Information processing system, information processing method, and program

Abstract

To provide an information processing system capable of more appropriately managing a secret key.SOLUTION: An information processing system 10 includes a storage part 42 and a transaction execution part 463. The storage part 42 stores a secret key for an employee for executing a transaction of a security token in an encrypted state. The transaction execution part 463 reads the encrypted secret key for an employee from the storage part 42, decrypts the encrypted secret key for an employee, and uses the decrypted secret key for an employee to execute a transaction of a security token on a block chain.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to an information processing system, an information processing method, and a program. [Background technology]

[0002] The system described in Patent Document 1 below issues security tokens, which are digitized securities such as stocks and bonds, on a blockchain. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent Publication No. 2021-12460 Summary of the Invention [Problem to be solved by the invention]

[0004] The system described in Patent Document 1 has room for improvement in terms of management of private keys for executing transactions related to security tokens. The present invention has been made in view of the above circumstances, and has as its object to provide an information processing system, an information processing method, and a program capable of more appropriately managing private keys. [Means for solving the problem]

[0005] An information processing system that solves the above problem includes a storage unit and a transaction execution unit. The storage unit stores an encrypted first private key for executing a security token transaction. The transaction execution unit reads the encrypted first private key corresponding to the trader's account from the storage unit based on a login operation of the trader, decrypts the encrypted first private key, and executes the security token transaction on the blockchain using the decrypted first private key.

[0006] In an information processing method that solves the above problem, a first private key for executing a security token transaction is stored in an encrypted state in a memory unit, and a computer reads the encrypted first private key corresponding to the trader's account from the memory unit based on the trader's login operation, decrypts the encrypted first private key, and executes the security token transaction on the blockchain using the decrypted first private key.

[0007] In a program that solves the above problem, a first private key for executing a security token transaction is stored in an encrypted state in a memory unit, and based on the trader's login operation, a computer is caused to read the encrypted first private key corresponding to the trader's account from the memory unit, decrypt the encrypted first private key, and execute a security token transaction on the blockchain using the decrypted first private key.

[0008] According to this configuration, since the first private key is read from the storage unit based on the login operation of the trader, the trader does not need to manage the first private key by himself / herself. Also, the first private key is stored in the storage unit in an encrypted state. Therefore, it is possible to manage the first private key more appropriately. Effect of the Invention

[0009] According to the information processing system, the information processing method, and the program of the present invention, it is possible to more appropriately manage private keys. [Brief description of the drawings]

[0010] [Figure 1] FIG. 1 is a block diagram showing a schematic configuration of an information processing system according to an embodiment. [Diagram 2] FIG. 2 is a block diagram showing a schematic configuration of a management apparatus according to the embodiment. [Diagram 3] 13A and 13B are diagrams showing examples of data stored in a user database and a financial business operator database, respectively, of the embodiment. [Figure 4] 11 is a sequence chart showing an example of the operation of a transaction execution unit according to the embodiment. [Diagram 5] 4 is a sequence chart showing an example of the operation of the information processing system according to the embodiment. [Figure 6] 4 is a sequence chart showing an example of the operation of the information processing system according to the embodiment. [Figure 7] FIG. 2 is a block diagram showing a hardware configuration of a computer according to an embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] Hereinafter, with reference to the attached drawings, a preferred embodiment (hereinafter, referred to as "the present embodiment") of the information processing system, information processing method, and program of the present invention will be described. In each drawing, the same reference numerals are used to denote the same or similar configurations. In this embodiment, "part", "means", "apparatus", and "system" do not simply mean physical means, but also include cases where the functions of the "part", "means", "apparatus", and "system" are realized by software. In addition, the functions of one "part", "means", "apparatus", or "system" may be realized by two or more physical means or devices, and the functions of two or more "parts", "means", "apparatus", or "system" may be realized by one physical means or device.

