Generative AI system and generative AI method

Abstract

To make it possible to increase the reliability of various information used in generative AI. [Solution] The generative AI system is equipped with a generative AI device that generates a generative AI model using article information collected from a communication network as learning data, and is equipped with a judgment unit that verifies, using digital signature technology, the certificate of the profile of the generative AI company that operates the generative AI device, which has been issued using digital signature technology after being reviewed in advance by a predetermined certification body, and determines the reliability of the generative AI company based on the results of the verification.

Description

[Technical Field]

[0001] The present invention relates to a generative AI system and a generative AI method. [Background technology]

[0002] BACKGROUND ART Conventionally, a technique for providing advertisements for web content such as web pages through bidding or the like is known (see, for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2019-220052 Summary of the Invention [Problem to be solved by the invention]

[0004] However, conventional technologies have had problems such as inappropriate information (e.g., fake news, content that infringes the copyrights of others, and content that includes personal information) being distributed by inappropriate distributors, or inappropriate advertisements being distributed.

[0005] Furthermore, there are many people who impersonate organizations such as news organizations and government agencies to disseminate information in order to mislead people, and who irresponsibly spread false and misleading information during elections and disasters, putting democracy and our lives at risk, and their influence is growing day by day.

[0006] Furthermore, under an economic model known as the "attention economy," which relies on people's interest and attention as a source of income, excessive emphasis is placed on indicators such as the number of views and impressions, resulting in the distribution and spread of a lot of information that is created without any responsibility for the veracity of its content, which has become a social problem.

[0007] Furthermore, as generative AI is developed and spread, there is a tendency for information that is difficult to distinguish from the truth to be easily generated and spread in large quantities.

[0008] In this way, ordinary people are forced to passively and heteronomously consume information without being able to rationally recognize or judge its authenticity and reliability. This distortion in perception of the authenticity of information not only hinders the subjective exercise of our right to know, but could also endanger the lives, bodies, and property of individuals, as well as democracy.

[0009] The purpose of the generative AI system of one embodiment is to increase the reliability of various information used in the generative AI. [Means for solving the problem]

[0010] A generative AI system according to one embodiment is a generative AI system equipped with a generative AI device that generates a generative AI model using article information collected from a communication network as learning data, and is equipped with a judgment unit that verifies, using digital signature technology, a certificate of the profile of the generative AI company that operates the generative AI device, which certificate was issued using digital signature technology after being reviewed in advance by a predetermined certification body, and determines the reliability of the generative AI company based on the results of the verification.

[0011] In addition, one embodiment of a generating AI method is a generating AI method using a generating AI system equipped with a generating AI device that generates a generating AI model using article information collected from a communication network as learning data, and includes a judgment step of verifying, using digital signature technology, a certificate of the profile of the generating AI company that operates the generating AI device, which certificate has been issued using digital signature technology after being reviewed in advance by a predetermined certification body, and determining the reliability of the generating AI company based on the results of the verification. [Effects of the Invention]

[0012] According to an embodiment of the generation AI system and generation AI method, the reliability of various information used in the generation AI can be improved. [Brief explanation of the drawings]

[0013] [Figure 1]FIG. 1 is a diagram illustrating an example of a system configuration of an advertisement delivery system according to a first embodiment. [Figure 2] FIG. 1 is a diagram illustrating an example of the hardware configuration of each device included in an advertisement distribution system according to a first embodiment. [Figure 3] FIG. 1 is a diagram showing an example of the functional configuration of each device included in an advertisement distribution system according to a first embodiment; [Figure 4A] FIG. 1 is a diagram showing an example of various types of information handled by the advertisement distribution system according to the first embodiment; [Figure 4B] FIG. 1 is a diagram showing the relationship between various signature keys handled by the advertisement distribution system according to the first embodiment. [Figure 4C] FIG. 10 is a diagram showing a display example of an icon included in a PA by the advertisement distribution system according to the first embodiment; [Figure 5] FIG. 1 is a sequence diagram illustrating an example of a procedure for an advertisement distribution process performed by the advertisement distribution system according to the first embodiment. [Figure 6] FIG. 10 is a diagram showing an example of various types of information handled by the article distribution system according to the second embodiment. [Figure 7] FIG. 10 is a diagram for explaining an example of a service providing procedure by the content providing system according to the third embodiment. [Figure 8] FIG. 10 is a diagram showing an example of various types of information handled by the generation AI system according to the fourth embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0014] Hereinafter, an embodiment will be described with reference to the drawings.

[0015] Each system described in this embodiment is operated based on the following definition of "information reliability."

[0016] In each system, "information reliability" is defined as "information being provided accurately and consistently," "information providers following the information dissemination policies they have established," and "information providers having a governance system sufficient to implement those policies."

[0017] Information providers (including advertisers) who meet the above-mentioned requirement of "information being provided accurately and consistently" are able to provide information accurately and consistently, and it is obvious that the "reliability of the information" they provide is higher than that of providers who do not meet this requirement.

[0018] Therefore, each system described in this embodiment sets the requirement that "information is provided accurately and consistently" as a basic condition for reviewing the issuance of certificates issued by each system.

[0019] Each system described in this embodiment assigns a certificate to various types of information and uses digital signature technology to verify each certificate assigned to the various types of information, thereby proving that the content sent by an information sender is sent from an information sender who meets the above-mentioned requirements for "information reliability" (i.e., an information sender who has been certified by a third-party organization as meeting the above-mentioned requirements for "information reliability") (i.e., highly reliable information).

[0020] [First embodiment] (System configuration of advertising distribution system 1) Fig. 1 is a diagram showing an example of the system configuration of an advertisement delivery system 1 according to the first embodiment. In Fig. 1, the advertisement delivery system 1 includes a plurality of terminals 10 (terminals 10A, 10B, and 10C) and a plurality of content servers 20 (content servers 20A, 20B, and 20C). The advertisement delivery system 1 also includes an advertisement server 30, a plurality of advertiser servers 40 (advertiser servers 40A and 40B), a history server 50, a management server 60, an SSP 70, and a DSP 80.

[0021] The number of terminals 10, content servers 20, advertisement servers 30, advertiser servers 40, history servers 50, management servers 60, SSPs 70, and DSPs 80 is not limited to the example of FIG.

[0022] A plurality of terminals 10, a plurality of content servers 20, an advertising server 30, a plurality of advertiser servers 40, a history server 50, a management server 60, an SSP 70, and a DSP 80 are connected so as to be able to communicate with each other via a communication line N such as the Internet, a wireless LAN (Local Area Network), and a mobile phone network.

[0023] The terminal 10 is, for example, an information processing device such as a smartphone, a tablet terminal, a PC (Personal Computer), etc. In response to a user's operation, the terminal 10 displays the content acquired from the content server 20 using a web browser or an application.

[0024] The content server 20, the advertisement server 30, the advertiser server 40, and the history server 50 are, for example, information processing devices such as server computers and PCs.

[0025] The content server 20 may be a web server that displays, on the terminal 10, the contents of web pages such as articles and blogs, and the contents of social networking services (SNS).

[0026] In this case, the content server 20 may transmit the specified content to the terminal 10 in response to an acquisition request in which content identification information is specified from, for example, a web browser or an application for SNS or the like of the terminal 10. In this case, the content identification information may be, for example, a uniform resource locator (URL). The acquisition request may also be, for example, a hypertext transfer protocol (HTTP) request. The content server 20 may also return the specified content information to the terminal 10 by including it in an HTML document, which is information on a web page corresponding to the specified URL.

[0027] The advertisement server 30 is a server that distributes advertisements of businesses such as the advertiser server 40 to terminals 10 that access the content server 20, for example, by a method such as real-time bidding (RTB). The advertisement server 30 may be realized by a plurality of servers. Furthermore, the advertisement server 30 may include, for example, servers of businesses that provide ad exchanges that distribute advertisements to ad spaces of an ad network that includes a plurality of SSPs. Furthermore, the advertisement server 30 may include an ad server that distributes advertisements to websites.

[0028] The advertiser server 40 is a server that delivers advertisements to the terminal 10 via the advertisement server 30. The advertiser server 40 may also include, for example, a server operated by the advertiser's business operator or the advertising agency of the business operator.

[0029] The history server 50 is a server that records the history of content reprints, information on advertisements distributed for the content, and the like. The history server 50 may be, for example, a database server operated by a predetermined institution. The history server 50 may also be, for example, a distributed ledger server that records information using a blockchain (distributed ledger). In this case, for example, each process of the distributed ledger server may be executed by a program (DApps: Decentralized Applications) implemented by a smart contract and running on the distributed ledger server.

[0030] The management server 60 is a device that functions as an "OP (Originator Profile) issuing system" that manages various information (CP, CA, SP, PA, etc., which will be described later) relating to the reliability of organizations, advertisements, websites, etc. The management server 60 is operated by a predetermined public certification authority that certifies organizations, advertisements, websites, etc.

[0031] The SSP70 (Supply Side Platform) is a server that handles advertising transactions on behalf of content providers. For example, the SSP70 is a platform for maximizing revenue for content providers who display advertisements. For example, the SSP70 handles RTB transactions with the DSP80 on the advertiser's side on behalf of the content provider.

