Data recording apparatus, data recording method, data recording program, system, method, and program

Abstract

Provided is a data recording apparatus including a key exchange unit configured to exchange a first encryption key with a system in response to authentication of the system, a data collection unit configured to collect measurement data obtained by measuring a physical quantity associated with a measurement target, a data recording unit configured to record the measurement data, and a data transmission unit configured to transmit the measurement data encrypted using the first encryption key to the system. Further provided is a system including a key management unit configured to exchange a first encryption key with a data recording apparatus in response to authentication of the data recording apparatus, a data obtaining unit configured to obtain measurement data obtained by measuring a physical quantity associated with a measurement target, the measurement data being encrypted using the first encryption key by the data recording apparatus, and a data management unit configured to manage the measurement data using a distributed ledger technology.

Description

Technical Field

[0001] The present invention relates to a data recording device, a data recording method, a data recording program, a system, a method and a program. Background Art

[0002] Patent Document 1 describes that "in order to provide an infrastructure in which data can be recorded, shared, and verified while maintaining the privacy and security of the data, a system, method, and computer program product are provided for applying the IoT concept to a food system by using a blockchain."

[0003] Patent Document 1: Specification of U.S. Patent Application Publication No. 2018 / 0285810. Summary of the Invention

[0004] According to a first aspect of the present invention, a data recording device is provided. The data recording device may include a key exchange unit configured to exchange a first encryption key with a system in response to authentication of the system. The data recording device may include a data collection unit configured to collect measurement data obtained by measuring a physical quantity associated with a measurement target. The data recording device may include a data recording unit configured to record the measurement data. The data recording device may include a data transmission unit configured to transmit the measurement data encrypted using the first encryption key to the system.

[0005] The key exchange unit may be configured to exchange a second encryption key with equipment capable of obtaining the measurement data, and the data collection unit may be configured to collect the measurement data encrypted by the equipment using the second encryption key.

[0006] The second encryption key may be the same as the first encryption key.

[0007] The data transmission unit may be configured to transmit identification information for identifying its own device to the system together with the measurement data encrypted using the first encryption key.

[0008] The system can be configured to use distributed ledger technology to manage measurement data.

[0009] According to a second aspect of the present invention, a data logging method is provided. The data logging method may include exchanging a first encryption key with a system in response to authentication of the system. The data logging method may include collecting measurement data obtained by measuring a physical quantity associated with a measurement target. The data logging method may include recording the measurement data. The data logging method may include transmitting the measurement data encrypted using the first encryption key to the system.

[0010] According to a third aspect of the present invention, a data logging program is provided. The data logging program can be executed by a computer. The data logging program can cause the computer to function as a key exchange unit configured to exchange a first encryption key with the system in response to authentication of the system. The data logging program can cause the computer to function as a data collection unit configured to collect measurement data obtained by measuring a physical quantity associated with a measurement target. The data logging program can cause the computer to function as a data logging unit configured to log the measurement data. The data logging program can cause the computer to function as a data transmission unit configured to transmit the measurement data encrypted using the first encryption key to the system.

[0011] According to a fourth aspect of the present invention, a system is provided. The system may include a key management unit configured to exchange a first encryption key with a data recording device in response to authentication by the data recording device. The system may also include a data acquisition unit configured to acquire measurement data obtained by measuring a physical quantity associated with a measurement target, the measurement data being encrypted by the data recording device using the first encryption key. The system may also include a data management unit configured to manage the measurement data using distributed ledger technology.

[0012] The system may further include a query receiving unit configured to receive a query regarding the measurement target, and a query responding unit configured to respond to the query with reference to the measurement data managed using the distributed ledger technology.

[0013] The query receiving unit may be configured to receive a query for requesting disclosure of measurement data associated with a measurement target, and the query responding unit may be configured to transmit a response including the measurement data managed using a distributed ledger technology.

[0014] The query receiving unit may be configured to receive a query requesting an indicator of a value to be added to the measurement target, and the query responding unit may be configured to transmit a response including the indicator of the value calculated based on the measurement data managed using the distributed ledger technology.

[0015] The query receiving unit may be configured to receive a query requesting an indicator of a consideration added to the value of the measurement target, and the query responding unit may be configured to transmit a response including the indicator of the consideration calculated based on the measurement data managed using the distributed ledger technology.

[0016] According to a fifth aspect of the present invention, a method is provided. The method may include exchanging a first encryption key with a data logging device in response to authentication of the data logging device. The method may include obtaining measurement data obtained by measuring a physical quantity associated with a measurement target, the measurement data being encrypted by the data logging device using the first encryption key. The method may include managing the measurement data using distributed ledger technology.

[0017] According to a sixth aspect of the present invention, a program is provided. The program can be executed by a computer. The program can cause the computer to function as a key management unit configured to exchange a first encryption key with a data recording device in response to authentication by the data recording device. The program can cause the computer to function as a data acquisition unit configured to obtain measurement data obtained by measuring a physical quantity associated with a measurement target, the measurement data being encrypted by the data recording device using the first encryption key. The program can cause the computer to function as a data management unit configured to manage the measurement data using distributed ledger technology.

[0018] The above summary of the invention does not necessarily describe all necessary features of an embodiment of the present invention. The present invention may be a sub-combination of the above features. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 The data recording apparatus 200 and the system 300 according to the present embodiment are illustrated, as well as the communication network 10 , the equipment 20 , and the terminal 30 .

[0020] Figure 2 One example of a block diagram of the data recording apparatus 200 according to the present embodiment is illustrated.

[0021] Figure 3 An example of a block diagram of a system 300 according to the present embodiment is illustrated.

[0022] Figure 4 One example of a flow of configuring a network by using the data recording apparatus 200 and the system 300 according to the present embodiment is illustrated.

[0023] Figure 5 One example of a flow of collecting measurement data by using the data recording apparatus 200 and the system 300 according to the present embodiment is illustrated.

[0024] Figure 6 An example of a process of searching for and publishing measurement data by using the system 300 according to the present embodiment is illustrated.

[0025] Figure 7 One example of a flow of calculating a price by using the data recording apparatus 200 and the system 300 according to the present embodiment is illustrated.

