Information management system and information management method

Abstract

The present disclosure relates to an information management system and an information management method. When disclosure of information of a chemical substance is received from a node of an upstream enterprise (S11), a control device (110-N) updates product composition data (S12), and determines whether the disclosed information of the chemical substance is a confidential object (S13). The control device (110-N) updates public data by adding the information of the chemical substance (a restricted substance) received in S11 when it is determined that the disclosed information of the chemical substance is not a confidential object (S13: No) (S17), generates transaction data including the public data, and transmits the transaction data to a node of a target downstream enterprise (S18).

Description

Technical Field

[0001] This disclosure relates to information management systems and methods that use distributed ledger technology to manage information. Background Technology

[0002] Japanese Patent Application Publication No. 2009-70257 discloses an information management system that manages information on chemical substances contained in components traded in a supply chain that includes a finished product manufacturer and suppliers providing components to the finished product manufacturer. This information management system is connected via a network to supplier terminals used by the aforementioned suppliers and other supplier terminals used by other suppliers. Other suppliers supply sub-components that constitute components delivered by the aforementioned suppliers to the finished product manufacturer. Suppliers request other suppliers to disclose (reveal, disclose) information on the chemical substances contained in the sub-components in order to report this information to the finished product manufacturer. Summary of the Invention

[0003] In the supply chain, information about the chemical substances contained in products, especially those restricted (regulated, constrained) by laws and regulations, is sometimes disclosed from upstream to midstream and from midstream to downstream companies. However, for each company, information about the chemical substances contained in its own products is crucial, and there is a strong reluctance to disclose this information. Therefore, companies sometimes do not voluntarily disclose information about the chemical substances contained in their products to downstream companies, but rather keep it confidential (concealed).

[0004] To accept the disclosure of confidential information, multiple processes must be executed within each company. For example, in a midstream company, there might be processes for requesting upstream companies to disclose confidential information, as well as internal approval processes for disclosing information from upstream companies to downstream companies. These processes are typically performed manually by the responsible personnel for each process, requiring significant costs and manpower. Therefore, there is a desire to build mechanisms (structures) that facilitate the flow of information within the supply chain.

[0005] This disclosure is made to address the aforementioned problems, and its purpose is to provide a mechanism for facilitating the flow of information within the supply chain.

[0006] (1) An aspect of this disclosure relates to an information management system that uses distributed ledger technology to manage information on chemical substances contained in products circulating in the supply chain. The information management system comprises: a first device belonging to a first enterprise manufacturing a first product, having a first distributed ledger; a second device belonging to a second enterprise supplying a second product contained in the first product to the first enterprise, having a second distributed ledger; a third device belonging to a third enterprise supplying a third product contained in the second product to the second enterprise, having a third distributed ledger; and a management device managing the information management system, having a fourth distributed ledger. Each of the first, second, third, and fourth distributed ledgers contains a list representing chemical substances managed by the information management system. The second device stores composition data of the second product, including composition data of the third product disclosed from the third device. When a new chemical substance is specified as being managed by the information management system, the management device adds the new chemical substance and updates the list in the fourth distributed ledger. It then sends the first transaction data (proposed addition of the new chemical substance and updated list data) to the first, second, and third devices. Based on the first transaction data from the management device, the first, second, and third devices update the lists in the first, second, and third distributed ledgers, respectively. If the third device contains a new chemical substance in the composition of a third product, it sends the second transaction data (containing information about the new chemical substance) to the second device. Based on the second transaction data from the third device, the second device updates the composition data of the third product contained within the composition data of the second product, thereby updating the composition data of the second product. If it decides to disclose the composition data of the third product contained within the composition data of the second product, it sends the third transaction data (containing the updated composition data of the second product) to the first device.

[0007] According to the above configuration, when the second transaction data containing composition data of a third product including information about a new chemical substance is received from the third device, the second device updates the composition data of the third product included in the composition data of the second product based on the second transaction data from the third device, thereby updating the composition data of the second product. Furthermore, when the second device decides to disclose the composition data of the third product included in the composition data of the second product, it sends the third transaction data containing the updated composition data of the second product to the first device. That is, when the third device discloses the composition data of a third product containing information about a new chemical substance, the second device discloses the updated composition data of the second product to the first device when it decides to disclose the composition data of the third product included in the composition data of the second product. Therefore, when deciding to disclose the composition data of the third product included in the composition data of the second product, the updated composition data of the second product can be disclosed to the first device without additional processing. This allows for easy information flow within the supply chain.

[0008] (2) In one embodiment, if the second device does not decide to disclose the composition data of the third product contained in the composition data of the second product, it performs a first process for disclosing information on the new chemical substance, and sends the third transaction data containing the information on the new chemical substance to the first device based on the approval obtained through the first process.

[0009] Based on the above structure, without deciding to disclose the composition data of the third product included in the composition data of the second product, information on new chemical substances is disclosed based on the approval obtained through the first process, thus suppressing the disclosure of unnecessary information due to system errors, etc.

[0010] (3) In one embodiment, the second distributed ledger includes a first secret area and a first public area. The first secret area is an area storing transaction data that is not shared with any of the first, third, and fourth distributed ledgers. The first public area is an area storing transaction data that is shared with at least one of the first, third, and fourth distributed ledgers. The second device stores the composition data of the second product in the first secret area and stores the data disclosed to the first enterprise, i.e., the first public data, in the first public area. Based on the second transaction data from the third device containing the composition data of the third product containing information about new chemical substances, the second device adds information about new chemical substances to the composition data of the third product stored in the first secret area, thereby updating the composition data of the second product. If the first public data contains the composition data of the third product before the update, the updated composition data of the second product is added to the first public data to update the first public data, and the third transaction data containing the updated first public data is sent to the first device.

[0011] Based on the above configuration, when the first disclosed data packet contains the composition data of the third product before the update, the second device appends the updated composition data of the second product to the first disclosed data and sends the third transaction data containing the updated first disclosed data to the first device. That is, when the first disclosed data packet contains the composition data of the third product before the update (if the composition data of the third product before the update is stored in the first disclosed area), the second device discloses the updated first disclosed data (the updated composition data of the second product) to the first device. The second device can determine whether to disclose the updated first disclosed data to the first enterprise based on whether the composition data of the third product before the update is stored in the first disclosed area.

[0012] (4) In one embodiment, if the first public data does not contain the composition data of the third product before the update, the second device performs the first process, updates the first public data by adding the updated composition data of the second product to the first public data based on the approval obtained through the first process, and sends the third transaction data containing the updated first public data to the first device.

[0013] Based on the above structure, if the first disclosed data does not include the composition data of the third product before the update, information on new chemical substances is disclosed based on the approval obtained through the first process, thereby suppressing the disclosure of unnecessary information due to system errors, etc.

[0014] (5) In one embodiment, the third distributed ledger includes a second secret area and a second public area. The second secret area is an area storing transaction data that is not shared with any of the first, second, and fourth distributed ledgers. The second public area is an area storing transaction data that is shared with at least one of the first, second, and fourth distributed ledgers. The third device stores second transaction data containing composition data of the third product in the second secret area and stores second public data, i.e., data disclosed to the second enterprise, from the composition data of the third product, in the second public area. When a new chemical substance is added to the list of the third distributed ledger, the third device performs a second process to include information about the new chemical substance in the second public data. Based on the approval obtained through the second process, the third device sends second transaction data containing information about the new chemical substance to the second device.

[0015] Based on the above configuration, when a new chemical substance is added to the list of the third distributed ledger, the third device discloses information about the new chemical substance based on the approval obtained through the second process. By disclosing information about the new chemical substance based on the approval obtained through the second process, it is possible to suppress the disclosure of unnecessary information due to system errors, etc.

[0016] (6) In one implementation, the chemical substances included in the list are chemical substances specified in laws and regulations.

[0017] Based on the above structure, it is possible to properly manage chemical substances specified in laws and regulations within an information management system.

[0018] (7) Another aspect of this disclosure relates to an information management method for an information management system that uses distributed ledger technology to manage information on chemical substances contained in products circulating in the supply chain. The information management system comprises: a first device belonging to a first enterprise manufacturing a first product and having a first distributed ledger; a second device belonging to a second enterprise supplying a second product contained in the first product to the first enterprise and having a second distributed ledger; a third device belonging to a third enterprise supplying a third product contained in the second product to the second enterprise and having a third distributed ledger; and a management device managing the information management system and having a fourth distributed ledger. The first, second, third, and fourth distributed ledgers each contain a list representing chemical substances managed by the information management system. The second device stores composition data of the second product, including composition data of the third product disclosed from the third device. The information management method includes the following steps: when a new chemical substance is specified and managed by the information management system, the management device adds the new chemical substance and updates the list of the fourth distributed ledger, and sends first transaction data proposing the addition of the new chemical substance and updating the list to the first device, the second device, and the third device; the first device, the second device, and the third device update the lists of the first distributed ledger, the second distributed ledger, and the third distributed ledger, respectively, based on the first transaction data from the management device; when the third device contains a new chemical substance in the composition of the third product, the third device sends second transaction data containing information about the new chemical substance to the second device; the second device updates the composition data of the second product by updating the composition data of the third product contained in the composition data of the second product based on the second transaction data from the third device; and when the second device decides to disclose the composition data of the third product contained in the composition data of the second product, the second device sends third transaction data containing the updated composition data of the second product to the first device.