[0032] The DSP 80 (Demand-Side Platform) is a server that handles advertising transactions on behalf of advertisers. The DSP 80 is, for example, a platform for optimizing the effectiveness of advertisers' advertisements. For example, the DSP 80 handles RTB transactions with the SSP 70 on the content provider side on behalf of advertisers.

[0033] (Hardware configuration of each device) 2 is a diagram showing an example of the hardware configuration of each device included in the advertisement delivery system 1 according to the first embodiment. In the following, the description will be given assuming that each device included in the advertisement delivery system 1 has a common configuration.

[0034] As shown in Figure 2, each device included in the advertising distribution system 1 includes a drive device 100, an auxiliary storage device 102, a memory device 103, a CPU 104, an interface device 105, a display device 106, and an input device 107, all of which are interconnected by a bus B.

[0035] A program that realizes processing in each device included in the advertisement delivery system 1 is provided by a recording medium 101. When the recording medium 101 on which the program is recorded is set in the drive device 100, the program is installed from the recording medium 101 to the auxiliary storage device 102 via the drive device 100. However, the program does not necessarily have to be installed from the recording medium 101, but may be downloaded from another computer via a network. The auxiliary storage device 102 stores the installed program as well as necessary files, data, etc.

[0036] The memory device 103 reads and stores the program from the auxiliary storage device 102 when an instruction to start the program is received. The CPU 104 realizes the functions of each device provided in the advertisement delivery system 1 in accordance with the program stored in the memory device 103. The interface device 105 is used as an interface for connecting to a network. The display device 106 is a display that displays a GUI (Graphical User Interface) or the like according to a program. The input device 107 accepts input of various operation instructions. The input device 107 may include, for example, a microphone that collects voice and a keyboard that accepts input of characters or the like by the user pressing keys.

[0037] Examples of the recording medium 101 include portable recording media such as a CD-ROM, a DVD disk, or a USB memory. Examples of the auxiliary storage device 102 include a hard disk drive (HDD) or a flash memory. Both the recording medium 101 and the auxiliary storage device 102 correspond to computer-readable recording media.

[0038] (Functional configuration of each device) FIG. 3 is a diagram illustrating an example of the functional configuration of each device included in the advertisement delivery system 1 according to the first embodiment.

[0039] The terminal 10 includes a storage unit 11, a reception unit 12, a transmission / reception unit 13, and a control unit 14. Each of these units may be realized by cooperation between one or more programs installed in the terminal 10 and hardware such as a CPU 104 of the terminal 10.

[0040] The storage unit 11 may store, for example, a user profile. The reception unit 12 receives various operations from the user of the terminal 10. The transmission / reception unit 13 transmits and receives data to and from external devices such as the content server 20 and the advertiser server 40. The control unit 14 controls each unit of the terminal 10.

[0041] The content server 20 includes a storage unit 21, a transmission / reception unit 22, a content distribution unit 23, and a control unit 24. Each of these units may be realized by cooperation between one or more programs installed in the content server 20 and hardware such as a CPU of the content server 20.

[0042] The storage unit 21 stores various types of information. The storage unit 21 may store, for example, profiles (e.g., publisher profiles) of content providers (e.g., publishers, bloggers, etc.). The transmission / reception unit 22 transmits and receives data to and from the terminal 10 and external devices such as the advertising server 30. The content distribution unit 23 distributes content to the terminal 10. The control unit 24 controls each unit of the content server 20.

[0043] The advertisement server 30 includes a storage unit 31, a transmission / reception unit 32, and a control unit 33. Each of these units may be realized by cooperation between one or more programs installed in the advertisement server 30 and hardware such as a CPU of the advertisement server 30.

[0044] The memory unit 31 stores various types of information. For example, the memory unit 31 may store a profile (platformer profile) of a business operator (platformer) that provides a platform for distributing advertisements. The transmitter / receiver unit 32 transmits and receives data to and from external devices such as the content server 20 and the advertiser server 40. The control unit 33 controls each unit of the advertisement server 30.

[0045] The advertiser server 40 has a memory unit 41, a transmission / reception unit 42, an advertisement distribution unit 43, and a control unit 44. Each of these units may be realized by cooperation between one or more programs installed on the advertiser server 40 and hardware such as a CPU of the advertiser server 40.

[0046] The memory unit 41 stores various types of information. For example, the memory unit 41 may store a Core Profile (CP) of an advertisement provider (advertiser) that provides advertisements for content. The memory unit 41 may also store a Core Profile (CP) of an advertising company (ad agency) that is an agent for the advertisement. The transmitter / receiver unit 42 transmits and receives data to and from the advertisement server 30 and external devices such as the terminal 10. The advertisement distribution unit 43 distributes advertising content to the terminal 10. The control unit 44 controls each unit of the advertiser server 40.

[0047] The management server 60 includes a storage unit 61, a transmission / reception unit 62, and a control unit 63. Each of these units may be realized by cooperation between one or more programs installed in the advertisement server 30 and hardware such as a CPU of the advertisement server 30.

[0048] The storage unit 61 stores various types of information. The transmission / reception unit 62 transmits and receives data to and from external devices such as the content server 20, the advertisement server 30, and the advertiser server 40. The control unit 63 controls each unit of the management server 60.

[0049] The SSP70 has a storage unit 71, a transmission / reception unit 72, and a control unit 73. Each of these units may be realized by cooperation between one or more programs installed in the SSP70 and hardware such as the CPU of the SSP70. The storage unit 71 stores various types of information. The transmission / reception unit 72 transmits and receives data to and from external devices such as the DSP80. The control unit 73 controls each unit of the SSP70.

[0050] The DSP80 has a storage unit 81, a transmission / reception unit 82, and a control unit 83. Each of these units may be realized by cooperation between one or more programs installed in the DSP80 and hardware such as the CPU of the DSP80. The storage unit 81 stores various types of information. The transmission / reception unit 82 transmits and receives data to and from external devices such as the SSP70. The control unit 83 controls each unit of the DSP80.

[0051] (Examples of various information) Fig. 4A is a diagram showing an example of various types of information handled by the advertisement delivery system 1 according to the first embodiment. Fig. 4B is a diagram showing the relationship between various signature keys handled by the advertisement delivery system 1 according to the first embodiment.

[0052] As shown in (A1) of Figure 4A, the management server 60 issues an OP (Originator Profile)-ID, which is the ID of each organization (advertiser, media company, advertising intermediary business (DSP, SSP), etc.), and registers the organization in the OP issuing system.

[0053] Also, as shown in (A2) of Figure 4A, the management server 60 issues a CP (Core Profile), which is a certificate of the organization profile of each organization (advertiser, media company, advertising intermediary business (DSP, SSP), etc.), and registers it in the OP issuing system.

[0054] Furthermore, as shown in (B1) of Figure 4A, the content server 20 generates, for each piece of article information, an article CA (issued by the content server 20), which is a certificate that can verify that the article information has not been tampered with and is in the state it was in when sent by the sender.

[0055] Furthermore, as shown in (B2) of FIG. 4A, the content server 20 generates a CA Set (CAS) including a list of CAs in the page for each piece of article information.

[0056] As shown in (B7) of FIG. 4A, the content server 20 may store the digitally signed CP and PA obtained from the management server 60 within the server, making them verifiable.

[0057] The content server 20 may be configured not to generate a CAS, but to provide only the article CA to the device to which the article information is delivered. In this case, the device to which the article information is delivered may be configured to verify the reliability of the media company by obtaining the CP and PA of the media company from the management server 60 as necessary.

[0058] 4A(B3), the content server 20 issues a Site Profile (SP), which is a certificate that enables verification of information on the web content site, for each web content site. Note that an SP is issued for each site, so it is not necessary to create one for each piece of content. Furthermore, the SP may not be issued by the content server 20, but rather a signed SP issued by the management server 60 may be placed.

[0059] The content server 20 may be configured not to generate the CP, PA, and CA, but to provide only the CA to the device to which the website is distributed. In this case, the device to which the website is distributed may be configured to verify the reliability of the media company by obtaining the CP and PA of the media company from the management server 60 as needed.

[0060] 4A (B5), the content server 20 transmits to the terminal 10 HTML of distribution information (website, article, etc.) including advertisement tags.

[0061] Furthermore, as shown in (B6) of FIG. 4A, when article information is distributed to the terminal 10, the content server 20 transmits the CAS of the article information to the terminal 10.

[0062] Note that some of the functions of the content server 20 shown in FIG. 4A (for example, generation and management of CAS) may be realized by an external server provided outside the content server 20.

[0063] As shown in (C1) of FIG. 4A, the DSP80, which is a proxy server on the advertiser's side, issues, for each advertisement, an advertisement CA, which is a certificate that can verify that the advertisement has not been tampered with, using digital signature technology. As shown in (C2) of FIG. 4A, the DSP80 acquires, for each advertisement, the CP and PA of the advertiser of that advertisement from the management server 60. As shown in (C3) of FIG. 4A, the DSP80 generates, for each advertisement, an advertisement CA of that advertisement and the CP and PA of the advertiser of that advertisement. As shown in (C4) of FIG. 4A, when distribution information (website, article, etc.) is transmitted to the terminal 10, the DSP80 transmits to the terminal 10 an advertisement HTML including the advertisement CA and the CP and PA of the advertiser.

