Digital data destruction and leakage prevention system

Abstract

We provide a system that can prevent the destruction or leakage of important information even if the processing smart controller is tampered with through external quantum cryptography analysis or internal malicious activity. [Solution] The system has first and second smart controllers 11a and 11b deployed to the addresses of first and second authorized persons, respectively. The processing smart controller 11 is configured to operate its processing function when the first and second smart controllers are linked. The system includes means 12 for recording the deployment information of the first and second smart controllers in a black box environment only when approved by both authorized persons, means 13 for extracting the deployment information, means 14 for checking whether the deployed first and second smart controllers have been tampered with using the extracted deployment information, means 15 for linking the first and second smart controllers and operating the processing function of the processing smart controller if no tampering is detected, and means 15 for controlling the system so that the first and second smart controllers are not linked and the processing function of the processing smart controller is not operated if tampering is detected.

Description

[Technical Field]

[0001] This invention relates to a digital data destruction and leakage prevention system that primarily uses on-chain technology to prevent the destruction and leakage of important digital data, such as confidential information and personal information, caused by high-level cyberattacks exceeding normal levels or by processing smart contracts tampered with due to insider attacks within the system. In this specification, "system" means a computer system that specifically realizes software-based information processing using hardware resources, composed of elements such as computers, other electronic devices, software, communication networks, and data. [Background technology]

[0002] Traditionally, distributed encryption technologies such as blockchain have been used as one example of data protection measures against common cyberattacks. However, in the future, we anticipate high-level cyberattacks exceeding normal levels (by state actors, or actors combining state and non-state actors, etc.), such as cryptographic analysis using quantum computers and EMP attacks, which will be discussed later. These high-level cyberattacks aim to leak, alter, delete, or destroy digital assets (confidential information such as personal information and security-related information, control modules for critical functions, currencies such as stablecoins, digital currencies and digital securities, and rights such as contracts). Therefore, it is crucial to protect digital assets from high-level cyberattacks.

[0003] Digital assets that are targets of high-level cyberattacks are thought to be wide-ranging, including personal information (account information) and personal asset information held by financial institutions, confidential information such as personal information and security-related information held by large corporations and government agencies, top-secret company information, important contracts, designs, control modules and data, and information related to lifelines. Traditionally, there have been no services (especially for the private sector) that can reliably guard against high-level cyberattacks, and in practice, services with resistance to quantum computer cryptography (such as PQC (Post-Quantum Cryptography)) have not been put into practical use.

[0004] Furthermore, the data that constitutes digital assets to be preserved includes a vast amount of small-capacity data linked to personal information. Unlike backup data held by corporate systems, much of this small-capacity data linked to personal information requires real-time data preservation from a convenience standpoint (in order to quickly recover in the event of system failure, a database-like structure is desirable even for backup structures; in other words, a function that realizes storage-like processing with data preservation capabilities is desired).

[0005] Furthermore, personal information is subject to strong legal regulations from a protection standpoint. There is also a growing need to enhance the level of protection against external cyberattacks in order to preserve small-scale data linked to personal information.

[0006] The inventors of this case have developed a real-time evacuation and recovery type digital asset guard service provision system (Japanese Patent Application No. 2024-118956) that can preserve digital assets consisting of (basically) small-capacity data linked to personal information in real time, strongly and efficiently protect important information such as confidential information and personal information from high-level cyberattacks and physical destruction, and can restore important information without it being stolen by a third party even if it is subjected to cryptographic analysis by a quantum computer or an EMP attack, or makes it impossible for a third party to restore the managed information even if it is stolen by a third party.

[0007] The real-time evacuation and recovery type digital asset guarding service provision system automatically communicates between two or more authenticated entities using a predetermined communication function, and uses a combination of a processing method based on bidirectional agreement between two or more authenticated entities and polynomial secret sharing encryption processing to render the digital data to be protected meaningless, sort it into multiple points in a black box environment, manage the sorted file information in a black box environment, manage the files sorted into multiple points in a distributed manner, and manage the index information of the distributed files in an encrypted state.

[0008] The real-time evacuation and recovery type digital asset guarding service provision system eliminates the risks of the blockchain's single-address (specific key) structure by using a distributed management system with multiple addresses in a bidirectional agreement-based processing method for managing digital asset information. [Overview of the Initiative] [Problems that the invention aims to solve]

[0009] However, the risks associated with the blockchain's single-address structure (specific key) exist not only in information management but also in the deployment of smart contracts (setting up compiled transactions). Therefore, while the risk of information leakage itself can be eliminated by a real-time backup and recovery type digital asset guard service provider, there is a risk of significant damage if the smart contracts used for processing, which are involved in managing the index information of distributed files and the sorting information of files via communication functions, are attacked and the processing content is analyzed. Furthermore, even in systems built with smart contracts for processing other than the real-time evacuation and restoration type digital asset guard service provision system, even if the blockchain itself is compatible with PQC (post-quantum cryptography) and the risk of accessing (i.e., information leakage) of the information is avoided, the risk of information destruction or leakage due to internal misconduct within the system remains inherent.

[0010] This invention has been made in view of the above problems, and aims to provide a digital data destruction and leakage prevention system that can prevent the destruction or leakage of important information such as confidential information and personal information even if the processing smart contract is tampered with by cryptographic analysis by an external quantum computer or by an insider attack within the system. [Means for solving the problem]

[0011] To achieve the above objective, the digital data destruction and leakage prevention system according to the present invention is a system that prevents the destruction and leakage of digital data by tampering with processing smart contracts in a system constructed with a distributed ledger in blockchain or other distributed ledger technology and a predetermined number of processing smart contracts for performing predetermined processing using digital data managed in the distributed ledger, wherein each of the processing smart contracts has a first processing function component smart contract linked to the processing smart contract, which is deployed (a compiled transaction is set) to a first address in the shared memory of the blockchain that is accessible only with a first key held by a first authority, and a second processing function component smart contract linked to the processing smart contract, which is deployed (a compiled transaction is set) to a second address in the shared memory of the blockchain that is accessible only with a second key held by a second authority, and each of the processing smart contracts has the processing A processing function is configured to operate when the first processing function component smart contract linked to the processing smart contract and the second processing function component smart contract are linked, and furthermore, only when both approval using the first key held by the first authority and approval using the second key held by the second authority are made, a processing function component smart contract deployment information recording / updating means records or updates the deployment information for the first processing function component smart contract and the deployment information for the second processing function component smart contract linked to each of the processing smart contracts in a black box environment, a deployment information extraction means extracts the deployment information for the first processing function component smart contract and the deployment information for the second processing function component smart contract linked to the processing smart contract that has been recorded or updated in a black box environment by the processing function component smart contract deployment information recording / updating means,A smart contract tampering check means checks whether the first smart contract linked to the processing smart contract has been tampered with, using the deployment information of the first smart contract linked to the processing smart contract and the deployment information of the second smart contract linked to the processing smart contract in the shared memory of the blockchain, and whether the second smart contract linked to the processing smart contract in the shared memory of the blockchain has been tampered with, and before each processing function of each processing smart contract is operated, the deployment information extraction means and the smart contract tampering check means are operated sequentially, and as a result of the tampering check by the smart contract tampering check means, the smart contract tampering check means is used to check whether the first smart contract linked to the processing smart contract in the processing smart contract has been tampered with, in the shared memory of the blockchain. If no tampering is detected in either the first processing function component smart contract deployed at the first address associated with the processing smart contract in the blockchain, or the second processing function component smart contract deployed at the second address associated with the processing smart contract in the shared memory within the blockchain, the first processing function component smart contract deployed at the first address associated with the processing smart contract in the shared memory within the blockchain and the second processing function component smart contract deployed at the second address associated with the processing smart contract in the shared memory within the blockchain are linked to activate the processing function of the processing smart contract, and the first processing function component smart contract deployed at the first address associated with the processing smart contract in the shared memory within the blockchain,The system is characterized by having a processing smart contract operation control means that, if tampering is detected in at least one of the second processing function component smart contracts deployed at the second address associated with the processing smart contract in the shared memory within the blockchain, prevents the first processing function component smart contract deployed at the first address associated with the processing smart contract in the shared memory within the blockchain from linking with the second processing function component smart contract deployed at the second address associated with the processing smart contract in the shared memory within the blockchain, thereby controlling the operation of the processing function of the processing smart contract.

[0012] Furthermore, the digital data destruction and leakage prevention system of the present invention further includes mutual access rights authentication information recording means that records the hash values ​​of the mutual deployment information of the first processing function component smart contract and the second processing function component smart contract, which are associated with each of the processing smart contracts when they are first interconnected after deployment settings within a predetermined time, as mutual access rights authentication information in a black box environment. The means for checking whether the processing function component smart contract has been tampered with preferably detects whether it has been tampered with by using the hash value of the deployment information, which is the authentication information for the mutual access rights between the first processing function component smart contract and the second processing function component smart contract, that is linked to the processing smart contract and recorded by the mutual access rights authentication information recording means, and comparing it with the hash value of the mutual deployment information when the first processing function component smart contract, which is deployed at the first address linked to the processing smart contract in the shared memory within the blockchain, and the second processing function component smart contract, which is deployed at the second address linked to the processing smart contract in the shared memory within the blockchain, are interconnected.

[0013] Furthermore, in the digital data destruction and leakage prevention system of the present invention, if tampering is detected in at least one of the first smart contract processing function component smart contract deployed at the first address associated with the smart contract processing in the shared memory within the blockchain, or the second smart contract processing function component deployed at the second address associated with the smart contract processing in the shared memory within the blockchain, it is preferable that the smart contract processing function operation control means further notify the respective smart contract authorities of the mutual access error.

[0014] Furthermore, the digital data destruction and leakage prevention system of the present invention is preferably provided in a real-time evacuation and recovery type digital asset guard service provision system configured to automatically communicate between two or more authenticated individuals using a predetermined communication function, to perform meaningless processing on the digital data to be protected by combining a processing method based on bidirectional agreement between two or more authenticated individuals with polynomial secret sharing encryption processing, to sort the digital data to be protected into multiple points in a black box environment, to manage the sorted file information in a black box environment, to manage the files sorted into multiple points in a distributed manner, and to manage the index information for the distributed files in an encrypted state.