[0012] <Embodiment> First, an overview of the information processing system according to the present embodiment will be described. (Outline of Information Processing System) The information processing system 10 of this embodiment shown in FIG. 1 is a system that issues security tokens on a blockchain using the private keys of traders and manages the private keys.

[0013] A security token is a digitalized financial product based on securities, etc., which is displayed as a financial value that can be transferred using an electronic data processing system (Article 1, Paragraph 4, Item 17 of the Cabinet Office Ordinance on Financial Instruments and Exchange Business, etc.). Security tokens can be applied to stocks, corporate bonds, monetary claims, etc.

[0014] A trader is a party that trades security tokens. Examples of traders include users, financial institutions, and system providers. Users are, for example, investors who wish to acquire, sell, deposit, etc. security tokens.

[0015] A financial business operator is an entity that issues security tokens, and includes, for example, business companies that raise funds, investment management companies (including asset management companies), and financial instruments traders (such as securities companies). Note that the financial business operator in this embodiment refers to traders other than users such as investors.

[0016] A system provider is an entity that provides or operates a system (here, information processing system 10) that enables the trading of security tokens, and is, for example, an entity that builds the system and makes it available to users and financial institutions. The private key is information required for various security token transactions (e.g., issuance processing, forced transfer processing, and deposit processing) at a wallet address in the information processing system 10. In other words, the private key is the only information that enables security token transactions at a wallet address. Specifically, the private key is key information in the public key cryptography used in the blockchain. Note that in this embodiment, an example will be described in which an "electronic signature," which is a type of public key cryptography, is used when conducting transactions using the blockchain.

[0017] A digital signature is a technology that certifies the creator of digital information. By creating a digital signature using a private key, it is possible to prove that "the data was created by the signer" and "that the data has not been tampered with." In the information processing system 10, the user and the system provider each have a private key. The user's private key is managed in a state not connected to the network, that is, in a so-called cold wallet state. The system provider's private key is managed in an encrypted state and connected to the network, that is, in a so-called hot wallet state. Hereinafter, the user's private key will be referred to as the "user's private key" and the system provider's private key will be referred to as the "provider's private key."

[0018] In the information processing system 10, when a user requests a financial institution to carry out various transactions of security tokens, the financial institution executes the various transactions of security tokens using the institution's private key. Therefore, since the user's private key is not used for various transactions of security tokens, the user's private key is safely stored in a cold wallet state.

[0019] (Configuration of Information Processing System) 1, the information processing system 10 includes a user terminal 20, a financial business operator terminal 30, a management device 40, and a system terminal 50. The user terminal 20, the financial business operator terminal 30, and the management device 40 are connected to each other via a communication network N in a wired or wireless manner so as to be able to communicate with each other.

[0020] A user possesses the user terminal 20. The user terminal 20 requests, for example, various transactions of security tokens to the financial service provider terminal 30 based on the user's operation. The financial business operator terminal 30 is owned by a financial business operator. The financial business operator terminal 30 receives requests for various security token transactions sent from the user terminal 20. A person in charge of the financial business operator can operate the financial business operator terminal 30 to log in to the platform of the management device 40, thereby instructing the management device 40 to execute various security token transactions requested by the user terminal 20.

[0021] The management device 40 is a device used by financial business operators via the financial business operator terminal 30. The management device 40 is managed by a system provider. The management device 40 is a device that generates a user's wallet address and a user's private key, and provides a platform on which security token transactions can be performed. When the management device 40 is instructed by the financial business operator terminal 30 to perform various security token transactions, the management device 40 uses the business operator's private key stored in the management device 40 to execute a transaction for the user's wallet address on the blockchain BN to perform the various security token transactions instructed.

[0022] A blockchain BN is a system used for trading encrypted currencies and security tokens. A blockchain BN is composed of multiple nodes (computers) and manages ledger data in a distributed manner. The distributed ledger is managed in a manner that makes it difficult to tamper with, using a mechanism known as a blockchain BN. Note that a general mechanism is adopted for the distributed ledger management mechanism by the blockchain BN of this embodiment, so a detailed explanation is omitted here. The blockchain BN can be constructed, for example, using Ethereum.

