service corresponding to the category "For those who are to be prevented from becoming seriously ill" may be called "Guidance on preventing becoming seriously ill," but it may also be called by another name, and multiple services may be associated with the category.

The business operator is the name of the business operator that provides the service. In the example of FIG. 4, the business operators that provide service A are represented as business operators A1, A2, ..., and the business operators that provide service B are represented as business operators B1, B2, .... In practice, the company names are associated with the services.

Personal data is data about individuals (users) that is necessary to receive services from businesses. Personal data necessary to receive services from business operator A1 is represented in group A1, and personal data necessary to receive services from business operator A2 is represented in group A2. Similarly, personal data necessary to receive services from business operator B1 is represented in group B1, and personal data necessary to receive services from business operator B2 is represented in group B2. Common personal data may be included among personal data groups A1, A2, ..., B1, B2, ....

Dummy data is pseudo data different from the user's personal data, for the purpose of having the business provide the service even if the personal data is not provided to the business for security reasons. The dummy data is a value close to the actual personal data or a random value, and does not include information that would allow each user to be identified. In the example of FIG. 4, the personal data is represented by a dummy data group A1 for the service provided by business A1, a dummy data group A2 for the service provided by business A2, etc., for service A. Similarly, the personal data is represented by a dummy data group B1 for the service provided by business B1, a dummy data group B2 for the service provided by business B2, etc., for service B. The same applies to other services and categories. The dummy data may use a value determined for each personal data group, or may use a value common to multiple different personal groups or a value based on a common rule, or may use a value common to all personal groups or a value based on a common rule. By using dummy data, even if a user does not consent to providing their personal data to a business operator, pseudo data different from the personal data is provided to the business operator, making it possible to protect personal information in accordance with the user's wishes while also enabling the provision of services.

The user can consent or not consent to the provision of a group of personal data to the business operator as a whole. The user can also consent or not consent to the provision of individual pieces of personal data to the service operator.

If a user does not consent to the provision of a set of personal data as a whole to a business operator, dummy data may be provided to the business operator in place of the set of personal data. In addition, if a user does not consent to the provision of part of the set of personal data to a business operator, dummy data may be provided to the business operator in place of the personal data that was not consented to.

The personal data providing unit 57 functions as a providing unit and provides personal data to the service provider (specifically, the service provider's server). For example, if the user selects service A, the personal data providing unit 57 transmits the personal data to which the user has agreed to the server 20a. The personal data providing unit 57 also functions as a dummy data providing unit and transmits dummy data corresponding to the personal data to which the user has not agreed (selected) to the service provider's server.

The user interface unit 56 realizes a user interface function through a medical/health service app installed on the terminal device 10. For example, the user interface unit 56 generates data for a display screen to be displayed on the display panel 14 of the terminal device 10, and acquires operation data input by the user through the medical/health service app.

Next, we will explain the display screen displayed on the terminal device 10.

Figure 5 is a schematic diagram showing an example of a home screen. When a user launches a medical/health service app on the terminal device 10, the home screen of the "Medical/Healthcare Information Bank Service" is displayed. On the home screen, the user can transition directly to the functions of "My Data Management," "Services," and "Offers." Here, when the user selects "Services," the service menu screen described below is displayed.

Figure 6 is a schematic diagram showing an example of a service menu screen. On the service menu screen, the services provided are divided into categories, and the user can select the required category from among multiple categories. In the example of Figure 6, categories related to personal services are divided into the categories of "for those who want to maintain and improve their health," "for those who want to receive specific health guidance," and "for those who want to prevent the onset of severe symptoms." Note that the names and number of categories are not limited to the example of Figure 6.

When the user selects "For those who are candidates for preventing serious illness," the terminal device 10 transmits selection information to the information processing device 50 indicating the selection of one category ("For those who are candidates for preventing serious illness") from among multiple categories that classify medical and health-related services.

