Information processing device, information processing method, and computer program

Abstract

To improve user convenience regarding data authenticity. [Solution] An information processing apparatus comprising a control unit that acquires registration data which is data subject to proof of authenticity, converts the format of the registration data to provide a header area to the registration data, and adds authenticity information which is information relating to the authenticity of the registration data to the header area.

Description

Technical Field

[0001] The present invention relates to an information processing apparatus, an information processing system, an information processing method, and a computer program.

Background Art

[0002] In recent years, technologies have been developed to create voice models based on the voices of real people and generate AI voices in a text-based manner. With the improvement in the performance of general-purpose information processing apparatuses, such technologies have become available to anyone. In such a situation, individuals, groups, and companies that sell their voices are exploring ways to utilize rather than completely prohibit the generation of voice models based on their voices. For example, conducting explanations using voice models and enabling multi-language use are being considered. In that case, it is important to securely control the purposes and means of using original voice data, voice models, voice synthesis data, etc. For this purpose, it is necessary to be able to prove to a third party that such data was obtained based on one's own voice.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] However, technologies for proving the authenticity of voice-related data as described above do not necessarily fully meet user needs. Such problems are not limited to problems related to the authenticity of voice-related data but are common problems for various types of data.

[0005] This invention has been made in view of the circumstances described above, and provides a technology that enables improved user convenience regarding the authenticity of data. [Means for solving the problem]

[0006] One aspect of the present invention is an information processing apparatus comprising a control unit that acquires registration data which is data subject to proof of authenticity, converts the format of the registration data to provide a header area to the registration data, and assigns authenticity information which is information relating to the authenticity of the registration data to the header area.

[0007] One aspect of the present invention is the above-described information processing apparatus, wherein the control unit generates alternative data that can be uniquely identified from the registered data, and uses the alternative data as identification information for the registered data.

[0008] One aspect of the present invention is the above-described information processing apparatus, further comprising a storage unit that stores in association a first ID, which is an existing account held in advance by the sender of the registration data, and a second ID, which is used as the sender's account in a recording system having a recording area that is difficult to tamper with, wherein the control unit, when recording the authenticity information in the recording system, obtains the first ID from the sender, obtains the second ID stored in the storage unit in association with the first ID, and accesses the recording system using the second ID.

[0009] One aspect of the present invention is the above-described information processing apparatus, wherein the control unit acquires information intended to be made public and information intended to be kept private, and handles the information intended to be kept private by hashing it.

[0010] One aspect of the present invention is an information processing system comprising: an information processing device having a control unit that acquires registered data which is data subject to proof of authenticity, converts the format of the registered data to provide a header area in the registered data, and assigns authenticity information which is information relating to the authenticity of the registered data to the header area; and a terminal device that transmits the registered data to the information processing device, wherein the terminal device displays a user interface on an image display device for specifying whether information intended to be made public and information intended to be kept private with respect to the registered data, and the control unit performs processing according to the specification in the user interface.

[0011] One aspect of the present invention is the above-described information processing system, wherein the user interface further includes a user interface for specifying whether or not to leave the actual registered data in the storage device of the information processing device, and the control unit performs processing according to the specification in the user interface.

[0012] One aspect of the present invention is an information processing method comprising: an acquisition step of acquiring registration data which is data subject to proof of authenticity; a conversion step of providing a header area to the registration data by converting the format of the registration data; and an assignment step of assigning authenticity information which is information relating to the authenticity of the registration data to the header area.

[0013] One aspect of the present invention is a computer program for causing a computer to function as an information processing device, comprising: a control unit that acquires registered data which is data subject to proof of authenticity; converts the format of the registered data to provide a header area in the registered data; and assigns authenticity information which is information relating to the authenticity of the registered data to the header area. [Effects of the Invention]

[0014] According to the present invention, it becomes possible to improve the convenience of the user regarding the authenticity of data.

