Data structure, information processing device, information processing method, and information processing system

Abstract

To solve a problem in which, according to background technologies such as X.509, the trustworthiness of digital signatures and certificates depends mainly on the certification authority and service providers, however, for data used by users, a mechanism is needed to build mutual trust between service providers and users, and between users themselves.SOLUTION: In the present invention, an information processing system is constructed that generates a certificate for data and associates information related to trust with the certificate.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a data structure, an information processing device, an information processing method, and an information processing system for promoting the formation of trust by using information technology. [Background technology]

[0002] Prior art related to digital signatures and certificates includes X.509 v3. Furthermore, an information processing system using digital signatures is described in Patent Document 2. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2019-028966 A [Patent Document 2] Patent Publication No. 2021-111301 [Non-patent literature]

[0004] [Non-Patent Document 1] "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", IETF, May 2008, p.1-151, URL: https: / / www.ietf.org / rfc / rfc5280.txt Summary of the Invention [Problem to be solved by the invention]

[0005] According to the background art, the credibility of digital signatures and certificates mainly depends on the certification authority or service provider. However, for data used by users, a mechanism is needed to build mutual trust between the service provider and the user, or between users themselves. [Means for solving the problem]

[0006] In the present invention, an information processing system is constructed that generates a certificate for data and associates information related to trust with the certificate. The system configuration consists of a user device and a certificate system. There are use cases for users, User A, who uses a certificate for data that is the subject of a digital signature, and User B, who associates trust information with the data certificate. Therefore, the respective devices are called User Device A and User Device B. A certificate related to data that is the subject of a digital signature is called a data certificate. Because the fields of a data certificate are handled differently, the data certificates used by user device A and user device B are called data certificate A and data certificate B.

[0007] Data certificates are used by associating data certificate A with data certificate B. The associated certificates have a tree structure. The data structure consists of fields: data certificate identifier, user identifier, digital signature verification key, digital signature, certificate system verification key, trust data, and associated certificate data.

[0008] User device A is an information processing device that mainly performs processing related to data certificate A. User device A performs data certificate A generation, data certificate A registration request, data certificate acquisition request, and data certificate B verification. The certificate system is an information processing system that stores a data certificate in a recording device and adds a digital signature indicating that the data has been sent through the certificate system in response to a request from a user device. A data certificate list that stores data certificates is used as the recording device. The certificate system consists of a data certificate A registration response, a data certificate acquisition response, and a data certificate B registration response. User device B is an information processing device that mainly performs processing related to data certificate B. User device B performs data certificate acquisition requests, data certificate A verification, data certificate B generation, and data certificate B registration requests. The user device and the certificate system have a digital signature key pair generation. In the claims, user device A and user device B are collectively referred to as user devices.

[0009] The information processing system of the present invention performs the following sequence. In the data certificate A registration sequence, user A uses user device A to generate data certificate A from data to be digitally signed and registers it in the certificate system. The certificate system responds with a response regarding the registration of data certificate A. In the data certificate B registration sequence, user B uses user device B to verify data certificate A, generate data certificate B from data certificate A, and register the data certificate B in the certificate system. The certificate system responds regarding the registration of data certificate B. In the trusted data usage sequence, user A uses user device A to verify the digital signature of data certificate B registered by user device B, and uses the trusted data. The certificate system responds with regard to the acquisition of data certificate B. The encryption sequence encrypts the digital signature of the data certificate and the trust data separately. When sending or receiving a data certificate, the digital signature is encrypted with the public key of the recipient, and the recipient decrypts it with its private key. The trust data is encrypted with the public key of user device A when data certificate B is generated, and decrypted with the private key of user device A when data certificate B is verified. Effect of the Invention

[0010] The present invention establishes trust in data by using certificates related to the data, and establishing trust promotes the value and circulation of the data. [Brief description of the drawings]

