Data utilization method, system, and program using bcn (block chain network)

Abstract

To provide a new data utilization system that enables individuals to use and utilize their own personal data autonomously while ensuring data security and concealment.SOLUTION: An information processing apparatus, which is used by an individual, has a function of transmitting data relating to an address on a block chain network used by the individual via a network to a provider side information processing apparatus having a storage device serving as a provider of data related to information about the individual, a function of referring to access data (ACT) including data relating to the address on the block chain network issued to the address of the block chain network from the provider side information processing apparatus, and data for identifying the provider of the data, and a function of acquiring data related to the information about the individual from the provider side storage device based on the access data (ACT) and storing the data in at least a memory or a storage device of the individual.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a data utilization method, system, and program using a BCN (blockchain network). [Background technology]

[0002] With the development of information processing and communication, personal information is now stored electronically as data on a daily basis through a user's daily activities and regular or continuous monitoring.

[0003] The information is diverse and includes, for example, data on the user's health, personal medical data such as treatment at a hospital and drug administration, daily shopping history information, and daily access information for searching for favorite information.

[0004] This information is stored together with time information as data and can be treated as so-called personal history data.

[0005] Various data generated in response to such diverse activities and periodic or continuous monitoring is stored in storage used by the processing system that provides each service according to the service related to the activity, etc. For example, shopping information is stored in a scattered manner according to the form of purchase, i.e., each service, such as purchases by credit, purchases by cash, purchases by debit card, etc.

[0006] In other words, such history data is managed only by the service provider, and the individual user does not allow other institutions or businesses to use the past history data in a different form.

[0007] Therefore, the historical data for each service may be very biased. Furthermore, even in today's highly developed information systems, historical data related to each service is separated by the system that provides each service, preventing the use of such data as interrelated data.

[0008] Moreover, the activities of individuals change from moment to moment depending on the environment in which they find themselves, and it is not uncommon for them to switch to the services of different providers. Therefore, if data, which is an extremely important asset of individuals, is divided among these different services, it will hinder full utilization of the data for both the individual and for companies and organizations that are trying to use it in new ways.

[0009] On the other hand, personal data must be handled with extreme caution in order to protect the privacy of the individual. Simply disseminating information may result in the personal information being misused or the individual being impersonated, causing damage to others. Furthermore, tampering with information may cause great damage. [Prior art documents] [Patent documents]

[0010] [Patent Document 1] Patent Application Publication No. 2016-218633 Summary of the Invention [Problem to be solved by the invention]

[0011] The present invention has been made with a view to solving such problems.

[0012] Therefore, the present invention provides a data utilization system and method that enables individuals to proactively use and utilize their own personal data, and further enables the confidentiality of that data.

[0013] Furthermore, although the present invention is not limited to the purpose and the subject of the data, for example, medical data, which is personal information, is also an individual's asset. Patients often receive treatment across multiple hospitals for many reasons, such as multiple illnesses or changing their place of residence.

[0014] Treatment data from multiple different medical institutions is an important medical asset for the patient, but if it can be integrated and managed as medical data, it can be used in a variety of ways. Conversely, if that medical data is divided among medical institutions, etc., necessary treatment may be overlooked.

[0015] For example, information on how a patient has recovered or not recovered as a result of continued treatment or drug administration for the purpose of treating a certain disease is important not only to that patient but also to many medical institutions, and this information can enable further improved treatment methods to be provided to other patients with similar diseases.

[0016] On the other hand, medical data is personal information and must be managed strictly. Furthermore, the reliability and confidentiality of the data as genuine personal data, as well as the reliability and confidentiality of the details of medical activities between medical institutions and individuals (e.g., treatment methods, medication methods, etc.) are also extremely important.

[0017] Therefore, the present invention provides a new method for distributing genuine information by genuine individuals, and provides a new method for making it possible to utilize this important information.

[0018] Furthermore, the present invention provides a distribution infrastructure for appropriately processing existing personal data related to medical care, etc., and for safely utilizing the data. [Means for solving the problem]

[0019] According to the present invention, a method for acquiring and utilizing data related to an individual's information by an information processing device used by the individual is disclosed, which comprises the steps of: transmitting data related to an address on a blockchain network used by the individual via the network to a source of data related to the individual's information; issuing and registering access data (ACT) from the provider to the blockchain network address, the access data (ACT) including data related to the address and data for identifying the source of the data; and referencing the access data (ACT) from the blockchain network address to identify the source of the data, and acquiring data related to the individual's information from the identified source.

[0020] This makes it possible to use highly confidential personal information while taking advantage of the reliability provided by addresses on the blockchain network.

[0021] Furthermore, according to the present invention, the data provided by the above-mentioned provider includes at least one of identification information of an individual authorized to use the information processing device, identification information of the information processing device used by the individual, or identification information of the provider.

[0022] Furthermore, according to the present invention, the data provided by the provider includes information indicating the time at which the data was generated, making it possible to refer to the time history of the data.

[0023] Further, according to the present invention, the data provided by the provider is a data set made up of data relating to each of a plurality of data items generated based on a plurality of data that are historical data relating to an individual.

[0024] Further according to the present invention, in the data utilization method, each of the plurality of data items is configured to indicate the latest data in the data set of historical data, and can be provided as the most recent information.

[0025] Further, according to the present invention, at least data related to personal information is hashed using a hash function and registered in the blockchain ledger.