Brief Description of the Drawings

[0015] [Figure 1] It is a diagram showing an outline of the information processing system 100 in the present invention. [Figure 2] It is a schematic block diagram showing a specific example of the functional configuration of the terminal device 10. [Figure 3] It is a schematic block diagram showing a specific example of the functional configuration of the authenticity enhancement device 30. [Figure 4] It is a specific example of the data stored in the user information management unit 310. [Figure 5] It is a schematic block diagram showing the content of the processing of the certificate creation unit 302. [Figure 6] It is a diagram showing an example of a screen displayed on the output unit 13 of the terminal device 10. [Figure 7] It is a schematic block diagram showing the content of the processing of the certificate return unit 304. [Figure 8] It is a schematic block diagram showing the content of the processing of the certificate verification unit 306. [Figure 9] It is a diagram showing an outline of the hardware configuration example of the information processing device 90 applied to the present embodiment.

Embodiments for Carrying Out the Invention

[0016] [Principle] First, the principle of the present invention will be described. In the present invention, at least one of the following problems is solved. Also, in the embodiments described later, the configurations and processes for solving all of the following problems will be described, but it is not necessarily required to solve all of the following problems in the present invention. In the following description, the data that the user wishes to ensure authenticity for is referred to as registered data.

[0017] FIG. 1 is a diagram showing an overview of an information processing system 100 according to the present invention. The information processing system 100 includes a terminal device 10, a recording system 20, and an authenticity enhancement device 30. The terminal device 10, the recording system 20, and the authenticity enhancement device 30 are communicably connected via a network 70. The network 70 may be a network using wireless communication or a network using wired communication. The network 70 may be configured using, for example, the Internet or a local area network (LAN). The network 70 may be configured by combining a plurality of networks.

[0018] A user uses the terminal device 10 to transmit registration data to the authenticity enhancement device 30 and receives a service for ensuring the authenticity of the registration data. The recording system 20 is a system that provides a storage area in which it is difficult to falsify the recorded data. The recording system 20 may be configured using, for example, a blockchain. The authenticity enhancement device 30 is a device that provides a service for enhancing the assurance of the authenticity of a target file for the user of the terminal device 10. Hereinafter, a plurality of problems related to the principle of the present invention and solutions therefor will be described using FIG. 1.

[0019] Problem 1 is to enable a user to use the recording system 20 with an existing account. For example, when a blockchain is used as a specific example of the recording system 20, in the prior art, it is necessary to prepare an account dedicated to the recording system 20 in order to use the recording system 20. As such an account, an existing account that a user normally uses could not be used. Therefore, there was a problem that the convenience of the user was reduced. In response to such a problem, the present invention enables the use of the recording system 20 using an existing account including an account that a user normally uses. Specifically, an account dedicated to the recording system 20 is generated, and the existing account of the user and the account dedicated to the recording system 20 are associated and stored in the authenticity enhancement device 30.

[0020] The user accesses the authenticity enhancement device 30 using an existing account via the terminal device 10. The authenticity enhancement device 30 reads a dedicated account stored in association with the existing account and accesses the recording system 20 using the dedicated account. In the following description, the user's existing account is referred to as the first ID, and the dedicated account for the recording system 20 is referred to as the second ID. The first ID may be, for example, an email address, or it may be an ID composed of a string that is not an email address.

[0021] The second challenge is to ensure the authenticity of registration data that lacks a header. Some data formats do not have a header. For example, text files, CSV files, and internal database information do not have a header. Conventional technologies have not been able to attach authenticity information (hereinafter referred to as "authenticity information") to such data that lacks a header. To address this problem, the information processing system 100 of the present invention converts the format of the registration data to a target format if the registration data is in a format that does not have a header. The target format is a format that has a header and is a format that allows the data before conversion to be restored.

[0022] Specific examples of target formats include archiver formats and data compression formats. A specific example of a data compression format is the zip format. A specific example of an archiver format is the tar format. The information processing system 100 converts the target file to the target format and records authenticity information in the header of the target format. The process of converting the registered data to the target format may be performed by the terminal device 10 or by the authenticity enhancement device 30.