[0015] Furthermore, in the digital data destruction and leakage prevention system of the present invention, the real-time preservation type digital asset guard service provision system is a unit that combines blockchain and file distributed management functions, etc., and is constructed by having multiple planets that form a single unit that constitutes a system for providing services that implement distributed smart contracts, server applications, etc., and is mainly a closed blockchain such as a private or consortium type, and is composed of at least one distributed ledger structure composed of multiple chains that may include a group of distributed ledgers and a public blockchain, etc., an authentication individual authentication system that authenticates two or more authentication individuals, an agreement information acquisition means that transmits and exchanges predetermined information between multiple authentication individuals authenticated by the authentication individual authentication system and acquires agreement information between the authentication individuals regarding the execution of predetermined processes, including the process of saving, restoring, and deleting personal information, important information and other digital data of the authentication individual to be saved, acquired by the agreement information acquisition means Based on agreement information regarding the execution of predetermined processes including the backup, restoration, and deletion of personal information, important information, and other digital data of the authenticated individual subject to backup, an encryption / polynomial secret sharing partitioning means having a processing smart contract that has the function of partitioning the personal information, important information, and other digital data of the authenticated individual subject to backup into multiple file data by encryption / polynomial secret sharing; a security point partitioning means that partitions the multiple file data partitioned by the encryption / polynomial secret sharing partitioning means into one of multiple security points; a security point partitioning destination information management means that manages the destination information of the partitioned file data partitioned by the security point partitioning means in a black box environment; and a modification / distributed recording means having a processing smart contract that modifies the file data partitioned by the security point partitioning means and has the function of distributing and recording file data that does not exceed the block size to multiple nodes of a distributed management file group established on the blockchain, and file data that exceeds the block size to multiple nodes of a distributed management file group separate from the blockchain, respectively.The index information creation, encryption, and recording means comprises a processing smart contract that has the function of creating and encrypting index information of file data distributed and recorded by the modification and distributed recording means, and recording it on a specific node of the blockchain in a black box environment; an index information decryption means comprises a processing smart contract that has the function of decrypting the index information of the file data recorded by the index information creation, encryption, and recording means for each group of file data associated with the information of each of the protected points managed in a black box environment by the protected point sorting destination information management means based on the consent information regarding the execution of the restoration process of personal information, important information, and other digital data of the authenticated individual to be restored, obtained by the consent information acquisition means; and based on the index information decrypted by the index information decryption means, the modification and distribution are performed on multiple nodes of the distributed management file of the protected blockchain corresponding to the file data and on multiple nodes of a distributed management file separate from the blockchain. A file data extraction means having a processing smart contract that has the function of extracting each of the recorded file data and restoring them to their state before modification; a digital data restoration means having a processing smart contract that has the function of integrating and decrypting multiple fragmented file data extracted by the file data extraction means and restoring them to the personal information, important information, and other digital data of the authentication individual before backup; a deletion processing index information decryption means having a processing smart contract that has the function of decrypting the index information of the file data recorded in the index information creation, encryption, and recording means for each group of file data associated with the information of each of the protection points managed in a black box environment by the protection point sorting destination information management means, based on the agreement information regarding the execution of the deletion processing of the personal information, important information, and other digital data of the authentication individual to be deleted, obtained by the agreement information acquisition means; and based on the index information decrypted by the deletion processing index information decryption means,Preferably, the system includes: a file data deletion means having a processing smart contract that has the function of deleting the file data from a predetermined generation prior to the modified and distributed recorded on multiple nodes of the distributed management file of the blockchain to which the file data is stored and on multiple nodes of a distributed management file separate from the blockchain; and a second file data deletion means that deletes the information of the storage point associated with the file data to be deleted, which is managed in a black box environment by the storage point sorting destination information management means, based on the agreement information regarding the execution of the deletion process of personal information, important information, and other digital data of the authenticated individual obtained by the agreement information acquisition means. [Effects of the Invention]

[0016] According to the present invention, a digital data destruction and leakage prevention system is obtained that can prevent the destruction or leakage of important information such as confidential information and personal information, even if the processing smart contract is tampered with by cryptographic analysis by an external quantum computer or by an insider attack within the system. [Brief explanation of the drawing]

[0017] [Figure 1] This is a schematic diagram illustrating the overall configuration of a digital data destruction and leakage prevention system according to the first embodiment of the present invention. [Figure 2] This is a schematic diagram illustrating the configuration of the processing smart contract included in the digital data destruction and leakage prevention system of the first embodiment. [Figure 3] This is an explanatory diagram illustrating the configuration of a smart contract, a first processing function component included in the digital data destruction and leakage prevention system of the first embodiment. [Figure 4] This is an explanatory diagram illustrating the configuration of a smart contract, a second processing function component included in the digital data destruction and leakage prevention system of the first embodiment. [Figure 5]This is an explanatory diagram illustrating the configuration of the smart contract deployment information recording and updating means, which are processing function components of the digital data destruction and leakage prevention system of the first embodiment. [Figure 6] This is a schematic diagram illustrating the configuration of the mutual access rights authentication information recording means included in the digital data destruction and leakage prevention system of the first embodiment. [Figure 7] This is an explanatory diagram illustrating the configuration of the deployment information extraction means included in the digital data destruction and leakage prevention system of the first embodiment. [Figure 8] This is a schematic diagram illustrating the configuration of the smart contract tampering check means, a processing function component included in the digital data destruction and leakage prevention system of the first embodiment. [Figure 9] This is a schematic diagram illustrating the configuration of the smart contract processing function operation control means for a digital data destruction and leakage prevention system according to the first embodiment. [Figure 10] This is an explanatory diagram showing the processing flow during the deployment phase of the processing smart contract in the digital data destruction and leakage prevention system of the first embodiment. [Figure 11] This is an explanatory diagram showing a part of the processing flow at a predetermined processing operation stage by a processing smart contract in the digital data destruction and leakage prevention system of the first embodiment. [Figure 12] This is an explanatory diagram showing the processing flow at a predetermined processing operation stage by a processing smart contract in the digital data destruction and leakage prevention system of the first embodiment. [Figure 13] This is a schematic diagram illustrating the overall configuration of a real-time evacuation and restoration type digital asset guard service provision system equipped with a digital data destruction and leakage prevention system according to a second embodiment of the present invention. [Figure 14] This is an explanatory diagram illustrating the overall processing functions of the real-time evacuation and restoration type digital asset guard service provision system in the second embodiment. [Figure 15]This is an explanatory diagram illustrating the configuration of the real-time evacuation and restoration type digital asset guard service provision system in the second embodiment. [Figure 16] This is a schematic diagram illustrating the configuration of the authentication individual authentication system included in the real-time evacuation and restoration type digital asset guard service provision system in the second embodiment. [Figure 17] This is an explanatory diagram illustrating the configuration of the agreement information acquisition means included in the real-time evacuation and restoration type digital asset guard service provision system in the second embodiment. [Figure 18] This is an explanatory diagram illustrating the configuration of the encryption and polynomial secret sharing partitioning means included in the real-time evacuation and recovery type digital asset guard service provision system in the second embodiment. [Figure 19] This is an explanatory diagram illustrating the configuration of the preservation point sorting means included in the real-time evacuation and restoration type digital asset guard service provision system in the second embodiment. [Figure 20] This is an explanatory diagram illustrating the configuration of the maintenance point sorting destination information management means included in the real-time evacuation and restoration type digital asset guard service provision system in the second embodiment. [Figure 21] This is an explanatory diagram illustrating the configuration of the modification and distributed recording means included in the real-time evacuation and restoration type digital asset guard service provision system in the second embodiment. [Figure 22] This is an explanatory diagram illustrating the configuration of the index information creation, encryption, and recording means included in the real-time backup and recovery type digital asset guard service provision system in the second embodiment. [Figure 23] This is a schematic diagram illustrating the configuration of the index information decoding means included in the real-time backup and restoration type digital asset guard service provision system in the second embodiment. [Figure 24] This is an explanatory diagram illustrating the configuration of the file data extraction means included in the real-time backup and restoration type digital asset guard service provision system in the second embodiment. [Figure 25]This is an explanatory diagram illustrating the configuration of the digital data recovery means included in the real-time backup and recovery type digital asset guard service provision system in the second embodiment. [Figure 26] This is a schematic diagram illustrating the configuration of the index information decoding means during deletion processing in the real-time backup and restoration type digital asset guard service provision system in the second embodiment. [Figure 27] This is an explanatory diagram illustrating the configuration of the file data deletion means included in the real-time backup and restoration type digital asset guard service provision system in the second embodiment. [Figure 28] This is a schematic diagram illustrating the configuration of the second file data deletion means provided in the real-time backup and restoration type digital asset guard service provision system in the second embodiment. [Figure 29] This is an explanatory diagram showing the common processing flow in the real-time evacuation and restoration type digital asset guard service provision system in the second embodiment. [Figure 30] This is an explanatory diagram showing the flow of digital data backup processing in the real-time backup and restoration type digital asset guard service provision system in the second embodiment. [Figure 31] This is an explanatory diagram showing the flow of the digital data restoration process in the real-time evacuation and restoration type digital asset guard service provision system in the second embodiment. [Figure 32] This is an explanatory diagram showing the flow of the digital data deletion process in the real-time evacuation and restoration type digital asset guard service provision system in the second embodiment. [Figure 33] This is an explanatory diagram showing the processing flow at the deployment stage and the predetermined processing operation stage for each processing smart contract included in the real-time evacuation and restoration type digital asset guard service provision system in the second embodiment. [Modes for carrying out the invention]

[0018] Before describing the embodiments, we will explain the circumstances that led to the invention and the effects of the invention.

[0019] As mentioned above, conventional methods for protecting data from common cyberattacks include the use of distributed encryption technologies such as blockchain. However, in the future, we anticipate high-level cyberattacks exceeding normal levels (by state actors, or actors combining state and non-state actors, etc.), such as cryptographic analysis using quantum computers and EMP attacks, which will be discussed later. These high-level cyberattacks aim to leak, alter, delete, or destroy digital assets (confidential information such as personal information and security-related information, control modules for critical functions, currencies such as stablecoins, digital currencies and digital securities, and rights such as contracts). Therefore, it is crucial to protect digital assets from high-level cyberattacks.

[0020] Digital assets that are targets of high-level cyberattacks are thought to be wide-ranging, including personal information (account information) and personal asset information held by financial institutions, confidential information such as personal information and security-related information held by large corporations and government agencies, top-secret company information, important contracts, designs, control modules and data, and information related to lifelines. Traditionally, there have been no services (especially for the private sector) that can reliably guard against high-level cyberattacks, and in practice, services with resistance to quantum computer cryptography (such as PQC (Post-Quantum Cryptography)) have not been put into practical use.

[0021] Furthermore, the data that constitutes digital assets to be preserved includes a vast amount of small-capacity data linked to personal information. Unlike backup data held by corporate systems, much of this small-capacity data linked to personal information requires real-time data preservation from a convenience standpoint (in order to quickly recover in the event of system failure, a database-like structure is desirable even for backup structures; in other words, a function that realizes storage-like processing with data preservation capabilities is desired).

[0022] Furthermore, personal information is subject to strong legal regulations from a protection standpoint. There is also a growing need to enhance the level of protection against external cyberattacks in order to preserve small-scale data linked to personal information.

[0023] However, after careful consideration and examination, the inventors of this case have developed a real-time evacuation and restoration type digital asset guard service provision system (Japanese Patent Application No. 2024-118956) that can preserve digital assets, which are (basically) small-capacity data linked to personal information, in real time, and can strongly and efficiently protect important information such as confidential information and personal information from high-level cyberattacks and physical destruction, and can restore important information without it being stolen by a third party even if it is subjected to cryptographic analysis by a quantum computer or an EMP attack, or can make it impossible for a third party to restore the managed information even if it is stolen by a third party.

[0024] The real-time evacuation and recovery type digital asset guarding service provision system automatically communicates between two or more authenticated entities using a predetermined communication function, and uses a combination of a processing method based on bidirectional agreement between two or more authenticated entities and polynomial secret sharing encryption processing to render the digital data to be protected meaningless, sort it into multiple points in a black box environment, manage the sorted file information in a black box environment, manage the files sorted into multiple points in a distributed manner, and manage the index information of the distributed files in an encrypted state.

[0025] The real-time evacuation and recovery type digital asset guarding service provision system eliminates the risks of the blockchain's single-address (specific key) structure by using a distributed management system with multiple addresses in a bidirectional agreement-based processing method for managing digital asset information.

[0026] However, the risks associated with the blockchain's single-address structure (specific key) exist not only in information management but also in the deployment of smart contracts (setting up compiled transactions). Therefore, while the risk of information leakage itself can be eliminated by a real-time backup and recovery type digital asset guard service provider, there is a risk of significant damage if the smart contracts used for processing, which are involved in managing the index information of distributed files and the sorting information of files via communication functions, are attacked and the processing content is analyzed. Furthermore, even in systems built with smart contracts for processing other than the real-time evacuation and restoration type digital asset guard service provision system, even if the blockchain itself is compatible with PQC (post-quantum cryptography) and the risk of accessing (i.e., information leakage) of the information is avoided, the risk of information destruction or leakage due to internal misconduct within the system remains inherent.

