Information transport system, method and program

Abstract

To improve security in transporting information to an online information processing device.SOLUTION: According to an embodiment, an information transport system includes a transport source terminal and a transport destination terminal. The transport source terminal includes a storage part for storing object information, a secret dispersion part for generating a plurality of shares from the object information by secret dispersion, and a storage part for storing the plurality of shares in a plurality of different external recording media, and the transport destination terminal includes an acquisition part being an off line to acquire the shares from the plurality of external recording media, a restoration part for restoring the object information from the plurality of acquired shares, and a storage part for storing the restored object information.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to an information conveying system, method and program. [Background technology]

[0002] During an election, an information processing device that stores personal information recorded in the Basic Resident Register is installed at the polling station. The identity of the voter is verified by comparing the personal information stored in this information processing device with the information recorded on the voting card brought by the voter.

[0003] As a system for realizing such a voter management method, Cited Document 1 discloses an election management system comprising: ballot cards on which personal information of voters is recorded; a ballot card counting device installed in a post office for counting the number of ballot cards that have been completely sorted; a reception reader / writer installed in a polling station for reading the personal information recorded on the ballot cards brought by the voters; a voting booth for recording candidate data on the ballot cards whose votes have been completely accepted; and a ballot counting reader / writer installed in a vote counting venue for reading the candidate data recorded on the ballot cards. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2005-031923 Summary of the Invention [Problem to be solved by the invention]

[0005] The information processing devices installed at polling stations are kept offline to prevent the leakage of personal information. Therefore, the information processing devices cannot directly obtain personal information from the Basic Resident Register network. Therefore, personal information has traditionally been transported by saving it to external storage media from a personal computer (PC) connected to the Basic Resident Register network, manually transporting the external media to the polling station, and then inputting the information from the external storage media into the information processing device at the polling station.

[0006] However, with the above-mentioned conventional method, if the transporter loses the external recording medium, there is a risk that personal information may be leaked from the external recording medium.

[0007] The present invention has been made in view of the above-mentioned problems, and has as its object to improve the security when information is transported to an offline information processing device. [Means for solving the problem]

[0008] According to one embodiment, the information transport system is an information transport system comprising a source terminal and a destination terminal, wherein the source terminal comprises a memory unit for storing target information, a secret sharing unit for generating multiple shares from the target information by secret sharing, and a storage unit for saving the multiple shares on multiple different external recording media, and the destination terminal is offline and comprises an acquisition unit for acquiring the shares from the multiple external recording media, a restoration unit for restoring the target information from the acquired multiple shares, and a memory unit for storing the restored target information. [Effects of the Invention]

[0009] According to one embodiment, it is possible to improve security when transporting information to an offline information processing device. [Brief explanation of the drawings]

[0010] [Figure 1] FIG. 1 illustrates an example of the configuration of an information carrying system 1000. [Figure 2] 1 is a diagram illustrating an example of a hardware configuration of an information processing device 100. FIG. [Figure 3] FIG. 2 is a diagram illustrating an example of a functional configuration of a source terminal 1. [Figure 4] 3 is a diagram illustrating an example of a functional configuration of a destination terminal 2. FIG. [Figure 5] 10 is a flowchart showing an example of a transportation method. [Figure 6] FIG. 1 is a diagram illustrating an example of a secret sharing method. DETAILED DESCRIPTION OF THE INVENTION

[0011] Hereinafter, each embodiment of the present invention will be described with reference to the accompanying drawings. Note that, in the description of the specification and drawings relating to each embodiment, components having substantially the same functional configuration are designated by the same reference numerals, and redundant description will be omitted.

[0012] <System configuration> First, an overview of an information transport system 1000 according to this embodiment will be described. The information transport system 1000 is an information processing system for safely transporting target information stored in a transport source terminal 1 to a transport destination terminal 2 via an external recording medium.

[0013] More specifically, the source terminal 1 generates multiple shares from the target information using secret sharing and stores the multiple shares on different external storage media. The multiple external storage media are transported by the transporter to the source terminal 2. The destination terminal 2 acquires the shares from the multiple external storage media and restores the target information from the multiple shares.