[0023] The third challenge is to enable easy assurance of authenticity for data exceeding a predetermined size (hereinafter referred to as "large-capacity data"). In conventional technology, when attempting to add authenticity information to large-capacity data, users had to adjust the size of the registered data. Specific examples of such size adjustments include data compression and hashing. Such size adjustments were not necessarily easy for all users to perform. In response to this problem, the present invention uses a common algorithm to perform size adjustments in the information processing system 100. Therefore, users do not need to manually adjust the size by operating the terminal device 10, and they do not need to worry about the data size of the registered data in the first place.

[0024] The fourth challenge is to easily control whether registered data is made public or private. Generally, information recorded in a recording system 20 such as a blockchain is made public. Therefore, if the registered data is personal information or sensitive information that the user wishes to keep private, the user had to perform the necessary anonymization to keep it private. This resulted in extra work for the user. To address this problem, the present invention allows the user to select whether to make each piece of registered data public or private in the user interface output when the user operates the terminal device 10. Furthermore, if an image display device is used as the user interface device, the invention displays identification information indicating whether each piece of registered data is public or private, and displays a user interface that allows the user to change its attribute. For private registered data, the original registered data is converted into data in a format that cannot be restored (e.g., hash data) and then recorded in the recording system 20. Therefore, the user does not need to perform any work to keep registered data private.

[0025] The fifth challenge is to enable users to easily control whether or not to save registered data in the authenticity enhancement device 30 of the information processing system 100. Conventionally, in order for the system (in this invention, the authenticity enhancement device 30) to delete registered data without saving it, it was necessary for the user to request such deletion. Therefore, deleting registered data was time-consuming. To address this problem, the present invention allows users to select whether to save or discard (delete) registered data in the authenticity enhancement device 30 through the user interface output when the user operates the terminal device 10. For example, if an image display device is used as the user interface device, an identification information indicating whether to save or discard each piece of registered data is displayed, and a user interface is displayed that allows the user to change its attributes. Registered data selected for deletion is deleted after the authenticity enhancement device 30 performs processing related to authenticity. Therefore, users can easily instruct the deletion of registered data they wish to delete. Even if the authenticity enhancement device 30 deletes the registered data itself (raw data), authenticity can be verified if the user re-presents the original registered data.

[0026] The 6th challenge is to implement authenticity information that can be embedded in registered data. When handling data in a specific format (e.g., MP3), conventionally, registered data and authenticity information were handled separately. As a result, it was not possible to verify authenticity using the registered data. To address this problem, the present invention adds authenticity information to a portion of the registered data that does not interfere with playback or use. A specific example of a portion that does not interfere with playback or use of the registered data is the header portion. By adding authenticity data to the registered data itself in this way, it becomes possible to verify authenticity using the data itself that is intended for playback and use.

[0027] The seventh challenge is to prevent tampering with the information processing system 100 itself. Conventionally, there was a risk that the system handling authenticity information itself could be tampered with. To address this problem, the present invention periodically writes aggregated data, including the data held and processing history of the information processing system 100, to the blockchain. This process guarantees that the system itself has not been tampered with.

[0028] [detail] Figure 2 is a schematic block diagram showing a specific example of the functional configuration of the terminal device 10. The terminal device 10 is configured using information devices such as a smartphone, tablet, personal computer, or dedicated device. The terminal device 10 includes a communication unit 11, an input unit 12, an output unit 13, a storage unit 14, and a control unit 15.

[0029] The communication unit 11 is a communication device. The communication unit 11 may be configured, for example, as a network interface. The communication unit 11 communicates data with other devices via the network 70 in accordance with the control of the control unit 15. The communication unit 11 may be a wireless communication device or a wired communication device.