[0011] [Figure 1] System overview of the present invention DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0012] The information processing device and information processing system of the present invention are based on the following premise. The information processing system is composed of at least one information processing device, and may be a single information processing device or a combination of multiple information processing devices. When communication is performed using an electric communication line, the communication may go through devices such as a repeater, hub, router, firewall, load balancer, and relay server. When communication is performed, communication control such as data encoding, buffering, caching, and retransmission requests may be used. Data may be transmitted and received as one piece of data, or as multiple pieces of divided data. The URL or URI used when accessing the information processing system may be one that is recorded in advance in a recording device, one that is input by the user, or one that is obtained by communicating with the information processing system. The information processing device may be a single implementation or a combination of multiple implementations. It may be synchronous or asynchronous processing. Any communication protocol, information processing algorithm, file format, and data length may be used. The features and data may be implemented by software, such as applications, libraries, modules, plug-ins, tools, drivers, firmware, etc., or by hardware, such as integrated circuits, electronic components, electrical circuits, cables, recording devices, etc., or by a combination of software and hardware. The processing result described shall be a value indicating normal completion, abort, or abnormal completion. In the case of a value indicating abort or abnormal completion, abort processing, abnormal completion processing, or exception processing may be performed. However, in the case of an abnormal completion related to security, the reason for the abnormality does not need to be made clear. Security may be achieved by adding identity verification, authentication and authorization, implementation of tamper resistance of information processing devices, session tokens, and the like. The hashing process may involve padding with a salt. In order to prevent unauthorized use, access control may involve determining whether or not use is permitted, and setting whether or not information is public or private, depending on the information processing device, information processing system, domain, etc.

[0013] The target data is data owned or used by a user that is the subject of a digital signature. The target data includes identifiers, URIs, data related to tokens, data related to tickets, text such as messages, media files such as documents, images, audio, video, e-books, and three-dimensional objects, executable file data, driver data, firmware, adjustment values ​​for each part, OS data, and data description language files such as JSON and XML. Alternatively, a combination of multiple pieces of the above data may be used. For example, a combination of an identifier related to data and an image file of a ticket or paper, or a combination of multiple identifiers read from an IC chip or recording device and a token may be used. It may be combined with the information processing system described in Patent Document 1 to use the identifier read by NFC as target data and combine it with processing related to payment, etc.

[0014] The data certificate may be in a file format or as a collection of data. The fields of the data certificate are as follows: The data certificate identifier is a value that is unique to the data certificate. When using a distributed multiple certificate system, a URI such as a URL that includes a unique value may be used. The user identifier is a value that is unique for a user. A digital signature verification key is an asymmetric key value used to verify a digital signature. A digital signature is a value generated from target data and encrypted with a signature key. When it goes through a certificate system, it is repeatedly encrypted and used. A certificate system's verification key is an asymmetric key value that is assigned by the certificate system. The trust data is information regarding the trust of the data. The associated certificate data is a list of data certificate identifiers associated with a data certificate. For data certificate A, it is a list of data certificate identifiers for data certificate B. For data certificate B, it is the data certificate identifier for data certificate A. Optionally, the following fields may be added to the data certificate: The information about the target data includes the name of the target data. The validity period uses data indicating the time from the start to the end of the data certificate. Multiple points in time and multiple periods may be used. Data related to the time zone may also be added. The error detection code data used is calculated using an arbitrary error detection code algorithm. The information about the user includes data about the user's name and affiliation. The information about the certificate system is used by the certificate system when managing data certificates. It includes the name of the certificate system, an identifier that indicates the certificate system, a management number, and settings related to the information processing algorithm. It is also used when you want to add a digital signature of the certificate system separately. The update certificate data is used for updating the data certificate, such as updating the digital signature or verification key, changing the user, etc. A data certificate identifier that indicates the data certificate before or after the update is used. The reception time data is data that indicates the time when the certificate system registered the data certificate.