[0026] Figure 8 An example of a process of reaching an agreement by using the system 300 according to the present embodiment is illustrated.

[0027] Figure 9 An example of an overall computer 2200 is illustrated upon which portions of aspects of the present invention may be implemented. DETAILED DESCRIPTION

[0028] Hereinafter, the present invention will be described by way of embodiments of the present invention, but the following embodiments are not intended to limit the present invention according to the claims. All combinations of features described in the embodiments are not necessarily necessary to solve the means of the present invention.

[0029] Figure 1 The diagram illustrates a data recording device 200 and a system 300 according to this embodiment, as well as a communication network 10, equipment 20, and a terminal 30. In this embodiment, the data recording device 200 collects measurement data of physical quantities associated with a measurement target obtained by the equipment 20 in a time series manner. Then, the data recording device 200 encrypts the measurement data using an encryption key exchanged with the system 300 in response to authentication by the system 300, and transmits the encrypted measurement data to the system 300. The system 300 obtains the measurement data encrypted by the data recording device 200 in a time series manner via, for example, the communication network 10, and manages the encrypted measurement data by using distributed ledger technology (DLT). In this way, in this embodiment, a novel method is proposed in which a data recorder that can securely record data and a DLT / blockchain (hereinafter also referred to as DLT or blockchain) are integrated with each other.

[0030] In this embodiment, the data recording device 200 and system 300 are described as an example of a food cold chain. This food cold chain is compatible with the technology according to this embodiment because the properties of the measurement target change during transportation (for example, due to temperature, humidity, vibration, etc. during transportation and storage, causing quality degradation) and a large number of stakeholders are involved during transportation. However, the configuration is not limited to this. The technology according to this embodiment can be applied to other supply chain management, such as pharmaceuticals, crude oil, artwork, animals, and plants, in which the properties of the measurement target change during transportation, and can also be applied to management other than supply chain management.

[0031] The communication network 10 is a network configured to connect multiple computers to one another. For example, the communication network 10 may be a global network in which multiple computer networks are interconnected, and as an example, the communication network 10 may be the Internet using the Internet Protocol, etc. Alternatively, the communication network 10 may be implemented as a dedicated circuit. The communication network 10 connects the terminal 30, the data recording device 200, and the system 300 to one another.

[0032] The equipment 20 may be capable of obtaining measurement data obtained by measuring a physical quantity associated with a measurement target (e.g., a product such as sake, wine, and frozen food) set as a management target by the system 300. As an example, the equipment 20 may be an IoT sensor that can measure environmental data of the atmosphere surrounding the measurement target, and may be, for example, a temperature sensor, a humidity sensor, a vibration sensor, etc. Furthermore, for example, the equipment 20 may be a sheet-type sensor attached to the measurement target and configured to obtain environmental data of the atmosphere surrounding the measurement target, or may be a compact sensor embedded in a bottle label, cap, cork, etc.

[0033] Furthermore, as will be described below, the equipment 20 may be capable of exchanging a second encryption key with the data recording device 200. The equipment 20 can then encrypt the measurement data obtained through the measurement using the second encryption key and transmit the encrypted measurement data to the data recording device 200. Note that if the equipment 20 does not have a network communication function, the equipment 20 may transmit the measurement data to the data recording device 200 via an edge / gateway, etc., not shown in the figure. In this embodiment, multiple pieces of equipment 20 capable of obtaining such measurement data can be connected to the data recording device 200 in a wired or wireless manner.

[0034] The terminal 30 is a device used by the user as an input and output terminal, such as a personal computer (PC), a smartphone, or a handheld terminal. The user accesses necessary information via a web browser, a business intelligence (BI) tool, a dedicated application for the terminal, etc. operated on the terminal 30. In this embodiment, the above-mentioned multiple terminals 30 can be connected to the system 300 via the communication network 10.

[0035] The data recording device 200 is a secure data recorder equipped with security functions and a connection function to a distributed ledger technology. Specifically, the data recording device 200 can be equipped with wired or wireless input and output (I / O) functions for connecting to multiple pieces of equipment 20. In this context, the wired function can be, for example, a signal transmission method such as a universal asynchronous receiver / transmitter (UART). In addition, the wireless function can be, for example, a wireless communication method such as Bluetooth (registered trademark) Low Energy (LE) or a contactless tag (such as a radio frequency identifier (RFID) or near field communication (NFC)).

[0036] In addition, the data recording device 200 may be provided with a data processing function for performing analog-to-digital / digital-to-analog (AD / DA) conversion, data formatting, etc. In addition, the data recording device 200 may be provided with a database configured to record and store data. In addition, the data recording device 200 may be provided with a data management function for performing data search, access management, etc.

[0037] In addition, the data recording device 200 may be provided with a security management function for performing user management for managing user IDs or passwords, an audit trail for storing information such as operation records of equipment and error messages in an unchangeable state, cryptographic processing for encrypting and decrypting electronic signatures and data, and key management for managing keys used to encrypt and decrypt data.

[0038] Furthermore, the data recording device 200 may be equipped with a data viewer function for providing a user interface for operating the data recording device, enabling the user to operate and set up the device, display data trend graphs, and the like. Furthermore, the data recording device 200 may be equipped with a DLT connection function having a communication method (such as a wired LAN or wireless LAN) or a network protocol (such as HTTP or FTP) for connecting to a distributed ledger technology. Details of the data recording device 200 will be described below.

[0039] System 300 implements distributed ledger technology applications and platforms through software. System 300 can be a computer such as a personal computer (PC), tablet computer, smartphone, workstation, server computer, or general-purpose computer, or a computer system comprising multiple interconnected computers. These computer systems are also computers in a broad sense. Furthermore, system 300 can be implemented by one or more virtual computers that can be executed within a computer. Alternatively, system 300 can be a dedicated computer capable of implementing distributed ledger technology applications and platforms, or it can be dedicated hardware implemented using dedicated circuitry. Furthermore, system 300 can be implemented in cloud computing or on-premises server environments.

