# US 2014/0208437 A1 · Anonymization device, anonymization method and recording medium recording program therefor > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0208437 A1 - Document ID: US20140208437A1 - Status: Published application - Kind: A1 - Application number: 14/240,720 - Filed: 2012-08-16 - Published: 2014-07-24 - Earliest claimed: 2011-08-25 - Assignees: NEC Corporation - Inventors: Takayuki Sasaki; Ryo Furukawa - Web page: https://patentgrep.com/patent/US20140208437A1 ## CPC - G06F 21/60: Protecting data - G06F 21/6254: {by anonymising data, e.g. decorrelating personal data from the owner's identification} - G06Q 30/02: Marketing; Price estimation or determination; Fundraising - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract An anonymization device includes: an analysis unit which outputs an analysis result of privacy information including personal information on the basis of an analysis command; and a feedback information creation unit which creates the analysis command on the basis of a disclosure request including disclosure object information indicating an object to be disclosed and disclosure format information indicating the format of the disclosure, outputs the analysis command to the analysis unit, and creates and outputs a disclosure response including feedback information which suggests a change to the disclosure request to increase anonymity, on the basis of the anonymity in the analysis result received from the analysis unit. ## Claims ### Claim 1 An anonymization device comprising: an analysis unit which outputs, concerning privacy information including at least one or more personal information for each individual, an analysis result of the privacy information based on an analysis command including analysis object information which indicates the personal information set as an analysis object and analysis method information which indicates an analysis method; and a feedback information creation unit which creates the analysis command on the basis of a disclosure request including disclosure object information indicating an object to be disclosed and disclosure format information indicating a format of the disclosure, outputs the analysis command to the analysis unit, and creates and outputs a disclosure response including feedback information which suggests a change to increase anonymity concerning at least one of the disclosure object information and the disclosure format information, on the basis of the anonymity of the analysis result received from the analysis unit, concerning the privacy information. ### Claim 2 (depends on 1) The anonymization device according to claim 1, wherein the feedback information creation unit creates an inaccurate analysis result which changed the contents of the analysis result so that the anonymity corresponding to the analysis result may satisfy a threshold value and creates accuracy information which indicates accuracy of the inaccurate analysis result, and the disclosure response includes the accuracy information. ### Claim 3 (depends on 2) The anonymization device according to claim 2, wherein the feedback information creation unit creates the accuracy information which further indicates accuracy of the analysis result when the disclosure object information and the disclosure format information are changed based on the suggestion of the change to increase the anonymity corresponding to the accuracy of the inaccurate analysis result. ### Claim 4 (depends on 1) The anonymization device according to claim 1, wherein the analysis means fits a specific function and analyzes privacy information, and the feedback information creation unit creates the disclosure response including feedback information which suggests to change the specific function in the disclosure format information so that the anonymity may become high. ### Claim 5 (depends on 1) The anonymization device according to claim 1 wherein the feedback information creation unit creates the disclosure response including feedback information which suggests changing the disclosure object information so that the number of records of the personal information set as the analysis object may be increased. ### Claim 6 (depends on 1) The anonymization device according to claim 1 further comprising a sample record counting unit which counts the number of records of the personal information set as the analysis object, and outputs the counting result, wherein the feedback information creation unit creates the disclosure response based on the analysis result and the counting result. ### Claim 7 An anonymization method which a computer executes and comprising: outputting, concerning privacy information including at least one or more personal information for each individual, an analysis result of the privacy information based on an analysis command including analysis object information which indicates the personal information set as an analysis object and analysis method information which indicates an analysis method; creating and outputting the analysis command on the basis of a disclosure request including disclosure object information indicating an object to be disclosed and disclosure format information indicating the format of the disclosure; and creating and outputting a disclosure response including feedback information which suggests a change to increase anonymity concerning at least one of the disclosure object information and the disclosure format information, on the basis of the anonymity of the analysis result, concerning the privacy information. ### Claim 8 (depends on 7) The anonymization method according to claim 7, wherein the computer creates an inaccurate analysis result which changed the contents of the analysis result so that the anonymity corresponding to the analysis result may satisfy a threshold value, and creates accuracy information which indicates accuracy of the inaccurate analysis result, and the disclosure response includes the accuracy information. ### Claim 9 (depends on 8) The anonymization method according to claim 8, wherein the computer creates the accuracy information which further indicates accuracy of the analysis result when the disclosure object information and the disclosure format information are changed based on the suggestion of the change to increase the anonymity corresponding to the accuracy of the inaccurate analysis result. ### Claim 10 (depends on 7) The anonymization method according to claim 7, wherein the computer fits a specific function and analyzes privacy information and creates the disclosure response including feedback information which suggests to change the specific function in the disclosure format information so that the anonymity may become high. ### Claim 11 (depends on 7) The anonymization method according to claim 7, wherein the computer creates the disclosure response including feedback information which suggests changing the disclosure object information so that the number of records of the personal information set as the analysis object may be increased. ### Claim 12 (depends on 7) The anonymization method according to claim 7, wherein the computer counts the number of records of the personal information set as the analysis object, and outputs the counting result and creates the disclosure response based on the analysis result and the counting result. ### Claim 13 A non-transitory computer-readable recording medium recording a program for making a computer execute processing of: outputting, concerning privacy information including at least one or more personal information for each individual, an analysis result of the privacy information based on an analysis command including analysis object information which indicates the personal information set as an analysis object and analysis method information which indicates an analysis method; creating and outputting the analysis command on the basis of a disclosure request including disclosure object information indicating an object to be disclosed and disclosure format information indicating the format of the disclosure; and creating and outputting a disclosure response including feedback information which suggests a change to increase anonymity concerning at least one of the disclosure object information and the disclosure format information, on the basis of the anonymity of the analysis result, concerning the privacy information. ### Claim 14 (depends on 13) The medium according to claim 13 recording the program for making the computer execute processing of: creating an inaccurate analysis result which changed the contents of the analysis result so that the anonymity corresponding to the analysis result may satisfy a threshold value, and creating accuracy information which indicates accuracy of the inaccurate analysis result, and wherein the disclosure response includes the accuracy information. ### Claim 15 (depends on 14) The medium according to claim 14 recording the program for making the computer execute processing of: creating the accuracy information which further indicates accuracy of the analysis result when the disclosure object information and the disclosure format information are changed based on the suggestion of the change to increase the anonymity corresponding to the accuracy of the inaccurate analysis result.