[0026] The present invention further provides a system for enabling an individual to acquire and utilize data related to the individual's information by means of an information processing device used by the individual.

[0027] The information processing device of the system according to the present invention has at least a memory or a storage device connected to the information processing device, and has the following functions: a function of transmitting data relating to an address on the blockchain network used by an individual via a network to a provider-side information processing device having a storage device that is a source of data related to the individual's information; a function of referencing access data (ACT) issued from the provider-side information processing device to an address on the blockchain network, the data including data relating to the blockchain network address and data for identifying the source of the data; and a function of obtaining data related to the individual's information from the provider-side storage device based on the access data (ACT) and storing it in at least the individual's memory or storage device.

[0028] Furthermore, according to the present invention, the data provided by the provider includes personal identification information authorized for use by the information processing device.

[0029] Furthermore, the data provided by the provider includes at least identification information of the information processing device used by the individual, identification information of the provider, and information indicating the generation time of the data.

[0030] The data provided by the above-mentioned source is a data set consisting of data relating to a number of data items generated based on a number of data items that are historical data relating to an individual, and for example, each of the multiple data items represents the most recent data in the data set of historical data.

[0031] Additionally, at least the data relating to personal information is hashed using a hash function.

[0032] Furthermore, the present invention provides a program for acquiring data related to information of an individual, which is stored in an information processing device used by an individual and executed by a first information processing device, the program being configured to provide a blockchain address to another information processing device, and to acquire data related to the information of the individual generated in the other information processing device or a storage device used by the information processing device based on access data (ACT) including blockchain address information transmitted from the other information processing device based on the blockchain address.

[0033] The data relating to the personal information includes identification information of the individual authorized to use the information processing device.

[0034] Furthermore, the data relating to the individual's information includes at least identification information of the information processing device used by the individual, identification information of the provider, and information indicating the time of data generation. [Brief description of the drawings]

[0035] [Figure 1] 1 is a schematic diagram showing an embodiment of a personal asset data utilization system according to the present invention; [Diagram 2] This shows a conceptual diagram of a case where personal data is updated in the storage device serving as the information providing resource in FIG. 1 and in the storage device used by the user. [Diagram 3] FIG. 1 shows an example of the data configuration of an access ticket (abbreviated as "ACT") that is issued as access data when personal data is provided to a system other than the system that manages the personal data in the storage device. [Figure 4]1 shows an example of the data configuration of master data (MA) and transaction data (TR) related to personal information created in each storage device of FIG. [Figure 5A] 5 shows an example of the data configuration of a data section which is a data component of the master data (MA) and transaction data (TR) in FIG. [Figure 5B] 5 shows an example of a data configuration of an additional data portion which is a data component of the master data (MA) and transaction data (TR) in FIG. [Figure 6] This is an overview diagram showing an embodiment of a personal asset data utilization system according to the present invention, and is an overview diagram showing an embodiment in which received master data (MA) is provided to other parties (individuals, institutions, organizations, etc.). [Figure 7] This is a conceptual diagram showing the interrelationship between users, the storage device that provides their data, and access tickets whose issuance history is linked on a chain within the blockchain 50. [Figure 8] This shows a conceptual diagram of generating master data from different types of transaction data that occur in a time series, and a conceptual diagram of combining different types of master data (MA). [Figure 9] FIG. 1 is a conceptual diagram of a case where medical data is applied to a personal asset data utilization system according to the present invention. [Figure 10A] 1 shows an example of a data body portion of transaction data (TR) and master data (MA) generated therefrom. [Figure 10B] 13 shows an example of a data body portion of master data (MA) newly generated from different types of transaction data. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0036] This invention utilizes blockchain, which is the core technology of virtual currencies such as Bitcoin. Blockchain is a distributed ledger for recording records (blocks) of transactions that occur within a network as chained blocks. Each block of a transaction stores the hash value of the contents of the block generated before it in addition to the transaction contents, and is recorded in the ledger as a legitimate block linked in a chain.

[0037] When a new block is added to the blockchain, mining is performed by miners to ensure that a chain of blocks with verified validity is formed.

[0038] By forming a consensus through mining, a chain of legitimate blocks is distributed and stored in a database, preventing tampering and ensuring data security. It is known that the first mining participant to confirm that the transaction content is not fraudulent is given a reward and given the right to update the database, but the mining method is not limited here, and any mining method can be adopted as long as a consensus on legitimacy can be formed and there is little possibility of a fraudulent block being inserted into the chain.

[0039] In addition to open (or public) blockchains such as those used in Bitcoin, closed (private) blockchains that limit participants are also known. Either type of blockchain can be used in the present invention. As described above, there are various types of blockchains, but the blockchain is not limited to any particular type as long as the present invention can be implemented using such a blockchain.

[0040] Each transaction can be carried out, for example, using P2P communication. For P2P communication, the Internet, a mobile communication network, a dedicated communication line, etc. can be used. However, this is merely an example, and communication other than P2P communication may be used. Furthermore, as an information processing device for carrying out a transaction, a personal computer, or an information processing device such as a portable smartphone or tablet can be used, but is not limited to these.

[0041] Blockchain technology is used in the virtual currency Bitcoin, and in the transaction ledger of that virtual currency, blocks of virtual currency transaction data (for example, the amount of virtual currency being traded, the user's virtual currency payment address, the public key used to generate the user's payment address, and even hash values ​​of the currency's basic assets, etc.) are created and recorded on a chain within the blockchain network.

