Test Data Certification System

Abstract

To provide a test data verification system that can indirectly prove the identity between test data at the time it is sent from a data verification server to a test data storage server and test data stored in the test data storage server.SOLUTION: A test file hash value of a test file containing test data at the time it is sent from a data verification server to a test data storage server is compared to a test file hash value contained in a time-authenticated time stamp token. If those test file hash values are identical, then it can be indirectly proven that the test data stored in a test data storage unit of the test data storage server is identical to the test data at the time of time authentication (that is, it has not been tampered with).SELECTED DRAWING: Figure 7

Description

[Technical field]

[0001] The present invention relates to a test data certification system that indirectly certifies the identity of test data relating to a specified test and the test data stored in a database that stores test data, and in particular to a clinical trial data certification system that indirectly certifies the identity of clinical trial data of a patient entered by a doctor or the like and the clinical trial data of the patient stored in an EDC database. [Background technology]

[0002] Conventionally, clinical data collection systems (EDC systems) for collecting clinical trial data have been proposed. For example, Patent Document 1 discloses an EDC system that operates a computer as a consistency verification means for verifying the consistency of dates between a comparison source date item and a comparison destination date item by comparing the date of a comparison source date item, which is a date item to be verified, with the date of a comparison destination date item, which is a date item other than the comparison source date item, based on consistency definition information that structures and describes constraints on the relationship between dates between date items included in medical information. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2019-8511 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, in the above-mentioned EDC system, data is constantly being added and updated, which means that it is not possible to time-authenticate the medical data stored in the EDC database using a timestamp or other method (to prove that the data existed at a certain time or that the data has not been tampered with).

[0005] In view of the above-mentioned circumstances, an object of the present invention is to provide a test data certification system that indirectly proves the identity of test data related to a specified test with the test data stored in a database that stores the test data. [Means for solving the problem]

[0006] The inventors of the present invention have conducted intensive research and development into the above-mentioned problems, and as a result have discovered the following revolutionary test data certification system.

[0007] A first aspect of the present invention for solving the above problem is a test data certification system in which a data input terminal into which test data relating to a predetermined test is input, a data output terminal which displays the test data based on request information related to the input test data, a data verification server, a time stamp server, and a test data storage server are all connected via a network, and indirectly certifies the integrity of test data stored in the test data storage server using public key cryptography that utilizes predetermined private key information and public key information corresponding to the predetermined private key information, wherein the data verification server includes a test file creation unit which creates a test file from the test data transmitted from the data input terminal, an index information creation unit which creates index information for identifying the test file, a data transmission unit which transmits the test data and the index information to the test data storage server, a hashing unit which hashes the test file to create a test file hash, and a time stamp server which transmits the test file hash to a time stamp server, and the time stamp server digitally signs the time information and the test file hash with the predetermined private key information to generate a time stamp value which is time stamp authenticated. and a time stamp token including public key information; a memory unit for storing a test file, index information related to the test file, and a time stamp token related to the test file; a test data related information extraction unit for extracting a test file including test data related to the request information and a time stamp token from the memory unit based on the index information of the test file including the test data related to the request information; a pre-time-authentication test file hash extraction unit for extracting a test file hash from a time authentication value included in the time stamp token based on the public key information included in the time stamp token extracted by the test data related information extraction unit; a comparison test file creation unit for hashing the test file extracted by the test data related information extraction unit to create a comparison test file hash; and a test file hash comparison unit for comparing the comparison test file hash with the test file hash extracted by the pre-time-authentication test file hash extraction unit, creating comparison information indicating whether they are identical or not and sending the comparison information to a data output terminal.a test data storage unit that stores the test data and index information transmitted from the test file transmission unit, and a test data extraction unit that extracts, based on request information, the test data related to the request information and index information of the test file including the test data; a time stamp authentication server that adds time information to a test file hash and then authenticates the time by digitally signing the test file with private key information, and creates a time stamp token to which public key information is added; and a data output terminal that has an input unit that inputs the request information, a test data acquisition unit that transmits the request information to the test data storage server and acquires the test data related to the request information and index information including the test data from the test data storage server, an index information transmission unit that transmits the index information acquired by the test data acquisition unit to a data verification server, and a display unit that displays the collation information generated by the test file hash collation unit and the test data.

