| 摘要 |
PROBLEM TO BE SOLVED: To guarantee anonymity for an information provider compatibly with guarantee of validity of collected information.SOLUTION: A quasi-identifier to be used and desired precision information are reported from an information collection device SV to an information providing device TM, and the information providing device TM answers a value of the quasi-identifier and a desired anonymity degree. The information collecting device SV first calculates a maximum anonymity degree that can be realized for each quasi-identifier, performs generalization processing on a quasi-identifier with no realizable anonym, and returns to calculation processing of the maximum anonymity degree. Such processing is repeated to an upper limit for the number of times of generalization. When the number of persons reaches a desired number, the processing is finished. If the number of persons is lacked, the processing is re-tried after increasing the number of candidates. The information collection device SV reports the determined realizable anonymity degree and generalization method to the information providing device TM and in accordance with the reported information, the information providing device TM transmits a value of a generalized quasi-identifier and the precision information to the information collection device SV. |