[0019] The above and other objects, features, aspects and advantages of this disclosure will become apparent from the following detailed description relating to this disclosure, which is understood in conjunction with the accompanying drawings. Attached Figure Description

[0020] Figure 1 This is a diagram showing the general structure of the information management system involved in the implementation method.

[0021] Figure 2 It is a diagram used to illustrate the transactional relationships between companies in a supply chain.

[0022] Figure 3 It is a conceptual diagram used to illustrate distributed ledgers.

[0023] Figure 4 It is a diagram that roughly represents the hardware structure of a platform provider.

[0024] Figure 5 It is a diagram that roughly represents the hardware structure of the information management device.

[0025] Figure 6 This is a diagram illustrating an example of product composition data for Company C's Product C.

[0026] Figure 7 It is a diagram used to illustrate the functionality of a workflow.

[0027] Figure 8 This is a diagram (one of many) schematically representing an example of product composition data for product B of company B.

[0028] Figure 9 This is a diagram (the second one) schematically representing an example of product composition data for Company B's product B.

[0029] Figure 10 This is a flowchart illustrating the process performed by the control device of the information management device when the restriction list is updated.

[0030] Figure 11 This is a flowchart illustrating the process performed by the control device of the information management unit when information about chemical substances is received from an upstream enterprise. Detailed Implementation

[0031] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the accompanying drawings. Identical or equivalent parts in the drawings will be labeled with the same reference numerals without being described repeatedly.

[0032] <Overall Structure of Information Management System>

[0033] Figure 1This diagram illustrates the general structure of the information management system 1 according to this embodiment. The information management system 1 according to this embodiment is a system for managing information on specific chemical substances (hereinafter also referred to as "object substances") contained in products (including components, raw materials, etc.) circulating in a supply chain comprising multiple enterprises, using distributed ledger technology. In this embodiment, as an example, a supply chain comprising four enterprises (e.g., Enterprise A, Enterprise B, Enterprise C, and Enterprise D) is envisioned. Object substances are chemical substances that become the reporting targets for downstream enterprises in the supply chain within the information management system 1. Object substances include, for example, chemical substances designated as SVHCs (Substances of Very High Concern) under the REACH (Registration, Evaluation, Authorization and Restriction of Chemicals) rules and / or chemical substances designated by the GADSL (Global Automotive Declarable Substance List), a globally managed list of chemical substances. Hereinafter, chemical substances designated as SVHCs and / or chemical substances designated by the GADSL will also be referred to as "restricted substances." Furthermore, restricted substances may also include chemical substances designated by other laws and regulations. Moreover, companies participating in Information Management System 1 may include any chemical substance in the target substance. That is, the target substance managed by Information Management System 1 may include restricted substances and chemical substances arbitrarily designated by participating companies. Regarding restricted substances, each company is obligated to transmit (report) information to downstream companies. On the other hand, regarding chemical substances arbitrarily designated by participating companies, each company is not obligated to transmit information to downstream companies. In Information Management System 1, restricted substances are managed using the restricted list described later. That is, in response to a disclosure request from a downstream company regarding a target substance, if the requested target substance is a chemical substance other than a restricted substance (i.e., a chemical substance not registered in the restricted list), the upstream company may refuse the disclosure request.

[0034] The information management system 1 includes an information management device 10-1 belonging to company A, an information management device 10-2 belonging to company B, an information management device 10-3 belonging to company C, an information management device 10-4 belonging to company D, and a platform provider 30. In this embodiment, company A is a finished product manufacturer, equivalent to a "downstream company" in the supply chain. In this embodiment, company B is a component manufacturer, equivalent to a "midstream company" in the supply chain. In this embodiment, companies C and D are material manufacturers, equivalent to "upstream companies" in the supply chain.

[0035] Figure 2 This diagram illustrates the transactional relationships between companies in a supply chain. Company C supplies Company B with product C, which is its own product. Company D supplies Company B with product D, which is its own product. Company B uses product C (the supplied product) purchased from Company C and product D purchased from Company D to manufacture product B, which it then supplies to Company A. Company A uses products purchased from Company B to manufacture product A, which it then sells to the end user. Company A could be, for example, a car manufacturer.

[0036] In addition, midstream companies can also include trading companies. For example, a trading company can be located between company A and company B, between company B and company C, and / or between company B and company D.

[0037] Each company needs to manage information about the substances contained in the products it sells. Each company receives disclosures of information about the substances contained in products purchased from upstream companies in the supply chain and manages this information. For example, Company A receives information about the substances contained in product B from Company B and uses this information to manage information about the substances contained in product A.

[0038] In the information management system 1 of this embodiment, information is transmitted only between enterprises with direct trading relationships. For example, a downstream enterprise (Enterprise A) and a midstream enterprise (Enterprise B) with a product supply and demand relationship have a direct trading relationship. A midstream enterprise (Enterprise B) and an upstream enterprise (Enterprise C, Enterprise D) with a product supply and demand relationship have a direct trading relationship. On the other hand, a downstream enterprise (Enterprise A) and an upstream enterprise (Enterprise C, Enterprise D) do not have a direct trading relationship. That is, information is transmitted between a downstream enterprise (Enterprise A) and a midstream enterprise (Enterprise B), and between a midstream enterprise (Enterprise B) and an upstream enterprise (Enterprise C, Enterprise D), but not between a downstream enterprise (Enterprise A) and an upstream enterprise (Enterprise C, Enterprise D). Furthermore, for example, if Enterprise E, as a trading company, is located between Enterprise A and Enterprise B, information is transmitted between Enterprise A and Enterprise E, and between Enterprise E and Enterprise B, but not between Enterprise A and Enterprise B.

[0039] For example, when a transaction of product C begins between Company B and Company C, Company C provides Company B with information on at least the restricted substances contained in the target substance of product C. Specifically, information on the restricted substances contained in the target substance of product C is provided to Company B voluntarily by Company C, or by Company C upon request from Company B. On the other hand, information on chemical substances other than the restricted substances contained in the target substance of product C is provided to Company B voluntarily by Company C, or by Company C in response to a request from Company B. That is, information on chemical substances other than the restricted substances contained in the target substance of product C may not be provided to Company B by Company C. This is also the case between Company A and Company B, and between Company B and Company D. When a transaction of product D begins between Company B and Company D, Company D provides Company B with information on at least the restricted substances contained in the target substance of product D. When a transaction of product B begins between Company A and Company B, Company B provides Company A with information on at least the restricted substances contained in the target substance of product B. Thus, each enterprise receives information from its upstream counterparts regarding the minimum restricted substances contained in the target substances of the purchased products, and manages information about the target substances contained in its own products, including the purchased products. Information transfer between enterprises occurs within a distributed ledger network 2, which includes information management devices 10-1 to 10-4 and a platform provider 30. Figure 1 It will be carried out in ).

[0040] Re-reference Figure 1The software of a distributed ledger platform is incorporated into each of the information management devices 10-1 to 10-4. The distributed ledger platform comprises smart contracts that define the scope of transaction data sharing among parties. Therefore, the distributed ledgers 161-1 to 161-4 in the information management devices 10-1 to 10-4 maintain distinct transaction data. For example, CORDA (registered trademark) can be used as the distributed ledger platform. Furthermore, without specifically distinguishing between distributed ledgers 161-1 to 161-4, it is sometimes referred to as "distributed ledger 161-N".

[0041] The information management devices 10-1 to 10-4, including control devices 110-1 to 110-4 (described later), function through the imported distributed ledger platform software. Figure 5 These nodes function as nodes 111-1 to 111-4, respectively. Nodes 111-1 to 111-4 communicate with each other via network NW, thereby forming distributed ledger network 2. Furthermore, information management devices 10-1 to 10-4 have essentially the same configuration. Therefore, without specifically distinguishing between information management devices 10-1 to 10-4, they are sometimes referred to as "information management device 10-N". Regarding nodes 111-1 to 111-4, without specifically distinguishing between them, they are sometimes also referred to as "node 111-N".

[0042] Figure 3 This is a conceptual diagram used to illustrate the distributed ledger 161-N. Figure 3 The diagram roughly illustrates the relationship between the distributed ledgers 161-1 to 161-4 stored in the information management devices 10-1 to 10-4.

[0043] Distributed ledgers 161-1 and 161-2 share transaction data (area D1) exchanged between information management device 10-1 (node ​​111-1) of company A and information management device 10-2 (node ​​111-2) of company B. Area D1 contains, for example, transaction data exchanged between nodes 111-1 and 111-2 containing information about the substances contained in product B. Furthermore, area D1 also contains, for example, transaction data exchanged between nodes 111-1 and 111-2 for querying about the substances contained in product B and transaction data for responding to queries.