[0008] Here, the term "predetermined test" refers not only to tests in the natural sciences such as engineering, physics, and medicine, but also to tests in various other fields, and is a concept that includes, for example, clinical trials.

[0009] According to the first aspect, it is possible to indirectly prove the identity of the test data at the time of transmission from the data verification server to the test data storage server and the test data stored in the test data storage unit.

[0010] A second aspect of the present invention is a test data certification system in which a data input terminal into which test data relating to a predetermined test is input, a data output terminal which displays the test data based on request information related to the input test data, a data verification server, a time stamp server, and a test data storage server are all connected via a network, and indirectly certifies the integrity of the test data stored in the test data storage server using public key cryptography that utilizes predetermined private key information and public key information corresponding to the predetermined private key information. The data verification server includes a test file creation unit which creates a test file from the test data transmitted from the data input terminal, an index information creation unit which creates index information for identifying the test file, a data transmission unit which transmits the test data and the index information to the test data storage server, a hashing unit which hashes the test file to create a test file hash, and a time stamp server which transmits the test file hash to a time stamp server and transmits a time stamp value which is time stamped by the time stamp server by electronically signing the time stamp information and the test file hash with the predetermined private key information, and a public key. a memory unit for storing a test file, index information related to the test file, and a time stamp token related to the test file; a test data related information extraction unit for extracting a test file including test data related to the request information and a time stamp token from the memory unit based on the index information of the test file including the test data related to the request information; a pre-time-authentication test file hash extraction unit for extracting a test file hash from the time authentication value included in the time stamp token based on public key information included in the time stamp token extracted by the test data related information extraction unit; a comparison test file creation unit for hashing the test file extracted by the test data related information extraction unit to create a comparison test file hash; and a test file hash comparison unit for comparing the comparison test file hash with the test file hash extracted by the pre-time-authentication test file hash extraction unit, creating comparison information indicating whether they are identical or not and transmitting the comparison information to the data storage server.a test data storage unit that stores the test data and index information transmitted from the data transmission unit, a test data extraction unit that extracts, based on request information, test data related to the request information and index information of a test file including the test data, an index information transmission unit that transmits the index information extracted by the test data extraction unit to a data verification server, and a verification information etc. transmission unit that transmits the verification information and test data created by the test file hash verification unit to a data output terminal, the time stamp server has a token creation unit that adds time information to the test file hash, and then performs time authentication by digitally signing with private key information, and creates a time stamp token to which public key information is added, and the data output terminal has an input unit that inputs the request information, a test data acquisition unit that transmits the request information to the test data storage server and obtains test data related to the request information from the test data storage server, and a display unit that displays the verification information and test data transmitted by the verification information etc. transmission unit.

[0011] According to the second aspect, it is possible to indirectly prove the identity of the test data at the time of transmission from the data verification server to the test data storage server and the test data stored in the test data storage unit.

[0012] A third aspect of the present invention is a test data certification system described in the first or second aspect, characterized in that the test file creation unit creates a test file by combining multiple test data transmitted from a data input terminal.

[0013] According to the third aspect, the frequency of creating timestamp tokens can be reduced, thereby reducing the cost associated with time authentication.

[0014] A fourth aspect of the present invention is a test data certification system described in the first or second aspect, characterized in that the test data storage unit stores the test data and index information transmitted from the data transmission unit in a read-only manner.

[0015] According to the fourth aspect, the test data storage unit can store the test data and index information in a read-only manner, so that the information will not be changed. As a result, the proof of the integrity of the test data can be improved.

[0016] In the present invention, the terms "database," "system," "unit," and "means" do not simply mean physical means, but also include cases where the functions of the "database," "system," "unit," and "means" are realized by software. Also, the functions of one "database," "system," "unit," or "means" may be realized by two or more physical means or devices, and the functions of two or more "databases," "systems," "units," or "means" may be realized by one physical means or device. [Brief description of the drawings]

