Secure computation system, method, program, and information processing system

Abstract

A secure computing system according to the present disclosure is provided with: a secure computing means for, on the basis of a plurality of models and financial transaction information about a customer to be analyzed, performing analysis regarding financial transactions of the customer to be analyzed, through secure computation using each model, said plurality of models having been generated respectively for a plurality of financial institutions on the basis of financial transaction information about customers retained by each of the financial institutions; and an output means for outputting the results of the analysis performed by the secure computing means using the plurality of models.

Description

[Technical field]

[0001] The present disclosure relates to a secure computing system and the like. [Background technology]

[0002] In recent years, sensitive data such as personal information is subjected to machine learning, and data analysis is performed based on the generated learning model. Data that requires confidentiality is desirably analyzed in a concealed form. Patent Document 1 discloses a secure computation system that can perform computations on encrypted data.

[0003] Patent Document 2 discloses a system that utilizes data held by each company without disclosing details of the data to other companies. Patent Document 3 discloses a method of converting a prediction model and distributing the converted prediction model by a secret sharing scheme. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Patent No. 6795863 [Patent Document 2] Patent No. 6803598 [Patent Document 3] JP 2019-215512 A Summary of the Invention [Problem to be solved by the invention]

[0005] Financial institutions are one of the organizations that can utilize analysis using learning models. Since each financial institution holds different customer information, the results obtained from a learning model based on information held by one institution may differ from those obtained from a learning model based on information held by another institution. However, one institution is hesitant to hand over its learning model to another institution in order to check the analysis results of the other learning model. Patent documents 1-3 do not specifically mention the use of the analysis results of multiple learning models.

[0006] The present disclosure aims to provide a secure computing system etc. that enables the use of the analysis results of each model without leaking each financial institution's model. [Means for solving the problem]

[0007] The secure computing system of the present disclosure comprises a secure computing means for performing secure computation to analyze the financial transactions of a client to be analyzed using each of a plurality of models generated for each of the plurality of financial institutions based on financial transaction information of the client held by each of the plurality of financial institutions and the financial transaction information of the client to be analyzed, and an output means for outputting the analysis results using the plurality of models analyzed by the secure computing means.

[0008] The method disclosed herein involves performing, using secret computation, an analysis of the financial transactions of a client to be analyzed using a plurality of models generated for each of a plurality of financial institutions based on financial transaction information of the client held by each of the financial institutions and the financial transaction information of the client to be analyzed, and outputting the analysis results of each analyzed model.

[0009] The program disclosed herein causes a computer to perform, using secret computation, an analysis of the financial transactions of a client to be analyzed using a plurality of models generated for each of the plurality of financial institutions based on financial transaction information of the client held by each of the financial institutions and the financial transaction information of the client to be analyzed, and output the analysis results of each calculated model. Effect of the Invention

[0010] According to the present disclosure, it is possible to use the analysis results of each model without disclosing each financial institution's model. [Brief description of the drawings]

[0011] [Figure 1] 1 is a block diagram showing a configuration of an information processing system 10 according to a first embodiment. [Diagram 2] FIG. 13 is a diagram showing an example of an analysis result. [Diagram 3] FIG. 13 is a diagram showing another example of the analysis result. [Figure 4] FIG. 13 is a diagram showing an example of an output based on an analysis result. [Diagram 5] FIG. 13 is a diagram showing an example of an output based on an analysis result. [Figure 6] FIG. 13 is a diagram showing another example of an output based on an analysis result. [Figure 7] FIG. 13 is a diagram showing an example of comparing analysis results and aggregation results. [Figure 8] 1 is a flowchart showing an example of the operation of the secure computation system 100. [Figure 9] FIG. 11 is a block diagram showing a configuration of an information processing system 11 according to a second embodiment. [Figure 10] 4 is a flowchart showing an example of the operation of the information processing system 11. [Figure 11] FIG. 5 is a block diagram showing an example of the hardware configuration of a computer 500. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0012] [First embodiment] 1 is a block diagram showing the configuration of an information processing system 10 in the first embodiment. The information processing system 10 in the first embodiment is a system for performing analysis of financial transactions based on financial transaction information using a model held by each financial institution. The analysis of financial transactions is, for example, analysis for supporting financial transactions between financial institutions and customers. Furthermore, the analysis of financial transactions also includes analysis for supporting advice provided by financial institutions to corporations.

[0013] Financial institutions include, for example, businesses that handle financial products, such as banks (including city banks, Japan Post Bank, regional banks, credit unions, and credit associations), securities companies, and insurance companies, as well as credit card companies and payment service providers that handle cashless payments. In addition, financial institutions in the first embodiment also include goods rental businesses that lease or rent automobiles and home appliances. Financial products include, for example, deposits, bonds, investment trusts, foreign currency, insurance, stocks, futures trading, FX, virtual currency, and the like.

