Data output program, data output system, and data output method

Abstract

To make it possible to improve the reliability of data processing and output.SOLUTION: A data output program causes a computer to realize: a provider evaluation part that evaluates the provider reliability of a provider which provides processing data; a user evaluation part that evaluates the user reliability of a user who processes the processing data; an output destination evaluation part that evaluates the output destination reliability of an output destination to which output data resulting from processing the processing data is output; an authentication part that authenticates the provider, the user, and the output destination based on each of the provider reliability, the user reliability, and the output destination reliability, during the processing of the processing data and the output of the output data; and a data output part that outputs the output data to an output destination device of the output destination based on a result of the authentication.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to a data output program, a data output system, and a data output method. [Background technology]

[0002] 2. Description of the Related Art Conventionally, techniques for linking data among a plurality of businesses have been known.

[0003] For example, in the system described in Patent Document 1, predetermined rules are referenced to create data to be provided to a second system based on data provided from a first system. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2005-266994 Summary of the Invention [Problem to be solved by the invention]

[0005] However, the system described in Patent Document 1 does not take into consideration the evaluation of the trustworthiness of the entities involved in the processing and output of data (e.g., data providers, data output destinations, users), which could lead to a loss of trustworthiness in the processing and output of data.

[0006] Therefore, an object of the present invention is to improve the reliability of data processing and output. [Means for solving the problem]

[0007] A data output program according to one aspect of the present invention causes a computer to implement the following: a source evaluation unit that evaluates the source reliability of a source that provides processing data; a user evaluation unit that evaluates the user reliability of a user that processes the processing data; an output destination evaluation unit that evaluates the destination reliability of an output destination that outputs output data that is the result of processing the processing data; an authentication unit that authenticates the source, user, and output destination based on the source reliability, user reliability, and output destination reliability, respectively, when processing the processing data and outputting the output data; and a data output unit that outputs the output data to the output destination device of the output destination depending on the result of the authentication. [Effects of the Invention]

[0008] According to the present invention, the reliability of data processing and output can be improved. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 is a diagram showing an overview of processing in a data output system 100 according to an embodiment of the present invention. [Figure 2] 1 is a diagram showing a configuration of a data output system 100 according to an embodiment of the present invention. [Figure 3] 10 is a diagram showing an example of authority data stored in a storage unit 110. FIG. [Figure 4] 10 is a diagram showing an example of evaluation result management data stored in the storage unit 110. FIG. [Figure 5] 1 is a sequence chart showing an example of processing of the data output system 100. DETAILED DESCRIPTION OF THE INVENTION

[0010] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Preferred embodiments of the present invention will now be described with reference to the accompanying drawings, in which: Figure 1 is a diagram showing an overview of processing in a data output system 100 according to an embodiment of the present invention.

[0011] The data output system 100 is an information processing system realized by a data output program. When processing processing data and outputting output data, the data output system 100 authenticates the provider, the user, and the output destination based on the provider reliability, the user reliability, and the output destination reliability, respectively, and outputs the output data to the output destination device of the output destination.

[0012] First, the data output system 100 receives a data processing instruction for the processing data from the user through the user device 200 (S101). The data output system 100 evaluates the user's trustworthiness and authenticates the user's processing of the processing data (S102). At this time, the data output system 100 can evaluate, for example, the user's trustworthiness regarding the data processing authority to process the processing data.

[0013] Next, the data output system 100 evaluates the reliability of the provider and authorizes acquisition of the processing data from the provider device 300 (S103). The data output system 100 acquires the processing data from the provider device 300 (S104).

[0014] The data output system 100 executes processing on the processing data based on the user's operation through the user device 200, and generates output data (S105). The data output system 100 evaluates the reliability of the output destination, and authorizes the output of the output data to the output destination device 400 (S106).

[0015] Then, the data output system 100 outputs the output data to the output destination device 400 based on the result of the authentication.

