Device and method for managing personal data

Patent metadata

Field	Value
Publication number	US-11714916-B2
Application number	US-202117325253-A
Country	US
Kind code	B2
Filing date	May 20, 2021
Priority date	Aug 11, 2020
Publication date	Aug 1, 2023
Grant date	Aug 1, 2023

Abstract

A data management device manages personal data to which consent information indicating a data user authorized as a receiver has been added. The data management device includes: a cache memory and a processor. When personal data requested by a data user is stored in the cache memory, the processor acquires the requested personal data from the cache memory. When personal data requested by the data user is not stored in the cache memory, the processor acquires the requested personal data from a data holder. The processor decides based on consent information added to the personal data acquired whether to provide the personal data to the data user. When the data management device acquires new personal data from a data holder, the processor decides whether to store the new personal data in the cache memory based on consent information added to the new personal data.

First claim

What is claimed is:

1. A computer-readable non-transitory recording medium having stored therein a data management program for causing a processor to execute a process, the processor being implemented in a device that manages personal data to which consent information indicating an authorized data user has been added, the process comprising:
acquiring, when personal data requested by a data user is stored in a cache memory, the requested personal data from the cache memory;
acquiring, when personal data requested by the data user is not stored in the cache memory, the requested personal data from a data holder;
deciding, based on the consent information added to the personal data acquired from the cache memory or the data holder, whether to provide the personal data acquired from the cache memory or the data holder to the data user; and
deciding, when new personal data is acquired from a data holder, whether to store the new personal data in the cache memory based on the consent information added to the new personal data,
the process of deciding whether to store the new personal data in the cache memory includes
a first process of detecting, based on the consent information added to the new personal data, a first authorized user count indicating a number of data users authorized as receivers of the new personal data, and
a second process of deciding whether to store the new personal data in the cache memory based on the first authorized user count, and

in the second process, the new personal data is stored in the cache memory when the first authorized user count is larger than or equal to a smallest value among authorized user counts for pieces of personal data stored in the cache memory.

2. The computer-readable non-transitory recording medium according to claim 1 , wherein an algorithm for deciding whether to store the new personal data in the cache memory is selected based on an attribute of the new personal data.

3. A computer-readable non-transitory recording medium having stored therein a data management program for causing a processor to execute a process, the processor being implemented in a device that manages personal data to which consent information indicating an authorized data user has been added, the process comprising:
acquiring, when personal data requested by a data user is stored in a cache memory, the requested personal data from the cache memory;
acquiring, when personal data requested by the data user is not stored in the cache memory, the requested personal data from a data holder;
deciding, based on the consent information added to the personal data acquired from the cache memory or the data holder, whether to provide the personal data acquired from the cache memory or the data holder to the data user; and
deciding, when new personal data is acquired from a data holder, whether to store the new personal data in the cache memory based on the consent information added to the new personal data, wherein
the process of deciding whether to store the new personal data in the cache memory includes
a first process of detecting, based on the consent information added to the new personal data, a first authorized user count indicating a number of data users authorized as receivers of the new personal data, and
a second process of deciding whether to store the new personal data in the cache memory based on the first authorized user count, and

in the second process, the new personal data is stored in the cache memory when the first authorized user count is larger than a specified threshold.

4. A computer-readable non-transitory recording medium having stored therein a data management program for causing a processor to execute a process, the processor being implemented in a device that manages personal data to which consent information indicating an authorized data user has been added, the process comprising:
acquiring, when personal data requested by a data user is stored in a cache memory, the requested personal data from the cache memory;
acquiring, when personal data requested by the data user is not stored in the cache memory, the requested personal data from a data holder;
deciding, based on the consent information added to the personal data acquired from the cache memory or the data holder, whether to provide the personal data acquired from the cache memory or the data holder to the data user; and
deciding, when new personal data is acquired from a data holder, whether to store the new personal data in the cache memory based on the consent information added to the new personal data,
the process of deciding whether to store the new personal data in the cache memory includes
a third process of detecting, based on the consent information added to the new personal data, a first pre-reception user count indicating a number of data users who have not been provided with the new personal data yet, among data users authorized as receivers of the new personal data, and
a fourth process of deciding whether to store the new personal data in the cache memory based on the first pre-reception user count.

5. The computer-readable non-transitory recording medium according to claim 4 , wherein
in the fourth process, the new personal data is stored in the cache memory when the first pre-reception user count is larger than or equal to a smallest value among pre-reception user counts for pieces of personal data stored in the cache memory.

6. The computer-readable non-transitory recording medium according to claim 4 , wherein in the fourth process, the new personal data is stored in the cache memory when the first pre-reception user count is larger than a specified threshold.

7. A data management device for managing personal data to which consent information indicating a data user authorized as a receiver has been added, the data management device comprising:
a cache memory; and
a processor configured to
acquire, when personal data requested by a data user is stored in the cache memory, the requested personal data from the cache memory,
acquire, when personal data requested by the data user is not stored in the cache memory, the requested personal data from a data holder,
decide, based on consent information added to the personal data acquired, whether to provide the personal data to the data user, and
decide, when the data management device acquires new personal data from a data holder, whether to store the new personal data in the cache memory based on consent information added to the new personal data,

in the process to decide whether to store the new personal data in the cache memory, the processor performs
a first process of detecting, based on the consent information added to the new personal data, a first authorized user count indicating a number of data users authorized as receivers of the new personal data, and
a second process of deciding whether to store the new personal data in the cache memory based on the first authorized user count, and

in the second process, the new personal data is stored in the cache memory when the first authorized user count is larger than or equal to a smallest value among authorized user counts for pieces of personal data stored in the cache memory.

8. A data management method for managing personal data to which consent information indicating a data user authorized as a receiver has been added, the data management method comprising:
acquiring, when personal data requested by a data user is stored in a cache memory, the requested personal data from the cache memory;
acquiring, when personal data requested by the data user is not stored in the cache memory, the requested personal data from a data holder;
deciding, based on consent information added to the personal data acquired from

Assignees

• Fujitsu Ltd

Inventors

• Mitsunobu Hideki
• Suga Junichi

Classifications

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F21/31

  User authentication · CPC title

• G06F21/79

  in semiconductor storage media, e.g. directly-addressable memories · CPC title