User key sharing type digital asset guard service provision system

Abstract

This system protects sensitive information such as confidential and personal data from high-level cyberattacks and physical destruction, while reducing the burden on both users and system providers. [Solution] The user key sharing type digital asset guard service provision system includes means 11 for setting up a key group with multiple users as co-shareholders, means 15 for setting up a user-side digital key shared by all users belonging to the digital key group, means 14 for authenticating users belonging to the digital key group and, after authentication, instructing the backup of data to be protected using the user-side common digital key, and means for creating, encrypting, and recording consortium-side index information that includes a data name in which the user ID of the user belonging to the digital key group authenticated by the means for user authentication is added to the data name of the data that is distributed and recorded in the consortium-side backup system after being instructed to be backed up.

Description

Technical Field

[0004] , High-level cyberattack , ,

[0001] The present invention relates to a user key sharing type digital asset guard service providing system that guards digital assets (mainly aiming to protect from destruction) against risks such as high-level cyberattacks beyond normal levels, intense natural disasters, or physical attacks that are expected in the future. In addition, the "system" in this specification means a computer system that specifically realizes software-based information processing using hardware resources, which is composed of elements such as computers, other electronic devices, software, communication networks, and data.

Background Art

[0002] Conventionally, as a protection measure for data against general cyberattacks, encryption technologies such as blockchain are used. However, in the future, high-level cyberattacks beyond normal levels such as cryptographic analysis by quantum computers and EMP attacks, etc. are expected. These high-level cyberattacks aim at leakage, alteration, deletion, and destruction of digital assets (confidential information such as personal information and security-related information, control modules for important functions, currencies such as stablecoins, rights such as contracts). Therefore, it has become important to guard digital assets from high-level cyberattacks.

[0003] Digital assets that are targets of high-level cyberattacks Digital assets targeted by high-level cyberattacks are considered to cover a wide range, including personal information (account information) and personal asset information held by financial institutions, confidential information such as personal information and security-related information held by large enterprises and government agencies, important contracts, designs, control modules and data, and those related to lifelines. Conventionally, no service has been provided to guard high-level cyberattacks with a high degree of accuracy (especially for civilian use).

[0004] High-level cyberattack High-level cyberattacks primarily include cryptographic analysis using quantum computers (often referred to as Y2Q (Years To Quantum)) and EMP attacks.

[0005] Cryptography using quantum computers Quantum computer-based cryptography is a cyberattack that uses public keys from SSL (Secure Sockets Layer) and blockchains to decrypt private keys, thereby bypassing cryptographic guards, stealing important information, and destroying systems. If quantum computers are misused, even if digital assets are protected by storing private keys in cold wallets isolated from the system, there is a high risk that cryptographic analysis will be performed using public keys to decrypt private keys. Cryptographic analysis using quantum computers is a cyberattack that bypasses current basic security measures known as cryptography. Furthermore, it is expected that when combined with various other attacks, it could develop into unforeseen attacks with far-reaching implications.

[0006] EMP attack An EMP attack is a cyberattack that uses strong electromagnetic waves generated by a nuclear explosion at high altitude (stratosphere) to destroy electronic devices, systems, and magnetically recorded digital assets. An EMP attack could potentially destroy evacuated digital assets or modules in the system used to evacuate those digital assets. Additionally, although not an EMP attack, large-scale solar flares occur periodically. The strong magnetic field generated by solar flares can cause physical destruction equivalent to or greater than that of an EMP attack.

[0007] Current measures being considered against high-level cyberattacks Quantum cryptography and other related technologies are being researched as countermeasures against cryptographic analysis using quantum computers. However, considering the timeframe for general implementation and the costs involved, quantum cryptography has not yet reached a practical level. Furthermore, as a countermeasure against EMP attacks, data centers (including cloud facilities) that meet U.S. EMP resistance standards have implemented measures such as the installation of magnetic shielding mesh. However, magnetic shielding mesh is only installed in a portion of data centers in Japan as a whole, or the countermeasures do not meet sufficient standards.

[0008] Another possible strategy is to use the cloud to back up data to overseas regions (independent areas where data centers are located). However, cloud computing carries risks, such as insufficient user management, and financial institutions (especially large ones) are refraining from using it. More specifically, most domestic cloud services are currently operated by overseas service providers, and there is a risk that they could easily withdraw if any problems arise in Japan. In addition, incorrect cloud configuration can create security vulnerabilities, potentially leading to system destruction through even simple attacks. Furthermore, even with domestic cloud services, backing up digital assets using only one provider's cloud service carries risks, such as the inability to access backed-up data in the event of a cloud system failure. Even backing up digital assets using two different cloud providers requires the creation of separate management functions for each provider, which generally increases the complexity and makes it less user-friendly.

[0009] In particular, countermeasures for cyberattacks that simultaneously employ cryptographic analysis using quantum computers and EMP attacks are currently complex and costly, and have not yet reached a level where they can be generally put into practical use.

[0010] Other grades Furthermore, the system's ability to back up digital assets, including personal information and confidential corporate information, is subject to extremely strict limitations. For example, if someone other than the individual manages their digital assets, the consent of the individual who wishes for data management is required. However, obtaining consent for all digital assets that could potentially be managed is difficult. This complicates the management of digital assets. Furthermore, when using decentralized technology to back up digital assets, blockchains such as public chains cannot break the chain connecting the blocks. Therefore, even if it becomes necessary to delete data that is unnecessary for management or to erase digital data at the customer's request, the digital data cannot be deleted. Also, because the block size is relatively small, it is not possible to record an amount of digital data exceeding the block size. Furthermore, even if it were possible to create a function similar to the safekeeping of digital assets using distributed technology by combining public blockchains and freeware, the responsibility for public blockchains and freeware is not clearly defined. In a digital asset safekeeping service that is not guaranteed in principle, it is undesirable to handle important information or personal information due to its reliability and other factors.

[0011] However, the inventors of this case have developed a digital asset guard service provision system that can strongly and efficiently protect important information such as confidential information and personal information from high-level cyberattacks and physical destruction, and can restore important information without it being stolen by a third party even if it is subjected to cryptographic analysis by a quantum computer or an EMP attack (Patent Document 1).

[0012] The digital asset guard service provision system described in Patent Document 1 is configured such that the user's system performs encryption and partitioning to render the data to be protected meaningless, the consortium's system performs further transformation processing, and the data is managed in a distributed manner worldwide. The user's system and the consortium's system are independent, and both manage the data by encrypting it, so neither can interfere with the area in which the other manages the data. Furthermore, decrypting and restoring the data distributed and managed by the consortium requires bidirectional agreement between the user and the consortium. [Prior art documents] [Patent Documents]

[0013] [Patent Document 1] Patent No. 7503778 [Overview of the project] [Problems that the invention aims to solve]

[0014] Upon further consideration and examination of the derived digital asset guard service provision system, the inventors found that the following issues remain regarding key management for users. Many users do not want to manage their digital keys because they find it difficult to understand how to manage them, and there is a risk that they will be unable to retrieve their digital assets if their digital keys are damaged or lost. Furthermore, there are concerns that managing each user's digital keys would complicate the processing and response of the consortium, which could hinder the widespread adoption of the digital asset guard service provision system.

[0015] This invention has been made in view of the above problems, and aims to provide a user key sharing type digital asset guard service provision system that can strongly and efficiently protect important information such as confidential information and personal information from high-level cyberattacks and physical destruction, restore important information without it being stolen by a third party even if it is subjected to cryptographic analysis by a quantum computer or EMP attack, and eliminate problems that may occur due to user key management, thereby reducing the burden on both the user and the system provider. [Means for solving the problem]

[0016] To achieve the above objective, the user key sharing type digital asset guard service provision system according to the present invention is constructed with a distributed ledger in blockchain or other distributed ledger technology, and a smart contract or server application for performing predetermined processing using data managed in the distributed ledger, and has a consortium-type blockchain constructed with multiple planets that form one unit constituting the blockchain, each consisting of a group of nodes combining nodes at multiple locations in different regions, and has a backup system comprising a user-side backup system and a consortium-side backup system, a restoration system comprising a user-side restoration system and a consortium-side restoration system, and a deletion system comprising a user-side deletion system and a consortium-side deletion system, and is configured to perform backup, restoration, or deletion of data to be protected via the backup system, the restoration system, or the deletion system by using a one-to-one correspondence between the digital key managed by the user and the digital key managed by the consortium, A digital asset guard service provision system for protecting digital assets from cyberattacks of a certain level, comprising: a user ID / password setting reception means for accepting user ID and password settings by users; a user-side digital key group setting means for setting up user-side digital key groups in which multiple users share a single user-side key via an operation by a digital key management company; a user-side digital key group user ID / password management means for managing the user ID and password received by the user ID / password setting reception means for each user belonging to the user-side digital key group set by the user-side digital key group setting means; a user authentication means having the function of accepting ID authentication operations from users to access predetermined processing means for backing up, restoring, or deleting data to be protected, performing verification using the user ID and password managed by the user-side digital key group user ID / password management means, and authenticating the user as a user belonging to the digital key group when they match; and the user authentication means,The system includes a user-side common digital key setting means for setting a single digital key shared by all users belonging to one digital key group as a user-side common digital key via the operation of the digital key management company, and the user authentication means further has the function of managing the user-side common digital key set by the user-side common digital key setting means, and after authenticating the user who performed the ID authentication operation as a user belonging to the digital key group, instructing the backup, restoration, or deletion of the data to be protected using the user-side common digital key, and the backup system, restoration system, deletion system, user ID / password setting reception means, user-side digital key group setting means, user ID / password management means within the user-side digital key group, user authentication means and user-side common digital key setting means are provided on a cloud or server system that can be accessed via a dedicated line or the internet, and the user-side backup system receives backup instructions for the data to be protected using the user-side common digital key from the user authentication means The consortium-side backup system comprises: a data backup instruction receiving means; a means for de-encrypting data to be preserved, which, based on a backup instruction for data to be preserved received by the data backup instruction receiving means, performs a predetermined encryption process on the data to be preserved using the user-side common digital key to convert it into de-encrypted data to be preserved; a means for uploading the de-encrypted data to be preserved converted by the data de-encryption means to a first provisional storage area; and a means for creating and recording user-side index information containing user ID data name, which, when the data backup instruction receiving means receives a backup instruction for data to be preserved, adds the user ID of the user belonging to the digital key group authenticated by the user authentication means to the data name of the data to be preserved, and when the de-encrypted data to be preserved upload means uploads the de-encrypted data to the first provisional storage area, creates user-side index information including the data name with the user ID added and records it on a specific node of the blockchain in a black box environment.The meaningless data for preservation to be uploaded to the first provisional storage area by the meaningless data for preservation upload means is distributed among a plurality of distributed file management groups constructed by nodes of each site configured for the planet set on the consortium side using the digital key on the consortium side and recording devices of a plurality of sites network-connected to the nodes of the site. The distributed file management group distribution means, modifies the data distributed by the distributed file management group distribution means, and for data not exceeding the block size, distributes and records it to a plurality of nodes of the distributed management file group provided in the blockchain, and for data exceeding the block size, distributes and records it to a plurality of nodes of a distributed file management group separate from the blockchain. The modification / distributed recording means, adds the user ID of the user belonging to the digital key group authenticated by the user authentication means to the data name of the data distributed and recorded by the modification / distributed recording means, creates and encrypts consortium-side index information including the data name with the added user ID, and records it to a specific node of the blockchain in a black box environment. The distributed recording data index information creation / encryption / recording means, and after the index information of the data distributed and recorded by the modification / distributed recording means is recorded to a specific node of the blockchain by the distributed recording data index information creation / encryption / recording means, deletes the meaningless data for preservation to be uploaded to the first provisional storage area. The upload meaningless data for preservation deletion means, characterized by comprising.、

[0017] Furthermore, in the user key sharing type digital asset guard service provision system of the present invention, the system includes: a data restoration instruction receiving means that receives instructions from the user authentication means to restore data to be protected using the user-side common digital key; an encrypted index information extraction means that extracts encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key, which is recorded in a black box environment on a group of nodes at a specific location in the blockchain by the distributed record data index information creation, encryption, and recording means; an index information decryption means that decrypts the encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key, which has been extracted by the encrypted index information extraction means; and all users belonging to the digital key group of the user-side common digital key, which have been decrypted by the index information decryption means. A specific user index information extraction means extracts only the consortium-side index information from the user's consortium-side index information in which the user ID of the user who performed the ID authentication operation for restoring the data to be preserved belonging to the digital key group authenticated by the user authentication means has been added to the data name; a specific user index information download means downloads the index information extracted by the specific user index information extraction means to a second provisional storage area; a specific user preserved data name list creation and display means creates and displays a list of data names of the data preserved by the user using the index information downloaded to the second provisional storage area by the specific user index information download means; a data name selection and specification acceptance means accepts the selection and specification of the data name of the data that the user wishes to restore from the list of data names displayed by the specific user preserved data name list creation and display means; and the index information in which the user ID of the user extracted by the specific user index information extraction means has been added to the data name.: A specific user selected data name matching index information extraction means that searches for the data name of the data that the user wishes to restore, received by the data name selection / designation reception means, and extracts index information having the data name of the data that the user wishes to restore; a meaningless preservation target data extraction means that uses the index information extracted by the specific user selected data name matching index information extraction means to extract the meaningless preservation target data that has been distributed to each of the distributed file management groups by the distributed file management group distribution means, and has been distributed and recorded by each of the modification / distributed recording means to the nodes of each of the locations belonging to each of the distributed file management groups and to recording devices at multiple locations connected to the nodes of each location in a network manner; a meaningless preservation target data download means that downloads the meaningless preservation target data extracted by the meaningless preservation target data extraction means to the second provisional storage area; The system further comprises: a data preservation target restoration means for restoring each piece of data preservation target extracted by a semantic data preservation target extraction means and downloaded to the second provisional storage area by a data demeaning preservation target download means to the data preservation target before backup; and a downloaded data erasure means for erasing each piece of data that has been restored to the data preservation target before backup by the data preservation target restoration means and downloaded to the second provisional storage area. The user-side restoration system further comprises a data preservation target restoration instruction receiving means and a specific user The system comprises an index information download means, a means for creating and displaying a list of preserved data names for a specific user, a means for selecting and receiving data names to be restored, a means for downloading data to be rendered meaningless, a means for restoring data to be preserved, and a means for erasing downloaded data. The consortium-side restoration system comprises an encrypted index information extraction means, an index information decryption means, an index information extraction means for a specific user, an index information extraction means corresponding to the data name selected by the specific user, and a means for extracting data to be rendered meaningless.It is preferable that it has [this feature].