[0017] [Figure 1] FIG. 1 is a schematic conceptual diagram of a test data certification system according to the first embodiment. [Diagram 2] FIG. 2 is a table showing an example of test data according to the first embodiment. [Diagram 3] FIG. 3 is a schematic conceptual diagram of the data verification server according to the first embodiment. [Figure 4] FIG. 4 is a schematic conceptual diagram of the test data storage server according to the first embodiment. [Diagram 5] FIG. 5 is a schematic conceptual diagram of the data output terminal according to the first embodiment. [Figure 6] FIG. 6 is a flowchart showing the operation of the test data certification system according to the first embodiment regarding test data registration. [Figure 7] FIG. 7 is a flowchart showing the operation of the test data certification system according to the first embodiment with respect to the display of test data. [Figure 8] FIG. 8 is a schematic conceptual diagram of a data verification server according to the second embodiment. [Figure 9]FIG. 9 is a schematic conceptual diagram of a test data storage server according to the second embodiment. [Figure 10] FIG. 10 is a schematic conceptual diagram of a data output terminal according to the second embodiment. [Figure 11] FIG. 11 is a flowchart showing the operation of the test data certification system according to the second embodiment with respect to the display of test data. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0018] An embodiment of the test data certification system according to the present invention will be described below with reference to the accompanying drawings. In the following, a test data certification system using clinical data as test data will be described as an example. Note that the present invention is not limited to the following embodiment. (Embodiment 1)

[0019] 1 is a schematic conceptual diagram of a test data certification system according to the present embodiment. As shown in this figure, the test data certification system 1 is composed of a data input terminal 10, a data verification server 20, a test data storage server (EDC server) 30, a data output terminal 40, and a time authentication server 100, which are connected via a network 50.

[0020] In this embodiment, there is one each of the data input terminal 10, data verification server 20, data output terminal 40, and time stamp server 100, but it goes without saying that there may be a plurality of each.

[0021] The data input terminal 10 is not particularly limited as long as it allows a doctor or the like to input the test data 311 and transmits the test data 311 to the data verification server 20 via the network 50. An example of the data input terminal 10 is a personal computer.

[0022] Here, the test data 311 is not particularly limited as long as it is information on a patient obtained by a clinical trial. Examples of the test data 311 include basic information such as the patient's date of birth, sex, date of measurement, height, weight, presence or absence of allergies, details of allergies, medical history of malignant tumors within three years prior to obtaining consent, interview regarding familial tumors, disease information, medical history and complications of eyes, and information regarding medical history and complications of systemic diseases.

[0023] Specifically, the test data 311 is, for example, a combination of body temperature data of patients as shown in FIG. 2(a). Here, "Patient A", "Patient B", and "Patient C" in FIG. 2(a) are unique identification numbers or the like indicating specific patients, and based on these, the patient of the body temperature data (the patient linked to the body temperature data) can be identified. Note that FIG. 2(a) gives an example of the test data 311 in which only the body temperature data of each patient is combined, but multiple test data such as the patient's date of birth, sex, date of measurement, height, weight, and the presence or absence of allergies may be collected for each patient and combined, or as shown in FIG. 2(b), if the format of the test data 311 is determined (if the location of the test data of each patient is determined), only the body temperature data may be combined. Note that the test data 311 may be not only a combination of data of multiple patients as described above, but may also be composed of individual test data for each patient.

[0024] Next, the data verification server 20 will be described. Fig. 3 is a schematic conceptual diagram of the data verification server 20 according to this embodiment. As shown in this figure, the data verification server 20 has a test file creation unit 21, an index information creation unit 22, a data transmission unit 23, a hashing unit 24, a time authentication unit 25, a test data related information extraction unit 26, a pre-time authentication test file hash extraction unit 27, a comparison test file creation unit 28, a test file hash comparison unit 29, and a storage unit 200.

[0025] The test file creation unit 21 is not particularly limited as long as it can create the test file 201 from the test data 311 transmitted from the data input terminal 10. Here, the test file creation unit 21 may, for example, make the test data 311 into the test file 201 as it is, or may create the test file 201 by further combining the test data 311 in which a plurality of test data are combined (here, the test data 311 refers to a combination of a plurality of test data). That is, the test file creation unit 21 may create one test file 201 from one test data 311, or may create a test file 201 consisting of more test data 311. By combining a plurality of test data 311 to create the test file 201, the number of times to perform time authentication, which will be described later, can be reduced. As the test file creation unit 21, for example, a program having such a function can be given.