[0016] Here, the processing data may be data relating to the user's attributes (name, ID, address, department or position in the organization, authentication history, access history, etc.), data relating to the attributes of the organization to which the user belongs (for example, organization name, location, contact information, registration information, various ID information, sales amount, account balance, financial institution contract data, loan information, transaction history, authentication history, access history, etc.), permission information given by the user (permission to acquire or use data, information related to ID and authentication means), data relating to data managed by the provider device 300 (credit and credit information, user evaluation information, etc.), data relating to the device (registration number, model identification information, program identification information and version), data acquired or generated by the device (operation data, program processing data, acquired images, audio, and video, programs generated by the device, etc.).

[0017] The processing data may be, for example, text, numerical values, images, audio, video, programs, document data, table data, or graph data.

[0018] The device may be, for example, a vehicle, a drone, a sensor, or a camera. The data acquired or generated by the device may be usage data acquired or generated in response to use of the device. If the device is a vehicle, the usage data may be, for example, driving data, maintenance data, vehicle inspection data, or data related to automobile tax and automobile insurance.

[0019] The user's processing of the processing data includes, for example, at least one of data reference processing, processing processing, editing processing, and analysis processing.

[0020] In this way, the data output system 100 acquires processing data provided from the provider device 300, accepts processing of the processing data by the user, and outputs the processed output data to the output destination device 400.

[0021] In recent years, for example, ensuring the security of data management has become important. To ensure such security, it is important to evaluate the reliability of the user device 200, the provider device 300, and the destination device 400 with which the data output system 100 communicates. That is, the data output system 100 verifies the provider device 300, ensures authentication and auditability of data exchange, provides data linkage solutions, and verifies the destination device 400, independently of the user device 200, the provider device 300, and the destination device 400.

[0022] 2 is a diagram showing the configuration of a data output system 100 according to one embodiment of the present invention. The data output system 100 is communicably connected to a user device 200, a provider device 300, and a destination device 400 via a network such as the Internet. Details of the data output system 100 will be described later.

[0023] The user device 200 is an information processing device used by a user, such as a computer, a smartphone, a tablet terminal, or a personal computer.

[0024] A user accesses the data output system 100 using the user device 200 and instructs the data output system 100 to process the data to be processed and output the data to be output.

[0025] A user may be, for example, one of multiple users belonging to a predetermined organization. Here, the predetermined organization may be, for example, a company. In this case, the multiple users belonging to the predetermined organization may be, for example, employees of the company.

[0026] The providing device 300 is an information processing device that provides data to be processed. The providing device may be, for example, a business entity that manages the data to be processed.

[0027] When the processing data is data acquired or generated by a device, the providing device 300 may be, for example, a destination device to which the device transmits the data.

[0028] The output destination device 400 is an information processing device of an output destination that outputs output data.

[0029] The output destination may be, for example, a business operator. In this case, the output destination device 400 may be, for example, an information processing device used by the business operator.

[0030] The output destination may be, for example, a business operator that receives output data from the data output system 100. The output destination may, for example, provide predetermined processing or services based on the output data. By acquiring the output data from the data output system 100, the output destination may, for example, provide predetermined processing or services based on processing data managed by a provider different from the output destination.

[0031] Although one each of the user device 200, the provider device 300, and the destination device 400 is shown in FIG. 2, there may be a plurality of each of the user device 200, the provider device 300, and the destination device 400.

[0032] Next, details of the data output system 100 will be described. The data output system 100 includes a storage unit 110, an evaluation data processing unit 115, a user evaluation unit 120, a provider evaluation unit 125, a processing data acquisition unit 130, an output destination evaluation unit 135, an evaluation result management unit 140, an authentication unit 145, a data generation unit 150, a data output unit 155, and a certification unit 160. Each unit shown in Fig. 2 can be realized, for example, by using a storage area or by a processor executing a program stored in the storage area.

[0033] The storage unit 110 stores information to be processed in the data output system 100. The storage unit 110 can store, for example, evaluation data, authority data, evaluation result management data, processing data, authentication result data, output data, and certification data, which will be described later.