[0064] 4A (D1), the SSP70, which is a proxy server on the content provider side, attaches information to be used for post-verification by the terminal 10 (for example, the advertiser's OP-ID, advertiser information (domain, etc.), advertisement information, advertisement transaction information (price, etc.), DSP80 information, etc.) to the advertising HTML transmitted from the DSP80 to the terminal 10. Here, the SSP70 may insert the information to be used for post-verification into the advertising HTML transmitted from the DSP80 to the terminal 10, or may insert the information to be used for post-verification into other HTML transmitted from the DSP80 to the terminal 10 (transmitted simultaneously with the advertising HTML).

[0065] 4A (E1), the terminal 10 displays the distribution information (website, article, etc.) and advertisements based on the HTML of the distribution information (website, article, etc.) including the advertisement tag received from the content server 20. Furthermore, as shown in FIG. 4A (E2), the terminal 10 verifies that the distribution information (website, article, etc.) and advertisements have not been tampered with in the state they were sent by the advertiser.

[0066] Also, as shown in (F1) of Figure 4A, in an RTB transaction, the SSP 70 (an example of a "first transaction server") assigns the OP-IDs of the media company and the SSP itself to the bid request, and the DSP 80 (an example of a "second transaction server") assigns the OP-IDs of the advertiser and the DSP itself to the bid request, and both parties confirm each other's OP-ID (or the SOP linked to the OP-ID) before conducting the transaction.

[0067] 4A (G1), the advertiser provides advertisements to the DSP 80 from a terminal, etc. The advertiser server 40 also allows the DSP 80 to manage the advertiser's ID, private key, etc.

[0068] The advertisement server 30 has a function of transmitting advertisement HTML, but in the example shown in FIG. 4A, this function is provided to the DSP 80, and therefore the advertisement server 30 is not shown.

[0069] Here, each piece of information shown in FIG. 4A will be explained.

[0070] OP-ID An OP-ID (Originator Profile - Identifier) ​​is organizational identification information used to uniquely identify organizations such as advertisers, media companies, and advertising intermediaries (DSPs, SSPs) throughout RTB transactions. An OP-ID is issued, for example, in response to an organization's request by the OP Technology Research Association (OP CIP), the operator of the management server 60 (an example of a "prescribed certification body"). An OP-ID is issued only after OP CIP confirms that the requesting organization complies with the "Originator Profile Charter (OP Charter)," which defines the OP's basic principles and operational system. When issuing an OP-ID, OP CIP considers the following items and examines whether compliance with this Charter can be reasonably demonstrated. Therefore, an organization that possesses an OP-ID can be considered highly reliable. "Reliability" here refers to the information provider's adherence to its own information transmission policy as a responsible information provider in a democratic society and its governance to implement the policy.

[0071] ·Item 1 Whether or not there is an information dissemination policy as referred to in Article 2.

[0072] ·No. 2: Whether or not there is governance that is appropriate to the actual circumstances of the industry and business type.

[0073] Item 3: The nature of the industry association to which the person belongs (or, if certified, the nature of that certification). Or, whether the person is an information disseminator that is in line with the basic principles set forth in Article 1 to the same extent as a person who belongs to an industry association that has been recognized as qualified.

[0074] ·CP CP (Core Profile) is a verifiable certificate issued using digital signature technology that includes the OP-ID and public key of organizations such as advertisers, media companies, and advertising intermediaries (DSPs, SSPs).

[0075] PA (Profile Annotation) These include verifiable certificates issued using digital signature technology that enable a third party to verify the existence of an organization, including basic information such as the organization's name and address, and verifiable authentication certificates issued using digital signature technology that indicate the organization's membership in a socially trusted industry association such as the Japan Business Federation (Keidanren) or that a third-party certification body such as JICDAQ (Japan International Cooperation Agency) has a system for implementing ad fraud countermeasures. The contents of the PA are created by the organization itself. For example, upon request from the organization, the industry association to which the organization belongs verifies the contents, and the operator of the management server 60 issues the PA based on the verification results. In other words, since PAs are issued to organizations by socially trusted industry associations or certification bodies reviewed and approved by the OP CIP, organizations that receive PAs can be determined to have the "information reliability" defined above. The attribute information included in the PA may also include, for example, an evaluation rank of the organization's reliability, as an example of information that contributes to an objective judgment that further enhances the "reliability" defined above. The evaluation rank is determined by a public certification body and indicates the degree of trustworthiness of an organization in stages. This allows a PA verifier or the like to determine the degree of trustworthiness of an organization based on the evaluation rank of the attribute information and perform processing according to the degree of trustworthiness. Another example of information that contributes to determining trustworthiness may include, for example, a determination result of whether or not an organization is trustworthy (i.e., a binary value of "yes" or "no"). This allows a PA verifier or the like to determine whether or not an organization is trustworthy and perform processing according to the presence or absence of trustworthy.

[0076] The attribute information included in the PA may include multiple Annotation Types, which are predefined classification names such as the organization's country or corporate type. (For example, for ABC Bank, whose headquarters is located in Japan, this may include op.annotation_type.country.jp, indicating that the organization is confirmed to have a presence in Japan, and op.annotation_type.company_type.bank, indicating that the bank is confirmed to have a presence in Japan.) These may be verified to have been confirmed or authenticated by a third party. A mapping table (see Figure 4C) that can reference icons (such as country and corporate type) representing the meaning of the Annotation Type, which is required when displaying this PA information in information display software such as a browser, may be built into the browser or placed on an arbitrary Internet server. This table must be secured to prevent rewriting by third parties other than the PA-owning organization. When information display software such as a browser or smartphone app obtains icon data from the PA through the mapping table, the icon representing the country or corporate type indicated by the Annotation Type may be displayed in the software's display space, such as the browser URL bar. However, if it is not possible to verify whether third-party authentication has been successful, an icon indicating that verification has not been successful will be displayed. When the mouse is placed over this icon, a speech bubble will be displayed detailing the meaning of the icon, and it may also be displayed here to indicate whether or not the above verification has been successful.

[0077] FIG. 4C is a diagram showing an example of the display of icons included in PAs by the advertising delivery system 1 according to the first embodiment. For example, as shown in FIG. 4C, visually displaying these icons in an appropriate display space in information display software, such as a browser URL bar, can be useful in identifying fake sites. For example, when a user accesses a fake site impersonating a well-known Japanese or American bank, even if the site's design can be replicated, it is impossible to display an icon in a browser or app without third-party authentication of the country or corporate type. Therefore, the user can use whether the displayed icons match the content of the site to identify the fake site. It is assumed that the display of the icons cannot be handled by third parties other than the software developer (such as information providers such as websites).

[0078] Advertising CA An advertising CA (Content Attestation) is a verifiable certificate that utilizes digital signature technology to prove that an advertisement is in the same condition as the advertiser intended to deliver it and has not been tampered with. An advertising CA is data signed by the CP holder that contains information about web content, the target content's identity, and verification methods. A site CA also contains a CA-ID, which is identification information used to uniquely identify an advertisement. The advertising CA is included in a hidden area of ​​the ad HTML, allowing viewers of web content sites to verify that the advertisement and advertiser are authentic. An advertising CA is created by the advertiser or its agency, and is issued by the advertiser, agency, or DSP through digital signature processing. In other words, an advertising CA issued by a content attestation certificate (CA) can be considered a trustworthy advertisement when verified together with the advertiser's content attestation certificate (CP) and privacy attestation (PA), which certify the advertiser's trustworthiness.

[0079] ·Article CA An Article CA (Content Attestation) is a verifiable certificate issued using digital signature technology that proves that an article is in the same state as the sender intended to deliver it and has not been tampered with. An Article CA includes the OP-ID of the article provider (article source), a CA-ID that identifies the article, and attribute information for the article. An Article CA allows article viewers and others to verify that the article and article provider are correct. An Article CA is created, signed, and issued by the article provider itself. In other words, because an Article CA includes the OP-ID of the article provider that proves its trustworthiness, an article for which an Article CA has been issued can be said to be a trustworthy article.

[0080] The CP, SP, advertising CA, article CA, and PA all conform to the VC (Verifiable Credential) data model (an example of an IHV (Issuer Holder Verifier) ​​data model), which eliminates the need to query the management server 60 or the like each time verification is performed, thereby preventing problems such as increased server load and privacy issues. As long as each of the CP, SP, advertising CA, article CA, and PA conforms to the IHV data model, they are not limited to those conforming to the VC data model, and may also conform to a data model other than the VC, such as a data model similar to the VC data model. The IHV is a verification model involving an issuer, a holder, and a verifier.

[0081] Furthermore, the term "WEB content" refers to all digital content distributed from the content server 20. For example, the WEB content includes a WEB page, an article on a WEB page, an image, a video, and the like.

[0082] (Example of ad delivery process procedure) FIG. 5 is a sequence diagram showing an example of the procedure of the advertisement delivery process by the advertisement delivery system 1 according to the first embodiment.

[0083] <Prerequisites> First, the prerequisite processing (steps S1 to S2) will be described.