[0044] Distributed ledgers 161-2 and 161-3 share transaction data (area D2) exchanged between information management device 10-2 (node ​​111-2) of enterprise B and information management device 10-3 (node ​​111-3) of enterprise C. Area D2 contains, for example, transaction data exchanged between nodes 111-2 and 111-3 containing information about the material contained in product C. Furthermore, area D2 also contains, for example, transaction data exchanged between nodes 111-2 and 111-3 for querying about the material contained in product C and transaction data for responding to queries.

[0045] Distributed ledgers 161-2 and 161-4 share transaction data (area D3) exchanged between enterprise B's information management device 10-2 (node ​​111-2) and enterprise D's information management device 10-4 (node ​​111-4). Area D3 contains, for example, transaction data exchanged between nodes 111-2 and 111-4 containing information about the material contained in product D. Furthermore, area D3 also contains, for example, transaction data exchanged between nodes 111-2 and 111-4 for querying about the material contained in product D, and transaction data for responding to queries.

[0046] For example, from the perspective of Company B, a midstream company in the supply chain, sometimes it may not want Company A to know which company it purchased products C and D from. Transaction data packets contain information such as the sender and destination nodes. Therefore, if transaction data is broadcast to all nodes forming the distributed ledger network 2, Company A may be exposed to the suppliers of products C and D. In the information management system 1 according to this embodiment, the sharing scope of transaction data is limited to the parties involved, thereby preventing the disclosure of information about the transacting parties (company names, etc.) to entities outside of those with direct trading relationships.

[0047] Re-reference Figure 1 The distributed ledger network 2 in the information management system 1 is a consortium / private network. The platform provider 30 functions as the administrator of the information management system 1. The platform provider 30 has application functions 40 and platform functions 50 as its functions. Application functions 40 include nodes 41 and inventory management units 42 (…). Figure 4 And distributed ledger 43, in distributed ledger network 2, functions as a node for registering and updating the restriction list described later. Details regarding the use of function 40 will be explained later. Furthermore, platform provider 30 is equivalent to an example of the "management device" involved in this disclosure.

[0048] Platform function 50 includes a doorman node 51, a network map node 53, and a notary node 55, which function as a platform operator to manage the distributed ledger network 2.

[0049] Gatekeeper node 51 approves participation requests from nodes 111-N and 41 who wish to participate in distributed ledger network 2. Additionally, gatekeeper node 51 issues certificates to nodes 111-N and 41. Nodes 111-N and 41, upon participating in distributed ledger network 2, create a key (private key) and public key pair and send a certificate request to gatekeeper node 51. Gatekeeper node 51 verifies predetermined conditions and issues certificates to nodes 111-N and 41 that have submitted the certificate request.

[0050] Network mapping node 53 stores information (e.g., IP addresses) of nodes 111-N and 41 that have been certified by gatekeeper node 51 (i.e., are allowed to participate in distributed ledger network 2). Network mapping node 53 functions as a DNS (Domain Name System) in distributed ledger network 2. Nodes 111-1 to 111-4 and 41 forming distributed ledger network 2 identify the destination of transaction data, for example, based on information provided by network mapping node 53.

[0051] Notary node 55 finalizes the transaction data. When nodes 111-N and 41 generate transaction data, they send the transaction data, containing the hash value (transaction ID) and the index of output, to notary node 55. This transaction data packet contains signatures from the sending node (e.g., node 111-2 of company B) and the destination node (e.g., node 111-1 of company A). After verifying the transaction data based on the transaction ID and output index, notary node 55 adds a signature to the transaction data and sends it back. Notary node 55 ensures the order of the transaction data by maintaining the signed transaction data in sequence. For example, notary node 55 can also maintain a mapping that uses the transaction ID and output index as keys and the transaction ID, input index, and node (peer, node) information as values. For example, notary node 55 can also be configured to append the transaction data to the mapping and add a signature if no matching key exists in the mapping. Notary node 55 can also be configured to return an error if there is a consistent key in the mapping.

[0052] Nodes 111-N and 41 generate transaction data. As described above, the information management device 10-N, including the control device 110-N, functions through the software of the distributed ledger platform. Figure 5 ) functions as nodes 111-N. Additionally, it functions through the software of the distributed ledger platform, and the control device 31 included in the platform provider 30 ( Figure 4 It functions as node 41.

[0053] In the information management system 1, the platform provider 30 (application function 40) monitors revisions to laws and regulations (i.e., updates to restricted substances). Specifically, the platform provider 30 monitors, for example, updates to SVHCs and / or GADSLs. Upon detecting these updates, i.e., when a new chemical substance is designated as an SVHC and / or when a new chemical substance is designated by the GADSL, the platform provider 30 detects the addition of a restricted substance. When the addition of a restricted substance is detected, node 41 of the platform provider 30 sends transaction data proposing the addition of a restricted substance (updating the restriction list) to all nodes 111-1 to 111-4.

[0054] Information management device 10-N stores product composition data related to the company's products. Figure 5 (151-N, 164-N). Product composition data is important information for each company. In this embodiment, product composition data is categorized into publicly disclosed and non-public data for each company. Details will be described later, but if the restricted list is updated, and information on a restricted substance (target substance) added to the restricted list through the update is designated as public, the information management device 10-N automatically discloses the target substance information to the downstream company. If the restricted list is updated, and information on the target substance is designated as non-public, the information management device 10-N discloses the target substance information to the downstream company after approval processing using the workflow function described later.

[0055] <Hardware Structure>

[0056] Figure 4 This is a schematic diagram illustrating the hardware structure of the platform provider 30. The platform provider 30 includes a control device 31, a ROM (Read Only Memory) 32, a RAM (Random Access Memory) 33, a communication device 34, a storage device 35, an input device 36, and a display device 37. The control device 31, ROM 32, RAM 33, communication device 34, storage device 35, input device 36, and display device 37 are connected to a bus 39.

[0057] The control device 31 is, for example, composed of an integrated circuit including a CPU (Central Processing Unit). The control device 31 executes various programs stored in the ROM 32 by expanding them into the RAM 33. These programs include, for example, software for a distributed ledger platform. The RAM 33 functions as working memory, temporarily storing various data required for executing the programs. The control device 31 performs various processes by executing the programs stored in the ROM 32.

[0058] The communication device 34 is configured to communicate with external devices. External devices may include, for example, the information management devices 10-N included in the distributed ledger network 2. Communication between the communication device 34 and the external devices is conducted via the Internet or similar means. Furthermore, external devices may include, for example, server devices from external organizations that publish restricted materials on the Internet.

[0059] Input device 36 includes input devices. Input devices may be, for example, a mouse, keyboard, touch panel, and / or other devices capable of accepting user operations.

[0060] Display device 37 includes a display. Display device 37 causes the display to show various images according to control signals from control device 31. The display may be, for example, a liquid crystal display, an organic EL (Electroluminescence) display, or other display devices.

[0061] Storage device 35 is configured to include, for example, a storage medium such as a hard disk or flash memory. Storage device 35 stores distributed ledger 43. Distributed ledger 43 and the distributed ledger 161-N of information management devices 10-N are, for example, distributed ledgers with a DAG (Directed Acyclic Graph) structure. The transaction data contained in distributed ledger 43 and distributed ledger 161-N form a semi-order data model. In this embodiment, for example, one transaction data form one block.

[0062] Distributed ledger 43 contains a Restriction List 350. The Restriction List 350 contains information about restricted substances (e.g., chemicals designated as SVHCs and / or chemicals designated by GADSL). The Restriction List 350 contains information about more than one restricted substance. Information about a restricted substance includes, for example, a CAS (Chemical Abstracts Service) number, substance name, restriction update date, and reporting threshold. The CAS number is an inherent identification number assigned to the chemical substance by the CAS chemical substance registry system of the American Chemical Society. The substance name is the name of the chemical substance. The restriction update date is the date the chemical substance was added to the Restriction List 350 (the date it becomes subject to reporting to downstream businesses) or the date it is restricted by laws and regulations (e.g., the date it is designated as an SVHC). The reporting threshold is a threshold for the percentage (content rate) of the chemical substance contained per unit quantity of a product. If the content rate is above the reporting threshold, information about the chemical substance in the product becomes subject to reporting to downstream businesses. If the content rate is below the reporting threshold, the information about the chemical substance is not subject to reporting.

[0063] In addition, storage device 35 can also store keys generated by node 41 of control device 31.

[0064] The control device 31 functions as node 41 and list management unit 42 by executing programs related to the application function 40.

