Data management structure using blockchain

Abstract

To provide a data management structure using a block chain which suppresses operation / management costs, excellently holds entire system performance, eliminates leakage risks of data, and reliably protects the data.SOLUTION: A data management structure is provided with application nodes 11, 12 for participants and smart contract which are established with a private type chain as a base and operated / managed by participants different from a manager in a physical node. The application nodes 11 has a first node 11a having first authority to perform processing such as address setting and data recording and a second node 11b having second authority that instructs forced execution of processing of operation / management of all physical nodes. The application nodes 12 has manager processing forced execution permission means 13 which performs processing based on a first smart contract 12a performing processing according to an instruction based on the first authority, a second smart contract 12b which forcibly performs processing according to an instruction based on the second authority, and the second authority.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to a data management structure using a blockchain. In this specification, the term "system" refers to a computer system that is configured by combining elements such as computers, other electronic devices, software, communication networks, and data, and that concretely realizes software-based information processing using hardware resources. [Background technology]

[0002] In recent years, there has been an increase in international cyber attacks by countries with different political ideologies and systems. In systems that use digital signals, the protection (guarantee) of digital data is essential to the service, so resistance to cyber attacks has become important.

[0003] However, the most suitable method to deal with data tampering and destruction due to vulnerabilities in encryption is a distributed data management and processing method.

[0004] Among the distributed data management and processing methods, the one that is considered to be the best is the one that uses blockchain technology. Distributed data management and processing methods that use blockchain have the same basic configuration, but are broadly divided into public chains and private chains based on differences in how they are used.

[0005] In a public chain, for example, as shown in Figure 13, there is no specific administrator, and an unspecified number of physical nodes can participate in consensus formation, and it is operated and managed by each physical node. Public chains are suitable for global services.

[0006] A private chain is a blockchain in which only a specific number of physical nodes permitted to participate by a specific administrator can participate, and a specific number of physical nodes are operated and managed by one specific administrator, as shown in Figure 14. Summary of the Invention [Problem to be solved by the invention]

[0007] Public chains are ideal for dealing with data tampering and vandalism, but they have the inherent problem of slow real-time processing performance. For example, digital assets with a particularly strong public nature include coin-type central bank digital currencies (CBDCs), currency-type stable coins, and commodity-type stable coins (such as digital gold coins). When using these digital assets as collateral on a public chain, slow real-time processing performance may be tolerable to some extent, but when processing payments (especially small-value consumer payments), it is necessary to consider ways to improve the slowness of real-time processing performance.

[0008] In this regard, it may be possible to consider wrapping digital assets in a high-speed side chain based on a public chain with slow real-time processing performance. However, there are risk areas where the reliability of processing cannot be guaranteed (in contrast to the synchronous processing of public chains, the high-speed processing of side chains is thought to involve asynchronous processing in most cases, and there is concern about the risk of processing inconsistency in the asynchronous processing unit). Processing inconsistency problems are particularly likely to occur in high-speed parallel processing.

[0009] On the other hand, private chains can easily solve the problem of slow real-time processing performance inherent in public chains, but there is a possibility that the operation service will be biased towards specific administrators (such as companies), resulting in a stronger centralized characteristic and a weaker public characteristic. More specifically, private chains are superior to public chains in terms of control, management, operation, cost, processing performance, etc., when deployed in a specific region such as Japan. However, when a physical node is identified, there are issues in that the identified physical node is vulnerable to cyber attacks, and when the management of the physical node is entrusted to a specific company or organization (person), there are issues in that the specific company or organization entrusted with management is at risk (for example, the reliability is unknown, and in some cases, the possibility of data destruction due to betrayal).

[0010] One possible measure to address issues regarding vulnerability to cyber attacks and the inherent risks to specific companies or organizations entrusted with management is to build and absorb virtual nodes into physical nodes (with the virtual nodes handling restrictions, controls, and special processing such as data movement). However, building virtual nodes into physical nodes alone improves the risks in business processing, but does not eliminate the fundamental risks of the physical nodes.

[0011] In addition, public chains have the characteristic that there is no administrator and that an unspecified number of nodes can participate in consensus formation of transactions, and since weak private key management can lead to the leakage of digital assets, private key management is not easy and has become complicated. For this reason, while large companies can handle complex private key management without imposing a heavy burden, it is an extremely heavy burden for small business entities such as SMEs.

[0012] Therefore, the inventors of the present invention have repeatedly considered and investigated to solve this problem, and in the course of their investigation and investigation, have found that there is a further problem to be solved.

[0013] The present invention has been made in consideration of the above problems, and aims to provide a blockchain-based data management structure that is a distributed data management and processing method for dealing with data tampering and vandalism due to vulnerabilities in encryption, that does not cause problems with inconsistency in processing, that speeds up real-time processing performance, that is free of the risks of centralized processing, that has public characteristics, that reduces operational and management costs such as monitoring and response, that maintains good overall system performance regardless of the presence of physical nodes with low performance (hardware processing, communication speed, etc.), that eliminates the risk of data leakage, that reliably protects data, and that can reduce the operational burden of private keys, and that makes it easy for small business entities such as small and medium-sized enterprises to use blockchain-based services. [Means for solving the problem]

[0014] In order to achieve the above object, the data management structure using blockchain according to the present invention is a data management structure using blockchain constructed with at least one distributed ledger in a distributed technology such as blockchain, and a smart contract or a server application for performing predetermined processing using data managed in the distributed ledger, wherein the blockchain is constructed based on a private chain, and the private chain comprises a physical node for recording and managing data, which is managed by a specific administrator, and a plurality of participant application nodes for controlling the operation of the physical node, which are operated and managed by a plurality of participants different from the administrator of the physical node, and a plurality of smart contract application nodes for executing predetermined processing via a predetermined smart contract in accordance with an execution instruction of the predetermined processing in the participant application node, and each of the participant application nodes performs address setting, token generation and retirement, token transfer, a first participant application node having a first authority (user authority) to instruct the execution of processes such as moving the private chain, recording data, and recording data movement, and a second participant application node having a second authority (administrator authority) to instruct the forced execution of processes regarding the operation and management of all of the physical nodes that construct the private chain (forced suspension of addresses, forced token movement, data backup, data rollback, freezing, deleting, and restoring addresses, etc.) as a higher level authority than the first authority (user authority), and each of the smart contract application nodes has a first smart contract having a function of performing processes such as setting addresses, generating and retiring tokens, moving tokens, recording data, and recording data movement in accordance with an instruction to execute a process based on the first authority (user authority), andand a second smart contract having a function of forcibly executing processes regarding the rollback of data and freezing, deleting, and restoring of addresses, and further having an administrator process forcible execution permission means for permitting an instruction to forcibly execute a process based on the second authority (administrator authority) in the second participant application node when a predetermined operation is received from multiple participants who have administrator authority among multiple participants participating in the operation and management of the participant application node, thereby constructing a virtual consortium type blockchain in which real nodes are operated by multiple specific administrators who have been granted multiple levels of authority.