[0042] The security of the transaction data is guaranteed by using the hash value and public key cryptography. The transaction data is also widely distributed so that miners can verify its validity, and its validity is monitored.

[0043] The present invention uses the blockchain to promote the use of data referenced in the block while utilizing the validity of the block recorded in the blockchain ledger. For example, by using the blockchain, in order to ensure the validity of the history of data transactions while ensuring the confidentiality of the data, restrictions may be imposed on specific authorized users, or on specific users and specific information processing devices. As data stored in the blockchain, the data of the actual transaction object does not exist in the block, and the block may have a structure or data, such as a pointer, that allows the data of the actual transaction object to be referenced.

[0044] FIG. 1 shows an example of the configuration of an asset data utilization system 1 according to the present invention.

[0045] As a prerequisite, an agreement must be reached between the user of the information processing device 20 for the user and the user of the information processing device 10 to provide the user with the user's information used or managed by the information processing device 10 for the provider.

[0046] By forming this agreement, the provider of the information processing device 10 becomes able to provide the activity data of the user to the user.

[0047] The information processing device 20 used by a user has already been authenticated and registered for that user, and a user identifier (UID) which is the user's identification information has been assigned. Furthermore, a terminal (device) identifier DID which is the identification information of the information processing device 20 for that user has been uniquely registered in the information processing device 20 for that user.

[0048] Furthermore, the user is registered in advance with a blockchain address (also called "BCN address" or "BCN Add" for simplification) that enables ledger recording on the blockchain (BCN 50 in FIG. 1). The user and the provider are set up so that electronic data communication is possible between them by the information processing device 20 for the user and the information processing device 10 for the provider.

[0049] The steps for providing a user's personal activity data to the user are described below.

[0050] In parallel with step (3), or before or after, the user transmits his / her BCN address (BNC Ads) from the information processing device 20 for the user to the information processing device 10 for the provider in order to disclose his / her address on the blockchain network (BCN 50) to the provider (step (1)).

[0051] If data related to a user is stored in a certain storage device 90, then in response to step (1) or independently of step (1), the data of the user is acquired from the storage device 90, which is the storage location, by the provider's information processing device 10 (step (3)). Then, from the received data, a data set of actual values ​​(data) corresponding to one or more data items is generated according to a predetermined data format (step (2)-1), and the data set is stored (uploaded) in the storage device 30 as transaction data (TR) (step (2)-2).

[0052] The items to be added as elements of the data set are appropriately determined according to conditions such as the contents of the agreement between the user and provider, the items that the provider can provide, and the items that the user wants.

[0053] The provider's information processing device 10 and the user's information processing device 20 store selection application programs for providing the data in their respective memories, and each application program is executed by the respective processing device to select data items to be added to the transaction data (TR). Then, according to the selection, data corresponding to the data items is converted into the transaction data (TR) in a predetermined format.

[0054] The contents of the actual data that has been dropped as transaction data (TR) are described in a format that can be read in accordance with the items of the data, so that the data can be read not only by the provider's information processing device 10, but also by the user's information processing device 20 and third-party terminals. The format that can be used is, for example, the JSON format.

[0055] The information processing device 10 for the provider further has a program for generating transaction data (TR) and generating master data (MA) from the transaction data (TR). The information processing device 10 for the provider is the side that provides data to the user, and the user is the side that receives the data. However, as will be explained later, the user can also be the side that can provide the received data. Therefore, although the functions of the application programs of the information processing device 20 for the user and the information processing device 10 for the provider may be different, they do not necessarily have to have application programs with different functions, and may have application programs with the same functions, or application programs for executing any of the functions described later. In other words, it should be recognized that the functions described for a certain information processing device may also be possessed by other information processing devices for the purpose of use. In addition, some execution, for example, generation of transaction data (TR) or master data (MA), may be taken over by the storage device.

[0056] In step (1), upon receiving the user's BCN address (BCN Add), the provider's information processing device 10 transmits the BCN address (BCN Add) and a data resource identifier (SID) for identifying a data resource to the storage device 30, and the provider's information processing device 10, upon receiving the BCN address (BCN Add), generates an access ticket (ACT). Note that, as long as the source of the data can be identified, the data resource identifier (SID) is not limited to the terminal (device) identifier DID of the user's information processing device 20, and may be an identifier of the storage device 30. Also, while there are cases where storage devices exist widely distributed, such as secret sharing storage devices, the data resource identifier (SID) may be any identifier as long as it is possible to refer to the data in the storage device.

[0057] This access ticket (ACT) is the data to be recorded on the user's blockchain.

[0058] FIG. 3 is a data structure diagram of an access ticket (ACT) according to an embodiment of the present invention.

[0059] The access ticket (ACT) is a hash value of predetermined data to conform to the blockchain. The element data is a hash value of the user's BCN address (BCN Add), a data resource identifier (SID), and a secret character string corresponding to the data resource identifier (SID), which are hashed by a hash function. For example, MD5 is used as the hash function, resulting in a 128-bit hash value. This causes the fixed-length access ticket (ACT) to be recorded in the blockchain network (BCN). Although not shown in FIG. 1, the information processing device 10 for the provider may notify the information processing device 20 for the user of the issuance of the access ticket (ACT). Also, registration in the blockchain network (BCN) may be performed via the information processing device 20 for the user.