The user interface unit 56 has a function as an acquisition unit, and acquires selection information indicating a category selection from the terminal device 10. The user interface unit 56 has a function as a display unit and a selection unit, and refers to the related information DB 55 to display services classified according to the selected category and accepts the selection of a service provider that will provide the selected service. The user interface unit 56 displays on the terminal device 10 the personal data required to receive the service from the selected service provider, and also displays a display for accepting the request to provide the personal data.

Figure 7 is a schematic diagram showing an example of a screen for those who are targets of severe disease prevention. Services for those targets of severe disease prevention are displayed on the screen for those who are targets of severe disease prevention. In the example of Figure 7, the service names "Severe disease prevention guidance," "OOO guidance," and "△△△ guidance" are displayed. When the user selects the service "Severe disease prevention guidance," an overview of the service, described below, is displayed.

Figure 8 is a schematic diagram showing an example of a screen showing an overview of the guidance to prevent aggravation. The screen showing the overview of the guidance to prevent aggravation displays the overview of the guidance to prevent aggravation, the name of the service provider (in the example of Figure 8, OOX Service Co., Ltd.), and the like. The user interface unit 56 can select a service provider that provides a service classified according to the selected category. Note that the user interface unit 56 may select multiple service providers, and may display multiple providers in Figure 8 so that the user can select the desired provider. When the user operates the "Details of provided services" icon, the service details screen described below is displayed.

Figure 9 is a schematic diagram showing an example of a service details screen. The service details screen displays the service name (in the example of Figure 9, "Guidance on preventing aggravation"), the service provider (in the example of Figure 9, OOX Service Co., Ltd.), the service overview, and the service details. This allows the user to confirm what service their personal data will be used for and to determine whether or not to provide the personal data. When the user operates the "Confirm provider" icon, a provider provider confirmation screen, described below, is displayed. When the user operates the "Confirm provided data items" icon, a provided data items confirmation screen, described below, is displayed.

Figure 10 is a schematic diagram showing an example of a destination business confirmation screen. The destination business confirmation screen displays information such as the business name, service area, purpose of use of personal information, whether or not personal information will be provided to a third party, storage period for the provided personal data, handling of the provided personal data after the storage period, contact telephone number, contact URL, and website URL. The user interface unit 56 can output details of the selected service business to the terminal device 10. Note that the information related to the destination business displayed on the destination business confirmation screen is not limited to the example in Figure 10. When the user operates the "Confirmed" icon, the screen returns to the service details screen shown in Figure 9.

Figure 11 is a schematic diagram showing a first example of a provided data item confirmation screen. The provided data item confirmation screen displays the user's personal data. The user interface unit 56 outputs the personal data that can be provided to the selected service provider to the terminal device 10. The personal data is composed of the user's account information, lifestyle habit information, vital data, and the like. Figure 11 shows an example of a portion of the personal data. Note that the personal data displayed on the provided data item confirmation screen may be composed of different items for each service selected by the user. When the user checks the data for all items of personal data displayed on the provided data item confirmation screen and operates the "Confirmed" icon, the screen returns to the service details screen shown in Figure 9 as an example.

Figure 12 is a schematic diagram showing a second example of a provided data item confirmation screen. In the second example, the user can individually select the personal data to be provided. By checking the "No checkbox" provided corresponding to each data item, each data item can be excluded from the personal data to be provided. Personal data for which the "No checkbox" is checked will not be provided to the service provider. The user interface unit 56 can individually select the personal data to be provided to the service provider based on the user's selection operation on the terminal device 10.

For the personal data that is excluded from provision, dummy data can be provided to the service provider as a substitute. The personal data providing unit 57 can provide the dummy data corresponding to the personal data that was not selected to the server of the service provider.

When the user checks the personal data displayed on the provided data item confirmation screen to see which data to provide and which data to exclude, and operates the "Confirmed" icon, the user is returned to the service details screen shown in Figure 9. On the service details screen in Figure 9, the user checks the "I agree" checkbox and operates the "Next" icon to display the data provision consent confirmation screen described below.