[0015] In addition, in the data management structure using the blockchain of the present invention, it is preferable that the second smart contract has a first data backup smart contract having a function of dividing and saving the data operated and managed by the physical node and recorded in the blockchain to an external data saving area using secret sharing technology.

[0016] In addition, in the data management structure using the blockchain of the present invention, it is preferable that the second smart contract comprises a second data backup smart contract having a function of saving data operated and managed by the physical node and recorded in the blockchain to a specified save area on an external public chain.

[0017] In addition, in the data management structure using the blockchain of the present invention, it is preferable that the administrator process forced execution permission means comprises a multi-sig process control means which permits an instruction to force execution of the process based on the second authority (administrator authority) on the condition that a signature is issued using a private key held by each of a plurality of participants who have administrator authority among a plurality of participants participating in the operation and management of the participant application node.

[0018] In addition, in the data management structure using the blockchain of the present invention, it is preferable that the administrator processing forced execution permission means comprises a private key backup smart contract having a function of dividing and saving data constituting one private key to an external data saving area using secret sharing technology, and a private key regeneration means for generating a secret sharing index and regenerating a private key, on the condition that identity verification via biometric authentication is performed by multiple participants who have administrator authority among multiple participants participating in the operation and management of the participant application node. Effect of the Invention

[0019] According to the present invention, a distributed data management and processing method for dealing with data tampering and vandalism due to vulnerabilities in encryption, etc., is provided that does not cause problems with inconsistency in processing, speeds up real-time processing performance, is free of centralized processing risks, has public characteristics, reduces operational and management costs such as monitoring and response, maintains good overall system performance regardless of the presence of physical nodes with low performance (hardware processing, communication speed, etc.), eliminates risks such as data leakage, reliably protects data, and reduces the operational burden of private keys, making it easier for small business entities such as small and medium-sized enterprises to use blockchain-based services. [Brief description of the drawings]

[0020] [Figure 1] FIG. 1 is an explanatory diagram illustrating an outline of the overall configuration of a data management structure using a blockchain according to a first embodiment of the present invention. [Diagram 2] FIG. 2 is an explanatory diagram showing in more detail the data management structure using the blockchain in FIG. 1, separated into a physical layer and an application layer. [Diagram 3] FIG. 2 is an explanatory diagram illustrating a schematic configuration of a physical node in the data management structure using the blockchain of FIG. [Figure 4]FIG. 2 is an explanatory diagram illustrating a schematic configuration of a participant application node in the data management structure using the blockchain of FIG. [Diagram 5] FIG. 2 is an explanatory diagram illustrating the configuration of a smart contract application node in the data management structure using the blockchain of FIG. [Figure 6] FIG. 2 is an explanatory diagram showing the functions of a form of smart contract for data backup, which is provided as a second smart contract in a smart contract application node in the data management structure using the blockchain of FIG. 1. [Figure 7] FIG. 2 is an explanatory diagram showing the functions of another form of smart contract for data backup, which is provided as a second smart contract in the smart contract application node in the data management structure using the blockchain of FIG. 1. [Figure 8] FIG. 2 is an explanatory diagram illustrating in outline the configuration of an administrator process forced execution permission means in the data management structure using the blockchain of FIG. 1. [Figure 9] FIG. 2 is an explanatory diagram showing the configuration of one form of administrator process forced execution permission means in the data management structure using the blockchain of FIG. 1. [Figure 10] FIG. 2 is an explanatory diagram showing the configuration of another form of administrator process forced execution permission means in the data management structure using the blockchain of FIG. 1. [Figure 11] FIG. 2 is an explanatory diagram showing, in a hierarchical manner, the authority held by each participant application node provided in each smart contract application node provided in the application node in the data management structure using the blockchain of FIG. [Figure 12] FIG. 2 is an explanatory diagram showing a hierarchical arrangement of processing functions based on the authority of each smart contract application node provided in each participant application node in the data management structure using the blockchain of FIG. [Figure 13]FIG. 1 is a block diagram illustrating an example of a conventional public chain. [Figure 14] FIG. 1 is a block diagram illustrating an example of a typical conventional private chain. [Figure 15] FIG. 1 is a block diagram illustrating an example of a conventional general consortium chain. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0021] Prior to describing the embodiments, the circumstances under which the present invention was derived and the effects of the present invention will be described.

[0022] As mentioned above, international cyber attacks by countries with different political doctrines and systems have been increasing in recent years, and in systems that use digital signals, the protection (guarantee) of digital data is essential to the service, making it important to have resistance to cyber attacks.

[0023] However, the most suitable method to deal with data tampering and destruction due to vulnerabilities in encryption is a distributed data management and processing method.

[0024] Among the distributed data management and processing methods, the one that is considered to be the best is the one that uses blockchain technology. Distributed data management and processing methods that use blockchain have the same basic configuration, but are broadly divided into public chains and private chains based on differences in how they are used.

[0025] A public chain is a blockchain that does not have a specific administrator, and an unspecified number of physical nodes can participate in consensus building and are operated and managed by each physical node, as shown in Figure 13. Public chains are suitable for global services.

[0026] A private chain is a blockchain in which only a specific number of physical nodes permitted to participate by a specific administrator can participate, and a specific number of physical nodes are operated and managed by one specific administrator, as shown in Figure 14.

[0027] Public chains are ideal for dealing with data tampering and vandalism, but they have the inherent problem of slow real-time processing performance. For example, digital assets with a particularly strong public nature include coin-type central bank digital currencies (CBDCs), currency-type stable coins, and commodity-type stable coins (such as digital gold coins). When using these digital assets as collateral on a public chain, slow real-time processing performance may be tolerable to some extent, but when processing payments (especially small-value consumer payments), it is necessary to consider ways to improve the slowness of real-time processing performance.

[0028] In this regard, it may be possible to consider wrapping digital assets in a high-speed side chain based on a public chain with slow real-time processing performance. However, there are risk areas where the reliability of processing cannot be guaranteed (in contrast to the synchronous processing of public chains, the high-speed processing of side chains is thought to involve asynchronous processing in most cases, and there is concern about the risk of processing inconsistency in the asynchronous processing unit). Processing inconsistency problems are particularly likely to occur in high-speed parallel processing.