[0065] Upon initial startup, node 41 generates a key and public key conforming to a predetermined standard. The public key is sent, for example, to network mapping node 53 of platform function 50. Additionally, node 41 has the function of generating transaction data. Node 41 uses the key to generate an electronic signature and attaches it to the transaction data. The key is stored, for example, in storage device 35 or other storage device not shown. Furthermore, node 41 has the function of approving transaction data proposed by other nodes. Node 41 verifies the transaction data proposed by other nodes; if the verification result is satisfactory, it attaches an electronic signature to the transaction data and sends the transaction data back to the other nodes.

[0066] The List Management Department 42 manages the Restricted List 350. The List Management Department 42 communicates with external entities via communication device 34 at predetermined intervals to monitor revisions to laws and regulations (additions of restricted substances). Specifically, the List Management Department 42 communicates with the server devices of external organizations via communication device 34 at predetermined intervals to monitor whether new restricted substances have been designated as SVHCs or whether new chemical substances have been designated by GADSL. For example, when the List Management Department 42 detects that a new chemical substance has been added as an SVHC (an added restricted substance) due to revisions to laws and regulations, it requests node 41 to add that restricted substance to the Restricted List 350.

[0067] When node 41 receives an update request for the restricted list 350 from the list management unit 42, it generates transaction data to add the newly specified restricted substance to the restricted list 350 and signs the transaction data. Thus, the newly specified restricted substance is added to the restricted list 350, and the restricted list 350 is updated. Furthermore, in detail, node 41 commits the transaction data (confirms the transaction) by sending the transaction data to the notary node 55 and receiving the signed transaction data from the notary node 55. Node 41 sends the signed transaction data to all nodes 111-1 to 111-4 participating in the distributed ledger network 2. In other words, node 41 sends a proposal to all nodes 111-1 to 111-4 participating in the distributed ledger network 2 to include the newly specified restricted substance in the restricted list 165-N of the information management device 10-N. Figure 5 The transaction data is then processed. Node 111-N, upon receiving the transaction data, approves it, and the transaction data is appended to the distributed ledger 161-N of node 111-N, updating the restriction list 165-N of the information management device 10-N. More specifically, node 41 sends the transaction data returned from node 111-N to notary node 55 and receives the signed transaction data from notary node 55, thereby committing the transaction data between nodes 41 and 111-N. The signed transaction data of notary node 55 is sent from node 41 to node 111-N, for example. Furthermore, the process of notary node 55 signing the transaction data during the transmission and reception of transaction data between nodes 41 and 111-N, and between nodes 111-N, is sometimes omitted below.

[0068] The control device 31 functions as a gatekeeper node 51, a network mapping node 53, and a notary node 55 by executing programs related to platform function 50. These functions have been described above and will not be repeated here.

[0069] Figure 5 This is a schematic diagram showing the hardware structure of the information management device 10-N. The information management device 10-N includes a control device 110-N, a ROM 120-N, a RAM 130-N, a communication device 140-N, a storage device 150-N, a storage device 160-N, an input device 170-N, and a display device 180-N. The control device 110-N, ROM 120-N, RAM 130-N, communication device 140-N, storage device 150-N, storage device 160-N, input device 170-N, and display device 180-N are connected to a bus 190-N.

[0070] The control device 110-N is, for example, composed of an integrated circuit including a CPU. The control device 110-N executes various programs stored in ROM 120-N by expanding them into RAM 130-N. These programs include, for example, software for a distributed ledger platform. RAM 130-N functions as working memory, temporarily storing various data required for executing the programs. The control device 110-N performs various processes by executing the programs stored in ROM 120-N.

[0071] The communication device 140-N is configured to communicate with external devices. These external devices may include, for example, other information management devices included in the distributed ledger network 2 and the platform provider 30. Communication between the communication device 140-N and the external devices may be conducted, for example, via the Internet.

[0072] Input device 170-N includes input devices. Input devices are, for example, a mouse, keyboard, touch panel, and / or other devices capable of accepting user operations.

[0073] Display device 180-N includes a display. Display device 180-N causes the display to show various images according to control signals from control device 110-N. The display is, for example, a liquid crystal display, an organic EL display, or other display device.

[0074] Storage device 150-N is configured to include storage media such as hard disks or flash memory. Information stored in storage device 150-N is managed off-chain (outside the distributed ledger network 2). Storage device 150-N stores product composition data 151-N, customer lists 152-N, and keys 153-N for the enterprise's products. For example, if it is enterprise A's information management device 10-1, then product composition data 151-1 contains the composition data of product A. For example, if it is enterprise B's information management device 10-2, then product composition data 151-2 contains the composition data of product B. For example, if it is enterprise C's information management device 10-3, then product composition data 151-3 contains the composition data of product C. For example, if it is enterprise D's information management device 10-4, then product composition data 151-4 contains the composition data of product D. Details regarding product composition data 151-N will be explained later along with details of product composition data 164-N.

[0075] Customer list 152-N contains information about companies that are permitted to disclose information. Specifically, customer list 152-N registers downstream companies with direct transactions in the supply chain. For example, if it is information management device 10-1 of company A, then no company is registered in customer list 152-1. For example, if it is information management device 10-2 of company B, then company A is registered in customer list 152-2. For example, if it is information management device 10-3 of company C, then company B is registered in customer list 152-3. For example, if it is information management device 10-4 of company D, then company B is registered in customer list 152-4. Inquiries from companies not registered in customer list 152-N are not answered. Furthermore, the storage device 150-1 of information management device 10-1 may not store customer list 152-1.

[0076] Additionally, storage device 150-N stores key 153-N and public key (not shown) generated by control device 110-N. Furthermore, storage device 150-N stores certificate (not shown) issued from gatekeeper node 51 of platform provider 30.

[0077] Storage device 160-N is configured to include storage media such as hard disks or flash memory. Information stored in storage device 160-N is managed on-chain (within the distributed ledger network 2). Storage device 160-N stores distributed ledger 161-N.

[0078] The distributed ledger 161-N has a secret region 162-N and a public region 163-N. The secret region 162-N stores transaction data that is not shared with any other node; that is, it stores transaction data that is kept solely by the ledger itself on the chain. The public region 163-N stores transaction data that is shared with at least one other node on the chain.

[0079] Secret region 162-N stores product composition data 164-N. Product composition data 164-N is the same data as product composition data 151-N stored in storage device 150-N. Control device 110-N causes secret region 162-N on the chain (secret region 162-N of distributed ledger 161-N) to also store product composition data 164-N with the same content as product composition data 151-N. If control device 110-N updates either product composition data 151-N or product composition data 164-N, it also updates the other. The purpose of storing product composition data 164-N, which contains the same content as product composition data 151-N, in the secret area 162-N on the chain is to enable the automatic extraction of information on newly added chemical substances (restricted substances) from product composition data 164-N through processing by nodes 111-N (specifically, in this embodiment, nodes 111-N and management function unit 112-N) on the chain. For example, node 111-N cannot extract information on newly specified restricted substances from product composition data 151-N stored off-chain. To extract information on newly specified restricted substances from product composition data 151-N stored off-chain, additional structures for extraction or manual intervention are required, for example. By storing product composition data 164-N on-chain, node 111-N can extract information on newly specified restricted substances from product composition data 164-N. Therefore, in the information management system 1, a series of processes can be automated, from updating the restriction list 350 by the platform provider 30, to updating the restriction list 165-N according to the update of the restriction list 350, and extracting information on newly specified restricted substances from the product composition data 164-N based on the restriction list 165-N.

[0080] Public area 163-N stores restriction list 165-N and public data 166-N. Restriction list 165-N is updated along with restriction list 350 updated by platform provider 30. When node 41 of platform provider 30 updates restriction list 350 by adding newly designated restricted substances due to revisions in laws and regulations, it sends transaction data to node 111-N of information management device 10-N proposing to add the aforementioned newly designated restricted substances to restriction list 165-N, thereby updating restriction list 165-N. Upon approval of the transaction data by node 111-N, the transaction data is appended to distributed ledger 161-N, and restriction list 165-N is updated. Furthermore, specifically, the transaction data is submitted after a notary node 55 signs the transaction data.

[0081] Public data 166-N is created by extracting information on restricted substances contained in the restriction list 165-N from product composition data 164-N. That is, public data 166-N contains information on chemical substances included in both product composition data 164-N and restriction list 165-N. However, product composition data is important information in each company. For example, it is possible that product composition data that does not need to be disclosed may be disclosed to other companies due to system errors, etc. In this embodiment, it is possible to determine whether confidentiality is required based on a predetermined data unit contained in the product composition data. Data that is to be kept confidential can be determined to be confidential, and data that can be disclosed can be determined to be non-confidential. When a chemical substance that is determined to be confidential becomes a restricted substance, the information on that chemical substance will be disclosed after approval is obtained within the company using the workflow function described later. Therefore, more specifically, public data 166-N is (1) information on chemical substances included in product composition data 164-N, (2) information included in restriction list 165-N, and (3) information on chemical substances that are determined not to be confidential or approved for disclosure.