[0018] Furthermore, in the user key sharing type digital asset guard service provision system of the present invention, the system includes: a data deletion instruction receiving means that receives a deletion instruction for data to be protected using the user-side common digital key from the user authentication means; a deletion processing encrypted index information extraction means that extracts encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key, which is recorded in a black box environment on a group of nodes at a specific location in the blockchain by the distributed record data index information creation, encryption, and recording means; a deletion processing encrypted index information decryption means that decrypts the encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key, which has been extracted by the deletion processing encrypted index information extraction means; and the deleted data encryption index information decryption means that decrypts the encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key. A means for extracting index information for a specific user during deletion processing, which extracts only the consortium-side index information from the consortium-side index information of all users belonging to the digital key group of the user-side common digital key, in which the user ID of the user who performed the ID authentication operation for deleting data to be preserved belonging to the digital key group authenticated by the user authentication means is appended to the data name; a means for downloading index information for a specific user during deletion processing, which downloads the index information extracted by the index information extraction means for a specific user during deletion processing to a second provisional storage area; a means for creating and displaying a list of data names of data preserved by the user during deletion processing, which creates and displays a list of data names of data preserved by the user during deletion processing, which uses the index information downloaded to the second provisional storage area by the index information download means for a specific user during deletion processing; and a means for selecting and specifying data names of data to be deleted by the user from the list of data names displayed by the data name selection and display means for a specific user during deletion processing.Index information with the user ID of the user extracted by the specific user index information extraction means during the deletion process added to the data name is searched using the data name of the data that the deletion target data name selection / specification reception means has received the user desires to delete, and index information having the data name of the data that the user desires to delete is extracted. The specific user selection data name corresponding index information extraction means during the deletion process, and using the index information extracted by the specific user selection data name corresponding index information extraction means during the deletion process, it is distributed to each of the distributed file management groups by the distributed file management group distribution means, and each of the modified / distributed recording means records it in each node of each site belonging to each of the distributed file management groups and a plurality of site recording devices that are network-connected to the nodes of the site. The meaningless preservation target data deletion means for deleting each meaningless all target data, and the second meaningless preservation target data deletion means for deleting the encrypted consortium-side index information corresponding to the index information extracted by the specific user selection data name corresponding index information extraction means during the deletion process, which is recorded in the node group of a specific site in the blockchain in a black box environment by the distributed recording data index information creation / encryption / recording means. Further comprising, the user-side deletion system includes the preservation target data deletion instruction reception means, the specific user index information download means during the deletion process, the preservation data name list creation / display means for the specific user during the deletion process, and the deletion target data name selection / specification reception means, and the consortium-side deletion system preferably includes the encrypted index information extraction means during the deletion process, the index information decryption means during the deletion process, the specific user index information extraction means during the deletion process, the specific user selection data name corresponding index information extraction means during the deletion process, the meaningless preservation target data deletion means, and the second meaningless preservation target data deletion means.

[0019] Furthermore, in the user key sharing type digital asset guard service provision system of the present invention, it is preferable that the user-side common digital key setting means is configured to set an encryption key and a decryption key as the user-side common digital key.

[0020] Furthermore, in the user key sharing type digital asset guard service provision system of the present invention, it is preferable that the authentication method used to receive an ID authentication operation as access to a predetermined processing means for saving, restoring, or deleting data to be protected from any user belonging to one digital key group in the user authentication means is multi-factor authentication or multi-stage authentication.

[0021] Furthermore, in the user key sharing type digital asset guard service provision system of the present invention, it is preferable to configure it as a cloud-unconnected service, offline application: hybrid SaaS type, so that in the ID authentication operation as access to a predetermined processing means for data backup, it is also possible to select to read the data to be protected from an external medium by having the user authentication means perform ID authentication using an external medium without connecting to a network. [Effects of the Invention]

[0022] According to the present invention, a user key sharing type digital asset guard service provision system is obtained that can strongly and efficiently protect important information such as confidential information and personal information from high-level cyberattacks and physical destruction, and can restore important information without it being stolen by a third party even if it is subjected to cryptographic analysis by a quantum computer or an EMP attack. In addition, it can eliminate problems that may occur due to user key management and reduce the burden on both the user and the system provider. [Brief explanation of the drawing]

[0023] [Figure 1] This is an explanatory diagram illustrating a schematic example of the overall configuration of a user key sharing type digital asset guard service provision system according to the first embodiment of the present invention. [Figure 2]This is a schematic diagram illustrating an example of the configuration of the user ID / password setting acceptance means in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 3] This is a schematic diagram illustrating an example of the configuration of the user-side digital key group setting means in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 4] This is a schematic diagram illustrating an example of the configuration of the user ID / password management means within the user-side digital key group in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 5] This is a schematic diagram illustrating an example of the configuration of a user authentication means in a user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 6] This is a schematic diagram illustrating an example of the configuration of the user-side common digital key setting means in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 7] This is an explanatory diagram illustrating a schematic example of the overall configuration of the user-side evacuation system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 8] This is a schematic diagram illustrating an example of the configuration of a data backup instruction receiving means for protected data in the user-side backup system of the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 9] This is a schematic diagram illustrating an example of the configuration of a means for rendering protected data meaningless in the user-side backup system of the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 10] This is a schematic diagram illustrating an example of the configuration of a data upload means for meaningless preservation in the user-side evacuation system of the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 11]This is a schematic diagram illustrating an example of the configuration of a user-side index information creation and recording means containing user ID added data name, which is provided in the user-side backup system of the user-side key sharing type digital asset guard service provision system according to the first embodiment. [Figure 12] This is a schematic diagram illustrating an example of the overall configuration of the consortium-side evacuation system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 13] This is a schematic diagram illustrating an example of the configuration of a distributed file management group allocation means provided in the consortium-side backup system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 14] This is a schematic diagram illustrating an example of the configuration of the modification and distributed recording means provided in the consortium-side backup system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 15] This is a schematic diagram illustrating an example of the configuration of a distributed record data index information creation, encryption, and recording means provided in the consortium-side evacuation system of the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 16] This is a schematic diagram illustrating an example of the configuration of the data deletion means for data to be erased by rendering it meaningless when uploaded, which is provided in the consortium-side backup system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 17] This is an explanatory diagram illustrating a schematic example of the overall configuration of the user-side recovery system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 18] This is a schematic diagram illustrating an example of the configuration of a means for receiving instructions to restore protected data, which is provided in the user-side restoration system of the user-key sharing type digital asset guard service provision system according to the first embodiment. [Figure 19]This is a schematic diagram illustrating an example of the configuration of a means for downloading index information for a specific user, which is provided in the user-side recovery system of the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 20] This is a schematic diagram illustrating an example of the configuration of a means for creating and displaying a list of preservation data names for a specific user, which is provided in the user-side restoration system of the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 21] This is a schematic diagram illustrating an example of the configuration of a data name selection / designation receiving means for the data to be restored, which is provided in the user-side restoration system of the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 22] This is a schematic diagram illustrating an example of the configuration of a data download means for data to be rendered meaningless, provided in the user-side restoration system of the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 23] This is a schematic diagram illustrating an example of the configuration of a data recovery means for protected data included in the user-side recovery system of the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 24] This is a schematic diagram illustrating an example of the configuration of a downloaded data erasure means provided in the user-side recovery system of the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 25] This is an explanatory diagram illustrating a schematic example of the overall configuration of the consortium-side recovery system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 26] This is a schematic diagram illustrating an example of the configuration of an encrypted index information extraction means provided in the consortium-side recovery system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 27]This is a schematic diagram illustrating an example of the configuration of an index information decryption means provided in the consortium-side restoration system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 28] This is a schematic diagram illustrating an example of the configuration of a means for extracting index information for a specific user, which is provided in the consortium-side restoration system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 29] This is a schematic diagram illustrating an example of the configuration of a means for extracting index information corresponding to a specific user-selected data name in the consortium-side restoration system of the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 30] This is a schematic diagram illustrating an example of the configuration of a means for extracting data to be rendered meaningless in the consortium-side restoration system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 31] This is an explanatory diagram illustrating a schematic example of the overall configuration of the user-side deletion system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 32] This is a schematic diagram illustrating an example of the configuration of a means for receiving instructions to delete protected data, which is provided in the user-side deletion system of the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 33] This is a schematic diagram illustrating an example of the configuration of a means for downloading index information for a specific user during deletion processing, which is provided in the user-side deletion system of the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 34] This is a schematic diagram illustrating an example of the configuration of a means for creating and displaying a list of protected data names for a specific user during deletion processing, which is provided in the user-side deletion system of the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 35]This is a schematic diagram illustrating an example of the configuration of a data name selection / designation receiving means for data to be deleted, which is provided in the user-side deletion system of the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 36] This is a schematic diagram illustrating an example of the overall configuration of the consortium-side deletion system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 37] This is a schematic diagram illustrating an example of the configuration of the encryption index information extraction means during deletion processing, which is provided in the consortium-side deletion system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 38] This is a schematic diagram illustrating an example of the configuration of the index information decryption means during deletion processing in the consortium-side deletion system of the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 39] This is a schematic diagram illustrating an example of the configuration of a means for extracting index information for a specific user during deletion processing, which is provided in the consortium-side deletion system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 40] This is a schematic diagram illustrating an example of the configuration of the means for extracting index information corresponding to a specific user-selected data name during deletion processing, which is provided in the consortium-side deletion system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 41] This is a schematic diagram illustrating an example of the configuration of a means for deleting data subject to meaningless preservation, which is provided in the consortium-side deletion system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 42] This is a schematic diagram illustrating an example of the configuration of a second data deletion means for meaningless preservation in the consortium-side deletion system in the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 43]This is an explanatory diagram showing the flow of the user pre-registration process using the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 44] This is an explanatory diagram showing a part of the maintenance process flow using the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 45] This is an explanatory diagram showing another part of the maintenance process flow using the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 46] This is an explanatory diagram showing another part of the maintenance process flow using the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 47] This is an explanatory diagram showing a part of the recovery process flow using the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 48] This is an explanatory diagram showing another part of the recovery process flow using the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 49] This is an explanatory diagram showing another part of the recovery process flow using the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 50] This is an explanatory diagram showing another part of the recovery process flow using the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 51] This is an explanatory diagram showing another part of the recovery process flow using the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 52] This is an explanatory diagram showing a part of the deletion process flow using the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 53] This is an explanatory diagram showing another part of the deletion process flow using the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 54]This is an explanatory diagram showing another part of the deletion process flow using the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 55] This is an explanatory diagram showing another part of the deletion process flow using the user key sharing type digital asset guard service provision system according to the first embodiment. [Figure 56] This diagram conceptually illustrates the difference in the user-side key management method between the conventional digital asset guard service provision system initially derived by the inventor and the user key sharing type digital asset guard service provision system considered and examined by the inventor during the derivation stage of the present invention. (a) is a diagram showing the user-side key management method in the conventional digital asset guard service provision system, and (b) is a diagram showing the user-side key management method in the user key sharing type digital asset guard service provision system. [Figure 57] This is a schematic diagram illustrating key management in a configuration that combines a conventional digital asset guard service provision system with the user key sharing type digital asset guard service provision system of the present invention. [Modes for carrying out the invention]

[0024] Before describing the embodiments, we will explain the circumstances that led to the invention and the effects of the invention.

[0025] Recent attacks Recent cyberattacks have been the dominant type of attack during times of crisis. Cyberattacks during emergencies are based on the premise of destroying backups. The "backup measures" in a "standard BCP" are based on the concept of recovery from a major disaster, and are less effective in a "cyber BCP."

[0026] Cyber ​​BCP A cyber business continuity plan (BCP) is a plan for responding to emergencies that threaten the survival of a business due to cyberattacks. While typical BCPs (IT-BCPs) are designed to handle natural disasters (such as backups), there is a growing need to incorporate BCPs specifically tailored to cyberattacks.

[0027] Since June 2024, various ministries and agencies have been leading the development of "business continuity plans (BCPs) that anticipate cyberattacks," also known as "cyber BCP concepts." However, these concepts do not focus on defensive measures, which have been the emphasis in cybersecurity until now, but rather on how to deal with cyberattacks after they have occurred, assuming that defense is impossible.

[0028] The key point is proactive measures against cyberattacks by state actors during times of crisis. These attacks by state actors aim not at information leakage, but at system destruction.

[0029] Anticipated State Actor Attacks In the event of a crisis, the following types of attacks by state actors are anticipated: • Cutting of submarine cables • Naval blockade by military force (suspension of exports and imports) • Cyberattacks (Zero-day cyberattacks are basically impossible to defend against on servers) • EMP (high magnetic field) attack using balloons Currently, cyber insurance policies exclude coverage for state actor factors. In effect, cyber insurance is not available to financial institutions and similar entities. Furthermore, in the case of an EMP attack, it has been pointed out that in addition to short-circuiting the electronic circuits, there is also a possibility that the information on the backup cartridge itself may be corrupted. While mainframe systems are resistant to cyberattacks, they cannot withstand EMP attacks.

[0030] The following two points are examples of information that should be preserved: • Important company information: Contracts / Research and patent details / System designs and source code • Service information: Personal and corporate information (credit / rights / assets / transactions, etc.) Furthermore, under the revised Personal Information Protection Act, all forms of personal information, including encrypted and distributed versions, as well as backups, are considered personal information, and their transfer overseas is restricted.

[0031] Cyber ​​BCP for "State-Actor-Type Attacks" in Times of Crisis (1) Commonly considered desk measures While cyberattacks are difficult to completely prevent due to their complexity and destructive power, it is believed that damage can be mitigated through multi-layered defenses, continuous vulnerability management, and rapid incident response. Furthermore, to enable rapid recovery after an attack, it is considered important to manage backups, rebuild systems, conduct forensic investigations, and design systems with resilience in mind.

[0032] (2) Cyberattacks in times of crisis Cyberattacks during emergencies are different in scale from what is anticipated, and in reality, the following countermeasures are likely necessary. The primary threat is zero-day attacks, and although countermeasures are being considered and researched due to the existence of real-world examples, defense is virtually impossible. In the near future, cryptography using quantum computers and EMP (electromagnetic pulse) attacks are recognized as important threats, particularly in the United States, and countermeasures are being taken. If such an attack were to occur domestically, it would pose a particularly serious threat to critical infrastructure and the financial sector. It has been pointed out that if an EMP attack occurs, electronic devices and infrastructure could be destroyed on a large scale, potentially bringing critical infrastructure and financial systems to a standstill. It is difficult to defend against the above attacks in advance, and it is necessary to consider restoring the system under the assumption that it has been severely damaged. In other words, computer shelter (data preservation) measures like those used in Europe and the United States are considered effective.