[0029] On the other hand, private chains can easily solve the problem of slow real-time processing performance inherent in public chains, but there is a possibility that the operation service will be biased towards specific administrators (such as companies), resulting in a stronger centralized characteristic and a weaker public characteristic. More specifically, private chains are superior to public chains in terms of control, management, operation, cost, processing performance, etc., when deployed in a specific region such as Japan. However, when a physical node is identified, there are issues in that the identified physical node is vulnerable to cyber attacks, and when the management of the physical node is entrusted to a specific company or organization (person), there are issues in that the specific company or organization entrusted with management is at risk (for example, the reliability is unknown, and in some cases, the possibility of data destruction due to betrayal).

[0030] One possible measure to address issues regarding vulnerability to cyber attacks and risks inherent in specific companies or organizations entrusted with management is to build application nodes that act as virtual nodes on physical nodes, and have the virtual nodes handle restrictions, controls, and special processing such as data movement. However, even if application nodes that act as virtual nodes are built on physical nodes, this alone will improve the risks in business processing, but it will not eliminate the fundamental risks of physical nodes.

[0031] In addition, public chains have the characteristic that there is no administrator and that an unspecified number of nodes can participate in consensus formation of transactions, and since weak management of private keys can lead to the outflow of digital assets, the management of private keys is not simple and has become complicated. For this reason, while large companies can handle the complicated management of private keys without imposing a heavy burden, it is thought that the complicated management of private keys will be an extremely heavy burden for small business entities such as SMEs.

[0032] Therefore, the inventors of the present invention have considered and examined a method for managing digital assets, which have a strong public nature, based on a private chain that has no problems with real-time processing performance, and have investigated ways to improve the problem that the public nature inherent in private chains is diluted.

[0033] The inventors of the present invention considered that the challenge in enhancing the public characteristics of a system based on a private chain lies in how to operate the nodes that manage data records using a distributed ledger. Considering the basic characteristics of blockchain, one possible way to enhance the public nature of a private chain is to use a blockchain in which multiple nodes are operated by multiple designated managers (organizations such as companies and groups). Conventionally, this type of blockchain has been operated in the form of a consortium chain.

[0034] A consortium chain, for example, as shown in Figure 15, is a blockchain in which each physical node is operated and managed independently by a designated administrator (a company, group, or other organization), and data recording in the distributed ledger is managed by multiple designated administrators (companies, groups, or other organizations). However, if the operation and management of multiple physical nodes is shared among multiple designated administrators (companies, organizations, etc.), the operation and management costs for monitoring and response will become high depending on the number of organizations, reducing the competitiveness of the service and increasing the hassle. Furthermore, if there is a physical node with low performance (hardware processing, communication speed, etc.) in the entire system that makes up the consortium chain, the entire system will be affected by that low-performance physical node.

[0035] It is also possible for a private chain to be operated like a consortium chain, with multiple companies managing the physical nodes. However, even if multiple companies manage the physical nodes, it is not possible to completely eliminate the risks inherent in private chains, such as the uncertainty of each company's trustworthiness and, in some cases, the possibility of a physical node being destroyed through betrayal.

[0036] For this reason, when it comes to the operation and management of the physical nodes, which are hardware-like nodes, it is desirable to design all of the physical nodes that make up the system together and balance the performance of each physical node within the system. However, doing so would mean that the service would be provided by a single management company or organization, creating the risks of centralized processing and diminishing the public nature of the service.

[0037] Therefore, the inventors of the present invention have decided to operate and manage the physical nodes in one organization, and to build application nodes that act as virtual nodes in the physical nodes, separating the physical layer that manages data from the application layer that controls the operation of the physical nodes. In addition, in order to eliminate the risks associated with operating and managing the physical nodes in one organization, the inventors have considered connecting the physical nodes to a different infrastructure from the existing physical nodes and taking backups. Specifically, we considered implementing a smart contract dedicated to processing backup data, and writing the backed-up data as a hash on an external public chain. Furthermore, if the management of private keys in the backup process is carried out by an application node that constitutes a virtual node constructed on a physical node, then even if the data operated and managed by the physical node is subjected to some kind of vandalism, it is believed that the data can be restored by an organization other than the organization that operates and manages the physical node. Alternatively, it is believed that a similar effect can be achieved by performing data evacuation using secret sharing technology through smart contracts at the application node that constitutes the virtual node.

[0038] Simply increasing the number of physical nodes in a blockchain reduces processing performance. For this reason, the inventors of the present invention have come up with the idea of ​​protecting data in a form that is separate from processing in the physical nodes as described above. In addition, when a physical node is operated and managed by one organization, we considered constructing application nodes that are multiple virtual nodes on the physical node, separating the physical layer that manages data from the application layer that controls operations, and having multiple companies, groups, and other organizations that are different from the administrator of the physical node jointly manage the application nodes that are virtual nodes. For example, we considered possessing multiple private keys like multisig, making it impossible to process without the agreement (signature by multiple private keys) of multiple companies (different from the specific company that is the administrator of the physical node), or dividing and saving one private key itself using secret sharing technology, and incorporating biometric authentication, for example, into the secret sharing process, so that when a private key is needed, a secret sharing index is generated, a private key is regenerated, and processing as a consortium chain is possible using the regenerated private key, subject to identity verification by multiple administrators via biometric authentication. In this way, it is believed that it will be possible to perform a restoration process for backup data that has been divided and saved using public chains or secret sharing technology. For this reason, even in the case of a private chain, it is believed that the risks associated with a specific company operating and managing the physical nodes can be reliably eliminated.

[0039] In addition, the users, which will be multiple companies participating in the operation and management of the application nodes that constitute the virtual nodes, do not want to deal with the hassle of managing physical nodes, and are typically expected to outsource the management of the physical nodes to another company. Considering that it is cumbersome for users to manage private keys when participating in a consortium chain and performing processing as needed to address the risks of private chains, and that it is necessary to be able to easily execute processing when requests for processing arise periodically, the inventors of the present invention came up with the idea of ​​managing private keys in a system (smart contract) separate from the present system and utilizing biometric authentication in that system, thereby making private key management more efficient.

[0040] In this way, the inventor of the present invention has proposed the following method for splitting and saving secrets using the secret sharing technique in the application node that constitutes the virtual node: · Blockchain data backup Management of private keys for controlling application nodes that act as virtual nodes in the blockchain We considered using it for two purposes. However, even if the private key is divided and saved using secret sharing, it cannot be regenerated without an index, and index management becomes troublesome. In response to this point, the inventor of the present invention thought that if an index could be generated on the condition of identity verification via biometric authentication, and automatic authentication could be performed using the private key regenerated using the generated index, troublesome private key management would become unnecessary.