Figure 13 is a schematic diagram showing an example of a data provision consent confirmation screen. The data provision consent confirmation screen displays the name of the service, the provider (service provider), and the data items (personal data) to be provided, and the user can apply for the service by operating the "Apply" icon. If the user does not consent, the user can operate the "Cancel" icon. The "Apply" icon and the "Cancel" icon represent information indicating whether or not the user's personal data can be provided, and when the user operates the "Apply" icon, the user interface unit 56 can obtain the user's approval to provide the personal data.

Figure 14 is a schematic diagram showing an example of a service application completion screen. The service application completion screen informs the user that the personal data agreed to by the user will be provided to the provider that provides the service selected by the user, that an offer has been received from the provider, and that the user can use the service according to the contents of the offer.

Figure 15 is a flowchart showing an example of a processing procedure of the information processing device 50. The control unit 51 acquires selection information of a category that classifies medical and health-related services (S11). The selection information is, for example, information indicating that "For those who are targets of prevention of serious illness" in Figure 6 has been selected. The control unit 51 refers to the related information DB 55 and selects a provider of the service (a service provider that provides the service) classified by the selected category (S12).

The control unit 51 determines whether or not service selection information has been acquired (S13). The service selection information is, for example, information indicating that "Guidance on preventing aggravation" in FIG. 7 has been selected. If service selection information has not been acquired (NO in S13), the control unit 51 continues the processing of step S13, and if service selection information has been acquired (YES in S13), the control unit 51 outputs the content of the service (S14). The content of the service is, for example, the information exemplified in FIG. 8 or FIG. 9.

The control unit 51 determines whether or not a confirmation request for the service provider has been acquired (S15). The confirmation request for the service provider is, for example, information indicating the operation of the "Confirm Destination Provider" icon in FIG. 9. If a confirmation request for the service provider has not been acquired (NO in S15), the control unit 51 continues the processing of step S15, and if a confirmation request for the service provider has been acquired (YES in S15), it outputs information about the destination provider (S16). The information about the destination provider is, for example, the information exemplified in FIG. 10.

The control unit 51 determines whether confirmation information has been acquired (S17). The confirmation information is, for example, information indicating the operation of the "Confirmed" icon in FIG. 10. If confirmation information has not been acquired (NO in S17), the control unit 51 continues the processing of step S17, and if confirmation information has been acquired (YES in S17), it determines whether a confirmation request for provided data items has been acquired (S18). The confirmation request for provided data items is, for example, information indicating the operation of the "Confirm provided data items" icon in FIG. 9.

If a confirmation request for the provided data items has not been received (NO in S18), the control unit 51 continues the process of step S18. If a confirmation request for the provided data items has been received (YES in S18), the control unit 51 outputs information about the provided data items (S19). The information about the provided data items is, for example, the information exemplified in FIG. 11 or FIG. 12.

The control unit 51 determines whether or not confirmation information has been acquired (S20). The confirmation information is, for example, information indicating the operation of the "Confirmed" icon in FIG. 11 or FIG. 12. If confirmation information has not been acquired (NO in S20), the control unit 51 continues the processing of step S20, and if confirmation information has been acquired (YES in S20), it determines whether or not consent information has been acquired (S21). The consent information is, for example, information indicating the operation of the "Apply" icon in FIG. 13 by checking "I agree" in FIG. 9.

If consent information has not been obtained (NO in S21), the control unit 51 continues processing in step S21. If consent information has been obtained (YES in S21), the control unit 51 provides the personal data (S22) and terminates processing.

The information processing device 50 can also be realized by using a computer equipped with a CPU (processor), RAM, etc. A computer program (which can be recorded on a recording medium) that defines the processing procedure as shown in FIG. 15 is loaded into the RAM equipped in the computer, and the computer program is executed by the CPU (processor), thereby realizing the information processing device 50 on the computer.

As described above, according to this embodiment, the user can select a desired service from services classified by category, increasing the number of options. The information processing device 50 selects a service provider that will provide the selected service, and personal data such as medical health information and lifestyle information is provided to the selected service provider. This allows the user to receive services that are suited to the individual. As a demo site, the information processing device 50 can confirm and consent to the provision of data necessary to receive personal services as services suited to each user.