[0040] The application can be applied to each stakeholder of supply chain management. As an example, examples of stakeholders in the food cold chain include manufacturers, wholesalers, retail stores, transportation companies, consumers, etc. In this article, the application for each stakeholder can have dedicated functions according to each workflow. For example, the application for consumers can have a function for specifying a product (measurement target) and displaying quality information on which the price of the product is based. At this time, as a method for specifying the product, a method of scanning a QR code (registered trademark) or the like can be adopted. In addition, as a method for displaying quality information, various methods such as a method of displaying the quality of a score and a method of displaying the presence or absence of a temperature deviation by using a trend graph can be adopted.

[0041] In addition, the application can have an added value calculation function for calculating and recording the added value of the product based on the data. As a method of calculating the added value, different methods can be used depending on the type of target product or data. As an example, when illustrating the temperature management of products that are susceptible to temperature changes (such as sake or wine), an algorithm of "giving a negative added value corresponding to the time zone during which the temperature deviation occurs" or "giving a higher added value to those products with a smaller amount of temperature change" can be used. In addition, since the quality of sake is also known to be affected by ultraviolet rays, the added value calculation can be reflected by the calculated value of the amount of exposure to ultraviolet rays, the presence or absence of measures to cut off ultraviolet rays, etc.

[0042] Furthermore, the application may have a database that stores data necessary for the application and added value calculations for each of the stakeholders mentioned above.

[0043] The platform can have a database having the characteristics that data is distributed and maintained in servers that are geographically far away from each other, and the recorded data will not be lost, and even if some of the servers are hacked, the database continues to operate. The above-mentioned database is characterized in that a data storage unit called a block is generated at a specific time, and has a data verification model called a consensus algorithm (consensus building) maintained between servers. Representative implementation examples include technologies such as Ethereum and Hyperledger. In addition, examples of consensus algorithms for ensuring the tamper-proofing of data include technologies such as proof of work (PoW) and proof of authority (PoA). In this embodiment, as the database of the platform, a database in which any of the above-mentioned technologies is adopted can be used.

[0044] In addition, the platform can have smart contract functionality for automatically executing value exchanges based on added value calculations. In this context, smart contracts are a scheme for automatically executing contracts on a blockchain.

[0045] In addition, the platform can have a token / virtual currency exchange function for expressing the value exchanged between stakeholders as digital data such as tokens or cryptocurrencies, and circulate tokens or cryptocurrencies when the added value calculated by the added value calculation function is automatically executed by the smart contract.

[0046] In addition, the platform may have a user management function for managing the IDs and information such as passwords of users or devices that can access the system 300. In addition, the platform may have an authentication and authorization function for managing and controlling authentication of users or devices, authorization to access data, and the like.

[0047] In addition, the platform may have a cryptographic processing engine configured to perform encryption and decryption of data. In this case, for cryptographic processing, cryptographic algorithms such as Advanced Encryption Standard (AES), Secure Hash Algorithm (SHA), Rivest-Shamir-Adlema Cryptography (RSA), and Elliptic Curve Cryptography (ECC) may be used.

[0048] Furthermore, the platform may include a key management function for managing keys used for cryptographic processing. In this context, the keys may be distributed to each data recording device 200, each terminal 30, or each user. Representative examples of key encryption include public key encryption methods, and technologies such as public key infrastructure (PKI) may be used as a method for managing a pair of private and public keys.

[0049] Furthermore, the platform may have an IoT equipment connection function for connecting to various pieces of equipment such as the data logging apparatus 200 via the communication network 10. Details of the system 300 will also be described below.

[0050] Figure 2 The diagram illustrates an example of a block diagram of a data recording device 200 according to this embodiment. Note that these blocks are functionally separate functional blocks and do not necessarily correspond to actual device configurations. That is, even if a block is illustrated in this diagram, it does not necessarily consist of a single device. Furthermore, even if separate blocks are illustrated in this diagram, they do not necessarily consist of separate devices. The data recording device 200 includes a registration request unit 210, a key exchange unit 220, a data collection unit 230, a data recording unit 240, an encryption unit 250, and a data transmission unit 260.

[0051] For example, the registration request unit 210 transmits a request for registering its own data recording device 200 to the system 300 via the communication network 10 by the DLT connection function. At this time, the registration request unit 210 may transmit identification information for identifying its own data recording device 200 to the system 300.

[0052] The key exchange unit 220 exchanges the first encryption key with the system 300 in response to the system 300 authenticating its own data recording device 200. As one example, through the security management function, the key exchange unit 220 may exchange the first encryption key with the system 300 by obtaining a first public key corresponding to a first private key owned by the system 300 from the system 300 using a public key encryption method.

[0053] Furthermore, the key exchange unit 220 exchanges a second encryption key with the equipment 20 capable of obtaining the measurement data. As an example, through the security management function, the key exchange unit 220 can exchange the second encryption key with the equipment 20 by providing the equipment 20 with a second public key corresponding to the second private key possessed by the data recording device 200 using a public key encryption method. However, this configuration is not limited to this. The key exchange unit 220 can also exchange the second encryption key with the equipment 20 by directly providing the first public key obtained from the system 300 to the equipment 20. In other words, the second encryption key can be the same as the first encryption key. In this way, the encryption applied to the measurement data by the data recording device 200 and the equipment 20 can be implemented using the same encryption key.

[0054] The data collection unit 230 collects measurement data obtained by measuring physical quantities associated with the measurement target. As an example, the data collection unit 230 collects measurement data obtained by measuring physical quantities associated with the measurement target from multiple pieces of equipment 20 connected in a wired or wireless manner through an I / O function. For example, in a food cold chain, the data collection unit 230 can obtain environmental data such as temperature, humidity, and vibration in the surrounding atmosphere of the measurement target (product) during transportation or storage from multiple pieces of equipment 20 in a time series manner. Note that, as described above, in the case of exchanging a second encryption key with the equipment 20, the data collection unit 230 can collect measurement data encrypted by the equipment 20 using the second encryption key.

[0055] The data recording unit 240 records the measurement data. For example, using the security management function, the data recording device 200 decrypts the measurement data collected by the data collection unit 230 using the second private key corresponding to the second public key. The data recording device 200 then uses the data processing function to perform A / D / DA conversion or data formatting on the measurement data. The data recording unit 240 then records the measurement data obtained through decryption and data processing in a database in a time-series manner.