[0033] Matters that require special consideration in "Cyber ​​BCP" While ransomware is likely already embedded in systems, the latest security technologies allow for a certain degree of detection. Although these countermeasures are being implemented, the real threat lies in unknown attacks that haven't surfaced. In such cases, the fundamental concept of cyber business continuity planning (BCP) is to assume that defense is impossible and take appropriate measures. At the very least, defending against the next attack will be difficult. (1) Zero-day attacks: These particularly target network vulnerabilities, and the Huawei issue in the US is complex. They have already secured undisclosed halls. (2) EMP: A strong electromagnetic wave attack caused by a nuclear explosion in the stratosphere, recognized by the United Nations as a cyberattack. It is virtually impossible to defend against attacks that involve mobile balloons controlled by satellites. (3) Quantum computer cryptography: The practical application of 10,000-qubit gate-type quantum computers is imminent. As mentioned above, cyberattacks are cutting-edge, and countermeasures using older technologies are insufficient.

[0034] Cyber ​​BCP plan for particularly troublesome EMP attacks The following are some cyber BCP (Business Continuity Plan) proposals for particularly troublesome EMP (Electromagnetic Pulse) attacks: (1) Infrastructure hardening The equipment is physically protected from the effects of electromagnetic waves by introducing shielded rooms and adopting EMP-resistant equipment. For example, a computer shelter deep underground would be one such example. (2) Data redundancy and off-site information backup Off-site data backup: To prevent data loss, data is regularly backed up to an off-site location and stored in a physically and geographically isolated location that is not affected by EMP attacks. Utilizing cloud backup: By storing financial system data in cloud-based storage (across multiple regions), data loss due to physical server damage is prevented. Furthermore, in the case of foreign-owned cloud services, cloud risks exist, so measures to render the information to be evacuated meaningless are considered essential.

[0035] However, the above practical solutions require very high costs and time. However, according to the digital asset guard service provision system derived by the inventor of this case, it is believed that important information can be protected against foreign cloud companies by rendering the information to be backed up to a cryptographic distributed service meaningless (+PQC).

[0036] Digital Asset Guard Service Provisioning System The digital asset guarding service provision system developed by the inventor is configured to render the information to be evacuated meaningless and distribute it globally (utilizing overseas cloud regions). The anonymized information will be protected using multivariate polynomial cryptography that is resistant to cryptographic cracking by quantum computers. Furthermore, personal information can be anonymized and stored overseas. Generally, blockchains cannot manage personal information because the block chain is unbreakable, thus failing to meet the requirements for invalidating personal information, and they cannot manage information exceeding the block size. However, according to the digital asset guard service provision system, it is possible to invalidate meaningless personal information recorded on the blockchain by deleting the index information of meaningless personal information, and information exceeding the block size can be managed by distributing and recording it on nodes separate from the blockchain. The information management in the digital asset guard service provision system utilizes blockchain (a type with data management functionality, not ledger functionality), but its structure is based on a password (two-way agreement) method. If you don't want to hand over sensitive information to a foreign cloud provider, rendering the information meaningless can be an effective solution. The Digital Asset Guard Service Provisioning System provides a cryptographic distributed data preservation service with a consortium-type planetary system configuration. The inventors of this invention believe that, globally, the Digital Asset Guard Service Provisioning System is currently the only system providing a service in this manner. Users can recover their preserved information even if their system's data management environment is completely destroyed, provided they reliably protect their digital key (RSA or next-generation type selected during initial setup). The digital keys are expected to be stored in fireproof safes or through security services provided by security companies. Thus, while blockchain is used for token management, the digital asset guard service provision system puts into practical use a decentralized DMP (Data Management Platform), an open data management structure that is still in the research stage globally. The digital asset guarding service provision system has the following features: (1) it divides the original data into multiple meaningless data and stores them, and (2) if the required number of meaningless data are available from the multiple divided meaningless data, the original data can be restored.

[0037] Security Concepts for Digital Asset Guard Service Provisioning Systems As described above, the digital asset guard service provision system renders the original data meaningless on the user's side. This is then further decomposed into secondary data and distributed globally, with each index managed accordingly. However, as long as the "digital key" of the primary information is not lost or destroyed, the system is configured to allow decomposition even if the primary information is stolen or the environment is destroyed. Since the secondary decomposition side involves a globally dispersed physical environment, it is considered extremely difficult to destroy the entire environment. Deconstructing multiple meaningless data sets to restore the original data requires both primary information (primary key) and secondary decomposition information (secondary key). Furthermore, even if both pieces of information are obtained, decomposition requires specialized processing, and it is considered that there are basically no methods of attacking the system through the theft of both pieces of information and environmental destruction.

[0038] Upon further consideration and examination of the digital asset guard service provision system derived by the inventor, it was found that the following issues remain regarding key management for users. In the digital asset guard service provision system (Patent No. 7511820) initially developed by the inventor of this case, each user possesses a "key + ID authentication (password)," and each user manages their own key. Backup data is backed up and restored by using the keys managed by the user in a one-to-one correspondence with the keys managed by the consortium. However, there are concerns that the difficulty for users in managing their digital keys, the risk of being unable to retrieve their digital assets if their digital keys are damaged or lost, and the resulting complexity of the consortium's processing and response when managing each user's digital keys could hinder the widespread adoption of the digital asset guard service. Furthermore, if digital key management is implemented for each user, there are concerns that the burden on the consortium's processing capabilities for backing up and restoring data could become enormous, as each user's key would have to be used on a one-to-one basis.

[0039] Therefore, in order to address the above problem, the inventor of this invention considered configuring a digital asset guard service provision system in which multiple users share one user-side key, and individual users do not manage their own user-side keys, but rather a key administrator who manages the user IDs of multiple users manages the one user-side key shared by multiple users as a unified key (more specifically, for example, in a SaaS-type system on the consortium side that has made the processing means for distributed recording of data in the backend into a SaaS-type system, the processing means for managing users who wish to render the data to be protected meaningless in the frontend, together with the processing means for rendering the data to be protected meaningless, is made into a SaaS-type system in which one managing company, the key administrator, manages multiple user companies, and in the processing means for managing users, the managing company, the key administrator, manages the unified key shared by multiple user companies, and manages the IDs and passwords of multiple user companies), so that the operation of accessing predetermined processing means for data backup and restoration by users is "ID authentication (password) only". Furthermore, the inventor of this case considered user ID authentication to be based on the premise of using multi-factor or multi-step authentication.

[0040] More specifically, the inventor considered setting up a group of multiple users as co-sharers for a single user's key. That is, multiple users (or entities as such) belong to one digital key group, and each user (or entity as such) belonging to the same digital key group does not manage its own digital key. Instead, the management of digital keys in a single digital key group to which multiple users belong is carried out through application software for a key manager, which has a single authentication function that authenticates each user. Figure 56 shows the difference in the user-side key management method between the conventional digital asset guard service provision system initially derived by the inventor and the user key sharing type digital asset guard service provision system considered and examined by the inventor during the derivation stage of the present invention.

[0041] The inventor then conceived of setting a single user-side key, shared by multiple users belonging to a single digital key group, into a processing means having a single authentication function that authenticates each user. Furthermore, the inventors considered setting an encryption key and a decryption key in a processing means having a single authentication function that authenticates each user belonging to a single digital key group. Then, when a predetermined user wishes to use a decryption key shared by multiple users, the administrator (key administrator) of the processing means having a single authentication function that authenticates each user belonging to a single digital key group sets the decryption key when the predetermined user requests decryption processing, and also contacts the consortium so that the consortium processes the data using the consortium's decryption key.

[0042] Furthermore, the inventors envisioned that, from the perspective of the data preservation side (the consortium), one digital key and one digital key group would be recognized as one user, but that the index information and preservation data would incorporate cryptographic information to identify each user belonging to a single digital key group into the data name. To manage information for each user (company) belonging to a single digital key group, the inventors envisioned that by adding the ID of the user (company) (for example, the company number) to the data name of the data to be preserved received from each user (company), it would be possible to distinguish between data to be preserved for multiple users (company). This would allow the consortium to select and specify only the data whose data name has the user ID of a specific user (company) appended to it when restoring data that has been preserved.

[0043] More specifically, the inventor of this case first considered establishing a key administrator as a service entity for managing a common digital key, and creating a digital key group by grouping multiple users through the key administrator, so that one common key is set for each digital key group. Furthermore, the inventors envisioned a system where users belonging to this digital key group are authenticated and managed by a key administrator acting as a service entity using a user ID and password. Here, the user ID essentially serves as an identifier. Therefore, the inventors envisioned a system where the user ID, which acts as an identifier, is added to the data name (such as the beginning or end) of the data to be protected sent by that user, thereby making it possible to identify which user's data belongs to the digital key group.

[0044] By adding the user ID to the data name of the data to be protected and writing this index information as index information in the user's system, the data name of the index information in the user's system will include the user ID of any user belonging to the digital key group as an identifier. Furthermore, the inventor considered that the protection process for protected data, in which each user's user ID is included as an identifier in the data name, should be the same as the processing performed by the consortium-side system in the digital asset guard service provision system initially derived by the inventor. Therefore, the consortium-side system would only be able to recognize one digital key group managed by the key administrator as one user, and individual users would not be recognized. In addition, the inventor considered that the index information on the consortium side would be recorded encrypted with the user ID appended to the data name corresponding to the distributed recorded data.

[0045] Next, the inventor considered a scenario where, if a user belonging to a common digital key group wishes to restore specific data preserved by the consortium, the index information would be read using the common digital key. In this case, the index information of other users belonging to the digital key group would also be read, but since the size of the index information is very small, it is not expected that there will be any problem of increased processing load.

[0046] Thus, in the index information of all users belonging to a common digital key group read with a common digital key, the user ID is attached as an identifier to the data name. Therefore, the inventor of this case considered extracting only the index information of data in which the user ID of a specific user who requested data recovery is attached as an identifier to the data name, and displaying a list of the data names of the relevant data to that specific user.

[0047] The inventor envisioned that in the user-side system, a specific user requesting data restoration could select the data name they wished to restore from the displayed list of data names, and then issue a restoration instruction for the data with the selected data name attached. Furthermore, the inventor envisioned that in the consortium-side system, only the selected data name would be searched in the consortium's index information, and the distributed data would be extracted using the index information containing the searched data name, and the extracted data would then be restored in the user-side system.

[0048] More specifically, we considered having the data recovery process proceed through the following stages. (Phase 1) The consortium system extracts and decrypts the index information of all users belonging to the digital key group based on the user's decryption key and the consortium's decryption key that are common within the digital key group. From the decrypted index information of all users, it extracts and downloads only the index information of the specific user belonging to the digital key group who requested data recovery, with the user ID of that user appended to the data name. The user's system uses the downloaded index information to create and display a list of data names for the data that the user has saved.

[0049] (Stage 2) On the user's system, the user selects and specifies the data name of the data they wish to restore from the displayed list of data names.

[0050] (Phase 3) The consortium system searches the decrypted and extracted index information, which has the user ID of the user in question appended to the data name, using the data name specified by the user. It extracts the index information corresponding to that data name, and uses the extracted index information to extract and download the distributed data that is subject to meaninglessness preservation. The user's system restores the downloaded, meaningless data to its original state.

[0051] The inventors of this case have organized the strategies and issues derived from the above considerations and studies, and after further consideration and studies, have developed a user key sharing type digital asset guard service provision system that can strongly and efficiently protect important information such as confidential information and personal information from high-level cyberattacks and physical destruction, and can restore important information without it being stolen by third parties even if it is subjected to cryptographic analysis by quantum computers or EMP attacks, and can also eliminate problems that may arise from user key management, thereby reducing the burden on both users and system providers.

[0052] The present invention provides a user key sharing type digital asset guard service provision system that is constructed with a distributed ledger in blockchain or other distributed ledger technology, and a smart contract or server application for performing predetermined processing using data managed in the distributed ledger, and has a consortium-type blockchain constructed with multiple planets that form a single unit constituting the blockchain, each consisting of a group of nodes combining nodes at multiple locations in different regions, and has a backup system comprising a user-side backup system and a consortium-side backup system, a restoration system comprising a user-side restoration system and a consortium-side restoration system, and a deletion system comprising a user-side deletion system and a consortium-side deletion system, and is configured to perform backup, restoration, or deletion of data to be protected via the backup system, the restoration system, or the deletion system by using a one-to-one correspondence between digital keys managed by the user and digital keys managed by the consortium, and is a high-level cyber - A digital asset guard service provision system for protecting digital assets from attacks, comprising: a user ID / password setting reception means for accepting user ID and password settings by users; a user-side digital key group setting means for setting up user-side digital key groups in which multiple users share a single user-side key, via an operation by a digital key management company; a user-side digital key group user ID / password management means for managing the user ID and password received by the user ID / password setting reception means for each user belonging to the user-side digital key group set by the user-side digital key group setting means; a user authentication means that accepts ID authentication operations from users to access predetermined processing means for backing up, restoring, or deleting data to be protected, performs verification using the user ID and password managed by the user-side digital key group user ID / password management means, and authenticates the user as a user belonging to the digital key group when they match; and the user authentication means,The system includes a user-side common digital key setting means for setting a single digital key shared by all users belonging to one digital key group as a user-side common digital key via the operation of the digital key management company, and the user authentication means further has the function of managing the user-side common digital key set by the user-side common digital key setting means, and after authenticating the user who performed the ID authentication operation as a user belonging to the digital key group, instructing the backup, restoration, or deletion of the data to be protected using the user-side common digital key, and the backup system, restoration system, deletion system, user ID / password setting reception means, user-side digital key group setting means, user ID / password management means within the user-side digital key group, user authentication means and user-side common digital key setting means are provided on a cloud or server system that can be accessed via a dedicated line or the internet, and the user-side backup system receives backup instructions for the data to be protected using the user-side common digital key from the user authentication means The consortium-side backup system comprises: a data backup instruction receiving means; a means for de-encrypting data to be preserved, which, based on a backup instruction for data to be preserved received by the data backup instruction receiving means, performs a predetermined encryption process on the data to be preserved using the user-side common digital key to convert it into de-encrypted data to be preserved; a means for uploading the de-encrypted data to be preserved converted by the data de-encryption means to a first provisional storage area; and a means for creating and recording user-side index information containing user ID data name, which, when the data backup instruction receiving means receives a backup instruction for data to be preserved, adds the user ID of the user belonging to the digital key group authenticated by the user authentication means to the data name of the data to be preserved, and when the de-encrypted data to be preserved upload means uploads the de-encrypted data to the first provisional storage area, creates user-side index information including the data name with the user ID added and records it on a specific node of the blockchain in a black box environment.A distributed file management group distribution means distributes the data to be preserved and made meaningless, uploaded to the first provisional storage area by the aforementioned data to be preserved and made meaningless, to multiple distributed file management groups constructed by the consortium using the consortium's digital key, with each node of the bases that constitute the planet set up by the consortium and recording devices at multiple bases that are network-connected to the nodes of those bases; and modifies the data distributed by the distributed file management group distribution means and distributes the data that does not exceed the block size to multiple nodes of the distributed management file group established on the blockchain, and the data that exceeds the block size to multiple nodes of a distributed file management group separate from the blockchain. The system comprises: a recording means; a distributed recording data index information creation, encryption, and recording means that adds the user ID of the user belonging to the digital key group authenticated by the user authentication means to the data name of the data distributed and recorded by the modification and distributed recording means, creates and encrypts consortium-side index information including the data name with the added user ID, and records it on a specific node of the blockchain in a black box environment; and an upload meaningless preservation target data erasure means that erases the meaningless preservation target data that has been uploaded to a first provisional storage area after the index information of the data distributed and recorded by the modification and distributed recording means has been recorded on a specific node of the blockchain by the distributed recording data index information creation, encryption, and recording means.

