Information processing program

Abstract

To facilitate appropriate data transaction.SOLUTION: An information processing apparatus 100 receives a data transaction 1 from a client apparatus 206A. Based on the data transaction 1, the information processing apparatus 100 sends a verification request to a verification apparatus 204 requesting verification of a size relation between a specified EncOPE (monotonic ID) and an EncOPE (monotonic ID) recognized as the latest. The information processing apparatus 100 receives a notification from the verification apparatus 204 indicating that the specified EncOPE (monotonic ID) matches the EncOPE (monotonic ID) recognized as the latest. The information processing apparatus 100 determines to transact item data because the specified EncOPE (monotonic ID) matches the EncOPE (monotonic ID) recognized as the latest.SELECTED DRAWING: Figure 9

Description

[Technical field]

[0001] The present invention relates to an information processing program. [Background technology]

[0002] Conventionally, there exists a virtual space called a metaverse. Data representing items are traded within the metaverse or between metaverses. For example, in order to trade data appropriately, a management server that manages the latest certificate corresponding to the data is prepared. For example, a certificate is issued every time data is traded. For example, when a control server is requested to trade data, the control server determines whether or not to trade the data by inquiring of the management server whether or not the certificate associated with the data is the latest.

[0003] Prior art includes, for example, a technique for storing an object ID that identifies an object and authenticity information that indicates that the object is authentic in association with each other. Another example is a technique for utilizing a public key infrastructure. Another example is a technique for distributing and managing content in multiple metaverses. Another example is a technique for managing information on various avatars that exist in the metaverse. Another example is a technique for verifying the validity of an electronic certificate and whether or not an electronically signed document has been tampered with. Another example is a technique for encrypting sensitive data with a predetermined encryption method using a user key. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2009-217387 A [Patent Document 2] US Patent Application Publication No. 2022 / 0114542 [Patent Document 3] US Patent Application Publication No. 2011 / 0014985 [Patent Document 4] JP 2011-216073 A [Patent Document 5] JP 2011-077933 A [Patent Document 6] JP 2022-146998 A Summary of the Invention [Problem to be solved by the invention]

[0005] However, in the conventional technology, it is difficult to appropriately trade data representing items. For example, every time a control server is requested to trade data, the control server inquires of the management server whether or not the certificate associated with the data is up to date, which increases the processing load on the management server.

[0006] In one aspect, the present invention aims to facilitate proper trading of data. [Means for solving the problem]

[0007] According to one embodiment, an information processing program is proposed that communicates with a first terminal corresponding to a transaction source, accepts designation of a first certificate assigned with a first value associated with an object to be traded, uses a memory unit that stores a second value that changes monotonically each time the object is traded, and when it is determined that the first value assigned to the first certificate for which the designation has been accepted matches the second value, controls the memory unit to store a third value that is monotonically changed from the second value, and when it is determined using the memory unit that the first value assigned to the first certificate for which the designation has been accepted matches the second value, generates a second certificate assigned with the third value associated with the object, and transmits the generated second certificate to a management unit that manages the latest certificate associated with the object and to a second terminal corresponding to the transaction partner. Effect of the Invention

[0008] According to one aspect, data can be made easier to trade appropriately. [Brief description of the drawings]

[0009] [Figure 1] FIG. 1 is a diagram illustrating an example of an information processing method according to an embodiment. [Diagram 2] FIG. 2 is an explanatory diagram illustrating an example of an information processing system 200. As shown in FIG. [Diagram 3] FIG. 3 is a block diagram showing an example of a hardware configuration of the information processing device 100. As shown in FIG. [Figure 4] FIG. 4 is a block diagram showing an example of the hardware configuration of the verification device 204. As shown in FIG. [Diagram 5] FIG. 5 is an explanatory diagram showing an example of the contents stored in the ID information management table 410. As shown in FIG. [Figure 6] FIG. 6 is a block diagram showing an example of the hardware configuration of the management device 201. As shown in FIG. [Figure 7] FIG. 7 is an explanatory diagram of an example of the contents of the certificate information management table 610. As shown in FIG. [Figure 8] FIG. 8 is a block diagram showing an example of a functional configuration of the information processing device 100. As shown in FIG. [Figure 9] FIG. 9 is an explanatory diagram (part 1) showing a first operation example of the information processing device 100. [Figure 10] FIG. 10 is an explanatory diagram (part 2) showing the first operation example of the information processing device 100. [Figure 11] FIG. 11 is an explanatory diagram (part 3) showing the first operation example of the information processing device 100. [Figure 12] FIG. 12 is a sequence diagram illustrating an example of a first transaction processing procedure. [Figure 13] FIG. 13 is an explanatory diagram showing a second operation example of the information processing device 100. In FIG. [Figure 14] FIG. 14 is a sequence diagram illustrating an example of a second transaction processing procedure. [Figure 15] FIG. 15 is an explanatory diagram showing a third operation example of the information processing device 100. In FIG. [Figure 16] FIG. 16 is a sequence diagram illustrating an example of the third transaction processing procedure. [Figure 17] FIG. 17 is an explanatory diagram showing a fourth operation example of the information processing device 100. In FIG. [Figure 18] FIG. 18 is a sequence diagram illustrating an example of the fourth transaction processing procedure. [Figure 19] FIG. 19 is an explanatory diagram showing a fifth operation example of the information processing device 100. As shown in FIG. [Figure 20] FIG. 20 is a sequence diagram showing an example of the fifth transaction processing procedure. [Figure 21] FIG. 21 is an explanatory diagram showing a sixth operation example of the information processing device 100. In FIG. [Figure 22] FIG. 22 is a sequence diagram showing an example of the sixth transaction processing procedure. [Diagram 23] FIG. 23 is a flowchart illustrating an example of an overall processing procedure. [Figure 24] FIG. 24 is a flowchart illustrating an example of a registration process procedure. [Diagram 25] FIG. 25 is a flowchart illustrating an example of an update process procedure. [Figure 26] FIG. 26 is an explanatory diagram showing an application example of the information processing system 200. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, an embodiment of an information processing program according to the present invention will be described in detail with reference to the drawings.

[0011] (An example of an information processing method according to an embodiment) 1 is an explanatory diagram showing an example of an information processing method according to an embodiment. The information processing device 100 is a computer for facilitating appropriate data trading. The information processing device 100 is, for example, a server or a PC (Personal Computer).

[0012] The data may represent, for example, an item existing in the metaverse. The metaverse is a virtual space. The data may represent, for example, an item existing in a game. Here, data may be traded within the metaverse or between metaverses. The trade may be, for example, a transfer or a copy.

[0013] In this case, it is desirable to trade data appropriately. For example, it is desirable to prevent illegal trading of data. For example, data may be prohibited from being present in multiple copies at the same time. For example, data may be prohibited from being copied. Specifically, it is desirable for the owner of data to transfer data to only one person and to prohibit illegal copying and transferring data to multiple people. Specifically, it is desirable to prohibit a past owner of data from illegally copying data and transferring the same data to someone again. For example, it is desirable to maintain order in the metaverse or ensure fairness between participants in the metaverse by trading data appropriately.

[0014] Here, for example, a method 1 is considered in which a certificate including a digital signature is associated with data to facilitate appropriate data trading. Specifically, an issuing server is prepared that issues a certificate including a digital signature in association with the data to be traded every time data is traded. Also, specifically, a management server is prepared that manages certificates previously issued in association with data.

[0015] Specifically, the issuing server accepts data requested to be traded and a first certificate associated with the data from a trading party. Specifically, the issuing server queries the management server as to whether the first certificate matches the latest certificate. Specifically, if the first certificate matches the latest certificate, the issuing server issues a new certificate in association with the data, and transmits the data and the issued certificate to the trading party. Specifically, if the first certificate does not match the latest certificate, the issuing server does not transmit the data to the trading party. In this way, the issuing server can cooperate with the management server to facilitate appropriate data trading.

[0016] However, in the method 1, it may be difficult to appropriately trade data. For example, every time an issuing server is requested to trade data, the issuing server inquires of the management server whether the first certificate associated with the data matches the latest certificate. This leads to a problem of an increase in the processing load on the management server. In addition, there is a problem of an increase in traffic between the issuing server and the management server. And there is a problem of an increase in the time required to trade data.

[0017] Here, if the time required to trade data increases, the metaverse participants who are the source or destination of the data may feel less comfortable in the metaverse. Also, if the time required to trade data increases, the metaverse participants who are the source or destination of the data may feel less immersed in the metaverse.

[0018] In response to this, method 2 can be considered in which the management server assigns flag information to the latest certificate among the certificates previously issued in association with the data, making it easier to identify the latest certificate. Even with method 2, it may be difficult to properly trade data. For example, it is not possible to reduce the number of times that the issuing server queries the management server to determine whether the first certificate associated with the data matches the latest certificate. This results in a problem of an increase in the time required to trade data.

[0019] Also, method 3 can be considered, in which authenticity information is added to the data. For method 3, for example, the above-mentioned Patent Document 1 can be referred to. Even with method 3, it may be difficult to trade data appropriately. For example, there is a problem that verifying the authenticity information increases the time required to trade data.

[0020] In this embodiment, therefore, an information processing method that can facilitate appropriate data trading will be described. Specifically, this information processing method can reduce the time required for trading data while preventing unauthorized data trading.

[0021] 1, there are an information processing device 100, a storage unit 120, a management unit 130, a first terminal 111, and a second terminal 112. The storage unit 120 is realized, for example, by a computer different from the information processing device 100. The storage unit 120 may exist in a system that realizes the metaverse. The management unit 130 is realized, for example, by a computer different from the information processing device 100. The storage unit 120 and the management unit 130 are realized, for example, by different computers.

[0022] The first terminal 111 is a terminal corresponding to a transacting party when trading the target 101. The first terminal 111 is, for example, a terminal used by a metaverse participant who is a transacting party when trading the target 101. The second terminal 112 is a terminal corresponding to a transacting party when trading the target 101. The second terminal 112 is, for example, a terminal used by a metaverse participant who is a transacting party when trading the target 101.

[0023] (1-1) The information processing device 100 accepts the designation of a first certificate to which a first value is assigned and which is associated with an object 101 to be traded. The first value is preferably, for example, an order-preserving encrypted value. The object 101 is, for example, data representing an item. The information processing device 100 accepts the designation of the first certificate to which a first value is assigned, for example, by communicating with a first terminal 111.

[0024] Specifically, the information processing device 100 accepts the designation of the first certificate to which the first value has been assigned by receiving an identifier of the first certificate to which the first value has been assigned from the first terminal 111. Specifically, the information processing device 100 may accept the designation of the first certificate to which the first value has been assigned by receiving the first certificate to which the first value has been assigned from the first terminal 111.

[0025] The storage unit 120 stores, for example, a second value 121 that changes monotonically every time the target 101 is traded. The second value 121 is, for example, a value that monotonically increases every time the target 101 is traded. The second value 121 is, for example, a value that monotonically decreases every time the target 101 is traded. It is preferable that the second value 121 is an order-preserving encrypted value. The management unit 130 manages, for example, the latest certificate associated with the target 101. The management unit 130 specifically stores a certificate 131 that was generated in the past in association with the target 101. The management unit 130 may specifically store an identifier of the latest certificate.

[0026] (1-2) The information processing device 100 uses the storage unit 120 to determine whether the first value assigned to the first certificate, the specification of which has been accepted, matches the second value 121. When the first value and the second value 121 are each an order-preserving encrypted value, the first value and the second value 121 can be compared in magnitude without being decrypted.

[0027] The information processing device 100, for example, requests the storage unit 120 to determine whether or not a first value assigned to the first certificate, the designation of which has been accepted, matches the second value 121. The information processing device 100 receives, for example, from the storage unit 120, a result of the determination as to whether or not the first value assigned to the first certificate matches the second value 121.

[0028] (1-3) When the information processing device 100 determines that the first value assigned to the first certificate, the designation of which has been accepted, matches the second value 121, it controls the storage unit 120 to store a third value obtained by monotonically changing the second value 121. For example, the information processing device 100 generates a third value obtained by monotonically changing the second value 121 and transmits it to the storage unit 120, thereby controlling the storage unit 120 to store the third value obtained by monotonically changing the second value 121.

[0029] (1-4) When the information processing device 100 determines that the first value assigned to the first certificate, the specification of which has been accepted, matches the second value 121, the information processing device 100 generates a second certificate 140 assigned a third value and associated with the target 101. This enables the information processing device 100 to generate a second certificate 140 that is preferably held by a business partner.

[0030] (1-5) The information processing device 100 transmits the generated second certificate 140 to the management unit 130 and the second terminal 112. The information processing device 100 may transmit the target 101 to the second terminal 112. This enables the information processing device 100 to enable the management unit 130 to properly manage the latest certificate, and prevents the transacting party from trading the target 101 again. The information processing device 100 enables the transacting party to properly own the target 101, and enables the transacting party to properly trade the target 101 thereafter.

[0031] The information processing device 100 can appropriately determine whether or not to trade data without verifying the certificate. Therefore, the information processing device 100 can do without requesting the management unit 130 to verify the certificate. Therefore, the information processing device 100 can suppress an increase in the processing load on the management unit 130. Furthermore, the information processing device 100 can suppress an increase in traffic with the management unit 130. Furthermore, the information processing device 100 can suppress an increase in the time required to trade data. In this way, the information processing device 100 can make it easier to trade data.

[0032] Here, a case has been described in which the information processing device 100 requests the storage unit 120 to determine whether or not the first value assigned to the first certificate, the designation of which has been accepted, matches the second value 121, but the present invention is not limited to this. For example, the information processing device 100 may acquire the second value 121 from the storage unit 120 and determine whether or not the first value assigned to the first certificate, the designation of which has been accepted, matches the second value 121.

[0033] Here, a case has been described in which the information processing device 100 generates the third value by monotonically changing the second value 121, but the present invention is not limited to this. For example, the information processing device 100 may request the storage unit 120 to generate a third value by monotonically changing the second value 121. For example, the information processing device 100 may acquire the third value by monotonically changing the second value 121 from a generation unit that generates the third value by monotonically changing the second value 121.

[0034] Here, the case where the information processing device 100 is a single computer has been described, but the present invention is not limited to this. For example, the functions of the information processing device 100 may be realized by a plurality of computers. Specifically, the functions of the information processing device 100 may be realized on a cloud.

[0035] (An example of the information processing system 200) Next, an example of an information processing system 200 to which the information processing device 100 shown in FIG. 1 is applied will be described with reference to FIG.

[0036] Fig. 2 is an explanatory diagram showing an example of an information processing system 200. In Fig. 2, the information processing system 200 includes an information processing device 100, a management device 201, an issuing device 202, a generating device 203, a verifying device 204, a recording device 205, and one or more client devices 206.

[0037] In the information processing system 200, the various devices described above are connected to one another via a wired or wireless network 210. The network 210 is, for example, a local area network (LAN), a wide area network (WAN), or the Internet.