[0027] Therefore, the inventors of this case have conducted further research and considerations to develop measures that can prevent the destruction or leakage of important information such as confidential and personal information, even if the processing smart contracts are tampered with by cryptographic analysis using external quantum computers or by internal malicious actors within the system.

[0028] The inventors of this case conceived of introducing a concept similar to that used in the real-time backup and restoration type digital asset guard service provision system, which involves sorting digital data to be protected into multiple points in a black box environment using a processing method based on bidirectional agreement between two or more authenticated individuals, and managing the sorted file information in a black box environment, into a processing smart contract.

[0029] In other words, instead of having each smart contract perform a predetermined processing task within the system operate as a single smart contract, we considered having the processing functions operate through a link between two smart contracts.

[0030] More specifically, for each processing smart contract, we considered establishing a first processing operation component smart contract associated with that processing smart contract, which is deployed (a compiled transaction is set) to a first address accessible only with the first key held by the first authority in the shared memory within the blockchain, and a second processing function component smart contract associated with that processing smart contract, which is deployed (a compiled transaction is set) to a second address accessible only with the second key held by the second authority in the shared memory within the blockchain. Furthermore, we considered configuring each processing smart contract to operate a single processing function by linking a first processing function component smart contract associated with that processing smart contract with a second processing function component smart contract also associated with that processing smart contract.

[0031] Furthermore, the inventors of this case devised the following process in order to operate the processing functions of each processing smart contract not as standalone smart contracts, but through a link between the two processing function component smart contracts mentioned above.

[0032] First, the inventors considered recording and updating deployment information for the first processing function component smart contract and the second processing function component smart contract, each associated with their respective processing smart contracts, in a black box environment only when both approval using the first key held by the first authority and approval using the second key held by the second authority have been made.

[0033] Furthermore, the inventors considered extracting deployment information for the first processing function component smart contract and the second processing function component smart contract, which are linked to the processing smart contract recorded or updated in a black box environment.

[0034] Furthermore, the inventors considered using the extracted deployment information of the first processing function component smart contract linked to the processing smart contract and the deployment information of the second processing function component smart contract linked to the processing smart contract to check for tampering with the first processing function component smart contract deployed at the first address linked to the processing smart contract in the shared memory within the blockchain, and the second processing function component smart contract deployed at the second address linked to the processing smart contract in the shared memory within the blockchain.

[0035] Furthermore, the inventors considered performing a check for tampering with the smart contract components of each processing function before each processing function is executed by the respective processing smart contract.

[0036] The inventor then considered a method to control the operation of the processing function of the smart contract by linking the first processing function component smart contract deployed at the first address linked to the processing smart contract in the shared memory of the blockchain, and the second processing function component smart contract deployed at the second address linked to the processing smart contract in the shared memory of the blockchain, if, as a result of the check for tampering, no tampering is detected in either the first processing function component smart contract deployed at the first address linked to the processing smart contract in the shared memory of the blockchain, and the second processing function component smart contract deployed at the second address linked to the processing smart contract in the shared memory of the blockchain.

[0037] Furthermore, the inventors considered that if tampering is detected as a result of the tampering check in either the first processing function component smart contract deployed at the first address linked to the processing smart contract in the shared memory of the blockchain, or the second processing function component smart contract deployed at the second address linked to the processing smart contract in the shared memory of the blockchain, the inventors would control the smart contracts to not operate their processing functions by not linking the first processing function component smart contract deployed at the first address linked to the processing smart contract in the shared memory of the blockchain with the second processing function component smart contract deployed at the second address linked to the processing smart contract in the shared memory of the blockchain.

[0038] The inventors of this case have combined the strategies derived from the above considerations and studies, taking various scenarios into account, and after further consideration and studies, have arrived at a digital data destruction and leakage prevention system that can prevent the destruction or leakage of important information such as confidential information and personal information, even if the processing smart contract is tampered with by cryptographic analysis by an external quantum computer or by an internal criminal act within the system.

[0039] The present invention provides a digital data destruction and leakage prevention system that prevents the destruction and leakage of digital data by tampering with processing smart contracts in a system constructed with a distributed ledger in blockchain or other distributed ledger technology and a predetermined number of processing smart contracts for performing predetermined processing using digital data managed in the distributed ledger. Each of the processing smart contracts includes a first processing function component smart contract linked to the processing smart contract, which is deployed (a compiled transaction is set) to a first address in the shared memory of the blockchain that is accessible only with a first key held by a first authority, and a second processing function component smart contract linked to the processing smart contract, which is deployed (a compiled transaction is set) to a second address in the shared memory of the blockchain that is accessible only with a second key held by a second authority, and each of the processing smart contracts is linked to the processing smart contract. A processing function is configured to operate when the first processing function smart contract and the second processing function smart contract linked to the processing smart contract are linked, and furthermore, only when both approval using the first key held by the first authority and approval using the second key held by the second authority are made, a processing function smart contract deployment information recording / updating means records or updates the deployment information for the first processing function smart contract and the deployment information for the second processing function smart contract linked to each processing smart contract in a black box environment, a deployment information extraction means extracts the deployment information for the first processing function smart contract and the deployment information for the second processing function smart contract linked to the processing smart contract that has been recorded or updated in a black box environment by the processing function smart contract deployment information recording / updating means,A smart contract tampering check means for processing function components, which uses the deployment information of the first smart contract for processing components linked to the smart contract for processing and the deployment information of the second smart contract for processing components linked to the smart contract for processing to check whether the first smart contract for processing components deployed to the first address linked to the smart contract for processing in the shared memory of the blockchain and the second smart contract for processing components deployed to the second address linked to the smart contract for processing in the shared memory of the blockchain have been tampered with, and before each processing function of each smart contract for processing operates, the deployment information extraction means and the smart contract tampering check means for processing function components are operated sequentially, and as a result of the tampering check by the smart contract tampering check means for processing function components, the smart contract tampering check means for processing function components have been tampered with If no tampering is detected in either the first processing function component smart contract deployed at the first address associated with the processing smart contract in the shared memory of the blockchain, or the second processing function component smart contract deployed at the second address associated with the processing smart contract in the shared memory of the blockchain, the first processing function component smart contract deployed at the first address associated with the processing smart contract in the shared memory of the blockchain and the second processing function component smart contract deployed at the second address associated with the processing smart contract in the shared memory of the blockchain are linked to activate the processing function of the processing smart contract, and the first processing function component smart contract deployed at the first address associated with the processing smart contract in the shared memory of the blockchain,The system includes a smart contract processing function operation control means that, if tampering is detected in at least one of the second processing function component smart contracts deployed at the second address associated with the processing smart contract in the shared memory within the blockchain, prevents the first processing function component smart contract deployed at the first address associated with the processing smart contract in the shared memory within the blockchain from linking with the second processing function component smart contract deployed at the second address associated with the processing smart contract in the shared memory within the blockchain, thereby controlling the smart contract's processing function to not operate.

[0040] In the digital data destruction and leakage prevention system of the present invention, each processing smart contract includes a first processing function component smart contract associated with the processing smart contract, which is deployed (a compiled transaction is set) to a first address accessible only with a first key held by a first authority in the shared memory of the blockchain, and a second processing function component smart contract associated with the processing smart contract, which is deployed (a compiled transaction is set) to a second address accessible only with a second key held by a second authority in the shared memory of the blockchain. Having a smart contract for processing, if each processing smart contract is configured such that a single processing function operates when a first processing function component smart contract linked to the processing smart contract and a second processing function component smart contract linked to the processing smart contract are linked, then if either the first processing function component smart contract linked to the processing smart contract or the second processing function component smart contract linked to the processing smart contract is tampered with and deployed to the address of the other, it becomes possible to prevent the processing function of the processing smart contract from operating.

[0041] Furthermore, if the system is configured to include a means for recording and updating deployment information of a processing function component smart contract, which records or updates the deployment information of the first processing function component smart contract and the deployment information of the second processing function component smart contract, linked to each processing smart contract, in a black box environment, only when both approval using the first key held by the first authority and approval using the second key held by the second authority have been made, then, for example, even if the key held by one of the authority holders is stolen, and that processing function component smart contract is tampered with and deployed to an address accessed by the key held by that authority holder in the shared memory within the blockchain, it becomes possible to prevent the updating of the deployment information of the tampered processing function component smart contract.

[0042] Furthermore, if the system is configured to include a processing function component smart contract tampering check means that checks for tampering with the first processing function component smart contract deployed at the first address linked to the processing smart contract in the shared memory of the blockchain, and the second processing function component smart contract deployed at the second address linked to the processing smart contract in the shared memory of the blockchain, using the deployment information of the first processing function component smart contract linked to the processing smart contract extracted by the deployment information extraction means, and the deployment information of the second processing function component smart contract linked to the processing smart contract, then it becomes possible to detect whether or not the processing function component smart contract deployed in the shared memory of the blockchain has been tampered with.

[0043] Furthermore, in the digital data destruction and leakage prevention system of the present invention, before each processing function of each processing smart contract is operated, the deployment information extraction means and the processing function component smart contract tampering check means are operated sequentially, and as a result of the tampering check by the processing function component smart contract tampering check means, if no tampering is detected in either the first processing function component smart contract deployed at the first address associated with the processing smart contract in the shared memory of the blockchain, or the second processing function component smart contract deployed at the second address associated with the processing smart contract in the shared memory of the blockchain, then the first processing function component smart contract deployed at the first address associated with the processing smart contract in the shared memory of the blockchain and the second processing function component smart contract deployed at the second address associated with the processing smart contract in the shared memory of the blockchain are... If the smart contract for processing is configured to have a processing function operation control means that links the processing function component smart contract to the smart contract for processing to operate the processing function of the smart contract for processing, and if tampering is detected in at least one of the first processing function component smart contract deployed at the first address associated with the smart contract for processing in the shared memory of the blockchain, and the second processing function component smart contract deployed at the second address associated with the smart contract for processing in the shared memory of the blockchain, then the smart contract for processing will not be linked to the first processing function component smart contract deployed at the first address associated with the smart contract for processing in the shared memory of the blockchain, and the smart contract for processing will not be configured to operate the processing function of the smart contract for processing,This makes it possible to prevent the operation of the processing function of a smart contract whose processing function component has been tampered with.

[0044] Furthermore, the digital data destruction and leakage prevention system of the present invention preferably further includes mutual access rights authentication information recording means that records the hash values ​​of the mutual deployment information of the first processing function component smart contract and the second processing function component smart contract, which are linked to each of the processing smart contracts when they are first interconnected after deployment settings within a predetermined time, as mutual access rights authentication information in a black box environment, and the processing function component smart contract tampering check means checks the first processing smart contract linked to the processing smart contract recorded by the mutual access rights authentication information recording means. The system detects whether or not the system has been tampered with by comparing the hash value of the deployment information, which serves as authentication information for the mutual access rights between the first smart contract component and the second smart contract component, with the hash value of the mutual deployment information when the first smart contract component, which is deployed at the first address associated with the processing smart contract in the shared memory within the blockchain, and the second smart contract component, which is deployed at the second address associated with the processing smart contract in the shared memory within the blockchain, are interconnected. With this configuration, it becomes possible to implement a detection process for whether or not the smart contract, which is a component of the processing function, has been tampered with.

[0045] Furthermore, in the digital data destruction and leakage prevention system of the present invention, it is preferable that the smart contract processing function operation control means for processing detects tampering in at least one of the first processing function component smart contract deployed at the first address associated with the smart contract for processing in the shared memory within the blockchain, and the second processing function component smart contract deployed at the second address associated with the smart contract for processing in the shared memory within the blockchain, and further notifies the authority holders of each smart contract of an error in mutual access. With this configuration, authorized personnel can recognize if a designated smart contract has been tampered with within the system, and take prompt corrective action such as restoring the system.