[0034] The evaluation data processing unit 115 processes evaluation data for evaluating at least one of user reliability, provider reliability, and destination reliability.

[0035] The evaluation data processing unit 115 can perform, for example, a process of acquiring evaluation data and a process of managing evaluation data. The evaluation data processing unit 115 can acquire evaluation data from, for example, at least one of the user device 200, the provider device 300, and the destination device 400. The evaluation data processing unit 115 can store the evaluation data in the storage unit 110, for example.

[0036] Here, the evaluation data is, for example, evaluation data for evaluating the reliability of the provider. In this case, the evaluation data may be, for example, corporate data of the provider (e.g., company name / trade name, representative, address, contact information, etc.), system connection data (e.g., connection method, identification / authentication method, data exchange format, system connection data, etc.), device information (e.g., registration number, model identification data, program identification data and version, etc.).

[0037] The evaluation data is, for example, evaluation data for evaluating the reliability of the output destination. In this case, the evaluation data may be, for example, corporate data of the output destination (e.g., company name / trade name, representative, address, contact information, etc.), system connection data (e.g., connection method, identification / authentication method, data exchange format, system connection data, etc.), device information (e.g., registration number, model identification data, program identification data and version, etc.).

[0038] The evaluation data is, for example, evaluation data for evaluating user reliability. In this case, the evaluation data includes, for example, authority data regarding the data processing authority of each of multiple users belonging to a specific organization, and data regarding the access history of users to the data output system 100. The authority data may be, for example, data indicating the range of data that each of multiple users has the authority to process (for example, refer to, process, edit, analyze). The data regarding the access history includes, for example, data regarding the access date and time or the work log at the time of access.

[0039] The evaluation data is not limited to these.

[0040] FIG. 3 is a diagram showing an example of authority data stored in the storage unit 110. The authority data includes, for example, an authority data ID, a user ID, and authority content data. The authority data ID is data that identifies the authority data. The user ID is data that identifies the user. The user ID may be, for example, the user's account ID, employee number, or email address. The authority content data is data related to the content of the data processing authority held by the user. The authority content data may be, for example, data indicating the data processing authority held by the user for each piece of data to be provided or for each type of data to be provided.

[0041] The user evaluation unit 120 evaluates the user reliability of the user who processes the processing data.

[0042] Furthermore, the user evaluation unit 120 can evaluate the user reliability, for example, regarding the data processing authority to process the processing data. At this time, the user evaluation unit 120 can evaluate the user reliability, for example, based on the authority data.

[0043] The user evaluation unit 120 may evaluate the user reliability by, for example, inputting the evaluation data into a predetermined calculation model that outputs an evaluation result.

[0044] The results of the evaluation by the user evaluation unit 120 may be managed as evaluation result management data in the evaluation result management unit 140, which will be described later, for example.

[0045] The user evaluation unit 120 may evaluate the user reliability based on the evaluation data (e.g., access history data) periodically at predetermined intervals. This allows the data output system 100 to detect unauthorized use of a user account (e.g., account takeover).

[0046] Furthermore, the user evaluation unit 120 may notify, for example, a person in charge of the user's organization of the evaluated user reliability. This places the user reliability under the supervision of the person in charge, thereby preventing unauthorized use of the data output system 100 by the user.

[0047] The user reliability may be, for example, data indicating whether the evaluation result is good or bad (for example, "evaluation OK"), or may be a score indicating the degree of reliability.

[0048] The provider evaluation unit 125 evaluates the reliability of the provider that provides the data for processing.

[0049] Furthermore, the provider evaluation unit 125 can evaluate the reliability of each of the multiple providers, thereby aiming at improving the reliability of data processing and output even when processing data is provided from each of the multiple providers.

[0050] Furthermore, the provider evaluation unit 125 can evaluate the reliability of the provider based on, for example, corporate data of the provider included in the evaluation data. At this time, the provider evaluation unit 125 can evaluate the reliability of the provider based on, for example, the social reliability of the provider indicated by the corporate data.

