Abstract: When concealing the value of original data by adding a random value to the value of the original data, this random value identification device acquires a user identifier and an attribute name of an attribute of information relating to a user, identifies the correlation between the attributes indicated by the attribute name, acquires at least one attribute value of the attributes of the user identified by the user identifier, and generates a random number for each attribute within a random value range identified on the basis of the identified correlation and the acquired attribute value.

Abstract: To anonymize information from a service-providing apparatus and an information processing apparatus (device), this information processing apparatus is provided with: the an information receiver for receiving anonymized (concealed) information that has been anonymized with anonymizing information; the an anonymized random-number generator for generating random numbers or anonymized random numbers obtained by anonymizing the random numbers with anonymizing information; and a random-number-added information generator for generating random-number-added information on the basis of the anonymized information and the random numbers or anonymized random numbers.

Abstract: Hiding a service providing server from an authentication server is incompatible with involving the service providing server in the selection of the authentication server.

Abstract: An attribute information processing device includes: an attribute information acquiring unit that acquires attribute information; an attribute value acquiring unit that acquires at least two types of attribute values including a first-type attribute value and a second-type attribute value corresponding to an attribute value of the acquired attribute information; a generating unit that determines a function for obtaining an evaluation value from the acquired two or more types of attribute values, determines a acquisition source of the first-type attribute value to be a first-attribute providing device that can provide the first-type attribute value concerning attribute information serving as a comparison target, determines an acquisition source of the second-type attribute value to be a second-attribute providing device different from the first-attribute providing device, and generates attribute evaluation information containing information on the function, an evaluation value, information for identifying the

Abstract: To determine a relation discrimination possibility of a pseudonymous-name communication identifier so that, in each communication layer, no mismatch occurs between a pseudonymous-name communication identifier whose relation can be discriminated and a pseudonymous-name communication identifier whose relation cannot be discriminated. The Relation discrimination possibility determination means 2 determines a relation discrimination possibility of a pseudonymous-name communication identifier of a specific communication layer among a plurality of communication layers to a designated one of relation discrimination possible and relation discrimination impossible.

Abstract: A communication relay system relays communications between communication terminals performing the communications according to a plurality of communication protocols. The communication relay system includes pseudonymous identification information acquiring sections associated with respective communication protocols. Each of the pseudonymous identification information acquiring sections acquires pseudonymous identification information which is information according to the associated communication protocol and is different from terminal identification information for identifying each of the communication terminals.

Abstract: A grouping apparatus manages user information, and executes grouping processing for extracting a subset which matches a predetermined condition from a set of users. A flow control apparatus transmits a set of users to one of a plurality of grouping apparatuses, and transmits a condition used in grouping processing to each of the plurality of grouping apparatuses. One of the grouping apparatuses transmits, to another grouping apparatus, a first subset which is extracted by executing grouping processing on the set transmitted from the flow control apparatus. The other grouping apparatus extracts a second subset by executing grouping processing on the first subset transmitted from the one of the grouping apparatuses.

Abstract: In order to perform communication while configuring a disclosure level on an attribute of a user to be disclosed to a communication destination to a designated disclosure level, there is provided a communication relaying device selecting means (2) that selects, among a plurality of communication relaying devices (401-403) capable of relaying communication to a communication destination terminal (501), a communication relaying device corresponding to a disclosure level designated as the disclosure level on the attribute of the user from among disclosure levels in multiple steps. There is provided a communication means (4) that communicates to the communication destination terminal (501) through the communication relaying device selected by the communication relaying device selecting means (2).

Abstract: Hiding a service providing server from an authentication server is incompatible with involving the service providing server in the selection of the authentication server.

Abstract: It is an object to efficiently deliver a message to a user who subscribes to a plurality of telecommunications carriers.

Abstract: A message delivery system for delivering a message to a user includes: a plurality of delivery systems (300A, 300B) which are run by a plurality carriers respectively and deliver information to subscribers to the respective carriers; and an ID management means (100). When a delivery means receives a request to deliver a message, the delivery means transmits to the ID management means a demand for user ID resolution to deliver the message. Upon receiving the demand for user ID resolution from the delivery means, the ID management means resolves a user ID to which the carrier running the delivery means can deliver and a delivery of the message in question has not been allocated, and returns the user ID as a user ID candidate to the delivery means. The delivery means delivers the message to the user identified by the user ID included in the user ID candidate.

Abstract: A communication relay system relays communications between communication terminals performing the communications according to a plurality of communication protocols. The communication relay system includes pseudonymous identification information acquiring sections associated with respective communication protocols. Each of the pseudonymous identification information acquiring sections acquires pseudonymous identification information which is information according to the associated communication protocol and is different from terminal identification information for identifying each of the communication terminals.

Abstract: To determine a relation discrimination possibility of a pseudonymous-name communication identifier so that, in each communication layer, no mismatch occurs between a pseudonymous-name communication identifier whose relation can be discriminated and a pseudonymous-name communication identifier whose relation cannot be discriminated. The Relation discrimination possibility determination means 2 determines a relation discrimination possibility of a pseudonymous-name communication identifier of a specific communication layer among a plurality of communication layers to a designated one of relation discrimination possible and relation discrimination impossible.

Abstract: In order to perform communication while configuring a disclosure level on an attribute of a user to be disclosed to a communication destination to a designated disclosure level, there is provided a communication relaying device selecting means (2) that selects, among a plurality of communication relaying devices (401-403) capable of relaying communication to a communication destination terminal (501), a communication relaying device corresponding to a disclosure level designated as the disclosure level on the attribute of the user from among disclosure levels in multiple steps. There is provided a communication means (4) that communicates to the communication destination terminal (501) through the communication relaying device selected by the communication relaying device selecting means (2).

Abstract: When a viewer views content, it is reproduced by a reproduction procedure depending on a dynamic condition set in the content. Here, a content object data input unit obtains an externally-input content object. The content object is stored in a content object data retention unit, if necessary. The content object includes a reproduction rule and a content data. A reproduction rule evaluation and execution unit obtains the reproduction rule in the content object and performs processing in accordance with the reproduction rule. The reproduction unit reproduces a reproducible data specified by the reproduction rule evaluation and execution unit. An identifier management unit retains an identifier of a content object reproduction device and provides the identifier upon request. It is thus possible to reproduce in accordance with the reproduction rule set in the content object data and to control the reproduction procedure depending on the dynamic condition.

Abstract: A system for avoiding notification of unwanted information, which can reduce the chance of information becoming a subject of conversation that a communication partner does not want to know, during the communication with the partner. The system comprises an unwanted-information storage unit, a known information storage unit, a matching decision unit, and a warning output unit. The unwanted-information storage unit stores unwanted information items that a user does not want to know, in association with the users. The known information storage unit stores known information items that a user has already known, in association with the user. The matching decision unit finds a communication partner who knows an information item that a user does not want to know, on the basis of the known information items stored in the known information storage unit and the unwanted information items stored in the unwanted-information storage unit.