[0041] After much consideration and investigation, the inventors of the present invention have come up with a method in which the operation and management of all physical nodes can be handled by an application node consisting of multiple virtual nodes constructed using software, and in which the application nodes consisting of multiple virtual nodes are jointly managed by multiple specific administrators (companies, organizations, etc.) that are different from the administrators of the physical nodes. In detail, we considered setting up an application node consisting of multiple virtual nodes built with software on a physical node, and constructing a blockchain in which a certain number of participants (different from the administrators of the physical nodes) who participate in the operation and management of the application node consisting of multiple virtual nodes are designated as designated administrators, and the designated administrators are given operational authority over all physical nodes.

[0042] We then considered implementing multiple levels of authority by granting general authority (setting public and private keys) to participants in the operation and management of application nodes, to set addresses on the blockchain as well as to generate and retire tokens, move tokens, record data, and record data movements, etc., and by granting operational authority for all of the above physical nodes, which differs from the general authority to set addresses as well as record data and record data movements, to specific administrators of application nodes that constitute multiple virtual nodes. In this way, multiple specific administrators who participate in the operation and management of application nodes, which consist of multiple virtual nodes built with software, will essentially jointly have the operational authority of all physical nodes.

[0043] Furthermore, the inventors have considered enabling various processes, such as forced address suspension, forced token movement, data backup, data rollback, and address freezing, deletion, and restoration, as operational authorities for all physical nodes, in addition to the general authority mentioned above (authority to set addresses and record data and move data, etc.), and implementing the operations of multiple designated administrators (for example, multi-sig type processes requiring private keys and identity verification processes via biometric authentication) to approve processes, so that each designated administrator participating in the operation and management of an application node constituting a single virtual node cannot perform these processes alone.

[0044] This is expected to lead to the creation of a virtual consortium-type blockchain in which multiple designated administrators jointly operate real nodes. The inventors also considered implementing this hierarchical authority in a similar manner in smart contracts that automatically process transactions on the blockchain.

[0045] We then came up with a mechanism to allow smart contracts, which normally perform processing using general authority, to execute forced processing using higher authority. In other words, while existing blockchains are built on the basis of a single level of authority, the present invention is designed to enable complex operation of real nodes by configuring application nodes, which act as virtual nodes, to have a two-level or multiple levels of authority.

[0046] In this way, if a type of blockchain that can be described as a virtual consortium chain is constructed with two or multiple authority hierarchies based on a private chain and with application nodes that act as virtual nodes, even if an external attack that steals a private key occurs and the digital assets of the address in question are leaked, it is believed that the higher level of authority will be able to take measures such as stopping the fraudulent address and returning the leaked assets. Also, for services in a closed environment, it is efficient to implement functions on a private chain, and a closed environment based on a private chain would make it possible to operate and manage private keys in a network-connected environment such as a hot wallet. As a result, there will no longer be a need for the complicated management of private keys required for public chains, making blockchain-based services easier to use for small business entities such as SMEs.

[0047] After much consideration and investigation, the inventors of the present invention have come up with the data management structure using the blockchain of the present invention.

[0048] The data management structure using blockchain of the present invention is a data management structure using blockchain that is constructed with at least one distributed ledger in a distributed technology such as blockchain, and a smart contract or a server application for performing predetermined processing using data managed in the distributed ledger, wherein the blockchain is constructed based on a private chain, and the private chain comprises a physical node for recording and managing data that is managed by a specific administrator, and a plurality of participant application nodes for controlling the operation of the physical node, which are operated and managed by a plurality of participants different from the administrator of the physical node, and a plurality of smart contract application nodes for executing predetermined processing via a predetermined smart contract in accordance with an execution instruction of the predetermined processing in the participant application node, and each of the participant application nodes performs address setting, token generation and retirement, token movement, data recording, and other operations. a first participant application node having a first authority (user authority) to instruct the execution of processes such as registering addresses and recording data movement, and a second participant application node having a second authority (administrator authority) as an authority higher in a hierarchy than the first authority (user authority) to instruct the forced execution of processes regarding the operation and management of all of the physical nodes that construct the private chain (forced suspension of addresses, forced token movement, data backup, data rollback, freezing, deleting, and restoring addresses, etc.), and each of the smart contract application nodes has a first smart contract having a function of performing processes such as setting addresses, generating and retiring tokens, moving tokens, recording data, and recording data movement in accordance with an instruction to execute a process based on the first authority (user authority), andand a second smart contract having a function of forcibly executing processes regarding the rollback of data and freezing, deleting, and restoring of addresses, and further having an administrator process forcible execution permission means for permitting an instruction to forcibly execute a process based on the second authority (administrator authority) in the second participant application node when a predetermined operation is received from multiple participants who have administrator authority among multiple participants participating in the operation and management of the participant application node, and a virtual consortium type blockchain is constructed in which real nodes are operated by multiple specific administrators who are granted multiple levels of authority.

[0049] Like the data management structure using the blockchain of the present invention, by constructing a virtual consortium type blockchain based on a private chain, in which real nodes are operated by multiple specific administrators who are granted multiple levels of authority at application nodes (forming virtual nodes), it is possible to maintain good real-time processing speed and, moreover, to prevent the public characteristics from being diluted.

[0050] Furthermore, like the data management structure using the blockchain of the present invention, if a private chain is configured with physical nodes for recording and managing data, which are managed by a specific administrator, and multiple participant application nodes for controlling the operation of the physical nodes, which are operated and managed by multiple participants different from the administrator of the physical nodes and are established as units of the physical nodes, and multiple smart contract application nodes for executing specified processing via a specified smart contract in accordance with instructions to execute specified processing in the participant application nodes, then it is possible to design all of the physical nodes that make up the system together and balance the performance of each physical node in the system, which reduces operational and management costs such as monitoring and response, and prevents the entire system from being affected by low-performance physical nodes.

[0051] Also, like the data management structure using the blockchain of the present invention, each of the participant application nodes has a first participant application node having a first authority (user authority) to instruct the execution of processes such as address setting, token generation / redemption, token movement, data recording, and data movement recording, and a second participant application node having a second authority (administrator authority) to instruct the forced execution of processes regarding the operation and management of all of the physical nodes that construct the private chain (forced suspension of addresses, forced token movement, data backup, data rollback, freezing / deleting / restoring of addresses, etc.) as a higher level authority than the first authority (user authority), and each of the smart contract application nodes has the first authority If a configuration is made with a first smart contract having a function of performing processes such as address setting, token generation / redemption, token movement, data recording, and data movement recording in accordance with a processing execution instruction based on the (user authority), and a second smart contract having a function of forcibly executing processes for operation / management of all the physical nodes that construct the private chain (address forced stop, token forced movement, data backup, data rollback, address freezing / deletion / restoration, etc.) in accordance with a processing execution instruction based on the second authority (administrator authority), multiple specific administrators of the smart contract application node (forming a virtual node) constructed by software will have the operation authority of all the physical nodes, and a virtual consortium type blockchain will be constructed. In addition, by configuring the application node (forming a virtual node) to have two or more authority hierarchies, it becomes possible to perform complex operation of the real node.