[0038] For example, in the information processing system 200, the information processing device 100 and the management device 201 are connected via a wired or wireless network 210. Also, for example, in the information processing system 200, the information processing device 100 and the issuing device 202 are connected via a wired or wireless network 210. Also, for example, in the information processing system 200, the information processing device 100 and the generating device 203 are connected via a wired or wireless network 210. Also, for example, in the information processing system 200, the information processing device 100 and the verification device 204 are connected via a wired or wireless network 210. Also, for example, in the information processing system 200, the information processing device 100 and the recording device 205 are connected via a wired or wireless network 210. Also, for example, in the information processing system 200, the information processing device 100 and the client device 206 are connected via a wired or wireless network 210.

[0039] Also, for example, in the information processing system 200, the management device 201 and the verification device 204 are connected via a wired or wireless network 210. Also, for example, in the information processing system 200, the management device 201 and the generation device 203 are connected via a wired or wireless network 210. Also, for example, in the information processing system 200, the management device 201 and the client device 206 are connected via a wired or wireless network 210. Also, for example, in the information processing system 200, the issuing device 202 and the generating device 203 are connected via a wired or wireless network 210. Also, for example, in the information processing system 200, the issuing device 202 and the recording device 205 are connected via a wired or wireless network 210.

[0040] The information processing device 100 is a computer for facilitating appropriate trading of an object. The object is data representing an item. The information processing device 100 receives a processing request for trading the object from a client device 206 corresponding to a trading source. The processing request includes, for example, the object and a certificate associated with the object.

[0041] The certificate includes, for example, a monotonic ID that is an identifier for identifying an object. The monotonic ID is a value that monotonically increases each time an object is traded. The certificate specifically includes the monotonic ID at the time the certificate is issued. The certificate includes, for example, a signature that guarantees the validity of the certificate. The signature is, for example, information generated by the issuing device 202. Specifically, the signature is generated by the issuing device 202 using the private key of the issuing device 202. The signature can be verified by, for example, the public key of the issuing device 202. The certificate is, for example, generated by the issuing device 202.

[0042] The information processing device 100 acquires a certificate based on the received processing request. The information processing device 100 transmits a first verification request to the verification device 204, requesting verification as to whether the acquired certificate is valid or not. The first verification request includes, for example, the certificate. The first verification request may include, for example, a signature in the certificate, without including the certificate. The information processing device 100 receives a notification indicating whether the certificate is valid or not from the verification device 204. If the certificate is not valid, the information processing device 100 discards the processing request and transmits a notification indicating an error to the client device 206 corresponding to the transaction source and the client device 206 corresponding to the transaction destination.

[0043] If the certificate is valid, the information processing device 100 acquires the monotonic ID included in the certificate based on the received processing request. The information processing device 100 transmits a second verification request to the verification device 204, requesting verification of the magnitude relationship between the monotonic ID included in the certificate and the latest monotonic ID held by the verification device 204. The magnitude relationship is, for example, a relationship in which the monotonic ID included in the certificate and the latest monotonic ID held by the verification device 204 match. The magnitude relationship is, for example, a relationship in which the monotonic ID included in the certificate is larger than the latest monotonic ID held by the verification device 204. The magnitude relationship is, for example, a relationship in which the monotonic ID included in the certificate is smaller than the latest monotonic ID held by the verification device 204. The second verification request includes, for example, the monotonic ID included in the certificate. The information processing device 100 receives a notification indicating the magnitude relationship from the verification device 204.

[0044] If the monotonic ID included in the certificate matches the latest monotonic ID held by the verification device 204, the information processing device 100 accepts transfer authorization from the management device 201. In response to the transfer authorization, the information processing device 100 transmits an issuance request to the issuing device 202, requesting that a certificate corresponding to the target be issued. The information processing device 100 receives a new certificate from the issuance device 202. The information processing device 100 transmits the received certificate to the verification device 204. The information processing device 100 transmits the received certificate to the management device 201. The information processing device 100 transmits the received certificate to the client device 206 corresponding to the business partner.

[0045] When the monotonic ID included in the certificate is smaller than the latest monotonic ID, the information processing device 100 transmits a determination request to the management device 201 to request that the acquired certificate be determined to be the latest or not. The determination request includes, for example, the acquired certificate. The information processing device 100 receives a notification indicating whether the certificate is the latest or not from the management device 201. When the certificate is the latest, the information processing device 100 accepts transfer approval from the management device 201. In response to the transfer approval, the information processing device 100 transmits an issuance request to the issuing device 202 to request that a certificate corresponding to the target be issued. The information processing device 100 receives a new certificate from the issuing device 202. The information processing device 100 transmits the received certificate to the verification device 204. The information processing device 100 transmits the received certificate to the management device 201. The information processing device 100 transmits the received certificate to the client device 206 corresponding to the business partner. If the certificate is not the latest, the information processing device 100 accepts a denial of the transfer from the management device 201. When the information processing device 100 accepts the denial of the transfer, it transmits a notification indicating an error to the client device 206 corresponding to the transaction source and the client device 206 corresponding to the transaction destination.

[0046] When the monotonic ID included in the certificate is larger than the latest monotonic ID held by the verification device 204, the information processing device 100 inquires of the management device 201 about the latest monotonic ID held by the management unit. The information processing device 100 receives the latest monotonic ID held by the management unit from the management device 201. The information processing device 100 transmits the latest monotonic ID held by the management unit to the verification device 204. The information processing device 100 transmits a third verification request to the verification device 204 to request verification as to whether or not the monotonic ID included in the certificate matches the latest monotonic ID held by the verification device 204. The information processing device 100 receives a notification from the verification device 204 indicating whether or not the monotonic ID included in the certificate matches the latest monotonic ID held by the verification device 204.

[0047] The information processing device 100 receives transfer approval from the management device 201 when the monotonic ID included in the certificate matches the latest monotonic ID held by the verification device 204. In response to the transfer approval, the information processing device 100 transmits an issuance request to the issuing device 202, requesting that a certificate corresponding to the target be issued. The information processing device 100 receives a new certificate from the issuing device 202. The information processing device 100 transmits the received certificate to the verification device 204. The information processing device 100 transmits the received certificate to the management device 201. The information processing device 100 transmits the received certificate to the client device 206 corresponding to the business partner. The information processing device 100 receives transfer rejection from the management device 201 when the monotonic ID included in the certificate does not match the latest monotonic ID held by the verification device 204. When the information processing device 100 receives the rejection of the transfer, it transmits a notification indicating an error to the client device 206 corresponding to the transaction source and the client device 206 corresponding to the transaction destination. The information processing device 100 is, for example, a server or a PC.

[0048] The management device 201 is a computer for managing the latest certificate corresponding to an object. When the management device 201 receives a certificate corresponding to an object from the information processing device 100, the management device 201 manages the received certificate corresponding to the object as the latest certificate corresponding to the object. For example, the management device 201 uses a certificate information management table 610 described later in FIG. 6 and FIG. 7 to manage the received certificate corresponding to the object as the latest certificate corresponding to the object. When the management device 201 receives a determination request from the information processing device 100, the management device 201 determines whether or not the certificate included in the determination request is the latest. The management device 201 transmits a notification indicating whether or not the certificate included in the determination request is the latest to the information processing device 100.

[0049] The management device 201 transmits transfer approval or transfer denial to the information processing device 100. For example, if the monotonic ID included in the certificate matches the latest monotonic ID held by the verification device 204, the management device 201 transmits transfer approval to the information processing device 100. If the certificate is the latest, the management device 201 transmits transfer approval to the information processing device 100. If the management device 201 receives a double transfer error from the issuing device 202, it transmits transfer denial to the information processing device 100. The management device 201 is, for example, a server or a PC.

[0050] The issuing device 202 is a computer for issuing a certificate corresponding to an object. The issuing device 202 has a private key. The issuing device 202 receives an issuance request from the information processing device 100. Upon receiving the issuance request, the issuing device 202 generates a signature using the private key. The issuing device 202 transmits a generation request to the generating device 203, requesting that the latest monotonic ID be generated. The issuing device 202 receives the latest monotonic ID from the generating device 203.

[0051] The issuing device 202 issues a certificate corresponding to the target, including the generated signature and the received monotonic ID. The issuing device 202 transmits the issued certificate to the information processing device 100. The issuing device 202 transmits the issued certificate to the recording device 205. When the issuing device 202 receives a double transfer error from the generating device 203, it transmits the double transfer error to the management device 201. The issuing device 202 is, for example, a server or a PC.

[0052] The generating device 203 is a computer for generating a monotonic ID corresponding to a target. The generating device 203 receives a generation request from the issuing device 202. Upon receiving the generation request, the generating device 203 generates the latest monotonic ID corresponding to the target. The generating device 203 transmits the latest generated monotonic ID to the issuing device 202. If the latest monotonic ID corresponding to the target has already been generated, the generating device 203 transmits a double transfer error to the issuing device 202. The generating device 203 may check the recording device 205, and if a certificate corresponding to the target has already been issued, transmit a double transfer error to the issuing device 202. The generating device 203 is, for example, a server or a PC.

[0053] The verification device 204 is a computer for managing monotonic IDs corresponding to targets. When the verification device 204 receives a monotonic ID corresponding to a target from the information processing device 100, the verification device 204 stores the received monotonic ID corresponding to the target as the latest monotonic ID corresponding to the target. Specifically, the verification device 204 stores the received monotonic ID corresponding to the target using an ID information management table 410 described later with reference to Figs. 4 and 5.

[0054] When the verification device 204 receives a first verification request from the information processing device 100, it verifies whether the certificate is authentic. The verification device 204 transmits a notification indicating whether the certificate is authentic to the information processing device 100. When the verification device 204 receives a second verification request from the information processing device 100, it verifies the magnitude relationship between the monotonic ID included in the certificate and the latest monotonic ID stored. The verification device 204 transmits a notification indicating the verified magnitude relationship to the information processing device 100.

[0055] When the verification device 204 receives the third verification request from the information processing device 100, it verifies whether or not the monotonic ID included in the certificate matches the latest stored monotonic ID. The verification device 204 transmits a notification indicating whether or not the monotonic ID included in the certificate matches the latest stored monotonic ID to the information processing device 100. The verification device 204 is, for example, a server or a PC.

[0056] The recording device 205 is a computer for recording a certificate corresponding to a target. The recording device 205 receives a certificate corresponding to a target from the issuing device 202. The recording device 205 records the certificate corresponding to the target. The recording device 205 is, for example, a server or a PC.

[0057] The client device 206 is a computer used by a participant of the metaverse 220. The client device 206 generates a processing request based on an operation input from a user who will be a participant of the metaverse 220 as the source of the transaction, and transmits the request to the information processing device 100. When the client device 206 receives a certificate corresponding to an object from the information processing device 100, the client device 206 stores the received certificate corresponding to the object. When the client device 206 receives a notification indicating an error, the client device 206 outputs the notification indicating the error so that it can be referenced by a user who will be a participant of the metaverse 220 as the source or destination of the transaction. The client device 206 is, for example, a PC, a tablet terminal, or a smartphone.

[0058] (Example of hardware configuration of information processing device 100) Next, an example of the hardware configuration of the information processing device 100 will be described with reference to FIG.

[0059] Fig. 3 is a block diagram showing an example of a hardware configuration of the information processing device 100. In Fig. 3, the information processing device 100 has a CPU (Central Processing Unit) 301, a memory 302, a network I / F (Interface) 303, a recording medium I / F 304, and a recording medium 305. In addition, each component is connected to each other via a bus 300.

[0060] Here, the CPU 301 is responsible for the overall control of the information processing device 100. The memory 302 has, for example, a read only memory (ROM), a random access memory (RAM), and a flash ROM. Specifically, for example, the flash ROM and the ROM store various programs, and the RAM is used as a work area for the CPU 301. The programs stored in the memory 302 are loaded into the CPU 301, causing the CPU 301 to execute the coded processes.

[0061] The network I / F 303 is connected to the network 210 through a communication line, and is connected to other computers via the network 210. The network I / F 303 manages an internal interface with the network 210, and controls input and output of data from other computers. The network I / F 303 is, for example, a modem or a LAN adapter.

[0062] The recording medium I / F 304 controls reading / writing data from / to the recording medium 305 under the control of the CPU 301. The recording medium I / F 304 is, for example, a disk drive, a solid state drive (SSD), a universal serial bus (USB) port, etc. The recording medium 305 is a non-volatile memory that stores data written under the control of the recording medium I / F 304. The recording medium 305 is, for example, a disk, a semiconductor memory, a USB memory, etc. The recording medium 305 may be detachable from the information processing device 100.

[0063] In addition to the above-mentioned components, the information processing device 100 may have, for example, a keyboard, a mouse, a display, a printer, a scanner, a microphone, a speaker, etc. Furthermore, the information processing device 100 may have a plurality of recording medium I / Fs 304 and recording media 305. Furthermore, the information processing device 100 may not have the recording medium I / Fs 304 and the recording media 305.

[0064] (Example of Hardware Configuration of Verification Device 204) Next, an example of the hardware configuration of the verification device 204 will be described with reference to FIG.

[0065] Fig. 4 is a block diagram showing an example of the hardware configuration of the verification device 204. In Fig. 4, the verification device 204 has a CPU 401, a memory 402, a network I / F 403, a recording medium I / F 404, and a recording medium 405. In addition, each component is connected to each other via a bus 400.

[0066] Here, the CPU 401 is responsible for the overall control of the verification device 204. The memory 402 has, for example, a ROM, a RAM, and a flash ROM. Specifically, for example, the flash ROM and the ROM store various programs, and the RAM is used as a work area for the CPU 401. The programs stored in the memory 402 are loaded into the CPU 401 to cause the CPU 401 to execute coded processes. The memory 402 stores an ID information management table 410.

[0067] The network I / F 403 is connected to the network 210 through a communication line, and is connected to other computers via the network 210. The network I / F 403 manages an internal interface with the network 210, and controls input and output of data from other computers. The network I / F 403 is, for example, a modem or a LAN adapter.

[0068] The recording medium I / F 404 controls reading / writing data from / to the recording medium 405 under the control of the CPU 401. The recording medium I / F 404 is, for example, a disk drive, an SSD, a USB port, etc. The recording medium 405 is a non-volatile memory that stores data written under the control of the recording medium I / F 404. The recording medium 405 is, for example, a disk, a semiconductor memory, a USB memory, etc. The recording medium 405 may be detachable from the verification device 204.

[0069] In addition to the above-mentioned components, the verification device 204 may have, for example, a keyboard, a mouse, a display, a printer, a scanner, a microphone, a speaker, etc. Furthermore, the verification device 204 may have a plurality of recording medium I / Fs 404 and recording media 405. Furthermore, the verification device 204 may not have the recording medium I / Fs 404 and recording media 405.

[0070] (Contents stored in ID information management table 410) Next, an example of the contents stored in the ID information management table 410 will be described with reference to Fig. 5. The ID information management table 410 is realized by, for example, a storage area such as the memory 402 or the recording medium 405 of the verification device 204 shown in Fig. 4.

[0071] Fig. 5 is an explanatory diagram showing an example of the contents stored in ID information management table 410. As shown in Fig. 5, ID information management table 410 has fields for No., data ID, and monotonic ID. In ID information management table 410, information is set in each field for each data item, and ID information is stored as record 410-a. a is an arbitrary integer.