[0026] The index information creating unit 22 is not particularly limited as long as it can create the index information 202 for identifying the test file 201 containing the test data 311 .

[0027] Here, the index information 202 is not particularly limited as long as it is information that can identify the test file 201 that contains the test data 311. For example, in the case of the test file 201 shown in Fig. 2(a), the index information 202 may be the file name of the test file 201 that contains the body temperature "36.1" that is the test data 311 of "Patient A". That is, in this case, the index information 202 of a certain test file 201 includes the file name of the test file 201 and information such as the patient identification number included in the test file 201.

[0028] Therefore, for example, when "Patient A" and "Body temperature" are specified as request information described later, the index information 202 identifies the file name containing the information on "body temperature" of "Patient A," and therefore the test file 201 containing the body temperature "36.1," which is the test data 311 of "Patient A," can be specified. Note that the index information 202 may include the time when the data verification server 20 received the test file 201, or the time when the test file 201 was created by combining multiple test data 311. By including these times, search by time becomes possible.

[0029] The data transmission unit 23 is not particularly limited as long as it can transmit the test data 311 and the index information 202 to the test data storage server 30. As the data transmission unit 23, for example, a program having such a function can be mentioned.

[0030] The hashing unit 24 is not particularly limited as long as it can hash the test file 201 to generate a test file hash. As the hashing unit 24, for example, a program having such a function can be mentioned.

[0031] The time stamping unit 25 is not particularly limited as long as it can transmit the test file hash to the time stamping server 100 and receive a time stamp token 203 including a time stamp value obtained by time stamping the time information and the test file hash by digitally signing them with predetermined private key information from the time stamping server 100, and public key information. Here, the time information is not particularly limited as long as it is information indicating time. An example of the time information is the time when the test file hash is time stamped by the time stamping server 100. Also, the time stamp value is not particularly limited as long as it is obtained by time stamping the time information and the test file hash by digitally signing them with predetermined private key information. An example of the time stamping unit 25 is a program having such a function.

[0032] The storage unit 200 is not particularly limited as long as it can store the test file 201, the index information 202 related to the test file 201, and the time stamp token 203 related to the test file 201. Examples of the storage unit 200 include a storage medium such as a memory, commercially available database software, and the like.

[0033] The test data related information extraction unit 26 is not particularly limited as long as it can extract the test file 201 including the test data 311 related to the request information and the time stamp token 203 from the storage unit 200 based on the index information 202 of the test file 201 including the test data 311 related to the request information. As the test data related information extraction unit 26, for example, a program having such a function can be mentioned.

[0034] The pre-time-stamping test file hash extraction unit 27 is not particularly limited as long as it can extract a test file hash (pre-time-stamping test file hash) from the time stamp value included in the time stamp token 203 based on the public key information included in the time stamp token 203 extracted by the test data related information extraction unit 26. An example of the pre-time-stamping test file hash extraction unit 27 is a program having such a function.

[0035] The comparative test file creation unit 28 is not particularly limited as long as it can hash the test file 201 extracted by the test data related information extraction unit 26 to create a comparative test file hash. Examples of the comparative test file creation unit 28 include a program having such a function.

[0036] The test file hash comparison unit 29 is not particularly limited as long as it can compare the comparison test file hash with the pre-time-authentication test file hash, create comparison information on whether they are identical or not, and transmit the information to the data output terminal 40. As the test file hash comparison unit 29, for example, a program having such a function can be mentioned.

[0037] The data verification server 20 is not particularly limited as long as it has the above-mentioned functions. The data verification server 20 may be, for example, a personal computer.

[0038] Further, the test data storage server 30 will be described. Fig. 4 is a schematic conceptual diagram of the test data storage server 30 according to the present embodiment. As shown in this figure, the test data storage server 30 has a test data storage unit 31 and a test data extraction unit 32.

[0039] The test data storage unit 31 is not particularly limited as long as it can store the test data 311 and the index information 202 transmitted from the data transmission unit 23. Examples of the test data storage unit 31 include a storage medium such as a memory, commercially available database software, and the like.

[0040] The test data extraction unit 32 is not particularly limited as long as it can extract, based on the request information, the test data 311 related to the request information and the index information of the test file 201 including the test data 311. As the test data extraction unit 32, for example, a program having such a function can be mentioned.

