Information processing apparatus, information processing system and information processing method

An information processing system comprising:

• a storage device that stores electronic personal information that is transferred from a plurality of operation databases respectively in a plurality of information provision systems respectively of a plurality of information provision institutions, and confidentializing item information that specifies an item as a confidentializing target from among a plurality of items included in the electronic personal information;
• and
• an information processing apparatus that assigns common identification information to the electronic personal information stored in the storage device, the common identification information being shared between the plurality of information provision systems for identifying a person, and that generates confidentialized personal information by confidentializing the electronic personal information to which the common identification information has been assigned,
• the information processing apparatus confidentializes information of the item as the confidentializing target specified by the confidentializing item information,
• the information processing apparatus performs a first process of generating a plurality of pieces of confidentialized personal information respectively from a plurality of pieces of electronic personal information in accordance with a request from each of the plurality of information provision systems, and performs a second process of generating a plurality of pieces of confidentialized personal information respectively from a plurality of pieces of electronic personal information in accordance with a request from an analysis system of an information analysis institution, and
• the information processing apparatus interrupts the first process and starts the second process when the request is received from the analysis system after generating the confidentialized personal information from a specific piece of electronic personal information from among the plurality of pieces of electronic personal information in the first process, obtains a location of an interruption from progress information of a confidentializing process after completing the second process, and restarts the first process from a next piece of the electronic personal information following the specific piece of the electronic personal information indicated by the location of the interruption.

A non-transitory computer-readable recording medium having stored therein a program that causes a computer to execute a process comprising:

• receiving common identification information from an identification information management device, the common identification information being shared between a plurality of information provision systems respectively of a plurality of information provision institutions for identifying a person;
• setting the common identification information for electronic personal information transferred to a storage device from a plurality of operation databases respectively in the plurality of information provision systems;
• and
• generating confidentialized personal information by confidentializing the electronic personal information for which the common identification information has been set,
• the storage device stores confidentializing item information that specifies an item as a confidentializing target from among a plurality of items included in the electronic personal information, and the generating the confidentialized personal information confidentializes information of the item as the confidentializing target specified by the confidentializing item information,
• the generating the confidentialized personal information performs a first process of generating a plurality of pieces of confidentialized personal information respectively from a plurality of pieces of electronic personal information in accordance with a request from each of the plurality of information provision systems, and performs a second process of generating a plurality of pieces of confidentialized personal information respectively from a plurality of pieces of electronic personal information in accordance with a request from an analysis system of an information analysis institution, and
• the generating the confidentialized personal information interrupts the first process and starts the second process when the request is received from the analysis system after generating the confidentialized personal information from a specific piece of electronic personal information from among the plurality of pieces of electronic personal information in the first process, obtains a location of an interruption from progress information of a confidentializing process after completing the second process, and restarts the first process from a next piece of the electronic personal information following the specific piece of the electronic personal information indicated by the location of the interruption.

A non-transitory computer-readable recording medium having stored therein a program that causes a computer to execute a process comprising:

• assigning common identification information to electronic personal information transferred to a storage device from a plurality of operation databases respectively in a plurality of information provision systems respectively of a plurality of information provision institutions, the common identification information being shared between the plurality of information provision systems for identifying a person;
• and
• generating confidentialized personal information by confidentializing the electronic personal information to which the common identification information has been assigned,
• the storage device stores confidentializing item information that specifies an item as a confidentializing target from among a plurality of items included in the electronic personal information, and the generating the confidentialized personal information confidentializes information of the item as the confidentializing target specified by the confidentializing item information,
• the generating the confidentialized personal information performs a first process of generating a plurality of pieces of confidentialized personal information respectively from a plurality of pieces of electronic personal information in accordance with a request from each of the plurality of information provision systems, and performs a second process of generating a plurality of pieces of confidentialized personal information respectively from a plurality of pieces of electronic personal information in accordance with a request from an analysis system of an information analysis institution, and
• the generating the confidentialized personal information interrupts the first process and starts the second process when the request is received from the analysis system after generating the confidentialized personal information from a specific piece of electronic personal information from among the plurality of pieces of electronic personal information in the first process, obtains a location of an interruption from progress information of a confidentializing process after completing the second process, and restarts the first process from a next piece of the electronic personal information following the specific piece of the electronic personal information indicated by the location of the interruption.

An information processing apparatus comprising:

• a memory;
• a communication interface that is coupled to the memory and that receives common identification information from an identification information management device, the common identification information being shared between a plurality of information provision systems respectively of a plurality of information provision institutions for identifying a person;
• and
• a processor that is coupled to the memory and that sets the common identification information for electronic personal information transferred to a storage device from a plurality of operation databases respectively in the plurality of information provision systems, and that generates confidentialized personal information by confidentializing the electronic personal information for which the common identification information has been set,
• the storage device stores confidentializing item information that specifies an item as a confidentializing target from among a plurality of items included in the electronic personal information, and the processor confidentializes information of the item as the confidentializing target specified by the confidentializing item information,
• the processor performs a first process of generating a plurality of pieces of confidentialized personal information respectively from a plurality of pieces of electronic personal information in accordance with a request from each of the plurality of information provision systems, and performs a second process of generating a plurality of pieces of confidentialized personal information respectively from a plurality of pieces of electronic personal information in accordance with a request from an analysis system of an information analysis institution, and
• the processor interrupts the first process and starts the second process when the request is received from the analysis system after generating the confidentialized personal information from a specific piece of electronic personal information from among the plurality of pieces of electronic personal information in the first process, obtains a location of an interruption from progress information of a confidentializing process after completing the second process, and restarts the first process from a next piece of the electronic personal information following the specific piece of the electronic personal information indicated by the location of the interruption.

An information processing system comprising:

• a plurality of storage devices that store electronic personal information transferred from a plurality of operation databases respectively in a plurality of information provision systems respectively of a plurality of information provision institutions, and confidentializing item information that specifies an item as a confidentializing target from among a plurality of items included in the electronic personal information;
• an identification information management device that assigns common identification information to the electronic personal information stored in the plurality of storage devices, the common identification information being shared by the plurality of information provision systems for identifying a person;
• and
• a plurality of information processing apparatuses,
• each of the plurality of information processing apparatuses receives the common identification information from the identification information management device, sets the common identification information for the electronic personal information, and generates confidentialized personal information by confidentializing the electronic personal information for which the common identification information has been set,
• each of the plurality of information processing apparatuses confidentializes information of the item as the confidentializing target specified by the confidentializing item information,
• each of the plurality of information processing apparatuses performs a first process of generating a plurality of pieces of confidentialized personal information respectively from a plurality of pieces of electronic personal information in accordance with a request from each of the plurality of information provision systems, and performs a second process of generating a plurality of pieces of confidentialized personal information respectively from a plurality of pieces of electronic personal information in accordance with a request from an analysis system of an information analysis institution, and
• each of the plurality of information processing apparatuses interrupts the first process and starts the second process when the request is received from the analysis system after generating the confidentialized personal information from a specific piece of electronic personal information from among the plurality of pieces of electronic personal information in the first process, obtains a location of an interruption from prowess information of a confidentializing process after completing the second process, and restarts the first process from a next piece of the electronic personal information following the specific piece of the electronic personal information indicated by the location of the interruption.