[0014] Customers include individual customers and corporate customers. Financial transaction information includes the status of past transactions, such as information on past account deposits and withdrawals, and information on financial products purchased in the past. Financial transaction information may further include customer attributes. In the case of individual customers, customer attributes include, for example, the customer's occupation, gender, age, place of residence, family structure, and other attributes.

[0015] The financial transaction information may not include at least a portion of the above information, and may include information other than the above information.

[0016] For example, financial institutions may recommend financial products to customers or advise individual customers to purchase financial products based on an analysis of customers to whom financial products should be recommended for purchase. Financial institutions may also provide advice to corporate customers regarding financial management strategies and financial product transactions. Financial institutions may, for example, provide M&A support or recommend financial products and services based on the analysis.

[0017] 1, the information processing system 10 includes a secure computation system 100 and a plurality of financial institution systems 200 (200a, 200b). In FIG. 1, the number of financial institution systems 200 is two, but is not limited to this. The number of financial institution systems 200 may be equal to the number of financial institutions participating in the analysis by the information processing system 10.

[0018] The secure computation system 100 is operated by, for example, a service provider that provides financial analysis service tools and the like to each of the financial institutions. The service provider provides a financial analysis service that aggregates the analysis results of each model obtained from each financial institution system 200.

[0019] <Financial institution system 200> The financial institution system 200 is an example of a first system. Each of the financial institution systems 200 includes a model storage unit 201 (201a, 201b), a model concealment unit 202 (202a, 202b), and a model output unit 203 (203a, 203b). The financial institution system 200 is owned and operated by each individual financial institution.

[0020] The model storage unit 201 stores trained models for analyzing financial transaction information, which are models generated for each financial institution. The model anonymization unit 202 anonymizes the models stored in the model storage unit 201. The model output unit 203 outputs the anonymized models to the secure computing system 100 via a communication network.

[0021] The financial institution system 200 may further include a model generation unit 204 (204a, 204b), a customer information storage unit 205 (205a, 205b), and an input / output unit 206 (206a, 206b).

[0022] The customer information storage unit 205 stores financial transaction information held by each financial institution.

[0023] The model generation unit 204 generates a model based on the information stored in the customer information storage unit 205. The model generation unit 204 generates a model for each financial institution based on financial transaction information of customers held by each financial institution. That is, the model generation unit 204a according to the first embodiment generates a model based on the information in the customer information storage unit 205a, and the model generation unit 204b generates a model based on the information in the customer information storage unit 205b. For example, the model generation unit 204 generates a model by learning the relationship between whether or not a customer purchases a certain financial product and whether or not a customer purchases another financial product. The model generation unit 204 may generate a model based on financial transaction information including customer attributes. For example, the model generation unit 204 generates a model by learning the relationship between customer attributes and deposit / withdrawal information or financial product purchase history. Alternatively, the model generation unit 204 may generate a model based on financial transaction information not including customer attributes. The model generation unit 204 stores the generated model in the model storage unit 201.

[0024] The input / output unit 206 transmits financial transaction information of the customer to be analyzed to the secure computation system 100 via a communication network. If the model used is not generated based on customer attributes held by each financial institution, the input / output unit 206 does not need to transmit the customer attributes of the customer to be analyzed. If the model used is generated based on customer attributes, the input / output unit 206 may or may not transmit the customer attributes of the customer to be analyzed.

[0025] Furthermore, the input / output unit 206 receives the results of the analysis performed by the secure computation system 100. The received analysis results are displayed, for example, on an arbitrary display.

[0026] The input / output unit 206 may obtain financial transaction information of a customer from the customer information storage unit 205 and transmit it to the secure computation system 100. The input / output unit 206 may anonymize the financial transaction information and transmit it to the secure computation system 100. The input / output unit 206 is an example of an input / output device.

[0027] (Example model) The model is a model that has been trained in advance by each financial institution through machine learning in order to output specific analysis results, for example, using financial transaction information of customers.

[0028] An example of such a model is a purchase prediction model, which, when a customer attribute or a past transaction situation is input, outputs a prediction of whether or not to recommend a financial product of a financial institution, or a prediction of which financial product to recommend.

[0029] Purchase prediction models include, for example, models that use customer attributes or transaction status over a certain period of time as input values ​​and output the likelihood that a customer will purchase a financial product. The analysis result of the likelihood that a customer will purchase a financial product may be expressed as a binary option, that is, whether the customer will buy or not buy. Alternatively, the analysis result, such as the likelihood of purchase, may be expressed as a probability, such as a percentage. The analysis result may be expressed by three or more options, rather than a binary value, such as whether the customer will buy or not buy a financial product. The analysis result may be expressed by a rank or a score.