[0023] The system terminal 50 is owned by a system provider. The system terminal 50 is a device for notifying the system provider of notifications from the management device 40, for example, by displaying the notifications on a screen. The information processing system 10 is provided with a key storage device 60 that is not connected to the communication network N. The key storage device 60 is a device for storing the user's private key generated by the management device 40 in a cold wallet state. For example, a safe is used as the key storage device 60. For example, a hardware wallet method is used as a cold wallet for managing the user's private key. In this case, the management device 40 stores the user's private key in, for example, an external storage medium that is not communicatively connected to other devices. For example, a USB (Universal Serial Bus) type storage medium or a card type storage medium is used as the external storage medium. The key storage device 60 stores the external storage medium in which the user's private key is stored. In this embodiment, the key storage device 60 is an example of a storage unit.

[0024] The user terminal 20, the financial service provider terminal 30, and the system terminal 50 may be, for example, a smartphone, a mobile phone (feature phone), a personal computer (e.g., desktop, laptop, tablet, etc.), a media computer platform (e.g., cable, satellite set-top box, digital video recorder), a handheld computer device (e.g., PDA (Personal Digital Assistant), email client, etc.), a wearable terminal (glasses-type device, watch-type device, etc.), another type of computer, or a communication platform.

[0025] The management device 40 may be, for example, a cloud computer, a server computer, a personal computer (e.g., a desktop, a laptop, a tablet, etc.), a media computer platform (e.g., a cable or satellite set-top box, a digital video recorder), a handheld computer device (e.g., a PDA, an email client, etc.), or any other type of computer or communication platform. Note that at least a portion of the processing in the management device 40 may or may not be realized by one or more computers (e.g., cloud computing consisting of one or more computers).

[0026] (Management Device Configuration) Next, a specific configuration of the management device 40 will be described with reference to FIG. As shown in FIG. 2, the management device 40 includes a communication unit 41, a storage unit 42, an input unit 43, a display unit 44, an output unit 45, and a control unit 46.

[0027] The communication unit 41 performs various communications with the user terminal 20, the financial business operator terminal 30, the system terminal 50, and the blockchain BN via the communication network N shown in FIG. 1. The storage unit 42 stores various programs and various data for operating the management device 40. For example, the storage unit 42 stores a user database 420 and a financial business operator database 421.

[0028] As shown in Fig. 3(A), the user database 420 includes information such as each user's identification number, name, email address, and wallet address. The identification number is, for example, a number that can uniquely identify a user. The wallet address is, for example, information indicating the user's wallet address in the blockchain BN.

[0029] As shown in FIG. 3(B), the financial business operator database 421 stores, for example, the identification number, name, password, business operator private key, and data key of each financial business operator. The financial business operator identification number is, for example, a number that can uniquely identify the financial business operator. The password is, for example, character information used when the financial business operator logs in to the platform of the management device 40. The business operator private key and the data key are stored in an encrypted state in the financial business operator database 421. The business operator private key is information used when trading security tokens. The business operator private key is individually assigned to each of the multiple financial business operators. The data key is used to decrypt the encrypted private key. In this embodiment, the business operator private key is an example of a first private key. Also, the data key is an example of a second private key.

[0030] The input unit 43 accepts various input operations by a person in charge of the system provider. For example, the input unit 43 accepts an operation by a person in charge of the system provider to newly issue a wallet address and a private key for the user. In this embodiment, the private key for the user is an example of a third private key.

[0031] The display unit 44 displays various screens that can be viewed by the person in charge of the system provider. For example, the display unit 44 displays a screen showing a newly issued user identification number and user private key. The output unit 45 outputs data to an external storage medium for storage. For example, when the screen of the display unit 44 on which the user identification number and the user private key are displayed is converted into electronic data such as a PDF file, the output unit 45 outputs the converted electronic data to the external storage medium for storage.