[0053] The present invention provides a user key sharing type digital asset guard service, which includes a consortium-type blockchain constructed with multiple planets, each planet being a single unit constituting a blockchain, and comprising a user-side evacuation system and a consortium-side evacuation system, a restoration system comprising a user-side restoration system and a consortium-side restoration system, and a deletion system comprising a user-side deletion system and a consortium-side deletion system, and by using a one-to-one correspondence between the digital key managed by the user and the digital key managed by the consortium, the evacuation system, the By configuring the system to perform data recovery, recovery, or deletion via a recovery system or deletion system, the user-side recovery system renders the data to be recovered meaningless using a digital key managed by the user. The consortium-side recovery system then distributes the rendered data to multiple nodes in different regions using a digital key managed by the consortium, modifies and distributes the data, and creates and encrypts index information for the distributed data for management. As long as the digital key managed by the user is not lost or destroyed, the recovered data can be recovered even if the information about the digital key managed by the user is stolen or the environment of the user-side recovery system is destroyed. Furthermore, the consortium's evacuation system distributes the physical environment, making it extremely difficult for state actors or other entities to destroy the entire environment even if they attack, thus enabling the protection of data necessary for restoration. Furthermore, by requiring both the digital key managed by the user and the digital key managed by the consortium for data recovery, it becomes possible to prevent data leakage by malicious third parties.

[0054] Furthermore, as in the user key sharing type digital asset guard service provision system of the present invention, "User ID / password setting reception means for receiving user ID and password settings by users; User-side digital key group setting means for setting up user-side digital key groups in which multiple users are shareholders of one user-side key, via the operation of a digital key management company; User ID / password management means within the user-side digital key group for each user belonging to the user-side digital key group set up by the user-side digital key group setting means, which manages the user ID and password received by the user ID / password setting reception means; and ID authentication operations from users to access predetermined processing means for saving, restoring, or deleting data to be protected, which are managed by the user ID / password management means within the user-side digital key group The system includes a user authentication means that performs verification using a user ID and password and authenticates the user as belonging to the digital key group when they match, and a user-side common digital key setting means that sets a single digital key shared by all users belonging to one digital key group as a user-side common digital key via an operation by the digital key management company, and the user authentication means further has the function of managing the user-side common digital key set by the user-side common digital key setting means, and after authenticating the user who performed the ID authentication operation as a user belonging to the digital key group, instructs the user-side common digital key to be used to back up, restore, or delete the data to be protected. With this configuration, the management of user-side keys by users becomes unnecessary, eliminating the risk of damage or loss of user-side keys by users. Furthermore, by having a key management company manage a single user-side key shared by multiple users, the complexity of key management can be reduced compared to when each user has a key management company manage their individual keys. Furthermore, by having a key management company manage a single user-side key shared by multiple users (companies) on the front end, the number of keys can be reduced in the back-end data security management by the consortium, thus reducing the total number of keys to manage.

[0055] Furthermore, if the user key sharing type digital asset guard service provision system of the present invention is configured such that "the backup system, the restoration system, the deletion system, the user ID / password setting acceptance means, the user-side digital key group setting means, the user ID / password management means within the user-side digital key group, the user authentication means, and the user-side common digital key setting means are provided on a cloud or server system accessible via a dedicated line or the internet," then even if a user forgets their ID, they can recover their ID by verifying their authentication information. By authenticating using the recovered ID (and password), they can decrypt information using a common decryption key set by a processing means having a single authentication function that authenticates each user belonging to a single digital key group.

[0056] Furthermore, if the distributed recording data index information creation, encryption, and recording means is configured as follows, as in the user key sharing type digital asset guard service provision system of the present invention, it is possible to distinguish between data to be protected for multiple users belonging to a single digital key group. When restoring data protected on the consortium side using a common digital key on the user side, it becomes possible to select and restore only the data of the specific user who performed the restoration operation.

[0057] Furthermore, in the user key sharing type digital asset guard service provision system of the present invention, preferably, a protected data restoration instruction receiving means that receives a restoration instruction for protected data using the user-side common digital key from the user authentication means, an encrypted index information extraction means that extracts encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key recorded in a black box environment by the distributed record data index information creation, encryption, and recording means, based on the user-side common digital key associated with the protected data to be restored received by the protected data restoration instruction receiving means and the consortium-side digital key, an index information decryption means that decrypts the encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key extracted by the encrypted index information extraction means, and the digital key of the user-side common digital key that has been decrypted by the index information decryption means A specific user index information extraction means extracts only the consortium-side index information from the consortium-side index information of all users, in which the user ID of the user who performed the ID authentication operation for restoring the data to be preserved belonging to the digital key group authenticated by the user authentication means is attached to the data name; a specific user index information download means downloads the index information extracted by the specific user index information extraction means to a second provisional storage area; a specific user preserved data name list creation and display means creates and displays a list of data names of the data preserved by the user using the index information downloaded to the second provisional storage area by the specific user index information download means; a data name selection and specification acceptance means accepts the selection and specification of the data name of the data that the user wishes to restore from the list of data names displayed by the specific user preserved data name list creation and display means; and the index information extracted by the specific user index information extraction means in which the user ID of the user is attached to the data name,: A specific user selected data name matching index information extraction means that searches for the data name of the data that the user wishes to restore, received by the data name selection / designation reception means, and extracts index information having the data name of the data that the user wishes to restore; a meaningless preservation target data extraction means that uses the index information extracted by the specific user selected data name matching index information extraction means to extract the meaningless preservation target data that has been distributed to each of the distributed file management groups by the distributed file management group distribution means, and has been distributed and recorded by each of the modification / distributed recording means to the nodes of each of the locations belonging to each of the distributed file management groups and to recording devices at multiple locations connected to the nodes of each location in a network manner; a meaningless preservation target data download means that downloads the meaningless preservation target data extracted by the meaningless preservation target data extraction means to the second provisional storage area; The system further comprises: a data preservation target restoration means for restoring each piece of data preservation target extracted by a semantic data preservation target extraction means and downloaded to the second provisional storage area by a data demeaning preservation target download means to the data preservation target before backup; and a downloaded data erasure means for erasing each piece of data that has been restored to the data preservation target before backup by the data preservation target restoration means and downloaded to the second provisional storage area. The user-side restoration system further comprises a data preservation target restoration instruction receiving means and a specific user The system comprises an index information download means, a means for creating and displaying a list of preserved data names for a specific user, a means for selecting and receiving data names to be restored, a means for downloading data to be rendered meaningless, a means for restoring data to be preserved, and a means for erasing downloaded data. The consortium-side restoration system comprises an encrypted index information extraction means, an index information decryption means, an index information extraction means for a specific user, an index information extraction means corresponding to the data name selected by the specific user, and a means for extracting data to be rendered meaningless.It is composed of having [this].

[0058] With this configuration, the consortium's backup system can select and extract only the index information of users who have performed authentication operations to restore the data using a shared digital key on the user side, from the index information of the data to be preserved that is managed by the consortium's backup system. This information can then be displayed as a list on the user's restoration system, and the user can select and restore the desired data to be preserved from the displayed index information.

[0059] Furthermore, in the user key sharing type digital asset guard service provision system of the present invention, preferably, a means for receiving instructions to delete protected data using the user-side common digital key from the user authentication means, the user-side common digital key associated with the protected data to be deleted received by the protected data deletion instruction receiving means, and the consortium-side digital key, based on the distributed record data index information creation, encryption, and recording means, extracts encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key recorded in a black box environment on a group of nodes at a specific location on the blockchain, the encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key extracted by the encrypted index information extraction means, and the deleted data deletion information decryption means decrypts the encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key extracted by the encrypted index information extraction means, and the deleted data deletion information decryption means A means for extracting index information for a specific user during deletion processing, which extracts only the consortium-side index information from the consortium-side index information of all users belonging to the digital key group of the common digital key for the user in question, in which the user ID of the user who performed the ID authentication operation for deleting the data to be preserved belonging to the digital key group authenticated by the user authentication means has been added to the data name; a means for downloading index information for a specific user during deletion processing, which downloads the index information extracted by the index information extraction means for a specific user during deletion processing to a second provisional storage area; a means for creating and displaying a list of data names of data preserved by the user in question using the index information downloaded to the second provisional storage area by the index information download means for a specific user during deletion processing; and a means for selecting and specifying data names of data to be deleted, which accepts the selection and specification of data names of data that the user wishes to delete from the list of data names displayed by the data name selection and display means for a specific user during deletion processing.A data name index information extraction means for data names selected by a user during deletion, which extracts index information in which the user ID of the user extracted by the data name index information extraction means for a specific user during deletion has been added to the data name, and searches for the data name of the data to be deleted by the user that the user has requested to delete, as received by the data name selection / designation receiving means for data names to be deleted, and extracts index information having the data name of the data that the user has requested to delete; a data deletion means for data to be made meaningless, which uses the index information extracted by the data name index information extraction means for data names selected by a user during deletion to delete data, which is distributed to each of the distributed file management groups by the distributed file management group distribution means, and is distributed and recorded by each of the modification / distributed recording means to the nodes of each location belonging to each of the distributed file management groups and to recording devices at multiple locations connected to the nodes of each location via a network, and deletes all data to be made meaningless, which is to be made meaningless, and a data deletion means for data to be made meaningless, which is to be made meaningless, which is to be made meaningless, and the distributed recording data index information creation / encryption / recording means The user-side deletion system further comprises a means for receiving instructions to delete data to be deleted, a means for downloading index information for a specific user at the time of deletion, a means for creating and displaying a list of data to be deleted for a specific user at the time of deletion, and a means for selecting and specifying data to be deleted. The consortium-side deletion system comprises a means for extracting encrypted index information at the time of deletion, a means for decrypting index information at the time of deletion, a means for extracting index information for a specific user at the time of deletion, a means for extracting index information for a specific user at the time of deletion, a means for decrypting data to be deleted, and the second means for decrypting data to be deleted.

[0060] With this configuration, the consortium's backup system can select and extract only the index information of users who have performed authentication operations to delete protected data using a shared digital key on the user side, from the index information of protected data managed by the consortium side, and display it in a list on the user side's reduction system. The user can then select and delete the desired protected data from the displayed index information.

[0061] Furthermore, in the user key sharing type digital asset guard service provision system of the present invention, preferably, the user-side common digital key setting means is configured to set an encryption key and a decryption key as the user-side common digital key. This configuration makes it possible to streamline the key setting process in the user-side common digital key setting means.

[0062] Furthermore, in the user key sharing type digital asset guard service provision system of the present invention, preferably, the authentication method that accepts an ID authentication operation as access to a predetermined processing means for saving, restoring, or deleting data to be protected from any user belonging to one digital key group in the user authentication means is multi-factor authentication or multi-stage authentication. This configuration makes it difficult for malicious third parties to log in without authorization.

[0063] Furthermore, in the user key sharing type digital asset guard service provision system of the present invention, preferably, in the ID authentication operation as access to a predetermined processing means for data backup, it is possible to select to read the data to be protected from an external medium by having the user authentication means perform ID authentication using an external medium without connecting to a network. This is achieved by configuring the system as a cloud-unconnected service, offline application, or hybrid SaaS type.

[0064] Accordingly, the user key sharing type digital asset guard service provision system of the present invention provides a user key sharing type digital asset guard service provision system that can strongly and efficiently protect important information such as confidential information and personal information from high-level cyberattacks and physical destruction, and can restore important information without it being stolen by a third party even if it is subjected to cryptographic analysis by a quantum computer or an EMP attack, and can also eliminate problems that may occur due to user key management, thereby reducing the burden on both the user and the system provider. Hereinafter, embodiments for carrying out the present invention will be described with reference to the drawings.

[0065] First Embodiment Figure 1 is a schematic diagram illustrating an example of the overall configuration of a user key sharing type digital asset guard service provision system according to the first embodiment of the present invention. Figure 2 is a schematic diagram illustrating an example of the configuration of the user ID / password setting acceptance means in the user key sharing type digital asset guard service provision system according to the first embodiment. Figure 3 is a schematic diagram illustrating an example of the configuration of the user-side digital key group setting means in the user key sharing type digital asset guard service provision system according to the first embodiment. Figure 4 is a schematic diagram illustrating an example of the configuration of the user ID / password management means within the user-side digital key group in the user key sharing type digital asset guard service provision system according to the first embodiment. Figure 5 is a schematic diagram illustrating an example of the configuration of the user authentication means in the user key sharing type digital asset guard service provision system according to the first embodiment. Figure 6 is a schematic diagram illustrating an example of the configuration of the user-side common digital key setting means in the user key sharing type digital asset guard service provision system according to the first embodiment.