[0041] The test data storage server 30 is not particularly limited as long as it has the above-mentioned functions. The test data storage server 30 may be, for example, a personal computer.

[0042] Next, the time stamp server 100 will be described. The time stamp server 100 is not particularly limited as long as it has a token creation unit that creates a time stamp token including a time authentication value obtained by digitally signing a test file hash and time information using private key information, and public key information. In other words, the time stamp token includes the time-authenticated test file hash and time information, and the public key information. An example of the time stamp server 100 is an information system (time stamp system) of a company that provides a time stamp service.

[0043] Further, the data output terminal 40 will be described. Fig. 5 is a schematic conceptual diagram of the data output terminal 40 according to this embodiment. As shown in this figure, the data output terminal 40 has an input unit 41, a test data acquisition unit 42, an index information transmission unit 43, and a display unit 44.

[0044] There is no particular limitation on the input unit 41 as long as it can input request information. Examples of the input unit 41 include a keyboard, a voice input system, and a touch panel.

[0045] The test data acquiring unit 42 is not particularly limited as long as it can transmit the input request information to the test data storage server 30 and acquire the test data 311 related to the request information and the index information 202 including the test data 311 from the test data storage server 30. The test data acquiring unit 42 may be, for example, a program having such a function.

[0046] The index information transmitting unit 43 is not particularly limited as long as it can transmit the index information 202 acquired by the test data acquiring unit 42 to the data verification server 20. As the index information transmitting unit 43, for example, a program having such a function can be mentioned.

[0047] The display unit 44 is not particularly limited as long as it can display the identical information and the test data 311 created by the test file hash comparison unit 29. Examples of the display unit 44 include a liquid crystal display and an organic electroluminescence display. Note that the display unit 44 may be configured to display the test data 311 only when the test file hash comparison unit 29 determines that the comparison test file hash is identical to the pre-time authentication test file hash.

[0048] The data output terminal 40 is not particularly limited as long as it has the above-mentioned functions. An example of the data output terminal 40 is a personal computer.

[0049] Furthermore, the network 50 is not limited to a wired or wireless network, as long as it can connect the data input terminal 10, the data verification server 20, the test data storage server 30, the data output terminal 40, and the time stamp server 100. Examples of the network 50 include the Internet and an intranet.

[0050] Next, the operation of the test data certification system 1 according to this embodiment will be described. <Test data registration operations>

[0051] 6 is a flowchart showing the operation of the test data certification system 1 according to this embodiment with respect to the registration of the test data 311, etc. As shown in this figure, the test data certification system 1 operates (S1), and the test data 311 is transmitted from the data input terminal 10 to the data verification server 20 (S2). The data verification server 20, which has received the test data 311, creates a test file 201 including the test data 311 by the test file creation unit 21 (S3), and creates index information 202 by the index information creation unit 22 (S4). After that, the data verification server 20 transmits the test data 311 and the index information 202 to the test data storage server 30 by the data transmission unit 23 (S5).

[0052] Next, the data verification server 20 creates a test file hash from the test file 201 using the hashing unit 24 (S6), and transmits the test file hash to the time stamp server 100 using the time stamping unit 25, and receives a time stamp token (S7). After that, the data verification server 20 stores the test file 201, the index information 202 related to the test file, and the time stamp token related to the test file 201 in the storage unit 200 (S8).

[0053] On the other hand, the test data storage server 30 that has received the test data 311 and the index information 202 stores the test data 311 and the index information 202 in the test data storage unit 31 (S9).

[0054] As a result, the test file 201, the index information 202, and the time stamp token are stored in the storage unit 200 of the data verification server 20. Meanwhile, the test data storage unit 31 of the test data storage server 30 stores the test data 311 and the index information 202.

[0055] Then, the operation of the test data certification system 1 regarding the registration of the test data 311 and the like is completed (S10). <Test data display operations>

[0056] 7 is a flowchart showing the operation of the test data display system according to this embodiment. As shown in this figure, when the test data certification system 1 is operated (SS1) and request information is input to the input unit 41 of the data output terminal 40 (SS2), the request information is transmitted to the data verification server 20 and the test data storage server 30, respectively (SS3).