[0056] The encryption unit 250 encrypts the measurement data. As an example, the encryption unit 250 encrypts the measurement data recorded in the database by the data recording unit 240 in a time series manner using a first public key (ie, a first encryption key).

[0057] The data transmission unit 260 transmits the measurement data encrypted using the first encryption key to the system 300. As an example, the data transmission unit 260 transmits the measurement data encrypted using the first encryption key by the encryption unit 250 via the DLT connection function to the system 300 via the communication network 10. At this time, the data transmission unit 260 may transmit identification information for identifying its own data recording device 200 together with the measurement data encrypted using the first encryption key to the system 300. The system 300 corresponding to the transmission destination of the measurement data manages the measurement data using distributed ledger technology.

[0058] Figure 3 The diagram illustrates an example of a block diagram of a system 300 according to this embodiment. Note that these blocks are functional blocks, each functionally separate, and do not necessarily correspond to an actual device configuration. That is, even if a block is illustrated in this diagram, that block is not necessarily configured by a single device. Furthermore, even if separate blocks are shown in this diagram, those blocks are not necessarily configured by separate devices. System 300 includes a registration unit 310, a key management unit 320, a data acquisition unit 330, a decryption unit 340, a data management unit 350, a query receiving unit 360, and a query response unit 370.

[0059] Registration unit 310 registers data recording device 200. For example, system 300 receives a registration request from data recording device 200 via communication network 10 using the platform's IoT device connection function. Registration unit 310 then authenticates data recording device 200, which has transmitted the request, using the platform's authentication and authorization functions. Furthermore, registration unit 310 grants resource access by granting authorization to data recording device 200, which has been authenticated by the platform's authentication and authorization functions.

[0060] The key management unit 320 exchanges the first encryption key with the data recording device 200 in response to the authentication of the data recording device 200. As one example, the key management unit 320 may exchange the first encryption key with the data recording device 200 by providing the first public key corresponding to the first private key owned by the system 300 to the data recording device 200 using a public key encryption method through a key management function of the platform.

[0061] The data obtaining unit 330 obtains measurement data obtained by measuring a physical quantity associated with a measurement target that has been encrypted using the first encryption key by the data recording device 200. As one example, the data obtaining unit 330 obtains the measurement data encrypted using the first encryption key by the data recording device 200 from the data recording device 200 via the communication network 10 using the IoT equipment connection function of the platform.

[0062] The decryption unit 340 decrypts the measurement data obtained by the data obtaining unit 330. As an example, the decryption unit 340 decrypts the measurement data obtained by the data obtaining unit 330 by using a first private key corresponding to a first public key through a cryptographic processing engine of the platform.

[0063] The data management unit 350 manages the measurement data decrypted by the decryption unit 340 by using a distributed ledger technology. As an example, the data management unit 350 distributes and maintains and manages the measurement data in geographically separated servers and the like through a database of the platform.

[0064] The query receiving unit 360 receives a query about a measurement target. As one example, the query receiving unit 360 receives a query about a measurement target from the terminal 30 via the communication network 10 for each stakeholder through an application.

[0065] The query response unit 370 responds to the query by referring to the measurement data managed using the distributed ledger technology. As an example, the query response unit 370 transmits a response according to the content of the query to the terminal 30 via the communication network 10 for each stakeholder through the application.

[0066] Figure 4 An example of a flow of constructing a network using the data recording apparatus 200 and the system 300 according to the present embodiment is illustrated. At step 410, for example, in response to a user pressing a power button, the data recording apparatus 200 is activated.

[0067] In step 420, the data recording device 200 requests the system 300 to register its own device. As one example, the registration request unit 210 transmits a registration request including identification information for identifying its own device to the platform of the system 300 via the communication network 10.

[0068] In step 430, the platform of system 300 authenticates and authorizes data recording device 200. As an example, registration unit 310 receives a registration request from data recording device 200 via communication network 10. Registration unit 310 then uniquely identifies data recording device 200 that has transmitted the registration request based on identification information included in the registration request, and authenticates data recording device 200. Furthermore, registration unit 310 grants authorization to authenticated data recording device 200 and authorizes resource access.

[0069] In step 440, in response to the system 300 authenticating the data recording device 200, the data recording device 200 exchanges the first encryption key with the platform of the system 300. That is, the key exchange unit 220 exchanges the first encryption key with the system 300 in response to the system 300 authenticating the data recording device 200. Furthermore, the key management unit 320 exchanges the first encryption key with the data recording device 200 in response to the system 300 authenticating the data recording device 200. As one example, the key management unit 320 may provide the data recording device 200 with a first public key corresponding to a first private key owned by the system 300 using a public key encryption method, and the key exchange unit 220 may obtain the first public key from the system 300, thereby exchanging the first encryption key between them.

[0070] In step 450 , the data recording device 200 is connected to the equipment 20 . At this point, the data recording device 200 may establish connections with multiple pieces of equipment 20 .

[0071] In step 460, the second encryption key is exchanged between the data recording device 200 and the equipment 20. That is, the key exchange unit 220 exchanges the second encryption key with the equipment 20 capable of obtaining the measurement data. As one example, the key exchange unit 220 may use a public key encryption method to provide the equipment 20 with a second public key corresponding to the second private key held by the data recording device 200, and the equipment 20 may obtain the second public key from the data recording device 200, thereby exchanging the second encryption key. Alternatively, the key exchange unit 220 may directly provide the equipment 20 with the first public key obtained from the system 300 in step 440, and the equipment 20 may obtain the first public key from the data recording device 200, thereby exchanging the second encryption key. That is, the second encryption key may be the same as the first encryption key.

[0072] Figure 5 The diagram illustrates an example of a process for collecting measurement data using the data logging device 200 and system 300 according to this embodiment. In step 512, the device 20 measures a physical quantity associated with a measurement target. For example, the device 20 measures environmental data such as temperature, humidity, and vibration in the atmosphere surrounding the measurement target (product) during transportation or storage in a food cold chain.

[0073] In step 514 , the equipment 20 encrypts the data measured in step 512 by using the second encryption key exchanged with the data recording device 200 in step 460 .