[0046] Therefore, according to the present invention, a digital data destruction and leakage prevention system is obtained that can prevent the destruction or leakage of important information such as confidential information and personal information, even if the processing smart contract is tampered with by cryptographic analysis by an external quantum computer or by an insider attack within the system.

[0047] Furthermore, the digital data destruction and leakage prevention system of the present invention is preferably configured to be provided in a real-time evacuation and recovery type digital asset guard service provision system which automatically communicates between two or more authenticated individuals using a predetermined communication function, applies a meaningless processing to the digital data to be protected by a combination of a processing method based on bidirectional agreement between two or more authenticated individuals and polynomial secret sharing encryption processing, sorts the data into multiple points in a black box environment, manages the sorted file information in a black box environment, manages the files sorted into multiple points in a distributed manner, and manages index information for the distributed files in an encrypted state. Preferably, the real-time digital asset guard service provision system is a unit that combines blockchain and file distributed management functions, etc., consisting of a group of nodes that combine nodes in multiple locations in different regions around the world, and is constructed with multiple planets that form a single unit for providing services that implement distributed smart contracts, server applications, etc., and is mainly a closed blockchain such as a private or consortium type, and is composed of at least one distributed ledger structure composed of multiple chains that may include a group of distributed ledgers and a public blockchain, etc., an authenticated individual authentication system that authenticates two or more authenticated individuals, an agreement information acquisition means that transmits and exchanges predetermined information between multiple authenticated individuals authenticated by the authenticated individual authentication system and acquires agreement information between the authenticated individuals regarding the execution of predetermined processes, including the process of saving, restoring, and deleting personal information, important information and other digital data of the authenticated individuals to be saved, acquired by the agreement information acquisition means Based on agreement information regarding the execution of predetermined processes including the backup, restoration, and deletion of digital data, the system includes: an encryption / polynomial secret sharing partitioning means having a processing smart contract that has the function of partitioning the personal information, important information, and other digital data of the authenticated individual to be backed up into multiple file data by encryption / polynomial secret sharing; a security point sorting means that sorts the multiple file data partitioned by the encryption / polynomial secret sharing partitioning means into one of multiple security points; a security point sorting destination information management means that manages the destination information of the file data sorted by the security point sorting means in a black box environment; and a modification / distributed recording means having a processing smart contract that has the function of modifying the file data sorted by the security point sorting means and distributing the recording of file data that does not exceed the block size to multiple nodes of a distributed management file group established on the blockchain, and file data that exceeds the block size to multiple nodes of a distributed management file group separate from the blockchain.The index information creation, encryption, and recording means comprises a processing smart contract that has the function of creating and encrypting index information of file data distributed and recorded by the modification and distributed recording means, and recording it on a specific node of the blockchain in a black box environment; an index information decryption means comprises a processing smart contract that has the function of decrypting the index information of the file data recorded by the index information creation, encryption, and recording means for each group of file data associated with the information of each of the protected points managed in a black box environment by the protected point sorting destination information management means based on the consent information regarding the execution of the restoration process of personal information, important information, and other digital data of the authenticated individual to be restored, obtained by the consent information acquisition means; and based on the index information decrypted by the index information decryption means, the modification and distribution are performed on multiple nodes of the distributed management file of the protected blockchain corresponding to the file data and on multiple nodes of a distributed management file separate from the blockchain. A file data extraction means having a processing smart contract that has the function of extracting each of the recorded file data and restoring them to their state before modification; a digital data restoration means having a processing smart contract that has the function of integrating and decrypting multiple fragmented file data extracted by the file data extraction means and restoring them to the personal information, important information, and other digital data of the authentication individual before backup; a deletion processing index information decryption means having a processing smart contract that has the function of decrypting the index information of the file data recorded in the index information creation, encryption, and recording means for each group of file data associated with the information of each of the protection points managed in a black box environment by the protection point sorting destination information management means, based on the agreement information regarding the execution of the deletion processing of the personal information, important information, and other digital data of the authentication individual to be deleted, obtained by the agreement information acquisition means; and based on the index information decrypted by the deletion processing index information decryption means,The system includes: a file data deletion means having a processing smart contract that has the function of deleting the file data from a predetermined generation prior to the modified and distributed recorded on multiple nodes of the distributed management file of the blockchain corresponding to the file data and on multiple nodes of a distributed management file separate from the blockchain; and a second file data deletion means that deletes the information of the protection point associated with the file data to be deleted, which is managed in a black box environment by the protection point sorting destination information management means, based on the agreement information regarding the execution of deletion processing of personal information, important information, and other digital data of the authenticated individual obtained by the agreement information acquisition means. In this way, the real-time evacuation and restoration type digital asset guard service provision system makes it possible to protect digital assets, which (basically) consist of small amounts of data linked to personal information, in real time. It provides strong and efficient protection for important information such as confidential and personal information from high-level cyberattacks and physical destruction. Even if subjected to cryptographic analysis by quantum computers or EMP attacks, it is possible to restore important information without it being stolen by third parties, or even if the managed information is stolen by a third party, it is impossible for the third party to restore it. This eliminates the risks of the blockchain's single-address (specific key) structure regarding digital asset information management. In addition, it eliminates the risks of the blockchain's single-address (specific key) structure regarding processing smart contracts, making it possible to prevent the destruction or leakage of important information such as confidential and personal information even if the processing smart contract is tampered with by cryptographic analysis by quantum computers from outside or by internal malicious actors. This makes it possible to provide extremely strong protection for important information such as confidential and personal information against high-level cyberattacks and physical destruction. The embodiments for carrying out the present invention will be described below with reference to the drawings.

[0048] First Embodiment Figure 1 is a schematic diagram illustrating the configuration of a digital data destruction and leakage prevention system according to the first embodiment of the present invention. Figure 2 is a schematic diagram illustrating the configuration of a processing smart contract included in the digital data destruction and leakage prevention system of the first embodiment. Figure 3 is a schematic diagram illustrating the configuration of a first processing function component smart contract included in the digital data destruction and leakage prevention system of the first embodiment. Figure 4 is a schematic diagram illustrating the configuration of a second processing function component smart contract included in the digital data destruction and leakage prevention system of the first embodiment. Figure 5 is a schematic diagram illustrating the configuration of a processing function component smart contract deployment information recording and updating means included in the digital data destruction and leakage prevention system of the first embodiment. Figure 6 is a schematic diagram illustrating the configuration of a mutual access rights authentication information recording means included in the digital data destruction and leakage prevention system of the first embodiment. Figure 7 is a schematic diagram illustrating the configuration of a deployment information extraction means included in the digital data destruction and leakage prevention system of the first embodiment. Figure 8 is a schematic diagram illustrating the configuration of the smart contract tampering check means, a processing function component of the digital data destruction and leakage prevention system of the first embodiment. Figure 9 is a schematic diagram illustrating the configuration of the smart contract processing function operation control means for processing, a processing smart contract, a system of digital data destruction and leakage prevention of the first embodiment.

[0049] The first embodiment of the digital data destruction and leakage prevention system 1 comprises a distributed ledger in blockchain or other distributed ledger technology, and a predetermined number of processing smart contracts 11 for performing predetermined processing using the digital data managed in the distributed ledger. 1~nA system for preventing the destruction and leakage of digital data by a tampered processing smart contract in a system constructed with at least [[ID=]], where n is an integer of 2 or more. For example, as shown in FIG. 1, it has a processing function component smart contract deployment information recording / updating means 12, a mutual access right authentication information recording means 16, a deployment information extraction means 13, a processing function component smart contract tampering check means 14, and a processing smart contract processing function operation control means 15.

[0050] Processing smart contract 11 1~n (wherein n is an integer greater than or equal to 2) All processing smart contracts 11 1~n Each of [[ID=]], where n is an integer of 2 or more, for example, as shown in FIG. 2, has a first processing function component smart contract 11a associated with the processing smart contract 1~n Each of [[ID=]], where n is an integer of 2 or more, has a second processing function component smart contract 11b associated with the processing smart contract 1~n 1~n And each of all processing smart contracts 11 1~n Each of [[ID=]], where n is an integer of 2 or more, has a first processing function component smart contract 11a associated with the processing smart contract 1~n Each of [[ID=]], where n is an integer of 2 or more, has a second processing function component smart contract 11b associated with the processing smart contract 1~n 1~n

[0051] First processing function component smart contract 11a 1~n (wherein n is an integer greater than or equal to 2) The first processing function component smart contract 11a 1~n(where n is an integer greater than or equal to 2) is deployed (a compiled transaction is set) to a first address in the shared memory within the blockchain that can only be accessed by the first key held by the first authority holder, as shown in Figure 3.

[0052] Second processing function component smart contract 11b 1~n (wherein n is an integer greater than or equal to 2) Second processing function component smart contract 11b 1~n (where n is an integer greater than or equal to 2) is deployed (a compiled transaction is set) to a second address that can only be accessed by a second key held by a second authority in the shared memory within the blockchain, as shown in Figure 4, for example.

[0053] Processing function component Smart contract deployment information recording / updating means 12 The processing function component smart contract deployment information recording / updating means 12 records and updates each processing smart contract 11 only when both approval using the first key held by the first authority and approval using the second key held by the second authority have been made, as shown in Figure 5, for example. 1~n A first processing function component smart contract 11a associated with (where n is an integer of 2 or greater). 1~n Deployment information and second processing function component smart contract 11b for (where n is an integer of 2 or greater) 1~n Deployment information for (where n is an integer greater than or equal to 2) is configured to be recorded or updated in a black-box environment.

[0054] Mutual access rights authentication information recording means 16 The mutual access rights authentication information recording means 16 records, for example, the smart contracts 11 for each process that occur when the devices are first interconnected after deployment settings within a predetermined time, as shown in Figure 6. 1~n A first processing function component smart contract 11a associated with (where n is an integer of 2 or greater). 1~n (wherein n is an integer greater than or equal to 2) and the second processing function component smart contract 11b 1~nThe hash values ​​of the mutual deployment information (where n is an integer greater than or equal to 2) are configured to be recorded in a black-box environment as authentication information for mutual access rights.

[0055] Deployment information extraction means 13 The deployment information extraction means 13, for example as shown in Figure 7, retrieves the smart contract 11 for processing that has been recorded or updated in a black box environment by the smart contract deployment information recording / updating means 12 for processing function components. p (where p is an integer between 1 and n) The first processing function component smart contract 11a associated with p Deployment information (where p is an integer between 1 and n) and the second processing function component smart contract 11b p It is configured to extract deployment information for (where p is an integer between 1 and n, inclusive).