[0015] The user device and the certificate system have a digital signature key pair generation. The digital signature key pair generation uses an asymmetric key generation algorithm to generate a key pair of a signature key and a verification key. An algorithm using an elliptic curve may be used. A plurality of key pairs may be generated and set so that different key pairs can be used depending on the service or purpose. When used for encryption and decryption, the verification key is described as a public key and the signature key is described as a private key, but encryption and digital signature may use different key pairs.

[0016] User device A has data certificate A generation, data certificate A registration request, data certificate acquisition request, and data certificate B verification. Data certificate A generation generates data certificate A and records it in the field. The user identifier is a value that is unique to User A. It may be obtained from an external information processing system or may be data read from a recording device such as an IC chip. A verification key is used to verify the digital signature. A digital signature uses a value generated using a digital signature algorithm from the target data and a signing key. The data certificate A registration request sends data certificate A to the certificate system. The certificate system receives the processing result value, the data certificate identifier. The data certificate acquisition request obtains a data certificate from the certificate system. The data certificate identifier is sent, and the corresponding data certificate and processing result, or only the processing result, are received. Optionally, the user device's verification key may be sent with the request. Data certificate B verification verifies data certificate B and uses its trust data. The digital signature of data certificate A and the digital signature of data certificate B are decrypted with the verification key of the certificate system, and a signature verification algorithm is performed using the decrypted digital signature of data certificate B, the verification key of data certificate B, and the decrypted digital signature of data certificate A to make a judgment. After the judgment, the trust data of data certificate B is used, for example, by displaying it. A list of the trust data of multiple data certificates B may be displayed using the related certificate data of data certificate A.

[0017] The certificate system may manage data certificates as one information processing system, or the management of data certificate A and the management of data certificate B may be distributed among multiple information processing systems. The certificate system may be a separate service or a part of a service. The certificate system consists of a data certificate A registration response, a data certificate acquisition response, and a data certificate B registration response. The data certificate A registration response stores the data certificate A received from the user device A in the data certificate list. When storing, the following fields are recorded. The data certificate identifier uses a value that is unique to the data certificate. The verification key used by the certification system is a verification key generated by the certification system. The digital signature encrypts the digital signature value of data certificate A with the Certification System's signature key. If necessary, a value indicating the time may be recorded in the reception time data of data certificate A. The processing result and the data certificate identifier are transmitted to the user device A. Alternatively, only the processing result is transmitted. The data certificate acquisition response includes the data certificate in the data certificate list identified by the received data certificate identifier and the processing result, and may be encrypted using the verification key received from the user device, if necessary. The data certificate B registration response stores data certificate B received from user device B in the data certificate list. When storing, the value of the digital signature of data certificate B is decrypted with the signature key of the certificate system, and a signature verification algorithm is performed using the verification key of the digital signature of data certificate B, the decrypted digital signature of data certificate B, and the value obtained by decrypting the digital signature of data certificate A indicated by the related certificate data with the verification key of the certificate system. This is recorded in the following fields of data certificate B and stored in the data certificate list. The data certificate identifier of data certificate B uses a value that is unique to the data certificate. The verification key of the certificate system for data certificate B is the verification key of the certificate system. The digital signature is created by encrypting the value of the digital signature after decrypting data certificate B with the Certificate System's signature key. Data certificate A indicated by the related certificate data of data certificate B has the data certificate identifier of data certificate B added to the related certificate data and recorded. If necessary, a value indicating a time may be recorded in the reception time data of data certificate B. The processing result and the data certificate identifier are transmitted to the user device B. Alternatively, only the processing result is transmitted.

[0018] User device B has a data certificate acquisition request, data certificate A verification, data certificate B generation, and data certificate B registration request. The data certificate acquisition request is the same as that of user device A. Data certificate A verification verifies the digital signature of Data certificate A. The digital signature of Data certificate A is decrypted with the verification key of the certificate system. A signature verification algorithm is performed using the verification key of Data certificate A, the decrypted digital signature of Data certificate A, and the target data to obtain the processing result. Data certificate B generation generates data certificate B and records it in the field. The user identifier is a value that is unique to user B. It may be obtained from an external system or may be data read from a recording device such as an IC chip. A verification key is used to verify the digital signature. A digital signature is generated using the digital signature value of the decrypted data certificate A and the signing key with a digital signature algorithm, and then encrypted with the verification key of the certificate system. The trust data may be any value entered by the user. The associated certificate data uses the data certificate identifier of data certificate A. The data certificate B registration request is sent to the certificate system for data certificate B. The certificate system receives a processing result, a data certificate identifier for data certificate B.