[0082] Figure 6 This diagram schematically illustrates an example of product composition data 151-3 and 164-3 for product C of company C. Furthermore, as mentioned above, product composition data 151-3 and product composition data 164-3 are the same data; therefore, the following explanation will use product composition data 164-3 as an example.

[0083] Product composition data 164-3 includes product name, product number, component numbers, content percentage, and information on whether items are confidential. The product name is Product C, and its product number is C001. Product C consists of products (chemical substances) with component numbers CA001 to CA004 as its components. Figure 6 In the example shown, the percentages of component number CA001 in product C are X1%, CA002 X2%, CA003 X3%, and CA004 X4%. The sum of the percentages X1% to X4% is 100%. For example, if a product such as component number CA001 further includes products with component numbers CB001 and CB002, the component number information may include a first level representing component numbers CA001 to CA004, and a second level representing the component numbers of the products constituting the first level. In the product composition data 164-3 of this embodiment, the component number information only includes the first level.

[0084] Whether project information is classified as "public" or "non-public" is determined by the component number (Level 1 component number unit). That is, the predetermined data unit in Product Composition Data 164-3 is the Level 1 component number unit. "Public" means that the composition data of the chemical substance (including at least the component number and content percentage) is extracted from Product Composition Data 164-3 and included in Public Data 166-N, and stored in Public Area 163-N. "Non-public" means that the composition data of the chemical substance is not included in Public Data 166-N and remains in Secret Area 162-N. Figure 6 In the example shown, component numbers CA001 and CA002 are determined to be disclosed, while component numbers CA003 and CA004 are determined to be non-disclosed. Furthermore, it is assumed here that the chemical substances identified by component numbers CA001 and CA002 are restricted substances, while the chemical substances identified by component numbers CA003 and CA004 are not restricted substances.

[0085] The product composition data (public data 166-3) of product C disclosed from information management device 10-3 (node ​​111-3) of enterprise C to information management device 10-2 (node ​​111-2) of enterprise B includes the composition data of component numbers CA001 and CA002, but does not include the composition data of component numbers CA003 and CA004.

[0086] Here, we envision a scenario where Restriction List 165-3 is updated, and a chemical substance identified by composition number CA003 is added to Restriction List 165-3 as a restricted substance. To disclose information about the newly added restricted substance to Restriction List 165-3 externally, approval needs to be obtained within Company C. Information Management Device 10-3 (Information Management Device 10-N) has a workflow function for automating the process of obtaining approval for information disclosure regarding restricted substances. Furthermore, the workflow function can also be applied to the disclosure of information about chemical substances other than restricted substances. In this embodiment, all Information Management Devices 10-N included in Information Management System 1 possess the workflow function.

[0087] Figure 7 This is a diagram used to illustrate workflow functionality. (Refer to...) Figure 7 Multiple client devices 12-N can be connected to the information management device 10-N wirelessly or via wired communication. The information management device 10-N and the wired client devices 12-N are connected to the bus 11-N.

[0088] Each of the multiple client devices 12-N is a terminal device belonging to the same or related enterprise as the management information management device 10-N. Each of the multiple client devices 12-N belongs to a different department, for example. Specifically, taking the information management device 10-3 of enterprise C as an example, the multiple client devices 12-3 each belong to a different department within enterprise C, for example.

[0089] When new restricted substances are designated due to revisions to laws and regulations, disclosure of information regarding these new restricted substances to external parties (downstream companies) requires internal approval. The department with authority to approve the disclosure of chemical substances may vary depending on the chemical substance.

[0090] The information management device 10-N is equipped with a web application (hereinafter also simply referred to as "web application"). Multiple client devices 12-N each use a web browser to utilize the web application. In this embodiment, the workflow function is implemented using the web application. When the workflow function is started, the information management device 10-N notifies the group of client devices (multiple client devices 12-N) of the start of the workflow.

[0091] For each chemical substance contained in the product's composition, client devices 12-N are pre-defined with departments authorized to approve it (approval departments). Each of the multiple client devices 12-N, upon receiving a workflow start notification, refers to the web application at predetermined intervals until it receives a workflow end notification. The information management device 10-N uses the web application to disclose information about newly designated restricted substances to the multiple client devices 12-N. Each of the multiple client devices 12-N determines whether the department approving the disclosure of information about the newly designated restricted substance is its own department. When a restricted substance that it is the approver of is newly designated, the client device 12-N, after performing the approval process, approves the disclosure of information about the restricted substance contained in its own products to downstream companies. The approval process may, for example, include confirming whether the content of the restricted substance in its own products exceeds a reporting threshold. The reporting threshold is a threshold for the proportion (content rate) of the target substance contained per unit quantity of the product. For example, a predetermined value is determined by laws and regulations, and if the content of the restricted substance in the product exceeds the predetermined value, the upstream company has an obligation to disclose information about the restricted substance to the downstream company. The reporting threshold can be set to the predetermined value mentioned above. Approval processing can be performed automatically by the program installed on the client device 12-N or manually by the administrator (staff) of the management department of the client device 12-N.

[0092] When the information management device 10-N detects that approval has been granted by the client device 12-N of the approving department, it decides to change the information regarding whether the restricted substance whose disclosure information is approved is confidential from non-public to public, and includes the composition data of the restricted substance in the public data 166-N. Furthermore, when the information management device 10-N detects that approval has been granted by the client device 12-N of the approving department, it notifies the group of client devices (multiple client devices 12-N) of the end of the workflow. Thus, the workflow function ends.

[0093] Nodes 111-N of the information management device 10-N generate transaction data containing product composition data (public data 166-N) that includes information on approved restricted substances, and send this transaction data to the nodes of downstream enterprises. Thus, information on restricted substances is reported to downstream enterprises. Furthermore, in the case of newly designated restricted substances, from upstream enterprises to downstream enterprises, it is possible to report either only the information on that restricted substance or to report product composition data (public data 166-N) with the addition of information on that restricted substance.

[0094] exist Figure 6 In the example, when information management device 10-3 detects that approval has been granted by client device 12-3 of the approval department, it decides to change the confidentiality status of information regarding the chemical substance identified by composition number CA003 from non-public to public. Node 111-3 of information management device 10-3 extracts the composition data of the chemical substance (restricted substance) identified by composition number CA003 from product composition data 164-3 and includes this composition data in public data 166-3. Node 111-3 of information management device 10-3 generates transaction data reporting public data 166-3 (product composition data containing information on the approved restricted substance) and sends this transaction data to the downstream company's node (node ​​111-2 of company B). Thus, information on the newly added restricted substance, the chemical substance identified by composition number CA003, is reported to the downstream company.

[0095] Figure 8 as well as Figure 9 This is a diagram illustrating an example of product composition data 151-2 and 164-2 for product B of company B. Figure 8 The text shows an example of product composition data 151-2 and 164-2 prior to the addition of a new restricted substance (composition number CA003) to the restricted list 165-2. Figure 9The diagram illustrates product composition data 151-2 and 164-2 after a new restricted substance (composition number CA003) was added to Restriction List 165-2. As mentioned above, product composition data 151-2 is identical to product composition data 164-2; therefore, the following explanation will use product composition data 164-2 as an example.

[0096] First, refer to Figure 8 Product composition data 164-2 includes product name, product number, constituent product numbers, content percentage, and information on whether items need to be kept confidential. The product name is Product B, and its product number is B001. Product B consists of Products C and D. The first level of the constituent product number includes Product C and its product number C001, and Product D and its product number D001. The content percentage of Product C in Product B is Z1%, and the content percentage of Product D is Z2%. The sum of content percentages Z1% and Z2% is 100%.

[0097] The second level of the component numbers includes composition data for product C disclosed by company C and composition data for product D disclosed by company D. Specifically, the second level of the component numbers includes component numbers CA001 and CA002 disclosed by company C in public data 166-3, and component numbers DA001, DA002, and DA003 disclosed by company D in public data 166-4. In product C, the content rate of component number CA001 is X1%, and the content rate of component number CA002 is X2%. In product D, the content rate of component number DA001 is Y1%, the content rate of component number DA002 is Y2%, and the content rate of component number DA003 is Y3%. For example, if company C does not disclose all the components of product C, the sum of the content rates X1% and X2% will not be 100%. In this embodiment, Company C did not disclose information about the chemical substances determined by the component numbers CA003 and CA004, therefore the sum of the content rate X1% and the content rate X2% is not 100%.

[0098] Whether project information needs to be kept confidential is determined on a level 1 component number basis. Figure 8In the example, product C is decided to be disclosed, while product D is decided to be kept confidential. That is, the product composition data (public data 166-2) disclosed from company B's information management device 10-2 (node ​​111-2) to company A's information management device 10-1 (node ​​111-1) includes the composition data of product C but does not include the composition data of product D. In other words, public data 166-2 includes the composition data of product C but not the composition data of product D. That is, the predetermined data unit in product composition data 164-2 is a first-level component number unit. Furthermore, whether item information should be kept confidential can also be determined using a structure based on second-level component numbers. That is, the predetermined data unit can also be set to a second-level component number unit.