[0074] Then, in step 516, the equipment 20 transmits the measurement data encrypted using the second encryption key in step 514 to the data recording device 200. In this way, the data collection unit 230 collects measurement data obtained by measuring the physical quantity associated with the measurement target, more specifically, the measurement data encrypted by the equipment 20 using the second encryption key.

[0075] In step 522, the data recording device 200 decrypts the measurement data collected in step 516. For example, if the equipment 20 encrypted the measurement data using the second public key, the data recording device 200 decrypts the collected measurement data using the second private key. Note that, for example, if the data recording device 200 does not have the private key corresponding to the public key used by the equipment 20 or the like to encrypt the measurement data, the data recording device 200 may be configured not to decrypt the collected measurement data. In other words, the data recording device 200 may skip the processing in step 522.

[0076] In step 524, the data recording device 200 records the measurement data decrypted in step 522. As an example, the data recording unit 240 records the measurement data decrypted in step 522 and subjected to AD / DA conversion or data formatting in a database in a time series manner.

[0077] In step 526, the data recording device 200 encrypts the measurement data recorded in step 524. As an example, the encryption unit 250 encrypts the measurement data recorded by the data recording unit 240 in step 524 by using the first encryption key exchanged with the system 300 in step 440.

[0078] In step 528, the data recording device 200 transmits the measurement data encrypted in step 526 to the platform of the system 300. As an example, the data transmission unit 260 transmits the measurement data encrypted by the encryption unit 250 using the first encryption key to the platform of the system 300 via the communication network 10. At this time, the data transmission unit 260 may transmit identification information for identifying its own data recording device 200, along with the measurement data encrypted using the first encryption key, to the platform of the system 300. In this way, the data obtaining unit 330 obtains the measurement data obtained by measuring the physical quantity associated with the measurement target, which has been encrypted by the data recording device 200 using the first encryption key, and the identification information of the data recording device 200 that transmitted the measurement data.

[0079] In step 532, the platform of the system 300 decrypts the measurement data obtained in step 528. As an example, the decryption unit 340 decrypts the measurement data obtained in step 528 by using the first private key.

[0080] In step 534, the platform of the system 300 records the measurement data decrypted in step 532 in the database of the DLT. In this way, the data management unit 350 manages the measurement data decrypted in step 532 through the database of the platform by using the distributed ledger technology.

[0081] In step 536 , the platform of the system 300 records the data for the application among the measurement data recorded in step 534 in a database of the application.

[0082] Until now, it's been known that data authenticity and traceability can be achieved through the use of distributed ledger technology. However, IoT sensors and IoT equipment outside of blockchain, namely, IoT sensors and IoT devices in related fields, generally do not maintain the same level of security (authenticity and traceability) as blockchain. Therefore, no matter how robust and reliable a blockchain system may be, this level of security may not apply outside of blockchain. Furthermore, while standalone secure data loggers exist, integration with blockchain has yet to be implemented, and such data loggers have yet to be established as a basis for trust. In contrast, according to this embodiment, a novel method is proposed in which a data logger that can securely record data is integrated with a DLT / blockchain. More specifically, in this embodiment, in response to authentication by a system 300 implementing a DLT platform, the data logging device 200 encrypts the measurement data using an encryption key exchanged with the system 300. In this way, according to this embodiment, data authenticity and traceability can be achieved across the entire system, that is, both within and outside the blockchain. This can, for example, increase transparency into product quality, which has traditionally been a black box to consumers.

[0083] Figure 6 The following diagram illustrates an example of a process for searching and publishing measurement data using system 300 according to this embodiment. In step 610, the application of system 300 logs into the platform. For example, a user operates terminal 30 and accesses the application for each stakeholder via a web browser, etc., operated on terminal 30. The user then enters their user ID or password to log into the platform from the application.

[0084] In step 620, the application of system 300 specifies the product to be set as the target (measurement target). For example, if the product is wine, the user uses terminal 30 to scan a QR code attached to the bottle. Terminal 30 then transmits the identification information read from the QR code and a request to disclose the measurement data associated with the product to the application. In this way, query receiving unit 360 receives a query from terminal 30 requesting disclosure of the measurement data associated with the measurement target. In this way, the application of system 300 specifies the product for which disclosure of measurement data is requested.

[0085] In step 630 , the application of system 300 provides the platform with data related to the query received in step 620 .

[0086] In step 640 , the platform of the system 300 queries the application's database, DLT, and data logging device 200 in response to the query data supplied from the application in step 630 , and searches for and collects measurement data associated with the specified product.

[0087] In step 650, the platform of the system 300 checks whether the measurement data collected in step 640 has been tampered with based on the DLT. At this time, the platform can confirm the authenticity of the data by accessing the data recording device 200.

[0088] In step 660 , the platform of the system 300 provides the set of measurement data whose authenticity was confirmed in step 650 to the application.

[0089] In step 670, the application of system 300 publishes the set of measurement data supplied from the platform in step 660. As an example, query response unit 370 transmits a response to terminal 30, the response including the set of measurement data supplied from the platform in step 660, i.e., measurement data managed using distributed ledger technology.

[0090] In this manner, in the system 300 , the query receiving unit 360 may receive a query regarding a measurement target, and the query responding unit 370 may refer to the measurement data managed using the distributed ledger technology and, as one example of a response to the query, transmit a response to the query requesting disclosure of the measurement data, the response including the measurement data managed using the distributed ledger technology.

[0091] Figure 7 The figure illustrates an example of a price calculation process using the data recording device 200 and the system 300 according to the present embodiment. In this figure, the case where stakeholders, namely the manufacturer, transportation company A, and transportation company B, respectively have data recording devices 200P, 200A, and 200B is described as an example (unless otherwise required, these are collectively referred to as data recording devices 200).

[0092] In step 710 , the data recording device 200P records measurement data obtained by measuring a physical quantity associated with a measurement target, the measurement data being collected during a period in which the measurement target is managed by a manufacturer.

[0093] In step 712 , the data recording device 200P encrypts the measurement data recorded in step 710 by using the encryption key exchanged with the system 300 , and then transmits the encrypted measurement data to the platform of the system 300 .

[0094] In step 714, the platform of system 300 records the measurement data transmitted in step 712 in the DLT. Based on the recorded measurement data, the platform calculates the value to be added to the measurement target according to a predetermined algorithm. The platform then records the calculated added value as points.