[0052] Furthermore, like the data management structure using the blockchain of the present invention, if a type of blockchain that can be expressed as a virtual consortium chain is constructed with two or more authority hierarchies based on a private chain and configured by setting application nodes (forming virtual nodes), even if an external attack that steals a private key occurs and the digital assets of the address in question are leaked, the authority of a higher hierarchy can take measures such as stopping the fraudulent address and returning the leaked assets. Furthermore, for services in a closed environment, it is efficient to implement functions in a private chain, and a closed environment based on a private chain makes it possible to operate and manage private keys in a network-connected environment such as a hot wallet. As a result, there will be no need to manage complex private keys as with public chains, making it easier for small businesses such as SMEs to use blockchain-based services.

[0053] Furthermore, like the data management structure using the blockchain of the present invention, if the structure has an administrator process forced execution permission means that permits an instruction to force execution of processing based on the second authority (administrator authority) in the second participant application node when a specified operation is received by multiple participants with administrator authority among the multiple participants participating in the operation and management of the participant application node, it will be possible to prevent fraudulent processing due to betrayal or the like by any of the multiple participants (companies, etc.) with administrator authority.

[0054] In addition, in the data management structure using the blockchain of the present invention, preferably, the second smart contract has a first smart contract for data backup having a function of dividing and saving data operated and managed by the physical node and recorded in the blockchain to an external data saving area using secret sharing technology. In this way, even if the physical node is destroyed, it is possible to restore the data using the distributed and saved data. Also, if secret sharing technology is used to split and save data to external data save areas, the storage location information for the data fragments is distributed over a very wide area, making it difficult to destroy the data through cyber attacks.

[0055] In addition, in the data management structure using the blockchain of the present invention, preferably, the second smart contract has a second data backup smart contract having a function of saving data operated and managed by the physical node and recorded in the blockchain to a specified save area on an external public chain. In this way, even if the physical node is destroyed, it is possible to restore the data using the data saved in a specified save area on the external public chain. Also, by saving the data in a specified save area on the external public chain, it is possible to make it difficult to tamper with or destroy the saved data. Note that the data recovery process using the data saved in the save area takes time and is not a real-time process, so there is no time hindrance caused by using a public chain to save the data.

[0056] In addition, the data management structure using the blockchain of the present invention preferably comprises a multi-sig processing control means, in which the administrator processing forced execution permission means permits an instruction to force execution of the processing based on the second authority (administrator authority), on the condition that a signature is issued using a private key held by each of a plurality of participants who have administrator authority among a plurality of participants participating in the operation and management of the participant application node. In this way, it is possible to prevent fraudulent processing due to betrayal or the like by any of a plurality of participants (such as companies) who have administrator authority.

[0057] In addition, in the data management structure using the blockchain of the present invention, preferably, the administrator processing forced execution permission means comprises a private key backup smart contract having a function of dividing and saving data constituting one private key to an external data saving area using secret sharing technology, and a private key regeneration means for generating a secret sharing index and regenerating the private key, on the condition that a plurality of participants who have administrator authority among a plurality of participants participating in the operation and management of the participant application node confirm their identity via biometric authentication. In this way, it is possible to prevent fraudulent processing due to betrayal by any of multiple participants (such as companies) who have administrator authority, without using a multisig processing control means. Also, if the system is configured to have a private key regeneration means that generates a secret sharing index and regenerates the private key, subject to identity verification via biometric authentication, it becomes unnecessary to manage an index of storage location information for data fragments into which data constituting the private key is divided, and it becomes possible to eliminate the management burden of the private key on multiple participants who have administrator authority.

[0058] Therefore, according to the present invention, a distributed data management and processing method for dealing with data tampering and vandalism due to vulnerabilities in encryption, etc., can be obtained that does not cause problems with inconsistency in processing, speeds up real-time processing performance, is free of centralized processing risks, has public characteristics, reduces operational and management costs such as monitoring and response, maintains good performance of the entire system regardless of the presence of physical nodes with low performance (hardware processing, communication speed, etc.), eliminates risks such as data leakage, reliably protects data, and reduces the operational burden of private keys, making it easier for small business entities such as small and medium-sized enterprises to use blockchain-based services. Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

[0059] First embodiment FIG. 1 is an explanatory diagram showing an outline of the overall configuration of a data management structure using a blockchain according to a first embodiment of the present invention, and FIG. 2 is an explanatory diagram showing in more detail the data management structure using the blockchain of FIG. 1, divided into a physical layer and an application layer. The data management structure using blockchain in the first embodiment includes a distributed ledger in at least one type of distributed technology such as blockchain, and a smart contract or a server application for performing predetermined processing using data managed in the distributed ledger, and is constructed based on a private chain as shown in FIG. 1.

[0060] A private chain, for example, includes physical nodes 101 to 10 as shown in FIG. n (where n is a positive integer) and 10 physical nodes m (where m is an integer between 1 and n) and includes a plurality of participant application nodes 11 and a plurality of smart contract application nodes 12.

[0061] Physical nodes 101 to 10 n (where n is a positive integer) is a node for recording and managing data, as shown in FIG. 3, and is composed of devices such as application nodes 11, 12, etc., as well as servers equipped with data storage means (symbol omitted) and communication means (symbol omitted) managed by a specific administrator 50.

[0062] The multiple participant application node 11 includes, for example, multiple participants 601 to 605 different from the administrator 50 of the physical node, as shown in FIG. X (however, X A virtual node is a node that controls the operation of a physical node and is operated and managed by a virtual machine (where virtual machine is an integer of 2 or more). It is configured as a virtual node built by software, and there are 10 physical nodes. m (where m is an integer between 1 and n) and has a first participant application node 11a and a second participant application node 11b. The first participant application node 11a is configured to have a first authority (user authority) to instruct the execution of processes such as setting addresses, generating and retiring tokens, moving tokens, recording data, and recording data movement. The second participant application node 11b is configured to have the above-mentioned first authority (user authority) and, as an authority at a higher level than the first authority (user authority), a second authority (administrator authority) that instructs the forced execution of processes related to the operation and management of all physical nodes that make up the private chain (such as forced suspension of addresses, forced transfer of tokens, data backup, data rollback, and freezing, deletion, and restoration of addresses).

