| 摘要 |
<p>The present invention provides an information processing device that performs anonymization such that information about the correspondence relationships between records does not become too unclear. This information processing device is equipped with: a means that extracts multiple second record combinations from combinations of a first record containing a first attribute and a second record containing a second attribute, with the first and second records having the same unique identifier, said extraction being performed on the basis of the ability to satisfy a respective first and second I-diversity in each first record group corresponding to a second record group, and on the basis of the level of abstraction of the correspondence relationships existing between the first and the second records; and a means that generates a data set of an anonymous group comprising a combination of those second records, so as to satisfy the second I-diversity in the combination of those second records and so as to satisfy the first I-diversity in a combination of the corresponding first records.</p> |