[0014] The external recording medium is any recording medium that can store the target information and is portable, such as, but not limited to, a CD (Compact Disc), a DVD (Digital Versatile Disc), a FD (Floppy Disk), an MO (Magneto-Optical disk), a BD (Blu-ray (registered trademark) Disc), a USB (registered trademark) memory, or an SD card.

[0015] The transporter is any person who transports the external recording medium. The transporter may be the user of the transport source terminal 1, the user of the transport source terminal 2, or any other person.

[0016] The information transport system 1000 can be used, for example, to transport personal information during elections, but the term is not limited to this. The information transport system 1000 may also be used to transport target information other than personal information, or for purposes other than elections (for example, transporting confidential information in government agencies or companies).

[0017] FIG. 1 is a diagram showing an example of the configuration of an information transport system 1000. As shown in FIG. 1, the information transport system 1000 includes a source terminal 1, a destination terminal 2, and a target information storage device 3. The source terminal 1 and the target information storage device 3 are connected to each other so that they can communicate with each other via a network N. The destination terminal 2 is not connected to the network N. The network N is, for example, a wired local area network (LAN), a wireless LAN, the Internet, a public line network, a mobile data communication network, or a combination thereof. In the example of FIG. 1, the information transport system 1000 includes one source terminal 1 and one destination terminal 2, but may include multiple of each.

[0018] The source terminal 1 is an information processing device that is the source of the target information. The source terminal 1 is, for example, but not limited to, a PC (Personal Computer), a smartphone, or a tablet terminal. The source terminal 1 acquires the target information from the target information storage device 3 and stores the acquired target information in an external recording medium.

[0019] The destination terminal 2 is an offline information processing device to which the target information is to be delivered. The destination terminal 2 is, for example, but not limited to, a PC, a smartphone, or a tablet terminal. The destination terminal 2 acquires the target information stored in an external recording medium.

[0020] The target information storage device 3 is an information processing device that stores target information. The target information storage device 3 is, for example, but not limited to, a PC, a smartphone, a tablet terminal, a server, or a microcomputer. The target information storage device 3 provides the target information to the transport source terminal 1.

[0021] <Hardware configuration of information processing device 100> Next, a description will be given of the hardware configuration of the information processing device 100. Fig. 2 is a diagram showing an example of the hardware configuration of the information processing device 100. As shown in Fig. 2, the information processing device 100 includes a processor 101, a memory 102, a storage 103, a communication I / F 104, an input device 105, an output device 106, and a drive device 107, which are connected to each other via a bus B.

[0022] The processor 101 controls each component of the information processing device 100 and realizes the functions of the information processing device 100 by loading various programs including an OS (Operating System) stored in the storage 103 into the memory 102 and executing the programs. The processor 101 is, for example, but not limited to, a CPU (Central Processing Unit), an MPU (Micro Processing Unit), a GPU (Graphics Processing Unit), an ASIC (Application Specific Integrated Circuit), or a DSP (Digital Signal Processor).

[0023] The memory 102 is, for example, a read-only memory (ROM), a random access memory (RAM), or a combination thereof. The ROM is, for example, a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a combination thereof. The RAM is, for example, but not limited to, a dynamic random access memory (DRAM) or a static random access memory (SRAM).

[0024] The storage 103 stores various programs including an OS and data. The storage 103 is, for example, a flash memory, a hard disk drive (HDD), a solid state drive (SSD), or storage class memories (SCM), but is not limited to these.

[0025] The communication I / F 104 is an interface for connecting the information processing device 100 to an external device via the network N and controlling communication. The communication I / F 104 is, for example, Bluetooth (registered trademark), Wi-Fi (registered trademark), ZigBee (registered trademark), or Ethernet (registered trademark), but is not limited to these.