[0095] Similarly, in step 720 , the data recording device 200A records measurement data obtained by measuring a physical quantity associated with the measurement target, the measurement data being collected during a period in which the measurement target is managed by the transportation company A.

[0096] In step 722 , the data recording device 200A encrypts the measurement data recorded in step 720 by using the encryption key exchanged with the system 300 , and then transmits the encrypted measurement data to the platform of the system 300 .

[0097] In step 724, the platform of system 300 records the measurement data transmitted in step 722 in the DLT. Based on the recorded measurement data, the platform calculates the value to be added to the measurement target according to a predetermined algorithm. The platform then records the calculated added value as points.

[0098] Similarly, in step 730 , the data recording device 200B records measurement data obtained by measuring a physical quantity associated with the measurement target, the measurement data being collected during a period in which the measurement target is managed by the transportation company B.

[0099] At step 732 , the data recording device 200B encrypts the measurement data recorded in step 730 by using the encryption key exchanged with the system 300 , and then transmits the encrypted measurement data to the platform of the system 300 .

[0100] In step 734, the platform of system 300 records the measurement data transmitted in step 732 in the DLT. Based on the recorded measurement data, the platform calculates the value to be added to the measurement target according to a predetermined algorithm. The platform then records the calculated added value as points.

[0101] At step 740, the retail store application in system 300 requests the platform to perform pricing for the added value of a specified product (measurement target). For example, a user operates terminal 30 and accesses the retail store application via a web browser or the like operating on terminal 30. Terminal 30 then transmits product identification information and a request for an indicator of the added value of the measurement target to the retail store application. In this manner, query receiving unit 360 receives the product (measurement target) identification information and a query requesting an indicator of the value to be added to the measurement target from terminal 30. The retail store application then provides data related to the received query to the platform.

[0102] In step 750 , the platform of the system 300 determines an added value price according to a predetermined algorithm based on the added value points calculated in steps 714 , 724 , and 734 .

[0103] In step 760, the platform of system 300 supplies the added value price determined in step 750 to the application for the retail store. Then, query response unit 370 transmits a response to terminal 30, the response including the added value price determined by the platform, i.e., an indicator of the value calculated based on the measurement data managed using the distributed ledger technology.

[0104] In step 770, the retailer determines the product's selling price based on the value-added price provided in step 760. For example, if the manufacturer's recommended retail price for sake is 2,000 yen, and if the product's quality is expected to remain high due to satisfactory management prior to delivery from the manufacturer to the retail store, the retailer may sell the product at 2,100 yen, including a 100 yen discount for added value. Alternatively, if the manufacturer's recommended retail price for sake is 2,000 yen, and if the product's quality is expected to decline due to unsatisfactory management prior to delivery from the manufacturer to the retail store, the retailer may sell the product at 1,900 yen, including a 100 yen discount. Note that the actual selling price may be determined manually by the retailer by referring to the value-added price, or may be automatically determined based on the value-added price.

[0105] In this manner, in the system 300, the query receiving unit 360 may receive a query regarding a measurement target, and the query responding unit 370 may refer to the measurement data managed using the distributed ledger technology and, as one example of a response to the query, transmit a response to the query requesting that an indicator of value be added to the measurement target, the response including an indicator of value calculated based on the measurement data managed using the distributed ledger technology.

[0106] Figure 8An example of a process for reaching an agreement using system 300 according to this embodiment is illustrated. At step 810, an application for a retail store recognizes that a consumer has purchased a product from a retailer. System 300 may determine, in response to the product purchase, that an indicator of a cost to be added to the value of the purchased product is requested. Specifically, query receiving unit 360 may receive a query requesting an indicator of a cost to be added to the value of a measurement target.

[0107] At step 820, the retail store application registers the product transaction on the platform. At this point, the retail store application can manually register the product transaction via user input, or can automatically register the product transaction by cooperating with the POS system. Note that if the consumer has already purchased the product through e-commerce (EC), the product transaction can be automatically registered at the stage where the consumer receives the product.

[0108] In step 830 , the platform of the system 300 calculates allocation of added value to corresponding stakeholders based on the added value points calculated in steps 714 , 724 , and 734 , respectively, for each stakeholder.

[0109] In step 840 , the platform distributes virtual currency / tokens to the respective stakeholders based on the distribution of value added for the respective stakeholders calculated in step 830 .

[0110] In steps 850 to 870, each stakeholder can operate the terminal 30, access the application for each stakeholder via a web browser or the like operated on the terminal 30, confirm the allocated virtual currency / token, and exchange it for the real currency (Japanese yen or US dollars) to be withdrawn. That is, the query response unit can transmit a response including an indicator of the cost calculated based on the measurement data managed using the distributed ledger technology.

[0111] In this manner, in the system 300, the query receiving unit 360 may receive a query regarding a measurement target, and the query responding unit 370 may refer to the measurement data managed using the distributed ledger technology and, as one example of a response to the query, transmit a response to the query for an indicator of a cost for requesting an indicator of a cost added to the value of the measurement target, the response including an indicator of the cost calculated based on the measurement data managed using the distributed ledger technology.

[0112] In this way, according to this embodiment, it is possible to provide a token economy mechanism in which pricing automatically changes according to the properties or quality of the measurement target, or an autonomous price agreement mechanism in which, even in the case of identical products, the price of a product experiencing temperature deviation is set lower than that of a product without temperature deviation. In this way, according to this embodiment, it is possible to increase transparency regarding product quality, which has previously been a black box for consumers, and enable payment of a price consistent with the product's value. Furthermore, according to this embodiment, DLT and data loggers can be used to support the trust of supply chain stakeholders such as transportation companies in their efforts to maintain quality, and to assign appropriate rewards for this value.