[0066] The first embodiment of the user key sharing type digital asset guard service provision system 1 is constructed with a distributed ledger in blockchain or other distributed ledger technology, and a smart contract or server application for performing predetermined processing using data managed in the distributed ledger. It has a consortium-type blockchain constructed with multiple planets, which are units that make up the blockchain, each consisting of a group of nodes combining nodes at multiple locations in different regions. For example, as shown in Figure 1, it has a backup system 50 comprising a user-side backup system 30 and a consortium-side backup system 40, a restoration system 80 comprising a user-side restoration system 60 and a consortium-side restoration system 70, and a deletion system 110 comprising a user-side deletion system 90 and a consortium-side deletion system 100. The system is configured to perform backup, restoration, or deletion of data to be protected via the backup system 50, the restoration system 80, or the deletion system 110 by using a one-to-one correspondence between digital keys managed by the user and digital keys managed by the consortium. Furthermore, the user key sharing type digital asset guard service provision system 1 includes a user ID / password setting reception means 11, a user-side digital key group setting means 12, a user ID / password management means 13 within the user-side digital key group, a user authentication means 14, and a user-side common digital key setting means 15.

[0067] User ID / Password Setting Acceptance Method 11 The user ID and password setting acceptance means 11 is configured to accept user ID and password settings by a user, as shown in Figure 2, for example.

[0068] User-side digital key group setting means 12 The user-side digital key group setting means 12 is configured, for example as shown in Figure 3, to set up a user-side digital key group in which multiple users share a single user-side key, via an operation by a digital key management company.

[0069] User-side digital key group user ID / password management means 13 The user ID / password management means 13 within the user-side digital key group is configured, for example, as shown in Figure 4, to manage the user ID and password received by the user ID / password setting acceptance means 11 for each user belonging to the user-side digital key group set by the user-side digital key group setting means 12.

[0070] User authentication means 14 The user authentication means 14 is configured to have the following functions, for example, as shown in Figure 5. (14-1) A function that accepts an ID authentication operation from a user to access a predetermined processing means for backing up, restoring, or deleting data to be preserved, performs verification using the user ID and password managed by the user ID / password management means 13 within the user's digital key group, and authenticates the user as belonging to the digital key group when they match. (14-2) A function that manages the user-side common digital key set by the user-side common digital key setting means 15, and after authenticating the user who performed the ID authentication operation as a user belonging to the digital key group, instructs the user-side common digital key to back up, restore, or delete the data to be preserved. Furthermore, the authentication method in the user authentication means 14, which accepts an ID authentication operation as access to a predetermined processing means for backing up, restoring, or deleting data to be protected from any user belonging to a single digital key group, is configured to be multi-factor authentication, multi-stage authentication, or a combination of multi-factor authentication and multi-stage authentication. Multi-factor authentication is configured to perform authentication using, for example, a knowledge element (something the user knows, such as a password), a possession element (something the user knows, such as a card or NFT), and a unique element (a characteristic unique to the user, such as a biometric characteristic like a fingerprint, face, or retina). Multi-factor authentication is configured such that, for example, the user's identity is verified by performing the aforementioned multi-factor authentication as the first stage of authentication, and then SMS authentication is performed as the second stage of authentication.

[0071] User-side common digital key setting means 15 The user-side common digital key setting means 15 is configured, for example as shown in Figure 6, to set a single digital key shared by all users belonging to one digital key group as the user-side common digital key via an operation by the digital key management provider in the user authentication means 14. Preferably, the user-side common digital key setting means 15 is configured to set an encryption key and a decryption key as the user-side common digital key.

[0072] User-side evacuation system 30 As shown in Figure 7, the user-side backup system 30 is configured to include a data backup instruction receiving means 31, a user-side index information creation and recording means 32 containing user ID added data name, a means 33 for rendering data to be preserved meaningless, and a means 34 for uploading data to be rendered meaningless.

[0073] Data to be preserved: Data evacuation instruction receiving means 31 The data backup instruction receiving means 31 is configured to receive data backup instructions from the user authentication means 14 using a common digital key on the user side, as shown in Figure 8, for example.

[0074] Means of rendering data to be preserved meaningless 33 The data to be preserved and rendered meaningless means 33 is configured, for example as shown in Figure 9, to perform a predetermined encryption process on the data to be preserved using a common digital key on the user side, based on a backup instruction for the data to be preserved that has been received by the data to be preserved and As a predetermined encryption process for converting the data into data to be preserved by rendering it meaningless, for example, a process that encrypts and divides file data into multiple parts using a secret sharing technique with a polynomial partitioning method can be mentioned.

[0075] Means of uploading data to be preserved by rendering it meaningless 34 The data to be preserved and rendered meaningless upload means 34 is configured to upload the data to be preserved and rendered meaningless, which has been converted by the data to be preserved and rendered meaningless means 33, to a first provisional storage area, as shown in Figure 10, for example.

[0076] User ID-added data name-containing user-side index information creation / recording means 32 The user-side index information creation and recording means 32 containing user ID-added data name is configured such that, for example as shown in Figure 11, when the data to be preserved data backup instruction receiving means 31 receives an instruction to back up data to be preserved, it adds the user ID of the user belonging to the digital key group authenticated by the user authentication means 14 to the data name of the data to be preserved, and when the meaningless data to be preserved data upload means 34 uploads the meaningless data to be preserved to the first provisional storage area, it creates user-side index information including the data name with the user ID added and records it on a specific node of the blockchain in a black box environment. The user-side index information consists of information such as the data name obtained by adding the user ID to the original data name of the data to be preserved, and the upload date of the data to be preserved.

[0077] Consortium-side evacuation system 40 The consortium-side evacuation system 40 is configured, for example, as shown in Figure 12, to include a distributed file management group distribution means 41, a modification and distributed recording means 42, a distributed recording data index information creation, encryption and recording means 43, and an upload-invalidation and preservation target data deletion means 44.

[0078] Distributed file management group distribution means 41 The distributed file management group distribution means 41 is configured, for example as shown in Figure 13, to distribute the data to be preserved for meaninglessness, which has been uploaded to the first provisional storage area by the data to be preserved for meaninglessness upload means 34, to multiple distributed file management groups, which are constructed using the digital key of the consortium, and the nodes of each location that constitute a planet set up by the consortium, and the recording devices of multiple locations that are network-connected to the nodes of those locations.

[0079] Modification / distributed recording means 42 The modification and distributed recording means 42 is configured to modify the data distributed by the distributed file management group distribution means 41, as shown in Figure 14, for example, and to distribute and record data that does not exceed the block size to multiple nodes of a distributed management file group established on the blockchain, and data that exceeds the block size to multiple nodes of a distributed file management group separate from the blockchain.

[0080] Distributed recording data index information creation, encryption, and recording means 43 The distributed recording data index information creation, encryption, and recording means 43 is configured, for example as shown in Figure 15, to add the user ID of the user belonging to the digital key group authenticated by the user authentication means 14 to the data name of the data distributed and recorded by the modification and distributed recording means 42, create and encrypt consortium-side index information including the data name with the user ID added, and record it on a specific node of the blockchain in a black box environment. The consortium-side index information is composed of the data name with the user ID added to the data name of each data distributed and recorded by the modification and distributed recording means 42, and configuration information of each distributed file management group to which each data is distributed.

[0081] Means of erasing data to be preserved by rendering the upload meaningless 44 The data erasure means 44 for data to be erased after it has been uploaded to the first provisional storage area, for example, as shown in Figure 16, is configured to erase the data to be erased after the index information of the data to be recorded in a distributed manner by the modification and distributed recording means 42 has been recorded on a specific node of the blockchain by the distributed recording data index information creation, encryption and recording means 43.

[0082] User-side recovery system 60 The user-side recovery system 60 is configured, for example, as shown in Figure 17, to include a means 61 for receiving instructions to recover data to be preserved, a means 62 for downloading index information for a specific user, a means 63 for creating and displaying a list of data names to be preserved for a specific user, a means 64 for receiving selection and specification of data names to be recovered, a means 65 for downloading data to be rendered meaningless, a means 66 for recovering data to be preserved, and a means 67 for erasing downloaded data.

[0083] Data recovery instruction receiving means 61 The data restoration instruction receiving means 61 is configured to receive instructions for restoring data using a common digital key from the user authentication means 14, for example, as shown in Figure 18.

[0084] 62 means for downloading index information for specific users The specific user index information download means 62 is configured to download the index information extracted by the specific user index information extraction means 73, which will be described later, to a second provisional storage area, as shown in Figure 19, for example.

[0085] Means for creating and displaying a list of maintenance data names for specific users 63 The data name list creation and display means 63 for specific users is configured to create and display a list of data names of data preserved by a user, for example, as shown in Figure 20, using index information downloaded to a second provisional storage area by the index information download means 62 for specific users.

[0086] Data name selection / specification acceptance method 64 The data name selection / specification receiving means 64 is configured to accept the selection and specification of the data name of the data that the user wishes to restore, from the list of data names displayed by the data name creation / display means 63 for a specific user, as shown in Figure 21, for example.

[0087] Means of downloading data to be preserved by rendering it meaningless 65 The data download means 65 for data to be rendered meaningless, as shown in Figure 22, for example, is configured to download each piece of data to be rendered meaningless, extracted by the data extraction means 75 for data to be rendered meaningless, to a second provisional storage area.

[0088] Data recovery means 66 for data to be preserved The data preservation target restoration means 66 is configured to restore each piece of data that has been extracted by the meaningless data preservation target extraction means 75 (described later) and downloaded to a second provisional storage area by the meaningless data preservation target download means 65, to its state before backup, as shown in Figure 23, for example.

[0089] Download data deletion method 67 The downloaded data erasure means 67 is configured to erase each of the data that has been downloaded to the second provisional storage area after being restored to the data to be preserved before backup by the data to be preserved means 66, as shown in Figure 24, for example.

[0090] Consortium-side restoration system 70 The consortium-side recovery system 70 is configured, for example, as shown in Figure 25, to include an encrypted index information extraction means 71, an index information decryption means 72, an index information extraction means for a specific user 73, an index information extraction means corresponding to a data name selected by a specific user 74, and a data extraction means 75 for data to be preserved by rendering it meaningless.

[0091] Encryption index information extraction means 71 The encrypted index information extraction means 71 is configured, for example as shown in Figure 26, to extract encrypted consortium-side index information for all users belonging to the digital key group of the user-side common digital key, which is recorded in a black-box environment on a group of nodes at a specific location in the blockchain, from the distributed record data index information creation, encryption, and recording means 43, based on the user-side common digital key associated with the data to be restored, which is received by the data restoration instruction receiving means 61, and the consortium-side digital key.

[0092] Index information decoding means 72 The index information decryption means 72 is configured to decrypt the encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key, which has been extracted by the encrypted index information extraction means 71, for example, as shown in Figure 27.

[0093] 73 means for extracting index information for a specific user The specific user index information extraction means 73 is configured, for example as shown in Figure 28, to extract only the consortium-side index information from the consortium-side index information of all users belonging to the digital key group of the user-side common digital key decrypted by the index information decryption means 72, in which the user ID of the user who performed the ID authentication operation for restoring the protected data belonging to the digital key group authenticated by the user authentication means 14 is appended to the data name.

[0094] Specific user-selected data name corresponding index information extraction means 74 The specific user selected data name corresponding index information extraction means 74 is configured, for example as shown in Figure 29, to search the index information in which the user ID of the user extracted by the specific user index information extraction means 73 is attached to the data name, using the data name of the data that the user wishes to restore, as received by the data name selection / designation receiving means 64, and to extract the index information having the data name of the data that the user wishes to restore.

[0095] Meaningless data preservation target extraction means 75 The data extraction means 75 for meaningless preservation targets is configured to extract the meaningless preservation targets from either the nodes of the respective locations belonging to the respective locations belonging to the respective locations or the recording devices of the multiple locations connected to the nodes of the respective locations belonging to the respective locations belonging to the respective locations, which are distributed to each respective distributed file management group by the distributed file management group distribution means 41 and recorded in a distributed manner by each modification / distributed recording means 42 on the nodes of each location belonging to each distributed file management group and on recording devices of multiple locations connected to the nodes of each location. For example, as shown in Figure 30, the data extraction means 75 uses the index information extracted by the specific user selected data name corresponding index information extraction means 74 to distribute to each distributed file management group by the distributed file management group distribution means 41, and the data is recorded in a distributed manner on the nodes of each location belonging to each distributed file management group and on recording devices of multiple locations connected to the nodes of each location.

[0096] User-side deletion system 90 The user-side deletion system 90 is configured, for example, as shown in Figure 31, to include a means 91 for receiving instructions to delete data to be preserved, a means 92 for downloading index information for a specific user during the deletion process, a means 93 for creating and displaying a list of preserved data names for a specific user during the deletion process, and a means 94 for receiving selection and specification of data names to be deleted.

[0097] Data Deletion Instruction Reception Means 91 The data deletion instruction receiving means 91 is configured to receive a data deletion instruction from the user authentication means 14 using a common digital key on the user side, as shown in Figure 32, for example.

[0098] 92 means for downloading index information for a specific user during the deletion process The data deletion process data download means 92 for specific users is configured, for example, as shown in Figure 33, to download the index information extracted by the data deletion process data extraction means 103 for specific users (described later) to a second temporary storage area.

[0099] Means for creating and displaying a list of preserved data names for a specific user during deletion processing 93 The data name list creation and display means 93 for specific users during deletion processing is configured to create and display a list of data names of data preserved by a user, using index information downloaded to a second provisional storage area by the index information download means 92 for specific users during deletion processing, as shown in Figure 34, for example.

[0100] Deletion target data name selection / specification acceptance method 94 The data name selection / specification receiving means 94 is configured, for example as shown in Figure 35, to accept the selection and specification of the data name of the data that the user wishes to delete from the list of data names displayed by the data name creation / display means 93 for specific users during deletion processing.

[0101] Consortium-side deletion system 100 The consortium-side deletion system 100 is configured, for example, as shown in Figure 36, to include a means 101 for extracting encrypted index information during deletion processing, a means 102 for decrypting index information during deletion processing, a means 103 for extracting index information for a specific user during deletion processing, a means 104 for extracting index information corresponding to a data name selected by a specific user during deletion processing, a means 105 for deleting data to be preserved for meaninglessness, and a second means 106 for deleting data to be preserved for meaninglessness.

[0102] Deletion process encryption index information extraction means 101 The encryption index information extraction means 101 during deletion processing is configured, for example as shown in Figure 37, to extract encrypted consortium-side index information for all users belonging to the digital key group of the user-side common digital key, which is recorded in a black box environment on a group of nodes at a specific location in the blockchain, based on the user-side common digital key and the consortium-side digital key associated with the data to be deleted, received by the data deletion instruction receiving means 91, using the distributed record data index information creation, encryption, and recording means 43.