[0026] The input device 105 is a device for inputting information to the information processing device 100. The input device 105 is, for example, a mouse, a keyboard, a touch panel, a microphone, a scanner, an imaging device (camera), various sensors, or an operation button, but is not limited to these.

[0027] The output device 106 is a device for outputting information from the information processing device 100. The output device 106 is, for example, a display device, a projector, a printer, a speaker, or a vibrator, but is not limited to these.

[0028] The drive device 107 is a device that reads and writes data from and to the external recording medium 108. The drive device 107 is, for example, a magnetic disk drive, an optical disk drive, a magneto-optical disk drive, or an SD card reader, but is not limited to these.

[0029] In this embodiment, the program may be written to the memory 102 or the storage 103 during the manufacturing stage of the information processing device 100, or may be provided to the information processing device 100 via the network N, or may be provided to the information processing device 100 via a non-transitory computer-readable recording medium such as an external recording medium 108.

[0030] <Functional configuration of transport source terminal 1> Next, a description will be given of the functional configuration of the source terminal 1. Fig. 3 is a diagram showing an example of the functional configuration of the source terminal 1. As shown in Fig. 3, the source terminal 1 includes a communication unit 11, a storage unit 12, and a control unit 13.

[0031] The communication unit 11 is realized by the communication I / F 104. The communication unit 11 transmits and receives information to and from the target information storage device 3 via the network N.

[0032] The storage unit 12 is realized by a memory 102 and a storage 103. The storage unit 12 stores target information 121, shares 122, and hash values ​​123.

[0033] The target information 121 is any information that is the target of transportation. The target information is, for example, personal information, but is not limited to this.

[0034] The shares 122 are information generated from the target information 121 by secret sharing. The shares 122 are information that has no meaning on their own, and the target information can be restored from multiple shares 122. Multiple shares 122 are generated from one target information 121.

[0035] The hash value 123 is a value used to confirm whether the target information has been restored correctly.

[0036] The control unit 13 is realized by the processor 101 reading and executing a program from the memory 102 and working in cooperation with other hardware components. The control unit 13 controls the overall operation of the source terminal 1. The control unit 13 includes an acquisition unit 131, a secret sharing unit 132, and a storage unit 133.

[0037] The acquisition unit 131 acquires the target information from the target information storage device 3 and stores it in the storage unit 12 as target information 121. Note that if the target information 121 is originally stored in the transport source terminal 1, the transport source terminal 1 does not need to include the acquisition unit 131, and the information transport system 1000 does not need to include the target information storage device 3.

[0038] The secret sharing unit 132 generates a plurality of shares 122 and a hash value 123 from the target information by secret sharing, and stores them in the storage unit 12. The secret sharing method will be described later.

[0039] The saving unit 133 saves the multiple shares 122 saved in the storage unit 12 onto multiple different external recording media.

[0040] The functional configuration of the source terminal 1 is not limited to the above example. For example, the source terminal 1 may have a functional configuration other than the above. Furthermore, each functional configuration of the source terminal 1 may be realized by software as described above, or may be realized by hardware such as an IC chip, an SoC (System on Chip), an LSI (Large Scale Integration), or a microcomputer.

[0041] <Functional configuration of destination terminal 2> Next, a description will be given of the functional configuration of the destination terminal 2. Fig. 4 is a diagram showing an example of the functional configuration of the destination terminal 2. As shown in Fig. 3, the destination terminal 2 includes a communication unit 21, a storage unit 22, and a control unit 23.

[0042] The communication unit 21 is realized by the communication I / F 104. The communication unit 21 transmits and receives information to and from external devices via the network N. However, while the information processing device functions as the destination terminal 2, the function of the communication unit 21 is stopped. In other words, the communication unit 21 is not connected to the network N, and does not transmit and receive information to and from external devices. The destination terminal 2 does not need to be equipped with the communication unit 21.

[0043] The storage unit 22 is realized by the memory 102 and the storage 103. The storage unit 22 stores target information 221, shares 222, and hash values ​​223. The target information 221, shares 222, and hash values ​​223 are the same as the target information 121, shares 122, and hash values ​​123, and therefore a description thereof will be omitted.