[0072] The NO. field is set to a record number. The data ID field is set to a data ID that identifies data representing an item. The data ID is, for example, a hash value obtained from the data. The monotonic ID field is set to a monotonic ID that corresponds to the data representing the above-mentioned item that the detection device recognizes as being the latest.

[0073] (Example of Hardware Configuration of Management Device 201) Next, an example of the hardware configuration of the management device 201 will be described with reference to FIG.

[0074] Fig. 6 is a block diagram showing an example of the hardware configuration of the management device 201. In Fig. 6, the management device 201 has a CPU 601, a memory 602, a network I / F 603, a recording medium I / F 604, and a recording medium 605. In addition, each component is connected to each other by a bus 600.

[0075] Here, the CPU 601 is responsible for the overall control of the management device 201. The memory 602 has, for example, a ROM, a RAM, and a flash ROM. Specifically, for example, the flash ROM and the ROM store various programs, and the RAM is used as a work area for the CPU 601. The programs stored in the memory 602 are loaded into the CPU 601, causing the CPU 601 to execute the coded processes. The memory 602 stores a certificate information management table 610.

[0076] The network I / F 603 is connected to the network 210 through a communication line, and is connected to other computers via the network 210. The network I / F 603 manages an internal interface with the network 210, and controls input and output of data from other computers. The network I / F 603 is, for example, a modem or a LAN adapter.

[0077] The recording medium I / F 604 controls reading / writing data from / to the recording medium 605 under the control of the CPU 601. The recording medium I / F 604 is, for example, a disk drive, an SSD, a USB port, etc. The recording medium 605 is a non-volatile memory that stores data written under the control of the recording medium I / F 604. The recording medium 605 is, for example, a disk, a semiconductor memory, a USB memory, etc. The recording medium 605 may be detachable from the management device 201.

[0078] In addition to the above-mentioned components, the management device 201 may have, for example, a keyboard, a mouse, a display, a printer, a scanner, a microphone, a speaker, etc. Furthermore, the management device 201 may have a plurality of recording medium I / Fs 604 and recording media 605. Furthermore, the management device 201 may not have the recording medium I / Fs 604 and recording media 605.

[0079] (Contents stored in the certificate information management table 610) Next, an example of the contents stored in the certificate information management table 610 will be described with reference to Fig. 7. The certificate information management table 610 is realized by, for example, a storage area such as the memory 602 or the recording medium 605 of the management device 201 shown in Fig. 6.

[0080] Fig. 7 is an explanatory diagram showing an example of the contents stored in the certificate information management table 610. As shown in Fig. 7, the certificate information management table 610 has fields for No., data ID, monotonic ID, and transaction. The certificate information management table 610 stores the certificate information as record 610-b by setting information in each field for each data. b is an arbitrary integer.

[0081] The NO. field is set to a record number. The data ID field is set to a data ID that identifies data representing an item. The data ID is, for example, a hash value obtained from the data. The monotonic ID field is set to a monotonic ID that is included in any certificate previously issued in association with the data representing the item and that corresponds to the data representing the item. The transaction field is set to an identifier that identifies any of the certificates.

[0082] (Example of Hardware Configuration of Issuance Device 202) Specifically, an example of the hardware configuration of the issuing device 202 is similar to the example of the hardware configuration of the information processing device 100 shown in FIG. 3, and therefore a description thereof will be omitted.

[0083] (Example of Hardware Configuration of Generation Device 203) Specifically, an example of the hardware configuration of the generation device 203 is similar to the example of the hardware configuration of the information processing device 100 shown in FIG. 3, and therefore a description thereof will be omitted.

[0084] (Example of hardware configuration of recording device 205) Specifically, an example of the hardware configuration of the recording device 205 is similar to the example of the hardware configuration of the information processing device 100 shown in FIG. 3, and therefore a description thereof will be omitted.

[0085] (Example of Hardware Configuration of Client Device 206) Specifically, an example of the hardware configuration of the client device 206 is similar to the example of the hardware configuration of the information processing device 100 shown in FIG. 3, and therefore a description thereof will be omitted.

[0086] (Example of functional configuration of information processing device 100) Next, an example of a functional configuration of the information processing device 100 will be described with reference to FIG.

[0087] 8 is a block diagram showing an example of a functional configuration of the information processing device 100. The information processing device 100 includes an acquisition unit 801, a verification unit 802, an update unit 803, an issue unit 804, and an output unit 805. In addition, a storage unit 800, a management unit 810, and a generation unit 820 are also present.

[0088] The acquiring unit 801 to the output unit 805 function as an example of a control unit. Specifically, the acquiring unit 801 to the output unit 805 realize their functions by, for example, causing the CPU 301 to execute a program stored in a storage area such as the memory 302 or the recording medium 305 shown in Fig. 3, or by the network I / F 303. The processing results of each functional unit are stored in, for example, a storage area such as the memory 302 or the recording medium 305 shown in Fig. 3.

[0089] The storage unit 800 is realized, for example, by a device capable of communicating with the information processing device 100 and different from the information processing device 100. The storage unit 800 is realized, for example, by a device present in a first system that realizes a first metaverse and different from the information processing device 100. The storage unit 800 is specifically realized by the verification device 204. More specifically, the storage unit 800 is realized by a storage area such as the memory 402 or the recording medium 405 illustrated in FIG. 4. The storage unit 800 may be realized, for example, by the information processing device 100.

[0090] The management unit 810 is realized, for example, by a device capable of communicating with the information processing device 100 but different from the information processing device 100. The management unit 810 is realized, for example, by a device existing outside the first system that realizes the first metaverse but different from the information processing device 100. The management unit 810 is specifically realized by the management device 201. More specifically, the management unit 810 is realized by a storage area such as the memory 602 or the recording medium 605 shown in FIG. 6.

[0091] The generating unit 820 is realized, for example, by a device capable of communicating with the information processing device 100 and different from the information processing device 100. The generating unit 820 is realized, for example, by a device existing outside the first system that realizes the first metaverse and different from the information processing device 100. Specifically, the generating unit 820 is realized by the generating device 203. The generating unit 820 may be integrated with the management unit 810, for example.

[0092] The acquisition unit 801 acquires various information used for processing by each functional unit. The acquisition unit 801 stores the acquired various information in a storage area such as the memory 302 or the recording medium 305 shown in FIG. 3, or outputs the acquired various information to each functional unit. The acquisition unit 801 may also output the various information stored in a storage area such as the memory 302 or the recording medium 305 shown in FIG. 3 to each functional unit. The acquisition unit 801 acquires various information based on, for example, a user's operation input. The acquisition unit 801 may receive various information from, for example, a device different from the information processing device 100.

[0093] The acquisition unit 801, for example, accepts the designation of a first certificate to which a first value is assigned and which is associated with an object to be traded. The transaction is, for example, a transfer or a copy. The object exists, for example, in a first metaverse. Specifically, the object is data representing an item existing in the first metaverse.

[0094] The transactor exists, for example, in a first metaverse. The transactor is specifically a participant of the first metaverse. The transactor exists, for example, in a second metaverse. The transactor is specifically a participant of the second metaverse. The second metaverse is, for example, the same metaverse as the first metaverse. The second metaverse may be, for example, a metaverse different from the first metaverse.

[0095] The first value is, for example, a value that changes monotonically each time the object is traded, and is a value that was taken when the object was traded in the past. The monotonically changing value is, for example, a monotonically increasing or decreasing value. The first value is preferably, for example, an order-preserving encrypted value. The first value may be, for example, a value encrypted by an encryption method different from order-preserving encryption. The first certificate is a certificate that was generated when the object was traded in the past. The first certificate may include, for example, a signature that guarantees the authenticity of the first certificate.

[0096] Specifically, the acquiring unit 801 accepts the designation of the first certificate by receiving, from another computer, the first certificate to which a first value has been assigned and which is associated with the object of the transaction. The other computer is, for example, the client device 206. Specifically, the acquiring unit 801 may accept the designation of the first certificate by receiving, from the other computer, an identifier of the first certificate to which a first value has been assigned and which is associated with the object of the transaction. The acquiring unit 801 may accept the designation of the first certificate to which a first value has been assigned and which is associated with the object of the transaction, based on an operation input by a user.

[0097] The acquiring unit 801 acquires, for example, a first certificate whose designation has been accepted and a first value that has been assigned to the first certificate whose designation has been accepted.

[0098] The acquisition unit 801 may receive a start trigger for starting processing by any of the functional units. The start trigger may be, for example, a predetermined operational input by a user. The start trigger may be, for example, reception of predetermined information from another computer. The start trigger may be, for example, output of predetermined information by any of the functional units. The acquisition unit 801 may receive the acceptance of designation of a first certificate as a start trigger for starting processing by the verification unit 802, the update unit 803, and the issuance unit 804.

[0099] The storage unit 800 stores the second value. The second value is, for example, a value that changes monotonically each time the target is traded, and is a value that was taken when the target was traded in the past. The monotonous change is, for example, a monotonous increase or a monotonous decrease. The second value is, for example, a value that the storage unit 800 recognizes as the latest value taken when the target was last traded, and is, for example, a value that changes monotonically each time the target is traded. The second value is, for example, preferably an order-preserving encrypted value. The second value may be, for example, a value encrypted by an encryption method different from the order-preserving encryption. The second value may be, for example, a plain text in the storage unit 800 and may be securely managed. This allows the storage unit 800 to store a guideline for determining whether or not it is preferable to trade the target.

[0100] The management unit 810 manages the latest certificate corresponding to the target. For example, the management unit 810 stores certificates generated in the past in association with the target, thereby managing the latest certificate corresponding to the target in a manner that allows the latest certificate to be identified. Every time the management unit 810 receives a certificate corresponding to the target from another computer, the management unit 810 manages the received certificate as the latest certificate. The other computer is, for example, the information processing device 100. This allows the management unit 810 to store a guideline for determining whether or not it is preferable to trade the target.

[0101] The generating unit 820 generates the latest value that the value that changes monotonically takes each time the target is traded by updating the value corresponding to the target so that the value changes monotonically each time the target is traded. The latest value is preferably, for example, a value that is order-preserving encrypted. The latest value may be, for example, a value encrypted by an encryption method different from order-preserving encryption. The latest value may be, for example, a plain text in the generating unit 820 and may be securely managed. The generating unit 820 receives, for example, a generation request from the information processing device 100 requesting that a third value that is a monotonically changed second value be generated as the latest value. In response to the generation request, for example, the generating unit 820 generates a third value that is a monotonically changed second value as the latest value and transmits it to the information processing device 100. If the third value has already been generated as the latest value in the past, the generating unit 820 transmits an error to the information processing device 100. In this way, the generating unit 820 can make available the latest value that the value that changes monotonically takes each time the target is traded.

[0102] The verification unit 802 uses the storage unit 800 to determine whether or not the first value acquired by the acquisition unit 801 matches the second value. For example, the verification unit 802 transmits a determination request to the storage unit 800 requesting that it be determined whether or not the first value matches the second value. For example, the verification unit 802 determines whether or not the first value matches the second value by receiving, from the storage unit 800, a result of determining whether or not the first value matches the second value. In this way, the verification unit 802 can determine whether or not it is preferable to trade the target without communicating with the management unit 810.

[0103] When the verification unit 802 determines that the first value acquired by the acquisition unit 801 is greater than the second value, the verification unit 802 inquires of the management unit 810 about the latest value that is assigned to the latest certificate and that is a value that changes monotonically each time the target is traded. The latest value is preferably an order-preserving encrypted value. For example, the latest value may be a value encrypted by an encryption method different from order-preserving encryption. As a result of the inquiry to the management unit 810, the verification unit 802 acquires the latest value that is a value that changes monotonically each time the target is traded. The verification unit 802 determines whether the first value matches the acquired latest value. This enables the verification unit 802 to determine whether it is preferable to trade the target.

[0104] When the verification unit 802 determines that the first value acquired by the acquisition unit 801 is smaller than the second value, the verification unit 802 inquires of the management unit 810 as to whether or not the first certificate acquired by the acquisition unit 801 is the latest certificate corresponding to the target. The verification unit 802 receives the result of the determination as to whether or not the first certificate is the latest certificate corresponding to the target from the management unit 810. The verification unit 802 determines whether or not the first certificate is the latest certificate by receiving the result of the determination as to whether or not the first certificate is the latest certificate corresponding to the target from the management unit 810. This allows the verification unit 802 to determine whether or not it is preferable to trade the target.

[0105] When the verification unit 802 determines that the first value matches the second value, the update unit 803 controls the storage unit 800 to store the third value. The third value is preferably an order-preserving encrypted value. The third value may be, for example, a value encrypted by an encryption method different from the order-preserving encryption. The update unit 803, for example, inquires of the generation unit 820 about the third value and receives the third value from the generation unit 820. The update unit 803 controls the storage unit 800 to store the received third value, for example. Specifically, the update unit 803 transmits the received third value to the storage unit 800. Thereby, the update unit 803 can determine that the target is appropriately tradeable, and can appropriately update the storage contents of the storage unit 800.

[0106] When the verification unit 802 determines that the first value matches the latest value, the update unit 803 controls the storage unit 800 to store the third value. The update unit 803, for example, inquires of the generation unit 820 about the third value and receives the third value from the generation unit 820. The update unit 803 controls the storage unit 800 to store the received third value. Specifically, the update unit 803 transmits the received third value to the storage unit 800. Thereby, the update unit 803 can determine that the target is appropriately tradeable, and can appropriately update the stored contents of the storage unit 800.

[0107] When the verification unit 802 determines that the first certificate is the latest certificate, the update unit 803 controls the storage unit 800 to store the third value. The update unit 803, for example, inquires of the generation unit 820 about the third value and receives the third value from the generation unit 820. The update unit 803 controls the storage unit 800 to store the received third value. Specifically, the update unit 803 transmits the received third value to the storage unit 800. Thereby, the update unit 803 can determine that the target is appropriately tradeable, and can appropriately update the stored contents of the storage unit 800.

[0108] When the verification unit 802 determines that the first value does not match the latest value, the update unit 803 determines not to control the storage unit 800. For example, the update unit 803 prevents the storage contents of the storage unit 800 from being updated. This allows the update unit 803 to determine that the target is not appropriately tradable and that it is preferable not to trade the target, and can avoid updating the storage contents of the storage unit 800.

[0109] When the verification unit 802 determines that the first certificate is not the latest certificate, the update unit 803 determines not to control the storage unit 800. For example, the update unit 803 prevents the storage contents of the storage unit 800 from being updated. This allows the update unit 803 to determine that the target is not appropriately tradeable and that it is preferable not to trade the target, and thus allows the update unit 803 to avoid updating the storage contents of the storage unit 800.

[0110] When the verification unit 802 determines that the first value does not match the second value, the update unit 803 may determine not to control the storage unit 800. For example, the update unit 803 prevents the storage contents of the storage unit 800 from being updated. This allows the update unit 803 to determine that the target is not appropriately tradable and that it is preferable not to trade the target, and thus allows the update unit 803 to avoid updating the storage contents of the storage unit 800.