[0103] Deletion process index information decryption means 102 The deletion-processing index information decryption means 102 is configured, for example as shown in Figure 38, to decrypt the encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key, which has been extracted by the deletion-processing encrypted index information extraction means 101.

[0104] Deletion process means 103 for extracting index information for a specific user The deletion process index information extraction means 103 is configured, for example as shown in Figure 39, to extract only the consortium-side index information from the consortium-side index information of all users belonging to the digital key group of the user-side common digital key decrypted by the deletion process index information decryption means 102, in which the user ID of the user who performed the ID authentication operation for deleting the data to be preserved belonging to the digital key group authenticated by the user authentication means 14 is appended to the data name.

[0105] Data name selected by a specific user during deletion process: Index information extraction means 104 The data name selection index information extraction means 104 for specific users during deletion processing is configured, for example as shown in Figure 40, to search the index information in which the user ID of the user selected by the specific user during deletion processing is attached to the data name, using the data name of the data to be deleted that the user has requested to be deleted, as received by the data name selection / specification receiving means 94, and to extract the index information having the data name of the data that the user has requested to be deleted.

[0106] Means for deleting data to be preserved by rendering it meaningless 105 The data deletion means 105 for meaningless preservation targets is configured to delete the respective data meaningless preservation targets, which are distributed to each distributed file management group by the distributed file management group distribution means 41, using index information extracted by the index information extraction means 104 corresponding to the data name selected by a specific user during the deletion process, as shown in Figure 41, and then recorded in a distributed manner on the nodes of each location belonging to each distributed file management group and on recording devices at multiple locations connected to the nodes of those locations via a network, by the respective modification and distributed recording means 42.

[0107] Second data deletion means 106 for data to be rendered meaningless and preserved The second data deletion means 106, which is meant to be rendered meaningless, is configured, for example as shown in Figure 42, to delete encrypted consortium-side index information that corresponds to the index information extracted by the index information extraction means corresponding to the data name selected by a specific user at the time of deletion, which is recorded in a group of nodes at a specific location in the blockchain under a black box environment by the distributed record data index information creation, encryption, and recording means 43.

[0108] Furthermore, the user key sharing type digital asset guard service provision system 1 of the first embodiment provides a backup system 50, a restoration system 80, a deletion system 110, a user ID / password setting acceptance means 11, a user-side digital key group setting means 12, a user ID / password management means 13 within the user-side digital key group, a user authentication means 14, and a user-side common digital key setting means 15 on a cloud or server system that can be accessed via a dedicated line or the internet.

[0109] Furthermore, the user key sharing type digital asset guard service provision system 1 of the first embodiment may be configured as a cloud-unconnected service, offline application: hybrid SaaS type, so that in the ID authentication operation as access to a predetermined processing means for data backup, the user authentication means 14 can perform ID authentication using an external medium without connecting to a network, and the data to be protected can be read from the external medium.

[0110] Processing flow using the user key sharing type digital asset guard service provision system of the first embodiment The processing flow and other details using the user key sharing type digital asset guard service provision system 1 of the first embodiment configured in this way will be explained with reference to the drawings as appropriate.

[0111] (S1) User pre-registration process flow (Figure 43) (S1-1) User ID and password setting acceptance (Figure 43) The user ID / password setting acceptance means 11 accepts the user's setting of user ID and password.

[0112] (S1-2) Setting the user-side digital key group (Figure 43) The user-side digital key group setting means 12 sets up a user-side digital key group in which multiple users share a single user-side key, through the operation of a digital key management company.

[0113] (S1-3) Management of user IDs and passwords within the user-side digital key group (Figure 43) The user ID / password management means 13 within the user-side digital key group manages the user ID and password received by the user ID / password setting acceptance means 11 for each user belonging to the user-side digital key group, which is set by the user-side digital key group setting means 12.

[0114] (S1-4) Setting the user-side common digital key (Figure 43) The user-side common digital key setting means 15 sets a single digital key shared by all users belonging to one digital key group as the user-side common digital key in the user authentication means 14, via an operation by the digital key management provider. The user-side common digital key setting means 15 sets the encryption key and decryption key as the user-side common digital key.

[0115] (S1-5) Management of user-side common digital keys (Figure 43) The user authentication means 14 manages the user-side common digital key set by the user-side common digital key setting means 15.

[0116] (S2) Maintenance process flow (Figures 44-46) (S2-1) User authentication (Figure 44) The user authentication means 14 accepts an ID authentication operation to access a predetermined processing means for backing up data to be protected, performs a verification using the user ID and password managed by the user ID / password management means 13 within the user-side digital key group, and authenticates the user as belonging to the digital key group when they match.

[0117] (S2-2) Instruction to evacuate data to be preserved (Figure 44) The user authentication means 14 authenticates the user who performed the ID authentication operation as a user belonging to the digital key group, and then instructs the user to back up the data to be protected using the user's common digital key (encryption key) that it manages.

[0118] (S2-3) Receipt of instructions to back up data to be preserved (Figure 44) The data backup instruction receiving means 31 receives a data backup instruction from the user authentication means 14 using a common digital key on the user side.

[0119] (S2-4) Adding the user ID to the data name in the user-side index information (Figure 44) The user-side index information creation and recording means 32, which includes the user ID attached to the data name, adds the user ID of the user belonging to the digital key group authenticated by the user authentication means 14 to the data name of the data to be preserved in the user-side index information when the data backup instruction receiving means 31 receives an instruction to back up the data to be preserved.

[0120] (S2-5) De-embedding of data to be preserved (Figure 45) The data to be preserved is rendered meaningless by means of means 33, based on the data to be preserved data backup instruction received by means of means 31, and performs a predetermined encryption process on the data to be preserved using a common digital key on the user side to convert it into meaningless data to be preserved.

[0121] (S2-6) Uploading data to be preserved by rendering it meaningless (Figure 45) The data to be preserved and rendered meaningless upload means 34 uploads the data to be preserved and rendered meaningless, which has been converted by the data to be preserved and rendered meaningless means 33, to the first provisional storage area.

[0122] (S2-7) Creation and recording of user-side index information containing user ID attached data name (Figure 45) The user-side index information creation and recording means 32, which includes a user ID attached to the data name, creates user-side index information including a user ID attached to the data name when the data to be rendered meaningless and preserved upload means 34 uploads the data to be rendered meaningless and preserved to the first provisional storage area, and records it on a specific node of the blockchain in a black box environment.

[0123] (S2-8) Distribution to distributed file management groups (Figure 46) The distributed file management group distribution means 41 distributes the data to be preserved for meaninglessness, which has been uploaded to the first provisional storage area by the data to be preserved for meaninglessness upload means 34, to multiple distributed file management groups, which are constructed using the digital key on the consortium side, and consist of nodes at each location that constitute a planet set up by the consortium and recording devices at multiple locations that are network-connected to the nodes at said locations.

[0124] (S2-9) Modified and distributed records (Figure 46) The modification and distributed recording means 42 modifies the data distributed by the distributed file management group distribution means 41, and distributes and records the data that does not exceed the block size to multiple nodes of the distributed management file group established on the blockchain, and the data that exceeds the block size to multiple nodes of a distributed file management group separate from the blockchain.

[0125] (S2-10) Creation, encryption, and recording of distributed record data index information (Figure 46) The distributed recording data index information creation, encryption, and recording means 43 adds the user ID of the user belonging to the digital key group authenticated by the user authentication means 14 to the data name of the data distributed and recorded by the modification and distributed recording means 42, creates and encrypts consortium-side index information including the data name with the user ID added, and records it on a specific node of the blockchain in a black box environment.

[0126] (S2-11) Deletion of data to be preserved by rendering the upload meaningless (Figure 46) The data erasure means 44 for data to be erased for uploading after the index information of the data to be recorded in a distributed manner by the modification and distributed recording means 42 has been recorded on a specific node of the blockchain by the distributed recording data index information creation, encryption and recording means 43 has been erased from the data to be erased for uploading after it has been uploaded to the first provisional storage area.

[0127] (S3) Recovery process flow (Figures 47-51) (S3-1) User authentication (Figure 47) The user authentication means 14 accepts an ID authentication operation to access a predetermined processing means for restoring the data to be preserved, performs a verification using the user ID and password managed by the user ID / password management means 13 within the user-side digital key group, and authenticates the user as belonging to the digital key group when they match.

[0128] (S3-2) Instruction to restore data to be preserved (Figure 47) The user authentication means 14 authenticates the user who performed the ID authentication operation as a user belonging to the digital key group, and then instructs the restoration of the data to be preserved using the user-side common digital key (decryption key) that it manages.

[0129] (S3-3) Receipt of instructions for restoring data subject to preservation (Figure 47) The data restoration instruction receiving means 61 receives instructions from the user authentication means 14 to restore the data to be preserved using a common digital key on the user side.

[0130] (S3-4) Extraction of encrypted index information (Figure 48) The encrypted index information extraction means 71 extracts encrypted consortium-side index information for all users belonging to the digital key group of the user-side common digital key, which is recorded in a black box environment on a group of nodes at a specific location in the blockchain, from the distributed record data index information creation, encryption, and recording means 43, based on the user-side common digital key associated with the data to be restored, which has been received by the data restoration instruction receiving means 61, and the consortium-side digital key.

[0131] (S3-5) Decryption of index information (Figure 48) The index information decryption means 72 decrypts the encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key, which was extracted by the encrypted index information extraction means 71.

[0132] (S3-6) Extraction of index information for specific users (Figure 48) The specific user index information extraction means 73 extracts only the consortium-side index information from the consortium-side index information of all users belonging to the digital key group of the user-side common digital key decrypted by the index information decryption means 72, in which the user ID of the user who performed the ID authentication operation for restoring the protected data belonging to the digital key group authenticated by the user authentication means 14 is appended to the data name.

[0133] (S3-7) Downloading index information for specific users (Figure 49) The specific user index information download means 62 downloads the index information extracted by the specific user index information extraction means 73 to a second provisional storage area.

[0134] (S3-8) Creation and display of a list of maintenance data names for specific users (Figure 49) The data name list creation and display means 63 for specific users creates and displays a list of data names of data preserved by the user using the index information downloaded to the second provisional storage area by the index information download means 62 for specific users.

[0135] (S3-9) Acceptance of selection and specification of data names to be restored (Figure 49) The data name selection / specification acceptance means 64 accepts the selection and specification of the data name of the data that the user wishes to restore from the data name list displayed by the data name list creation / display means 63 for specific users.

[0136] (S3-10) Extraction of index information corresponding to the data name selected by a specific user (Figure 50) The specific user selected data name corresponding index information extraction means 74 searches the index information, in which the user ID of the user extracted by the specific user index information extraction means 73 is appended to the data name, using the data name of the data that the user wishes to restore, as received by the data name selection / designation receiving means 64, and extracts the index information that has the data name of the data that the user wishes to restore.

[0137] (S3-11) Extraction of data to be preserved by rendering it meaningless (Figure 50) The data extraction means 75 for data to be rendered meaningless uses the index information extracted by the specific user-selected data name corresponding index information extraction means 74 to distribute the data to each distributed file management group by the distributed file management group distribution means 41, and the data to be rendered meaningless uses the index information extracted by each distributed file management group to each node of each location belonging to each distributed file management group and the data to be rendered meaningless uses the data to be rendered meaningless uses the index information extracted by the specific user-selected data name corresponding index information extraction means 74, distributes the data to each distributed file management group by the distributed file management group distribution means 41, and the data to be rendered meaningless uses is distributed and recorded by each modification and distributed recording means 42 to the nodes of each location belonging to each distributed file management group and to recording devices at multiple locations connected to the nodes of each location via a network.

[0138] (S3-12) Download of data to be preserved by rendering it meaningless (Figure 51) The data download means 65 for data to be preserved for meaninglessness downloads each piece of data to be preserved for meaninglessness, extracted by the data extraction means 75 for data to be preserved for meaninglessness, to a second provisional memory area.

[0139] (S3-13) Restoration of data subject to preservation (Figure 51) The data preservation target restoration means 66 restores each piece of data that has been extracted by the data de-meaningless data preservation target extraction means 75 and downloaded to the second provisional storage area by the data de-meaningless data preservation target download means 65 to its state before backup.

[0140] (S3-14) Deleting downloaded data (Figure 51) The downloaded data erasure means 67 erases each of the data that was downloaded to the second provisional storage area after being restored to the data to be saved before backup by the data to be saved data restoration means 66.

[0141] (S4) Deletion process flow (Figures 52-55) (S4-1) User authentication (Figure 52) The user authentication means 14 accepts an ID authentication operation to access a predetermined processing means for deleting data to be preserved, performs a verification using the user ID and password managed by the user ID / password management means 13 within the user-side digital key group, and authenticates the user as belonging to the digital key group when they match.

[0142] (S4-2) Instruction to delete data to be preserved (Figure 52) The user authentication means 14 authenticates the user who performed the ID authentication operation as a user belonging to the digital key group, and then instructs the deletion of the data to be preserved using the user-side common digital key that it manages.

[0143] (S4-3) Receipt of instructions to delete data subject to preservation (Figure 52) The data deletion instruction receiving means 91 receives a deletion instruction for data to be preserved from the user authentication means 14 using a common digital key on the user side.

[0144] (S4-4) Extraction of encrypted index information during deletion process (Figure 53) The deletion-processing encrypted index information extraction means 101 extracts encrypted consortium-side index information for all users belonging to the digital key group of the user-side common digital key, which is recorded in a black-box environment on a group of nodes at a specific location in the blockchain, based on the user-side common digital key associated with the data to be deleted, as received by the data deletion instruction receiving means 91, and the consortium-side digital key. This information is extracted by the distributed record data index information creation, encryption, and recording means 43.

[0145] (S4-5) Decryption of index information during deletion process (Figure 53) The deletion-processing index information decryption means 102 decrypts the encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key, which was extracted by the deletion-processing encrypted index information extraction means 101.

[0146] (S4-6) Extraction of index information for a specific user during the deletion process (Figure 53) The deletion process index information extraction means 103 extracts only the consortium-side index information from the consortium-side index information of all users belonging to the digital key group of the user-side common digital key decrypted by the deletion process index information decryption means 102, in which the user ID of the user who performed the ID authentication operation for deleting the data to be preserved belonging to the digital key group, authenticated by the user authentication means 14, is appended to the data name.