[0044] The control unit 23 is realized by the processor 101 reading and executing a program from the memory 102 and working in cooperation with other hardware components. The control unit 23 controls the overall operation of the destination terminal 2. The control unit 23 includes an acquisition unit 231 and a restoration unit 232.

[0045] The acquisition unit 231 acquires the shares 122 and hash values ​​123 from a plurality of external recording media, and stores them in the storage unit 22 as shares 222 and hash values ​​223 .

[0046] The restoration unit 232 restores the target information 221 from the multiple shares 222 and hash values ​​223 stored in the storage unit 22, and stores the restored information in the storage unit 22. Any restoration method can be used depending on the secret sharing method. The restoration method will be described in detail later.

[0047] The functional configuration of the destination terminal 2 is not limited to the above example. For example, the destination terminal 2 may have a functional configuration other than the above. Furthermore, each functional configuration of the destination terminal 2 may be realized by software as described above, or may be realized by hardware such as an IC chip, SoC, LSI, or microcomputer.

[0048] <Method of transporting target information> Next, a method for transporting target information will be described. Fig. 5 is a flowchart showing an example of the method for transporting target information. In the following, an example will be described in which the information transport system 1000 is used to transport personal information during an election.

[0049] (Step S101) The acquisition unit 131 of the transport source terminal 1 acquires the personal information (target information) of the voter from the data server (target information storage device 3) that constitutes the resident registration network, and stores it in the storage unit 12 as target information 121.

[0050] (Step S102) The secret sharing unit 132 generates multiple shares 122 from the target information 121 by secret sharing. The secret sharing unit 132 generates n shares 122 (n is an integer equal to or greater than 2) by, for example, an n-out-of-n sharing scheme ((n,n) secret sharing scheme). The n-out-of-n sharing scheme is a type of threshold secret sharing scheme, and is a secret sharing scheme that generates n shares from which the original information can be restored. An example of such a secret sharing scheme is the Vernam cipher. Here, a secret sharing scheme using the Vernam cipher will be specifically described.

[0051] Fig. 6 is a diagram showing an example of a secret sharing scheme using the Vernam cipher. First, the secret sharing unit 132 generates n-1 random numbers having the same data amount as the target information 121. In the example of Fig. 6, n is 3, and 8-bit random numbers K1 and K2 are generated for the 8-bit target information P.

[0052] Next, the secret sharing unit 132 calculates the exclusive OR of the target information 121 and the n-1 random numbers. In the example of Fig. 6, the calculation result C(P xor K1 xor K2) is calculated as the exclusive OR of the target information P and the random numbers K1 and K2 (xor is the exclusive OR operator).

[0053] Then, the secret sharing unit 132 stores the n-1 random numbers and the calculation result of the exclusive OR in the storage unit 12 as shares 122. As a result, n shares 122 are generated and stored in the storage unit 12. In the example of FIG. 6, the random numbers K1, K2 and the calculation result C become the shares 122.

[0054] The shares 122 thus generated have no meaning on their own, and it is not possible to restore the target information 121 from them. By storing and transporting such shares 122 on n different external recording media, the risk of the target information being leaked can be reduced even if the transporter loses some of the external recording media.

[0055] It is preferable that the secret sharing unit 132 generates the shares 122 using a one-time pad. That is, it is preferable that the secret sharing unit 132 regenerates a random number every time it generates a share 122. This improves the security of the shares 122 and further reduces the risk of the target information being leaked.

[0056] In addition, the method of secret sharing is not limited to the above example. The method of secret sharing may be an n-out-of-n sharing method other than the Barnum cipher, or may be a k-out-of-n sharing method ((k,n) secret sharing method). The k-out-of-n sharing method is a type of threshold secret sharing method, which is a secret sharing method that generates n shares from which the original information can be restored from k shares (k < n). When the share 122 is generated by the k-out-of-n sharing method, the transport destination terminal 2 can restore the target information 121 if it obtains k or more shares 122.