[0060] The issuance of this data indicates that data from a Data Resource Identifier (SID) is available to the user and that the user is authorized to obtain the data.

[0061] The access ticket (ACT) enables the user to access the transaction data (TR) in the storage device 30 managed by the provider's information processing device 10 and the master data (MA) generated therefrom.

[0062] The transaction data (TR) and the master data (MA) have a predetermined format so that users can refer to and operate the data, and further, can provide the data to other third parties.

[0063] Here, the original data provided by the provider often exists separately as activity data of the user at different times. Therefore, multiple transaction data (TR) of the same type may be prepared corresponding to each original data. Also, the original data provided by the provider may include activity data of different types, and the record items of each data may differ. Therefore, different transaction data (TR) may be prepared that has the same basic format but has different record lengths and record data items.

[0064] In addition, the request for personal data from the information processing device 20 for the user is not necessarily made just once, but may be made multiple times to the information processing device 10 for the provider at intervals so that the provider can receive the personal data generated for each activity.

[0065] In this way, the transaction data (TR) generated in the storage device 30 can be generated as one or a plurality of transaction data (TR).

[0066] For ease of explanation, FIG. 1 illustrates an example in which one master data set (MA) is created from one transaction data set (TR) and provided to a user.

[0067] The storage device 30 has a program or macro instructions stored in a memory (not shown), and the program or macro instructions are executed by a processing device of the storage device 30. Note that the program includes the macro instructions, and the macro instructions are used separately here merely for the sake of convenience and ease of understanding.

[0068] When the program or macro command receives the BCN address (BCN Add) or the data resource identifier (SID) indicating the data source of the data provided to the information processing device 20 for the user from the information processing device 10 for the provider, it generates an access ticket (ACT) based on the information (step (4)). The storage device 30 may generate master data (MA) based on the transaction data (TR) (step (5)). Then, it returns the access ticket (ACT) to the information processing device 10 for the provider (step (4)-1).

[0069] As already explained, the access ticket (ACT) gives the user the authority to refer to and download data used or managed by the provider's information processing device 10, and is issued via the provider's information processing device 10 (step (4)-2).

[0070] The destination of the access ticket (ACT) is the user's BCN address (BCN Add) provided by the information processing device 20. The user can obtain the access ticket (ACT) through the information processing device 20 for the user by accessing the BCN 50 (step (6)).

[0071] Since the acquired access ticket (ACT) contains a data resource identifier (SID), the user can use that information to refer to the information of the master data (MA) stored in the storage device 30 via the provider's information processing device 10 or directly, and download the master data (MA) to the memory 21 of the user's information processing device 20 (step (7)).

[0072] As already explained, there is not necessarily only one transaction data (TR), but there may be multiple pieces of transaction data TR(1)-TR(n) generated in a time series. Also, multiple data requests R1-Rn may be received at different times in response to individual requests from users. Figure 2 shows a conceptual diagram in which multiple data requests R1-Rn are received, and master data MA(1)-MA(n) are generated by generation processing of G1-Gn corresponding to each of the data requests.

[0073] Each of the generated master data MA(1) to MA(n) may be provided to the user as an added asset, and in response to the data requests R1 to Rn, an access ticket (ACT) may be sent to the BCN address (BCN Add) so that the user can refer to and acquire the data, thereby enabling the user to access each of the master data MA(1) to MA(n).

[0074] In Bitcoin, a blockchain is formed as a ledger by issuing a token for a transaction in BCN, and blocks are linked in chronological order to transactions. On the other hand, in the example according to the present invention, a chain of blocks of access tickets (ACTs) is registered in the ledger, and the blocks are linked in chronological order.

[0075] FIG. 4 is a data configuration diagram of transaction data (TR) and master data (MA) according to an embodiment of the present invention.

[0076] The components of the transaction data (TR) and master data (MA) include the contents of the access ticket (ACT) issued for the user to indicate that the data was generated in response to the user's request.

[0077] The user can obtain the right to access the master data (MA) by the access ticket (ACT) from the provider's information processing device 10. The access ticket (ACT) includes information on the data resource identifier (SID) (see FIG. 3), and the user's information processing device 20 can access the data by referring to it.

[0078] The basic components of the master data (MA) and transaction data (TR) include a data section and an additional data section in addition to the access ticket (ACT) (see FIG. 4).

[0079] Figure 5A shows the components of the data section. The data section can be divided into a data header section and a data body section.

[0080] The data header section consists of a user identifier (UID), a terminal (device) identifier DID, and a data resource identifier (SID).

[0081] On the other hand, the data body section is composed of data (values) for each individual item, with the number of items ranging from 1 to k. The value of k is an arbitrary number, and therefore the length of the data section does not need to be fixed. The data body section also includes a timestamp indicating the date and time when this transaction data (TR) or master data (MA) was created. This makes it possible to manage the transaction data (TR) and master data (MA) in the order in which they were created.

[0082] 5B further shows additional data, which is composed of a sending address indicating the data sending destination (for example, the user's BCN address) and an ACL condition that specifies the viewing condition (access condition) of the data.

[0083] The ACL conditions consist of a "start time" indicating the first time that access is possible, an "end time" indicating the last time that access is possible, and a "number of times" that limits the number of times that access is possible. Note that these access conditions are examples, and the ACL conditions may consist of various access conditions or combinations of these. Furthermore, the information processing device may be provided with an application program that can provide an interface through which the user can input information so that the user can set these conditions.