[0113] Various embodiments of the present invention may be described with reference to flow charts and block diagrams, the block diagrams of which may represent (1) steps of a process in which an operation is performed or (2) units of an apparatus responsible for performing an operation. Certain steps and units may be implemented by at least any one of a dedicated circuit, a programmable circuit provided with computer-readable instructions stored on a computer-readable medium, and a processor provided with computer-readable instructions stored on a computer-readable medium. The dedicated circuit may include digital and / or analog hardware circuits and may include integrated circuits (ICs) and / or discrete circuits. The programmable circuit may include reconfigurable hardware circuits including logical AND, OR, XOR, NAND, NOR, and other logical operations, flip-flops, registers, memory elements such as field programmable gate arrays (FPGAs) and programmable logic arrays (PLAs), and the like.

[0114] A computer-readable medium may include any tangible device that can store instructions for execution by a suitable device, such that a computer-readable medium having instructions stored therein is provided with an article of manufacture including the instructions, and the instructions can be executed to create a component for performing the operations specified in the flowchart or block diagram. Examples of computer-readable media may include electronic storage media, magnetic storage media, optical storage media, electromagnetic storage media, semiconductor storage media, and the like. More specific examples of computer-readable media may include a floppy disk (registered trademark), a magnetic disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an electrically erasable programmable read-only memory (EEPROM), a static random access memory (SRAM), a compact disc read-only memory (CD-ROM), a digital versatile disc (DVD), a BLU-RAY (registered trademark) disc, a memory stick, an integrated circuit card, and the like.

[0115] Computer-readable instructions may include assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state-setting data, or source code or object code written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Smalltalk (registered trademark), JAVA (registered trademark), and C++, and conventional procedural programming languages ​​such as the "C" programming language or similar programming languages.

[0116] Computer-readable instructions can be provided locally or via a local area network (LAN), a wide area network (WAN) (such as the Internet) to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, or to a programmable circuit to execute the computer-readable instructions to create a component for performing the operations specified in the flowchart or block diagram. Examples of processors include computer processors, processing units, microprocessors, digital signal processors, controllers, microcontrollers, etc.

[0117] Figure 9 The diagram illustrates an example of a computer 2200 in which aspects of the present invention may be implemented in whole or in part. Programs installed in the computer 2200 may cause the computer 2200 to function as or perform operations associated with an apparatus according to an embodiment of the present invention or one or more units thereof, and / or cause the computer 2200 to perform processes of embodiments of the present invention or steps thereof. Such programs may be executed by the CPU 2212 to cause the computer 2200 to perform certain operations associated with some or all of the blocks in the flowcharts and block diagrams described herein.

[0118] The computer 2200 according to the present embodiment includes a CPU 2212, a RAM 2214, a graphics controller 2216, and a display device 2218, which are interconnected via a host controller 2210. The computer 2200 also includes input / output units such as a communication interface 2222, a hard disk drive 2224, a DVD-ROM drive 2226, and an IC card drive, which are connected to the host controller 2210 via an input / output controller 2220. The computer also includes conventional input / output units such as a ROM 2230 and a keyboard 2242, which are connected to the input / output controller 2220 via an input / output chip 2240.

[0119] The CPU 2212 operates according to the program stored in the ROM 2230 and the RAM 2214, thereby controlling each unit. The graphic controller 2216 obtains image data generated by the CPU 2212 on a frame buffer or the like provided in the RAM 2214 or in itself, and causes the image data to be displayed on the display device 2218.

[0120] The communication interface 2222 communicates with other electronic devices via a network. The hard disk drive 2224 stores programs and data used by the CPU 2212 in the computer 2200. The DVD-ROM drive 2226 reads programs or data from the DVD-ROM 2201 and provides the programs or data to the hard disk drive 2224 via the RAM 2214. The IC card drive reads programs and data from an IC card and / or writes programs and data to an IC card.

[0121] The ROM 2230 stores therein a boot program or the like executed by the computer 2200 at the time of activation, and / or programs depending on the hardware of the computer 2200. The input / output chip 2240 can connect various input / output units to the input / output controller 2220 via a parallel port, a serial port, a keyboard port, a mouse port, and the like.

[0122] The program is provided by a computer-readable medium such as a DVD-ROM 2201 or an IC card. The program is read from the computer-readable medium, installed in the hard disk drive 2224, RAM 2214, or ROM 2230, which are also examples of computer-readable media, and executed by the CPU 2212. The information processing described in these programs is read into the computer 2200, resulting in cooperation between the programs and the various hardware resources mentioned above. By implementing information operations or processing according to the purpose of the computer 2200, a device or method can be constructed.

[0123] For example, when communication is performed between the computer 2200 and an external device, the CPU 2212 can execute a communication program loaded on the RAM 2214 to instruct communication processing based on the processing described in the communication program to the communication interface 2222. The communication interface 2222 reads transmission data stored in a transmission buffer area provided in a recording medium such as the RAM 2214, the hard disk drive 2224, the DVD-ROM 2201, or an IC card under the control of the CPU 2212, and transmits the read transmission data to a network or writes reception data received from the network to a reception buffer area provided on a recording medium, etc.

[0124] Furthermore, the CPU 2212 can cause all or a necessary portion of a file or database, which has been stored in an external recording medium such as the hard disk drive 2224, the DVD-ROM drive 2226 (DVD-ROM 2201), an IC card, etc., to be read into the RAM 2214, and perform various processes on the data on the RAM 2214. The CPU 2212 then writes the processed data back to the external recording medium.

[0125] Various types of information, such as various types of programs, data, tables, and databases, can be stored in the recording medium for information processing. The CPU 2212 can perform various types of processing on the data read from the RAM 2214, including various types of operations, information processing, conditional judgments, conditional branches, unconditional branches, information search / replacement, etc., as described throughout this disclosure and specified by the instruction sequence of the program, and write the results back to the RAM 2214. In addition, the CPU 2212 can search for information in files, databases, etc. in the recording medium. For example, when a plurality of entries (each entry having an attribute value of a first attribute associated with an attribute value of a second attribute) are stored in the recording medium, the CPU 2212 can search for an entry that matches the condition (its attribute value of the first attribute is specified) from the plurality of entries and read the attribute value of the second attribute stored in the entry, thereby obtaining the attribute value of the second attribute associated with the first attribute that meets the predetermined condition.

[0126] The program or software module explained above can be stored in a computer-readable medium on or near the computer 2200. In addition, a recording medium such as a hard disk or a RAM provided in a server system connected to a dedicated communication network or the Internet can be used as a computer-readable medium to provide the program to the computer 2200 via the network.