[0111] When the updating unit 803 has previously generated the third value as the latest value by the generating unit 820 and has received an error from the generating unit 820, the updating unit 803 determines not to control the storage unit 800. For example, the updating unit 803 prevents the storage contents of the storage unit 800 from being updated. This allows the updating unit 803 to determine that the target is not appropriately tradable and that it is preferable not to trade the target, and can avoid updating the storage contents of the storage unit 800.

[0112] When the verification unit 802 determines that the first value matches the second value, the issuing unit 804 generates a second certificate associated with the target and assigned with a third value. The issuing unit 804 may, for example, transmit a generation request to another computer requesting that a second certificate assigned with a third value be generated. The issuing unit 804 generates a second certificate assigned with the third value by receiving the second certificate assigned with the third value from the other computer. This allows the update unit 803 to determine that the target can be appropriately traded, and to prepare a second certificate to be used when appropriately trading the target.

[0113] When the verification unit 802 determines that the first value matches the latest value, the issuing unit 804 generates a second certificate associated with the target and to which a third value is assigned. The issuing unit 804 may, for example, transmit to another computer a generation request requesting the generation of a second certificate to which a third value is assigned. The issuing unit 804 generates a second certificate to which a third value is assigned by receiving the second certificate to which a third value is assigned from the other computer.

[0114] When the verification unit 802 determines that the first certificate is the latest certificate, the issuing unit 804 generates a second certificate associated with the target and to which a third value is assigned. The issuing unit 804 may, for example, transmit a generation request to another computer requesting that a second certificate to which a third value is assigned be generated. The issuing unit 804 generates the second certificate to which the third value is assigned by receiving the second certificate to which the third value is assigned from the other computer.

[0115] If the verification unit 802 determines that the first value does not match the latest value, the issuing unit 804 determines not to generate a second certificate. This allows the updating unit 803 to determine that the target is not appropriately tradeable and that it is preferable not to trade the target, and thus can avoid generating a second certificate.

[0116] If the verification unit 802 determines that the first certificate is not the latest certificate, the issuing unit 804 determines not to generate a second certificate. This allows the updating unit 803 to determine that the target is not appropriately tradeable and that it is preferable not to trade the target, and thus can avoid generating a second certificate.

[0117] The issuing unit 804 may determine not to generate a second certificate when the verifying unit 802 determines that the first value does not match the second value. This allows the updating unit 803 to determine that the target is not appropriately tradeable and that it is preferable not to trade the target, and thus can avoid generating a second certificate.

[0118] If the issuing unit 804 has previously generated the third value as the latest value by the generating unit 820 and has received an error from the generating unit 820, the issuing unit 804 determines not to generate a second certificate. This allows the updating unit 803 to determine that the target is not appropriately tradeable and that it is preferable not to trade the target, and thus can avoid generating a second certificate.

[0119] The output unit 805 outputs the processing result of at least one of the functional units. The output format is, for example, display on a display, printout on a printer, transmission to an external device via the network I / F 303, or storage in a storage area such as the memory 302 or the recording medium 305. In this way, the output unit 805 can notify the user of the processing result of at least one of the functional units, thereby improving the convenience of the information processing device 100.

[0120] The output unit 805 transmits the generated second certificate to the management unit 810 and a second terminal corresponding to the trading partner. The output unit 805 may transmit the object to the second terminal. This allows the output unit 805 to trade the object. The output unit 805 allows the management unit 810 to appropriately manage the latest certificate.

[0121] (First operation example of information processing device 100) Next, a first operation example of the information processing device 100 will be described with reference to FIGS.

[0122] 9 to 11 are explanatory diagrams showing a first operation example of the information processing device 100. In Fig. 9, the information processing device 100 has a private key corresponding to a user A, a private key corresponding to a user B, and a private key corresponding to a management device 201.

[0123] The verification device 204 has, for example, a public key corresponding to a certificate authority operated by the issuing device 202. The verification device 204 manages, for example, EncOPE (monotonic ID) recognized as the latest using an ID information management table 410. EncOPE(·) represents order preserving encryption. The verification device 204 operates, for example, a sub-exchange. The management device 201 manages, for example, the latest certificate corresponding to item data using a certificate information management table 610. The management device 201 operates, for example, an exchange. The generation device 203 manages, for example, the latest monotonic ID corresponding to item data.

[0124] In the example of Fig. 9, there is a client device 206 used by user A. In the following description, the client device 206 used by user A may be referred to as "client device 206A". In addition, there is a client device 206 used by user B. In the following description, the client device 206 used by user B may be referred to as "client device 206B".

[0125] (9-1) Based on the operation input of user A, client device 206A transmits data transaction 1 to information processing device 100. Data transaction 1 is management data associated with item data. Data transaction 1 includes, for example, data transaction 0, which is management data used when the item data was previously traded. Data transaction 1 includes, for example, an aggregate signature representing the past transaction history regarding the item data. The aggregate signature is realized, for example, by combining a signature method called KAIAS and a hash chain. Data transaction 1 includes a transaction certificate generated when the item data was previously traded. Information processing device 100 receives data transaction 1 from client device 206A. Now, we move on to the explanation of FIG. 10.

[0126] Fig. 10 shows the contents 1010 of data transaction 1. As shown in Fig. 10, data transaction 1 includes, for example, data transaction 0 to which signature P of user P, who was the source of the previous transaction of item data, signature A of user A, who was the destination of the previous transaction of item data, and an exchange signature corresponding to management device 201 are attached. Data transaction 1 includes an inter-PA transaction certificate generated when the item data was previously traded. Now, moving on to the explanation of Fig. 11, an example of the contents of the inter-PA transaction certificate will be described.

[0127] FIG. 11 shows an example of the contents 1100 of an inter-PA transaction certificate. The inter-PA transaction certificate includes, for example, a serial ID, an Issuer, a Subject, a SAN, a public key, and a signature. The serial ID is an identifier that identifies the inter-PA transaction certificate. The Issuer represents the issuer that issued the inter-PA transaction certificate. The SAN includes a process name, a data ID that identifies item data, and an EncOPE (monotonic ID) that corresponds to the item data. The public key corresponds to the certification authority operated by the issuing device 202. The signature is generated by a private key that corresponds to the certification authority operated by the issuing device 202.

[0128] Returning to the explanation of Fig. 9, (9-2) the information processing device 100 acquires an inter-PA transaction certificate based on the received data transaction 1. The information processing device 100 transmits to the verification device 204 a determination request requesting that the inter-PA transaction certificate be determined to be valid or not.

[0129] The verification device 204 uses a public key corresponding to the certification authority operated by the issuing device 202 to determine whether or not the signature in the inter-PA transaction certificate is valid. If the signature is valid, the verification device 204 determines that the inter-PA transaction certificate is valid, and if the signature is not valid, the verification device 204 determines that the inter-PA transaction certificate is not valid. In the example of Fig. 9, it is assumed that the verification device 204 determines that the signature is valid and that the inter-PA transaction certificate is valid. The verification device 204 transmits a notification indicating that the inter-PA transaction certificate is valid to the information processing device 100.

[0130] (9-3) When the information processing device 100 receives a notification from the verification device 204 indicating that the inter-PA transaction certificate is valid, it acquires EncOPE (monotonic ID) based on the received data transaction 1. The information processing device 100 specifies the acquired EncOPE (monotonic ID) and transmits a verification request to the verification device 204 requesting verification of the magnitude relationship between the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest.

[0131] When the verification device 204 receives the verification request, it identifies the specified EncOPE (monotonic ID). The verification device 204 refers to the ID information management table 410 and verifies the magnitude relationship between the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest.

[0132] The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest match. The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) is greater than the EncOPE (monotonic ID) recognized as the latest. The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) is smaller than the EncOPE (monotonic ID) recognized as the latest.

[0133] 9, it is assumed that the verification device 204 verifies the magnitude relationship and determines that the specified EncOPE (monotonic ID) matches the EncOPE (monotonic ID) recognized as the latest. The verification device 204 transmits a notification indicating that the specified EncOPE (monotonic ID) matches the EncOPE (monotonic ID) recognized as the latest to the information processing device 100. The information processing device 100 receives a notification indicating that the specified EncOPE (monotonic ID) matches the EncOPE (monotonic ID) recognized as the latest from the verification device 204.

[0134] (9-4) The information processing device 100 determines that the specified EncOPE (monotonic ID) matches the EncOPE (monotonic ID) recognized as the latest, and requests transfer authorization from the management device 201. The information processing device 100 receives the transfer authorization from the management device 201. In this case, the information processing device 100 assigns to the data transaction 1 signature A of user A who is the source of the current transaction of the item data, signature B of user B who is the destination of the current transaction of the item data, and an exchange signature corresponding to the management device 201.

[0135] (9-5) The information processing device 100 transmits an issuance request for issuing an A-B transaction certificate to be used in the current transaction of the item data to the issuing device 202. The issuing device 202 receives the issuance request from the information processing device 100.

[0136] (9-6) The issuing device 202 transmits a generation request to the generating device 203, requesting that the latest EncOPE (monotonic ID) be generated. The generation request includes, for example, a data ID and a specified EncOPE (monotonic ID). The generating device 203 receives the generation request. Upon receiving the generation request, the generating device 203 determines whether or not an EncOPE (monotonic ID) that is the next to the specified EncOPE (monotonic ID) has been generated in the past, based on the latest monotonic ID corresponding to the item data represented by the data ID.

[0137] If the EncOPE (monotonic ID) has already been generated, the generating device 203 outputs an error to the management device 201. If the EncOPE (monotonic ID) has not already been generated, the generating device 203 generates the next EncOPE (monotonic ID) after the specified EncOPE (monotonic ID) as the latest EncOPE (monotonic ID). The latest EncOPE (monotonic ID) is EncOPE (latest monotonic ID+1). In the example of FIG. 9, it is assumed that the generating device 203 has generated the latest EncOPE (monotonic ID). The generating device 203 transmits the latest EncOPE (monotonic ID) to the issuing device 202. The issuing device 202 receives the latest EncOPE (monotonic ID) from the generating device 203.

[0138] (9-7) The issuing device 202 issues an A-B transaction certificate based on the latest EncOPE (monotonic ID) received. The issuing device 202 transmits the issued A-B transaction certificate to the information processing device 100. The information processing device 100 receives the A-B transaction certificate from the issuing device 202.

[0139] (9-8) The information processing device 100 transmits the received A-B transaction certificate to the management device 201. The management device 201 receives the A-B transaction certificate from the information processing device 100. The management device 201 manages the received A-B transaction certificate as the latest transaction certificate corresponding to the item data.

[0140] (9-9) The information processing device 100 generates data transaction 2 based on data transaction 1 to which signature A, signature B, and the exchange signature have been added, and the received A-B transaction certificate. Now, we move on to the description of FIG.

[0141] Fig. 10 shows the contents 1020 of data transaction 2. As shown in Fig. 10, data transaction 2 includes, for example, data transaction 1 to which signature A, signature B, and an exchange signature have been attached. Data transaction 2 includes an A-B transaction certificate that was generated when the item data was traded this time. In this way, data transaction 0, data transaction 1, and data transaction 2 have a nested structure.

[0142] Returning to the explanation of Fig. 9, information processing device 100 transmits the generated data transaction 2 to client device 206B. Client device 206B receives and stores data transaction 2.

[0143] This allows information processing device 100 to properly complete the transaction of item data. Information processing device 100 can properly determine whether or not to trade item data without inquiring of management device 201 about the latest transaction certificate. This allows information processing device 100 to reduce the processing load on management device 201. Information processing device 100 can reduce the time required to trade item data.

[0144] (First transaction processing procedure) Next, an example of a first transaction processing procedure corresponding to the first operation example, which is executed by the information processing system 200, will be described with reference to FIG.

[0145] Fig. 12 is a sequence diagram showing an example of a first transaction processing procedure. In Fig. 12, the client device 206A transmits data transaction 1 including a certificate including a data ID and a monotonic ID to the information processing device 100 (step S1201). The monotonic ID is preferably in an order-preserving encrypted state.

[0146] The information processing device 100 transmits the received certificate for data transaction 1 to the verification device 204. Upon receiving the certificate, the verification device 204 uses the public key of the issuing device 202 to verify whether the received certificate is valid, and transmits the result to the information processing device 100 (step S1202).

[0147] The information processing device 100 transmits the monotonic ID of the received certificate for data transaction 1 to the verification device 204. Upon receiving the monotonic ID, the verification device 204 transmits the result of verifying the magnitude relationship between the received monotonic ID and the monotonic ID held by the verification device 204 to the information processing device 100 (step S1203). Here, the magnitude relationship is a match.

[0148] The information processing device 100 receives the result of verifying the magnitude relationship. Based on the result of verifying the magnitude relationship, the information processing device 100 requests transfer approval from the management device 201. The information processing device 100 receives the transfer approval from the management device 201 (step S1204). The information processing device 100 transmits a request for issuance of a certificate to the issuing device 202 (step S1205).

[0149] The issuing device 202 receives a certificate issuance request from the information processing device 100. Upon receiving the certificate issuance request, the issuing device 202 transmits a monotonic ID update request to the generating device 203 (step S1206). In response to the update request, the generating device 203 transmits the updated monotonic ID to the issuing device 202. The issuing device 202 receives the updated monotonic ID from the generating device 203, generates a certificate including a data ID and the updated monotonic ID, and transmits the certificate to the information processing device 100 (step S1207). The issuing device 202 transmits the generated certificate to the recording device 205 (step S1208). The recording device 205 receives and records the certificate.

[0150] The information processing device 100 transmits the received certificate to the management device 201 (step S1209). The management device 201 manages the received certificate as the latest one. The information processing device 100 transmits the data ID and monotonic ID of the received certificate to the verification device 204 (step S1210). The verification device 204 stores the received data ID and monotonic ID in association with each other. The information processing device 100 transmits the received certificate to the client device 206B (step S1211). The information processing system 200 ends the first transaction process.

[0151] (Second operation example of information processing device 100) Next, a second operation example of the information processing device 100 will be described with reference to FIG.

[0152] 13 is an explanatory diagram showing a second operation example of the information processing device 100. In FIG. 13, the information processing device 100 has a private key corresponding to a user A, a private key corresponding to a user B, and a private key corresponding to a management device 201.

[0153] The verification device 204 has a public key corresponding to the certificate authority operated by the issuing device 202, for example. The verification device 204 manages, for example, EncOPE (monotonic ID) recognized as the latest using the ID information management table 410. EncOPE (·) represents order-preserving encryption. The verification device 204 operates, for example, a sub-exchange. The management device 201 manages, for example, the latest certificate corresponding to item data using the certificate information management table 610. The management device 201 operates, for example, an exchange. The generation device 203 manages, for example, the latest monotonic ID corresponding to item data. In the example of FIG. 13, there is a client device 206A used by a user A. There is also a client device 206B used by a user B.

[0154] (13-1) Based on user A's operation input, client device 206A transmits data transaction 1 to information processing device 100. Data transaction 1 is management data associated with item data. Data transaction 1 includes, for example, data transaction 0, which is management data used the previous time the item data was traded. Data transaction 1 includes, for example, an aggregate signature representing the past transaction history regarding the item data. Data transaction 1 includes a transaction certificate generated the previous time the item data was traded. Information processing device 100 receives data transaction 1 from client device 206A.