[0051] Furthermore, the provider evaluation unit 125 can evaluate the reliability of the provider based on, for example, the system connection data of the provider included in the evaluation data. At this time, the provider evaluation unit 125 can evaluate the reliability of the provider based on, for example, the normality of the system connection by the provider indicated by the system connection data.

[0052] The provider evaluation unit 125 may evaluate, for example, provider reliability regarding the safety of the provider device 300. Here, the safety of the provider device 300 may be, for example, safety regarding a security policy in the provider device 300, or safety regarding the likelihood that the provider device 300 is not infected with a computer virus.

[0053] The provider evaluation unit 125 may evaluate the reliability of the provider by, for example, inputting the evaluation data into a predetermined calculation model that outputs an evaluation result.

[0054] The results of the evaluation by the provider evaluation unit 125 may be managed as evaluation result management data in the evaluation result management unit 140, which will be described later, for example.

[0055] Furthermore, the provider evaluation unit 125 may not evaluate the provider reliability based on an instruction received from the user through the user device 200. Furthermore, when the provider device 300 includes multiple provider devices 300, the provider evaluation unit 125 may evaluate the provider reliability of a first provider device 300 among the multiple provider devices 300 based on an instruction received from the user through the user device 200, but may not evaluate the provider reliability of a second provider device 300 among the multiple provider devices 300. Here, the instruction received from the user through the user device 200 is, for example, data related to an instruction specifying the provider device 300 to be evaluated as a target of provider reliability by the provider evaluation unit 125. For example, the user can exclude provider devices 300 whose provider reliability does not need to be evaluated (e.g., provider devices 300 that the user already trusts) from the targets of evaluation by the provider evaluation unit 125. This allows the data output system 100 to perform sufficient provider reliability evaluation within the range desired by the user.

[0056] The reliability of the provider may be, for example, data indicating whether the evaluation result is good or bad (for example, "Evaluation OK"), or may be a score indicating the degree of reliability.

[0057] The processing data acquisition unit 130 acquires processing data from the provider device 300 based on the provider reliability, and stores the processing data in the storage unit 110.

[0058] The output destination evaluation unit 135 evaluates the reliability of the output destination that outputs the output data that is the result of processing the processing data.

[0059] Furthermore, the output destination evaluation unit 135 can evaluate the reliability of the output destination based on, for example, corporate data of the output destination included in the evaluation data. At this time, the output destination evaluation unit 135 can evaluate the reliability of the output destination based on, for example, the social reliability of the output destination indicated by the corporate data.

[0060] Furthermore, the output destination evaluation unit 135 can evaluate the reliability of the output destination based on, for example, the system connection data of the output destination included in the evaluation data. At this time, the output destination evaluation unit 135 can evaluate the reliability of the output destination based on, for example, the normality of the system connection by the output destination indicated by the system connection data.

[0061] Furthermore, the output destination evaluation unit 135 can evaluate the reliability of the output destination, including the reliability of the output destination regarding security measures for the output data.

[0062] The output destination evaluation unit 135 may evaluate the reliability of the output destination by, for example, inputting the evaluation data into a predetermined calculation model that outputs the evaluation result.

[0063] The results of the evaluation by the output destination evaluation unit 135 may be managed as evaluation result management data in, for example, the evaluation result management unit 140 described below.

[0064] Furthermore, the output destination evaluation unit 135 may not evaluate the output destination reliability based on an instruction received from the user through the user device 200. Furthermore, when the output destination device 400 includes multiple output destination devices 400, the output destination evaluation unit 135 may evaluate the output destination reliability of a first output destination device 400 among the multiple output destination devices 400 based on an instruction received from the user through the user device 200, but may not evaluate the output destination reliability of a second output destination device 400 among the multiple output destination devices 400. Here, the instruction received from the user through the user device 200 is, for example, data related to an instruction specifying the output destination device 400 for which the output destination evaluation unit 135 evaluates the output destination reliability. For example, the user can exclude from the evaluation targets of the output destination evaluation unit 135 output destination devices 400 for which the output destination reliability does not need to be evaluated (for example, the user already trusts the output destination devices 400). This allows the data output system 100 to perform a sufficient evaluation of the output destination reliability within the range desired by the user.