[0084] Although both transaction data (TR) and master data (MA) have been described, the two data do not necessarily have to have the same configuration. A data type item may be added to each of them to easily distinguish whether it indicates transaction data (TR) or master data (MA). The additional data may not be included in the data configuration of the transaction data (TR) and master data (MA), but may be separated and stored in the storage device 30. When the additional data is separated, it is made possible to associate it with the transaction data (TR) or master data (MA) and is managed by the program of the storage device 30 or the application program of the information processing device 10.

[0085] The above explanation has been given on the assumption that the individual has already been authenticated, but the provider's information processing device 10 and the user's information processing device 20 have a function to authenticate whether the person who is going to use the terminal is a legitimate user. For example, the user's information processing device 20 has a biometric authentication function such as fingerprint, vocal cord authentication, or blood vessel authentication, and the authentication data is uniquely associated with the individual to authenticate the individual. When the individual authentication is performed and it is determined that the user is a legitimate user, the application program installed in the information processing device 20 is permitted to run.

[0086] As shown in FIG. 1, the asset data utilization system 1 utilizes an information processing device 10 for a data provider and an information processing device 20 for a user, and provides data from the information processing device 10 to the information processing device 20.

[0087] 6, when data is provided to the information processing device 20 for the user, a third-party information processing device 60 may be provided to provide the data separately. The process of providing data from the information processing device 20 for the user to the third-party information processing device 60 is basically the same as the process of providing data from the information processing device 10 for the provider to the information processing device 20 for the user. If data is to be provided simply, the BCN address (BCN Add) may be the BCN address (BCN Add) used by the user, and the access ticket (ACT) is the access ticket (ACT) created in the storage device 40 for the user.

[0088] The BCN address (BCN Add) is generated by an application program of the user's information processing device 20, and the access ticket (ACT) can be generated from information of the terminal (device) identifier DID of the user's information processing device 20. Specifically, at a relatively early stage before data is provided by the user, the BCN address (BCN Add) and the access ticket (ACT) are generated as follows.

[0089] First, the local application program of the user's information processing device 20 transmits a user identifier (UID) to the user's storage device 40 and instructs it to generate a private key. In response to the instruction, the program or macro command stored in the user's storage device 40 generates a public key and a private key. Upon receiving the public key and private key, the application program of the user's information processing device 20 generates a BCN address (BCN Add). The user's storage device 40 receives and hashes the generated BCN address (BCN Add), and generates a hash value of the hash value, a data resource identifier (SID) indicating the terminal (device) identifier DID of the user's information processing device 20, and a secret character string of the data resource identifier (SID), and generates the hash value as an access ticket (ACT). As already explained for the storage device 30, if the data in the user storage device 40 can be referenced, the data resource identifier (SID) does not necessarily have to be the terminal (device) identifier DID of the information processing device 20 itself, but may be an identifier of the storage device itself, or information that can identify the data according to the secret sharing storage may be used.

[0090] Returning to the data transmission from the information processing device 20 for the user to the information processing device 60 for the third party, the access ticket (ACT) can be notified to the information processing device 60 for the third party. At the same time, master data (MA) to be provided to the information processing device 60 for the third party is generated from the transaction data (TR).

[0091] The information processing device 60 for the third party can obtain the master data (MA) in the storage device 40 for the user via the BCN address (BCN Add). If necessary, the third party can store the data in a storage device used by the information processing device 60, enabling shared use of the data.

[0092] Figure 7 shows the mutual linking relationship between the access ticket (ACT) registered in the blockchain 50, the terminal (device) identifier DID and user identifier (UID) of the information processing device 20 for the user, and the contents of the master data (MA) of the storage device 30.

[0093] A data resource identifier (SID) is described in a chain of access tickets (ACT), which functions as a pointer that essentially designates a storage device 30 managed by the provider's information processing device 10. Furthermore, a user identifier (UID) and a terminal (device) identifier DID are described in the master data (MA) recorded in the storage device 30 as elements of the data header section, which functions as a pointer to the user's information processing device 20. The information processing device 20 authenticates the user by the user identifier (UID) and generates a BCN address (BCN Add) by the user identifier (UID), which also serves as a pointer to the access ticket (ACT) on the BCN address (BCN Add).

[0094] Such a relationship is maintained, and the legitimacy of the access ticket (ACT) is agreed upon on the BCN address (BCN Add). Furthermore, it is preferable that the storage device 30 and the storage device 40 that store the transaction data (TR) and the master data (MA) are secret sharing storage devices, and since the data is managed in a distributed manner, the confidentiality and security of the data are further maintained.

[0095] The information processing device 20 for the user is already set up to provide data on the blockchain 50, and each time data in a specified form based on the specifications is posted to the blockchain 50, a data chain is formed on the blockchain 50 using hash values, ensuring the security of the data.

[0096] Since the size of the data provided on the data chain is limited, the actual data corresponding to that data can be stored in the storage device 30 or the user storage device 40.

[0097] FIG. 8 is a conceptual diagram showing how master data is generated from different types of transaction data that occur in a time series, and how the different types of master data (MA) are then collated to generate new master data (MA).