[0155] (13-2) The information processing device 100 acquires an inter-PA transaction certificate based on the received data transaction 1. The information processing device 100 transmits to the verification device 204 a determination request requesting that the inter-PA transaction certificate be determined to be valid or not.

[0156] The verification device 204 uses a public key corresponding to the certification authority operated by the issuing device 202 to determine whether or not the signature in the inter-PA transaction certificate is valid. If the signature is valid, the verification device 204 determines that the inter-PA transaction certificate is valid, and if the signature is not valid, the verification device 204 determines that the inter-PA transaction certificate is not valid. In the example of Fig. 13, it is assumed that the verification device 204 determines that the signature is valid and that the inter-PA transaction certificate is valid. The verification device 204 transmits a notification indicating that the inter-PA transaction certificate is valid to the information processing device 100.

[0157] (13-3) When the information processing device 100 receives a notification from the verification device 204 indicating that the inter-PA transaction certificate is valid, it acquires EncOPE (monotonic ID) based on the received data transaction 1. The information processing device 100 specifies the acquired EncOPE (monotonic ID) and transmits a verification request to the verification device 204 requesting verification of the magnitude relationship between the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest.

[0158] When the verification device 204 receives the verification request, it identifies the specified EncOPE (monotonic ID). The verification device 204 refers to the ID information management table 410 and verifies the magnitude relationship between the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest.

[0159] The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest match. The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) is greater than the EncOPE (monotonic ID) recognized as the latest. The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) is smaller than the EncOPE (monotonic ID) recognized as the latest.

[0160] 13, it is assumed that the verification device 204 verifies the magnitude relationship and determines that the specified EncOPE (monotonic ID) is greater than the EncOPE (monotonic ID) recognized as the latest. The verification device 204 transmits a notification indicating that the specified EncOPE (monotonic ID) is greater than the EncOPE (monotonic ID) recognized as the latest to the information processing device 100. The information processing device 100 receives a notification indicating that the specified EncOPE (monotonic ID) is greater than the EncOPE (monotonic ID) recognized as the latest from the verification device 204.

[0161] (13-4) Because the specified EncOPE (monotonic ID) is greater than the EncOPE (monotonic ID) recognized as the latest, the information processing device 100 inquires of the management device 201 about the latest EncOPE (monotonic ID). The information processing device 100 receives the latest EncOPE (monotonic ID) from the management device 201.

[0162] (13-5) The information processing device 100 transmits a verification request to the verification device 204, requesting verification of the magnitude relationship between a specified EncOPE (monotonic ID) and the latest received EncOPE (monotonic ID). Upon receiving the verification request, the verification device 204 refers to the ID information management table 410 and updates the EncOPE (monotonic ID) that the verification device 204 recognizes as the latest.

[0163] The verification device 204 identifies the specified EncOPE (monotonic ID). The verification device 204 refers to the ID information management table 410 and verifies the magnitude relationship between the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest.

[0164] The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest match. The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) is greater than the EncOPE (monotonic ID) recognized as the latest. The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) is smaller than the EncOPE (monotonic ID) recognized as the latest.

[0165] 13, it is assumed that the verification device 204 verifies the magnitude relationship and determines that the specified EncOPE (monotonic ID) matches the EncOPE (monotonic ID) recognized as the latest. The verification device 204 transmits a notification indicating that the specified EncOPE (monotonic ID) matches the EncOPE (monotonic ID) recognized as the latest to the information processing device 100. The information processing device 100 receives a notification indicating that the specified EncOPE (monotonic ID) matches the EncOPE (monotonic ID) recognized as the latest from the verification device 204.

[0166] (13-6) The information processing device 100 determines that the specified EncOPE (monotonic ID) matches the EncOPE (monotonic ID) recognized as the latest, and requests transfer authorization from the management device 201. The information processing device 100 receives the transfer authorization from the management device 201. In this case, the information processing device 100 assigns to the data transaction 1 signature A of user A who is the source of the current transaction of the item data, signature B of user B who is the destination of the current transaction of the item data, and an exchange signature corresponding to the management device 201.

[0167] (13-7) The information processing device 100 transmits an issuance request for issuing an A-B transaction certificate to be used in the current transaction of the item data to the issuing device 202. The issuing device 202 receives the issuance request from the information processing device 100.

[0168] (13-8) The issuing device 202 transmits a generation request to the generating device 203, requesting that the latest EncOPE (monotonic ID) be generated. The generation request includes, for example, a data ID and a specified EncOPE (monotonic ID). The generating device 203 receives the generation request. Upon receiving the generation request, the generating device 203 determines whether or not the next EncOPE (monotonic ID) after the specified EncOPE (monotonic ID) has been generated in the past, based on the latest monotonic ID corresponding to the item data represented by the data ID.

[0169] If the specified EncOPE (monotonic ID) has already been generated, the generating device 203 outputs an error to the management device 201. If the specified EncOPE (monotonic ID) has not already been generated, the generating device 203 generates the next EncOPE (monotonic ID) after the specified EncOPE (monotonic ID) as the latest EncOPE (monotonic ID). The latest EncOPE (monotonic ID) is EncOPE (latest monotonic ID+1). In the example of FIG. 13, it is assumed that the generating device 203 has generated the latest EncOPE (monotonic ID). The generating device 203 transmits the latest EncOPE (monotonic ID) to the issuing device 202. The issuing device 202 receives the latest EncOPE (monotonic ID) from the generating device 203.

[0170] (13-9) The issuing device 202 issues an A-B transaction certificate based on the latest EncOPE (monotonic ID) received. The issuing device 202 transmits the issued A-B transaction certificate to the information processing device 100. The information processing device 100 receives the A-B transaction certificate from the issuing device 202.

[0171] (13-10) The information processing device 100 transmits the received A-B transaction certificate to the management device 201. The management device 201 receives the A-B transaction certificate from the information processing device 100. The management device 201 manages the received A-B transaction certificate as the latest transaction certificate corresponding to the item data.

[0172] (13-11) Information processing device 100 generates data transaction 2 based on data transaction 1 to which signature A, signature B, and exchange signature have been added, and the received A-B transaction certificate. Information processing device 100 transmits the generated data transaction 2 to client device 206B. Client device 206B receives and stores data transaction 2.

[0173] This allows the information processing device 100 to properly complete the transaction of the item data. The information processing device 100 can properly complete the transaction of the item data even if the EncOPE (monotonic ID) that the verification device 204 recognizes as the latest is incorrect. The information processing device 100 can properly determine whether or not to trade the item data without inquiring of the management device 201 about the latest transaction certificate. This allows the information processing device 100 to reduce the processing load on the management device 201. The information processing device 100 can reduce the time required to trade item data.

[0174] (Second transaction processing procedure) Next, an example of a second transaction processing procedure corresponding to the second operation example executed by the information processing system 200 will be described with reference to FIG.

[0175] Fig. 14 is a sequence diagram showing an example of the second transaction processing procedure. In Fig. 14, the client device 206A transmits the data transaction 1 including the certificate including the data ID and the monotonic ID to the information processing device 100 (step S1401). The monotonic ID is preferably in an order-preserving encrypted state.

[0176] The information processing device 100 transmits the received certificate for data transaction 1 to the verification device 204. Upon receiving the certificate, the verification device 204 uses the public key of the issuing device 202 to verify whether the received certificate is valid, and transmits the result to the information processing device 100 (step S1402).

[0177] The information processing device 100 transmits the monotonic ID of the received certificate for data transaction 1 to the verification device 204. Upon receiving the monotonic ID, the verification device 204 transmits the result of verifying the magnitude relationship between the received monotonic ID and the monotonic ID held by the verification device 204 to the information processing device 100 (step S1403). Here, the magnitude relationship is that the received monotonic ID is greater than the monotonic ID held by the verification device 204.

[0178] If the received monotonic ID is greater than the monotonic ID held by the verification device 204, the verification device 204 inquires of the management device 201 about the latest monotonic ID (step S1404). The management device 201 transmits the latest monotonic ID to the information processing device 100 (step S1405).

[0179] The information processing device 100 transmits the received monotonic ID to the verification device 204. When the verification device 204 receives the monotonic ID, it transmits the result of verifying the magnitude relationship between the received monotonic ID and the monotonic ID held by the verification device 204 to the information processing device 100 (step S1406). Here, the magnitude relationship is a match.

[0180] Based on the result of verifying the magnitude relationship, the information processing device 100 requests transfer approval from the management device 201. The information processing device 100 receives the transfer approval from the management device 201 (step S1407). The information processing device 100 transmits a request for issuing a certificate to the issuing device 202 (step S1408).

[0181] The issuing device 202 receives an issuance request from the information processing device 100. Upon receiving the certificate issuance request, the issuing device 202 transmits a request to update the monotonic ID to the generating device 203 (step S1409). In response to the update request, the generating device 203 transmits the updated monotonic ID to the issuing device 202. The issuing device 202 receives the updated monotonic ID from the generating device 203, generates a certificate including the data ID and the updated monotonic ID, and transmits it to the information processing device 100 (step S1410). The issuing device 202 transmits the generated certificate to the recording device 205 (step S1411). The recording device 205 receives and records the certificate.

[0182] The information processing device 100 transmits the received certificate to the management device 201 (step S1412). The management device 201 manages the received certificate as the latest one. The information processing device 100 transmits the data ID and monotonic ID of the received certificate to the verification device 204 (step S1413). The verification device 204 stores the received data ID and monotonic ID in association with each other. The information processing device 100 transmits the received certificate to the client device 206B (step S1414). The information processing system 200 ends the second transaction process.

[0183] (Third operation example of information processing device 100) Next, a third operation example of the information processing device 100 will be described with reference to FIG.

[0184] 15 is an explanatory diagram showing a third operation example of the information processing device 100. In FIG. 15, the information processing device 100 has a private key corresponding to a user A, a private key corresponding to a user B, and a private key corresponding to a management device 201.

[0185] The verification device 204 has a public key corresponding to the certificate authority operated by the issuing device 202, for example. The verification device 204 manages, for example, EncOPE (monotonic ID) recognized as the latest using the ID information management table 410. EncOPE (·) represents order-preserving encryption. The verification device 204 operates, for example, a sub-exchange. The management device 201 manages, for example, the latest certificate corresponding to item data using the certificate information management table 610. The management device 201 operates, for example, an exchange. The generation device 203 manages, for example, the latest monotonic ID corresponding to item data. In the example of FIG. 15, there is a client device 206 used by a user A. There is also a client device 206 used by a user B.

[0186] (15-1) Based on user A's operation input, client device 206A transmits data transaction 1 to information processing device 100. Data transaction 1 is management data associated with item data. Data transaction 1 includes, for example, data transaction 0, which is management data used the previous time the item data was traded. Data transaction 1 includes, for example, an aggregate signature representing the past transaction history regarding the item data. Data transaction 1 includes a transaction certificate generated the previous time the item data was traded. Information processing device 100 receives data transaction 1 from client device 206A.

[0187] (15-2) The information processing device 100 acquires an inter-PA transaction certificate based on the received data transaction 1. The information processing device 100 transmits to the verification device 204 a determination request requesting that the inter-PA transaction certificate be determined to be valid or not.

[0188] The verification device 204 uses a public key corresponding to the certification authority operated by the issuing device 202 to determine whether or not the signature in the inter-PA transaction certificate is valid. If the signature is valid, the verification device 204 determines that the inter-PA transaction certificate is valid, and if the signature is not valid, the verification device 204 determines that the inter-PA transaction certificate is not valid. In the example of Fig. 15, it is assumed that the verification device 204 determines that the signature is valid and that the inter-PA transaction certificate is valid. The verification device 204 transmits a notification indicating that the inter-PA transaction certificate is valid to the information processing device 100.

[0189] (15-3) When the information processing device 100 receives a notification from the verification device 204 indicating that the inter-PA transaction certificate is valid, it acquires EncOPE (monotonic ID) based on the received data transaction 1. The information processing device 100 specifies the acquired EncOPE (monotonic ID) and transmits a verification request to the verification device 204 requesting verification of the magnitude relationship between the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest.

[0190] When the verification device 204 receives the verification request, it identifies the specified EncOPE (monotonic ID). The verification device 204 refers to the ID information management table 410 and verifies the magnitude relationship between the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest.

[0191] The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest match. The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) is greater than the EncOPE (monotonic ID) recognized as the latest. The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) is smaller than the EncOPE (monotonic ID) recognized as the latest.

[0192] 15, it is assumed that the verification device 204 verifies the magnitude relationship and determines that the specified EncOPE (monotonic ID) is smaller than the EncOPE (monotonic ID) recognized as the latest. The verification device 204 transmits a notification indicating that the specified EncOPE (monotonic ID) is smaller than the EncOPE (monotonic ID) recognized as the latest to the information processing device 100. The information processing device 100 receives a notification indicating that the specified EncOPE (monotonic ID) is smaller than the EncOPE (monotonic ID) recognized as the latest from the verification device 204.

[0193] (15-4) Because the specified EncOPE (monotonic ID) is smaller than the EncOPE (monotonic ID) recognized as the latest, the information processing device 100 transmits a determination request to the management device 201 to request that it determine whether the inter-PA transaction certificate is the latest. The management device 201 receives the determination request from the information processing device 100.

[0194] (15-5) Management device 201 refers to certificate information management table 610 and determines whether the inter-PA transaction certificate is the latest transaction certificate corresponding to the item data. Here, it is assumed that management device 201 determines that the inter-PA transaction certificate is the latest transaction certificate corresponding to the item data. Therefore, management device 201 transmits transfer authorization to information processing device 100.

[0195] (15-6) The information processing device 100 receives the transfer authorization from the management device 201. In this case, the information processing device 100 assigns to the data transaction 1 signature A of user A who is the source of the current transaction of the item data, signature B of user B who is the destination of the current transaction of the item data, and an exchange signature corresponding to the management device 201.

[0196] (15-7) The information processing device 100 transmits an issuance request for issuing an A-B transaction certificate to be used in the current transaction of the item data to the issuing device 202. The issuing device 202 receives the issuance request from the information processing device 100.

[0197] (15-8) The issuing device 202 transmits a generation request to the generating device 203, requesting that the latest EncOPE (monotonic ID) be generated. The generation request includes, for example, a data ID and a specified EncOPE (monotonic ID). The generating device 203 receives the generation request. Upon receiving the generation request, the generating device 203 determines whether or not an EncOPE (monotonic ID) that is the next to the specified EncOPE (monotonic ID) has been generated in the past, based on the latest monotonic ID corresponding to the item data represented by the data ID.

[0198] If the specified EncOPE (monotonic ID) has already been generated, the generating device 203 outputs an error to the management device 201. If the specified EncOPE (monotonic ID) has not already been generated, the generating device 203 generates the next EncOPE (monotonic ID) after the specified EncOPE (monotonic ID) as the latest EncOPE (monotonic ID). The latest EncOPE (monotonic ID) is EncOPE (latest monotonic ID+1). In the example of FIG. 15, it is assumed that the generating device 203 has generated the latest EncOPE (monotonic ID). The generating device 203 transmits the latest EncOPE (monotonic ID) to the issuing device 202. The issuing device 202 receives the latest EncOPE (monotonic ID) from the generating device 203.