[0030] The model may predict, based on input of information about a plurality of customers, which of the plurality of customers will purchase the financial product. The model may output a plurality of customers predicted to purchase the financial product.

[0031] The model may learn and predict attributes of customers who will purchase financial products. Such a model may predict and output a group of customers who will purchase financial products. The output group of customers may have, for example, one or more common attributes.

[0032] The model may predict and output a financial product that the customer may purchase based on the input of the customer's information. The model may output a plurality of financial products as the financial product that the customer may purchase.

[0033] Machine learning models include, but are not limited to, decision tree models, linear regression models, logistic regression models, neural network models, and the like.

[0034] <Secure Calculation System 100> Next, a detailed description will be given of the secure computation system 100 which is the basic configuration of this embodiment. The secure computation system 100 is an example of a second system. The secure computation system 100 includes a secure computation unit 101 and an output unit .

[0035] (Secure computation analysis) The secure computation unit 101 performs analysis of financial transactions by secure computation based on a plurality of models generated for each of a plurality of financial institutions and financial transaction information of a client to be analyzed. Secure computation is computation performed while keeping data confidential. Specifically, the secure computation here refers to performing analysis while keeping each of a plurality of models and financial transaction information of a client to be analyzed confidential.

[0036] As a secret computation method, a special encryption method corresponding to a specific process such as homomorphic encryption, a trusted execution environment in which processing is performed in an isolated state on hardware, or multi-party computation in which calculation processing is performed while sharing secrets among multiple servers (secret sharing computation) can be used.

[0037] The following is an example of a specific method of secure computation using multi-party computation. For example, the concealed data a is secretly shared into shares x, y, ..., and x, y, ... are sent to each server. Next, while the concealed data a remains secretly shared, each server communicates with each other while proceeding with the computation. Finally, the output shares u, v, ..., which are the computation results of each server, are collected and a restoration process is performed, thereby obtaining the computation result F(a). This computation result becomes the analysis result regarding the financial transaction of the customer. For this reason, when multi-party computation is used as a secure computation method, the secure computation unit 101 is realized by a plurality of servers. According to multi-party computation, management of encryption keys and an isolated environment are not required, and computation processing is generally faster.

[0038] The secure computation unit 101 may perform the analysis through secure computation, for example, using a model that has been made anonymous through secret sharing and financial transaction information that has been made anonymous through secret sharing.

[0039] The secure computing unit 101 inputs financial transaction information of a client to be analyzed into each of a plurality of models generated for each of a plurality of financial institutions, and obtains a plurality of analysis results. FIG. 2 is a diagram showing an example of the analysis results by each model. In FIG. 2, for example, X indicates that the client was analyzed to purchase a certain financial product, and Y indicates that the client was analyzed not to purchase the financial product. "Analysis target" indicates which client's financial transaction information was input into each model. FIG. 2 shows that when information on the assets of client C1 was input into a model generated based on information held by financial institution A, it was analyzed that client C1 would purchase a financial product.

[0040] Each model may output multiple values ​​including multiple customers or multiple financial products as the analysis result. Figure 3 is a diagram showing another example of the analysis result by each model. In Figure 3, according to the model of financial institution A, customers C1, C2, C4, ... are output as potential customers who may purchase a certain financial product.

[0041] If the target customer segments or trade areas differ for each financial institution, the trends indicated by the customer information held by each financial institution may differ. Therefore, the analytical results obtained from a learning model based on information held by one institution may differ from those obtained from a learning model based on information held by another institution.

[0042] (Output of analysis results) The secure computation unit 101 transmits the analysis result of each model to the output unit 102. The output unit 102 outputs the analysis result of each model calculated by the secure computation unit 101. The output unit 102 outputs the analysis result to, for example, the input / output unit 206 of the financial institution system 200.

[0043] The method of outputting the analysis results is not particularly limited. The output unit 102 may output the analysis results by indicating which model performed what type of analysis. Fig. 4 is a diagram showing an example of output based on the analysis results of Fig. 3. Fig. 4 shows that according to the models of financial institutions A and C, it has been analyzed that customer C1 will purchase a financial product, and according to the model of financial institution B, it has been analyzed that customer C1 will not purchase a financial product.

[0044] The output unit 102 may output the analysis results after rearranging them in any order based on the number of models that calculated the same analysis result. The same analysis result is not limited to the case where the analysis results are completely identical, but may include the case where the difference between the analysis results is small and they can be treated as the same. For example, the same analysis result includes the case where the judgment derived from the analysis result is the same. The output unit 102 outputs an aggregated result that displays the analysis results in order of the number of models that calculated the same analysis result. In FIG. 4, for example, when a potential customer purchases a financial product, the analysis is displayed in order of the number of models that analyzed it.