[0098] The vertical axis indicates the passage of time. This time can be, for example, the time when each transaction data (TR) and master data (MA) is generated, and is indicated by the time stamp, which is a data element. Two types of transaction data TR_A(m) and TR_B(n) (m and n indicate numbers in the order of elapsed time) are generated as transaction data (TR). Each time transaction data TR_A(m) and TR_B(n) are generated, master data MA_A(m) and MA_B(n) are generated. Furthermore, when different types of master data (MA) are generated, the generated master data (MA) are merged and new master data MA_C(h) (h indicates a number in the order of elapsed time) is generated. As can be understood from this, the master data (MA) is also used as transaction data (TR) for generating the next master data (MA).

[0099] 1, the transaction data TR_A(m) and TR_B(n) may be generated in the storage device 30 used by the information processing device 10, but may also be generated in a different storage device used by a different information processing device. This depends on how the user's data is managed externally.

[0100] When different types of transaction data TR_A(m), TR_B(n) are generated in the same storage device, it is possible to generate, for example, matched master data MA_C(h) using the same user identifier (UID) within the same storage device, or, by the method already described, it is possible to store master data (MA) (e.g., MA_A(2) and MA_B(1)) obtained from the same type of transaction data (TR) in a storage device 40 used by the information processing device 20 for the user, and generate matched master data (MA) (e.g., MA_C(1)) within the storage device.

[0101] The merged master data (MA) is different from the conventional data resource because the storage device that generated it is a new resource. Therefore, the data resource identifier (SID) is changed to a data resource identifier (SID) that can refer to the newly generated master data (MA).

[0102] In this way, multiple types of transaction data (TR) can be obtained from the same data resource or from multiple data resources. By enabling data to be obtained from multiple data resources, the data can be used as new data that complements each other. Furthermore, the rules for name matching vary depending on the type of data, and can be determined appropriately depending on the data items. For example, new master data (MA) can be created in which a new data item indicating a different indicator is created from the data items of a certain master data (MA) and a different type of master data (MA). An example of the generation of this new data item is the generation of new data including calorie calculations by merging data from a data resource related to exercise data and a data resource related to dietary data.

[0103] As can be understood from FIG. 1 and FIG. 6 and the description thereof, the application program of the information processing device 20 for the user can include two major functions: receiving data from the information processing device 10 for the provider (including the storage device 30) and providing data to a third party. To receive the data, the information processing device 20 for the user can acquire data from the information processing device 10 for the user by referring to the access ticket (ACT) transmitted from the information processing device 10 for the provider via the blockchain or the history of the access ticket (ACT), or upload data held by the processing device itself to a storage device (preferably a secret distribution storage, the same applies below) used by the processing device itself. As already described, the information processing device 20 for the user can also provide data, similar to the information processing device 10 for the provider, and can have a function of not only generating data using the BCN address (BCN Add) owned by the user and providing it to a third party, but also providing data using the BCN address (BCN Add) of the other party. In addition, it may be possible to check the distributed slips that are chained with the user's BCN address (BCN Add) and even preview the history of the distributed slips.

[0104] It is not desirable for a normal user to perform such detailed steps of processing. Therefore, in order to prevent the process from becoming too complicated for the user, a series of steps are grouped on the display screen of the information processing device 20 for that user so that the steps can be performed with the push of a button, or a user interface that allows the steps to be performed with simple operations is provided by the application program.

[0105] Fig. 9 is a conceptual diagram of a medical information utilization system for utilizing medical data as one embodiment of the present invention. The system is configured to acquire multiple types of transaction data (TR) as shown in Fig. 8 from different institutions.

[0106] The center part represents the user, and the medical institution, medical data cloud, and healthcare business company on the left are the medical organizations that the user uses (activities in). Normally, each has different medical data, which is acquired into the user's secret distributed storage, and if necessary, the data is merged to generate new master data (MA).

[0107] There are many different types of medical data related to the physical and mental health of individuals. For example, there is medical data stored in the in-house databases of hospitals and other medical institutions, medical data stored in medical data clouds accessed and used by medical institutions, and even data stored by business companies involved in personal healthcare (for example, companies that provide services to support mental health measures and lifestyle-related disease measures).

[0108] First, in order to enable individuals to consolidate and manage their own medical data that is scattered across various places / services, prior consent is obtained for the transfer of electronic data to cloud systems and database systems that serve as information resources for this medical data. Note that medical data may be broadly included as long as it contains information related to the health of the individual, regardless of its type or content.

[0109] Based on the agreement, the data stored in one's own secret sharing storage can be provided to the medical institution or healthcare company on the right through the formation of agreement for data provision, and the requested data can be provided from the user's secret sharing storage to the medical institution or healthcare company.

[0110] To ensure that consent is properly formed, a blockchain network is used to authenticate the authenticity of the individual and to ensure the reliability of the data being genuine and untampered. Chaining makes data tampering virtually impossible, ensuring the reliability of the data. In addition, the data in the blockchain is not actually medical data; the medical data is indicated by a pointer recorded in a ledger on the blockchain network, and the destination of the pointer is secret distributed storage, so that the data is distributed, maintaining confidentiality and making it difficult to tamper with, and it is possible to respond even if the data is partially damaged or lost.

[0111] Data can be organized by data resource provision unit, and even when new data or data updates are added, it can be organized into a single record using the blockchain, making it possible to view an individual's medical data from the past to the latest.

[0112] For example, Mr. A's regular medical check-up data can be referenced in a single record on the BCN, making it possible to view data from his most recent check-up all the way back to past check-up data.