[0032] The control unit 46 controls the management device 40. The control unit 46 includes a first account issuance unit 460, a second account issuance unit 461, a decryption unit 462, and a transaction execution unit 463 as functional components realized by executing a program stored in the storage unit 42.

[0033] (1st Account Issuance Department) The first account issuing unit 460 issues a user account. For example, a person in charge of a financial institution transmits application information for requesting registration of a new user account from the financial institution terminal 30 to the management device 40. The application information includes information such as the user's name and email address. When the first account issuing unit 460 receives the user's application information, it issues a new user identification number and stores the issued user identification number in the user database 420 in association with the user's name, email address, etc.

[0034] After the user's identification number and the like are stored in the user database 420 in this manner, the first account issuance unit 460 further issues a wallet address and a user private key corresponding to the user's identification number. Then, the first account issuance unit 460 associates the issued wallet address with the user's identification number and further stores them in the user database 420. This completes the issuance of the user's account for conducting security token transactions.

[0035] (Second Account Issuance Department) The second account issuing unit 461 issues an account for the financial business operator. For example, a person in charge of the financial business operator transmits application information for requesting registration of a new account for the financial business operator from the financial business operator terminal 30 to the management device 40. The application information includes information such as the name, password, and email address of the financial business operator. Upon receiving the application information of the financial business operator, the second account issuing unit 461 issues a new identification number for the financial business operator and stores the newly issued identification number for the financial business operator in association with the name, password, etc. of the financial business operator in the financial business operator database 421. This completes the issuance of the financial business operator's account for conducting transactions of security tokens.

[0036] (Decoding section) Based on a request from the transaction execution unit 463, the decryption unit 462 decrypts the encrypted data key stored in the financial business operator database 421. Specifically, the decryption unit 462 has the master key used when encrypting the data key, and uses the master key to decrypt the encrypted data key.

[0037] (Transaction Execution Unit) The transaction execution unit 463 executes a transaction related to a security token on the blockchain BN based on a request from a financial institution. Figure 4 shows the procedure for executing a transaction of a security token by the transaction execution unit 463.

[0038] As shown in Fig. 4, when a person in charge of a financial business enters the identification number and password of the financial business on the financial business terminal 30 to log in to the platform of the management device 40 (step S10), the transaction execution unit 463 accepts the login operation (step S20) and performs authentication processing of the financial business by comparing the identification number and password entered by the person in charge of the financial business with the identification number and password of the financial business stored in the financial business database 421 (step S21). After authentication by the transaction execution unit 463 is established (step S22), the person in charge of the financial business operates the financial business terminal 30 to request execution of an update processing corresponding to the transaction content of the security token (step S11), and the transaction execution unit 463 receives the update processing of the security token (step S23). At this time, the transaction execution unit 463 reads the encrypted business private key and data key associated with the identification number of the financial business from the financial business database 421 (step S24). Next, the transaction execution unit 463 decrypts the encrypted data key using the decryption unit 462 (step S25). Furthermore, the transaction execution unit 463 further decrypts the encrypted business entity private key using the decrypted data key (step S26). Then, the transaction execution unit 463 uses the decrypted business entity private key to digitally sign the transaction data corresponding to the update process, and executes the signed transaction on the blockchain BN (step S27). With the above, the security token transaction requested by the financial business entity to the management device 40 is completed.

[0039] (Example of operation of information processing system) Next, an example of the operation of the information processing system 10 will be described. First, a procedure for issuing an account for a user in the management device 40 will be described with reference to Fig. 5. Note that the description will be given taking as an example a case where the user already has account information in a financial institution. As shown in Figure 5, in the information processing system 10 of this embodiment, when a user such as an investor who is a customer of a financial service provider applies to the financial service provider to conduct a new transaction such as depositing or purchasing a security token, the financial service provider creates an account for the user corresponding to the security token.