[0045] The output unit 102 may output the number or percentage of models that calculated the same analysis result, along with which model performed what kind of analysis.

[0046] The output unit 102 may output the analysis results of each model in a format that makes it impossible to identify which model the analysis results were made with. If the output unit 102 outputs the analysis results in an unidentifiable format and does not indicate which model the analysis results were made with, the risk of the analysis trends of each model being leaked can be reduced.

[0047] As an example of a format that makes it impossible to identify which model is the analysis result, for example, the output unit 102 may output the number of models that output each analysis result for each analysis result. In addition, the output unit 102 may output the ratio of models that output each analysis result. FIG. 5 is a diagram showing an example of output based on the analysis results of FIG. 2. FIG. 5 shows that an analysis result of X was obtained from two models, and an analysis result of Y was obtained from one model.

[0048] The output unit 102 outputs the number of models or the ratio of models that output each analysis result, thereby making it possible to indicate the tendency of the analysis results and the accuracy of the analysis.

[0049] The output unit 102 may aggregate and output the analysis results obtained by the multiple models. Aggregating the analysis results includes representing the multiple analysis results with a smaller number of analysis results or values. The output in which the analysis results are aggregated is also called an aggregated result. The output unit 102 may output the aggregated result together with which model performed what analysis, or may output the aggregated result without indicating which model performed the analysis result.

[0050] As an example of aggregation, the output unit 102 may output the analysis result based on the number of models for which the same judgment is derived from the analysis result. For example, the output unit 102 may output the analysis result based on a majority vote of multiple models. Specifically, the output unit 102 may output the analysis result for which the largest number of models have calculated the same analysis result. FIG. 6 is a diagram showing another example of output of the analysis result. In the analysis result of FIG. 2, since the largest number of models analyzed X, as shown in FIG. 6, the output unit 102 may output X as the analysis result for customer C1.

[0051] By outputting one analysis result from the output unit 102, a result that is simple and easy for the user to understand can be obtained. In addition, analysis results based on multiple models can be displayed without indicating which model output what analysis result.

[0052] The number of aggregated results output by the output unit 102 may be one, but is not limited to one. The output unit 102 may aggregate and output the analysis results for each of a plurality of groups, each of which includes two or more models.

[0053] For example, the output unit 102 may include in the output an analysis result that has the second largest number of models that have calculated the same analysis result. Whether the output analysis result is one or two or more, the output unit 102 may output the number or ratio of models that have output the analysis result.

[0054] As another example of aggregation, the output unit 102 may output the average of the scores of the analysis results output by each model as the analysis result. Alternatively, the output unit 102 may output a score obtained by weighting the scores of the analysis results for each model. The weight for each model is determined by any method. By the output unit 102 outputting a score based on the scores of multiple analysis results, it is possible to output an analysis result that takes into account the analysis of each model, without indicating the specific score of each model.

[0055] The output unit 102 may output the analysis result of one model and the aggregated result of the analysis results of multiple models so that they can be compared. The analysis result of one model may be aggregated so as to be included in the aggregated result to be compared, or may not be included when aggregated. The one model to be compared is arbitrarily determined, and may be, for example, a model acquired from the financial institution system 200 that has acquired financial transaction information of the customer to be analyzed.

[0056] FIG. 7 is a diagram showing an example of comparing the analysis results and the aggregation results output by the output unit 102. For example, a person in charge of financial institution A operates the financial institution system 200 so that the input / output unit 206 transmits information on financial institution A's customers. As shown in FIG. 7, the output unit 102 outputs the analysis results of financial institution A's model and the aggregated results of the analysis results of multiple models side by side. In FIG. 7, the aggregated result is, for example, the average of the scores analyzed by each of the multiple models. This allows the person in charge to easily compare whether the analysis results of their company's model differ from the analysis results of other models.

[0057] 7, the number and order of analysis results to be output may be determined by any method. For example, the number and order may be determined based on the similarity between the analysis result of one model and the aggregated results of multiple other models. For example, the output unit 102 outputs an analysis result in which the analysis result matches the aggregated result. Alternatively, the output unit 102 outputs the analysis results in the order in which the analysis result is similar to the aggregated result.

[0058] (Example of operation) The following describes the operation of the secure computation system 100 configured as above.

[0059] The secure computation unit 101 acquires anonymized models from each of the multiple financial institution systems 200 (step S101). For example, the secure computation unit 101 acquires models from the model output units 203a and 203b. The secure computation unit 101 may acquire a model from the financial institution system 200 every time an analysis is performed. Alternatively, the secure computation unit 101 may acquire a model that has been received in advance from the financial institution system 200 and has been anonymized from a storage unit (not shown).