[0084] In the prerequisite processing, first, the management server 60 registers an OP-ID and issues a CP, SP, and PA to each organization (advertiser, media company, advertising intermediary business (DSP, SSP), etc.) (step S1). As shown in FIG. 4B, the CP includes a certificate signed with the OP CIP's signature key to prove that the organization is the CP issuer, the public key of each organization, and reference information for the OP CIP's public key. The SP includes a certificate signed with the organization's signature key to prove that the site belongs to that organization, and reference information for the public key. The PA includes a certificate signed with a third-party signature key to prove that the organization belongs to the issuing organization, and reference information for the public key.

[0085] Next, the content server 20, while holding the CP, SP, and PA, generates a CA, which is a verifiable certificate that indicates that the content has not been tampered with (step S2). As shown in Fig. 4B, the CA includes the signature of the content issuer and reference information to the issuer's public key included in the CP to prove that the content belongs to that issuer.

[0086] <Pre-processing> Next, the pre-processing (steps S10 to S15) will be described.

[0087] In the pre-processing, first, the advertiser requests the DSP 80 to place an advertisement and to handle the OP (Originator Profile) (step S10).

[0088] Next, DSP 80 generates an advertisement CA for the advertisement and the CP and PA of the advertiser of the advertisement (step S11). Note that in step S11, as in step S2, the advertisement CA includes sufficient reference information to find the issuer's public key to verify that the content belongs to the issuer.

[0089] Next, the DSP 80 requests the advertisement CA of the advertisement and the CP and PA of the advertiser of the advertisement from the content server 20 (step S12). In response to this request, the content server 20 transmits the advertisement CA of the advertisement and the CP and PA of the advertiser of the advertisement to the advertiser server 40 (DSP) (step S13).

[0090] Next, the DSP 80 verifies the advertisement CA of the advertisement received from the content server 20 and the CP and PA of the advertiser of the advertisement (step S14).

[0091] For example, DSP80 obtains a public key for CP verification from the management server 60 (i.e., a certification authority) and uses the public key for CP verification to verify the signatures of the CP, PA, CA, and SP of the media company that provides the website included in the OP, thereby confirming the trustworthiness of the media company that provides the website.

[0092] The DSP 80 may acquire the public key for verifying the CP from the management server 60 in advance and store it in a memory, etc. In this case, when verifying the CP, PA, CA, and SP, the DSP 80 can acquire the public keys for verifying the CP, PA, CA, and SP by reading them from the memory, etc.

[0093] Furthermore, for example, DSP80 obtains a public key for CA verification from the verified CP, and uses the public key for CA verification to verify the CA signature of the website included in the CA, thereby confirming that the website has not been tampered with.

[0094] Note that the DSP80 may obtain the public key for CA verification from the management server 60 (i.e., the certification authority).

[0095] Next, the DSP80 updates the list of OP-IDs, which is a list of correct combinations of the operator (OP-ID) of the website with the website (step S15). Note that in step S14, if one or both of the verification of the signatures of the CP and PA of the advertiser and the verification of the signature of the SP of the website fail, the DSP80 may not update the list of OP-IDs (i.e., not include the combination with the operator (OP-ID) of the website).

[0096] Also, in step S14, the DSP80 may check the description content of the attribute information included in the PA of the operator of the website, and based on the description content of the attribute information, determine whether the CP and OP-ID of the operator of the website are trustworthy. In this case, when the DSP80 determines that the CP and OP-ID of the operator of the website are trustworthy, it may update the list of OP-IDs, and when it determines that they are not trustworthy, it may not update the list of OP-IDs.

[0097] Through the above preprocessing, the DSP80 can verify whether the combination of the website and the operator of the website is correct before the RTB transaction process is performed. That is, through the above preprocessing, it is no longer necessary to perform the same verification in the RTB transaction process, so the processing load related to the RTB transaction process can be reduced.

[0098] <RTB Transaction Process> Subsequently, the RTB transaction process (steps S21 to S32) will be described.

[0099] In the RTB transaction process, first, the terminal 10 accesses an arbitrary website (step S21). Specifically, the transmitter / receiver 13 of the terminal 10 transmits a request to acquire web content provided by a specific media company (i.e., web content arbitrarily specified by the viewer) to the content server 20.

[0100] Next, the transmitting / receiving unit 22 of the content server 20 transmits an advertisement request for the web content to the SSP 70 (step S22).

[0101] Next, the transmitting / receiving unit 72 of the SSP 70 transmits a bid request for an advertisement for the web content to the DSP 80 based on the information received from the content server 20 (step S23). At this time, the transmitting / receiving unit 72 of the SSP 70 includes in the bid request the OP-ID of the media company that provides the web content. At this time, the transmitting / receiving unit 72 of the SSP 70 may also include in the bid request the CP of the web content and the CA of the web content.

[0102] For example, the SSP 70 may determine whether or not to allow the DSP 80 to provide advertisements for web content based on the CP of the web content provider. This allows the operator of the DSP 80 to, for example, not provide advertisements for content provided by an operator that does not have a predetermined CP certified by a third-party organization or the like.

[0103] In this case, the SSP70 may, for example, determine whether or not the web content includes a CP and PA, and if the CP and PA are not received from the content server 20, refuse to provide the advertisement by the DSP80. The SSP70 may also, for example, determine whether or not the PA includes information on predetermined items such as an address, and if the information on the predetermined items is not included, refuse to provide the advertisement by the DSP80. This makes it possible to prevent advertisements from being provided if the content provider is not verified. Therefore, it is believed that advertisements will be reduced from being provided to media such as websites and social networking sites that provide inappropriate content, such as fake news, content that infringes on other people's copyrights, and content that includes personal information.

[0104] Furthermore, the SSP70 may determine whether to permit the DSP80 to provide an advertisement for the web content based on, for example, a CA indicating that the web content has not been tampered with. This allows the operator of the DSP80 to specify in advance to the SSP70 the attributes, etc., of the content for which the advertisement is to be provided. In this case, for example, the SSP70 may pre-register the CA conditions for the web content for which bid requests are accepted, which are specified by the operator of the DSP80. The SSP70 may then determine whether information included in the CA indicating that the web content has not been tampered with matches the conditions specified by the operator of the DSP80. In this case, the SSP70 may determine, for example, whether the attributes, etc., of the web content included in the CA match the attributes, etc., of the web content specified by the operator of the DSP80, and may refuse to provide the advertisement by the DSP80 if they do not match.

[0105] Next, the control unit 83 of the DSP 80 checks whether the bid request received from the SSP 70 includes the OP-ID of the media company (step S24).

[0106] In addition, the control unit 83 of the DSP80 checks whether the OP-ID of the media company included in the bid request received from the SSP70 matches the list of OP-IDs on the site (i.e., whether it is a trustworthy OP-ID) (step S25).

[0107] Here, similar to the processing in the SSP70, for example, the DSP80 may determine whether to permit the provision of an advertisement for the web content based on a PA indicating various attribute information authenticated by a third party of the web content provider, a CA indicating that the web content has not been tampered with, and conditions preset by the operator of the DSP80. Then, only when it is determined that the provision of an advertisement for the web content is permitted, the DSP80 may return (transmit) a response to the bid request for the advertisement for the web content to the SSP70. This allows the operator of the DSP80 to determine whether to permit the provision of an advertisement on the DSP80 side as well. Note that the determination of whether to permit the provision of an advertisement may be made by only one of the SSP70 and the DSP80.

[0108] Furthermore, the DSP80 may determine a bid amount for an advertisement for the web content based on, for example, a PA indicating various attribute information of the web content authenticated by a third party, and a CA indicating that the web content has not been tampered with. In this case, the DSP80 may determine the bid amount based on, for example, information about the operator of the content server 20, the attributes of the web content, and the type of method for generating the web content. In this case, the DSP80 may determine a relatively high bid amount if, for example, the operator of the content server 20 is well-known, the attributes of the web content are business news, and the type of method for generating the web content is interviews. This allows, for example, the operator of the DSP80 to support the publication of content that is highly appropriate, highly specialized, and is considered to require relatively much effort to generate.

[0109] In addition, the DSP80 may determine the advertisement to be provided for the web content based on, for example, a PA indicating various attribute information of the web content authenticated by a third party, and a CA indicating that the web content has not been tampered with.

[0110] Next, the transmitting / receiving unit 82 of the DSP 80 transmits a bidding request (bid response) to the SSP 70 (step S26). At this time, the transmitting / receiving unit 82 of the DSP 80 includes the OP-ID of the advertiser who is the bidder in the bidding request.

[0111] Next, the control unit 83 of the SSP 70 checks whether the bidding request received from the DSP 80 includes the OP-ID of the advertiser who is the bidder (step S27).

[0112] Then, the control unit 83 of the SSP70 determines a successful bidder (i.e., a winner) from among the multiple bidders based on the bidding request received from the DSP80 (step S28). Here, the control unit 83 of the SSP70 may determine, for example, the advertiser with the highest bid amount as the successful bidder. Furthermore, the control unit 83 of the SSP70 may determine the successful bid amount (advertising fee) to be collected from the business operator of the DSP80 determined as the successful bidder based, for example, on the highest bid amount or the second highest bid amount.

[0113] Next, the transmitter / receiver 72 of the SSP 70 transmits a winner determination notification to the DSP 80 to notify that the SSP 70 is the successful bidder (that is, the winner) (step S29).