[0057] (Step S103) The secret sharing unit 132 generates the hash value 123 of the target information 121 and stores it in the storage unit 12. The method of generating the hash value is, for example, sha256, but is not limited thereto.

[0058] (Step S104) The storage unit 133 stores the plurality of shares 122 and the hash value 123 stored in the storage unit 12 in a plurality of different external recording media according to the operation of the user of the transport source terminal 1. As a result, the n shares 122 are stored in n different external recording media, respectively. The hash value 123 may be stored in each of the n external recording media, or may be stored in any one of the external recording media.

[0059] (Step S105) The carrier transports the plurality of external recording media in which the shares 122 are stored to the polling place (transport destination terminal 2). If one carrier transports all the external recording media and loses them, the risk of leakage of the target information 121 increases. Therefore, it is preferable that the plurality of external recording media are transported by different carriers.

[0060] (Step S106) The acquisition unit 231 of the destination terminal 2 acquires multiple shares 122 from multiple (n) external recording media transported by the transporter in response to an operation by the user of the destination terminal 2, and stores the multiple shares 122 in the storage unit 22. Furthermore, the acquisition unit 231 acquires a hash value 123 from at least one of the multiple external recording media transported by the transporter in response to an operation by the user of the destination terminal 2, and stores the hash value 123 in the storage unit 22. In the example of FIG. 6, the random numbers K1 and K2 and the calculation result C are stored as shares 222.

[0061] (Step S107) The restoration unit 232 restores the target information 221 from multiple (n) shares 222 stored in the memory unit 22, generates a hash value from the restored target information 221 in the same manner as the secret distribution unit 132, checks whether the generated hash value matches the hash value 223, and if they match, determines that the target information 221 has been restored correctly and stores it in the memory unit 22.

[0062] The restoration unit 232 restores the target information 221 using a method according to the secret sharing method of the target information 121. For example, if the target information 121 is secret shared using the Vernam cipher, the restoration unit 232 calculates the exclusive OR of multiple shares 222 and obtains the calculation result as the target information 221. As shown in FIG. 6, it can be seen that the calculation result R of the exclusive OR of the random numbers K1, K2 and the calculation result C matches the target information P.

[0063] This completes the transport of the target information 221 from the source terminal 1 to the destination terminal 2. After this, the voting manager at the polling station can use the personal information (target information 221) stored in the destination terminal 2 to verify the identity of the voter.

[0064] <Summary> As described above, according to this embodiment, an information transportation system 1000 can be realized that includes a source terminal 1 and a destination terminal 2, in which the source terminal 1 includes a memory unit 12 that stores target information 121, a secret sharing unit 132 that generates multiple shares 122 from the target information 121 by secret sharing, and a storage unit 133 that stores the multiple shares 122 on multiple different external recording media, and the destination terminal 2 is offline and includes an acquisition unit 231 that acquires shares 222 from multiple external recording media, a restoration unit 232 that restores the target information 221 from the acquired multiple shares 222, and a memory unit 22 that stores the restored target information 221.

[0065] With this configuration, the target information 221 is transported in a state where multiple shares 222, which are meaningless on their own, are each stored on a different external recording medium. Therefore, even if the transporter loses the external recording medium when transporting the target information 221 to the offline destination terminal 2, the risk of the target information 221 being leaked can be reduced, and the security of the target information 221 can be improved.

[0066] <Additional Notes> The present embodiment includes the following disclosure.

[0067] (Appendix 1) An information transport system including a source terminal and a destination terminal, The transport source terminal, a storage unit that stores target information; a secret sharing unit that generates a plurality of shares from the target information by secret sharing; a storage unit that stores the plurality of shares in a plurality of different external recording media; Equipped with the destination terminal is offline; an acquisition unit that acquires the shares from the plurality of external recording media; a restoration unit that restores the target information from the acquired multiple shares; a storage unit that stores the restored target information; Equipped with Information conveying system.