[0063] The multiple smart contract application nodes 12 are nodes for executing a predetermined process via a predetermined smart contract in accordance with an execution instruction of the predetermined process in the participant application node 11, as shown in FIG. 5, for example, and are configured as virtual nodes constructed by software, and are physical nodes 10 m (where m is an integer between 1 and n) as a unit, and has a first smart contract 12a and a second smart contract 12b. The first smart contract 12a is configured to have the function of performing processes such as setting addresses, generating and retiring tokens, transferring tokens, recording data, and recording data transfers in accordance with instructions to execute processes based on the above-mentioned first authority (user authority). The second smart contract 12b executes the process based on the second authority (administrator authority) in accordance with the instruction to execute the process. n (where n is a positive integer) operation and management (such as forced suspension of addresses, forced token movement, data backup, data rollback, and freezing, deletion, and restoration of addresses).

[0064] In addition, the second smart contract 12b is, for example, as shown in FIG.n The data is operated and managed by the first smart contract 12b1 (where n is a positive integer) and recorded in the blockchain, and the data is divided and saved to an external data saving area using secret sharing technology.

[0065] Alternatively, the second smart contract 12b may be, for example, a set of physical nodes 101 to 10 as shown in FIG. n (where n is a positive integer) and has a second data backup smart contract 12b2 that has a function of evacuating data that is operated and managed by the blockchain and recorded in the blockchain to a specified evacuation area on an external public chain.

[0066] Furthermore, the data management structure using the blockchain of the first embodiment has an administrator process forced execution permission means 13. The manager process forcibly executing permission means 13 is, for example, as shown in FIG. 8, a plurality of participants 601 to 605 who participate in the operation and management of the participant application node 11. X (however, X When a specified operation is received from a plurality of participants 601 to y (where y is an integer greater than or equal to 2 and y≦x) who have administrator authority among the plurality of participants 601 to y (where y is an integer greater than or equal to 2 and y≦x), the second participant application node 11b is configured to permit an instruction to forcibly execute processing based on the second authority (administrator authority) in the second participant application node 11b (operation and management of all physical nodes that construct the private chain (forced suspension of addresses, forced token movement, data backup, data rollback, freezing, deletion, restoration of addresses, etc.)).

[0067] More specifically, the manager process forcibly executing permission means 13, for example, as shown in FIG. 9, is a function of a plurality of participants 601 to 605 who participate in the operation and management of the participant application node 11. X (however, Xand a multisig process control means 13a which permits an instruction to forcibly execute the process based on the second authority (administrator authority) on the condition that a signature is made by a plurality of participants 601 to y (where y is an integer equal to or greater than 2 and y≦x) who have administrator authority among the participants 601 to y (where y is an integer equal to or greater than 2 and y≦x) using a private key held by each of them.

[0068] The administrator process forced execution permission means 13 includes, for example, a private key backup smart contract 13b having a function of dividing and saving data constituting one private key to an external data saving area using a secret sharing technique, and a plurality of participants 601 to 605 participating in the operation and management of the participant application node 11, as shown in FIG. X (however, X and a private key regeneration means 13c for generating a secret sharing index and regenerating a private key, on the condition that identity verification is performed via biometric authentication by a plurality of participants 601 to y (where y is an integer equal to or greater than 2 and y≦x) who have administrator authority among the participants 601 to y (where y is an integer equal to or greater than 2 and y≦x).

[0069] In the data management structure using the blockchain of this embodiment, due to these characteristic configurations, for example, as shown in Figs. 11 and 12, two levels of authority are granted, and multiple specific administrators (multiple participants 601 to 605 different from the administrator 50 of the physical node) can manage the data. X (however, X For example, a virtual consortium type blockchain as shown in FIG. 2 is constructed in which multiple participants 601 to y (where y is an integer equal to or greater than 2) who have administrator authority operate real nodes out of the total participants 601 to y (where y is an integer equal to or greater than 2 and y≦x).

[0070] The processing using the data management structure using the blockchain of this embodiment with such a configuration will be described. Normal processing In normal processing, multiple participants 601 to 605 who are different from the administrator 50 of the physical node X (however, XWhen a first participant application node 11a having a first authority (user authority) (wherein c is an integer greater than or equal to 2) instructs the execution of processes such as setting an address, generating and retiring tokens, moving tokens, recording data, and recording data movement, the first smart contract 12a performs processes such as setting an address, generating and retiring tokens, moving tokens, recording data, and recording data movement in accordance with the instructions to execute processes based on the first authority (user authority).

[0071] In addition, as a periodic process, multiple participants X (however, X When a number of participants 601 to y (where y is an integer greater than or equal to 2) with administrative authority among the first participant 601 to y (where y is an integer greater than or equal to 2 and y≦x) instruct, through the second participant application node 11b with the second authority (administrator authority), to forcibly execute processing such as data backup for the operation and management of all physical nodes that make up the private chain, the second smart contract 12b forcibly executes processing such as data backup in accordance with the instruction to forcibly execute processing based on the second authority (administrator authority). The second smart contract 12b performs, for example, a backup of the physical nodes 101 to 10 n (where n is a positive integer) and the data recorded in the blockchain is divided and evacuated to an external data evacuation area using secret sharing technology. Alternatively, the second smart contract 12b may be configured to back up the data in another form, for example, the physical nodes 101 to 10 n (where n is a positive integer) and the data recorded on the blockchain is evacuated to a designated evacuation area on an external public chain.

[0072] When instructing to forcibly execute a process based on the second authority (administrator authority), the administrator process forcible execution permission means 13 permits the instruction to forcibly execute a process based on the second authority (administrator authority) in the second participant application node 11b. More specifically, the manager process forcibly executing permission means 13 may be implemented, for example, by a plurality of participants 601 to 605 who participate in the operation and management of the participant application node 11. X (however, X When a signature is made by a plurality of participants 601 to y (where y is an integer greater than or equal to 2 and y≦x) who have administrator authority among the participants 601 to y (where y is an integer greater than or equal to 2 and y≦x) using their own private keys, an instruction to forcibly execute the process based on the second authority (administrator authority) is permitted. Alternatively, as another embodiment, the administrator process forced execution permission means 13 may, for example, have the private key backup smart contract 13b split and save data constituting one private key in an external data save area using secret sharing technology, and when the private key regeneration means 13c confirms the identity of multiple participants 601 to y (where y is an integer equal to or greater than 2 and y≦x) who have administrator authority via biometric authentication, generate a secret sharing index and regenerate the private key. This allows an instruction to forcefully execute the process based on the second authority (administrator authority).