[0030] The input unit 12 is configured using existing input devices such as a keyboard, pointing device (mouse, tablet, etc.), buttons, or touch panel. The input unit 12 is operated by the user when inputting user instructions to the terminal device 10. The input unit 12 may also be an interface for connecting the input device to the terminal device 10. In this case, the input unit 12 inputs the input signal generated in the input device in response to the user's input to the terminal device 10. The input unit 12 may also be configured using a microphone and a speech recognition device. In this case, the input unit 12 acquires the acoustic signal generated by the user's speech, performs speech recognition on the words spoken by the user, and inputs the recognized string information to the terminal device 10. The speech recognition process may be performed by the control unit 15. The input unit 12 may be configured in any way that allows user instructions to be input to the terminal device 10.

[0031] The output unit 13 outputs information in a format that the user can recognize. The output unit 13 may be an image display device such as a liquid crystal display or an organic EL (Electro-Luminescence) display. The output unit 13 may also be an interface for connecting an image display device to the terminal device 10. In this case, the output unit 13 generates a video signal for displaying image data and outputs the video signal to the image display device connected to it. The output unit 13 may also be a device that outputs sound, such as a speaker. The output unit 13 may also be an interface for connecting an audio output device such as a speaker or headphones to the terminal device 10. In this case, the output unit 13 generates an audio signal for playing audio data and outputs the audio signal to the audio output device connected to it. The output unit 13 may also be configured as a touch panel integrated with the input unit 12.

[0032] The storage unit 14 is configured using a storage device such as a magnetic hard disk drive or a semiconductor storage device. The storage unit 14 stores data used by the control unit 15. The storage unit 14 stores data necessary when the control unit 15 performs processing.

[0033] The control unit 15 is composed of a processor such as a CPU (Central Processing Unit) and memory (main memory). The control unit 15 functions when the processor executes a program. Note that all or part of the functions of the control unit 15 may be implemented using hardware such as an ASIC (Application Specific Integrated Circuit), PLD (Programmable Logic Device), or FPGA (Field Programmable Gate Array). The above program may be recorded on a computer-readable recording medium. Computer-readable recording media include, for example, portable media such as flexible disks, magneto-optical disks, ROMs, CD-ROMs, and semiconductor memory devices (e.g., SSDs: Solid State Drives), as well as storage devices such as hard disks and semiconductor memory devices built into computer systems. The above program may be transmitted via a telecommunications line.

[0034] The control unit 15 may, for example, execute an application installed on its own device (terminal device 10). A specific example of such an application is an application provided to the terminal device 10 as a dedicated application for the information processing system 100. Another specific example of such an application is a web browser application. Such an application may be pre-installed on the terminal device 10, or it may be downloaded each time a judgment process is executed. For example, if it is implemented as a web browser application, the terminal device 10 may download and execute the application from a device specified by the web server (for example, the web server itself or another server) when the terminal device 10 connects to a specific web server. The control unit 15 operates according to the program of the application being executed.

[0035] The control unit 15 controls the terminal device 10 in response to user operations and information received from the authenticity enhancement device 30. For example, the control unit 15 transmits information input by the user through the operation of the input unit 12 to the authenticity enhancement device 30 using the communication unit 11. For example, when the control unit 15 receives information transmitted from the authenticity enhancement device 30 via the network 70 to the communication unit 11, it generates screen data based on the received information and displays the screen data on the output unit 13. Such screen data includes images and characters that represent the information transmitted from the authenticity enhancement device 30. For example, when the control unit 15 receives information transmitted from the authenticity enhancement device 30 via the network 70 to the communication unit 11, it generates audio data based on the received information and outputs the audio data from the output unit 13.