[0099] Based on the addition of the restricted substance (component number CA003) to the restriction list 165-3, the composition data of component number CA003 is appended to public data 166-3 in Company C's information management device 10-3 (node ​​111-3). Consequently, transaction data disclosing public data 166-3 with the appended composition data of component number CA003 is sent from node 111-3 to node 111-2. Upon approval of the transaction data by node 111-2, the transaction data is appended to the distributed ledger 161-2, and the composition data of component number CA003 is disclosed to node 111-2. Node 111-2 updates product composition data 164-2 by appending the composition data of component number CA003. Furthermore, control device 110-2 updates product composition data 151-2 as product composition data 164-2 is updated.

[0100] Therefore, as Figure 9 As shown, in product composition data 151-2 and 164-2, for product C, composition data for component number CA003 has been added. Specifically, in product composition data 164-2, for product C, component number CA003 and its content percentage (X3%) have been added. Here, as also... Figure 8As shown, the confidentiality information for product C is determined to be public. In other words, the composition data of product C is included in public data 166-2. Therefore, node 111-2 extracts the composition data of component number CA003 from product composition data 164-2 and includes it in public data 166-2. Node 111-2 sends the transaction data of public data 166-2, which discloses the appended composition data of component number CA003, to node 111-1 of enterprise A. Upon approval of the transaction data by node 111-1, the transaction data is appended to the distributed ledger 161-1, and the composition data of component number CA003 is disclosed to node 111-1. Node 111-1 appends the composition data of component number CA003, thus updating product composition data 164-1. Furthermore, control device 110-1 updates product composition data 151-1 as product composition data 164-1 is updated. Thus, when upstream company C discloses compositional data of the chemical substance in product C identified by compositional item number CA003, and the confidentiality of product C information is pre-determined to be public, node 111-2 automatically discloses the compositional data of compositional item number CA003 to downstream company A's node 111-1. In other words, before receiving the transaction data 166-3 from company C's node 111-3 disclosing the compositional data with the appended compositional item number CA003, node 111-2 automatically discloses the compositional data of compositional item number CA003 to company A's node 111-1 when the confidentiality of product C information is determined to be public. "Automatically" means that node 111-2, based on the aforementioned transaction data received from company C's node 111-3, sends the transaction data 166-2 disclosing the compositional data with the appended compositional item number CA003 to company A's node 111-1. That is, without approval, node 111-2 sends the transaction data of public data 166-2, which discloses the component data of component number CA003 that has been appended, to node 111-1 of enterprise A.

[0101] On the other hand, assuming that the confidentiality information for Product C is determined to be non-public, then if upstream company C discloses composition data for the chemical substance of Product C identified by composition number CA003, node 111-2 will not automatically disclose the composition data of composition number CA003 to downstream company A's node 111-1. In this case, node 111-2 awaits approval to disclose the composition data of Product C through a workflow function (i.e., performs approval processing). If approval is obtained through the approval process, node 111-2 discloses the composition data of Product C to company A's node 111-1.

[0102] Re-reference Figure 5 The control device 110-N functions as node 111-N, management function unit 112-N, and workflow function unit 113-N by executing the program stored in ROM 120-N.

[0103] Upon initial startup, node 111-N generates a key 153-N and a public key conforming to a predetermined standard. Key 153-N is stored in storage device 150-N. The public key is sent, for example, to network mapping node 53 of platform provider 30. Additionally, node 111-N has the function of generating transaction data. Node 111-N uses key 153-N to generate a digital signature and appends it to the transaction data. Furthermore, node 111-N has the function of approving transaction data proposed by other nodes. Node 111-N verifies the transaction data proposed by other nodes; if the verification result is satisfactory, it assigns a digital signature to the transaction data and sends the transaction data back to the other nodes.

[0104] When node 41 of platform provider 30 receives transaction data proposing to include newly designated restricted substances in restriction list 165-N due to revisions in laws and regulations, node 111-N approves the transaction data after verifying it. Furthermore, node 111-N stores the transaction data in distributed ledger 161-N. Thus, the newly designated restricted substances are appended to restriction list 165-N, and restriction list 165-N is updated.

[0105] When Restricted List 165-N is updated, Node 111-N performs a confirmation process (confirmation process) to determine whether information regarding restricted substances added to Restricted List 165-N due to the update needs to be disclosed to downstream companies. Specifically, Node 111-N compares the restricted substances added to Restricted List 165-N in Product Composition Data 164-N to confirm whether the content of the added restricted substances in its products is above the reporting threshold. If the content of the restricted substances in Product Composition Data 164-N is above the reporting threshold, Node 111-N determines that information regarding the restricted substances needs to be disclosed to downstream companies. That is, Node 111-N confirms that the update to Restricted List 165-N has an impact on itself. If the content of the restricted substances in Product Composition Data 164-N is below the reporting threshold, Node 111-N determines that information regarding the restricted substances does not need to be disclosed to downstream companies. That is, Node 111-N confirms that the update to Restricted List 165-N does not have an impact on itself. If it is confirmed that an update to the restriction list 165-N will affect itself, node 111-N notifies the management function unit 112-N of this intention. Alternatively, the management function unit 112-N may be equipped with the function of performing confirmation processing. In this case, for example, when the management function unit 112-N detects an update to the restriction list 165-N made by node 111-N, it performs confirmation processing using product composition data 151-N.

[0106] When the management function unit 112-N receives a notification that an update to the restricted list 165-N will affect it, it performs a process (reading process) to retrieve information (customer information) from the downstream enterprise from the storage device 150-N. Specifically, the management function unit 112-N retrieves the customer information by referring to the customer list 152-N stored in the storage device 150-N. The management function unit 112-N then notifies the workflow function unit 113-N of the information regarding restricted substances to be reported to the downstream enterprise. Alternatively, node 111-N can also have the function of performing the reading process of the management function unit 112-N. In this case, for example, the same information as the customer list 152-N is also stored in the secret area 162-N of the distributed ledger 161-N stored in the storage device 160-N. That is, the same information as the customer list 152-N is also stored on the chain. Thus, node 111-N can retrieve customer information from the distributed ledger 161-N.

[0107] Workflow Function Unit 113-N to Client Device Group ( Figure 7 The workflow function unit 113-N notifies the management function unit 112-N of the start and end of the workflow. When the workflow function unit receives approval from the client device 12-N of the approval department to disclose information on restricted substances added to the restricted list 165-N, the workflow function unit 113-N notifies the management function unit 112-N of this intention.

[0108] When the management function unit 112-N receives the approval notification from the workflow function unit 113-N, it requests node 111-N to update the public data 166-N.

[0109] When node 111-N receives an update request for public data 166-N, it updates public data 166-N by adding information about approved restricted substances. Furthermore, node 111-N generates transaction data containing public data 166-N and sends this transaction data to the node of the target downstream enterprise. With the approval of the transaction data by the downstream enterprise's node, public data 166-N is disclosed to the downstream enterprise. That is, the added information about restricted substances is reported to the downstream enterprise. Thus, information about chemical substances (restricted substances in this embodiment) is disclosed from the upstream enterprise to the downstream enterprise. Alternatively, node 111-N may also generate transaction data containing information about approved restricted substances and send this transaction data to the node of the target downstream enterprise.

[0110] When information about chemical substances is received from upstream enterprises, the various parts of the control device 110-N function as follows.

[0111] When node 111-N receives transaction data containing publicly available data from an upstream enterprise's node, it verifies and approves the transaction data. As a result, information on newly disclosed chemical substances from the upstream enterprise's node is appended to product composition data 164-N, updating product composition data 164-N. Management function unit 112-N detects the update to product composition data 164-N. Management function unit 112-N updates product composition data 151-N in response to the update of product composition data 164-N.

[0112] Node 111-N performs a process to determine whether the information regarding the disclosed chemical substance is confidential (determination process). If the composition data of a product containing the disclosed chemical substance is included in public data 166-N (in other words, if the information regarding whether a product containing the disclosed chemical substance is confidential is predetermined to be public in product composition data 164-N), then Node 111-N determines that the disclosed chemical substance is not confidential. If the composition data of a product containing the disclosed chemical substance is not included in public data 166-N (in other words, if the information regarding whether a product containing the disclosed chemical substance is confidential is predetermined to be non-public in product composition data 164-N), then Node 111-N determines that the disclosed chemical substance is confidential.

[0113] use Figure 9To illustrate with the example shown, when node 111-3 of company C, which is an upstream company, discloses information about a chemical substance identified by composition number CA003, node 111-2 of company B determines that the disclosed chemical substance is not a confidential item because the information on whether product C containing the chemical substance identified by composition number CA003 should be kept confidential has been pre-determined to be public (since the composition data of product C is included in public data 166-2).