[0060] The secure computation unit 101 acquires anonymized financial transaction information of a client from the financial institution system 200 (step S102). For example, the secure computation unit 101 acquires financial transaction information of a client to be analyzed from the input / output unit 206a of the financial institution system 200a. At this time, the secure computation unit 101 may acquire financial transaction information of multiple clients.

[0061] The secure computation unit 101 executes secure computation and obtains analysis results by each of the multiple models (step S103). Specifically, the secure computation unit 101 inputs anonymized financial transaction information of a client to each of the anonymized models and obtains multiple analysis results. When performing analysis based on information acquired from the financial institution system 200a, the secure computation unit 101 may omit analysis by a model acquired from the model output unit 203a of the financial institution system 200a. This is because the analysis by the model may be omitted or may be performed in the financial institution system 200a. The secure computation system 100 may obtain analysis results by the model from the financial institution system 200a.

[0062] The output unit 102 acquires and outputs a plurality of analysis results from the secure computation unit 101 (step S104). Specifically, for example, the aggregated results are output to the input / output unit 206a of the financial institution system 200a that transmitted the financial transaction information of the customer to be analyzed.

[0063] According to one embodiment, the secure computation unit 101 performs analysis by each model through secure computation based on a plurality of models and financial transaction information of a customer. The output unit 102 outputs the analysis result of each model calculated by the secure computation unit 101. Therefore, it becomes possible to use the analysis result of each model without leaking the model of each financial institution.

[0064] [Second embodiment] Next, the information processing system 11 according to the second embodiment will be described. The information processing system 11 according to the second embodiment is a system for performing analysis of financial transactions based on financial transaction information using models held by each financial institution, similar to the first embodiment. Below, the contents that overlap with the above description will be omitted to the extent that the description of this embodiment is not unclear.

[0065] Fig. 9 is a block diagram showing the configuration of an information processing system 11 in the second embodiment. The information processing system 11 includes a secure computation system 100, a plurality of financial institution systems 210 (210a, 210b), and an input / output device 300. In Fig. 9, the number of financial institution systems 210 is two, but this is not limited to this. The number of financial institution systems 200 may be the same as the number of financial institutions participating in the analysis by the information processing system. Furthermore, the number of input / output devices 300 is not limited to one, and multiple input / output devices 300 may be included.

[0066] The configuration of the secure computation system 100 is basically the same as that of the secure computation system 100 according to the first embodiment. The secure computation system 100 is an example of a second system.

[0067] Like the financial institution system 200 of the first embodiment, each of the financial institution systems 210 includes a model storage unit 201, a model concealment unit 202, and a model output unit 203. The financial institution system 210 is an example of a first system.

[0068] The model storage unit 201 may store in advance a trained model for analyzing financial transaction information, which is a model generated for each financial institution. Since each of the multiple financial institutions holds different financial transaction information for customers, the model generated for each financial institution is different. Each model storage unit 201a, 201b stores a different model.

[0069] The model output unit 203 transmits the model anonymized by the model anonymization unit 202 to the secure computation system 100. The model output unit 203 may be provided with the model anonymization unit 202.

[0070] In the second embodiment, a case will be described in which financial institution system 210 does not include model generation unit 204, customer information storage unit 205, and input / output unit 206 of financial institution system 200 of the first embodiment. However, financial institution system 210 may include any one of model generation unit 204, customer information storage unit 205, and input / output unit 206.

[0071] The input / output device 300 is used to input customer information for a customer to be analyzed into the secure computation system 100. The input / output device 300 may be realized by any terminal including a personal computer, a tablet terminal, or a smartphone.

[0072] First, the input / output device 300 acquires financial transaction information of a customer to be analyzed. Specifically, the financial transaction information is input to the input / output device 300 by, for example, a financial institution employee or a customer. Alternatively, the financial transaction information is acquired from another storage unit (not shown) via the input / output device 300.

[0073] The input / output device 300 can be used in place of the input / output unit 206 according to the first embodiment. That is, the customer information to be analyzed does not need to be stored in the customer information storage unit 205. In the first embodiment, in addition to the input / output unit 206, the input / output device 300 may be further provided.

[0074] The input / output device 300 anonymizes the acquired financial transaction information and transmits it to the secure computation system 100. The input / output device 300 may transmit information to a concealment unit (not shown) and instruct the concealment unit to anonymize the information before transmitting it to the secure computation system 100.

[0075] In the second embodiment, the secure computation system 100, like the first embodiment, acquires anonymized models from each financial institution system 210. Furthermore, the secure computation system 100 acquires information on the customer to be analyzed from the input / output device 300.

[0076] The operation of the information processing system 11 configured as above will be described with reference to the flowchart of FIG.

