| 摘要 |
PROBLEM TO BE SOLVED: To allow a generalized hierarchy to be edited in order to get anonymized data suiting an analysis purpose.SOLUTION: On the basis of anonymization object data including combinations of attribute values of a plurality of quasi-identifiers being objects to be anonymized, a generalized hierarchy generation unit 111 generates, for each quasi-identifier, a generalized hierarchy of a tree structure including layers each of which includes one or more nodes having attribute values of which the degrees of anonymization are equal to or higher than those in a lower layer, and appearance frequencies of the attribute values. A generalized hierarchy presentation unit 112 presents, to a user, a generalized hierarchy of a quasi-identifier designated by the user. A generalized hierarchy editing unit 113 updates the generalized hierarchy presented in response to user's editing instruction. In response to user's designating layers of generalized hierarchies of respective quasi-identifiers, an anonymization processing unit 117 generates anonymized data in which attribute values of respective quasi-identifiers included in the anonymization object data are substituted with attribute values of nodes belonging to the designated layers of generalized hierarchies of respective quasi-identifiers. |
