Anonymization apparatus
An anonymization apparatus includes: an acquiring unit that acquires boundary information indicating the boundary between clusters, specified by performing an anonymization process on predetermined data; and a dividing unit that generates an anonymized cluster set by dividing data possessed by the anonymization apparatus into a plurality of clusters based on the boundary information acquired by the acquiring unit.
1 . An anonymization apparatus comprising:
at least one memory configured to store instructions; and
at least one processor configured to execute the instructions to:
acquire boundary information indicating a boundary between clusters obtained by dividing data with consent for disclosure, specified by performing an anonymization process on the data with the consent; and
generate an anonymized cluster set from data possessed by the anonymization apparatus by dividing the data possessed by the anonymization apparatus including data without consent for disclosure into a plurality of clusters based on the acquired boundary information.
2 . The anonymization apparatus according to claim 1 , wherein the at least one processor is configured to execute the instructions to
integrate or delete a cluster satisfying a predetermined condition among the clusters included by the anonymized cluster set obtained by the dividing.
3 . The anonymization apparatus according to claim 2 , wherein the at least one processor is configured to execute the instructions to
integrate or delete the cluster based on a number of data in the cluster.
4 . The anonymization apparatus according to claim 2 , wherein:
the data includes a common quasi-identifier possessed by a plurality of organizations in common and a unique quasi-identifier; and
the at least one processor is configured to execute the instructions to integrate the cluster based on a parameter calculated by giving different weights to the common quasi-identifier and the unique quasi-identifier.
5 . The anonymization apparatus according to claim 4 , wherein the at least one processor is configured to execute the instructions to
integrate the cluster based on the parameter calculated by giving a greater weight to the common quasi-identifier than to the unique quasi-identifier.
6 . The anonymization apparatus according to claim 1 , wherein the at least one processor is configured to execute the instructions to
acquire the boundary information indicating the boundary between the clusters, specified by performing the anonymization process on a result of merging the data acquired from a plurality of organizations.
7 . The anonymization apparatus according to claim 1 , wherein the at least one processor is configured to execute the instructions to
acquire the boundary information indicating the boundary between the clusters, specified by performing the anonymization process on data including at least part of the data possessed by the anonymization apparatus.
8 . An anonymization method by an information processing apparatus, the method comprising:
acquiring boundary information indicating a boundary between clusters obtained by dividing data with consent for disclosure, specified by performing an anonymization process on the data with the consent; and
generating an anonymized cluster set from data possessed by an anonymization apparatus by dividing the data possessed by the anonymization apparatus including data without consent for disclosure into a plurality of clusters based on the acquired boundary information.