[0114] In response to receiving the winner determination notification from the advertisement server 30 (SSP), the transmitting / receiving unit 42 of the DSP 80 transmits the HTML of the advertisement, the CA of the advertisement content, and the advertiser CP to the SSP 70 (step S30).

[0115] Then, the control unit 73 of the SSP 70 attaches information to be used for post-verification (for example, the OP-ID of the advertiser) to the HTML of the advertisement received from the DSP 80 (step S31). Here, the information to be attached to the HTML of the advertisement is not limited to the OP-ID of the advertiser, and may include other information as long as it can be verified in the post-verification process described later.

[0116] Next, the transmitting / receiving unit 72 of the SSP 70 transmits the HTML of the advertisement to which the information used for post-verification is attached, and the CA of the advertisement content and the advertiser CP received from the DSP 80 to the terminal 10 of the viewer (step S32).

[0117] <Post-processing> Next, the post-processing (steps S41 to S42) will be described.

[0118] In the post-processing, first, the control unit 14 of the terminal 10 verifies the CA of the advertising content received from the SSP 70 and the advertiser CP (step S41).

[0119] For example, the control unit 14 of the terminal 10 obtains a public key for CP verification from the management server 60 (i.e., a certification authority), and uses the public key for CP verification to verify the signatures of the advertiser's CP and PA contained in the advertising CP and PA, thereby confirming the trustworthiness of the advertiser.

[0120] The terminal 10 may acquire the public key for CP verification from the management server 60 in advance and store it in a memory, etc. In this case, the control unit 14 of the terminal 10 can acquire the public key for CP and PA verification by reading it from the memory, etc., when verifying the CP and PA.

[0121] Furthermore, for example, the control unit 14 of the terminal 10 obtains a public key for CA verification from the verified CP and PA, and uses the public key for CA verification to verify the CA signature of the advertisement included in the CA, thereby confirming the authenticity of the advertisement.

[0122] The control unit 14 of the terminal 10 may acquire the public key for CA verification from the management server 60 (that is, the certification authority).

[0123] Next, the control unit 14 of the terminal 10 checks whether the advertiser's OP-ID included in the information used for post-verification attached to the HTML of the advertisement received from the SSP 70 matches the advertiser's OP-ID included in the CA of the advertisement content and the advertiser's CP (step S42). As a result, the control unit 14 of the terminal 10 checks whether the advertiser is highly reliable.

[0124] The above post-processing allows the terminal 10 to verify whether the advertisement and advertiser are trustworthy after the RTB transaction processing has been completed. In other words, the above post-processing eliminates the need to perform similar verification during the RTB transaction processing, thereby reducing the processing load related to the RTB transaction processing. Note that the information to be verified in the post-processing is not limited to the advertiser's OP-ID, and may include other information.

[0125] Next, the control unit 14 of the terminal 10 displays the web content and the advertisement on the screen (step S43).

[0126] Here, the control unit 14 of the terminal 10 may display information indicating the reliability of at least one of the website, the media company that provides the website, the advertiser, and the advertisement.

[0127] In addition, the control unit 14 of the terminal 10 may display information contained in the CP, PA, CA, and SP for at least one of the website, the media company that provides the website, the advertiser, and the advertisement, for example, when a specified operation is performed by the user.

[0128] For example, the control unit 14 of the terminal 10 may display the name, address, email address, evaluation score, etc., of the PA of the media company that provides the website and the information contained in the PA of the advertiser.

[0129] For example, the control unit 14 of the terminal 10 may display, as information included in the CA of the advertisement, for example, the OP-ID of the advertiser, the title, description, thumbnail, etc. of the advertisement.

[0130] Furthermore, for example, the control unit 14 of the terminal 10 may display, as information included in the SP of the website, the OP-ID of the website operator, the name of the website, a description, the operator logo, and the like.

[0131] In addition, in step S41 (verification process of the advertisement profile pair), if verification of one or both of the signature of the advertiser's CP and the signature of the advertisement's CA fails, the terminal 10 may perform a predetermined error process (for example, not displaying the advertisement, displaying a message indicating that the advertisement is unreliable, etc.).

[0132] Furthermore, in step S42 (OP-ID matching confirmation process), if the advertiser's OP-ID inserted in the HTML of the advertisement does not match the advertiser's OP-ID included in the CA of the advertisement content and the advertiser's CP, the terminal 10 may perform a predetermined error process (for example, not displaying the advertisement, displaying a message indicating that the advertiser is not trustworthy, etc.).

[0133] Furthermore, for example, as the above-mentioned predetermined error processing, if the advertisement is not displayed, the control unit 14 of the terminal 10 may notify a predetermined information processing device (e.g., SSP70, DSP80, other servers, etc.) that the advertisement transaction will be invalidated so that the advertiser will not be charged.

[0134] Furthermore, in the above example, the control unit 14 of the terminal 10 performs a process (step S43) of displaying the web content and advertisements after step S41 (verification process of the CP and CA) and step S42 (process of confirming the match of the OP-ID), but this is not limited to this, and for example, the process of displaying the web content and advertisements may be performed before steps S41 and S42.

[0135] In the advertisement delivery system 1, the history server 50 may store the history information of the RTB transactions described above. In this case, the history information may include the results of execution of verification processes for the OP-ID, CP, PA, CA, SP, etc. This allows the advertisement delivery system 1 to prove, for example, whether a correct advertisement was delivered from a correct advertiser, based on the transaction information stored in the history server 50.

[0136] Second Embodiment Next, a second embodiment will be described. In the second embodiment, an example will be described in which OP-IDs, CPs, and PAs are issued to organizations such as companies, local governments, media, and platforms (for example, search engines, social media, etc.), and article information (for example, a specific article on a website, etc.) distributed from these organizations includes the distributor's OP-ID, the distributor's CP and PA, and the article's CA, etc., thereby confirming the authenticity of the article and the distributor of the article and preventing the spread of fake news, etc.

[0137] (Examples of various information) 6 is a diagram showing an example of various information handled by the article distribution system 2 according to the second embodiment. As shown in FIG. 6, the article distribution system 2 according to the second embodiment includes a management server 60, a content server 20, a redistribution platform 90, and a terminal 10.

[0138] The content server 20 is a server operated by an organization that distributes articles. In response to an article acquisition request from the terminal 10 or the redistribution platform 90, the content server 20 distributes the article to the terminal 10 or the redistribution platform 90.

[0139] The redistribution platform 90 is a search engine, social media, or the like that acquires articles from the content server 20 and redistributes the articles to the terminal 10. For example, the redistribution platform 90 is realized by one or more servers.

[0140] The terminal 10 is a device used by a viewer of an article. The terminal 10 makes an article acquisition request to the content server 20 or the redistribution platform 90, receives the article distributed or redistributed from the content server 20 or the redistribution platform 90, and displays the article.

[0141] The management server 60 is the same as in the first embodiment, and functions as an "OP (Originator Profile) registry" that manages various information (OP-ID, CP, PA, SP, CA) related to the reliability of organizations (companies, local governments, media, platforms, etc.), articles, etc. The management server 60 is operated by a public, predetermined certification body that certifies organizations, articles, etc.

[0142] As shown in (A1) of FIG. 6, the management server 60 issues an Originator Profile (OP)-ID, which is the ID of each organization (company, local government, media, platform, etc.), and registers the organization in the system.

[0143] As shown in (A2) of FIG. 6, the management server 60 issues CP and PA, which are certificates of the organization profile of each organization (company, local government, media, platform, etc.), and registers them in the system.

[0144] For example, in response to a request from an organization that operates the content server 20 (see (B1) in FIG. 6), the management server 60 issues an OP-ID and a CP for that organization.

[0145] Furthermore, for example, the management server 60 issues the OP-ID and CP of the re-distribution platform 90 in response to a request from the re-distribution platform 90 (see (C1) in FIG. 6).

[0146] Furthermore, as shown in (B2) of FIG. 6, the content server 20 issues, for each piece of article information, an article CA, which is a certificate that enables verification that the article information has not been tampered with.

[0147] Furthermore, as shown in (B3) of Figure 6, the content server 20 generates, for each piece of article information, an article CA (issued by the content server 20), which is a certificate that can verify that the article information has not been tampered with, and a CP (issued by the management server 60) of the organization that distributes the article information.

[0148] 6(B4), the content server 20 distributes article information (HTML) to the terminal 10 or the redistribution platform 90 in response to a request for an article from the terminal 10 or the redistribution platform 90. At this time, the content server 20 includes the article CA and CP of the article information in the article information.

[0149] Note that some of the functions of the content server 20 shown in FIG. 6 (for example, generation and management of article CAs) may be realized by a device provided outside the content server 20 (for example, a CMS (Content Management System)).

[0150] 6(C2), the redistribution platform 90 receives article information from the content server 20 by searching for the article information in response to a request from the terminal 10. Furthermore, as shown in FIG. 6(C3), the redistribution platform 90 verifies the article CA and CP included in the article information received from the content server 20.

[0151] For example, the control unit of the redistribution platform 90 can obtain a public key for CP verification from the management server 60 (i.e., a certification authority) and use the public key for CP verification to verify the signatures of the CA and PA of the organization that distributed the article information contained in the article CA, thereby confirming the reliability of the organization that distributed the article information.