[0040] Specifically, as shown in FIG. 5, when a person in charge of a financial business operates the financial business terminal 30 to transmit application information including a user's name, email address, etc. to the management device 40 (step S50), the application information is received by the communication unit 41 of the management device 40 (step S60). As a result, the first account issuing unit 460 of the management device 40 executes a process of issuing an identification number for the user (step S61), and stores the issued identification number in the user database 420 in association with the user's name, email address, etc. (step S62). In addition, the first account issuing unit 460 transmits a notice to the system terminal 50 by email or the like that the primary registration of the user's account has been completed (step S63). When the person in charge of the system provider views the notice transmitted from the management device 40 by the system terminal 50, the next task is to issue, for example, a wallet address for the user and a private key for the user in the management device 40 in the secure room Rs.

[0041] Specifically, the input unit 43, the display unit 44, and the output unit 45 of the management device 40 are arranged in the secure room Rs. When the person in charge of the system provider operates the input unit 43 to request the issuance of the user's wallet address and the user's private key (step S64), the first account issuing unit 460 creates the user's wallet address on the blockchain based on the person in charge's request, and issues the user's private key that can be used for security token transactions (step S65). Next, the first account issuing unit 460 associates the issued wallet address with the user's identification number and stores it in the user database 420 (step S66). This completes the issuance of the user's account. At this time, the first account issuing unit 460 does not store the issued user's private key in the storage medium of the management device 40, such as the storage unit 42.

[0042] Next, the first account issuance unit 460 displays the issued user private key together with the user identification number on the screen of the display unit 44 (step S67). This allows the person in charge to visually confirm the user identification number and the corresponding user private key on the screen of the display unit 44. Note that when the first account issuance unit 460 displays the user private key on the display unit 44, it may temporarily store information about the user private key in a storage medium of the management device 40, such as the storage unit 42.

[0043] Next, the person in charge operates the input unit 43 to convert the screen information displayed on the display unit 44 into electronic data such as a PDF file (step S68), and then performs an operation to store the electronic data in an external storage medium. The output unit 45 outputs the converted electronic data to the external storage medium and stores it there (step S69). Next, the person in charge removes the external storage medium from the output unit 45, and then stores the external storage medium in the key storage device 60 (step S70). As a result, the information on the user's private key is stored in a state in which it exists only in the key storage device 60, that is, in a cold wallet state, without remaining as data in the management device 40.

[0044] Next, a procedure for processing a security token transaction by a user in the management device 40 will be described with reference to FIG. As shown in FIG. 6, when a user operates the user terminal 20 to request a transaction such as depositing or purchasing a security token from a financial institution (step S80), the transaction request information is received by the financial institution terminal 30 (step S90). As a result, a person in charge of the financial institution requests the management device 40 to execute a transaction process of the security token corresponding to the user's transaction request information. Specifically, after the person in charge of the financial institution operates the financial institution terminal 30 to input the identification number and password of the financial institution and log in to the platform of the management device 40 (step S91), the person in charge requests the management device 40 to execute an update process corresponding to the user's transaction content (step S92), and the transaction execution unit 463 of the management device 40 executes a transaction of the security token corresponding to the update process on the blockchain BN (step S100). The details of this transaction process are as shown in FIG. 4 and will not be described here.

[0045] (Hardware configuration) Next, an example of a hardware configuration in which the user terminal 20, the financial business operator terminal 30, the management device 40, and the system terminal 50 are realized by a computer will be described with reference to Fig. 7. Fig. 7 is a diagram showing an example of a hardware configuration of a computer.

[0046] As shown in FIG. 7, the computer 1000 includes a processor 1001, a memory 1002, a storage device 1003, an input I / F unit 1004, a data I / F unit 1005, a communication I / F unit 1006, and a display device 1007. The processor 1001 is a control unit that controls various processes in the computer 1000 by executing programs stored in the memory 1002 .