[0147] (S4-7) Download of index information for a specific user during deletion processing (Figure 54) The deletion process-specific user index information download means 92 downloads the index information extracted by the deletion process-specific user index information extraction means 103 to a second provisional storage area.

[0148] (S4-8) Creation and display of a list of preserved data names for specific users during deletion processing (Figure 54) The deletion process data name list creation and display means 93 creates and displays a list of data names of data preserved by a specific user using the index information downloaded to the second provisional storage area by the deletion process data download means 92.

[0149] (S4-9) Acceptance of selection / specification of data names to be deleted (Figure 54) The data name selection / specification acceptance means 94 accepts the selection / specification of the data name of the data that the user wishes to delete from the list of data names displayed by the data name creation / display means 93 for specific users during deletion processing.

[0150] (S4-10) Extraction of corresponding index information for data names selected by a specific user during the deletion process (Figure 55) The data name selection index information extraction means 104 for data selected by a specific user during deletion processing searches the index information, in which the user ID of the user selected by

[0151] (S4-11) Deletion of data subject to meaningless preservation (Figure 55) The data deletion means 105 for data to be rendered meaningless uses the index information extracted by the data name index information extraction means 104 for data names selected by a specific user during the deletion process to delete the data to be rendered meaningless, which has been distributed to each distributed file management group by the distributed file management group distribution means 41, and has been distributed and recorded by each modification and distributed recording means 42 on the nodes of each location belonging to each distributed file management group and on recording devices at multiple locations connected to the nodes of those locations via a network.

[0152] (S4-12) Deletion of the second set of data to be preserved by rendering it meaningless (Figure 55) The second data deletion means 106, which is a data to be preserved by the meaningless data, deletes the encrypted consortium-side index information corresponding to the index information extracted by the index information extraction means for data names selected by a specific user at the time of deletion, which is recorded in a group of nodes at a specific location on the blockchain in a black box environment by the distributed record data index information creation, encryption, and recording means 43. This renders the data designated for meaningless preservation, which is recorded on the blockchain, unextractable and invalid, effectively creating a state equivalent to deleting the data altogether.

[0153] Effects of the User Key Sharing Type Digital Asset Guard Service Provisioning System of the First Embodiment According to the first embodiment of the user key sharing type digital asset guard service provision system 1, "It has a consortium-type blockchain constructed with multiple planets that form a single unit constituting the blockchain, each consisting of a group of nodes combining nodes from multiple locations in different regions, and has a backup system 50 comprising a user-side backup system 30 and a consortium-side backup system, a recovery system 80 comprising a user-side recovery system 60 and a consortium-side recovery system 70, and a deletion system 110 comprising a user-side deletion system 90 and a consortium-side deletion system 100, and by using a one-to-one correspondence between the digital key managed by the user and the digital key managed by the consortium, the backup system The system is configured to perform data recovery, recovery, or deletion via the system 50, recovery system 80, or deletion system 110. This configuration allows the user-side recovery system 30 to render the data to be recovered meaningless using a digital key managed by the user, and the consortium-side recovery system 40 to distribute the rendered data to multiple nodes in different regions using a digital key managed by the consortium, modify and distribute the data, and create and encrypt index information for the distributed data for management. As long as the digital key managed by the user is not lost or destroyed, the recovered data can be restored even if the information of the digital key managed by the user is stolen or the environment of the user-side recovery system 30 is destroyed. Furthermore, the consortium's evacuation system 40 distributes the physical environment, making it extremely difficult for state actors or other entities to destroy the entire environment even if they attack, thus protecting the data necessary for restoration. Furthermore, since both the digital key managed by the user and the digital key managed by the consortium are required for data recovery, it is possible to prevent data leakage by malicious third parties.

[0154] Furthermore, according to the user key sharing type digital asset guard service provision system 1 of the first embodiment, "User ID / password setting reception means 11 that accepts user ID and password settings by users, user-side digital key group setting means 12 that sets up a user-side digital key group in which multiple users are shareholders of one user-side key via the operation of a digital key management company, user-side digital key group user ID / password management means 13 that manages the user ID and password received by the user ID / password setting reception means 11 for each user belonging to the user-side digital key group set up by the user-side digital key group setting means 12, and user-side digital key group user ID / password management means 13 that accepts ID authentication operations from users to access predetermined processing means for saving, restoring, or deleting data to be protected, and The system includes a user authentication means 14 that performs verification using a user ID and password managed by 3 and authenticates the user as belonging to the digital key group when they match, and a user-side common digital key setting means 15 that sets a single digital key shared by all users belonging to one digital key group as a user-side common digital key via an operation by a digital key management company to the user authentication means 14, and the user authentication means 14 further has the function of managing the user-side common digital key set by the user-side common digital key setting means 15, and after authenticating the user who performed the ID authentication operation as a user belonging to the digital key group, instructing the user-side common digital key to back up, restore or delete the data to be protected. As a result, it is not necessary for users to manage their own keys, and the risk of damage or loss of user-side keys by users is eliminated. In addition, by having a key management company manage a single user-side key shared by multiple users, the complexity of key management can be reduced compared to when each user has a key management company manage their individual keys. Furthermore, by having a key management company manage a single user-side key shared by multiple users on the front end, the number of keys managed by the consortium responsible for data preservation on the back end can also be reduced, thereby reducing the total number of keys to manage.

[0155] Also, according to the user key-sharing type digital asset guard service providing system 1 of the first embodiment, "the evacuation system 50, the restoration system 80, the deletion system 110, the user ID / password setting reception means 11, the user-side digital key group setting means 12, the user ID / password management means 13 within the user-side digital key group, the user authentication means 14, and the user-side common digital key setting means 15 are provided on the cloud that can be accessed via a dedicated line or the Internet, or on a server system", so even if the user forgets their ID, they can revive the ID by confirming the authentication information, and by authenticating using the revived ID (and password), it becomes possible to decrypt information through the use of a common decryption key set by a processing means having one authentication function for authenticating each user belonging to one digital key group.

[0156] Also, according to the user key-sharing type digital asset guard service providing system 1 of the first embodiment, the distributed recording data index information creation / encryption / recording means 43 is configured such that "the user ID of the user belonging to the digital key group authenticated by the user authentication means 14 is added to the data name of the data distributedly recorded by the modification / distributed recording means 42, the consortium-side index information including the data name with the added user ID is created / encrypted, and recorded in a specific node of the blockchain in a black box environment", so it becomes possible to distinguish the data to be preserved for multiple users belonging to one digital key group, and when restoring the data preserved on the consortium side using the user-side common digital key, it becomes possible to select and restore only the data of the specific user who performed the operation for restoration.

[0157] Furthermore, according to the first embodiment of the user key sharing type digital asset guard service provision system 1, "a protected data restoration instruction receiving means 61 that receives instructions from the user authentication means 14 to restore protected data using a user-side common digital key, an encrypted index information extraction means 71 that extracts encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key recorded in a black box environment by a distributed record data index information creation, encryption, and recording means 43 based on the user-side common digital key associated with the protected data to be restored received by the protected data restoration instruction receiving means 61 and the consortium-side digital key, an index information decryption means 72 that decrypts the encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key extracted by the encrypted index information extraction means 71, and all users belonging to the digital key group of the user-side common digital key decrypted by the index information decryption means 72 A specific user index information extraction means 73 extracts from the consortium-side index information of the user authentication means 14 only the consortium-side index information in which the user ID of the user who performed the ID authentication operation for restoring the data to be preserved belonging to the digital key group authenticated by the user authentication means 14 is attached to the data name; a specific user index information download means 74 downloads the index information extracted by the specific user index information extraction means 73 to a second provisional storage area; a specific user preserved data name list creation / display means 63 creates and displays a list of data names of the data preserved by the user using the index information downloaded to the second provisional storage area by the specific user index information download means 74; a restore target data name selection / specification acceptance means 64 accepts the selection / specification of the data name of the data that the user wishes to restore from the list of data names displayed by the specific user preserved data name list creation / display means 63; and the index information in which the user ID of the user extracted by the specific user index information extraction means 73 is attached to the data name,The data name selection / designation receiving means 64 receives data name restoration target data name selection / designation receiving means 64 and searches for the data name of the data that the user wishes to restore, and the specific user selected data name corresponding index information extraction means 74 extracts index information that has the data name of the data that the user wishes to restore. Using the index information extracted by the specific user selected data name corresponding index information extraction means 74, the distributed file management group distribution means 41 distributes the data to each distributed file management group, and the respective modification / distributed recording means 42 records the data to each distributed file management group. Meaningless data to be preserved, which is distributed and recorded on the nodes of each location to which it belongs and on recording devices at multiple locations connected to the nodes of each location via a network, is extracted from either the nodes of each location belonging to each distributed file management group or on the recording devices at multiple locations connected to the nodes of each location via a network, and meaningless data to be preserved download means 65 downloads the meaningless data to be preserved extracted by the meaningless data to be preserved by the meaningless data to be preserved to a second provisional storage area, and meaningless The system further includes a data preservation target data restoration means 66 that restores each meaningless data to its original state after it has been extracted by the data preservation target data extraction means 75 and downloaded to a second provisional storage area by the meaningless data preservation target data download means 65, and a downloaded data erasure means 67 that erases each data that has been downloaded to the second provisional storage area after being restored to its original state by the data preservation target data restoration means 66. The user-side restoration system 60 also includes a data preservation target data restoration instruction receiving means 61 and an index for a specific user. The system comprises a means for downloading data information 62, a means for creating and displaying a list of preserved data names for a specific user 63, a means for selecting and specifying data names to be restored 64, a means for downloading data to be rendered meaningless 65, a means for restoring data to be preserved 66, and a means for erasing downloaded data 67. The consortium-side restoration system 70 comprises an encrypted index information extraction means 71, an index information decryption means 72, an index information extraction means for a specific user 73, an index information extraction means corresponding to data names selected by a specific user 74, and a means for extracting data to be rendered meaningless 75.This configuration allows the consortium-side backup system 40 to select and extract only the index information of users who have performed authentication operations for restoring the data using a common digital key on the user side, from the index information of the data to be preserved managed by the consortium-side backup system 40. This information can then be displayed in a list on the user-side restoration system 60, and the user can select and restore the desired data to be preserved from the displayed index information.

[0158] Furthermore, according to the user key sharing type digital asset guard service provision system of the first embodiment, "a data deletion instruction receiving means 91 that receives a deletion instruction for data to be protected using a user-side common digital key from a user authentication means 14, a user-side common digital key associated with the data to be deleted received by the data deletion instruction receiving means 91, and a consortium-side digital key, a deletion processing encrypted index information extraction means 101 that extracts encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key recorded in a black box environment by a distributed record data index information creation, encryption, and recording means, a deletion processing encrypted index information decryption means 102 that decrypts the encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key extracted by the deletion processing encrypted index information extraction means 101, and the deleted data decryption means 102 - A deletion-specific user index information extraction means 103 extracts only the consortium-side index information from the consortium-side index information of all users belonging to the digital key group of the user-side common digital key, in which the user ID of the user who performed the ID authentication operation for deleting data to be preserved belonging to the digital key group authenticated by the user authentication means is appended to the data name; a deletion-specific user index information download means 92 downloads the index information extracted by the deletion-specific user index information extraction means 103 to a second provisional storage area; a deletion-specific user preserved data name list creation / display means 93 creates and displays a list of data names of data preserved by the user using the index information downloaded to the second provisional storage area by the deletion-specific user index information download means 92; and a deletion target data name selection / specification reception means 94 accepts the selection / specification of data names of data that the user wishes to delete from the list of data names displayed by the deletion-specific user preserved data name list creation / display means 93.The following are performed: 104, which extracts index information corresponding to data names of data to be deleted by the user selected by the user during deletion processing; 104, which extracts index information corresponding to data names of data to be deleted by the user selected by the user during deletion processing, by searching the index information extracted by the 103, which adds the user ID of the user to the data name, using the data name of the data to be deleted by the user selected by the user during deletion processing, and extracts index information corresponding to data names of data to be deleted by the user selected by the user during deletion processing; 105, which deletes all data to be made meaningless, which is distributed and recorded in a distributed file management group by the distributed file management group distribution means 41, and distributed and recorded by the respective modification and distributed recording means 42 on the nodes of each location belonging to each distributed file management group and on recording devices at multiple locations connected to the nodes of that location via a network; and 23, which creates, encrypts, and records distributed recording data index information in a black box environment for specific locations on the blockchain. The user-side deletion system 90 further includes a second meaningless data deletion means 106 that deletes encrypted consortium-side index information corresponding to the index information extracted by the index information extraction means 104 corresponding to the data name selected by a specific user during the deletion process, which is recorded in the node group, and a user-side deletion system 90 includes a data deletion instruction receiving means 91, an index information download means 92 for a specific user during the deletion process, a data name creation and display means 93 for a specific user during the deletion process, and a data name selection and specification receiving means 9 The consortium-side deletion system 100 is configured to include: 4, and , and has an encrypted index information extraction means 101 during deletion processing, an index information decryption means 102 during deletion processing, an index information extraction means for a specific user during deletion processing 103, an index information extraction means corresponding to the data name selected by a specific user during deletion processing 104, a means for deleting data to be preserved by rendering it meaningless 105, and a second means for deleting data to be preserved by rendering it meaningless 106.Only the index information of the user who has performed the authentication operation for deleting the data to be protected using the common digital key on the user side is selected and extracted, and it can be listed and displayed in the user-side reduction system 90. The user can select and delete the desired data to be protected from the listed index information.

[0159] Also, according to the user key sharing type digital asset guard service providing system 1 of the first embodiment, since the user-side common digital key setting means 15 is configured to set an encryption key and a decryption key as the user-side common digital key, the key setting process in the user-side common digital key setting means can be made more efficient.

[0160] Also, according to the user key sharing type digital asset guard service providing system 1 of the first embodiment, the authentication method for accepting and performing an ID authentication operation as access to a predetermined processing means for backing up, restoring or deleting data to be protected from any user belonging to one digital key group in the user authentication means 14 is configured with multi-factor authentication or multi-step authentication, so it is difficult for a malicious third party to perform unauthorized login.

[0161] Also, according to the user key sharing type digital asset guard service providing system 1 of the first embodiment, in the ID authentication operation as access to a predetermined processing means for backing up data, the user authentication means 14 performs ID authentication using an external medium without connecting to the network, so that it is also possible to select to read the data to be protected from the external medium. It is configured as a cloud-unconnected type service, an offline application: hybrid SaaS type, so the options for use can be expanded.