[0152] The re-distribution platform 90 may acquire the public key for CP verification from the management server 60 in advance and store it in a memory or the like. In this case, the control unit of the re-distribution platform 90 can acquire the public key for CP verification by reading it from the memory or the like during CP verification.

[0153] Furthermore, for example, the control unit of the redistribution platform 90 obtains a public key for CA verification from the verified CP, and uses the public key for CA verification to verify the signature of the article CA included in the article CP and CA, thereby confirming the authenticity of the article.

[0154] The control unit of the re-distribution platform 90 may acquire the public key for CA verification from the management server 60 (that is, the certification authority).

[0155] 6(C4), the redistribution platform 90 redistributes the article information received from the content server 20 to the terminal 10. At this time, as shown in FIG. 6(C5), the redistribution platform 90 can filter the article, issue warnings, etc., depending on the verification results of the article CA and CP. At this time, the redistribution platform 90 may include the CP of the redistribution platform 90 in the article to be redistributed to the terminal 10.

[0156] 6(D1), the terminal 10 displays the article information based on the HTML of the article information received from the content server 20 or the redistribution platform 90. Furthermore, as shown in FIG. 6(D2), the terminal 10 verifies the article CA and CP included in the article information received from the content server 20 or the redistribution platform 90.

[0157] For example, the control unit 14 of the terminal 10 obtains a public key for CP verification from the management server 60 (i.e., a certification authority), and uses the public key for CP verification to verify the signature of the article CA and the CP of the organization that distributed the article information included in the CP, thereby confirming the trustworthiness of the organization that distributed the article information.

[0158] The terminal 10 may acquire the public key for CP verification from the management server 60 in advance and store it in a memory or the like. In this case, the control unit 14 of the terminal 10 can acquire the public key for CP verification by reading it from the memory or the like during CP verification.

[0159] Furthermore, for example, the control unit 14 of the terminal 10 obtains a public key for CA verification from the verified CP, and uses the public key for CA verification to verify the signature of the article CA and the article CA included in the CP, thereby confirming the authenticity of the article.

[0160] The control unit 14 of the terminal 10 may acquire the public key for CA verification from the management server 60 (that is, the certification authority).

[0161] As described above, the article distribution system 2 according to the second embodiment can include, for articles distributed from the content server 20 to the terminal 10, the CP and PA of the article distributor certified by a predetermined public certification organization, and the CA of the article certified not to have been tampered with by the article distributor. This allows the article distribution system 2 according to the second embodiment to confirm the reliability of the article and the article distributor in the terminal 10 that receives the article. Then, the terminal 10 can perform processing according to the confirmation results of the reliability of the article and the article distributor.

[0162] For example, the terminal 10 can confirm that the distributor of an article is reliable by having the CP and PA of the distributor of the article attached to the article. Alternatively, for example, the terminal 10 can confirm that the distributor of an article is reliable by verifying the CP and PA of the distributor of the article attached to the article.

[0163] Furthermore, for example, the terminal 10 can confirm that an article has not been tampered with because the article's CA has been assigned to the article. Alternatively, for example, the terminal 10 can confirm that an article has not been tampered with by verifying the article's CA assigned to the article.

[0164] Furthermore, for example, if an article received from the content server 20 or the redistribution platform 90 does not have the CP and PA of the article distributor and / or the CA of the article, or if the terminal 10 fails to verify the CP and PA of the article distributor and / or the CA of the article, it may perform a predetermined error processing (for example, not displaying the article, displaying a message indicating that the article is unreliable, etc.).

[0165] In the article distribution system 2 according to the second embodiment, the terminal 10 may confirm the reliability of the redistribution platform 90 by using the CP and PA of the redistribution platform 90.

[0166] For example, when receiving an article from the redistribution platform 90, the terminal 10 may check and verify the CP and PA of the redistribution platform 90 that are assigned to the article. In this case, if the CP and PA of the redistribution platform 90 are not assigned to the article received from the redistribution platform 90, or if the terminal 10 fails to verify the CP and PA of the redistribution platform 90, the terminal 10 may perform predetermined error processing (for example, not displaying the article, displaying a message indicating that the CP of the redistribution platform 90 is unreliable, etc.).

[0167] Furthermore, for example, when the content server 20 receives a request for an article from the redistribution platform 90, the content server 20 may check and verify the CP and PA of the redistribution platform 90 that are attached to the request for the article. In this case, if the CP and PA of the redistribution platform 90 are not attached to the request for the article received from the redistribution platform 90, or if the content server 20 fails to verify the CP and PA of the redistribution platform 90, the content server 20 may perform a predetermined error process (for example, not providing the article).

[0168] In the article distribution system 2 according to the second embodiment, the redistribution platform 90 may perform processing to confirm that the article has not been tampered with and the reliability of the article distributor, similar to the terminal 10.

[0169] For example, if an article received from the content server 20 does not have the CP, PA of the article distributor and / or the CA of the article, or if verification of the CP, PA of the article distributor and / or the CA of the article fails, the redistribution platform 90 may perform a predetermined error handling process (for example, not redistributing the article to the terminal 10, warning the terminal 10 that the article is unreliable, etc.).

[0170] Furthermore, in the article distribution system 2 according to the second embodiment, a history server 50 may be provided as in the first embodiment, and the history server 50 may store distribution history information of articles from the content server 20, distribution history information of articles from the redistribution platform 90, etc. In this case, the distribution history information of an article may include information related to the article, such as the OP-ID, CP, PA, CA, SP, distributor, distribution destination, distribution date and time, etc. This allows the article distribution system 2 to trace the article distributor (content server 20), intermediary (redistribution platform 90), and recipient (terminal 10) using this distribution history information, for example.

[0171] Third Embodiment Next, a third embodiment will be described. In the third embodiment, in a content providing system 3 that provides web content to web users, the web content is given a CP of the content provider, a PA which is a certificate issued using digital signature technology that can verify organizational information and attribute information (authentication, permission, authorization, etc.) certified by an industry group, and a CA which is a certificate issued using digital signature technology that can verify that the content has not been tampered with, and these CP, PA, and CA are used for a specific service associated with the web content (for example, a service that provides points), thereby improving the service.

[0172] (An example of a procedure for providing a service by the content providing system 3) FIG. 7 is a diagram for explaining an example of a service providing procedure by the content providing system 3 according to the third embodiment.

[0173] 7, the service providing server 320 is operated by a service provider and is a server of a publisher, platform, or the like that provides predetermined web services to web users. For example, the service providing server 320 is realized by one or more servers.

[0174] First, it is assumed that each of the parties involved (web users, web browser vendors, service providers, OP operating companies, and third-party organizations entrusted with the use of OP) have agreed to the terms of use of OP data (CP, PA, CA, SP).

[0175] First, as shown in FIG. 7(1), a web user uses a terminal 310 to entrust the use of OP data to an entrustment server 330 (such as a point platform) operated by a third-party organization to which the use of OP data is entrusted.

[0176] 7(2), the web user accesses the OP-implemented website 340 of the content server (not shown) from the terminal 310 and acquires the web content, the CP and PA of the web content provider, and the CA of the web content. In the web content acquired from the OP-implemented website 340, a CP and CA are set for each block such as an article, a photo, a video, etc.

[0177] Next, as shown in (3) of Fig. 7, the WEB browser 310A of the terminal 310 records the multiple CPs, PAs, and CAs set for each block in the WEB content acquired in (2) of Fig. 7 in a browser area of ​​a hard disk provided in the terminal 310 as browsing history information of the WEB content (WEB page, part of an article on a WEB page, image, video, etc.) by the WEB user. Here, the terminal 310 may record the multiple CPs, PAs, and CAs in the entrusted server 330 as browsing history information of the WEB content (WEB page, part of an article on a WEB page, image, video, etc.) by the WEB user.

[0178] Next, as shown in FIG. 7(4), the WEB user accesses the service providing server 320 using a terminal 310 (for example, a PC, a smartphone, or the like) to use the desired WEB service.

[0179] Next, as shown in (5) of FIG. 7, the service providing server 320 transmits a request to use OP data (CP, PA, CA, SP) for improving the service to the terminal 310 used by the web user.

[0180] Next, as shown in (6) of Figure 7, the WEB browser 310A of the terminal 310 notifies the WEB user of the request to use the OP data (CP, PA, CA, SP), and then records the request to use the OP data (CP, PA, CA, SP) in the entrusted server 330.

[0181] Next, as shown in (7) of Figure 7, the entrusted server 330 presents the terms of use of the OP data (CP, PA, CA, SP) to the service provider and obtains their agreement, and then permits the use of the OP data (CP, PA, CA, SP).

[0182] Next, as shown in (8) of FIG. 7, the service providing server 320 provides a service using the OP data (CP, PA, CA, SP) to the terminal 310 used by the Web user.

[0183] Next, as shown in (9) of FIG. 7, the entrustment server 330 charges the wallet application of the terminal 310 with the value of points or the like after deducting a handling fee based on the terms of use.

[0184] Next, as shown in (10) of FIG. 7, the entrustment server 330 pays the OP operating company a management fee for the OP data.