[0065] The reliability of the output destination may be, for example, data indicating whether the evaluation result is good or bad (for example, "Evaluation OK"), or may be a score indicating the degree of reliability.

[0066] The evaluation result management unit 140 manages evaluation result management data that manages at least one of provider reliability, user reliability, and output destination reliability. The evaluation result management unit 140 can store the evaluation result management data in the storage unit 110 as part of the management process of the evaluation result management data.

[0067] The evaluation result management data can manage the results of the reliability evaluation of the evaluation target (e.g., user, provider, output destination) qualitatively or quantitatively. Here, when the evaluation result management data manages the evaluation results qualitatively, the evaluation result management data may be, for example, data indicating whether the evaluation result is good or bad (e.g., "evaluation OK"). When the evaluation result management data manages the evaluation results quantitatively, the evaluation result management data may be, for example, data indicating the degree of reliability, which is the evaluation result, numerically. This allows the data output system 100 to grasp which evaluation targets are reliable and which are not reliable, and to evaluate the degree of reliability.

[0068] The evaluation result management data may be data that lists only reliable evaluation targets, which allows the data output system 100 to easily grasp reliable evaluation targets.

[0069] 4 is a diagram showing an example of evaluation result management data stored in the storage unit 110. The evaluation result management data includes, for example, an evaluation result management data ID, an evaluation target ID, and evaluation result content data. The evaluation result management ID is data that identifies the evaluation result management data. The evaluation target ID is data that identifies the evaluation target (for example, the user device 200, the provider device 300, or the destination device 400). The evaluation result content data is data that indicates the content of the evaluation result.

[0070] When processing data for processing and outputting data for output, the authentication unit 145 authenticates the provider, the user, and the output destination based on the provider reliability, the user reliability, and the output destination reliability, respectively, and stores authentication result data related to the authentication results in the memory unit 110.

[0071] Furthermore, the authentication unit 145 can authenticate each of the provider, the user, and the output destination based on the evaluation result management data.

[0072] Furthermore, the authentication unit 145 performs authentication based on user trustworthiness, authentication based on provider trustworthiness, and authentication based on destination trustworthiness in that order. That is, the authentication unit 145 may first perform authentication based on user trustworthiness, then perform authentication based on provider trustworthiness depending on the result of the authentication based on user trustworthiness, and then perform authentication based on destination trustworthiness depending on the result of the authentication based on provider trustworthiness.

[0073] The authentication unit 145 may determine that authentication is possible when the reliability (user reliability, provider reliability, and destination reliability) satisfies a predetermined condition. Here, the predetermined condition may be, for example, that the evaluation is "OK" or that the score indicating the degree of reliability is equal to or greater than a predetermined value.

[0074] Furthermore, when the reliability (in this case, particularly, for example, source reliability and destination reliability) does not satisfy a predetermined condition, the authentication unit 145 may notify the user device 200 that the reliability does not satisfy the predetermined condition, and may perform authentication based on the reliability (in other words, manual authentication by the user) further based on an operation from the user via the user device 200. In this way, even when the reliability does not satisfy the predetermined condition, the processing in the data output system 100 can be continued by inquiring of the user.

[0075] At this time, the authentication unit 145 may notify the score indicating the reliability to the user device 200. This allows the user to refer to the reliability score and perform manual authentication by the user.

[0076] The data generating unit 150 processes the processing data in response to a user instruction, generates output data, and stores it in the storage unit 110.

[0077] The output data may be, for example, data different from the processing data. The output data may be, for example, data obtained by processing, editing, or analyzing the processing data. The output data may be, for example, text, numerical values, images, audio, video, programs, document data, table data, or graph data.

[0078] The data generation unit 150 can, for example, output display information for displaying a data processing screen by the user on the screen of the user device 200, and execute processing of the processing data in response to an operation by the user on the screen.