[0068] (Appendix 2) the secret sharing unit generates a hash value for verifying whether the target information has been correctly restored; The storage unit stores the hash value together with the share in at least one of the external recording media. 10. An information conveying system as described in Appendix 1.

[0069] (Appendix 3) The target information is personal information 10. An information conveying system as described in Appendix 1.

[0070] (Appendix 4) The secret sharing unit secret shares the target information by an n-out-of-n sharing method. 10. An information conveying system as described in Appendix 1.

[0071] (Appendix 5) The secret sharing unit secretly shares the target information using a Vernam cipher. 10. An information conveying system as described in Appendix 1.

[0072] (Appendix 6) The secret sharing unit secretly shares the target information using a one-time pad. 10. An information conveying system as described in Appendix 1.

[0073] (Appendix 7) An information transport method executed by a source terminal and a destination terminal, The transport source terminal, storing target information; generating a plurality of shares from the target information by secret sharing; storing the plurality of shares in a plurality of different external recording media; Run the destination terminal is offline; acquiring the shares from each of the plurality of external recording media; Restoring the target information from the acquired shares; storing the restored target information; Run Information conveyance method.

[0074] (Appendix 8) An information transport system including a transport source terminal and a transport destination terminal, The transport source terminal, storing target information; generating a plurality of shares from the target information by secret sharing; storing the plurality of shares in a plurality of different external recording media; Run the destination terminal is offline; acquiring the shares from each of the plurality of external recording media; Restoring the target information from the acquired shares; storing the restored target information; Run An information transport program that executes the information transport method.

[0075] The embodiments disclosed herein are illustrative in all respects and should not be considered limiting. The scope of the present invention is defined by the claims, not by the above meaning, and is intended to include all modifications within the meaning and scope of the claims. Furthermore, the present invention is not limited to the above-described embodiments, and various modifications are possible within the scope of the claims. Embodiments obtained by appropriately combining the technical means disclosed in different embodiments are also included in the technical scope of the present invention. [Explanation of symbols]

[0076] 1: Source terminal 2: Destination terminal 3: Target information storage device 121,221: Target information 122,222:Share 123,223: Hash value 131: Acquisition Department 132:Secret Sharing Department 133: Preservation Department 231: Acquisition Department 232:Restoration Department

Claims

1. An information transport system including a source terminal and a destination terminal, The transport source terminal, a storage unit that stores target information; a secret sharing unit that generates a plurality of shares from the target information by secret sharing; a storage unit that stores the plurality of shares in a plurality of different external recording media; Equipped with the destination terminal is offline; an acquisition unit that acquires the shares from the plurality of external recording media; a restoration unit that restores the target information from the acquired multiple shares; a storage unit that stores the restored target information; Equipped with Information conveying system.

2. the secret sharing unit generates a hash value for verifying whether the target information has been correctly restored; The storage unit stores the hash value together with the share in at least one of the external recording media.

10. The information delivery system of claim 1.

3. The target information is personal information 10. The information delivery system of claim 1.

4. The secret sharing unit secret shares the target information by an n-out-of-n sharing method.

10. The information delivery system of claim 1.

5. The secret sharing unit secretly shares the target information using a Vernam cipher.

10. The information delivery system of claim 1.

6. The secret sharing unit secretly shares the target information using a one-time pad.

10. The information delivery system of claim 1.

7. An information transport method executed by a source terminal and a destination terminal, The transport source terminal, storing target information; generating a plurality of shares from the target information by secret sharing; storing the plurality of shares in a plurality of different external recording media; Run the destination terminal is offline; acquiring the shares from each of the plurality of external recording media; Restoring the target information from the acquired shares; storing the restored target information; Run Information conveyance method.

8. An information transport system including a transport source terminal and a transport destination terminal, The transport source terminal, storing target information; generating a plurality of shares from the target information by secret sharing; storing the plurality of shares in a plurality of different external recording media; Run the destination terminal is offline; acquiring the shares from each of the plurality of external recording media; Restoring the target information from the acquired shares; storing the restored target information; Run An information transport program that executes the information transport method.

Images