[0077] First, the model concealment unit 202 of the financial institution system 210 conceals the model stored in the model storage unit 201. The model output unit 203 transmits the concealed model to the secure computation system 100 (step S201).

[0078] The secure computation unit 101 of the secure computation system 100 acquires the anonymized model (step S202).

[0079] Next, the input / output device 300 transmits the financial transaction information to the secure computation system 100 (step S203). The secure computation system 100 acquires the anonymized financial transaction information from the input / output device 300 (step S204).

[0080] The secure computation unit 101 of the secure computation system 100 executes analysis by secure computation using each model obtained by inputting financial transaction information into the acquired models (step S205).

[0081] The output unit 102 of the secure computation system 100 outputs the analysis results of each model (step S206) and transmits them to the input / output device 300. The input / output device 300 receives the analysis results from the secure computation system 100 (step S207).

[0082] According to one embodiment, the model storage unit 201 of the financial institution system 200 stores a model for analyzing a customer's financial transaction, which is generated based on financial transaction information held by each financial institution. The model output unit 203 of the financial institution system 200 transmits the model to the secure computation system 100 in a concealed format. The input / output device 300 transmits the financial transaction information to the secure computation system 100 in a concealed format. The secure computation unit 101 of the secure computation system 100 performs analysis by each model based on the concealed multiple models and the financial transaction information by secure computation. The output unit 102 of the secure computation system 100 outputs the analysis result of each model calculated by the secure computation unit 101. Therefore, it is possible to use the analysis result of each model without leaking the model of each financial institution.

[0083] [Variations] <Other examples of models> Further examples of the models according to the first and second embodiments include models used for loan screening or cancellation prediction. The loan screening model takes financial transaction information such as customer attributes and repayment status as input values ​​and outputs the amount to be lent. The cancellation prediction model takes the transaction status of each financial institution over a certain period of time in the past as input values ​​and outputs the results of scoring the possibility of early repayment of a loan or the possibility of canceling a fixed-term deposit or account for each customer of the financial institution.

[0084] Here, the details of each model used in the financial analysis tool for corporations will be described. Each financial institution has an M&A support model based on successful examples of financial transactions in which it has advised corporate clients in the past. There are models for M&A support used by the acquirer and models for the seller (acquired) side. The acquirer model is, for example, a model that learns financial transaction information such as industry, sales, or region based on past successful examples as training data. When the name of a company that wishes to be acquired is input, this model outputs whether the acquisition will be possible and the acquisition amount. The seller model is, for example, a model that learns financial transaction information such as industry, sales, or region based on past successful examples as training data. When the name of a company that wishes to be acquired is input, this model outputs the possibility that the company wishes to be acquired and the expected desired acquisition amount. These models can improve the accuracy of matching buyers and sellers, and increase financing opportunities.

[0085] The model may output a customer's credit information (credit limit) based on the input of the customer's financial transaction information. Such a model is used to support loan screening to set a customer's credit limit. A loan screening model, for example, takes the repayment status of an existing customer as input and outputs the loan amount (increase, refinancing, extension of term).

[0086] The information processing systems 10 and 11 can also utilize models related to personnel affairs (evaluation / aptitude / transfer) of financial institutions. The models related to personnel affairs are used to predict the probability of an employee leaving the company, the probability of promotion, the necessity of transfer and the transfer destination, etc., based on the personnel affairs information of the employee over a certain period of time in the past.

[0087] <Combination of financial institutions> In the first and second embodiments, the multiple financial institutions are not limited to financial institutions in the same business sector, and may be composed of banks and non-bank financial institutions, such as banks, securities companies, or insurance companies. Even if the multiple financial institutions are composed of banks, they may be composed of banks of different sizes, such as city banks and regional banks.

[0088] [Hardware configuration] In each of the above-described embodiments, each component of each device including the secure computation system 100 and the financial institution systems 200 and 210 is shown as a functional block. Some or all of the components of each device may be realized by any combination of a computer 500 and a program.

[0089] Fig. 11 is a block diagram showing an example of a hardware configuration of a computer 500. Referring to Fig. 11, the computer 500 includes, for example, a CPU (Central Processing Unit) 501, a ROM (Read Only Memory) 502, a RAM (Random Access Memory) 503, a program 504, a storage device 505, a drive device 507, a communication interface 508, an input device 509, an input / output interface 511, and a bus 512.

[0090] The program 504 includes instructions for implementing each function of each device. The program 504 is stored in advance in the ROM 502, the RAM 503, or the storage device 505. The CPU 501 implements each function of each device by executing instructions included in the program 504. For example, the CPU 501 of the secure computation system 100 implements the functions of the secure computation system 100 by executing instructions included in the program 504. The RAM 503 may also store data to be processed in each function of each device.

