| 摘要 |
PROBLEM TO BE SOLVED: To reduce a risk that k-anonymity is not guaranteed.SOLUTION: A k-anonymity database control server inputs a source data file and outputs a k-anonymity data file. The k-anonymity database control server comprises: a quasi-identifier master file which stores combinations of quasi-identifiers in which items capable of identifying individuals by being combined with other items are obscured, and anonymity IDs for discriminating each of the combinations; and a work file generation unit which replaces content of each item in data with quasi-identifiers by referring to the quasi-identifier master file for each piece of data in the source data file and generates a work file storing the data to which the anonymity IDs for discriminating combinations of the replaced quasi-identifiers are set. The server displays the data of the work file on an input-output device, and, in response to confirmation input from the input-output device, generates the k-anonymity data file from which the data which cannot secure k-anonymity by referring to the anonymity IDs and data designated as private in the input-output device are deleted for each piece of data of the work file. |