[0113] Furthermore, as already explained in the case of name matching, different data can be combined to generate new data, and the pointers that reference this past data and the new data can be linked in a chain on a blockchain network (BCN).Since the reference pointers to the data, including the new data and past data, will not be corrupted, it is also possible to reduce the loss of medical data.

[0114] 10A and 10B, the generation of transaction data (TR) and master data (MA) generated therefrom will be described using medical data as an example.

[0115] 10A and 10B show only the data body parts of the transaction data (TR) and the master data (MA). The data body part may contain one item, but usually contains multiple data items as in this example.

[0116] In the example of Figure 10A, there are two types of transaction data TR_A and TR_B. To make it easier to understand, each is numbered in parentheses in the order of their occurrence. Note that here, transaction data TR_A is biodata obtained based on "physical measurements," and transaction data TR_B is biodata obtained based on "vital measurements."

[0117] Therefore, each type of transaction data TR_A and TR_B consists of different data items, and each data item has personal data (or values). Note that the parts where no personal data is available are indicated by "null." In other words, transaction data (TR) is a data set that combines multiple items of data related to an individual, and multiple transaction data (TR) indicate their history.

[0118] What each item indicates and in what units it is indicated are managed by the application programs installed in the information processing device itself, or by the memory or storage device possessed by the information processing device, and the data of each data item is associated with which item's data it indicates.

[0119] Master data (MA) is generated for each transaction data (TR). Here, they are indicated with the same number so that their correspondence can be understood.

[0120] Since it is preferable that the most recent data in the master data (MA) indicates the most recent data of the individual, here, for each data item, the most recent master data (MA) is regulated and programmed to indicate the most recent data in the past transaction data (TR). However, the "null" part is ignored because the data is not available. In other words, in multiple data sets (TR) that are the history of an individual, each item indicates the most recent data in the data set of the historical data. For example, the first transaction data TR(1) is used to generate master data MA(1). For the next transaction data TR(2), the MA(2) generated corresponding to that transaction data TR(2) is generated by combining the transaction data TR(2) and the previous master data MA(1), ignoring the "null" parts and showing the latest data for each data item.

[0121] When an instruction to generate master data (MA) is received, the program generates the master data (MA) according to such rules. Figure 10A shows the data contents of the transaction data (TR) and the master data (MA).

[0122] In addition to updating the master data (MA), the program also has a function for name matching, that is, a function for merging master data (MA). An example is shown in Figure 10B.

[0123] The "Generated master data (MA)" in FIG. 10B lists the master data (MA_A and MA_B) generated corresponding to each of the two types of transaction data (TR) TR_A and TR_B in FIG. 10A in the order of occurrence.

[0124] And, the "newly generated master data (MA)" shows the newly generated master data MA_C in the arranged order. The rule for generating the master data MA_C here is the same as that in FIG. 10A.

[0125] Furthermore, multiple types of master data (MA) may be obtained from different data resource identifiers, but by referring to the user identifier (UID) present in the master data (MA), it is possible to combine only master data (MA) of the same user to generate new master data (MA).

[0126] The link generation using the master data (MA) can be programmed to be a more advanced process than simply reading the contents (data) of the relevant data item. The data items of the transaction data (TR) can be body fat weight (kg) and body weight (kg), and the link generation program can be provided with a calculation program for body fat weight (kg) ÷ body weight (kg) x 100, with the result of this calculation, the body fat percentage (%), being the data of the newly generated data item. In this way, a link generation program can be set up appropriately depending on the purpose, and even more advanced data utilization can be achieved by linking data from different user identifiers (UID).

[0127] As can be understood from the above explanation, if a user writes the identifier of the storage device he / she uses or his / her own processing device 20 that manages it in the contents of the access ticket (ACT) and records it in a ledger to his / her BCN address, he / she can refer to his / her latest data and past data from that storage device. In addition, he / she can provide his / her own data to a third party, and to allow the user to easily operate these processes, for example, buttons such as a "Test Results" button, "Give to Doctor" and "Past Results" may be provided on the operation screen as a user interface.

[0128] In addition, in order to safely exchange data between providers and third parties via the blockchain network (BCN), the blockchain address (BCN Add) may be converted into a QR code (registered trademark), and the application program may read the QR code (registered trademark) with a camera installed in the information processing device and transmit it to the other party as a BCN address.