[0079] The data output unit 155 outputs the output data to the output destination device 400 according to the result of the authentication.

[0080] The data output unit 155 can output the output data generated by the data generation unit 150.

[0081] The proving unit 160 generates proof data that proves at least one of the result of authentication and the output of the output data, and stores the proof data in the storage unit 110.

[0082] The certification unit 160 generates certification data, for example, to ensure the authenticity and auditability of the authentication result and the output of the output data. The certification data may be, for example, data that certifies the provider, or data for certifying the processing date and time (e.g., the date and time of provision of the source data, the date and time of generation of the output data, and the date and time of output of the output data). The certification data may be an e-seal, a timestamp, or a digital signature.

[0083] FIG. 5 is a sequence chart showing an example of processing performed by the data output system 100. In FIG.

[0084] First, for example, a data processing instruction for processing data is received from the user device 200 (S501). The user evaluation unit 120 evaluates the user's trustworthiness (S502). The authentication unit 145 authenticates the user's processing of the processing data based on the user's trustworthiness (S503).

[0085] Next, the provider evaluation unit 125 evaluates the reliability of the provider (S504). The authentication unit 145 authenticates the acquisition of the processing data based on the reliability of the provider (S505). The processing data acquisition unit 130 acquires the processing data from the provider device 300 (S506).

[0086] The output destination evaluation unit 135 evaluates the reliability of the output destination (S507). The authentication unit 145 authenticates the output of the output data to the output destination device 400 based on the reliability of the output destination (S508). The data generation unit 150 generates the output data (S509). The data output unit 155 outputs the output data to the output destination device 400 (S510). The proving unit 160 generates proof data that certifies at least one of the result of the authentication and the output of the output data (S511).

[0087] The evaluation result management unit 140 may also manage evaluation result management data that manages at least one of user reliability, provider reliability, and output destination reliability (not shown). The evaluation result management unit 140 may update the evaluation result management data after each evaluation process (S502, S504, S507), for example.

[0088] The order of processing in the flowchart shown in Fig. 5 is an example and is not limited to the order shown in Fig. 5. For example, the generation of output data (S509) may be performed before the evaluation of the trustworthiness of the output destination (S507). Furthermore, the generation of proof data (S511) may be performed after each of the authentication processes (S503, S505, S508).

[0089] The above describes one embodiment of the present invention. The data output system 100 evaluates the reliability of the provider, the reliability of the user, and the reliability of the output destination. When processing data for processing and outputting data for output, the data output system 100 authenticates the provider, the user, and the output destination based on the reliability of the provider, the user, and the output destination, respectively, and outputs the data for output to the output destination device of the output destination according to the authentication result. This allows the data output system 100 to improve the reliability of data processing and output.

[0090] Furthermore, the data output system 100 can evaluate the reliability of each of the multiple providers, thereby improving the reliability of data processing and output.

[0091] Furthermore, the data output system 100 can process the processing data and generate output data in response to a user's instruction, thereby enabling the user to process the processing data on the data output system 100 and output the output data.

[0092] Furthermore, the data output system 100 manages evaluation result management data that manages at least one of provider reliability, user reliability, and output destination reliability, and can authenticate the processing of processing data and the output of output data based on the evaluation result management data. This allows the data output system 100 to efficiently perform authentication processing by utilizing, for example, a previous reliability evaluation result. This means:

[0093] Furthermore, the data output system 100 can evaluate the reliability of users regarding data processing authority based on the authority data regarding the data processing authority of each of multiple users belonging to a specific organization. This can improve the reliability of data processing and output, for example, when the user is a corporate user belonging to a corporation.

[0094] Furthermore, the data output system 100 can evaluate the reliability of the output destination regarding security measures for the output data, thereby enabling the data output system 100 to improve the reliability of data processing and output.