[0199] (15-9) The issuing device 202 issues an A-B transaction certificate based on the latest EncOPE (monotonic ID) received. The issuing device 202 transmits the issued A-B transaction certificate to the information processing device 100. The information processing device 100 receives the A-B transaction certificate from the issuing device 202.

[0200] (15-10) The information processing device 100 transmits the received A-B transaction certificate to the management device 201. The management device 201 receives the A-B transaction certificate from the information processing device 100. The management device 201 manages the received A-B transaction certificate as the latest transaction certificate corresponding to the item data.

[0201] (15-11) Information processing device 100 generates data transaction 2 based on data transaction 1 to which signature A, signature B, and exchange signature have been added, and the received A-B transaction certificate. Information processing device 100 transmits generated data transaction 2 to client device 206B. Client device 206B receives and stores data transaction 2.

[0202] This allows the information processing device 100 to properly complete the transaction of the item data. The information processing device 100 can properly complete the transaction of the item data even if the EncOPE (monotonic ID) that the verification device 204 recognizes as the latest is incorrect.

[0203] (Third transaction processing procedure) Next, an example of a third transaction processing procedure corresponding to the third operation example, which is executed by the information processing system 200, will be described with reference to FIG.

[0204] Fig. 16 is a sequence diagram showing an example of the third transaction processing procedure. In Fig. 16, the client device 206A transmits the data transaction 1 including the certificate including the data ID and the monotonic ID to the information processing device 100 (step S1601). The monotonic ID is preferably in an order-preserving encrypted state.

[0205] The information processing device 100 transmits the received certificate for data transaction 1 to the verification device 204. Upon receiving the certificate, the verification device 204 uses the public key of the issuing device 202 to verify whether the received certificate is valid, and transmits the result to the information processing device 100 (step S1602).

[0206] The information processing device 100 transmits the monotonic ID of the received certificate for data transaction 1 to the verification device 204. Upon receiving the monotonic ID, the verification device 204 transmits the result of verifying the magnitude relationship between the received monotonic ID and the monotonic ID held by the verification device 204 to the information processing device 100 (step S1603). Here, the magnitude relationship is that the received monotonic ID is smaller than the monotonic ID held by the verification device 204.

[0207] The information processing device 100 transmits the received certificate for data transaction 1 to the management device 201 (step S1604). If the received certificate is the latest certificate, the management device 201 transmits a transfer approval to the information processing device 100 (step S1605). The information processing device 100 receives the transfer approval from the management device 201.

[0208] The information processing device 100 transmits a certificate issuance request to the issuing device 202 (step S1606). Upon receiving the certificate issuance request, the issuing device 202 transmits a monotonic ID update request to the generating device 203 (step S1607). In response to the update request, the generating device 203 transmits the updated monotonic ID to the issuing device 202. The issuing device 202 receives the updated monotonic ID from the generating device 203, generates a certificate including the data ID and the updated monotonic ID, and transmits it to the information processing device 100 (step S1608). The issuing device 202 transmits the generated certificate to the recording device 205 (step S1609).

[0209] The information processing device 100 transmits the received certificate to the management device 201 (step S1610). The management device 201 manages the received certificate as the latest one. The information processing device 100 transmits the data ID and monotonic ID of the received certificate to the verification device 204 (step S1611). The verification device 204 stores the received data ID and monotonic ID in association with each other. The information processing device 100 transmits the received certificate to the client device 206B (step S1612). The information processing system 200 ends the third transaction process.

[0210] (Fourth operation example of information processing device 100) Next, a fourth operation example of the information processing device 100 will be described with reference to FIG.

[0211] 17 is an explanatory diagram showing a fourth operation example of the information processing device 100. In FIG. 17, the information processing device 100 has a private key corresponding to a user A, a private key corresponding to a user B, and a private key corresponding to a management device 201.

[0212] The verification device 204 has a public key corresponding to the certificate authority operated by the issuing device 202, for example. The verification device 204 manages, for example, EncOPE (monotonic ID) recognized as the latest using the ID information management table 410. EncOPE (·) represents order-preserving encryption. The verification device 204 operates, for example, a sub-exchange. The management device 201 manages, for example, the latest certificate corresponding to item data using the certificate information management table 610. The management device 201 operates, for example, an exchange. The generation device 203 manages, for example, the latest monotonic ID corresponding to item data. In the example of FIG. 17, there is a client device 206 used by a user A. There is also a client device 206 used by a user B.

[0213] (17-1) Based on user A's operation input, client device 206A transmits data transaction 1 to information processing device 100. Data transaction 1 is management data associated with item data. Data transaction 1 includes, for example, data transaction 0, which is management data used the previous time the item data was traded. Data transaction 1 includes, for example, an aggregate signature representing past transaction history regarding the item data. Data transaction 1 includes a transaction certificate generated the previous time the item data was traded. Information processing device 100 receives data transaction 1 from client device 206A.

[0214] (17-2) The information processing device 100 acquires an inter-PA transaction certificate based on the received data transaction 1. The information processing device 100 transmits to the verification device 204 a determination request requesting that the inter-PA transaction certificate be determined to be valid or not.

[0215] The verification device 204 uses a public key corresponding to the certification authority operated by the issuing device 202 to determine whether or not the signature in the inter-PA transaction certificate is valid. If the signature is valid, the verification device 204 determines that the inter-PA transaction certificate is valid, and if the signature is not valid, the verification device 204 determines that the inter-PA transaction certificate is not valid. In the example of Fig. 17, it is assumed that the verification device 204 determines that the signature is valid and that the inter-PA transaction certificate is valid. The verification device 204 transmits a notification indicating that the inter-PA transaction certificate is valid to the information processing device 100.

[0216] (17-3) When the information processing device 100 receives a notification from the verification device 204 indicating that the inter-PA transaction certificate is valid, it acquires EncOPE (monotonic ID) based on the received data transaction 1. The information processing device 100 specifies the acquired EncOPE (monotonic ID) and transmits a verification request to the verification device 204 requesting verification of the magnitude relationship between the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest.

[0217] When the verification device 204 receives the verification request, it identifies the specified EncOPE (monotonic ID). The verification device 204 refers to the ID information management table 410 and verifies the magnitude relationship between the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest.

[0218] The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest match. The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) is greater than the EncOPE (monotonic ID) recognized as the latest. The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) is smaller than the EncOPE (monotonic ID) recognized as the latest.

[0219] 17, it is assumed that the verification device 204 verifies the magnitude relationship and determines that the specified EncOPE (monotonic ID) matches the EncOPE (monotonic ID) recognized as the latest. The verification device 204 transmits a notification indicating that the specified EncOPE (monotonic ID) matches the EncOPE (monotonic ID) recognized as the latest to the information processing device 100. The information processing device 100 receives a notification indicating that the specified EncOPE (monotonic ID) matches the EncOPE (monotonic ID) recognized as the latest from the verification device 204.

[0220] (17-4) The information processing device 100 determines that the specified EncOPE (monotonic ID) matches the EncOPE (monotonic ID) recognized as the latest, and requests transfer authorization from the management device 201. The information processing device 100 receives the transfer authorization from the management device 201. In this case, the information processing device 100 assigns to the data transaction 1 signature A of user A who is the source of the current transaction of the item data, signature B of user B who is the destination of the current transaction of the item data, and an exchange signature corresponding to the management device 201.

[0221] (17-5) The information processing device 100 transmits an issuance request for issuing an A-B transaction certificate to be used in the current transaction of the item data to the issuing device 202. The issuing device 202 receives the issuance request from the information processing device 100.

[0222] (17-6) The issuing device 202 transmits a generation request to the generating device 203 to request the generation of the latest EncOPE (monotonic ID). The generation request includes, for example, a data ID and a specified EncOPE (monotonic ID). The generating device 203 receives the generation request. Upon receiving the generation request, the generating device 203 determines whether or not an EncOPE (monotonic ID) that is the next to the specified EncOPE (monotonic ID) has been generated in the past, based on the latest monotonic ID corresponding to the item data represented by the data ID. In the example of FIG. 17, it is assumed that the generating device 203 has already generated the EncOPE (monotonic ID), and therefore outputs an error to the management device 201. The management device 201 receives the error from the generating device 203.

[0223] (17-7) Since the management device 201 has received the error, it transmits a transfer cancellation to the information processing device 100. The information processing device 100 receives the transfer cancellation from the verification device 204.

[0224] (17-8) Since the management device 201 has received the error, it transmits a transfer error indicating that the item data will not be traded to the client device 206A and the client device 206B. The client device 206A receives the transfer error and outputs it so that user A can refer to it. The client device 206B receives the transfer error and outputs it so that user B can refer to it.

[0225] This allows the information processing device 100 to avoid a situation in which item data is traded erroneously. The information processing device 100 can prevent unauthorized trading of item data. For example, the information processing device 100 can maintain order in the metaverse 220 or ensure fairness among participants in the metaverse 220 by appropriately trading item data.

[0226] (4th transaction processing procedure) Next, an example of a fourth transaction processing procedure corresponding to the fourth operation example executed by the information processing system 200 will be described with reference to FIG.

[0227] Fig. 18 is a sequence diagram showing an example of a fourth transaction processing procedure. In Fig. 18, the client device 206A transmits data transaction 1 including a certificate including a data ID and a monotonic ID to the information processing device 100 (step S1801). The monotonic ID is preferably in an order-preserving encrypted state.

[0228] The information processing device 100 transmits the received certificate for data transaction 1 to the verification device 204. Upon receiving the certificate, the verification device 204 uses the public key of the issuing device 202 to verify whether the received certificate is valid, and transmits the result to the information processing device 100 (step S1802).

[0229] The information processing device 100 transmits the monotonic ID of the received certificate for data transaction 1 to the verification device 204. Upon receiving the monotonic ID, the verification device 204 transmits the result of verifying the magnitude relationship between the received monotonic ID and the monotonic ID held by the verification device 204 to the information processing device 100 (step S1803). Here, the magnitude relationship is a match.

[0230] Based on the result of verifying the magnitude relationship, the information processing device 100 requests transfer approval from the management device 201. The information processing device 100 receives the transfer approval from the management device 201 (step S1804). The information processing device 100 transmits a certificate issuance request to the issuing device 202 (step S1805). Upon receiving the certificate issuance request, the issuing device 202 transmits a monotonic ID update request to the generating device 203 (step S1806).

[0231] When the generating device 203 receives the update request, since the monotonic ID has already been updated, the generating device 203 transmits an update error to the issuing device 202 (step S1807). The issuing device 202 receives the update error from the generating device 203. Upon receiving the update error, the issuing device 202 transmits a notification indicating that a double transfer has been detected to the managing device 201 (step S1808).

[0232] When the management device 201 receives a notification indicating that a double transfer has been detected, it transmits a transfer cancellation to the information processing device 100 (step S1809). When the management device 201 receives a notification indicating that a double transfer has been detected, it transmits a transfer error to the client device 206A (step S1810). When the management device 201 receives a notification indicating that a double transfer has been detected, it transmits a transfer error to the client device 206B (step S1811). The information processing system 200 ends the fourth transaction process.

[0233] (Fifth operation example of information processing device 100) Next, a fifth operation example of the information processing device 100 will be described with reference to FIG.

[0234] 19 is an explanatory diagram showing a fifth operation example of the information processing device 100. In FIG. 19, the information processing device 100 has a private key corresponding to a user A, a private key corresponding to a user B, and a private key corresponding to a management device 201.

[0235] The verification device 204 has a public key corresponding to the certificate authority operated by the issuing device 202, for example. The verification device 204 manages, for example, EncOPE (monotonic ID) recognized as the latest using the ID information management table 410. EncOPE (·) indicates order-preserving encryption. The verification device 204 operates, for example, a sub-exchange. The management device 201 manages, for example, the latest certificate corresponding to item data using the certificate information management table 610. The management device 201 operates, for example, an exchange. The generation device 203 manages, for example, the latest monotonic ID corresponding to item data. In the example of FIG. 19, there is a client device 206A used by a user A. There is also a client device 206B used by a user B.

[0236] (19-1) Based on user A's operation input, client device 206A transmits data transaction 1 to information processing device 100. Data transaction 1 is management data associated with item data. Data transaction 1 includes, for example, data transaction 0, which is management data used the previous time the item data was traded. Data transaction 1 includes, for example, an aggregate signature representing the past transaction history regarding the item data. Data transaction 1 includes a transaction certificate generated the previous time the item data was traded. Information processing device 100 receives data transaction 1 from client device 206A.

[0237] (19-2) The information processing device 100 acquires an inter-PA transaction certificate based on the received data transaction 1. The information processing device 100 transmits to the verification device 204 a determination request requesting that the inter-PA transaction certificate be determined to be valid or not.

[0238] The verification device 204 uses a public key corresponding to the certification authority operated by the issuing device 202 to determine whether or not the signature in the inter-PA transaction certificate is valid. If the signature is valid, the verification device 204 determines that the inter-PA transaction certificate is valid, and if the signature is not valid, the verification device 204 determines that the inter-PA transaction certificate is not valid. In the example of Fig. 19, it is assumed that the verification device 204 determines that the signature is valid and that the inter-PA transaction certificate is valid. The verification device 204 transmits a notification indicating that the inter-PA transaction certificate is valid to the information processing device 100.

[0239] (19-3) When the information processing device 100 receives a notification from the verification device 204 indicating that the inter-PA transaction certificate is valid, it acquires EncOPE (monotonic ID) based on the received data transaction 1. The information processing device 100 specifies the acquired EncOPE (monotonic ID) and transmits a verification request to the verification device 204 requesting verification of the magnitude relationship between the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest.

[0240] When the verification device 204 receives the verification request, it identifies the specified EncOPE (monotonic ID). The verification device 204 refers to the ID information management table 410 and verifies the magnitude relationship between the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest.

[0241] The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest match. The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) is greater than the EncOPE (monotonic ID) recognized as the latest. The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) is smaller than the EncOPE (monotonic ID) recognized as the latest.

[0242] 19, it is assumed that the verification device 204 verifies the magnitude relationship and determines that the specified EncOPE (monotonic ID) is greater than the EncOPE (monotonic ID) recognized as the latest. The verification device 204 transmits a notification indicating that the specified EncOPE (monotonic ID) is greater than the EncOPE (monotonic ID) recognized as the latest to the information processing device 100. The information processing device 100 receives a notification indicating that the specified EncOPE (monotonic ID) is greater than the EncOPE (monotonic ID) recognized as the latest from the verification device 204.

[0243] (19-4) Because the specified EncOPE (monotonic ID) is greater than the EncOPE (monotonic ID) recognized as the latest, the information processing device 100 inquires of the management device 201 about the latest EncOPE (monotonic ID). The information processing device 100 receives the latest EncOPE (monotonic ID) from the management device 201.

[0244] (19-5) The information processing device 100 transmits a verification request to the verification device 204, requesting verification of the magnitude relationship between a specified EncOPE (monotonic ID) and the latest received EncOPE (monotonic ID). Upon receiving the verification request, the verification device 204 refers to the ID information management table 410 and updates the EncOPE (monotonic ID) that the verification device 204 recognizes as the latest.