[0056] Processing function component smart contract tampering check means 14 The processing function component smart contract tampering check means 14, for example as shown in Figure 8, checks the processing smart contract 11 extracted by the deployment information extraction means 13. p (where p is an integer between 1 and n) The first processing function component smart contract 11a associated with p Deployment information (where p is an integer between 1 and n, inclusive) and the smart contract 11 for the relevant processing p (where p is an integer between 1 and n) The second processing function component smart contract 11b associated with this (where p is an integer between 1 and n) p Using the deployment information (where p is an integer between 1 and n), the smart contract 11 for processing in the shared memory within the blockchain is used. p The first processing function component smart contract 11a deployed to the first address associated with (where p is an integer between 1 and n, inclusive) p(where p is an integer between 1 and n), the second processing function component smart contract 11b deployed to the second address associated with the processing smart contract in the shared memory within the blockchain. p The system is configured to check for tampering with each of the values ​​p (where p is an integer between 1 and n, inclusive). More specifically, the smart contract tampering check means 14 of the processing function components checks the processing smart contract 11 recorded by the mutual access rights authentication information recording means 16. p The first processing function component smart contract 11a is associated with (where p is an integer between 1 and n, inclusive). p (where p is an integer between 1 and n, and the second processing function component smart contract 11b) p Using the hash value of the deployment information as authentication information for mutual access rights (where p is an integer between 1 and n), the smart contract 11 for processing in the shared memory within the blockchain p The first processing function component smart contract 11a deployed to the first address associated with (where p is an integer between 1 and n, inclusive) p (where p is an integer between 1 and n), and the smart contract 11 for the processing in the shared memory within the blockchain. p The second processing function component smart contract 11b is deployed to the second address associated with (where p is an integer between 1 and n, inclusive). p (where p is an integer between 1 and n) The system is configured to detect whether or not tampering has occurred by comparing it with the hash values ​​of the mutual deployment information when the two systems are interconnected.

[0057] Smart contract processing function operation control means 15 The smart contract processing function operation control means 15 controls each processing smart contract 11, for example, as shown in Figure 9. 1~nBefore each processing function (where n is an integer of 2 or more) is executed, the deployment information extraction means 13 and the processing function component smart contract tampering check means 14 are activated sequentially, and according to the result of the tampering check by the processing function component smart contract tampering check means 14, the processing smart contract 11 p The operation of the processing function (where p is an integer between 1 and n, inclusive) is controlled as follows: (15-1) Smart contract for the said processing in shared memory within the blockchain 11 p The first processing function component smart contract 11a deployed to the first address associated with (where p is an integer between 1 and n, inclusive) p (where p is an integer between 1 and n), the smart contract 11 for the processing in the shared memory within the blockchain p The second processing function component smart contract 11b is deployed to the second address associated with (where p is an integer between 1 and n, inclusive). p If no tampering is detected in any of the (where p is an integer between 1 and n), the smart contract 11 for processing in the shared memory within the blockchain will be processed. p The first processing function component smart contract 11a deployed to the first address associated with (where p is an integer between 1 and n, inclusive) p (where p is an integer between 1 and n, and the smart contract 11 for the processing in the shared memory within the blockchain) p The second processing function component smart contract 11b is deployed to the second address associated with (where p is an integer between 1 and n, inclusive). p (where p is an integer between 1 and n) is linked to the smart contract 11 for the said processing. p The relevant processing function is activated (where p is an integer between 1 and n, inclusive). (15-2) Smart contract for the said processing in shared memory within the blockchain 11 pThe first processing function component smart contract 11a deployed to the first address associated with (where p is an integer between 1 and n, inclusive) p (where p is an integer between 1 and n), the smart contract 11 for the processing in the shared memory within the blockchain p The second processing function component smart contract 11b is deployed to the second address associated with (where p is an integer between 1 and n, inclusive). p If tampering is detected in at least one of the following (where p is an integer between 1 and n), the smart contract 11 for processing in the shared memory within the blockchain will be terminated. p The first processing function component smart contract 11a deployed to the first address associated with (where p is an integer between 1 and n, inclusive) p (where p is an integer between 1 and n, and the smart contract 11 for the processing in the shared memory within the blockchain) p The second processing function component smart contract 11b is deployed to the second address associated with (where p is an integer between 1 and n, inclusive). p (However, p is an integer between 1 and n) and the smart contract 11 for the said processing are not linked. p The relevant processing function (where p is an integer between 1 and n, inclusive) will not be activated. Furthermore, the respective smart contract's authorized users will be notified of the cross-access error.

[0058] Processing flow of the digital data destruction and leakage prevention system 1 of the first embodiment The processing flow in the digital data destruction and leakage prevention system of the first embodiment configured in this way will be explained with reference to the drawings.

[0059] (Processing flow - Part 1: Deployment phase of the processing smart contract) (Figure 10) (S1-1) First processing function component smart contract 11a by the first authorized person 1~n Deployment (where n is an integer greater than or equal to 2) The first authority holder uses the first key it possesses to execute the first processing function component smart contract 11a 1~nThe (where n is an integer greater than or equal to 2) is deployed (a compiled transaction is set) to a first address in the shared memory within the blockchain that can only be accessed by the first key held by the first authority holder.

[0060] (S1-2) Second processing function component smart contract 11b by the second authorized party 1~n Deployment (where n is an integer greater than or equal to 2) The second authority holder uses the second key it possesses to execute the second processing function component smart contract 11b 1~n The (where n is an integer greater than or equal to 2) is deployed (a compiled transaction is set) to a second address in the shared memory within the blockchain that can only be accessed by a second key held by the second authority holder.

[0061] (S1-3) Recording or updating deployment information for smart contracts that are processing function components. The first authority holder uses the first key he / she possesses, and the second authority holder uses the second key he / she possesses, respectively, to execute the first processing function component smart contract 11a 1~n Deployment information and second processing function component smart contract 11b for (where n is an integer of 2 or greater) 1~n Authorize the recording or updating of deployment information for (where n is an integer greater than or equal to 2). The processing function component smart contract deployment information recording / updating means 12 records and updates each processing smart contract 11 only when both approval using the first key held by the first authority and approval using the second key held by the second authority have been made. 1~n A first processing function component smart contract 11a associated with (where n is an integer of 2 or greater). 1~n Deployment information and second processing function component smart contract 11b for (where n is an integer of 2 or greater) 1~n The system records or updates deployment information for (where n is an integer greater than or equal to 2) in a black-box environment.

[0062] (S1-4) Recording of mutual access rights authentication information for smart contracts, which are components of mutual processing functions. The first and second authorized persons each deployed the processing smart contract 11 within a specified time (e.g., within 10 minutes). 1~n A first processing function component smart contract 11a associated with (where n is an integer of 2 or greater). 1~n (wherein n is an integer greater than or equal to 2) and the second processing function component smart contract 11b 1~n Activate and interconnect the following (where n is an integer greater than or equal to 2). The mutual access rights authentication information recording means 16 records the smart contracts 11 for each process when the mutual connection is first established after the deployment settings within a predetermined time. 1~n A first processing function component smart contract 11a associated with (where n is an integer of 2 or greater). 1~n (wherein n is an integer greater than or equal to 2) and the second processing function component smart contract 11b 1~n The hash values ​​of the mutual deployment information (where n is an integer greater than or equal to 2) are recorded in a black-box environment as authentication information for mutual access rights.

[0063] (Processing flow - Part 2: Predetermined processing steps by the processing smart contract) (Figures 11 and 12) (S2-1) Operation of the deployment information extraction means 13 and the smart contract tampering check means 14 for processing function components. The smart contract processing function operation control means 15 controls each processing smart contract 11 1~n Before each processing function (where n is an integer of 2 or greater) is executed, the deployment information extraction means 13 and the processing function component smart contract tampering check means 14 are activated sequentially. (S2-1-1) Extraction of deployment information First, the deployment information extraction means 13 retrieves the smart contract 11 for processing, which has been recorded or updated in a black box environment by the smart contract deployment information recording / updating means 12 for processing function components. p (where p is an integer between 1 and n) The first processing function component smart contract 11a associated with p Deployment information (where p is an integer between 1 and n) and the second processing function component smart contract 11b p Extract deployment information for (where p is an integer between 1 and n, inclusive). (S2-1-2) Processing function component: Check for tampering with smart contracts Next, the smart contract tampering check means 14 checks the smart contract 11 for processing, which has been extracted by the deployment information extraction means 13. p (where p is an integer between 1 and n) The first processing function component smart contract 11a associated with p Deployment information (where p is an integer between 1 and n, inclusive) and the smart contract 11 for the relevant processing p (where p is an integer between 1 and n) The second processing function component smart contract 11b associated with this (where p is an integer between 1 and n) p Using the deployment information (where p is an integer between 1 and n), the smart contract 11 for processing in the shared memory within the blockchain is used. p The first processing function component smart contract 11a deployed to the first address associated with (where p is an integer between 1 and n, inclusive) p (where p is an integer between 1 and n), the second processing function component smart contract 11b deployed to the second address associated with the processing smart contract in the shared memory within the blockchain. p Check whether each of the values ​​(where p is an integer between 1 and n, inclusive) has been tampered with. More specifically, the smart contract tampering check means 14 of the processing function components checks the processing smart contract 11 recorded by the mutual access rights authentication information recording means 16. p The first processing function component smart contract 11a is associated with (where p is an integer between 1 and n, inclusive). p (where p is an integer between 1 and n, and the second processing function component smart contract 11b) p Using the hash value of the deployment information as authentication information for mutual access rights (where p is an integer between 1 and n), the smart contract 11 for processing in the shared memory within the blockchain p The first processing function component smart contract 11a deployed to the first address associated with (where p is an integer between 1 and n, inclusive) p(However, p is an integer from 1 to n), and the smart contract 11 for the processing in the shared memory within the blockchain p (However, p is an integer from 1 to n), the second processing functional component smart contract 11b deployed to the second address associated therewith p (However, p is an integer from 1 to n), and detects the presence or absence of tampering by comparing with the hash value of the mutual deployment information when they are interconnected.

[0064] (S2-2) Processing function component Smart contract tampering check result When Smart contract 11 for processing p Control of the operation of the said processing function (where p is an integer between 1 and n, inclusive) The processing smart contract processing functional operation control means 15 controls the operation of the processing function of the smart contract 11 p (However, p is an integer from 1 to n) as follows according to the result of the tampering check by the tampering check means 14 for the processing functional component smart contract.

[0065] Processing control when tampering with the processing function component smart contract is not detected. The smart contract 11 for the processing in the shared memory within the blockchain p (However, p is an integer from 1 to n), the first processing functional component smart contract 11a deployed to the first address associated therewith p (However, p is an integer from 1 to n), the smart contract 11 for the processing in the shared memory within the blockchain p (However, p is an integer from 1 to n), the second processing functional component smart contract 11b deployed to the second address associated therewith p (However, p is an integer from 1 to n), when no tampering is detected in any of them, the smart contract 11 for the processing in the shared memory within the blockchain p (However, p is an integer from 1 to n), the first processing functional component smart contract 11a deployed to the first address associated therewith p(However, p is an integer from 1 to n), and the smart contract 11 for the process in the shared memory within the blockchain p (However, p is an integer from 1 to n), the second processing functional component smart contract 11b deployed to the second address associated therewith p (However, p is an integer from 1 to n) are linked, and the smart contract 11 for the process p (However, p is an integer from 1 to n) operates the corresponding processing function.

[0066] Processing control when tampering with a smart contract, a component of the processing function, is detected. The smart contract 11 for the process in the shared memory within the blockchain p (However, p is an integer from 1 to n), the first processing functional component smart contract 11a deployed to the first address associated therewith p (However, p is an integer from 1 to n), the smart contract 11 for the process in the shared memory within the blockchain p (However, p is an integer from 1 to n), the second processing functional component smart contract 11b deployed to the second address associated therewith p (However, p is an integer from 1 to n), if tampering is detected in at least any one of them, the smart contract 11 for the process in the shared memory within the blockchain p (However, p is an integer from 1 to n), the first processing functional component smart contract 11a deployed to the first address associated therewith p (However, p is an integer from 1 to n), and the smart contract 11 for the process in the shared memory within the blockchain p (However, p is an integer from 1 to n), the second processing functional component smart contract 11b deployed to the second address associated therewith p (However, p is an integer from 1 to n) are not linked, and the smart contract 11 for the process p (However, p is an integer from 1 to n) does not operate the corresponding processing function. Furthermore, it notifies the respective smart contract's authority of any cross-access errors.