[0129] Further disclosure is provided below. (Item 1) A method for acquiring and utilizing data related to information of an individual by an information processing device used by the individual, comprising: Transmitting data on the address on the blockchain network used by the individual to a provider of data related to the individual's information via the network; A step of issuing and registering access data (ACT) including data related to the address and data for identifying the source of the data from the provider to the address in the blockchain network; A step of referring to the access data (ACT) from the address of the blockchain network to identify a data provider and acquiring data related to the personal information from the identified provider; This is a method of utilizing data. (Item 2) 2. The data utilization method according to item 1, wherein the data provided by the provider includes personal identification information authorized for use by the information processing device. (Item 3) 3. The data utilization method according to any one of items 1 to 2, wherein the data provided by the provider includes identification information of an information processing device used by the individual. (Item 4) 4. The data utilization method according to any one of items 1 to 3, wherein the data provided by the source includes identification information of the source. (Item 5) 5. The data utilization method according to any one of items 1 to 4, wherein the data provided by the provider includes information indicating the time when the data was generated. (Item 6) A data utilization method according to any one of items 1 to 5, wherein the data (MA) provided by the provider is a data set consisting of data relating to each of a plurality of data items generated based on a plurality of data (TR) which are historical data relating to the individual. (Item 7) 7. The data utilization method according to item 6, wherein each of the plurality of data items represents the most recent data in the data set of the historical data. (Item 8) 8. The data utilization method according to any one of items 1 to 7, wherein at least the data related to the personal information is hashed using a hash function. (Item 9) A system for acquiring and utilizing data related to information of an individual by an information processing device used by the individual, the system comprising the information processing device, The information processing device has at least a memory or a storage device connected to the information processing device; The information processing device has a function of transmitting data related to the address on the blockchain network used by the individual via a network to a provider-side information processing device having a storage device that is a source of data related to the individual's information; A function of referring to access data (ACT) issued to the address of the blockchain network from the provider-side information processing device, the access data including data related to the address and data for identifying the source of the data; a function of acquiring data related to the personal information from the storage device of the provider based on the access data (ACT) and storing the data in at least the memory or storage device of the personal information; A data utilization system with the above. (Item 10) 10. The data utilization system according to item 9, wherein the data provided by the provider includes personal identification information authorized for use by the information processing device. (Item 11) A data utilization system according to any one of items 9 to 10, wherein the data provided by the source includes at least an identification information of an information processing device used by the individual, an identification information of the source, and information indicating the time of data generation. (Item 12) A data utilization system according to any one of items 9 to 11, wherein the data (MA) provided by the provider is a data set consisting of data relating to each of a plurality of data items generated based on a plurality of data (TR) which are historical data relating to the individual. (Item 13) 13. A data utilization system according to item 12, wherein each of the plurality of data items represents the most recent data in the data set of the historical data. (Item 14) 14. The data utilization system according to any one of items 9 to 13, wherein at least the data relating to the personal information is hashed using a hash function. (Item 15) A program for acquiring data related to information of an individual, the program being stored in an information processing device used by an individual and executed by a first information processing device, Providing the blockchain address to another information processing device; A program that acquires data related to the personal information generated in the other information processing device or a storage device used by the information processing device based on access data (ACT) containing information of the blockchain address sent from the other information processing device based on the blockchain address. (Item 16) Item 16. The program according to item 15, wherein the data relating to the personal information includes personal identification information authorized for use by the information processing device. (Item 17) 17. The program according to any one of items 15 to 16, wherein the data related to the personal information includes at least an identification information of an information processing device used by the individual, an identification information of the source of the data, and information indicating the time of data generation. [Explanation of symbols]

[0130] 1. Asset data utilization system 10. Information processing device for providers 20. User information processing device 30, 40. Storage device (secret sharing storage device) 50. Blockchain Network

Claims

1. A method for acquiring and utilizing data related to information of an individual by an information processing device used by the individual, comprising: Transmitting data on the address on the blockchain network used by the individual to a provider of data related to the individual's information via the network; A step of registering access data (ACT) including data for identifying the location of the data provided by the data provider on the blockchain network; referring to said access data (ACT) to obtain data related to said personal information; The method comprising:

2. The method of claim 1 , wherein the data provided by the source includes identifying information of the individual.

3. A method according to any one of claims 1 to 2, wherein the data provided by the source includes at least one of identification information of an information processing device used by the individual, identification information of the source, and information indicating the time the data was generated.

4. A method according to any one of claims 1 to 3, wherein the data (MA) provided by the source is a data set consisting of data relating to each of a plurality of data items generated based on a plurality of data (TR) which are historical data relating to the individual.

5. 5. The method of claim 4, wherein each of said plurality of data items represents the most recent data in said dataset of historical data.

6. The method according to any one of claims 1 to 5, wherein at least the data relating to the personal information is hashed by a hash function.

7. A system comprising an information processing device used by an individual, for acquiring and utilizing data related to information of the individual by the information processing device, The information processing device has at least a memory or a storage device connected to the information processing device; The information processing device has a function of transmitting data related to an address on the blockchain network used by the individual to an information processing device on a provider side of data related to the individual's information via a network; A function of referring to access data (ACT) including data for identifying the location of data provided by the data provider from the provider-side information processing device; A function of acquiring data related to the personal information based on the access data (ACT); A system having

8. The system of claim 7 , wherein the data provided by the source includes identifying information of an individual authorized for use.

9. The system according to any one of claims 7 to 8, wherein the data provided by the source includes at least identification information of the information processing device used by the individual, identification information of the source, and information indicating the time the data was generated.

10. The system according to any one of claims 7 to 9, wherein the data (MA) provided by the source is a data set consisting of data relating to each of a plurality of data items generated based on a plurality of data (TR) which are historical data relating to the individual.

11. 11. The system of claim 10, wherein each of the plurality of data items represents a most recent data item in the data set of historical data.

12. 12. The system of claim 7, wherein at least the data relating to the personal information is hashed by a hash function.

13. A storage medium storing a program for acquiring data related to information of an individual, the program being executed on an information processing device used by the individual, The storage medium causes the information processing device to execute the program so as to acquire data related to the personal information stored in at least the information processing device or a storage device available to other information processing devices, by referring to access data (ACT) registered on a blockchain network based on a blockchain address provided by the information processing device.

14. The storage medium of claim 13 , wherein the data relating to the information of the individual includes identification information of the individual.

15. A storage medium according to any one of claims 13 to 14, wherein the data relating to the personal information includes at least identification information of an information processing device used by the individual, identification information of the source of the data, and information indicating the time the data was generated.

Images