[0047] The memory 1002 is a storage medium such as a RAM (Random Access Memory), etc. The memory 1002 temporarily stores the program code of the program executed by the processor 1001 and data required when the program is executed. The storage device 1003 is a non-volatile storage medium such as a hard disk drive (HDD), a flash memory, etc. The storage device 1003 stores an operating system and various programs for implementing the above-mentioned components.

[0048] The input I / F unit 1004 is a device for receiving input from a user. Specific examples of the input I / F unit 1004 include a keyboard, a mouse, a touch panel, various sensors, a wearable device, etc. The input I / F unit 1004 may be connected to the computer 1000 via an interface such as a USB (Universal Serial Bus).

[0049] The data I / F unit 1005 is a device for inputting data from outside the computer 1000. A specific example of the data I / F unit 1005 is a drive device for reading data stored in various storage media. The data I / F unit 1005 may be provided outside the computer 1000. In that case, the data I / F unit 1005 is connected to the computer 1000 via an interface such as a USB.

[0050] The communication I / F unit 1006 is a device for performing data communication with an external device of the computer 1000 via a communication network N, either wired or wirelessly. The communication I / F unit 1006 may be provided outside the computer 1000. In that case, the communication I / F unit 1006 is connected to the computer 1000 via an interface such as a USB.

[0051] The display device 1007 is a device for displaying various types of information. Specific examples of the display device 1007 include a liquid crystal display, an organic EL (Electro-Luminescence) display, a display of a wearable device, and the like. The display device 1007 may be provided outside the computer 1000. In that case, the display device 1007 is connected to the computer 1000 via, for example, a display cable. In addition, when a touch panel is adopted as the input I / F unit 1004, the display device 1007 can be configured integrally with the input I / F unit 1004.

[0052] (Functions and Effects of the Information Processing System of the Embodiment) As described above, the information processing system 10 of this embodiment includes the storage unit 42 and the transaction execution unit 463. The storage unit 42 stores an encrypted business entity private key (first private key) for executing a security token transaction. The transaction execution unit 463 reads the encrypted business entity private key corresponding to the financial business entity's account from the storage unit 42 based on a login operation of a financial business entity (transactor), and decrypts the encrypted business entity private key and executes a security token transaction on the blockchain BN using the decrypted business entity private key. According to this configuration, the business entity private key is read from the storage unit 42 based on the login operation of the financial institution, so that the financial institution does not need to manage the business entity private key by itself. Therefore, the business entity private key can be managed more appropriately. In addition, since the business entity private key is stored in an encrypted state in the storage unit 42, security can be ensured.

[0053] The storage unit 42 further stores, in an encrypted state, a data key (second private key) used when encrypting the business entity private key. The information processing system 10 further includes a decryption unit 462 capable of decrypting the data key. The transaction execution unit 463 reads the encrypted data key from the storage unit 42 based on a login operation of the financial business entity, and decrypts the encrypted data key by the decryption unit 462, and uses the decrypted data key to decrypt the encrypted business entity private key. According to this configuration, the data key capable of decrypting the business entity private key is further stored in an encrypted state in the storage unit 42, making it difficult for the data key and the business entity private key to be leaked to a third party, thereby further improving security.

[0054] The information processing system 10 of this embodiment further includes a first account issuing unit 460 and an output unit 45. The first account issuing unit 460 issues a wallet address corresponding to a user who requests a financial institution to trade a security token, and a user private key (third private key) corresponding to the wallet address. The output unit 45 outputs the user private key issued by the first account issuing unit 460 such that no information about the user private key remains. Specifically, the output unit 45 displays the user private key on the display unit 44 such that no information about the user private key remains. According to this configuration, information about the user private key does not remain in the management device 40. Therefore, the security of the user private key can be improved.

[0055] The information processing system 10 further includes a key storage device 60 (storage unit) capable of storing information on a user's private key in a state not connected to the Internet. The key storage device 60 stores an external storage medium on which the user's private key is stored as electronic data. According to this configuration, the user private key can be stored in a cold wallet state, making it possible to more appropriately manage the user private key.

