| 摘要 |
<p>This invention provides an anonymization device for generating a dataset with reinforced anonymity such that individual specificity cannot be enhanced even by drawing parallels between quasi-identifiers of a group of records subsequent to k-anonymization. The anonymization device is provided with: a k-anonymization means for generating a k-anonymized dataset by converting intrinsic identification information of an anonymization-target dataset to false identification information and, in addition, converting a quasi-identifier to satisfy a determined k-anonymity; and an anonymity reinforcement means for generating and outputting an anonymity-reinforced dataset by converting quasi-identifiers that always have the same value corresponding to the intrinsic identification information for each same piece of false identification information of the k-anonymized dataset to quasi-identifiers for which instantiation is not possible by drawing parallels between these quasi-identifiers.</p> |