[0185] As described above, according to the content providing system 3 of the third embodiment, the reliability of the web content acquired by the web user can be increased by assigning OP data (CP, PA, CA, SP), etc. to the web content acquired by the web user.

[0186] Furthermore, according to the content providing system 3 of the third embodiment, multiple OP profile sets previously acquired by the terminal 310 from the OP-implemented website 340 can be recorded in the terminal 310, the entrustment server 330, etc. as browsing history information of web content (web pages, articles, images, videos, etc.) by the web user. The terminal 310, the entrustment server 330, etc. can then analyze the browsing history information of the web content to generate OP user information indicating the user's hobbies, preferences, attributes, etc. In this case, for example, the terminal 310 or the entrustment server 330 may provide the OP user information to the service providing server 320 automatically or in accordance with an instruction from the web user, and the service providing server 320 may narrow down the services to be provided to the web user based on the provided OP user information, thereby providing appropriate services to the web user. Note that the OP user information provided to the service providing server 320 may be automatically generated by the terminal 310, the entrustment server 330, etc. through an analysis process, or may be manually generated by the web user operating the terminal 310.

[0187] The content providing system 3 according to the third embodiment may be configured without the consignment server 330. In this case, the processing that is to be performed between the consignment server 330 and the service providing server 320 may be performed between the terminal 310 (WEB user) and the service providing server 320.

[0188] Furthermore, in the content providing system 3 according to the third embodiment, the management server 60 issues an OP-ID, CP, and PA to the entrustment server 330 (third party organization), and when processing is performed between the entrustment server 330 and the service providing server 320, the reliability of the entrustment server 330 (third party organization) may be determined on the service providing server 320 side. In this case, when processing is performed between the terminal 310 (WEB user) and the entrustment server 330 (third party organization), the reliability of the entrustment server 330 (third party organization) may also be determined on the terminal 310 (WEB user) side.

[0189] [Fourth embodiment] Next, a fourth embodiment will be described. In the fourth embodiment, an example will be described in which an OP-ID, CP, and PA are issued to an organization (such as a company, local government, or media outlet) that distributes articles and to the generation AI company in a generation AI system, and a CA, which is a certificate issued using digital signature technology that makes it possible to verify that an article has not been tampered with, is granted to article information (i.e., training data) distributed by the organization and learned by the generation AI company, thereby increasing the reliability of the article distributor, the generation AI company, and the training data.

[0190] (Examples of various information) 8 is a diagram showing an example of various information handled by the generation AI system 4 according to the fourth embodiment. As shown in FIG. 8, the generation AI system 4 according to the fourth embodiment includes a plurality of organization servers 200, generation AI servers 210-1, 210-2, and 210-3, a terminal 220, and a CAL server 230.

[0191] The generation AI system 4 of the fourth embodiment has a management server 60 similar to that of the first and second embodiments, but since there are no changes from the first and second embodiments, the illustration and description of the management server 60 will be omitted.

[0192] Each of the multiple organization servers 200 is a server operated by an organization (such as a company, a local government, or a media outlet) that distributes articles.

[0193] Each of the multiple organization servers 200 distributes article information to the generation AI servers 210-1, 210-2, and 210-3 in response to crawling by the generation AI servers 210-1, 210-2, and 210-3. At this time, each of the multiple organization servers 200 grants or denies use of the generation AI of the article information in response to an application from the generation AI company. At this time, each of the multiple organization servers 200 may determine whether to grant or deny use of the article information to the generation AI by using a "determination means" to confirm or verify the CP and PA (issued in advance by the management server 60) issued to the generation AI company.

[0194] For example, the "determination means" may permit the use of the article information by the generation AI if the application for use by the generation AI received from the generation AI company (generation AI server) includes the CP and PA of the generation AI company, and may refuse to allow the use of the article information by the generation AI if the application does not include the CP and PA of the generation AI company.

[0195] Furthermore, for example, if the "determination means" successfully verifies the CP and PA of a generation AI company included in the application for use by the generation AI received from the generation AI company (generation AI server), it may permit the generation AI to use the article information, and if it fails to verify the CP and PA of the generation AI company, it may refuse to allow the generation AI to use the article information.

[0196] In addition, the "determination means" may determine whether to grant or deny permission for the generation AI to use the article information based on attribute information contained in the generation AI company's CP and PA.

[0197] For example, the "determination means" may permit the use of the article information by the generation AI if the evaluation score of the generation AI company indicated in the PA's attribute information is a predetermined score or higher, and may refuse to allow the use of the article information by the generation AI if the score is less than the predetermined score.

[0198] Furthermore, as shown in (A1) of Figure 8, each of the multiple organization servers 200 issues, by a "license issuing means," a usage license that certifies the permission to use the article information for which use by the generation AI has been permitted, and transmits the usage license to the generation AI company that has been permitted to use the article information for the generation AI.

[0199] Also, as shown in (A2) of Figure 8, each of the multiple organization servers 200 requests the CAL (Content Attestation Ledger) server 230 to register various information regarding use in the generation AI for each article information (e.g., application for use, permission for use, denial of use, contract terms (fees, period, etc.), etc.).

[0200] Furthermore, each of the plurality of organization servers 200 issues, for each piece of article information, an article CA, which is a certificate issued using a digital signature technique that enables profile verification of the article information.

[0201] In addition, each of the multiple organization servers 200 generates, for each piece of article information, an article CA (issued by the organization server 200), which is a certificate issued using digital signature technology that enables verification that the article has not been tampered with, and a CP and PA (issued by the management server 60) of the organization that distributes the article information.

[0202] In addition, when distributing article information, each of the multiple organization servers 200 includes in the article information article CA and CP, which are certificates issued using digital signature technology that enable verification that the article has not been tampered with.

[0203] In addition, when processing is performed between the organization server 200 and the generation AI server 210, not only can the organization server 200 determine the reliability of the generation AI server 210 based on the SOP, but the generation AI server 210 can also determine the reliability of the organization server 200 based on the SOP, thereby allowing reliability to be determined in both directions.

[0204] Generation AI servers 210-1, 210-2, and 210-3 are servers operated by generation AI companies. Note that generation AI servers 210-1, 210-2, and 210-3 may be physically separate devices or the same physical device. Furthermore, generation AI servers 210-1, 210-2, and 210-3 may be operated by the same generation AI company or by different generation AI companies.

[0205] The generation AI servers 210-1, 210-2, and 210-3 acquire article information from each of the organization servers 200 by crawling the organization servers 200 that exist on a communication network such as the Internet.

[0206] At this time, as shown in (B1) of Figure 8, the generation AI servers 210-1, 210-2, and 210-3 submit a usage request to the generation AI for each piece of article information to the organization server 200, the distributor of that article information. Then, as shown in (B2) of Figure 8, if the organization server 200 approves the use of that article information for each piece of article information, the generation AI servers 210-1, 210-2, and 210-3 receive the usage license issued and transmitted by the organization server 200. However, the generation AI servers 210-1, 210-2, and 210-3 may receive the usage license not only during crawling, but also by other methods (for example, by using the organization's API, etc.).

[0207] The generation AI server 210-1 performs pre-learning for the generation AI. Specifically, as shown in (C1) of FIG. 8, the generation AI server 210-1 generates a training dataset DS1 by performing data processing (data duplication, etc.) on multiple article information (crawling data) collected from multiple organization servers 200. At this time, the generation AI server 210-1 assigns, to each of the multiple training data included in the training dataset DS1, one or both of the CP and PA of the generation AI company and a certificate (CA) issued by the generation AI company using digital signature technology that enables verification of the training data. Then, as shown in (C2) of FIG. 8, the generation AI server 210-1 generates a generation AI base model M1 from the training dataset DS1 using a pre-training model training program PG1.

[0208] The generation AI server 210-2 also performs additional learning in the generation AI. Specifically, as shown in (D1) of FIG. 8, the generation AI server 210-2 generates an additional learning dataset DS2 by performing data processing (such as data duplication) on multiple article information (crawling data) collected from multiple organization servers 200. At this time, the generation AI server 210-2 assigns, to each of the multiple learning data included in the learning dataset DS2, one or both of the CP and PA of the generation AI company and a certificate (CA) issued by the generation AI company using digital signature technology that enables verification of the learning data. Then, as shown in (D2) of FIG. 8, the generation AI server 210-2 generates a generation AI trained model M2 from the generation AI base model M1 and the additional learning dataset DS2 using the pre-learning model additional learning program PG2.

[0209] 8 (E1), the generation AI server 210-3 generates an input dataset DS3 for RAG (Retrieval Augmented Generation), which is a database for the generation AI, by performing data processing (data duplication, etc.) on multiple article information (crawling data) collected from multiple organization servers 200. At this time, the generation AI server 210-3 assigns, to each of the multiple RAG input data included in the RAG input dataset DS3, a CP and PA, and / or a certificate (CA) issued by the generation AI company using digital signature technology that enables verification that the RAG input data has not been tampered with.

[0210] Terminal 220 is a device used by a viewer of the generated AI's answer information. As shown in (F1) of Figure 8, terminal 220 inputs the generated AI's question information entered by the viewer to search program PG3. As shown in (F2) of Figure 8, search program PG3 performs a search on RAG input dataset DS3 using the input question information, and as shown in (F3) of Figure 8, transmits the input question information and the search results for RAG input dataset DS3 to generated AI inference program PG4.