[0073] Emergency Response In emergency processing, such as when a physical node is destroyed, multiple participants X (however, X When a number of participants 601 to y (where y is an integer greater than or equal to 2) with administrative authority among the first and second participants 601 to y (where y is an integer greater than or equal to 2 and y≦x) give an instruction from the second participant application node 11b with the second authority (administrator authority) to forcibly execute processes such as forced suspension of addresses, forced transfer of tokens, rollback of data, and freezing, deletion, and restoration of addresses as part of the operation and management of all physical nodes that constitute the private chain, the second smart contract 12b forcibly executes processes such as forced suspension of addresses, forced transfer of tokens, rollback of data, and freezing, deletion, and restoration of addresses in accordance with the instruction to forcibly execute processes based on the second authority (administrator authority).

[0074] When instructing to forcibly execute a process based on the second authority (administrator authority), the administrator process forcible execution permission means 13 permits the instruction to forcibly execute a process based on the second authority (administrator authority) in the second participant application node 11b, as described above. The specific form of permission given by the administrator process forcible execution permission means 13 is the same as described above.

[0075] Effects of this embodiment According to the data management structure using the blockchain of this embodiment, a private chain is used as a base, and multiple specific administrators (multiple participants 601 to 605 different from the administrator 50 of the physical node) who are granted multiple levels of authority in the application nodes 11 and 12 (forming virtual nodes) are managed by the application nodes 11 and 12. X (however, X If a virtual consortium type blockchain is constructed in which multiple participants 601 to y (where y is an integer greater than or equal to 2 and y≦x) who have administrative authority among the multiple participants 601 to y (where y is an integer greater than or equal to 2 and y≦x) operate real nodes, it will be possible to maintain good real-time processing speed and, moreover, the public nature of the blockchain will not be diminished.

[0076] In addition, according to the data management structure using the blockchain of this embodiment, a private chain can be managed by a specific administrator (a plurality of participants 601 to 605 who are different from the administrator 50 of the physical node). X (however, X The physical nodes 101 to 104 for recording and managing data are managed by a plurality of participants 601 to y (where y is an integer of 2 or more) who have authority as administrators among the participants 601 to y (where y is an integer of 2 or more and y≦x). n (where n is a positive integer) and 10 physical nodes m (where m is an integer between 1 and n) X (however, X 10 physical nodes operated and managed by the n(n is a positive integer) and a plurality of smart contract application nodes 12 for executing a predetermined process via a predetermined smart contract in accordance with an execution instruction of the predetermined process in the participant application node 11. n (where n is a positive integer) are designed together, and each physical node 101 to 10 n (where n is a positive integer) can balance the performance of the physical nodes 101 to 102, reducing the operation and management costs for monitoring and response. n (where n is a positive integer) will not affect the entire system.

[0077] In addition, according to the data management structure using the blockchain of this embodiment, each participant application node 11 has a first participant application node 11a having a first authority (user authority) for instructing the execution of processes such as address setting, token generation / redemption, token movement, data recording, and data movement recording, and all physical nodes 101 to 102 that construct a private chain as the first authority (user authority) and an authority at a higher level than the first authority (user authority). n (where n is a positive integer) operation and management (such as forced address suspension, forced token transfer, data backup, data rollback, and address freezing, deletion, and restoration), and each smart contract application node 12 has a first smart contract 12a having a function of performing processes such as address setting, token generation and retirement, token transfer, data recording, and data transfer recording in accordance with an instruction to execute a process based on the first authority (user authority), and all physical nodes 101 to 10 n(where n is a positive integer) and a second smart contract 12b having a function of forcibly executing processes regarding operation and management (such as forced address suspension, forced token movement, data backup, data rollback, and address freezing, deletion, and restoration) of the smart contract application node 12 (forming a virtual node), which is constructed by software, and X (however, X Among the participants 601 to y (where y is an integer of 2 or more) who have authority as administrators, the participants 601 to y (where y is an integer of 2 or more and y≦x) substantially control all of the physical nodes 101 to 10 n (where n is a positive integer) will have the operational authority, and a virtual consortium type blockchain will be constructed. By configuring the application nodes 11 and 12 (which form virtual nodes) to have a two-level or multiple authority levels, complex operation of real nodes will be possible.

[0078] Furthermore, according to the data management structure using the blockchain of this embodiment, a type of blockchain that can be expressed as a virtual consortium chain is constructed with two or more authority hierarchies based on a private chain by setting the application nodes 11 and 12 (forming virtual nodes), so even if an external attack that steals a private key occurs and the digital assets of the address are leaked, the authority of a higher hierarchy (administrator authority) can take measures such as stopping the illegal address and returning the leaked assets. Furthermore, for services in a closed environment, it is efficient to implement functions in a private chain, and the closed environment based on a private chain allows private keys to be operated and managed in a network-connected environment such as a hot wallet. As a result, there will be no need to manage complex private keys as with public chains, making blockchain-based services easier to use for small business entities such as SMEs.

[0079] In addition, according to the data management structure using the block chain of this embodiment, a plurality of participants 601 to 605 who participate in the operation and management of the participant application node 11 are X (however, X The system is configured to include an administrator process forced execution permission means 13 that permits an instruction to forcibly execute a process based on the second authority (administrator authority) in the second participant application node 11b when a predetermined operation is received from a plurality of participants 601 to y (where y is an integer equal to or greater than 2 and y≦x) who have administrator authority among the plurality of participants (companies, etc.) 601 to y (where y is an integer equal to or greater than 2 and y≦x), thereby preventing fraudulent processing due to betrayal or the like by any of the participants.

[0080] In addition, according to the data management structure using the blockchain of this embodiment, the second smart contract 12b is n (where n is a positive integer) and the data recorded in the blockchain is divided and saved to an external data saving area using a secret sharing technique. n (n is a positive integer) is destroyed, the data can be restored using the distributed data. In addition, by using secret sharing technology to divide and evacuate data to external data evacuation areas, the storage location information for the data fragments is distributed over a very wide area, making it difficult to destroy the data through cyber attacks.

[0081] In addition, according to the data management structure using the blockchain of this embodiment, the second smart contract 12b is n (where n is a positive integer) and the data recorded in the blockchain is operated and managed by the second data backup smart contract 12b2, which has a function of saving the data to a predetermined save area on an external public chain.n (where n is a positive integer) is destroyed, it is possible to restore the data using data saved in a specified save area on an external public chain. Also, by saving the data to a specified save area on an external public chain, it is possible to make it difficult to tamper with or destroy the saved data. Note that the data restoration process using the data saved in the save area takes time and is not a real-time process, so there is no time hindrance in using a public chain to save the data.