[0245] The verification device 204 identifies the specified EncOPE (monotonic ID). The verification device 204 refers to the ID information management table 410 and verifies the magnitude relationship between the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest.

[0246] The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest match. The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) is greater than the EncOPE (monotonic ID) recognized as the latest. The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) is smaller than the EncOPE (monotonic ID) recognized as the latest.

[0247] 19, it is assumed that the verification device 204 verifies the magnitude relationship and determines that the specified EncOPE (monotonic ID) does not match the EncOPE (monotonic ID) recognized as the latest. Since the specified EncOPE (monotonic ID) does not match the EncOPE (monotonic ID) recognized as the latest, the verification device 204 transmits a transfer denial to the information processing device 100. The information processing device 100 receives the transfer denial from the verification device 204.

[0248] (19-6) The verification device 204 transmits a transfer error indicating that the item data will not be traded to the client device 206A and the client device 206B. The client device 206A receives the transfer error and outputs it so that the user A can refer to it. The client device 206B receives the transfer error and outputs it so that the user B can refer to it.

[0249] This allows the information processing device 100 to avoid a situation in which item data is traded erroneously. The information processing device 100 can prevent unauthorized trading of item data. For example, the information processing device 100 can maintain order in the metaverse 220 or ensure fairness among participants in the metaverse 220 by appropriately trading item data.

[0250] (5th transaction processing procedure) Next, an example of a fifth transaction processing procedure corresponding to the fifth operation example, which is executed by the information processing system 200, will be described with reference to FIG.

[0251] Fig. 20 is a sequence diagram showing an example of the fifth transaction processing procedure. In Fig. 20, the client device 206A transmits data transaction 1 including a certificate including a data ID and a monotonic ID to the information processing device 100 (step S2001). The monotonic ID is preferably in an order-preserving encrypted state.

[0252] The information processing device 100 transmits the received certificate for data transaction 1 to the verification device 204. Upon receiving the certificate, the verification device 204 uses the public key of the issuing device 202 to verify whether the received certificate is valid, and transmits the result to the information processing device 100 (step S2002).

[0253] The information processing device 100 transmits the monotonic ID of the received certificate for data transaction 1 to the verification device 204. Upon receiving the monotonic ID, the verification device 204 transmits the result of verifying the magnitude relationship between the received monotonic ID and the monotonic ID held by the verification device 204 to the information processing device 100 (step S2003). Here, the magnitude relationship is that the received monotonic ID is greater than the monotonic ID held by the verification device 204.

[0254] If the received monotonic ID is greater than the monotonic ID held by the verification device 204, the verification device 204 inquires of the management device 201 about the latest monotonic ID (step S2004). The management device 201 transmits the latest monotonic ID to the verification device 204 (step S2005). When the verification device 204 receives the monotonic ID, it verifies the magnitude relationship between the received monotonic ID and the monotonic ID held by the verification device 204. Here, the magnitude relationship is not the same. Since the received monotonic ID does not match the monotonic ID held by the verification device 204, the verification device 204 transmits a transfer refusal to the information processing device 100 (step S2006). The information processing device 100 receives the transfer refusal from the verification device 204.

[0255] If the received monotonic ID does not match the monotonic ID held by the verification device 204, the verification device 204 transmits a transfer error to the client device 206A (step S2007). If the received monotonic ID does not match the monotonic ID held by the verification device 204, the verification device 204 transmits a transfer error to the client device 206B (step S2008). The information processing system 200 ends the fifth transaction process.

[0256] (Sixth operation example of information processing device 100) Next, a sixth operation example of the information processing device 100 will be described with reference to FIG.

[0257] 21 is an explanatory diagram showing a sixth operation example of the information processing device 100. In FIG. 21, the information processing device 100 has a private key corresponding to a user A, a private key corresponding to a user B, and a private key corresponding to a management device 201.

[0258] The verification device 204 has a public key corresponding to the certificate authority operated by the issuing device 202, for example. The verification device 204 manages, for example, EncOPE (monotonic ID) recognized as the latest using the ID information management table 410. EncOPE (·) represents order-preserving encryption. The verification device 204 operates, for example, a sub-exchange. The management device 201 manages, for example, the latest certificate corresponding to item data using the certificate information management table 610. The management device 201 operates, for example, an exchange. The generation device 203 manages, for example, the latest monotonic ID corresponding to item data. In the example of FIG. 21, there is a client device 206 used by a user A. There is also a client device 206 used by a user B.

[0259] (21-1) Based on user A's operation input, client device 206A transmits data transaction 1 to information processing device 100. Data transaction 1 is management data associated with item data. Data transaction 1 includes, for example, data transaction 0, which is management data used the previous time the item data was traded. Data transaction 1 includes, for example, an aggregate signature representing the past transaction history regarding the item data. Data transaction 1 includes a transaction certificate generated the previous time the item data was traded. Information processing device 100 receives data transaction 1 from client device 206A.

[0260] (21-2) The information processing device 100 acquires an inter-PA transaction certificate based on the received data transaction 1. The information processing device 100 transmits to the verification device 204 a determination request requesting that the inter-PA transaction certificate be determined to be valid or not.

[0261] The verification device 204 uses a public key corresponding to the certification authority operated by the issuing device 202 to determine whether or not the signature in the inter-PA transaction certificate is valid. If the signature is valid, the verification device 204 determines that the inter-PA transaction certificate is valid, and if the signature is not valid, the verification device 204 determines that the inter-PA transaction certificate is not valid. In the example of Fig. 21, it is assumed that the verification device 204 determines that the signature is valid and that the inter-PA transaction certificate is valid. The verification device 204 transmits a notification indicating that the inter-PA transaction certificate is valid to the information processing device 100.

[0262] (21-3) When the information processing device 100 receives a notification from the verification device 204 indicating that the inter-PA transaction certificate is valid, it acquires EncOPE (monotonic ID) based on the received data transaction 1. The information processing device 100 specifies the acquired EncOPE (monotonic ID) and transmits a verification request to the verification device 204 requesting verification of the magnitude relationship between the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest.

[0263] When the verification device 204 receives the verification request, it identifies the specified EncOPE (monotonic ID). The verification device 204 refers to the ID information management table 410 and verifies the magnitude relationship between the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest.

[0264] The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) and the EncOPE (monotonic ID) recognized as the latest match. The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) is greater than the EncOPE (monotonic ID) recognized as the latest. The magnitude relationship is, for example, that the specified EncOPE (monotonic ID) is smaller than the EncOPE (monotonic ID) recognized as the latest.

[0265] 21, it is assumed that the verification device 204 verifies the magnitude relationship and determines that the specified EncOPE (monotonic ID) is smaller than the EncOPE (monotonic ID) recognized as the latest. The verification device 204 transmits a notification indicating that the specified EncOPE (monotonic ID) is smaller than the EncOPE (monotonic ID) recognized as the latest to the information processing device 100. The information processing device 100 receives a notification indicating that the specified EncOPE (monotonic ID) is smaller than the EncOPE (monotonic ID) recognized as the latest from the verification device 204.

[0266] (21-4) Because the specified EncOPE (monotonic ID) is smaller than the EncOPE (monotonic ID) recognized as the latest, the information processing device 100 transmits a determination request to the management device 201 to request that it determine whether the inter-PA transaction certificate is the latest. The management device 201 receives the determination request from the information processing device 100.

[0267] (21-5) Management device 201 refers to certificate information management table 610 and determines whether or not the inter-PA transaction certificate is the latest transaction certificate corresponding to the item data. Here, it is assumed that management device 201 determines that the inter-PA transaction certificate is not the latest transaction certificate corresponding to the item data. For this reason, management device 201 transmits a transfer denial to information processing device 100. Information processing device 100 receives the transfer denial from management device 201.

[0268] (21-6) The management device 201 transmits a transfer error indicating that the item data will not be traded to the client device 206A and the client device 206B. The client device 206A receives the transfer error and outputs it so that the user A can refer to it. The client device 206B receives the transfer error and outputs it so that the user B can refer to it.

[0269] This allows the information processing device 100 to avoid a situation in which item data is traded erroneously. The information processing device 100 can prevent unauthorized trading of item data. For example, the information processing device 100 can maintain order in the metaverse 220 or ensure fairness among participants in the metaverse 220 by appropriately trading item data.

[0270] (6th transaction processing procedure) Next, an example of a sixth transaction processing procedure corresponding to the sixth operation example executed by the information processing system 200 will be described with reference to FIG.

[0271] Fig. 22 is a sequence diagram showing an example of a sixth transaction processing procedure. In Fig. 22, the client device 206A transmits data transaction 1 including a certificate including a data ID and a monotonic ID to the information processing device 100 (step S2201). The monotonic ID is preferably in an order-preserving encrypted state.

[0272] The information processing device 100 transmits the received certificate for data transaction 1 to the verification device 204. Upon receiving the certificate, the verification device 204 uses the public key of the issuing device 202 to verify whether the received certificate is valid, and transmits the result to the information processing device 100 (step S2202).

[0273] The information processing device 100 transmits the monotonic ID of the received certificate for data transaction 1 to the verification device 204. Upon receiving the monotonic ID, the verification device 204 transmits the result of verifying the magnitude relationship between the received monotonic ID and the monotonic ID held by the verification device 204 to the information processing device 100 (step S2203). Here, the magnitude relationship is that the received monotonic ID is smaller than the monotonic ID held by the verification device 204.

[0274] The information processing device 100 transmits the received certificate of data transaction 1 to the management device 201 (step S2204). If the received certificate is not the latest certificate, the management device 201 transmits a transfer denial to the information processing device 100 (step S2205). The information processing device 100 receives the transfer denial from the management device 201.

[0275] The management device 201 transmits a transfer error to the client device 206A (step S2206). The management device 201 transmits a transfer error to the client device 206B (step S2207). The information processing system 200 ends the sixth transaction process.

[0276] (Overall processing procedure) Next, an example of an overall processing procedure executed by the information processing device 100 will be described with reference to Fig. 23. The overall processing is realized by, for example, the CPU 301, storage areas such as the memory 302 and the recording medium 305, and the network I / F 303 shown in Fig. 3.

[0277] Fig. 23 is a flowchart showing an example of an overall processing procedure. In Fig. 23, the information processing device 100 receives data transaction 1 including a certificate including a data ID and a monotonic ID from the client device 206 (step S2301). Next, the information processing device 100 transmits the data ID of the certificate of data transaction 1 to the verification device 204, and obtains the monotonic ID corresponding to the data ID of the certificate of data transaction 1 (step S2302).

[0278] Then, information processing device 100 uses the public key of issuing device 202 to determine whether or not the certificate for data transaction 1 is valid (step S2303). If the certificate for data transaction 1 is valid (step S2303: Yes), information processing device 100 proceeds to processing of step S2304. On the other hand, if the certificate for data transaction 1 is not valid (step S2303: No), information processing device 100 proceeds to processing of step S2312.

[0279] In step S2304, the information processing device 100 determines whether the monotonic ID of the certificate for data transaction 1 matches the monotonic ID acquired from the verification device 204 (step S2304). If they match (step S2304: Yes), the information processing device 100 proceeds to processing of step S2310. On the other hand, if they do not match (step S2304: No), the information processing device 100 proceeds to processing of step S2305.

[0280] In step S2305, the information processing device 100 determines whether the monotonic ID of the certificate for data transaction 1 is greater than the monotonic ID acquired from the verification device 204 (step S2305). If the monotonic ID is greater than the monotonic ID acquired from the verification device 204 (step S2305: Yes), the information processing device 100 proceeds to processing of step S2308. On the other hand, if the monotonic ID is smaller than the monotonic ID acquired from the verification device 204 (step S2305: No), the information processing device 100 proceeds to processing of step S2306.

[0281] In step S2306, information processing device 100 transmits the certificate for data transaction 1 to management device 201 (step S2306). Next, information processing device 100 determines whether the certificate for data transaction 1 matches the latest certificate (step S2307). If it matches the latest certificate (step S2307: Yes), information processing device 100 proceeds to processing of step S2310. On the other hand, if it does not match the latest certificate (step S2307: No), information processing device 100 proceeds to processing of step S2312.

[0282] In step S2308, the information processing device 100 acquires the latest monotonic ID from the generation device 203 (step S2308). Next, the information processing device 100 determines whether the monotonic ID of the certificate for data transaction 1 matches the latest monotonic ID acquired from the generation device 203 (step S2309). If it matches the latest monotonic ID (step S2309: Yes), the information processing device 100 proceeds to processing of step S2310. On the other hand, if it does not match the latest monotonic ID (step S2309: No), the information processing device 100 proceeds to processing of step S2306.

[0283] In step S2310, the information processing device 100 requests the generating device 203 to update the monotonic ID, and determines whether or not there is a duplicate registration (step S2310). If there is a duplicate registration (step S2310: Yes), the information processing device 100 proceeds to processing in step S2312. On the other hand, if there is no duplicate registration (step S2310: No), the information processing device 100 proceeds to processing in step S2311.

[0284] In step S2311, the information processing device 100 sets that the transaction is permitted (step S2311), and then the information processing device 100 proceeds to the process of step S2313.

[0285] In step S2312, the information processing device 100 sets the transaction to be rejected (step S2312), and then the information processing device 100 proceeds to the process of step S2313.

[0286] In step S2313, the information processing device 100 outputs a notification indicating that the transaction is permitted or rejected (step S2313). Then, the information processing device 100 ends the entire process. Here, the information processing device 100 may change the order of the processes of some of the steps in FIG. 23 and execute them. Also, the information processing device 100 may omit the processes of some of the steps in FIG. 23.

[0287] (Registration process) Next, an example of a registration process procedure executed by the information processing device 100 will be described with reference to Fig. 24. The registration process is realized by, for example, the CPU 301, storage areas such as the memory 302 and the recording medium 305, and the network I / F 303 shown in Fig. 3.

[0288] Fig. 24 is a flowchart showing an example of a registration process procedure. In Fig. 24, the information processing device 100 receives a creation request for registering new data from the client device 206 or the like (step S2401).

[0289] In response to the creation request, the information processing device 100 issues a monotonic ID (step S2402). The information processing device 100 may issue the monotonic ID using the generation device 203. The information processing device 100 performs order-preserving encryption on the monotonic ID (step S2403). The information processing device 100 may use the generation device 203 to perform order-preserving encryption on the monotonic ID.

[0290] The information processing device 100 assigns a data ID to the new data and issues a certificate corresponding to the new data (step S2404). The information processing device 100 may issue a certificate corresponding to the new data using the issuing device 202. The information processing device 100 transmits the data ID, the certificate, and the monotonic ID to the recording device 205 and records them (step S2405).

[0291] The information processing device 100 transmits the certificate corresponding to the new data to the client device 206 or the like (step S2406). The information processing device 100 ends the registration process. This allows the information processing device 100 to issue a certificate to enable trading of the newly generated data.

[0292] (Update procedure) Next, an example of an update process procedure executed by the verification device 204 will be described with reference to Fig. 25. The verification device 204 executes the update process periodically, for example. The update process is realized by the CPU 401, storage areas such as the memory 402 and the recording medium 405, and the network I / F 403, for example, shown in Fig. 4.