[0211] In this case, the search program PG3 performs a narrowed search of the input dataset DS3 for RAG based on information about the viewer (attributes, preferences, etc.) input from the terminal 220 and the information contained in the certificates (CP and PA, and one or both of CA) assigned to each of the multiple input datasets DS3 for RAG contained in the input dataset DS3 for RAG, thereby obtaining more accurate search results based on the information about the viewer.

[0212] In addition, such a narrowed search may be performed when the pre-learning model learning program PG1 generates the generated AI-based model M1, and when the learning program PG2 generates the generated AI-learned model M2.

[0213] 8, the terminal 220 may transmit question information and receive the generation AI's answer information to a search program PG3 including the generation AI-based model M1 or a search program PG3 including the generation AI-trained model M2. In this case, the terminal 220 may transmit the OP user information described in the third embodiment, together with the question information, to a search program PG3 including the generation AI-based model M1 or a search program PG3 including the generation AI-trained model M2, and receive appropriate generation AI's answer information corresponding to the OP user information from the search program PG3 including the generation AI-based model M1 or the search program PG3 including the generation AI-trained model M2. In this case, the terminal 220 may also cause the entrustment server 330 described in the third embodiment to transmit the OP user information to a search program PG3 including the generation AI-based model M1 or a search program PG3 including the generation AI-trained model M2.

[0214] In addition, the search program PG3 includes the certificate (CP, PA, and / or CA) in the search results input to the generation AI inference program PG4. This allows the generation AI inference program PG4 to provide the terminal 220 with answer information of the generation AI that has been granted a certificate (CP, PA, and / or CA) (i.e., answer information of a highly reliable generation AI).

[0215] The generation AI inference program PG4 generates answer information for the generation AI based on the question information and search results received from the search program PG3 and the generation AI trained model M2, and transmits the answer information for the generation AI to the terminal 220. As shown in (F4) of Figure 8, the terminal 220 receives the answer information for the generation AI from the generation AI inference program PG4 and displays the answer information for the generation AI.

[0216] As shown in (G1) of Figure 8, in response to a registration request from each of the multiple organization servers 200, the CAL server 230 registers various information regarding use in the generation AI (e.g., application for use, permission for use, denial of use, contract terms (fees, period, etc.), etc.) for each article information in a database, etc.

[0217] As described above, the generation AI system 4 of the fourth embodiment issues CP and PA via the management server 60 to each organization that distributes article information and each generation AI company that generates a generation AI model, thereby increasing the reliability of each organization and each generation AI company, and in addition, increasing the reliability of the article information distributed by each organization and the data of the generation AI model generated by each generation AI company.

[0218] Furthermore, in the generation AI system 4 of the fourth embodiment, each of the multiple organization servers 200 is equipped with a determination means for determining whether or not to permit a generation AI company to use article information in the generation AI based on the CP and PA of the generation AI company, so that, for example, each of the multiple organization servers 200 can permit only highly reliable generation AI companies to use article information in the generation AI.

[0219] Furthermore, in the generation AI system 4 of the fourth embodiment, the generation AI server 210-1 assigns to each of the multiple training data included in the pre-training training dataset DS1 one or both of the CP and PA of the generation AI company and a certificate (CA) issued using digital signature technology that enables verification that the training data issued by the generation AI company has not been tampered with, thereby increasing the reliability of each of the multiple training data included in the pre-training training dataset DS1 and the reliability of each data included in the generation AI model generated based on the training dataset DS1.

[0220] In addition, in the generation AI system 4 of the fourth embodiment, the generation AI server 210-2 assigns to each of the multiple training data included in the training dataset DS2 for additional learning one or both of the CP and PA of the generation AI company and a certificate (CA) issued using digital signature technology that enables verification that the training data issued by the generation AI company has not been tampered with, thereby increasing the reliability of each of the multiple training data included in the training dataset DS2 for additional learning and the reliability of each data included in the generation AI model generated based on the training dataset DS2.

[0221] In addition, in the generation AI system 4 of the fourth embodiment, the generation AI server 210-3 assigns to each of the multiple RAG input data included in the RAG input dataset DS3 one or both of the CP and PA of the generation AI company and a certificate (CA) issued using digital signature technology that enables verification that the RAG input data issued by the generation AI company has not been tampered with, thereby increasing the reliability of each of the multiple RAG input data included in the RAG input dataset DS3.

[0222] In the generation AI system 4 according to the fourth embodiment, each of the multiple organization servers 200 may assign one or both of the CP and PA of the organization and the CA of the article information to the article information. In this case, the reliability of the article information (i.e., the article information used as learning data) distributed from each of the multiple organization servers 200 can be improved. In this case, for example, each of the generation AI servers 210-1, 210-2, and 210-3 can use only highly reliable article information in the generation AI based on one or both of the CP and PA of the organization and the CA of the article information.

[0223] Furthermore, each of the data sets DS1, DS2, and DS3 may be provided with a certificate for each individual piece of data and a certificate for the entire data set by the generation AI servers 210-1, 210-2, and 210-3.

[0224] In this case, the certificate for each individual data may be generated (signed) by the generation AI servers 210-1, 210-2, 210-3, or may be the same as the CA that was assigned (signed) to the article information by the organization that distributed the article information.

[0225] In this case, the certificate for the entire data set may be generated (signed) by the generation AI servers 210-1, 210-2, and 210-3, or may simply use a usage license issued (signed) by the organization that distributes the article information.

[0226] Furthermore, each of the above datasets DS1, DS2, and DS3 may be provided with a certificate from each of multiple parties (organizations, generating AI companies, etc.) involved in the process from the article information to the creation of the dataset. This allows each of the above datasets DS1, DS2, and DS3 to be more transparent, as it allows tracing back to the multiple parties (organizations, generating AI companies, etc.) involved in the dataset.

[0227] Although the examples of the present invention have been described in detail above, the present invention is not limited to such specific embodiments, and various modifications and variations are possible within the scope of the gist of the present invention as defined in the claims.

[0228] Each functional unit of the terminal 10, the content server 20, the advertisement server 30, the advertiser server 40, the history server 50, the management server 60, the SSP 70, and the DSP 80 may be realized by cloud computing provided by one or more computers. Also, two or more devices among the content server 20, the advertisement server 30, the advertiser server 40, the history server 50, the management server 60, the SSP 70, and the DSP 80 may be configured as an integrated device.

[0229] This application claims priority based on Japanese Patent Application No. 2024-090226, filed on June 3, 2024, the entire contents of which are incorporated herein by reference. [Explanation of symbols]

[0230] 1. Advertising distribution system 2. Article distribution system 3 Content provision system 4. Generative AI System 10 devices 11 Storage section 12 Reception 13 Transmitter / Receiver 14 Control Unit 20 Content Server 21 Memory section 22 Transmitter / Receiver 23 Content Distribution Department 24 Control Unit 30 Ad Server 31 Storage section 32 Transmitter / Receiver 33 Control Unit 40 Advertiser Server 41 Storage section 42 Transmitter / Receiver 43 Advertising Distribution Department 44 Control Unit 50 History Server 60 Management Server 61 Storage section 62 Transmitter / Receiver 63 Control Unit 70 SSP (primary trading server) 71 Storage section 72 Transmitter / Receiver 73 Control Unit 80 DSP (secondary trading server) 81 Storage section 82 Transmitter / Receiver 83 Control Unit 90 Redistribution Platform 200 Organization Server 210-1, 210-2, 210-3 Generative AI Server 220 terminals 230 CAL Server 310 terminals 310A Web browser 320 Service provider server 330 Entrusted Server 340 OP implementation website

Claims

1. A generative AI system including a generative AI device that generates a generative AI model using article information collected from a communication network as learning data, A determination unit is provided that verifies, using digital signature technology, a certificate of the profile of the generating AI company that operates the generating AI device, which certificate has been issued using digital signature technology after being reviewed by a predetermined certification body in advance, and determines the reliability of the generating AI company based on the result of the verification. A generative AI system characterized by:

2. and a determination unit that determines whether to permit the generation AI company to use the article information for the generation AI based on a certificate of the generation AI company's profile issued using the digital signature technology. The generative AI system of claim 1 .

3. A license issuing unit is provided that issues a usage license to the generation AI company that is permitted to use the article information for the generation AI. The generative AI system of claim 2 .

4. The generating AI device is an assigning unit that assigns to the training data one or both of a certificate of the profile of the generating AI company issued using the digital signature technology and a certificate of the profile of the training data issued by the generating AI company using the digital signature technology to prove that the training data has not been tampered with; a generation unit that generates the generative AI model using the learning data after the annotation by the annotation unit; The generative AI system of claim 1, comprising:

5. A generative AI method using a generative AI system including a generative AI device that generates a generative AI model using article information collected from a communication network as learning data, The process includes a step of verifying, using digital signature technology, a certificate of the profile of the generating AI company that operates the generating AI device, which certificate has been issued using digital signature technology after being reviewed by a predetermined certification body in advance, and determining the reliability of the generating AI company based on the results of the verification. A generative AI method characterized by:

Images