[0036] Figure 3 is a schematic block diagram showing a specific example of the functional configuration of the authenticity enhancement device 30. The authenticity enhancement device 30 is configured using an information processing device such as a personal computer or a server. The authenticity enhancement device 30 includes an ID conversion unit 301, a certificate creation unit 302, a VC creation unit 303, a certificate return unit 304, a discard / retention decision unit 305, a certificate verification unit 306, an audit certificate creation unit 307, a certificate storage unit 308, a registered data storage unit 309, a user information management unit 310, and a VC storage unit 111. The ID conversion unit 301, the certificate creation unit 302, the VC creation unit 303, the certificate return unit 304, the discard / retention decision unit 305, the certificate verification unit 306, and the audit certificate creation unit 307 are functional units realized by the execution of a program by the processor (e.g., CPU) of the authenticity enhancement device 30. All or part of these functions may be realized using hardware such as an ASIC, PLD, or FPGA. The above program may be recorded on a computer-readable recording medium. The certificate storage unit 308, the registration data storage unit 309, the user information management unit 310, and the VC storage unit 111 are configured using the storage devices of the authenticity enhancement device 30. Specific examples of such storage devices include magnetic hard disk drives and semiconductor storage devices.

[0037] VC (Verifiable Credentials) are verifiable certificates. VC is a method of describing certificates whose legitimacy can be verified using a record system such as blockchain 20 and digital signature technology. A deed is an authenticity enhancement tool, a set of authenticity information attached to registration data. For example, a deed may be configured to include the following information: VC • Hash value of registered data • Public information (information you want to make public on VC): For example, text data • Confidential information (information you want to keep private on VC): For example, text data ·date of expiry

[0038] The following explains how each function of the authenticity enhancement device 30 operates in relation to each of the issues described above. First, the function of the authenticity enhancement device 30 in relation to Issue 1 will be explained. Figure 4 shows a specific example of data stored by the user information management unit 310. The user information management unit 310 stores the first ID and the second ID in association. The first ID is the user's existing account, and the second ID is an account dedicated to the recording system 20. Both the first ID and the second ID, which are stored in association, are accounts used by the same user.

[0039] When a user accesses the authenticity enhancement device 30, they do so using a first ID. At this time, the first ID is transmitted from the terminal device 10 to the authenticity enhancement device 30. When the ID conversion unit 301 receives the first ID transmitted from the terminal device 10, it reads the second ID stored in association with the received first ID from the user information management unit 310. When each function of the authenticity enhancement device 30 needs to access the recording system 20, it processes using the read second ID.

[0040] Next, the functions of the authenticity enhancement device 30 related to tasks 2 to 4 will be explained. Figure 5 is a schematic block diagram showing the processing content of the certificate creation unit 302. The certificate creation unit 302 receives registration data from the terminal device 10. The registration data may be, for example, an audio file such as an MP3, a trained model obtained by machine learning processing, or audio feature data, or any data of any format and size. The certificate creation unit 302 also receives public information and non-public information from the terminal device 10. Public information is information related to the registration data that is intended to be made public to third parties. Non-public information is information related to the registration data that is intended not to be made public to third parties.

[0041] The certificate creation unit 302 checks the format of the received registration data and determines whether or not it is in a format that has an area for assigning authenticity information. A specific example of such an area is a header. If the registration data is in a format that does not have such an area, the certificate creation unit 302 converts it to a predetermined target format. A specific example of such format conversion is the zip format. The certificate creation unit 302 uses the format-converted data as registration data. Other functional units of the authenticity enhancement device 30 also use the format-converted data obtained by the certificate creation unit 302 as registration data. If the registration data received from the terminal device 10 is in a format that has an area for assigning authenticity information, the certificate creation unit 302 does not need to perform the format conversion described above.

[0042] The certificate creation unit 302 always obtains alternative data (e.g., a hash) using the same algorithm, regardless of the type, size, or other attributes of the input registration data. If the registration data format has been converted, the certificate creation unit 302 treats the converted data as the registration data and obtains the alternative data. Figure 5 shows the processing when a hash is used as a specific example of alternative data. It is desirable to use the raw data of the registration data (or the raw data of the converted data if the format has been converted) for processing the alternative data. The certificate creation unit 302 uses the obtained alternative data as identification information for the registration data. Other functional units of the authenticity enhancement device 30 also use the alternative data obtained by the certificate creation unit 302 as identification information for the registration data. The alternative data obtained in this way ensures uniformity in data size and uniqueness. For example, the data size of the alternative data may be standardized to a size such as 256 bits.