[0067] Effects of the Digital Data Destruction and Leakage Prevention System of the First Embodiment According to the first embodiment of the digital data destruction and leakage prevention system 1, all processing smart contracts 11 1~n In each of the above (where n is an integer greater than or equal to 2), the first processing function component smart contract 11a associated with the processing smart contract is deployed (a compiled transaction is set) to a first address in the shared memory within the blockchain that is accessible only with the first key held by the first authority holder. 1~n (where n is an integer greater than or equal to 2) and a second processing function component smart contract 11b associated with the smart contract for the said processing, which is deployed (a compiled transaction is set) to a second address in the shared memory within the blockchain that can only be accessed by a second key held by a second authority. 1~n (where n is an integer greater than or equal to 2) and all processing smart contracts 11 1~n Each of (where n is an integer of 2 or greater) is a first processing function component smart contract 11a associated with the processing smart contract. 1~n (wherein n is an integer of 2 or greater) and a second processing function component smart contract 11b linked to the smart contract for processing. 1~n Since the smart contract is configured to operate when a single processing function is linked to (where n is an integer of 2 or more), if either the first processing function component smart contract linked to the processing smart contract or the second processing function component smart contract linked to the processing smart contract is tampered with and deployed to the address of the other, the processing function of the processing smart contract can be prevented from operating.

[0068] Furthermore, according to the digital data destruction and leakage prevention system 1 of the first embodiment, the respective processing smart contracts 11 are only processed when both approval using the first key held by the first authority and approval using the second key held by the second authority have been made. 1~n A first processing function component smart contract 11a associated with (where n is an integer of 2 or greater). 1~n Deployment information and second processing function component smart contract 11b for (where n is an integer of 2 or greater) 1~n The system is configured to include a smart contract deployment information recording / updating means 12 that records or updates deployment information for (where n is an integer of 2 or more) in a black box environment. For example, even if a key held by one of the authorized persons is stolen, and the smart contract of that one of the authorized persons is tampered with and deployed to an address accessed by the key held by that one of the authorized persons in the shared memory within the blockchain, it is possible to prevent the updating of the deployment information of the tampered smart contract of that one of the authorized persons.

[0069] Furthermore, according to the digital data destruction and leakage prevention system 1 of the first embodiment, the smart contract 11 for processing extracted by the deployment information extraction means p (where p is an integer between 1 and n) The first processing function component smart contract 11a associated with p Deployment information (where p is an integer between 1 and n, inclusive) and the smart contract 11 for the relevant processing p (where p is an integer between 1 and n) The second processing function component smart contract 11b associated with this (where p is an integer between 1 and n) p Using the deployment information (where p is an integer between 1 and n), the smart contract 11 for processing in the shared memory within the blockchain is used. p The first processing function component smart contract 11a deployed to the first address associated with (where p is an integer between 1 and n, inclusive) p(where p is an integer between 1 and n), the smart contract 11 for the processing in the shared memory within the blockchain p The second processing function component smart contract 11b is deployed to the second address associated with (where p is an integer between 1 and n, inclusive). p The smart contract tampering check means 14 is configured to check for tampering with each of the processing function components (where p is an integer between 1 and n), so it is possible to detect whether or not the smart contracts deployed in the shared memory within the blockchain have been tampered with.

[0070] Furthermore, according to the digital data destruction and leakage prevention system 1 of the first embodiment, each processing smart contract 11 1~n Before each processing function (where n is an integer of 2 or greater) is executed, the deployment information extraction means 13 and the processing function component smart contract tampering check means 14 are sequentially activated, and as a result of the tampering check by the processing function component smart contract tampering check means 14, the processing smart contract 11 in the shared memory within the blockchain is selected. p The first processing function component smart contract 11a deployed to the first address associated with (where p is an integer between 1 and n, inclusive) p (where p is an integer between 1 and n), the smart contract 11 for the processing in the shared memory within the blockchain p The second processing function component smart contract 11b is deployed to the second address associated with (where p is an integer between 1 and n, inclusive). p If no tampering is detected in any of the (where p is an integer between 1 and n), the smart contract 11 for processing in the shared memory within the blockchain will be processed. p The first processing function component smart contract 11a deployed to the first address associated with (where p is an integer between 1 and n, inclusive) p(where p is an integer between 1 and n, and the smart contract 11 for the processing in the shared memory within the blockchain) p The second processing function component smart contract 11b is deployed to the second address associated with (where p is an integer between 1 and n, inclusive). p (where p is an integer between 1 and n) is linked to the smart contract 11 for the said processing. p The processing function (where p is an integer between 1 and n) is activated, and the smart contract 11 for the processing in the shared memory within the blockchain is activated. p The first processing function component smart contract 11a deployed to the first address associated with (where p is an integer between 1 and n, inclusive) p (where p is an integer between 1 and n), the smart contract 11 for the processing in the shared memory within the blockchain p The second processing function component smart contract 11b is deployed to the second address associated with (where p is an integer between 1 and n, inclusive). p If tampering is detected in at least one of the following (where p is an integer between 1 and n), the smart contract 11 for processing in the shared memory within the blockchain will be terminated. p The first processing function component smart contract 11a deployed to the first address associated with (where p is an integer between 1 and n, inclusive) p (where p is an integer between 1 and n, and the smart contract 11 for the processing in the shared memory within the blockchain) p The second processing function component smart contract 11b is deployed to the second address associated with (where p is an integer between 1 and n, inclusive). p (However, p is an integer between 1 and n) and the smart contract 11 for the said processing are not linked. p If the system is configured to include a smart contract processing function operation control means 15 that controls the operation of the processing function (where p is an integer between 1 and n) so as not to operate, it is possible to prevent the operation of the processing function of a smart contract whose processing function component smart contract has been tampered with.

[0071] Furthermore, according to the digital data destruction and leakage prevention system 1 of the first embodiment, each processing smart contract 11 is interconnected for the first time after deployment settings within a predetermined time. 1~n A first processing function component smart contract 11a associated with (where n is an integer of 2 or greater). 1~n (wherein n is an integer greater than or equal to 2) and the second processing function component smart contract 11b 1~n The system further includes a mutual access rights authentication information recording means 16 that records the hash values ​​of mutual deployment information of (where n is an integer of 2 or more) as mutual access rights authentication information in a black box environment, and a processing function component smart contract tampering check means 14 checks the processing smart contract 11 recorded by the mutual access rights authentication information recording means 16. p The first processing function component smart contract 11a is associated with (where p is an integer between 1 and n, inclusive). p (where p is an integer between 1 and n) and the second processing function component smart contract 11b p Using the hash value of the deployment information as authentication information for mutual access rights (where p is an integer between 1 and n), the smart contract 11 for processing in the shared memory within the blockchain p The first processing function component smart contract 11a deployed to the first address associated with (where p is an integer between 1 and n, inclusive) p (where p is an integer between 1 and n, and the smart contract 11 for the processing in the shared memory within the blockchain) p The second processing function component smart contract 11b is deployed to the second address associated with (where p is an integer between 1 and n, inclusive). p (where p is an integer between 1 and n) By comparing the hash values ​​of the mutual deployment information when the two are interconnected, the system is configured to detect whether or not tampering has occurred, thus enabling the implementation of a detection process for whether or not the smart contract, a processing function component, has been tampered with.

[0072] Furthermore, according to the digital data destruction and leakage prevention system 1 of the first embodiment, the smart contract processing function operation control means 15 controls the smart contract 11 for processing in the shared memory within the blockchain. p The first processing function component smart contract 11a deployed to the first address associated with (where p is an integer between 1 and n, inclusive) p (where p is an integer between 1 and n, and the smart contract 11 for the processing in the shared memory within the blockchain) p The second processing function component smart contract 11b is deployed to the second address associated with (where p is an integer between 1 and n, inclusive). p If tampering is detected in at least one of the following (where p is an integer between 1 and n), the system is configured to further notify the respective smart contract's authority of a mutual access error. This allows the authority to recognize that a given smart contract has been tampered with within the system and to take prompt corrective action, such as restoring the system.

[0073] Therefore, according to the digital data destruction and leakage prevention system 1 of the first embodiment, even if the processing smart contract is tampered with by cryptographic analysis by an external quantum computer or by an insider, a digital data destruction and leakage prevention system is obtained that can prevent the destruction or leakage of important information such as confidential information and personal information.

[0074] Second Embodiment Figure 13 is a schematic diagram illustrating the overall configuration of a real-time backup and recovery type digital asset guard service provision system equipped with a digital data destruction and leakage prevention system according to the second embodiment of the present invention. Figure 14 is a schematic diagram illustrating the overall processing functions of the real-time backup and recovery type digital asset guard service provision system in the second embodiment. Figure 15 is a schematic diagram illustrating the configuration of the real-time backup and recovery type digital asset guard service provision system in the second embodiment. Figure 16 is a schematic diagram illustrating the configuration of the authentication individual authentication system provided in the real-time backup and recovery type digital asset guard service provision system in the second embodiment. Figure 17 is a schematic diagram illustrating the configuration of the consensus information acquisition means provided in the real-time backup and recovery type digital asset guard service provision system in the second embodiment. Figure 18 is a schematic diagram illustrating the configuration of the encryption / polynomial secret sharing partitioning means provided in the real-time backup and recovery type digital asset guard service provision system in the second embodiment. Figure 19 is a schematic diagram illustrating the configuration of the protection point sorting means provided in the real-time backup and recovery type digital asset guard service provision system in the second embodiment. Figure 20 is a schematic diagram illustrating the configuration of the preservation point sorting destination information management means in the real-time backup and recovery type digital asset guard service provision system in the second embodiment. Figure 21 is a schematic diagram illustrating the configuration of the modification and distributed recording means in the real-time backup and recovery type digital asset guard service provision system in the second embodiment. Figure 22 is a schematic diagram illustrating the configuration of the index information creation, encryption, and recording means in the real-time backup and recovery type digital asset guard service provision system in the second embodiment. Figure 23 is a schematic diagram illustrating the configuration of the index information decryption means in the real-time backup and recovery type digital asset guard service provision system in the second embodiment. Figure 24 is a schematic diagram illustrating the configuration of the file data extraction means in the real-time backup and recovery type digital asset guard service provision system in the second embodiment.Figure 25 is a schematic diagram illustrating the configuration of the digital data recovery means provided in the real-time backup and recovery type digital asset guard service provision system in the second embodiment. Figure 26 is a schematic diagram illustrating the configuration of the index information decoding means during deletion processing provided in the real-time backup and recovery type digital asset guard service provision system in the second embodiment. Figure 27 is a schematic diagram illustrating the configuration of the file data deletion means provided in the real-time backup and recovery type digital asset guard service provision system in the second embodiment. Figure 28 is a schematic diagram illustrating the configuration of the second file data deletion means provided in the real-time backup and recovery type digital asset guard service provision system in the second embodiment.

[0075] The second embodiment of the digital data destruction and leakage prevention system 1 is configured substantially the same as the first embodiment of the digital data destruction and leakage prevention system 1, as shown in Figure 13, for example, and is provided in the real-time evacuation and restoration type digital asset guard service provision system 100.

[0076] Real-time evacuation and restoration type digital asset guarding service provision system 100 The real-time evacuation and restoration type digital asset guard service provision system 100 is configured, for example as shown in Figure 14, to automatically communicate between two or more authenticated individuals using a predetermined communication function, to perform meaningless processing on the digital data to be protected by combining a processing method based on bidirectional agreement between two or more authenticated individuals with polynomial secret sharing encryption processing, to sort the data into multiple points in a black box environment, to manage the sorted file information in a black box environment, to manage the files sorted into multiple points in a distributed manner, and to manage the index information of the distributed files in an encrypted state.