[0057] Upon receiving the request information, the test data storage server 30 extracts the test data 311 and the index information 202 of the test file containing the test data 311 based on the request information using the test data extraction unit 32, and transmits them to the data output terminal 40 (SS4).

[0058] The data output terminal 40 that has received the test data 311 and the index information 202 transmits the index information to the data verification server 20 (SS5).

[0059] The data verification server 20 that receives the index information 202 extracts the test file 201 containing the test data 311 related to the request information and the timestamp token from the memory unit 200 based on the index information 202 using the test data related information extraction unit 26 (SS6), and further extracts the test file hash contained in the timestamp token using the pre-time authentication test file hash extraction unit 27 (SS7).

[0060] Next, the data verification server 20 hashes the test file 201 extracted by the test data related information extraction unit 26 to create a comparison test file hash (SS8). Then, the data verification server 20 compares the comparison test file hash with the test file hash extracted by the pre-time authentication test file hash extraction unit to create comparison information (SS9), and transmits the comparison information to the data output terminal 40 (SS10).

[0061] Then, the data output terminal 40 that has received the verification information displays the test data 311 corresponding to the request information and the verification information on the display unit 44 (SS11), and ends the operation of the test data certification system regarding the display of the test data (SS12).

[0062] As described above, the test data certification system 1 according to this embodiment can indirectly prove the identity of the test data 311 at the time of transmission from the data verification server 20 to the test data storage server 30 and the test data stored in the test data storage server 30. That is, the test data certification system 1 can compare the test file hash of the test file 201 including the test data 311 at the time of transmission from the data verification server 20 to the test data storage server 30 with the test file hash included in the time-authenticated time stamp token, so that if these test file hashes are identical, it can be indirectly proven that the test data 311 stored in the test data storage unit 31 of the test data storage server 30 is identical to the test data 311 at the time of time authentication (has not been tampered with). (Embodiment 2)

[0063] In the first embodiment, the test data certification system is configured so that the data output terminal has an index information transmission unit, but the present invention is not limited to this. For example, the test data certification system may be configured so that the test data storage server has an index information transmission unit.

[0064] Each element constituting the test data certification system according to this embodiment will be described. The test data certification system according to this embodiment is composed of a data input terminal 10, a data verification server 20A, a test data storage server (EDC server) 30A, a data output terminal 40A, and a time stamp server 100, which are connected via a network, similar to the test data certification system according to the first embodiment. Note that the configuration other than the configuration described below is the same as that of the test data certification system according to the first embodiment.

[0065] First, the data verification server 20A according to this embodiment will be described. As shown in FIG. 8, the data verification server 20A differs from the data verification server according to the first embodiment only in the function of the test file hash collation unit 29A. Specifically, the test file hash collation unit in the first embodiment transmits collation information to a data output terminal, but in this embodiment, it transmits collation information to a test data storage server 30A. The rest of the configuration is the same as that of the data verification server in the first embodiment.

[0066] Next, the test data storage server 30A according to this embodiment will be described. As shown in FIG. 9, the test data storage server 30A further includes an index information transmission unit 43A and a matching information transmission unit 35, as compared with the first embodiment.

[0067] The index information transmission unit 43A is not particularly limited as long as it can transmit the index information extracted by the test data extraction unit to the data verification server 20A. Examples of the index information transmission unit 43A include a program having such a function.

[0068] Also, the verification information transmission unit 35 is not particularly limited as long as it can transmit the verification information and test data created by the test file hash verification unit to the data output terminal 40A. Examples of the verification information transmission unit 35 include a program having such a function. The configuration other than these is the same as that of the data storage server of the first embodiment.

[0069] The data output terminal 40A according to this embodiment will now be described. As shown in Fig. 10, the data output terminal 40A differs from the data output terminal of the first embodiment in the functions of a test data acquisition unit 42A and a display unit 44A.

[0070] The test data acquisition unit 42A is not particularly limited as long as it can transmit the request information to the test data storage server 30A and acquire the test data 311 related to the request information from the test data storage server 30A. As the test data acquisition unit 42A, for example, a program having such a function can be mentioned.

[0071] The display unit 44A is not particularly limited as long as it can display the verification information and the test data 311 transmitted by the verification information transmission unit 35. Examples of the display unit 44A include a liquid crystal display and an organic EL display. The configuration other than these is the same as that of the data output terminal of the first embodiment.