[0043] The certificate creation unit 302 hashes the confidential information received from the terminal device 10. The hashed confidential information becomes unidentifiable to third parties. Therefore, even if the hashed confidential information is made public to a third party, the confidential information itself will not be made public to the third party. The certificate creation unit 302 generates a VCsubject that includes alternative data obtained from the registration data, public information, and the hashed confidential information.

[0044] The VC creation unit 303 creates a VC using the VCsubject generated by the certificate creation unit 302. The VC creation unit 303 obtains alternative data (e.g., a hash) of the created VC. Then, the VC creation unit 303 accesses the recording system 20 using the second ID obtained by the ID conversion unit 301 and records the alternative data (e.g., a hash) of the VC in the recording system 20. The VC creation unit 303 records the information of the created VC in the VC storage unit 311. The VC storage unit 311 also records information indicating the result of the transaction related to recording the alternative data of the VC to the recording system 20.

[0045] Next, the functions of the terminal device 10 related to tasks 4 and 5 will be described. Figure 6 is a diagram showing an example of a screen displayed on the output unit 13 of the terminal device 10. The screen shown in Figure 6 is the screen displayed when a user sends registered data to the authenticity enhancement device 30 in the terminal device 10. This screen displays a registered data selection operation area 131, a public / private selection button 132, an information input area 133, a clear button 134, a delete setting button 135, and a confirmation button 136.

[0046] The registration data selection operation area 131 displays images, buttons, and other elements for operations performed when selecting registration data on the terminal device 10. In the example in Figure 6, a button with the text "Select from file" is displayed. The user selects registration data by operating this button. After the registration data has been selected, the file name of the registration data may be displayed in the registration data selection operation area 131.

[0047] Public / private selection button 132 and information input area 133 are provided for each information item. An information item represents an individual item of information related to the registered data. Specific examples of information items include the name of the registered data, a description of the registered data, the location where the registered data was created, the date and time of creation, the quantity of the registered data, and the expiration date of the registered data. In addition to these information items, one or more free-form information items may be provided. The information input area 133 is an area where text can be entered, and the user enters information corresponding to the information item into the information input area 133.

[0048] The Public / Private Selection Button 132 is a button for setting whether the content of the information entered for each information item (the content entered in the information input area 133) will be used as public or private information. When the Public / Private Selection Button 132 is set to "Public," the information will be used as public information in the authenticity enhancement device 30. When the Public / Private Selection Button 132 is set to "Private," the information will be used as private information in the authenticity enhancement device 30. Each time the user operates the Public / Private Selection Button 132, the state may transition from "Public" to "Private," and vice versa. This configuration makes it easy for users to set public and private information.

[0049] The Clear button 134, when operated, clears all selected registration data and entered information. The Delete setting button 135 is a button for setting the registration data to be deleted without being left on the authenticity enhancement device 30. For example, if the checkbox is checked, the registration is set to be deleted. When the Confirm button 136 is operated, it sends the currently selected registration data, the values ​​and public / private attributes of each information item entered at that time, and information regarding file deletion to the authenticity enhancement device 30.

[0050] Next, the functions of the authenticity enhancement device 30 related to issue 5 will be explained. The discard / retention determination unit 305 does not record the registered data in the registered data storage unit 309 if the terminal device 10 has set the registered data to be deleted. On the other hand, the discard / retention determination unit 305 records the registered data in the registered data storage unit 309 if the terminal device 10 has not set the registered data to be deleted. The data recorded in the registered data storage unit 309 is the actual registered data itself. Even if the certificate creation unit 302 performs a format conversion on the registered data, it is desirable that the data recorded in the registered data storage unit 309 be the registered data before the format conversion.