[0114] If node 111-N determines that the disclosed chemical substance is not confidential, it includes the information about that chemical substance in public data 166-N. Furthermore, node 111-N sends transaction data containing public data 166-N to downstream enterprise nodes. Thus, when node 111-N receives information about a chemical substance from an upstream enterprise, it determines whether the chemical substance is confidential; if not, it discloses the information to the downstream enterprise. This automates the entire process from receiving information about the chemical substance from the upstream enterprise to disclosing it to the downstream enterprise.

[0115] If Node 111-N determines that the disclosed chemical substance is confidential, it confirms whether the disclosed chemical substance is a restricted substance based on Restriction List 165-N. If the disclosed chemical substance is not a restricted substance, there is no obligation to disclose it to downstream companies; on the other hand, if the disclosed chemical substance is a restricted substance, it is required to disclose it to downstream companies. If Node 111-N determines that the disclosed chemical substance is a restricted substance, it notifies the Management Function Department 112-N of this intention (the intention to disclose a restricted substance from an upstream company).

[0116] When the Management Function Unit 112-N receives notification of a disclosure of a restricted substance from an upstream company, it performs the aforementioned reading process, namely, reading the downstream company's information (customer information) from the storage device 150-N. The Management Function Unit 112-N then notifies the Workflow Function Unit 113-N of the information regarding the restricted substance (chemical substance disclosed by the upstream company) to be reported to the downstream company.

[0117] Workflow Function Unit 113-N to Client Device Group ( Figure 7 The workflow function unit 113-N notifies the management function unit 112-N of the start and end of the workflow. When the workflow function unit receives approval from the client device 12-N of the approval department to disclose information on restricted substances added to the restricted list 165-N, the workflow function unit 113-N notifies the management function unit 112-N of this intention.

[0118] When the management function unit 112-N receives the approval notification from the workflow function unit 113-N, it requests node 111-N to update the public data 166-N.

[0119] When node 111-N receives an update request for public data 166-N, it updates public data 166-N by adding information about approved restricted substances. Furthermore, node 111-N generates transaction data containing the updated public data 166-N and sends this transaction data to the nodes of the target downstream enterprise. With the approval of the transaction data by the downstream enterprise's nodes, public data 166-N is disclosed to the downstream enterprise. That is, information on chemical substances (restricted substances) disclosed from the upstream enterprise is reported to the downstream enterprise. Additionally, node 111-N can also generate transaction data containing information about approved restricted substances and send this transaction data to the nodes of the target downstream enterprise.

[0120] Furthermore, the management function unit 112-N can also be equipped with the aforementioned function of performing judgment processing (processing for determining whether information disclosed from an upstream company regarding a chemical substance is confidential). In this case, for example, the same information as the restriction list 165-N is also stored in the storage device 150-N. That is, the same information as the restriction list 165-N is also stored off-chain. Thus, the management function unit 112-N can perform judgment processing using the restriction list stored in the storage device 150-N.

[0121] <Flowchart>

[0122] Figure 10 This is a flowchart illustrating the process performed by the control device 110-N of the information management device 10-N when the restriction list is updated. Figure 10 The flowchart shown illustrates a process that is invoked from the main routine after the information management device 10-N is started, and executed repeatedly at predetermined intervals. Figure 10 And the following Figure 11 The steps of the flowchart shown (hereinafter referred to as "S") are explained as being implemented by software processing performed by the control device 110-N of the information management device 10-N, but some or all of these steps can also be implemented by hardware (electronic circuits) manufactured within the control device 110-N.

[0123] In S1, control device 110-N (node ​​111-N) determines whether it has received transaction data from node 41 of platform provider 30 proposing to include the new restricted substance in restriction list 165-N. If control device 110-N (node ​​111-N) determines that the transaction data has been received (S1: Yes), it causes the process to proceed to S2. If control device 110-N (node ​​111-N) determines that the transaction data has not been received (S1: No), it causes the process to return.

[0124] In S2, after verifying the transaction data received in S1, control device 110-N (node ​​111-N) approves the transaction data. Control device 110-N (node ​​111-N) stores the transaction data in the distributed ledger 161-N. As a result, the newly designated restricted substance is added to the restriction list 165-N, and the restriction list 165-N is updated.

[0125] In S3, control device 110-N (node ​​111-N) performs a confirmation process to determine whether it is necessary to report information about the added restricted substances to downstream enterprises. Specifically, control device 110-N (node ​​111-N) compares the restricted substances added to the restriction list 165-N in product composition data 164-N to confirm whether the products supplied by the enterprise to downstream enterprises (the enterprise's own products) contain the added restricted substances. If the enterprise's own products contain the added restricted substances, control device 110-N (node ​​111-N) also confirms whether the content rate is above the reporting threshold. If product composition data 164-N contains the aforementioned restricted substances and the content rate of the aforementioned restricted substances is above the reporting threshold, control device 110-N (node ​​111-N) determines that it is necessary to disclose information about the aforementioned restricted substances to downstream enterprises (S3: Yes), and the process proceeds to S4. If the product composition data 164-N does not contain the aforementioned restricted substance, or if the product composition data 164-N contains the aforementioned restricted substance but the content of the restricted substance is lower than the reporting threshold, the control device 110-N (node ​​111-N) determines that it is not necessary to disclose the information of the restricted substance to the downstream enterprise (S3: No), and causes the processing to return.

[0126] In S4, control device 110-N (node ​​111-N) determines whether the information of the added restricted substance is a confidential matter of the enterprise. Specifically, control device 110-N (node ​​111-N) determines whether the information of the added restricted substance is a confidential matter based on whether the added restricted substance is already included in public data 166-N. If control device 110-N (node ​​111-N) determines that the added restricted substance is not yet included in public data 166-N (S4: Yes), it determines that the information of the added restricted substance is a confidential matter, and the process proceeds to S5. If control device 110-N (node ​​111-N) determines that the added restricted substance is already included in public data 166-N (S4: No), it determines that the information of the added restricted substance is not a confidential matter, skips the processes in S5 and S6, and the process proceeds to S7.

[0127] In S5, control device 110-N (management function unit 112-N) reads information (customer information) from downstream enterprises from storage device 150-N. Control device 110-N (workflow function unit 113-N) notifies the client device group of the start of the workflow in order to obtain approval for disclosing information on restricted substances to be reported to downstream enterprises.

[0128] In S6, control device 110-N (workflow function unit 113-N) receives approval from client device 12-N of the approval department to disclose information about restricted substances added to the restriction list 165-N. Control device 110-N (workflow function unit 113-N) then notifies the group of client devices of the end of the workflow.

[0129] In S7, the control device 110-N (node ​​111-N) adds information on restricted substances added to the restriction list 165-N and updates the public data 166-N.

[0130] In S8, control device 110-N (node ​​111-N) generates transaction data containing public data 166-N and sends this transaction data to the node of the downstream enterprise. Upon approval of the transaction data by the downstream enterprise's node, public data 166-N is disclosed to the downstream enterprise. That is, information about the added restricted substance is reported to the downstream enterprise.

[0131] Figure 11 This is a flowchart illustrating the process performed by the control device 110-N of the information management device 10-N when information about chemical substances is received from an upstream enterprise. Figure 11 The process shown in the flowchart is called from the main routine after the information management device 10-N is started, and is executed repeatedly at a predetermined cycle.

[0132] In S11, control device 110-N (node ​​111-N) determines whether information about the chemical substance has been disclosed from an upstream enterprise's node. That is, control device 110-N (node ​​111-N) determines whether transaction data containing publicly available data has been received from an upstream enterprise's node. If information about the chemical substance has been disclosed from an upstream enterprise's node (S11: Yes), control device 110-N (node ​​111-N) causes the process to proceed to S12. If no information about the chemical substance has been disclosed from an upstream enterprise's node (S11: No), control device 110-N (node ​​111-N) causes the process to return.

[0133] In S12, the control device 110-N (node ​​111-N) approves the transaction data received from the upstream enterprise's node and stores the transaction data in the distributed ledger 161-N. As a result, the product composition data 164-N is updated. Furthermore, the control device 110-N (management function unit 112-N) updates the product composition data 151-N along with the update of the product composition data 164-N.

[0134] In S13, control device 110-N (node ​​111-N) determines whether the received (disclosed) information about the chemical substance is confidential to the company. Here, it is assumed that... Figure 8 , 9 As shown, the predetermined data unit is the component number unit of the first level. Specifically, control device 110-N (node ​​111-N) determines whether the composition data of a product containing a disclosed chemical substance is included in public data 166-N (in product composition data 164-N, whether the information on whether the product containing the disclosed chemical substance is confidential is predetermined to be public). If control device 110-N (node ​​111-N) determines that the composition data of a product containing a disclosed chemical substance is not included in public data 166-N (S13: Yes), it determines that the information of the disclosed chemical substance is confidential and proceeds to S14. If control device 110-N (node ​​111-N) determines that the composition data of a product containing a disclosed chemical substance is included in public data 166-N (S13: No), it determines that the information of the disclosed chemical substance is not confidential, skips the processes of S14 to S16 (approval processes), and proceeds to S17.