[0077] More specifically, the real-time digital asset guard service provision system 100 is a unit that combines blockchain and file distribution management functions, etc., consisting of a group of nodes that combine nodes in multiple locations in different regions around the world. It is constructed with multiple planets that form a single unit for providing services that implement distributed smart contracts and server applications, etc. It is primarily a closed blockchain, such as a private or consortium type, and may include multiple chains such as distributed ledger groups and public blockchains. The system comprises at least one distributed ledger structure, and, for example, as shown in Figure 15, an authentication individual authentication system 101, a consensus information acquisition means 102, an encryption / polynomial secret sharing / decomposition means 103, a security point sorting means 104, a security point sorting destination information management means 105, an modification / distributed recording means 106, an index information creation / encryption / recording means 107, an index information decryption means 108, a file data extraction means 109, a digital data recovery means 110, an index information decryption means 111 during deletion processing, a file data deletion means 112, and a second file data deletion means 113.

[0078] Authenticated Individual Recognition System 101 The authentication individual authentication system 101 is configured to perform authentication for two or more authentication individuals, for example, as shown in Figure 16.

[0079] Agreement information acquisition means 102 The agreement information acquisition means 102 is configured, for example as shown in Figure 17, to transmit and exchange predetermined information between multiple authenticated individuals authenticated by the authenticated individual authentication system 101, and to acquire agreement information between the authenticated individuals regarding the execution of predetermined processes, including the backup, restoration, and deletion of personal information, important information, and other digital data of the authenticated individuals to be backed up.

[0080] Encryption / Polynomial Secret Sharing and Splitting Method 103 The encryption / polynomial secret sharing partitioning means 103 is configured to have a processing smart contract that has the function of partitioning the personal information, important information, and other digital data of the authenticated individual to be backed up into multiple file data by encryption / polynomial secret sharing, based on agreement information regarding the execution of predetermined processing, including backing up, restoring, and deleting processing of personal information, important information, and other digital data of the authenticated individual to be backed up, which is obtained by the agreement information acquisition means 101.

[0081] Conservation point sorting method 104 The preservation point sorting means 104 is configured, for example as shown in Figure 19, to sort multiple file data partitioned by the encryption / polynomial secret sharing partitioning means 103 by associating them with one of multiple preservation points.

[0082] Preservation point sorting destination information management means 105 The preservation point sorting destination information management means 105 is configured to manage the sorting destination information of file data sorted by the preservation point sorting means 104 in a black box environment, for example, as shown in Figure 20.

[0083] Modification / distributed recording means 106 The modification and distributed recording means 106 is configured to have a processing smart contract that, for example as shown in Figure 21, modifies the file data sorted by the preservation point sorting means 105 and distributes the recording of file data that does not exceed the block size to multiple nodes of a distributed management file group provided on the blockchain, and to multiple nodes of a distributed management file group separate from the blockchain for file data that exceeds the block size.

[0084] Index information creation, encryption, and recording means 107 The index information creation, encryption, and recording means 107 is configured to have a processing smart contract that has the function of creating and encrypting index information of file data distributed and recorded by the modification and distributed recording means 106, as shown in Figure 22, and recording it on a specific node of the blockchain in a black box environment.

[0085] Index information decoding means 108 The index information decryption means 108 is configured, for example as shown in Figure 23, to have a processing smart contract that has the function of decrypting the index information of the file data recorded by the index information creation, encryption, and recording means 107 for each group of file data associated with the information of each of the protected points managed in a black box environment by the protected point sorting destination information management means 105, based on the consent information regarding the execution of the restoration process of personal information, important information, and other digital data of the authenticated individual to be restored, which is acquired by the consent information acquisition means 101.

[0086] File data extraction means 109 The file data extraction means 109 is configured, for example as shown in Figure 24, to have a processing smart contract that, based on the index information decrypted by the index information decryption means 108, extracts the modified and distributed recorded file data from multiple nodes of the distributed management file of the destination blockchain corresponding to the file data, and from multiple nodes of a distributed management file separate from the blockchain, respectively, and restores it to its state before modification.

[0087] Digital data recovery means 110 The digital data recovery means 110 is configured to have a processing smart contract that has the function of integrating and decrypting multiple fragmented file data extracted by the file data extraction means 109, as shown in Figure 25, to restore the personal information, important information, and other digital data of the authenticated individual before backup.

[0088] Deletion process index information decryption means 111 The deletion processing index information decryption means 111 is configured to have a processing smart contract that, for example as shown in Figure 26, has the function of decrypting the index information of the file data recorded in the index information creation, encryption, and recording means 107 for each group of file data associated with the information of each of the protected points managed in a black box environment by the protected point sorting destination information management means 105, based on the consent information regarding the execution of the deletion process of personal information, important information, and other digital data of the authenticated individual to be deleted, which is obtained by the consent information acquisition means 101.

[0089] File data deletion means 112 The file data deletion means 112 is configured, for example as shown in Figure 27, to have a processing smart contract that has the function of deleting the file data from a predetermined generation or earlier that has been modified and distributed recorded on multiple nodes of the distributed management file of the destination blockchain corresponding to the file data and on multiple nodes of a distributed management file separate from the blockchain, based on the index information decrypted by the index information decryption means 111 during the deletion process.

[0090] Second file data deletion means 113 The second file data deletion means 113 is configured, for example as shown in Figure 28, to delete information about the preservation point associated with the file data to be deleted, which is managed in a black box environment by the preservation point sorting destination information management means 105, based on agreement information regarding the execution of deletion processing of personal information, important information, and other digital data of the authenticated individual, which is obtained by the agreement information acquisition means 101.

[0091] Processing flow of the real-time evacuation and restoration type digital asset guard service provision system 100 equipped with the digital data destruction and leakage prevention system 1 of the second embodiment The processing flow in the real-time evacuation and restoration type digital asset guard service provision system 100 equipped with the digital data destruction and leakage prevention system 1 of the second embodiment configured in this way will be explained with reference to the drawings.

[0092] (Processing flow - Part 1: Common processing: Authentication of authenticated individuals and acquisition of agreement information) (Figure 29) (S11-1) Authentication of Authenticated Individuals The authenticated individual authentication system 101 performs authentication for each of two or more authenticated individuals. (S11-2) Acquisition of agreement information The agreement information acquisition means 102 transmits and exchanges predetermined information between multiple authenticated individuals authenticated by the authenticated individual authentication system 101, and acquires mutual agreement information among the authenticated individuals regarding the execution of predetermined processes, including the backup, restoration, and deletion of personal information, important information, and other digital data of the authenticated individuals to be backed up.

[0093] (Processing flow - Part 2: Digital data backup) (Figure 30) (S12-1) Encryption of digital data and polynomial secret sharing / partitioning The processing smart contract provided in the digital data encryption / polynomial secret sharing partitioning means 103 partitions the personal information, important information, and other digital data of the authenticated individual to be backed up into multiple file data by encryption / polynomial secret sharing, based on the agreement information regarding the execution of the backing-up process for the personal information, important information, and other digital data of the authenticated individual to be backed up, which is obtained by the agreement information acquisition means 101.

[0094] (S12-2) Sorting of conservation points The preservation point sorting means 104 sorts the multiple file data that have been separated by the encryption / polynomial secret sharing partitioning means 103 by associating them with one of the multiple preservation points.

[0095] (S12-3) Management of information on sorting destinations for maintenance points The preservation point sorting destination information management means 105 manages the sorting destination information of file data sorted by the preservation point sorting means 104 in a black box environment.

[0096] (S12-3) Modification and distribution of file data The processing smart contract provided in the modification / distributed recording means 106 modifies the file data sorted by the preservation point sorting means 105, and distributes the file data that does not exceed the block size to multiple nodes of a distributed management file group established on the blockchain, and the file data that exceeds the block size to multiple nodes of a distributed management file group separate from the blockchain.

[0097] (S12-4) Creating, encrypting, and recording index information The smart contract for processing provided in the index information creation, encryption, and recording means 107 creates and encrypts index information for file data that is distributed and recorded by the modification and distributed recording means 106, and records it on a specific node of the blockchain in a black box environment.

[0098] (Processing flow - Part 3: Digital data restoration) (Figure 31) (S13-1) Decryption of index information The processing smart contract provided in the index information decryption means 108 decrypts the index information of the file data recorded by the index information creation, encryption, and recording means 107 for each group of file data associated with the information of each said preservation point, which is managed in a black box environment by the preservation point sorting destination information management means 105, based on the agreement information regarding the execution of the restoration process of the personal information, important information, and other digital data of the authenticated individual to be restored, which is acquired by the agreement information acquisition means 101.

[0099] (S13-2) Extracting file data The processing smart contract provided in the file data extraction means 109 extracts the modified and distributed recorded file data from multiple nodes of the distributed management file on the blockchain where the file data is stored, and from multiple nodes of a distributed management file separate from the blockchain, based on the index information decoded by

[0100] (S13-3) Digital Data Recovery The processing smart contract provided in the digital data recovery means 110 integrates and decrypts multiple fragmented file data extracted by the file data extraction means 109 to restore the personal information, important information, and other digital data of the authenticated individual before backup.

[0101] (Processing flow - Part 4: Deletion of digital data) (Figure 32) (S14-1) Decryption of index information during deletion process The smart contract for processing provided in the deletion processing index information decryption means 111 decrypts the index information of the file data recorded in the index information creation, encryption, and recording means 107 for each group of file data associated with the information of each said preservation point, which is managed in a black box environment by the preservation point sorting destination information management means 105, based on the agreement information regarding the execution of the deletion process of the personal information, important information, and other digital data of the authenticated individual to be deleted, which is obtained by the agreement information acquisition means 101.

[0102] (S14-2) Deleting file data The smart contract for processing provided in the file data deletion means 112 deletes the modified and distributed recorded file data from a predetermined generation prior to the file data in question from multiple nodes of the distributed management file of the blockchain that is the storage destination corresponding to the file data, and from multiple nodes of a distributed management file separate from the blockchain, based on the index information decrypted by the index information decryption means 111 during the deletion process.

[0103] (S14-2') Deletion of the second file data The second file data deletion means 113 deletes the information of the preservation point associated with the file data to be deleted, which is managed in a black box environment by the preservation point sorting destination information management means 105, based on the agreement information regarding the execution of the deletion process of personal information, important information, and other digital data of the authenticated individual obtained by the agreement information acquisition means 101.

[0104] The processing flow (Figure 33) for the deployment phase and predetermined processing operation phase of the processing smart contract in the real-time evacuation and restoration type digital asset guard service provision system 100. In the second embodiment of the digital data destruction and leakage prevention system 1, the processing flow at the deployment stage and predetermined processing operation stage for the processing smart contracts provided in the digital data encryption / polynomial secret sharing / dividing means 103, the processing smart contracts provided in the modification / distributed recording means 106, the processing smart contracts provided in the index information creation / encryption / recording means 107, the processing smart contracts provided in the index information decryption means 108, the processing smart contracts provided in the file data extraction means 109, the processing smart contracts provided in the digital data restoration means 110, the processing smart contracts provided in the deletion processing index information decryption means 111, and the processing smart contracts provided in the file data deletion means 112 is substantially the same as that in the first embodiment of the digital data destruction and leakage prevention system 1 shown in Figures 10, 11, and 12.