[0082] In addition, according to the data management structure using the block chain of this embodiment, the administrator process compulsory execution permission means 13 is provided to the multiple participants 601 to 605 who participate in the operation and management of the participant application node 11. X (however, X The system is configured with a multisig process control means 13a that permits an instruction to forcibly execute the process based on the second authority (administrator authority), provided that a signature is made using a private key held by each of multiple participants 601 to y (where y is an integer greater than or equal to 2 and y≦x) who have administrator authority among the multiple participants (companies, etc.) 601 to y (where y is an integer greater than or equal to 2 and y≦x).This makes it possible to prevent fraudulent processing due to betrayal, etc., by any of the participants.

[0083] In addition, according to the data management structure using the blockchain of this embodiment, the administrator process forced execution permission means 13 includes a private key backup smart contract 13b having a function of dividing and saving data constituting one private key to an external data saving area using a secret sharing technique, and a plurality of participants 601 to 605 who participate in the operation and management of the participant application node 11. X (however, Xand a private key regeneration means 13c for generating a secret sharing index and regenerating a private key on the condition that identity confirmation is made via biometric authentication by a plurality of participants 601 to y (where y is an integer equal to or greater than 2) who have authority as an administrator among the plurality of participants (such as companies) 601 to y (where y is an integer equal to or greater than 2 and y≦x). This makes it possible to realize prevention of fraudulent processing due to betrayal or the like of any of the participants among the plurality of participants (such as companies) 601 to y (where y is an integer equal to or greater than 2 and y≦x) who have authority as an administrator, without using a multisig processing control means 13a. In addition, since the configuration includes a private key regeneration means 13c for generating a secret sharing index and regenerating a private key on the condition that identity confirmation is made via biometric authentication, index management of storage destination information of data fragments obtained by dividing data constituting a private key is not required, and the burden of managing the private key on the plurality of participants 601 to y (where y is an integer equal to or greater than 2 and y≦x) who have authority as an administrator can be eliminated.

[0084] Therefore, according to this embodiment, as a distributed data management and processing method for dealing with data tampering and vandalism due to vulnerabilities in encryption, etc., it is possible to obtain a data management structure using blockchain that can achieve fast real-time processing performance without the problem of processing inconsistency, is free of centralized processing risks, has public characteristics, reduces operational and management costs such as monitoring and response, maintains good performance of the entire system regardless of the presence of physical nodes with low performance (hardware processing, communication speed, etc.), eliminates risks such as data leakage, reliably protects data, and reduces the operational burden of private keys, making it easier for small business entities such as small and medium-sized enterprises to use blockchain-based services.

[0085] Although the preferred embodiments of the present invention have been described in detail above, the present invention is not limited to the above-described embodiments, and various modifications and substitutions can be made to the above-described embodiments without departing from the scope of the present invention. [Industrial Applicability]

[0086] The data management structure using the blockchain of the present invention is useful, for example, in fields that provide services using the blockchain. [Explanation of symbols]

[0087] 101~10 n Physical Node 11 Participant Application Node 11a Application node for the first participant 11b Second Participant Application Node 12 Application Node for Smart Contracts 12a First Smart Contract 12b Second Smart Contract 12b1 First Data Backup Smart Contract 12b2 Second Data Backup Smart Contract 13. Administrator process execution enforcement permission method 13a Multisig Processing Control Means 13b Smart contract for private key backup 13c Private key regeneration means 50 Physical Node Administrators 601~ X Multiple participants different from the administrators of the physical nodes 601~y Multiple participants with administrator privileges

Claims

1. A data management structure using a blockchain, which is constructed by including at least one distributed ledger in a blockchain or other distributed ledger technology, and a smart contract and a server application that perform a predetermined process using data managed in the distributed ledger, The blockchain is constructed based on a private chain, The private chain comprises a physical node that is managed by a specific administrator and records and manages data, a plurality of participant application nodes that control the operation of the physical node and a plurality of smart contract application nodes that are operated and managed by a plurality of participants different from the administrator of the physical node and are provided for each physical node, and that execute a predetermined process via a predetermined smart contract in accordance with an execution instruction of a predetermined process in the participant application node, Each of the participant application nodes comprises a first participant application node having a first authority (user authority) to instruct the execution of processes such as setting an address, generating a token, retiring a token, moving a token, recording data, and recording data movement, and a second participant application node having a second authority (administrator authority) to instruct the forced execution of processes related to the operation and management of all of the physical nodes that construct the private chain (forced suspension of addresses, forced movement of tokens, data backup, data rollback, and freezing, deleting, or restoring addresses) as the first authority (user authority) and a higher hierarchical authority than the first authority (user authority), Each of the smart contract application nodes has a first smart contract having a function of making the smart contract application node perform processes such as setting an address, generating a token, amortizing a token, moving a token, recording data, and recording data movement, in accordance with an instruction to execute a process based on the first authority (user authority), and a second smart contract having a function of making the smart contract application node forcibly execute processes related to the operation and management of all of the physical nodes that construct the private chain (forced suspension of an address, forced movement of a token, data backup, data rollback, and freezing, deleting, or restoring an address), in accordance with an instruction to force execution of a process based on the second authority (administrator authority); Furthermore, the data management structure using the blockchain includes an administrator process forced execution permission means for allowing the physical node to issue an instruction to forcibly execute a process based on the second authority (administrator authority) in the second participant application node when a predetermined operation is received from a plurality of participants who have administrator authority among a plurality of participants who participate in the operation and management of the participant application node, A data management structure using blockchain, characterized in that a virtual consortium-type blockchain is constructed in which real nodes are operated by multiple specific administrators who are granted multiple levels of authority, with a configuration having the participant application node, the smart contract application node, and the administrator processing forced execution permission means.

2. The data management structure using blockchain described in claim 1, characterized in that the second smart contract has a first data backup smart contract that has a function of dividing and saving data operated and managed by the physical node and recorded in the blockchain to an external data saving area using secret sharing technology in the smart contract application node.

3. The data management structure using a blockchain as described in claim 1, characterized in that the second smart contract has a second data backup smart contract that has a function of causing the smart contract application node to evacuate data operated and managed by the physical node and recorded in the blockchain to a specified evacuation area on an external public chain.

4. The data management structure using blockchain described in any one of claims 1 to 3, characterized in that the administrator process forced execution permission means comprises a multi-sig process control means that permits an instruction to force execution of the process based on the second authority (administrator authority), on the condition that a signature is made using a private key held by each of a plurality of participants who have administrator authority among a plurality of participants participating in the operation and management of the participant application node.

5. The data management structure using blockchain described in any one of claims 1 to 3, characterized in that the administrator processing forced execution permission means comprises: a private key backup smart contract having a function of dividing and saving data constituting one private key to an external data saving area in the smart contract application node using secret sharing technology; and a private key regeneration means for generating a secret sharing index and regenerating a private key, on the condition that a plurality of participants who have administrator authority among a plurality of participants participating in the operation and management of the participant application node confirm their identity via biometric authentication.

Images