INFORMATION PROCESSING DEVICE THAT PERFORMS ANONYMIZATION, ANONYMIZATION METHOD, AND RECORDING MEDIUM STORING PROGRAM

摘要

The present invention provides an information processing device that performs anonymization such that information on correspondence relationships between records does not become too unclear.;This information processing device includes: a means that extracts plural sets of second records from sets of a first record containing a first attribute and a second record containing a second attribute, which have the same specific identifier, on the basis of enabling to satisfy a second and a first l-diversity in a second record group and a first record group corresponding to the second record group respectively, and a level of abstraction of correspondence relationship between the first and the second records; and a means that generates an anonymous-group data set including a set of second records so as to satisfy the second l-diversity in the set of second records and so as to satisfy the first l-diversity in a set of corresponding first records.

主权项

1. An information processing device, comprising:
a record extraction unit which extracts a plurality of second records from a data set, which includes plural sets of a first record including a specific identifier and at least one first attribute, and said second record including the same specific identifier as said specific identifier of said first record and at least one second attribute, on the basis that it is possible to satisfy a second l-diversity in a second record group including plural said second record, and it is possible to satisfy a first l-diversity in a first record group including said first record which makes the set with said second record included in said second group, and on the basis of a level of abstraction of a correspondence relationship existing between said first record and said second record; and an anonymous group generation unit which generates an anonymous group data set including said second record, which is extracted by said record extraction unit, so as to satisfy said second l-diversity in said anonymous group data set and so as to satisfy said first l-diversity in said first record group including said first record which makes the set with said second record included in said anonymous group data set, and outputs said generated anonymous group data set.