[0135] In S14, control device 110-N (node ​​111-N) determines whether the chemical substance in the received information is a restricted substance based on the restriction list 165-N. If control device 110-N (node ​​111-N) determines that the chemical substance is a restricted substance (S14: Yes), it proceeds to S15 to disclose the information about the chemical substance to the downstream enterprise's node. If control device 110-N (node ​​111-N) determines that the chemical substance is not a restricted substance (S14: No), it does not disclose the information about the chemical substance to the downstream enterprise's node and returns to the previous state.

[0136] In S15, control device 110-N (management function unit 112-N) reads information (customer information) from downstream enterprises from storage device 150-N. In order to obtain approval to disclose information on restricted substances (information on received chemical substances) to downstream enterprises, control device 110-N (workflow function unit 113-N) notifies the client device group of the start of the workflow.

[0137] In S16, control device 110-N (workflow function unit 113-N) obtains approval from client device 12-N of the approval department to disclose information about the received chemical substance. Control device 110-N (workflow function unit 113-N) notifies the group of client devices of the end of the workflow.

[0138] In S17, the control device 110-N (node ​​111-N) updates the public data 166-N by adding the information of the chemical substance (restricted substance) received in S11.

[0139] In S18, control device 110-N (node ​​111-N) generates transaction data containing public data 166-N and sends this transaction data to the node of the downstream enterprise. Upon approval of the transaction data by the downstream enterprise's node, public data 166-N is disclosed to the downstream enterprise. That is, information regarding the received restricted substance is reported to the downstream enterprise.

[0140] As described above, in the information management system 1 of this embodiment, when the restriction list 350 is updated by the platform provider 30, the restriction list 165-N is updated in each node 111-N according to the update of the restriction list 350. Moreover, based on the update of the restriction list 165-N, information on restricted substances is disclosed from upstream enterprises to downstream enterprises.

[0141] When information about a chemical substance is disclosed from an upstream company, if the chemical substance is not confidential and is a restricted substance, node 111-N discloses to downstream companies the composition data of its own products, including information about the chemical substance disclosed from the upstream company. That is, a series of processes can be automated, from updating the restriction list 350 by platform provider 30, to updating the restriction list 165-N according to the restriction list 350, and extracting information on newly designated restricted substances from product composition data 164-N based on the restriction list 165-N. Therefore, information can flow easily within the supply chain.

[0142] When the chemical substance disclosed from the upstream company is confidential, node 111-N, after approval processing, discloses the composition data of the company's products containing information about the chemical substance disclosed from the upstream company to the downstream company. For example, if the chemical substance disclosed from the upstream company is a restricted substance, it is also possible to automatically disclose the composition data of the company's products containing information about that chemical substance to the downstream company. However, due to system errors, there may be situations where unnecessary product composition data is disclosed to other companies. As described above, when the chemical substance disclosed from the upstream company is confidential, by disclosing the composition data of the company's products containing information about that chemical substance to the downstream company after approval processing, unnecessary disclosure of the composition data of the company's products can be prevented.

[0143] Furthermore, in the information management system 1 of this embodiment, since the restricted lists (restricted lists 350, 165-N) and public data 166-N are managed using distributed ledger technology, their resistance to tampering can be improved.

[0144] [Variation Example]

[0145] In one implementation, a determination is made as to whether information about the disclosed chemical substance should be disclosed to a downstream company based on whether the composition data of a product containing a chemical substance disclosed from an upstream company is included in publicly available data 166-N. However, for example, it is also possible to set a confidentiality flag in predetermined data units within the product composition data 151-N and 164-N, and based on this flag, determine whether information about the disclosed chemical substance should be disclosed to a downstream company.

[0146] Embodiments of this disclosure have been described, but should be considered illustrative rather than restrictive in all respects. The scope of this disclosure is defined by the claims and is intended to include all modifications within the meaning and scope equivalent to the claims.

Claims

1. An information management system that uses distributed ledger technology to manage information about chemical substances contained in products circulating in the supply chain, comprising: The first device, which belongs to the first enterprise that manufactures the first product, has the first distributed ledger; The second device, belonging to the second enterprise that supplies the second product contained in the first product to the first enterprise, has a second distributed ledger; A third device, belonging to a third enterprise that supplies the third product contained in the second product to the second enterprise, has a third distributed ledger; and A management device that manages the information management system, having a fourth distributed ledger, Each of the first, second, third, and fourth distributed ledgers contains a list representing chemical substances managed by the information management system. The second device stores composition data of the second product, including composition data of the third product disclosed from the third device. The management device, In the event of a new chemical substance being specified and managed by the information management system, the list in the fourth distributed ledger is updated by adding the new chemical substance. The first transaction data, which proposes to add the new chemical substance and update the list, is sent to the first device, the second device, and the third device. The first device, the second device, and the third device update the lists of the first distributed ledger, the second distributed ledger, and the third distributed ledger, respectively, based on the first transaction data from the management device. If the third device contains the new chemical substance in the composition of the third product, the third device will send second transaction data containing composition data of the third product including information about the new chemical substance to the second device. The second device, Based on the second transaction data from the third device, the composition data of the third product contained in the composition data of the second product is updated, thereby updating the composition data of the second product. If it is decided to disclose the composition data of the third product contained in the composition data of the second product, the third transaction data containing the updated composition data of the second product shall be sent to the first device.

2. The information management system according to claim 1, The second device, without deciding to disclose the composition data of the third product included in the composition data of the second product, Perform the first process for disclosing information about the new chemical substance. Based on the approval obtained through the first process, the third transaction data containing information about the new chemical substance is sent to the first device.

3. The information management system according to claim 2, The second distributed ledger includes a first secret area and a first public area. The first secret area is an area that stores transaction data that is not shared with any of the first, third, and fourth distributed ledgers. The first public area is an area that stores transaction data that is shared with at least one of the first, third, and fourth distributed ledgers. The second device stores the composition data of the second product in the first secret area, and stores the data disclosed to the first enterprise (i.e., the first public data) from the composition data of the second product in the first public area. The second device, Based on the second transaction data from the third device, which contains composition data of the third product including information about the new chemical substance, the composition data of the second product stored in the first secret area is updated by appending information about the new chemical substance to the composition data of the third product. If the first public data packet contains the composition data of the third product before the update, the first public data packet is updated by appending the updated composition data of the second product to the first public data packet, and the third transaction data containing the updated first public data packet is sent to the first device.

4. The information management system according to claim 3, The second device, in the case where the first disclosed data does not include the composition data of the third product before the update. Perform the first process described above. Based on the approval obtained through the first process, the first public data is updated by adding updated composition data of the second product to the first public data, and the third transaction data containing the updated first public data is sent to the first device.

5. The information management system according to claim 4, The third distributed ledger includes a second secret area and a second public area. The second secret area is an area that stores transaction data that is not shared with any of the first, second, and fourth distributed ledgers. The second public area is an area that stores transaction data that is shared with at least one of the first, second, and fourth distributed ledgers. The third device stores the second transaction data, which includes the composition data of the third product, in the second secret area, and stores the second public data, which is the data disclosed to the second enterprise from the composition data of the third product, in the second public area. The third device, When the new chemical substance is appended to the list of the third distributed ledger, a second process is performed to include information about the new chemical substance in the second public data. Based on the approval obtained through the second process, the second transaction data containing the second public data including information about the new chemical substance is sent to the second device.

6. The information management system according to any one of claims 1 to 5, The list includes chemical substances that are specified in laws and regulations.

7. An information management method, which is an information management system for managing information about chemical substances contained in products circulating in the supply chain using distributed ledger technology. The information management system has the following features: The first device, which belongs to the first enterprise that manufactures the first product, has the first distributed ledger; The second device, belonging to the second enterprise that supplies the second product contained in the first product to the first enterprise, has a second distributed ledger; A third device, belonging to a third enterprise that supplies the third product contained in the second product to the second enterprise, has a third distributed ledger; and A management device that manages the information management system, having a fourth distributed ledger, Each of the first, second, third, and fourth distributed ledgers contains a list representing chemical substances managed by the information management system. The second device stores composition data of the second product, including composition data of the third product disclosed from the third device. The information management method includes: The steps are as follows: when a new chemical substance is specified and managed by the information management system, the management device adds the new chemical substance to update the list of the fourth distributed ledger, and sends the first transaction data proposing to add the new chemical substance and update the list to the first device, the second device, and the third device. The steps of the first device, the second device, and the third device updating the list of the first distributed ledger, the list of the second distributed ledger, and the list of the third distributed ledger, respectively, based on the first transaction data from the management device; The third device sends second transaction data containing composition data of the third product containing information about the new chemical substance to the second device when the composition of the third product contains the new chemical substance. The step of updating the composition data of the second product by updating the composition data of the third product contained in the composition data of the second product based on the second transaction data from the third device; The step of the second device sending third transaction data containing the updated composition data of the second product to the first device when it decides to disclose the composition data of the third product included in the composition data of the second product.

Images