[0095] Furthermore, the data output system 100 can generate proof data that proves at least one of the authentication result and the output of the output data, thereby enabling the data output system 100 to prove the authentication result and the processing result of the output of the output data after the fact. This means:

[0096] Furthermore, the data output system 100 can perform authentication based on user reliability, authentication based on provider reliability, and authentication based on destination reliability in that order, thereby allowing the data output system 100 to proceed with processing sequentially according to the authentication results.

[0097] It should be noted that the present embodiment is provided to facilitate understanding of the present invention and is not intended to limit the present invention. The present invention may be modified or improved without departing from the spirit thereof, and equivalents thereof are also included in the present invention.

[0098] In addition, in the present invention, a "unit" does not simply mean a physical means, but also includes cases where the functions of the "unit" are realized by software. Furthermore, the functions of one "unit" or device may be realized by two or more physical means, devices, or software modules, and the functions of two or more "units" or devices may be realized by one physical means, device, or software module. [Explanation of symbols]

[0099] 100 data output system, 110 storage unit, 115 evaluation data processing unit, 120 user evaluation unit, 125 provider evaluation unit, 130 processing data acquisition unit, 135 output destination evaluation unit, 140 evaluation result management unit, 145 authentication unit, 150 data generation unit, 155 data output unit, 160 certification unit, 200 user device, 300 provider device, 400 output destination device

Claims

1. On the computer, a provider evaluation unit for evaluating the reliability of a provider that provides data for processing; a user evaluation unit that evaluates the user reliability of a user who processes the processing data; an output destination evaluation unit that evaluates the reliability of an output destination that outputs output data that is a result of processing the processing data; an authentication unit that authenticates the provider, the user, and the output destination based on the provider reliability, the user reliability, and the output destination reliability, respectively, when processing the processing data and outputting the output data; a data output unit that outputs the output data to the output destination device according to the result of the authentication; A data output program to achieve this.

2. the provider includes a plurality of providers; the provider evaluation unit evaluates the provider reliability of each of the plurality of providers. The data output program according to claim 1 .

3. a data generation unit that executes processing on the processing data in response to an instruction from the user and generates the output data; the data output unit outputs the generated output data.

3. The data output program according to claim 1.

4. The computer further implements an evaluation result management unit that manages evaluation result management data that manages at least one of the provider reliability, the user reliability, and the output destination reliability that have been previously evaluated, the authentication unit authenticates the processing of the processing data and the output of the output data based on the evaluation result management data.

3. The data output program according to claim 1.

5. the user trustworthiness includes user trustworthiness regarding data processing authority to process the processing data; 3. The data output program according to claim 1, wherein the user evaluation unit evaluates the user trustworthiness based on authority data relating to data processing authority of each of a plurality of users belonging to a predetermined organization.

6. the output destination evaluation unit evaluates the reliability of the output destination including reliability of the output destination regarding security measures for the output data.

3. The data output program according to claim 1.

7. 3. The data output program according to claim 1, further comprising a certification unit that generates certification data that certifies at least one of the result of the authentication and the output of the output data.

8. 3. The data output program according to claim 1, wherein the authentication unit sequentially performs authentication based on the user trustworthiness, authentication based on the provider trustworthiness, and authentication based on the output destination trustworthiness.

9. a provider evaluation unit for evaluating the reliability of a provider that provides data for processing; a user evaluation unit that evaluates the user reliability of a user who processes the processing data; an output destination evaluation unit that evaluates the reliability of an output destination that outputs output data that is a result of processing the processing data; an authentication unit that authenticates the provider, the user, and the output destination based on the provider reliability, the user reliability, and the output destination reliability, respectively, when processing the processing data and outputting the output data; a data output unit that outputs the output data to the output destination device according to the result of the authentication; A data output system comprising:

10. The computer Evaluate the reliability of the source of data provided for processing, Evaluating the user reliability of a user who processes the processing data; Evaluating the reliability of an output destination that outputs output data that is a result of processing the processing data; When processing the processing data and outputting the output data, authenticating the provider, the user, and the output destination based on the provider reliability, the user reliability, and the output destination reliability, respectively; outputting the output data to the output destination device according to the result of the authentication; Data output method.

Images