[0091] The drive device 507 reads and writes data from the recording medium 506. The communication interface 508 provides an interface with a communication network. The input device 509 is, for example, a mouse, a keyboard, built-in key buttons, a touch panel, etc., and accepts input of information from a financial institution's staff or a customer, etc. The output device 510 is, for example, a display, and outputs (displays) information to a financial institution's staff or a customer, etc. The input / output interface 511 provides an interface with peripheral devices. The bus 512 connects these hardware components. The program 504 may be supplied to the CPU 501 via a communication network, or may be stored in advance in the recording medium 506, read by the drive device 507, and supplied to the CPU 501.

[0092] It should be noted that the hardware configuration shown in FIG. 11 is merely an example, and other components may be added, or some components may not be included.

[0093] There are various variations in the method of realizing each device. For example, each device may be realized by any combination of a different computer and program for each component. Furthermore, multiple components of each device may be realized by any combination of a single computer and program.

[0094] In addition, some or all of the components of each device may be realized by general-purpose or dedicated circuits including a processor, etc., or a combination of these. These circuits may be configured by a single chip, or may be configured by multiple chips connected via a bus. Some or all of the components of each device may be realized by a combination of the above-mentioned circuits, etc., and a program.

[0095] Furthermore, when some or all of the components of each device are realized by a plurality of computers, circuits, etc., the plurality of computers, circuits, etc. may be arranged in a centralized manner or in a distributed manner.

[0096] Although the present disclosure has been described above with reference to the embodiments, the present disclosure is not limited to the above embodiments. Various modifications that can be understood by a person skilled in the art can be made to the configuration and details of the present disclosure within the scope of the present disclosure. Furthermore, the configurations in each embodiment can be combined with each other without departing from the scope of the present disclosure.

[0097] For example, although a number of operations are described in a sequence in the form of a flowchart, the sequence does not limit the order in which the operations are performed. Therefore, when implementing each embodiment, the sequence of the operations can be changed as long as it does not affect the content.

[0098] A part or all of the above-described embodiments may be described as follows, but is not limited to the following.

[0099] [Appendix 1] a secure computation means for performing, by secure computation, an analysis of financial transactions of a target customer using a plurality of models generated for each of the multiple financial institutions based on financial transaction information of the target customer held by each of the multiple financial institutions and the financial transaction information of the target customer; an output means for outputting an analysis result based on the plurality of models analyzed by the secure calculation means; A secure computing system.

[0100] [Appendix 2] The output means outputs the analysis results of each model in a format that makes it impossible to identify which model was used for the analysis result. A secure computing system as described in Appendix 1.

[0101] [Appendix 3] The output means aggregates and outputs the analysis results obtained by the analyses using the plurality of models. A secure computing system as described in appendix 1 or 2.

[0102] [Appendix 4] The output means aggregates the analysis results based on the number of the models for which the same judgment is derived from the analysis results, and outputs the analysis results. A secure computing system as described in Appendix 3.

[0103] [Appendix 5] The output means outputs an analysis result based on a majority vote of the plurality of models. A secure computing system as described in Appendix 4.

[0104] [Appendix 6] The output means further outputs the number or the ratio of the models analyzed based on the analysis result to be output. A secure computing system according to any one of claims 1 to 5.

[0105] [Appendix 7] The secure computation means performs secure computation by analyzing the model, which has been made secret by secret sharing, and the financial transaction information, which has been made secret by secret sharing. A secure computing system according to any one of claims 1 to 6.

[0106] [Appendix 8] Each of the models is a model that analyzes the likelihood that the customer will purchase a financial product. A secure computing system according to any one of claims 1 to 7.

[0107] [Appendix 9] Each of the models is a model that predicts financial products that the customer is likely to purchase. A secure computing system according to any one of claims 1 to 7.

[0108] [Appendix 10] Each of the above models is a model for predicting customers who are predicted to purchase financial products. A secure computing system according to any one of claims 1 to 7.

[0109] [Appendix 11] Each of the above models is a model that analyzes whether or not a desired M&A partner can be acquired, or the expected acquisition price. A secure computing system according to any one of claims 1 to 7.

[0110] [Appendix 12] Each of the models is a model that outputs credit information of the customer. A secure computing system according to any one of claims 1 to 7.

[0111] [Appendix 13] Based on a plurality of models generated for each of the plurality of financial institutions based on financial transaction information of the customer held by each of the plurality of financial institutions and the financial transaction information of the target customer, an analysis of the financial transactions of the target customer is performed using each of the models through secure computation; A method for outputting the analysis results for each model analyzed.

[0112] [Appendix 14] Based on a plurality of models generated for each of the plurality of financial institutions based on financial transaction information of the customer held by each of the plurality of financial institutions and the financial transaction information of the target customer, an analysis of the financial transactions of the target customer is performed using each of the models through secure computation; A recording medium for non-temporarily recording a program that causes a computer to execute the following: outputting the analysis results of each calculated model.