[0051] Next, the functions of the authenticity enhancement device 30 with respect to problem 6 will be described. Figure 7 is a schematic block diagram showing the processing contents of the certificate return unit 304. The certificate return unit 304 acquires the information of the VC created by the VC creation unit 303 and creates a certificate. The certificate return unit 304 records information showing the entirety of the created certificate in the certificate storage unit 308. At this time, the certificate return unit 304 may also record the certificate information and the certificate ID in association. The certificate return unit 304 also embeds the certificate ID, which is the identification information assigned to the certificate, in a predetermined area (e.g., the header) of the registration data. The certificate return unit 304 transmits the registration data with the certificate ID, which is the registration data to which the certificate ID has been assigned, to the terminal device 10. The certificate return unit 304 may also transmit only the certificate ID to the terminal device 10 instead of the registration data with the certificate ID.

[0052] Figure 8 is a schematic block diagram showing the processing details of the certificate verification unit 306. The certificate verification unit 306 receives the registration data with certificate IDs to be verified from the terminal device 10. The certificate verification unit 306 extracts the certificate ID from the registration data with certificate IDs. Based on the extracted certificate ID, the certificate verification unit 306 obtains the information necessary to verify the authenticity of the registration data with certificate IDs to be verified and performs the verification. At this time, when the certificate verification unit 306 accesses the recording system 20 to obtain data, it obtains a second ID associated with the first ID received from the terminal device 10 from the ID conversion unit 301. Then, the certificate verification unit 306 accesses the recording system 20 using the second ID. For example, the certificate verification unit 306 obtains information from the certificate storage unit 308 that shows the entire certificate corresponding to the extracted certificate ID. The certificate verification unit 306 may verify the authenticity of the registration data based on the VC contained in the acquired certificate and information about the VC recorded in the recording system 20 (e.g., the hash of the VC). Alternatively, the certificate verification unit 306 may verify the authenticity of the registration data based on the information recorded in the registration data storage unit 309.

[0053] Next, the functions of the authenticity enhancement device 30 related to Problem 7 will be explained. The audit certificate creation unit 307 reads the information stored in the certificate storage unit 308 at a predetermined timing (for example, it may be periodic or at a timing corresponding to the occurrence of a specific event). The audit certificate creation unit 307 may further acquire the processing history of the authenticity enhancement device 30 (for example, system logs). The audit certificate creation unit 307 combines the acquired information into a predetermined number of data (hereinafter referred to as "audit certificate data"). For example, it may be combined into one data, or into multiple data. The number of data may also be determined according to the size of the acquired data. In the following explanation, the case in which it is combined into one data will be described. The certificate creation unit 302 processes using the audit certificate data instead of the registration data. Specifically, it records data such as the hash of the VC created for the audit certificate data in the recording system 20. Therefore, if data tampering occurs in the authenticity enhancement device 30, it will be possible to detect it.

[0054] Figure 9 is a schematic diagram of an example hardware configuration of an information processing device 90 applied to this embodiment. The information processing device 90 comprises a processor 91, main memory 92, communication interface 93, auxiliary storage device 94, input / output interface 95, and internal bus 96. The processor 91, main memory 92, communication interface 93, auxiliary storage device 94, and input / output interface 95 are connected to each other via the internal bus 96 so that they can communicate with one another. The information processing device 90 may be applied to, for example, a terminal device 10. In this case, for example, the communication unit 11 may be configured using a communication interface 93. For example, the storage unit 14 may be configured using an auxiliary storage device 94. Furthermore, the control unit 15 may be configured using a processor 91 and a main memory device 92. The information processing device 90 may be applied to, for example, the authenticity enhancement device 30. In this case, for example, the certificate storage unit 308, the registration data storage unit 309, the user information management unit 310, and the VC storage unit 111 may be configured using the auxiliary storage device 94. In addition, the ID conversion unit 301, the certificate creation unit 302, the VC creation unit 303, the certificate return unit 304, the discard / retention determination unit 305, the certificate verification unit 306, and the audit certificate creation unit 307 may be configured using the processor 91 and the main memory device 92.