The information processing device of this embodiment includes a storage unit that stores related information that associates categories that classify required services, services corresponding to the categories, service providers that provide the services, and personal data required to receive the services from the service providers, a selection information acquisition unit that acquires selection information indicating the selection of one category from among multiple categories, a selection unit that refers to the storage unit, displays the services classified by the selected category, and accepts the selection of a service provider that provides the selected service, and a display unit that displays personal data required to receive the service from the service provider selected by the selection unit, and displays a display for accepting whether or not to provide the personal data.

The information processing device of this embodiment includes a provision unit that provides the personal data to the service provider when the user approves the provision of the personal data.

The information processing device of this embodiment includes a data output unit that outputs to a terminal device personal data that can be provided to the service provider selected by the selection unit, and an individual selection unit that individually selects personal data to be provided to the service provider based on a selection operation by a user on the terminal device.

The information processing device of this embodiment includes a dummy data providing unit that provides the service provider with dummy data corresponding to the personal data not selected by the individual selection unit.

The information processing device of this embodiment has a service content output unit that outputs the content of the service classified according to the selected category.

The information processing device of this embodiment includes a business content output unit that outputs the details of the service business selected by the selection unit.

The computer program of this embodiment causes a computer to execute a process of acquiring selection information indicating the selection of one category from among a plurality of categories that classify a desired service, referencing a storage unit that stores related information that associates a service corresponding to the category, a service provider that provides the service, and personal data required to receive the service from the service provider, displaying the services classified according to the selected category, accepting a selection of a service provider that provides the selected service, displaying the personal data required to receive the service from the selected service provider, and displaying a display for accepting whether or not to provide the personal data.

REFERENCE SIGNS LIST 1 Communication network 10 Terminal device 11 Control unit 12 Communication unit 13 Storage unit 14 Display panel 15 Operation unit 20a, 20b, 20c Server 50 Information processing device 51 Control unit 52 First communication unit 53 Second communication unit 54 Storage unit 55 Related information DB
56 User interface unit 57 Personal data providing unit

Claims (5)

a storage unit that stores related information that associates categories that classify required services, services corresponding to the categories, service providers that provide the services, and personal data that is required to receive the services from the service providers;
a selection information acquisition unit that acquires selection information indicating a selection of one category from among a plurality of categories;
a selection unit that refers to the storage unit, displays services classified according to a selected category, and accepts a selection of a service provider that provides the selected service;
a display unit that displays personal data required to receive a service from the service provider selected by the selection unit and displays a display for accepting an answer as to whether or not to provide the personal data ;
a data output unit that outputs personal data that can be provided to the service provider selected by the selection unit to a terminal device;
an individual selection unit that individually selects personal data to be provided to the service provider based on a selection operation of a user on the terminal device;
a dummy data providing unit that provides dummy data corresponding to personal data not selected by the individual selecting unit to the service provider;
Equipped with
Information processing device. a providing unit that provides the personal data to the service provider when the provision of the personal data by the user is approved;
The information processing device according to claim 1 . a service content output unit that outputs the content of the service classified according to the selected category;
3. The information processing device according to claim 1 or 2 . A service provider content output unit outputs the content of the service provider selected by the selection unit.
The information processing device according to claim 1 . On the computer,
obtaining selection information indicating a selection of one category from a plurality of categories that classify a required service;
displaying services classified according to the selected category by referring to a storage unit that stores related information that associates a service corresponding to the category, a service provider that provides the service, and personal data required to receive the service from the service provider, and accepting a selection of a service provider that provides the selected service;
Displaying personal data required to receive the service from the selected service provider and displaying a display for accepting the request for providing said personal data;
outputting the personal data that can be provided to the selected service provider to the terminal device;
selecting, on the basis of a selection operation of the user on the terminal device, individual pieces of personal data to be provided to the service provider;
A computer program that causes the service provider to execute a process of providing dummy data corresponding to personal data that was not individually selected to the service provider .

Images