[0293] Fig. 25 is a flowchart showing an example of an update process procedure. In Fig. 25, the verification device 204 acquires a data ID and a monotonic ID from the recording device 205 (step S2501). The verification device 204 updates the ID information management table 410 based on the data ID and the monotonic ID (step S2502). This allows the verification device 204 to update the ID information management table 410 to an appropriate state.

[0294] (Application example of information processing system 200) Next, an application example of the information processing system 200 will be described with reference to FIG.

[0295] 26 is an explanatory diagram showing an application example of an information processing system 200. In FIG. 26, the information processing system 200 includes one management device 201 and a plurality of metaverses 220. Each metaverse 220 includes a verification device 204.

[0296] If each metaverse 220 does not include the verification device 204, each time data is traded within the metaverse 220, the metaverse 220 will inquire of the management device 201 as to whether or not the certificate attached to the data is the latest. This will result in an increase in the processing load on the management device 201. In contrast, in the information processing system 200, each metaverse 220 includes the verification device 204, so that the processing load on the management device 201 can be reduced.

[0297] The information processing system 200 can be applied, for example, to realizing a large-scale virtual space in which multiple metaverses 220 realized in different execution environments are linked together. Similarly, the information processing system 200 can be applied, for example, to realizing an online game including multiple virtual spaces realized in different execution environments.

[0298] As described above, the information processing device 100 can accept the designation of a first certificate to which a first value is assigned, which is associated with the target 101 to be traded, by communicating with the first terminal 111 corresponding to the transaction source. The information processing device 100 can use the storage unit 120 that stores the second value 121 that changes monotonically every time the target 101 is traded. The information processing device 100 can control the storage unit 120 to store a third value obtained by monotonically changing the second value 121 when it is determined that the first value assigned to the first certificate, the designation of which is accepted, matches the second value 121 using the storage unit 120. The information processing device 100 can generate a second certificate 140 to which a third value is assigned, which is associated with the target 101, when it is determined that the first value assigned to the first certificate, the designation of which is accepted, matches the second value 121 using the storage unit 120. According to the information processing device 100, the generated second certificate 140 can be transmitted to the management unit 130 that manages the latest certificate associated with the object 101, and to the second terminal 112 that corresponds to the trading partner. This allows the information processing device 100 to appropriately determine whether or not to trade the object 101 without inquiring of the management unit 130. The information processing device 100 can reduce the time required to trade the object 101. In this way, the information processing device 100 can make it easier to trade the object 101.

[0299] According to the information processing device 100, a value that monotonically increases every time the target 101 is traded can be adopted as the second value 121. According to the information processing device 100, when it is determined that the first value assigned to the first certificate, the designation of which has been accepted, is greater than the second value 121, it is possible to inquire of the management unit 130 about the latest value assigned to the latest certificate, using the storage unit 120. According to the information processing device 100, when it is determined that the first value matches the latest value as a result of the inquiry to the management unit 130, it is possible to control the storage unit 120 to store a third value. According to the information processing device 100, when it is determined that the first value matches the latest value as a result of the inquiry to the management unit 130, it is possible to generate a second certificate 140 to which the third value has been assigned. As a result, even if the second value 121 is incorrect, the information processing device 100 can appropriately determine whether or not to trade the target 101.

[0300] According to the information processing device 100, when it is determined that the first value assigned to the first certificate is smaller than the second value 121, it is possible to inquire of the management unit 130 whether or not the first certificate is the latest certificate, using the storage unit 120. According to the information processing device 100, when it is determined that the first certificate is the latest certificate as a result of inquiring to the management unit 130, it is possible to control the storage unit 120 to store the third value. According to the information processing device 100, when it is determined that the first certificate is the latest certificate as a result of inquiring to the management unit 130, it is possible to generate the second certificate 140 to which the third value is assigned. In this way, even if the second value 121 is incorrect, the information processing device 100 can appropriately determine whether or not to trade the target 101.

[0301] According to the information processing device 100, when it is determined that the first value assigned to the first certificate, the specification of which has been accepted, matches the second value 121, it is possible to inquire about the third value from a generating unit that generates a third value by monotonically changing the second value 121, using the storage unit 120. According to the information processing device 100, it is possible to control the storage unit 120 so as to store the third value acquired as a result of inquiring of the generating unit. This makes it possible for the information processing device 100 to be applied when the third value is generated externally.

[0302] According to the information processing device 100, when a notification is received as a result of an inquiry made to the generation unit indicating that a third value has been generated in the past by monotonically changing the second value 121, it is possible to determine not to control the storage unit 120. According to the information processing device 100, when a notification is received as a result of an inquiry made to the generation unit, it is possible to determine not to generate the second certificate 140. This allows the information processing device 100 to avoid a situation in which the target 101 is erroneously traded.

[0303] According to the information processing device 100, when it is determined that the first value does not match the latest value as a result of inquiring to the management unit 130, it can determine not to control the storage unit 120. According to the information processing device 100, when it is determined that the first value does not match the latest value as a result of inquiring to the management unit 130, it can determine not to generate the second certificate 140. This allows the information processing device 100 to avoid a situation in which the target 101 is erroneously traded.

[0304] According to the information processing device 100, when it is determined that the first certificate is not the latest certificate as a result of inquiring to the management unit 130, it can determine not to control the storage unit 120. According to the information processing device 100, when it is determined that the first certificate is not the latest certificate as a result of inquiring to the management unit 130, it can determine not to generate the second certificate 140. This allows the information processing device 100 to avoid a situation in which the target 101 is erroneously traded.

[0305] According to the information processing device 100, an order-preserving encrypted value can be adopted as the first value. According to the information processing device 100, an order-preserving encrypted value can be adopted as the second value 121. According to the information processing device 100, an order-preserving encrypted value can be adopted as the third value. According to the information processing device 100, an order-preserving encrypted value can be adopted as the latest value. This makes it easier for the information processing device 100 to ensure security. The information processing device 100 can reduce the processing time required when comparing values.

[0306] According to the information processing device 100, the target 101 can be applied to a situation where it exists in the first metaverse. According to the information processing device 100, the target 101 can be applied to a situation where the transaction source exists in the first metaverse. According to the information processing device 100, the target 101 can be applied to a situation where the transaction destination exists in the second metaverse. According to the information processing device 100, the target 101 can be applied to a situation where the storage unit 120 is realized by a computer different from the computer that exists in the first system that realizes the first metaverse. According to the information processing device 100, the target 101 can be applied to a situation where the management unit 130 is realized by a computer different from the computer that exists outside the first system. According to the information processing device 100, the target 101 can be applied to a situation where the generation unit is realized by a computer different from the computer that exists outside the first system. Thereby, the information processing device 100 can make the target 101 tradable between the first metaverse and the second metaverse.

[0307] The information processing method described in this embodiment can be realized by executing a prepared program on a computer such as a PC or a workstation. The information processing program described in this embodiment is recorded on a computer-readable recording medium, and is executed by being read from the recording medium by the computer. The recording medium may be a hard disk, a flexible disk, a CD (Compact Disc)-ROM, an MO (Magneto Optical disc), a DVD (Digital Versatile Disc), or the like. The information processing program described in this embodiment may also be distributed via a network such as the Internet.

[0308] The following supplementary notes are further disclosed regarding the above-described embodiment.

[0309] (Supplementary Note 1) By communicating with a first terminal corresponding to the transaction source, a designation of a first certificate assigned with a first value and corresponding to a transaction target is received; using a storage unit that stores a second value that changes monotonically each time the target is traded, when it is determined that the first value assigned to the first certificate for which the designation has been accepted matches the second value, controlling the storage unit to store a third value that is obtained by monotonically changing the second value; using the storage unit, when it is determined that the first value assigned to the first certificate for which the designation has been accepted matches the second value, generate a second certificate associated with the target and assigned with the third value; Transmitting the generated second certificate to a management unit that manages the latest certificate associated with the target and to a second terminal that corresponds to the trading partner. An information processing program that causes a computer to execute a process.

[0310] (Note 2) The second value is a value that monotonically increases each time the target is traded, inquiring of the management unit about the latest value assigned to the latest certificate when it is determined, using the storage unit, that the first value assigned to the first certificate for which the designation has been accepted is greater than the second value; causing the computer to execute a process; The control process includes: controlling the storage unit to store the third value when it is determined that the first value matches the latest value as a result of the inquiry to the management unit; The generating process includes: The information processing program described in Appendix 1, characterized in that when, as a result of querying the management unit, it is determined that the first value matches the latest value, the second certificate is generated with the third value assigned.

[0311] (Supplementary Note 3) When it is determined using the storage unit that the first value assigned to the first certificate that has been accepted for designation is smaller than the second value, an inquiry is made to the management unit as to whether the first certificate that has been accepted for designation is the latest certificate. causing the computer to execute a process; The control process includes: controlling the storage unit to store the third value when it is determined that the first certificate is the latest certificate as a result of the inquiry to the management unit; The generating process includes: The information processing program described in Appendix 2, characterized in that when, as a result of querying the management unit, it is determined that the first certificate is the latest certificate, the second certificate to which the third value is assigned is generated.

[0312] (Supplementary Note 4) When it is determined using the storage unit that the first value assigned to the first certificate for which the designation has been accepted matches the second value, the storage unit inquires about the third value from a generation unit that generates the third value by monotonically changing the second value. causing the computer to execute a process; The control process includes: The information processing program according to claim 3, further comprising controlling the memory unit to store the third value obtained as a result of querying the generation unit.

[0313] (Appendix 5) The control process is when receiving a notification indicating that the third value has been generated by monotonically changing the second value in the past as a result of the inquiry to the generation unit, determining not to control the storage unit; The generating process includes: 5. The information processing program according to claim 4, further comprising: determining not to generate the second certificate when the notification is received as a result of an inquiry to the generation unit.

[0314] (Appendix 6) The control process is when it is determined that the first value does not match the latest value as a result of the inquiry to the management unit, it is determined not to control the storage unit; The generating process includes: The information processing program described in Appendix 5, characterized in that if, as a result of querying the management unit, it is determined that the first value does not match the latest value, it is determined not to generate the second certificate.

[0315] (Appendix 7) The control process is when it is determined that the first certificate is not the latest certificate as a result of the inquiry to the management unit, it is determined not to control the storage unit; The generating process includes: The information processing program described in Appendix 6, characterized in that if, as a result of querying the management unit, it is determined that the first certificate is not the latest certificate, it is determined not to generate the second certificate.

[0316] (Supplementary Note 8) The first value is an order-preserving encrypted value, the second value is an order-preserving encrypted value; the third value is an order-preserving encrypted value; 8. The information processing program according to claim 2, wherein the latest value is an order-preserving encrypted value.

[0317] (Appendix 9) The subject exists within a first metaverse; The transaction origin exists within the first metaverse; The trading partner exists in a second metaverse; The storage unit is realized by another computer different from the computer, which exists in a first system that realizes the first metaverse, the management unit is realized by a computer other than the computer that exists outside the first system, The information processing program according to any one of appendices 4 to 7, wherein the generation unit is realized by another computer that exists outside the first system and is different from the computer. [Explanation of symbols]

[0318] 100 Information processing device 101 Target 111 First Terminal 112 Second Terminal 120,800 storage unit 121 Second Value 130,810 Management Department 131 Certificates 140 Second Certificate 200 Information Processing Systems 201 Management device 202 Issuer 203 Generator 204 Verification Device 205 Recording Device 206 Client Device 210 Network 220 Metaverse 300,400,600 Bus 301,401,601 CPU 302,402,602 Memory 303,403,603 Network I / F 304,404,604 Recording media I / F 305,405,605 Recording media 410 ID information management table 610 Certificate Information Management Table 801 Acquisition Department 802 Verification Department 803 Update Department 804 Publishing Department 805 Output section 820 Generation part 1010,1020,1100 Contents

Claims

1. receiving a designation of a first certificate, which is associated with an object of a transaction and has a first value assigned thereto, by communicating with a first terminal corresponding to the transaction source; using a storage unit that stores a second value that changes monotonically each time the target is traded, when it is determined that the first value assigned to the first certificate for which the designation has been accepted matches the second value, controlling the storage unit to store a third value that is obtained by monotonically changing the second value; using the storage unit, when it is determined that the first value assigned to the first certificate for which the designation has been accepted matches the second value, generate a second certificate associated with the target and assigned with the third value; Transmitting the generated second certificate to a management unit that manages the latest certificate associated with the target and to a second terminal that corresponds to the trading partner. An information processing program that causes a computer to execute a process.

2. The second value is a value that monotonically increases every time the target is traded, when it is determined using the storage unit that the first value assigned to the first certificate for which the designation has been accepted is greater than the second value, inquiring of the management unit about the latest value assigned to the latest certificate; causing the computer to execute a process; The control process includes: when it is determined that the first value matches the latest value as a result of the inquiry to the management unit, controlling the storage unit to store the third value; The generating process includes:

2. The information processing program according to claim 1, further comprising: generating the second certificate to which the third value is assigned when it is determined that the first value matches the latest value as a result of querying the management section.

3. when it is determined using the storage unit that the first value assigned to the first certificate that has been accepted for designation is smaller than the second value, inquiring of the management unit as to whether the first certificate that has been accepted for designation is the latest certificate; causing the computer to execute a process; The control process includes: when it is determined that the first certificate is the latest certificate as a result of the inquiry to the management unit, controlling the storage unit to store the third value; The generating process includes:

3. The information processing program according to claim 2, further comprising: generating the second certificate to which the third value is assigned when it is determined that the first certificate is the latest certificate as a result of querying the management unit.

4. using the storage unit, when it is determined that the first value assigned to the first certificate for which the designation has been accepted matches the second value, inquiring about the third value to a generation unit that generates the third value by monotonically varying the second value; causing the computer to execute a process; The control process includes:

4. The information processing program according to claim 3, further comprising controlling the storage unit to store the third value obtained as a result of the inquiry to the generation unit.

5. The control process includes: when receiving a notification indicating that the third value has been generated by monotonically changing the second value in the past as a result of the inquiry to the generation unit, determining not to control the storage unit; The generating process includes:

5. The information processing program according to claim 4, wherein when the notification is received as a result of the inquiry to the generation unit, it is determined not to generate the second certificate.

6. The control process includes: when it is determined that the first value does not match the latest value as a result of the inquiry to the management unit, it is determined not to control the storage unit; The generating process includes:

6. The information processing program according to claim 5, further comprising: determining not to generate the second certificate when it is determined that the first value does not match the latest value as a result of querying the management section.

7. The control process includes: When it is determined that the first certificate is not the latest certificate as a result of the inquiry to the management unit, it is determined not to control the storage unit; The generating process includes:

7. The information processing program according to claim 6, wherein when it is determined that the first certificate is not the latest certificate as a result of querying the management section, it is determined not to generate the second certificate.

8. the first value is an order-preserving encrypted value; the second value is an order-preserving encrypted value; the third value is an order-preserving encrypted value; 8. The information processing program according to claim 2, wherein the latest value is an order-preserving encrypted value.

Images