[0072] By configuring the test data certification system in this way, the test data 311 and the collation information can be displayed on the display unit 44A of the data output terminal 40A as follows. Note that the operation regarding the test data registration is the same as that of the test data certification system of the first embodiment. <Test data display operations>

[0073] 11 is a flowchart showing the operation of the test data display system according to this embodiment. As shown in this figure, when the test data certification system is operated (ss1) and request information is input to the input unit 41 of the data output terminal 40A (ss2), the request information is transmitted to the test data storage server 30A (ss3).

[0074] Upon receiving the request information, the test data storage server 30A extracts the test data 311 and the index information 202 of the test file containing the test data 311 based on the request information using the test data extraction unit 32, and transmits the test data 311 to the data output terminal 40A (ss4) and also transmits the index information 202 to the data verification server 20A (ss5).

[0075] The data verification server 20A, which receives the index information 202, extracts (ss6) from the memory unit 200 the test file 201 containing the test data 311 related to the request information and the timestamp token based on the index information 202 using the test data related information extraction unit 26, and further extracts the test file hash contained in the timestamp token using the pre-time authentication test file hash extraction unit 27 (ss7).

[0076] Next, the data verification server 20A hashes the test file 201 extracted by the test data related information extraction unit 26 to create a comparison test file hash (ss8). Then, the data verification server 20A compares the comparison test file hash with the test file hash extracted by the pre-time authentication test file hash extraction unit 27 to create comparison information (ss9), and transmits the comparison information to the test data storage server 30A (ss10).

[0077] Then, the test data storage server 30A that has received the matching information transfers the matching information to the data output terminal 40A (ss11). The data output terminal 40A that has received the matching information displays the test data 311 corresponding to the request information and the matching information on the display unit 44 (ss12), and ends the operation of the test data certification system related to the display of the test data (ss13).

[0078] As described above, according to the test data certification system 1 of this embodiment, like the test data certification system of embodiment 1, it is possible to indirectly prove the identity of the test data 311 at the time of transmission from the data verification server 20A to the test data storage server 30A and the test data stored in the test data storage server 30A. (Embodiment 3)

[0079] In embodiments 1 and 2, the test data storage unit does not particularly limit the method of storing the test data and index information transmitted from the test file transmission unit, but the test data certification system may be configured to store these data in a read-only manner.

[0080] By configuring the test data certification system in this way, the test data storage unit can store the test data and index information in a read-only manner, so that this information will not be changed, thereby improving the ability to prove the integrity of the test data. [Explanation of symbols]

[0081] 1. Test Data Certification System 10 Data entry terminal 20, 20A Data Verification Server 21 Test File Creation Department 22 Index Information Creation Department 23 Data transmission unit 24 Hashing section 25 Time authentication section 26 Test data related information extraction unit 27 Pre-time authentication test file hash extraction section 28 Comparison Test File Creation Department 29, 29A Test File Hash Matching Section 30, 30A Test data storage server 31 Test data storage section 32 Test Data Extraction Section 35 Verification information transmission unit 40, 40A Data Output Terminal 41 Input section 42, 42A Test Data Acquisition Section 43, 43A Index information transmission unit 44, 44A display section 50 Network 100 Time Authentication Server 200 Storage section 201 Exam File 202 Index Information 203 Timestamp Token 311 Test Data