[0113] [Appendix 15] An information processing system having a plurality of first systems, an input / output device, and a second system, Each of the plurality of first systems includes: a model storage unit that stores a model for analyzing financial transactions of customers, the model being generated based on financial transaction information of customers held by each financial institution; and a model output means for transmitting the model in a concealed form to a second system; The input / output device is Transmitting the financial transaction information of the customer to be analyzed in a confidential format to a second system; The second system comprises: a secure computation means for performing, by secure computation, an analysis of financial transactions of a target customer using each of the models based on each of the models acquired from the multiple first systems and financial transaction information of the target customer acquired from the input / output device; and an output means for outputting the analysis result of each model analyzed by the secure calculation means to the input / output device. Information processing system. [Explanation of symbols]

[0114] 100 Secure Computing System 101 Secret Computing Department 102 Output section 200, 210 Financial Institution Systems 201 Model Memory Section 202 Model Concealment Department 203 Model Output Section 204 Model Generation Unit 205 Customer information storage section 206 Input / output section 300 I / O devices 500 Computers

Claims

1. a secure computation means for acquiring, in a confidential manner, a plurality of models generated for each of a plurality of financial institutions based on financial transaction information of customers held by each of the plurality of financial institutions and financial transaction information of a target customer for analysis, and for obtaining a plurality of analysis results by each of the plurality of models through secure computation by inputting the financial transaction of the target customer into each of the models; an output means for outputting an analysis result based on the plurality of models analyzed by the secure calculation means; A secure computing system.

2. The output means outputs the analysis results of each model in a format that makes it impossible to identify which model was used for the analysis result. The secure computing system according to claim 1 .

3. The output means outputs a comparison between an analysis result of the model generated for the financial institution that obtained the financial transaction information of the customer to be analyzed and a result that aggregates the analysis results of each of the analyses performed by the multiple models.

3. A secure computing system according to claim 1 or 2.

4. The output means aggregates the analysis results based on the number of the models for which the same judgment is derived from the analysis results, and outputs the analysis results. The secure computing system according to claim 3.

5. The output means outputs an analysis result based on a majority vote of the plurality of models. The secure computing system according to claim 4.

6. The output means further outputs the number or the ratio of the models analyzed based on the analysis result to be output.

6. A secure computing system according to claim 1.

7. The secure computation means performs secure computation by analyzing the model, which has been made secret by secret sharing, and the financial transaction information, which has been made secret by secret sharing. The secure computing system according to any one of claims 1 to 6.

8. Each of the models is a model that analyzes the likelihood that the customer will purchase a financial product.

8. A secure computing system according to claim 1.

9. Each of the models is a model that predicts financial products that the customer is likely to purchase.

8. A secure computing system according to claim 1.

10. Each of the above models is a model for predicting customers who are predicted to purchase financial products.

8. A secure computing system according to claim 1.

11. Each of the above models is a model for analyzing the feasibility of acquiring a desired M&A partner or the expected acquisition price.

8. A secure computing system according to claim 1.

12. Each of the models is a model that outputs credit information of the customer.

8. A secure computing system according to claim 1.

13. A computer comprising: acquiring, in a confidential manner, a plurality of models generated for each of a plurality of financial institutions based on financial transaction information of customers held by each of the plurality of financial institutions and the financial transaction information of a target customer for analysis, and obtaining a plurality of analysis results by each of the plurality of models through secure computation by inputting the financial transaction of the target customer into each of the models; A method for outputting the analysis results for each model analyzed.

14. acquiring, in a confidential manner, a plurality of models generated for each of a plurality of financial institutions based on financial transaction information of customers held by each of the plurality of financial institutions and the financial transaction information of a target customer for analysis, and obtaining a plurality of analysis results by each of the plurality of models through secure computation by inputting the financial transaction of the target customer into each of the models; A program that causes a computer to output the analysis results of each calculated model.

15. An information processing system having a plurality of first systems, an input / output device, and a second system, Each of the plurality of first systems includes: a model storage unit that stores a model for analyzing financial transactions of customers, the model being generated based on financial transaction information of customers held by each financial institution; and a model output means for transmitting the model in a concealed form to a second system, The input / output device is transmitting the financial transaction information of the target customer in a confidential format to a second system; The second system comprises: a secure computation means for anonymizing the models acquired from the first systems and the financial transaction information of the client to be analyzed acquired from the input / output device, and inputting the financial transaction of the client to be analyzed into each of the models to perform secure computation to obtain a plurality of analysis results using each of the models; and an output means for outputting the analysis result of each model analyzed by the secure calculation means to the input / output device. Information processing system.

Images