[0105] Effects of the Digital Data Destruction and Leakage Prevention System of the Second Embodiment According to the second embodiment of the digital data destruction and leakage prevention system 1, a digital data destruction and leakage prevention system with substantially the same configuration as the first embodiment of the digital data destruction and leakage prevention system 1 is provided in a real-time evacuation and restoration type digital asset guard service provision system configured to automatically communicate between two or more authenticated individuals using a predetermined communication function, and to perform meaningless processing on the digital data to be protected by a combination of a processing method based on bidirectional agreement between two or more authenticated individuals and polynomial secret sharing encryption processing, sort the data into multiple points in a black box environment, manage the sorted file information in a black box environment, manage the files sorted into multiple points in a distributed manner, and manage index information for the distributed files in an encrypted state. This technology enables real-time preservation of digital assets, powerfully and efficiently protecting sensitive information such as confidential and personal data from high-level cyberattacks and physical destruction. It also allows for the recovery of sensitive information without it being stolen by third parties even if subjected to cryptographic analysis by quantum computers or EMP attacks, or makes it impossible for third parties to recover the managed information even if it is stolen. In addition to eliminating the risks associated with the blockchain's single-address (specific key) structure in digital asset information management, it also eliminates the risks associated with the blockchain's single-address (specific key) structure in processing smart contracts, preventing the destruction or leakage of sensitive information such as confidential and personal data even if the processing smart contracts are tampered with by external quantum computer cryptography or internal system attacks. This makes the protection of sensitive information such as confidential and personal data against high-level cyberattacks and physical destruction extremely powerful.

[0106] Although preferred embodiments of the present invention have been described in detail above, the present invention is not limited to the embodiments described above, and various modifications and substitutions can be made to the embodiments described above within the scope of the specification and drawings without departing from the scope of the present invention. [Industrial applicability]

[0107] The digital data destruction and leakage prevention system of the present invention is useful in fields where confidential information such as personal information and security-related information, control modules for critical functions, currencies such as stablecoins, rights such as contracts, and other important information are treated as digital assets, and where some processing is required on these digital assets using processing smart contracts. [Explanation of Symbols]

[0108] 1. Digital data destruction and leakage prevention system 11 1~n (where n is an integer greater than or equal to 2) Smart contract for processing 11a 1~n (wherein n is an integer greater than or equal to 2) First processing function component: smart contract 11b 1~n (wherein n is an integer greater than or equal to 2) Second processing function component: smart contract 12 Processing Function Components Smart Contract Deployment Information Recording and Update Means 13 Deployment Information Extraction Method 14 Processing Function Component Smart Contract Tampering Check Means 15. Smart contract processing function operation control means for processing 16. Means for recording mutual access rights authentication information 100 Real-time evacuation and recovery type digital asset guard service provision system 101 Authenticated Individual Recognition System 102 Means of obtaining consent information 103 Encryption and Polynomial Secret Sharing and Partitioning Methods 104 Preservation Point Sorting Method 105 Management method for information sorting destinations of preservation points 106 Modified and Distributed Recording Methods 107 Index information creation, encryption, and recording methods 108 Index information decoding means 109 File data extraction means 110 Digital data recovery methods 111 Means for decrypting index information during deletion process 112 File Data Deletion Method 113 Second File Data Deletion Method

Claims

1. A system for preventing the destruction or leakage of digital data due to tampering with processing smart contracts in a system constructed with a distributed ledger in blockchain or other distributed ledger technology and a predetermined number of processing smart contracts for performing predetermined processing using digital data managed in said distributed ledger, Each of the aforementioned processing smart contracts includes a first processing function component smart contract associated with the processing smart contract, which is deployed (a compiled transaction is set) to a first address accessible only with a first key held by a first authority in the shared memory within the blockchain, and a second processing function component smart contract associated with the processing smart contract, which is deployed (a compiled transaction is set) to a second address accessible only with a second key held by a second authority in the shared memory within the blockchain. Each of the aforementioned processing smart contracts is configured such that a single processing function operates when the first processing function component smart contract linked to the processing smart contract and the second processing function component smart contract linked to the processing smart contract are linked, and further, A smart contract deployment information recording and updating means for processing function components, which records and updates deployment information for the first processing function component smart contract and the second processing function component smart contract associated with each processing smart contract in a black box environment, only when both approval using the first key held by the first authority holder and approval using the second key held by the second authority holder have been made. Deployment information extraction means for extracting the deployment information of the first processing function component smart contract and the deployment information of the second processing function component smart contract associated with the processing smart contract, which are recorded or updated in a black box environment by the aforementioned processing function component smart contract deployment information recording and updating means, A smart contract tampering check means for processing function component tampering, which uses the deployment information of the first processing function component smart contract linked to the processing smart contract extracted by the deployment information extraction means, and the deployment information of the second processing function component smart contract linked to the processing smart contract, to check whether the first processing function component smart contract deployed at the first address linked to the processing smart contract in the shared memory within the blockchain, and the second processing function component smart contract deployed at the second address linked to the processing smart contract in the shared memory within the blockchain, have been tampered with. Before each processing function of the respective processing smart contract is executed, the deployment information extraction means and the processing function component smart contract tampering check means are activated sequentially. As a result of the tampering check by the smart contract tampering check means for the processing function component, If no tampering is detected in either the first processing function component smart contract deployed at the first address associated with the processing smart contract in the shared memory within the blockchain, or the second processing function component smart contract deployed at the second address associated with the processing smart contract in the shared memory within the blockchain, the first processing function component smart contract deployed at the first address associated with the processing smart contract in the shared memory within the blockchain and the second processing function component smart contract deployed at the second address associated with the processing smart contract in the shared memory within the blockchain are linked to activate the processing function of the processing smart contract. If tampering is detected in at least one of the following: the first processing function component smart contract deployed at the first address associated with the processing smart contract in the shared memory within the blockchain, or the second processing function component smart contract deployed at the second address associated with the processing smart contract in the shared memory within the blockchain, the first processing function component smart contract deployed at the first address associated with the processing smart contract in the shared memory within the blockchain and the second processing function component smart contract deployed at the second address associated with the processing smart contract in the shared memory within the blockchain will not be linked, and the processing function of the processing smart contract will not be operated. A smart contract processing function operation control means for controlling the process in this manner, A digital data destruction and leakage prevention system characterized by having the following features.

2. The system further includes mutual access rights authentication information recording means, which records the hash values ​​of the mutual deployment information of the first processing function component smart contract and the second processing function component smart contract, which are associated with each of the processing smart contracts when they are first interconnected after deployment settings within a predetermined time, as mutual access rights authentication information in a black box environment. The digital data destruction and leakage prevention system according to claim 1, characterized in that the processing function component smart contract tampering check means detects whether tampering has occurred by using the hash value of the deployment information as authentication information for the mutual access rights between the first processing function component smart contract and the second processing function component smart contract, which are linked to the processing smart contract and recorded by the mutual access rights authentication information recording means, and comparing it with the hash value of the mutual deployment information when the first processing function component smart contract deployed at the first address linked to the processing smart contract in the shared memory within the blockchain and the second processing function component smart contract deployed at the second address linked to the processing smart contract in the shared memory within the blockchain are interconnected.

3. The digital data destruction and leakage prevention system according to claim 1 or 2, wherein if tampering is detected in at least one of the first processing function component smart contract deployed at the first address associated with the processing smart contract in the shared memory within the blockchain, or the second processing function component smart contract deployed at the second address associated with the processing smart contract in the shared memory within the blockchain, the system further notifies the authority holders of each smart contract of an error in mutual access.

4. A digital data destruction and leakage prevention system according to claim 1, which is provided in a real-time evacuation and recovery type digital asset guard service provision system configured to automatically communicate between two or more authenticated individuals using a predetermined communication function, to perform meaningless processing on the digital data to be protected by a combination of a processing method based on bidirectional agreement between two or more authenticated individuals and polynomial secret sharing encryption processing, to sort the digital data to be protected into multiple points in a black box environment, to manage the sorted file information in a black box environment, to manage the files sorted into multiple points in a distributed manner, and to manage the index information of the distributed files in an encrypted state.

5. The aforementioned real-time digital asset guarding service provision system is A distributed ledger structure consisting of at least one chain, primarily a closed blockchain such as a private or consortium type, which is built with multiple planets that form a single unit for providing services that implement distributed smart contracts and server applications, etc., and which are units that combine blockchain and file distribution management functions, etc., and which are composed of a group of nodes that combine nodes in multiple locations in different regions around the world, and which are built with at least one distributed ledger structure that is composed of multiple chains that may include a group of distributed ledgers and a public blockchain, and A certified individual authentication system that authenticates each of two or more certified individuals, A means for obtaining agreement information that transmits and exchanges predetermined information between multiple authenticated individuals authenticated by the aforementioned authenticated individual authentication system, and obtains agreement information between the authenticated individuals regarding the execution of predetermined processes, including the backup, restoration, and deletion of personal information, important information, and other digital data of the authenticated individuals to be backed up. An encryption / polynomial secret sharing partitioning means having a processing smart contract that has the function of partitioning the personal information, important information, and other digital data of the authentication individual to be backed into multiple file data by encryption / polynomial secret sharing, based on the agreement information regarding the execution of predetermined processing, including the backing up, restoration, and deletion of personal information, important information, and other digital data of the authentication individual to be backed up, obtained by the agreement information acquisition means, A security point sorting means that sorts multiple file data partitioned by the encryption / polynomial secret sharing partitioning means by associating them with one of multiple security points, A preservation point sorting destination information management means manages the sorting destination information of file data sorted by the aforementioned preservation point sorting means in a black box environment, A modification and distributed recording means having a processing smart contract that modifies the file data sorted by the aforementioned preservation point sorting means and distributes the recording of file data that does not exceed the block size to multiple nodes of a distributed management file group established on the blockchain, and file data that exceeds the block size to multiple nodes of a distributed management file group separate from the blockchain, An index information creation, encryption, and recording means comprising a processing smart contract having the function of creating and encrypting index information of file data distributed and recorded by the aforementioned modification and distributed recording means, and recording it on a specific node of the blockchain in a black box environment, An index information decryption means having a processing smart contract that has the function of decrypting the index information of the file data recorded by the index information creation, encryption, and recording means for each group of file data associated with the information of each of the protected points managed in a black box environment by the protected point sorting destination information management means, based on the consent information regarding the execution of the restoration process of personal information, important information, and other digital data of the authenticated individual to be restored, obtained by the consent information acquisition means, A file data extraction means having a processing smart contract that, based on the index information decrypted by the aforementioned index information decryption means, extracts the modified and distributed recorded file data from multiple nodes of the distributed management file of the destination blockchain corresponding to the file data and multiple nodes of a distributed management file separate from the blockchain, respectively, and restores it to its state before modification. A digital data recovery means comprising a processing smart contract having the function of integrating and decrypting multiple fragmented file data extracted by the aforementioned file data extraction means and restoring them to the personal information, important information, and other digital data of the authentication individual before backup, Based on the agreement information regarding the execution of deletion processing for personal information, important information, and other digital data of the authenticated individual to be deleted, obtained by the agreement information acquisition means, the deletion processing index information decryption means has a processing smart contract that has the function of decrypting the index information of the file data recorded in the index information creation, encryption, and recording means for each group of file data associated with the information of each said preservation point, which is managed in a black box environment by the preservation point sorting destination information management means, A file data deletion means having a processing smart contract that has the function of deleting the file data from a predetermined generation prior to the modified and distributed recorded on multiple nodes of the distributed management file of the destination blockchain corresponding to the file data and multiple nodes of a distributed management file separate from the blockchain, based on the index information decrypted by the aforementioned deletion processing index information decryption means, A second file data deletion means deletes information about the protection point associated with the file data to be deleted, which is managed in a black box environment by the protection point sorting destination information management means, based on the agreement information regarding the execution of deletion processing of personal information, important information, and other digital data of the authenticated individual obtained by the agreement information acquisition means, The digital data destruction and leakage prevention system according to claim 4, characterized by having the following features.

Images