Claims

1. a data input terminal into which test data relating to a predetermined test is input; a data output terminal for displaying the test data based on request information related to the input test data; A data verification server; A time authentication server; A test data storage server; a test data certification system in which a test data storage server and a test data storage server are connected to each other via a network, and which indirectly certifies the integrity of the test data stored in the test data storage server by using a public key cryptosystem that uses a predetermined private key information and public key information corresponding to the predetermined private key information, The data verification server includes: a test file creation unit that creates a test file from the test data transmitted from the data input terminal; an index information creating unit that creates index information for identifying the test file; a data transmission unit that transmits the test data and the index information to the test data storage server; a hashing unit that hashes the test file to create a test file hash; a time stamp unit that transmits the test file hash to the time stamp server and receives a time stamp token including a time stamp value obtained by digitally signing the time information and the test file hash by the time stamp server with the predetermined private key information and time stamping the time stamp value; a storage unit for storing the test file, the index information associated with the test file, and the time stamp token associated with the test file; a test data related information extraction unit that extracts, from the storage unit, the test file including the test data related to the request information and the time stamp token based on the index information of the test file including the test data related to the request information; a pre-time-stamping test file hash extraction unit that extracts the test file hash from the time stamp value included in the time stamp token based on the public key information included in the time stamp token extracted by the test data related information extraction unit; a comparison test file creation unit that hashes the test file extracted by the test data related information extraction unit to create a comparison test file hash; a test file hash comparison unit that compares the comparison test file hash with the test file hash extracted by the pre-time authentication test file hash extraction unit, creates comparison information indicating whether they are identical or not, and transmits the comparison information to the data output terminal, The test data storage server includes: a test data storage unit for storing the test data and the index information transmitted from the data transmission unit; a test data extraction unit that extracts, based on the request information, the test data related to the request information and the index information of the test file including the test data; The time authentication server includes: a token generating unit that adds time information to the test file hash, and then performs time authentication by digitally signing the test file hash using the private key information, and generates a time stamp token to which the public key information is added; The data output terminal is an input unit for inputting the request information; the test data acquisition unit transmitting the request information to the test data storage server and acquiring the test data related to the request information and the index information including the test data from the test data storage server; an index information transmitting unit that transmits the index information acquired by the test data acquiring unit to the data verification server; a display unit that displays the verification information and the test data created by the test file hash verification unit, A test data certification system comprising:

2. a data input terminal into which test data relating to a predetermined test is input; a data output terminal for displaying the test data based on request information related to the input test data; A data verification server; A time authentication server; A test data storage server; a test data certification system in which a test data storage server and a test data storage server are connected to each other via a network, and which indirectly certifies the integrity of the test data stored in the test data storage server by using a public key cryptosystem that uses a predetermined private key information and public key information corresponding to the predetermined private key information, The data verification server includes: a test file creation unit that creates a test file from the test data transmitted from the data input terminal; an index information creating unit that creates index information for identifying the test file; a data transmission unit that transmits the test data and the index information to the test data storage server; a hashing unit that hashes the test file to create a test file hash; a time stamp unit that transmits the test file hash to the time stamp server and receives a time stamp token including a time stamp value obtained by digitally signing the time information and the test file hash by the time stamp server with the predetermined private key information and time stamping the time stamp value; a storage unit for storing the test file, the index information associated with the test file, and the time stamp token associated with the test file; a test data related information extraction unit that extracts, from the storage unit, the test file including the test data related to the request information and the time stamp token based on the index information of the test file including the test data related to the request information; a pre-time-stamping test file hash extraction unit that extracts the test file hash from the time stamp value included in the time stamp token based on the public key information included in the time stamp token extracted by the test data related information extraction unit; a comparison test file creation unit that hashes the test file extracted by the test data related information extraction unit to create a comparison test file hash; a test file hash comparison unit that compares the comparison test file hash with the test file hash extracted by the pre-time authentication test file hash extraction unit, creates comparison information indicating whether they are identical or not, and transmits the comparison information to the data storage server, The test data storage server includes: a test data storage unit for storing the test data and the index information transmitted from the data transmission unit; a test data extraction unit that extracts, based on the request information, the test data related to the request information and the index information of the test file including the test data; an index information transmission unit that transmits the index information extracted by the test data extraction unit to the data verification server; a verification information transmitting unit that transmits the verification information and the test data created by the test file hash verification unit to the data output terminal, The time authentication server includes: a token generating unit that adds time information to the test file hash, and then performs time authentication by digitally signing the test file hash using the private key information, and generates a time stamp token to which the public key information is added; The data output terminal is an input unit for inputting the request information; the test data acquisition unit transmitting the request information to the test data storage server and acquiring the test data related to the request information from the test data storage server; A display unit that displays the verification information and the test data transmitted by the verification information transmission unit, A test data certification system comprising:

3. 3. The test data certification system according to claim 1, wherein the test file creation section creates a test file by combining a plurality of test data transmitted from said data input terminal.

4. 3. The test data certification system according to claim 1, wherein the test data storage unit stores the test data and the index information transmitted from the data transmission unit in a read-only manner.

Images