[0019] The sequence of the information processing system is based on the following assumptions. User device A stores target data in advance in a recording device. The user device and the certificate system generate a digital signature key pair in advance. If a digital signature key pair exists in the recording device, it is not necessary to generate a digital signature key pair. If multiple digital signature key pairs already exist, it is possible to set which key pair to use. The user device and the certificate system may perform processes such as user identity verification, authentication and authorization, and parameter sharing in advance as necessary. The data certificate A registration sequence is performed in the following order: User A generates data certificate A using user device A. The content to be recorded in the fields of data certificate A may be input by the user, read using a one-dimensional code or two-dimensional code, read using NFC, or read using OCR or the like. A registration request for data certificate A is made using the generated data certificate. The certificate system responds with a data certificate A registration response and transmits the processing result and the data certificate identifier to the user device A. User A uses user device A to place the target data and the data certificate identifier in any location, such as a recording device, a recording device on a telecommunications line, or an information processing system. The data certificate B registration sequence is performed in the following order. User B acquires target data and a data certificate identifier placed at an arbitrary location using user device B. Using the acquired data certificate identifier, a data certificate acquisition request is made and data certificate A is acquired. Using the acquired data certificate A, data certificate A verification is performed. Data certificate A is used to generate data certificate B. The content recorded in the field of data certificate B may be input by a user, read using a one-dimensional code or two-dimensional code, read using NFC, or read using OCR or the like. Using the generated data certificate B, a data certificate B registration request is made. The certificate system responds with a data certificate B registration response and sends the processing result, the data certificate identifier, to user device B. User B may use User Device B to place the data certificate identifier in any location, such as a recording device, a recording device on a telecommunication line, or an information processing system. The credit data usage sequence is carried out in the following order. User A uses user device A to make a data certificate acquisition request and obtain data certificate B. The data certificate identifier of data certificate B may be obtained by acquiring one located at an arbitrary location, or the related certificate data of data certificate A may be acquired by the data certificate acquisition request. Data certificate B is verified using data certificate B, and the trust data is used.

[0020] To keep the data certificate secret, it may be encrypted in the following sequence: It is assumed that user device A has acquired the public key of the certificate system in advance by communication or the like. User device A encrypts the generated data certificate A with the certificate system's public key and transmits it. The certificate system decrypts the received data certificate A with the certificate system's private key and uses it. The user device B transmits the public key when acquiring the data certificate A through a data certificate acquisition request. The certificate system encrypts the data certificate A with the public key of the user device B and transmits it. User device B uses the private key of user device B to decrypt the received data certificate A. Data certificate B is encrypted with the public key of the certificate system and then transmitted. The certificate system uses the private key of the certificate system to decrypt data certificate B. A data certificate acquisition request from user device A for data certificate B is encrypted with the public key of user device A and then transmitted. User device A decrypts data certificate B with the private key of user device A and uses it.

[0021] The encryption sequence encrypts each field of the data certificate individually. When encrypting the digital signature and trust data, the digital signature may be the same as the encryption sequence of the data certificate, and the data certificate may be replaced with a digital signature. When user device B generates data certificate B, it encrypts the trust data with the public key of data certificate A. When user device A uses the trust data as a result of verifying data certificate B, it decrypts it with the private key of user device A and uses it.