[0162] Therefore, according to the user key sharing type digital asset guard service provision system 1 of the first embodiment, a user key sharing type digital asset guard service provision system is obtained that can strongly and efficiently protect important information such as confidential information and personal information from high-level cyberattacks and physical destruction, and can restore important information without it being stolen by a third party even if it is subjected to cryptographic analysis by a quantum computer or an EMP attack, and can also eliminate problems that may occur due to key management by the user, thereby reducing the burden on both the user and the system provider.

[0163] Although preferred embodiments of the present invention have been described in detail above, the present invention is not limited to the embodiments described above, and various modifications and substitutions can be made to the embodiments described above within the scope of the specification and drawings without departing from the scope of the present invention.

[0164] For example, as shown in Figure 57, the key-sharing type digital asset guard service provision system of the present invention may be incorporated into a conventional digital asset guard service provision system, allowing users to select and use either system depending on the importance of the data they wish to protect. In this way, for highly important data, users can manage their own digital keys using a conventional digital asset guard service provision system, while for less important data, users can use the key-sharing type digital asset guard service provision system of the present invention to entrust the management of digital keys to a key management company, which will then manage a digital key common to all users. [Industrial applicability]

[0165] The user key sharing type digital asset guard service provision system of the present invention is useful in fields that handle confidential information such as personal information and security-related information, control modules for important functions, currencies such as stablecoins, rights such as contracts, and other important information as digital assets. [Explanation of Symbols]

[0166] 1. User Key Sharing Type Digital Asset Guard Service Provisioning System 11. User ID and password setting acceptance method 12 User-side digital key group setting means 13. User ID and password management method within the user-side digital key group 14 User Authentication Methods 15 User-side common digital key setting means 30. User-side evacuation system 31. Method for receiving instructions to back up data to be preserved. 32. Means for creating and recording user-side index information containing user ID attached data name 33 Means of rendering data subject to preservation meaningless 34. Means for uploading data to be preserved by rendering it meaningless. 40 Consortium-side evacuation system 41. Distributed file management group allocation means 42 Modified and Distributed Recording Means 43. Distributed recording data index information creation, encryption, and recording methods 44. Means of erasing data that is being preserved by rendering the upload meaningless. 50 Evacuation System 60 User-side recovery system 61. Means for receiving instructions to restore data to be preserved. 62. Method for downloading index information for specific users 63. Means for creating and displaying a list of maintenance data names for specific users. 64. Method for selecting and specifying the name of the data to be restored. 65. Means of downloading data to be rendered meaningless and preserved. 66 Data recovery means for data to be preserved 67. Method for Deleting Downloaded Data 70 Consortium-side recovery system 71. Encryption Index Information Extraction Method 72 Index information decoding means 73. Means for extracting index information for specific users 74. Means for extracting index information corresponding to data name selected by a specific user 75 Uselessness Preservation Target Data Extraction Means 80 Restoration System 90 User-Side Deletion System 91 Preservation Target Data Deletion Instruction Reception Means 92 Download Means of Index Information for Specific Users During Deletion Processing 93 Creation / Display Means of List of Preservation Data Names for Specific Users During Deletion Processing 94 Reception Means of Selection / Designation of Deletion Target Data Name 100 Consortium-Side Deletion System 101 Encrypted Index Information Extraction Means During Deletion Processing 102 Index Information Decryption Means During Deletion Processing 103 Index Information Extraction Means for Specific Users During Deletion Processing 104 Index Information Extraction Means Corresponding to Selected Data Name of Specific Users During Deletion Processing 105 Uselessness Preservation Target Data Deletion Means 106 Second Uselessness Preservation Target Data Deletion Means 110 Deletion System

Claims

1. It is constructed with a distributed ledger in blockchain or other distributed ledger technologies, and a smart contract or server application for performing predetermined processing using the data managed in said distributed ledger. It has a consortium-type blockchain constructed with multiple planets, which are units that make up the blockchain, each consisting of a group of nodes combining nodes from multiple locations in different regions. A backup system comprising a user-side backup system and a consortium-side backup system, A recovery system comprising a user-side recovery system and a consortium-side recovery system, A deletion system comprising a user-side deletion system and a consortium-side deletion system, It has, A digital asset guard service provision system for protecting digital assets from high-level cyberattacks, configured to perform data to be protected via the backup system, the restoration system, or the deletion system by using a one-to-one correspondence between a digital key managed by the user and a digital key managed by the consortium, A user ID and password setting acceptance method that accepts user ID and password settings from users, A user-side digital key group setting means for setting up a user-side digital key group in which multiple users share a single user-side key, via an operation by a digital key management provider, User ID / Password Management Means within User-Side Digital Key Groups, which manages the user ID and password received by the User ID / Password Setting Receiving Means for each user belonging to the user-side digital key group set by the user-side digital key group setting means, A user authentication means that receives an ID authentication operation from a user to access a predetermined processing means for backing up, restoring, or deleting data to be preserved, performs a verification using the user ID and password managed by the user ID / password management means within the user-side digital key group, and authenticates the user as belonging to the digital key group when they match, The user authentication means includes a user-side common digital key setting means that sets a single digital key shared by all users belonging to a single digital key group as a user-side common digital key through the operation of the digital key management provider. The user authentication means further has the function of managing the user-side common digital key set by the user-side common digital key setting means, and after authenticating the user who performed the ID authentication operation as a user belonging to the digital key group, instructing the user-side common digital key to back up, restore, or delete the data to be preserved. The aforementioned backup system, restoration system, deletion system, user ID / password setting acceptance means, user-side digital key group setting means, user ID / password management means within the user-side digital key group, user authentication means, and user-side common digital key setting means are provided on a cloud or server system accessible via a dedicated line or the internet. The user-side evacuation system is, A data backup instruction receiving means that receives a backup instruction for data to be backed up using the user-side common digital key from the user authentication means, Based on the data backup instruction receiving means for data to be backed up that receives the data to be backed up, a means for demeaning data to be backed up performs a predetermined encryption process on the data to be backed up using the user-side common digital key and converts it into meaningless data to be backed up, Meaningless data upload means uploads the meaningless data to be preserved, which has been converted by the means for meaningless data to be preserved, to a first provisional storage area. When the data to be preserved data backup instruction receiving means receives an instruction to back up data to be preserved, the user ID of the user belonging to the digital key group authenticated by the user authentication means is added to the data name of the data to be preserved, and when the meaningless data to be preserved data upload means uploads the meaningless data to be preserved to the first provisional storage area, user-side index information including the data name with the user ID added is created and recorded on a specific node of the blockchain in a black box environment, user-side index information containing data name with user ID added It has, The aforementioned consortium-side evacuation system is: A distributed file management group distribution means distributes the data to be preserved and rendered, which has been uploaded to the first provisional storage area by the data to be preserved and rendered meaningless, to multiple distributed file management groups constructed by the consortium using the consortium's digital key, with each node of the bases configured for the planet set up by the consortium and recording devices at multiple bases that are network-connected to the nodes of those bases. A modification and distributed recording means modifies the data distributed by the aforementioned distributed file management group distribution means, and for data that does not exceed the block size, it distributes and records to multiple nodes of a distributed management file group established on the blockchain, and for data that exceeds the block size, it distributes and records to multiple nodes of a distributed file management group separate from the blockchain. A distributed recording data index information creation, encryption, and recording means that adds the user ID of the user belonging to the digital key group authenticated by the user authentication means to the data name of the data distributed and recorded by the modification and distributed recording means, creates and encrypts consortium-side index information including the data name with the user ID added, and records it on a specific node of the blockchain in a black box environment, An upload data erasure means for erasing data to be rendered meaningless, which erases the data to be rendered meaningless, after the index information of the data to be rendered meaninglessly by the modification and distributed recording means has been recorded on a specific node of the blockchain by the distributed recording data index information creation, encryption and recording means, and has been uploaded to a first provisional storage area. Having A user key sharing type digital asset guard service provision system characterized by the following:

2. A data restoration instruction receiving means that receives a restoration instruction for data to be preserved using the user-side common digital key from the user authentication means, Based on the user-side common digital key associated with the data to be restored, received by the data restoration instruction receiving means, and the consortium-side digital key, an encrypted index information extraction means extracts encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key, which is recorded in a black box environment on a group of nodes at a specific location in the blockchain, by the distributed record data index information creation, encryption, and recording means. An index information decryption means for decrypting the encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key extracted by the encryption index information extraction means, A specific user index information extraction means extracts, from the consortium-side index information of all users belonging to the digital key group of the user-side common digital key decrypted by the index information decryption means, only the consortium-side index information in which the user ID of the user who performed the ID authentication operation for restoring the protected data belonging to the digital key group authenticated by the user authentication means is appended to the data name, and from the consortium-side index information of all users belonging to the digital key group of the user-side common digital key decrypted by the index information decryption means, A specific user index information download means downloads the index information extracted by the aforementioned specific user index information extraction means to a second provisional storage area. A means for creating and displaying a list of data names of data preserved by a specific user, using the index information downloaded to the second provisional storage area by the aforementioned index information download means for a specific user, A data name selection and specification acceptance means for data to be restored accepts the selection and specification of data names of data that the user wishes to restore from the list of data names displayed by the aforementioned data name creation and display means for specific users, A specific user selected data name matching index information extraction means searches the index information, in which the user ID of the user extracted by the specific user index information extraction means has been appended to the data name, using the data name of the data that the user wishes to restore, as received by the data name selection / specification receiving means for restoration, to extract index information having the data name of the data that the user wishes to restore; Meaningless data extraction means for extracting meaningless data to be preserved from either the node of A data download means for downloading each of the data to be preserved for meaninglessness, extracted by the data extraction means for data to be preserved for meaninglessness, to the second provisional storage area. A data preservation target restoration means for restoring each of the data preservation target data extracted by the data preservation target extraction means and downloaded to the second provisional storage area by the data preservation target download means to the data preservation target data before backup, A download data erasure means erases each of the data that has been downloaded to the second provisional storage area after being restored to the data to be preserved before backup by the data to be preserved data recovery means, It further possesses, The user-side recovery system comprises: a means for receiving instructions to recover data to be preserved; a means for downloading index information for a specific user; a means for creating and displaying a list of data names to be preserved for a specific user; a means for receiving a selection and specification of data names to be recovered; a means for downloading data to be rendered meaningless; a means for recovering data to be preserved; and a means for erasing downloaded data. The consortium-side recovery system comprises the encrypted index information extraction means, the index information decryption means, the index information extraction means for a specific user, the index information extraction means corresponding to the data name selected by the specific user, and the data extraction means for data to be preserved by rendering meaningless. The user key sharing type digital asset guard service provision system according to feature 1.

3. A data deletion instruction receiving means for receiving a data deletion instruction from the user authentication means using the user-side common digital key, Based on the user-side common digital key associated with the data to be deleted, and the consortium-side digital key, the encrypted consortium-side index information extraction means for deletion processing extracts the encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key, which is recorded in a black box environment on a group of nodes at a specific location in the blockchain, by the distributed record data index information creation, encryption, and recording means. Deletion process index information decryption means for decrypting the encrypted consortium-side index information of all users belonging to the digital key group of the user-side common digital key extracted by the encryption index information extraction means during the deletion process, A deletion-processing-specific-user index information extraction means extracts only the consortium-side index information from the consortium-side index information of all users belonging to the digital key group of the user-side common digital key decrypted by the deletion-processing-index information decryption means, in which the user ID of the user who performed the ID authentication operation for deleting the data to be preserved belonging to the digital key group, authenticated by the user authentication means, is appended to the data name. The aforementioned means for extracting index information for a specific user during deletion processing downloads the index information extracted by the means for extracting index information for a specific user during deletion processing to a second provisional storage area, A means for creating and displaying a list of data names of data preserved by a user during deletion processing, which uses the index information downloaded to the second provisional storage area by the aforementioned means for downloading index information for a specific user during deletion processing to create and display a list of data names of data preserved by that user, A data name selection and specification acceptance means for data to be deleted accepts the selection and specification of data names of data that the user wishes to delete from the list of data names displayed by the data name creation and display means for specific users during the deletion process, A data name selection index information extraction means for a specific user during deletion processing extracts index information in which the user ID of the user extracted by the data name of the user that the user wishes to delete, as received by the data name selection / specification receiving means for data names to be deleted, and extracts index information having the data name of the data that the user wishes to delete, Meaningless Preservation Target Deletion Means for deleting each meaningless preservation target data, which is distributed to each of the distributed file management groups by the distributed file management group distribution means using the index information extracted by the means for extracting the index information corresponding to the data name selected by the specific user during the deletion process, and which is distributed and recorded by each of the means for modifying and distributing the data to be preserved in a distributed manner on the nodes of each location belonging to each of the distributed file management groups and on recording devices at multiple locations connected to the nodes of said locations via a network, A second data deletion means for data to be rendered meaningless, which deletes encrypted consortium-side index information corresponding to the index information extracted by the index information extraction means for data names selected by a specific user during the deletion process, which is recorded in a group of nodes at a specific location on the blockchain in a black box environment by the distributed record data index information creation, encryption, and recording means, It further possesses, The user-side deletion system comprises: a means for receiving instructions to delete data to be preserved; a means for downloading index information for a specific user during the deletion process; a means for creating and displaying a list of preserved data names for a specific user during the deletion process; and a means for receiving selection and specification of data names to be deleted. The consortium-side deletion system comprises: a means for extracting encrypted index information during the deletion process; a means for decrypting index information during the deletion process; a means for extracting index information for a specific user during the deletion process; a means for extracting index information corresponding to a data name selected by a specific user during the deletion process; a means for deleting data to be rendered meaningless; and a second means for deleting data to be rendered meaningless. The user key sharing type digital asset guard service provision system according to feature 1.

4. The user-side common digital key setting means is configured to set an encryption key and a decryption key as the user-side common digital key, as described in claim 1 or 2.

5. The user key sharing type digital asset guard service provision system according to any one of claims 1 to 3, characterized in that the authentication method, which accepts an ID authentication operation as access to a predetermined processing means for backing up, restoring, or deleting data to be protected from any user belonging to one digital key group in the user authentication means, is multi-factor authentication or multi-stage authentication.

6. The user key sharing type digital asset guard service provision system according to claim 1, configured as a cloud-disconnected service, offline application: hybrid SaaS type, allows for the user authentication means to perform ID authentication using an external medium without connecting to a network, thereby enabling the user authentication means to read the data to be protected from the external medium.

Images