[0055] (modified version) The authenticity enhancement device 30 may be implemented using multiple information processing devices. For example, the authenticity enhancement device 30 may be implemented using a cloud or other device. For example, in the authenticity enhancement device 30, some functional parts and other functional parts may be implemented on different information processing devices.

[0056] In the above description, the registration data format conversion process is performed by the certificate creation unit 302. However, the registration data format conversion process may also be performed by the terminal device 10. For example, an application installed on the terminal device 10 may display the screen shown in Figure 6 on the terminal device 10, check the format of the registration data when the confirmation button 136 is operated, and perform the format conversion if necessary. After that, the terminal device 10 may transmit the registration data after the format conversion to the authenticity enhancement device 30. At this time, the terminal device 10 may transmit the information before the format conversion along with the data.

[0057] In the above description, the device that transmits registration data to the authenticity enhancement device 30 was the terminal device 10 used by the user. However, the registration data may be transmitted to the authenticity enhancement device 30 from a server device or system, rather than from a terminal device 10 operated by the user.

[0058] While embodiments of this invention have been described in detail above with reference to the drawings, the specific configuration is not limited to these embodiments and includes designs and the like that do not depart from the spirit of this invention. [Explanation of symbols]

[0059] 100…Information Processing System, 10…Terminal Device, 11…Communication Unit, 12…Input Unit, 13…Output Unit, 14…Storage Unit, 15…Control Unit, 20…Recording System, 30…Authenticity Enhancement Device, 301…ID Conversion Unit, 302…Certificate Creation Unit, 303…VC Creation Unit, 304…Certificate Return Unit, 305…Destruction / Retention Decision Unit, 306…Certificate Verification Unit, 307…Audit Certificate Creation Unit, 308…Certificate Storage Unit, 309…Registered Data Storage Unit, 310…User Information Management Unit, 311…VC Storage Unit

Claims

1. An information processing device comprising: a control unit that acquires registered data which is data subject to proof of authenticity; converts the format of the registered data to provide a header area in the registered data; and assigns authenticity information which is information relating to the authenticity of the registered data to the header area.

2. The information processing apparatus according to claim 1, wherein the control unit generates alternative data that can be uniquely identified from the registered data, and uses the alternative data as identification information for the registered data.

3. The system further includes a storage unit that stores in association a first ID, which is an existing account already held by the sender of the registration data, and a second ID, which is used as the sender's account in a recording system having a recording area that is difficult to tamper with. The information processing apparatus according to claim 1, wherein the control unit, when recording the authenticity information in the recording system, obtains the first ID from the sender, obtains the second ID stored in the storage unit in association with the first ID, and accesses the recording system using the second ID.

4. The information processing apparatus according to claim 1, wherein the control unit acquires information intended for public disclosure and information intended for non-disclosure, and handles the information intended for non-disclosure by hashing it.

5. An information processing device comprising: a control unit that acquires registration data which is data subject to proof of authenticity, converts the format of the registration data to provide a header area to the registration data, and adds authenticity information which is information relating to the authenticity of the registration data to the header area; The system includes a terminal device that transmits the registration data to the information processing device, The terminal device displays a user interface on an image display device for specifying whether information intended to be made public and information intended to be kept private, respectively, with respect to the registered data. The control unit is an information processing system that performs processing according to the specifications in the user interface.

6. The user interface further includes a user interface for specifying whether or not to leave the actual registered data in the storage device of the information processing device. The information processing system according to claim 5, wherein the control unit performs processing according to the specifications in the user interface.

7. The acquisition step involves obtaining the registration data, which is the data subject to proof of authenticity, A conversion step which involves converting the format of the registration data to provide a header area in the registration data, An information processing method comprising the step of assigning authenticity information, which is information relating to the authenticity of the registered data, to the header area.

8. A computer program for causing a computer to function as an information processing device, comprising: a control unit that acquires registration data, which is data subject to proof of authenticity; converts the format of the registration data to provide a header area in the registration data; and assigns authenticity information, which is information relating to the authenticity of the registration data, to the header area.

Images