[0127] Although the present invention has been described through the use of embodiments, the technical scope of the present invention is not limited to the above-described embodiments. It will be apparent to those skilled in the art that various modifications and improvements can be made to the above-described embodiments. It will also be apparent from the scope of the claims that embodiments incorporating such modifications or improvements are within the technical scope of the present invention.

[0128] The operations, procedures, steps, and stages of each process performed by the apparatus, system, program, and method shown in the claims, embodiments, or figures may be performed in any order as long as the order is not indicated by "before," "before," or the like, and as long as the output of the previous process is not used in the subsequent process. Even if phrases such as "first" or "next" are used in the claims, embodiments, or figures to describe the flow of a process, it does not necessarily mean that the process must be performed in this order.

[0129] Reference Signs List

[0130] 10 Communication Network

[0131] 20 Equipment

[0132] 30 Terminal

[0133] 200 Data Recording Device

[0134] 210 Registration Request Unit

[0135] 220 Key Exchange Unit

[0136] 230 Data Collection Unit

[0137] 240 data recording unit

[0138] 250 encryption units

[0139] 260 Data Transmission Unit

[0140] 300 system

[0141] 310 Registration Units

[0142] 320 Key Management Unit

[0143] 330 Data Acquisition Unit

[0144] 340 Decryption Unit

[0145] 350 Data Management Unit

[0146] 360 Query Receiving Unit

[0147] 370 Query Response Unit

[0148] 2200 Computer

[0149] 2201 DVD-ROM

[0150] 2210 Host Controller

[0151] 2212 CPU

[0152] 2214 RAM

[0153] 2216 Graphics Controller

[0154] 2218 Display Devices

[0155] 2220 Input / Output Controller

[0156] 2222 Communication Interface

[0157] 2224 Hard Drive

[0158] 2226 DVD-ROM drive

[0159] 2230 ROM

[0160] 2240 Input / Output Chip

[0161] 2242 Keyboard

Claims

1. A data recording device comprising: a data collection unit configured to collect measurement data obtained by measuring a physical quantity associated with a measurement target; a registration request unit configured to transmit a registration request to a system configured to manage the measurement data using a distributed ledger technology, the registration request including identification information for identifying the data recording device; a key exchange unit configured to exchange a first encryption key with the system in response to authentication of the system based on the identification information; a data recording unit configured to record the measurement data; as well as A data transmission unit is configured to transmit the measurement data and the identification information encrypted by using the first encryption key to the system.

2. The data recording device according to claim 1, wherein: The key exchange unit is configured to exchange a second encryption key with a device capable of obtaining the measurement data; as well as The data collection unit is configured to collect the measurement data encrypted by the equipment using the second encryption key.

3. The data recording device according to claim 2, wherein the second encryption key is the same as the first encryption key.

4. A data recording method comprising: collecting measurement data obtained by measuring physical quantities associated with a measurement target; transmitting a registration request to a system configured to manage the measurement data using a distributed ledger technology, the registration request including identification information for identifying the data recording device; exchanging a first encryption key with the system in response to authentication of the system based on the identification information; recording the measurement data; as well as The measurement data encrypted using the first encryption key and the identification information are transmitted to the system.

5. A computer program product comprising a computer program which, when executed by a computer, causes the computer to function as: a data collection unit configured to collect measurement data obtained by measuring a physical quantity associated with a measurement target; a registration request unit configured to transmit a registration request to a system configured to manage the measurement data using a distributed ledger technology, the registration request including identification information for identifying the data recording device; a key exchange unit configured to exchange a first encryption key with the system in response to authentication of the system based on the identification information; a data recording unit configured to record the measurement data; as well as A data transmission unit is configured to transmit the measurement data and the identification information encrypted by using the first encryption key to the system.

6. A system comprising: a registration unit configured to authenticate the data recording device configured to transmit a registration request based on identification information for identifying the data recording device, the identification information being included in the registration request; a key management unit configured to exchange a first encryption key with the data recording device in response to authentication of the data recording device; a data obtaining unit configured to obtain measurement data obtained by measuring a physical quantity associated with a measurement target, and the identification information, the measurement data being encrypted by the data recording device using the first encryption key; and A data management unit is configured to manage the measurement data using a distributed ledger technology.

7. The system according to claim 6, further comprising: a query receiving unit, configured to receive a query about the measurement target; as well as A query response unit is configured to respond to the query with reference to the measurement data managed using the distributed ledger technology.

8. The system of claim 7, wherein: The query receiving unit is configured to receive a query for requesting disclosure of the measurement data associated with the measurement target; and The query response unit is configured to transmit a response including the measurement data managed using the distributed ledger technology.

9. The system according to claim 7 or 8, wherein: The query receiving unit is configured to receive a query for requesting an indicator of a value to be added to the measurement target; and The query response unit is configured to transmit a response including the indicator of the value calculated based on the measurement data managed using the distributed ledger technology.

10. The system according to claim 7 or 8, wherein: The query receiving unit is configured to receive a query for requesting an indicator of a cost added to the value of the measurement target; and The query response unit is configured to transmit a response including the indicator of the cost calculated based on the measurement data managed using the distributed ledger technology.

11. A method comprising: authenticating a data recording device configured to transmit a registration request based on identification information for identifying the data recording device, the identification information being included in the registration request; exchanging a first encryption key with the data recording device in response to authentication of the data recording device; obtaining measurement data obtained by measuring a physical quantity associated with a measurement target, and the identification information, the measurement data being encrypted by the data recording device using the first encryption key; and Distributed ledger technology is used to manage the measurement data.

12. A computer program product comprising a computer program which, when executed by a computer, causes the computer to function as: a registration unit configured to authenticate the data recording device configured to transmit a registration request based on identification information for identifying the data recording device, the identification information being included in the registration request; a key management unit configured to exchange a first encryption key with the data recording device in response to authentication of the data recording device; a data obtaining unit configured to obtain measurement data obtained by measuring a physical quantity associated with a measurement target, and the identification information, the measurement data being encrypted by the data recording device using the first encryption key; and A data management unit is configured to manage the measurement data using a distributed ledger technology.

Images