[0022] Credit data is information that forms the trust of the target data. It records information about the value and rights of data, such as price and current value, claims, leases, investments, guarantees, insurance, mortgages, and information similar to Class A and Class B in registration documents. It may also be information about the use and history of data, such as qualifications, licenses, permits and authorizations, transaction and purchase records, distribution records, storage records, records related to the place of production, origin and processing, and notices certifying delivery. It may also be information about defects, such as debts, forced dispositions, expiration records, violation tickets, seizure records, and information about incidents and accidents. If you want to express the approval or disapproval of data used as investigation information or evidence, the approval or disapproval of selection, or consensus building, you may express this by whether or not to associate data certificate A with data certificate B.

Claims

1. A data certificate is a data structure of a certificate using a public key, A unique identifier for the data certificate, A unique identifier for the user, A digital signature verification key, A digital signature is a value that uses a digital signature generation algorithm on the data to be digitally signed, and uses repeated encryption to create a data certificate association and a value that indicates that it has passed through a certificate system. The verification key of the certificate system, For the data that is the subject of a digital signature, information on the value and rights of the data, information on the use and history of the data, information on defects, and trust data that represents approval or disapproval, pros and cons, and consensus regarding the data. A list of identifiers indicating the association of data certificates; A data structure having the following structure:

2. The user device connects to the certificate system via a telecommunications line, Generate a data certificate for the data that is the subject of a digital signature; submitting the data certificate for enrollment in the Certificate System; Obtaining data encrypted in a certificate system using a data certificate; Decrypting the value obtained from the certificate system and using the digital signature value and the data certificate value in a signature verification algorithm to determine the trust data; The digital signature is then used to verify the authenticity of the data. performing a digital signature generation algorithm on the data certificate value and the signing key to generate a data certificate associated with a unique identifier for the data certificate; An information processing device having the above configuration.

3. generating a data certificate for the data that is to be digitally signed; submitting the data certificate for enrollment in a certificate system; obtaining data encrypted in a certificate system for using a data certificate; decrypting the value obtained from the certificate system and using the value of the digital signature and the value of the data certificate in a signature verification algorithm to determine the trust data; a step of verifying the authenticity of the digital signature by a signature verification algorithm using the data subject to the digital signature and the value of the data certificate; performing a digital signature generation algorithm on the data certificate value and the signing key to generate a data certificate associated with a unique identifier for the data certificate; An information processing method comprising the steps of:

4. The certificate system is connected to the user device via a telecommunication line, a recording device for storing a data certificate; In response to a request from the user device, a verification key of the certificate system is added to indicate that the data has been sent via the certificate system, and a data certificate in which the digital signature value is encrypted with a signature key of the certificate system is stored in a recording device. a value of the digital signature of the data certificate and a value of the data certificate indicating the association are determined by a signature verification algorithm, and the data certificate is stored in a recording device; Transmitting the data certificate to the user device in response to a request from the user device; An information processing system having the above configuration.

5. a step of storing in a recording device a data certificate obtained by adding a verification key of the certificate system and encrypting a value of a digital signature with a signature key of the certificate system in response to a request from the user device to show that the data has been sent via the certificate system; determining a value of the digital signature of the data certificate and a value of the data certificate indicating the association using a signature verification algorithm, and storing the data certificate in a recording device; transmitting a data certificate to the user device in response to a request from the user device; An information processing method comprising the steps of:

6. A user device and a certificate system are included. The user device encrypts a digital signature of the data certificate with the public key of the certificate system, and the trust data is encrypted with the public key of the user device. The Certificate System decrypts the digital signature of the data certificate with the Certificate System's private key and re-encrypts the digital signature with the user device's public key. The user device decrypts the digital signature of the data certificate and the trust data with the user device's private key. An information processing system having the above configuration.

7. the user device encrypting a digital signature of the data certificate with the public key of the certificate system and encrypting the trust data with the public key of the user device; the certificate system decrypting the digital signature of the data certificate with the certificate system's private key and re-encrypting the digital signature with the user device's public key; the user device decrypting the digital signature of the data certificate and the trust data with a private key of the user device; An information processing method comprising the steps of:

Images