[0056] <Other embodiments> The present disclosure is not limited to the above specific examples.

[0057] For example, in the information processing system 10, instead of the business entity private key, an issuer private key that is individually assigned to each issuer of a plurality of security tokens may be used. In this case, when, for example, a predetermined financial institution requests the execution of an update process for a plurality of security tokens, the transaction execution unit 463 executes a transaction on the blockchain BN using a plurality of issuer private keys corresponding to the plurality of security tokens. In this case, when a financial institution other than the predetermined financial institution requests the execution of an update process for a security token, if the types of security tokens are the same, the transaction execution unit 463 executes a transaction on the blockchain BN using the same issuer private key. That is, when comparing this modified example with the above embodiment, the difference is that, in this modified example, if the same security token is used, the same issuer private key is used, whereas in the above embodiment, if the same financial institution is used, the same business entity private key is used.

[0058] The output unit 45 is not limited to a device that stores information on the user's identification number and the user's private key in an external storage medium, and may be, for example, a printing device that prints a paper medium on which the user's identification number and the user's private key are printed. In this case, the key storage device 60 stores the paper medium on which the user's identification number and the user's private key are printed.

[0059] The above specific examples, to which a person skilled in the art may make appropriate design modifications, are also included within the scope of the present disclosure as long as they have the features of the present disclosure. The elements of each of the above specific examples, as well as their arrangements, conditions, shapes, etc., are not limited to those exemplified and can be modified as appropriate. The elements of each of the above specific examples can be combined as appropriate as long as no technical contradictions arise. [Explanation of symbols]

[0060] 10: information processing system, 42: memory unit, 44: display unit, 45: output unit, 60: key storage device (storage unit), 460: first account issuing unit, 462: decryption unit, 463: transaction execution unit, 1000: computer.

Claims

1. A storage unit in which a first private key for executing a security token transaction is stored in an encrypted state; and a transaction execution unit that reads the encrypted first private key corresponding to the account of the trader from the storage unit based on a login operation of the trader, decrypts the encrypted first private key, and executes a transaction of the security token on a blockchain using the decrypted first private key. Information processing system.

2. the storage unit further stores, in an encrypted state, a second private key used in encrypting the first private key; A decryption unit capable of decrypting the second private key, The transaction execution unit reads the encrypted second private key from the storage unit based on a login operation of the trader, decrypts the encrypted second private key by the decryption unit, and decrypts the encrypted first private key using the decrypted second private key. The information processing system according to claim 1 .

3. An issuing unit that issues a wallet address corresponding to a user who requests the transaction of the security token to the transactor and a third private key corresponding to the wallet address; an output unit that outputs the third secret key issued by the issuing unit in such a way that no information of the third secret key remains. The information processing system according to claim 1 .

4. The output unit prints and outputs a paper medium on which the third private key is printed, or displays the third private key on a display unit, so that no information of the third private key remains. The information processing system according to claim 3 .

5. The storage unit further stores the wallet address of the user in association with the user's identification number. The information processing system according to claim 3 .

6. The third private key may be stored in a storage unit that is not connected to the Internet. The information processing system according to claim 3 .

7. The storage unit stores a paper medium on which the third private key is printed, or a storage medium on which the third private key is stored as electronic data.

7. The information processing system according to claim 6.

8. A first secret key for executing a security token transaction is stored in an encrypted state in a storage unit, The computer Based on a login operation of a trader, the encrypted first private key corresponding to the account of the trader is read from the storage unit, and the encrypted first private key is decrypted, and a transaction of the security token is executed on a blockchain using the decrypted first private key. Information processing methods.

9. A first secret key for executing a security token transaction is stored in an encrypted state in a storage unit, On the computer, The encrypted first private key corresponding to the account of the trader is read from the storage unit based on the log-in operation of the trader, and the encrypted first private key is decrypted, and a transaction of the security token is executed on the blockchain using the decrypted first private key. program.

Images