Test Data Certification System

Abstract

To provide a test data verification system that can indirectly prove the identity between test data at the time it is sent from a data verification server to a test data storage server and test data stored in the test data storage server.SOLUTION: A test file hash value of a test file containing test data at the time it is sent from a data verification server to a test data storage server is compared to a test file hash value contained in a time-authenticated time stamp token, and also the test data stored in the test data storage server is compared to the test data contained in the test file. If those pieces of test data are identical and those test file hash values are identical, then it can be indirectly proven that the test data stored in a test data storage unit of the test data storage server is identical to the test data at the time of time authentication (that is, it has not been tampered with).SELECTED DRAWING: Figure 7

Description

[Technical field]

[0001] The present invention relates to a test data certification system that indirectly certifies the identity of test data relating to a specified test and the test data stored in a database that stores test data, and in particular to a clinical trial data certification system that indirectly certifies the identity of clinical trial data of a patient entered by a doctor or the like and the clinical trial data of the patient stored in an EDC database. [Background technology]

[0002] Conventionally, clinical data collection systems (EDC systems) for collecting clinical trial data have been proposed. For example, Patent Document 1 discloses an EDC system that operates a computer as a consistency verification means for verifying the consistency of dates between a comparison source date item and a comparison destination date item by comparing the date of a comparison source date item, which is a date item to be verified, with the date of a comparison destination date item, which is a date item other than the comparison source date item, based on consistency definition information that structures and describes constraints on the relationship between dates between date items included in medical information. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2019-8511 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, in the above-mentioned EDC system, data is constantly being added and updated, which means that it is not possible to time-authenticate the medical data stored in the EDC database using a timestamp or other method (to prove that the data existed at a certain time or that the data has not been tampered with).

[0005] In view of the above-mentioned circumstances, an object of the present invention is to provide a test data certification system that indirectly proves the identity of test data related to a specified test with the test data stored in a database that stores the test data. [Means for solving the problem]

[0006] The inventors of the present invention have conducted intensive research and development into the above-mentioned problems, and as a result have discovered the following revolutionary test data certification system.

[0007] A first aspect of the present invention for solving the above problem is a test data certification system in which a data input terminal into which test data relating to a predetermined test is input, a data output terminal which displays the test data based on request information related to the input test data, a data verification server, a time stamp server, and a test data storage server are all connected via a network, and indirectly certifies the integrity of test data stored in the test data storage server using public key cryptography that utilizes predetermined private key information and public key information corresponding to the predetermined private key information. The data verification server includes a test file creation unit that creates a test file from test data transmitted from the data input terminal, an index information creation unit that creates index information for identifying the test file, a data index information creation unit that creates data index information for identifying test data included in the test file, a data transmission unit that transmits the test data, the index information, and the data index information to the test data storage server, a hashing unit that hashes the test file to create a test file hash, and a time stamp server that time stamps the test file hash. a time authentication unit that transmits the time information to an authentication server and receives a time stamp token including a time authentication value time-authenticated by the time authentication server by digitally signing the time information and the test file hash with predetermined private key information and the public key information; a memory unit that stores a test file, index information related to the test file, and a time stamp token related to the test file; a test data related information extraction unit that extracts a test file including test data related to the request information and a time stamp token from the memory unit based on the index information of the test file including test data related to the request information; a pre-time-authentication test file hash extraction unit that extracts a test file hash from the time authentication value included in the time stamp token based on the public key information included in the time stamp token extracted by the test data related information extraction unit; a comparison test file creation unit that hashes the test file extracted by the test data related information extraction unit to create a comparison test file hash;The test data storage server includes a test file hash comparison unit that creates comparison information indicating whether or not they are identical and transmits it to the data output terminal, a comparison test data extraction unit that extracts comparison test data from the test file stored in the storage unit based on index information and data index information transmitted from the test data storage server, and a test data comparison unit that compares the comparison test data with the test data transmitted from the test data storage server, creates data comparison information indicating whether or not they are identical and transmits it to the data output terminal. The test data storage server includes a test data storage unit that stores the test data, index information and data index information transmitted from the data transmission unit, and a test data storage unit that extracts test data related to the request information based on request information. the time stamp server has a token creation unit which adds time information to a test file hash, and then performs time authentication by digitally signing the test file hash using private key information, and creates a time stamp token to which public key information is added; and the data output terminal has an input unit which inputs request information, a test data acquisition unit which transmits the request information to the test data storage server and obtains test data related to the request information from the test data storage server, and a display unit which displays the verification information and test data transmitted from the test file hash verification unit and the test data verification unit.

[0008] Here, the term "predetermined test" refers not only to tests in the natural sciences such as engineering, physics, and medicine, but also to tests in various other fields, and is a concept that includes, for example, clinical trials.

[0009] According to the first aspect, it is possible to prove the identity of the test data at the time of transmission from the data verification server to the test data storage server and the test data stored in the test data storage unit.

[0010] A second aspect of the present invention is a test data certification system described in the first aspect, characterized in that the test file creation unit creates a test file by combining multiple test data transmitted from a data input terminal.

[0011] According to the second aspect, the frequency of creating timestamp tokens can be reduced, thereby reducing the cost associated with time authentication.

[0012] A third aspect of the present invention is a test data certification system described in the first or second aspect, characterized in that the test data storage unit stores the test data, index information and data index information transmitted from the data transmission unit in a read-only manner.

[0013] According to the third aspect, the test data storage unit can store the test data, index information, and data index information in a read-only manner, so that these pieces of information will not be changed. As a result, the proof of the integrity of the test data can be improved.

[0014] In the present invention, the terms "database," "system," "unit," and "means" do not simply mean physical means, but also include cases where the functions of the "database," "system," "unit," and "means" are realized by software. Also, the functions of one "database," "system," "unit," or "means" may be realized by two or more physical means or devices, and the functions of two or more "databases," "systems," "units," or "means" may be realized by one physical means or device. [Brief description of the drawings]

[0015] [Figure 1] FIG. 1 is a schematic conceptual diagram of a test data certification system according to the first embodiment. [Diagram 2] FIG. 2 is a table showing an example of test data according to the first embodiment. [Diagram 3] FIG. 3 is a schematic conceptual diagram of the data verification server according to the first embodiment. [Figure 4] FIG. 4 is a schematic conceptual diagram of the test data storage server according to the first embodiment. [Diagram 5] FIG. 5 is a schematic conceptual diagram of the data output terminal according to the first embodiment. [Figure 6] FIG. 6 is a flowchart showing the operation of the test data certification system according to the first embodiment regarding test data registration. [Figure 7] FIG. 7 is a flowchart showing the operation of the test data certification system according to the first embodiment with respect to the display of test data. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0016] An embodiment of the test data certification system according to the present invention will be described below with reference to the accompanying drawings. In the following, a test data certification system using clinical data as test data will be described as an example. Note that the present invention is not limited to the following embodiment. (Embodiment 1)

[0017] 1 is a schematic conceptual diagram of a test data certification system according to the present embodiment. As shown in this figure, the test data certification system 1 is composed of a data input terminal 10, a data verification server 20, a test data storage server (EDC server) 30, a data output terminal 40, and a time authentication server 100, which are connected via a network 50.

[0018] In this embodiment, there is one each of the data input terminal 10, data verification server 20, data output terminal 40, and time stamp server 100, but it goes without saying that there may be a plurality of each.

[0019] The data input terminal 10 is not particularly limited as long as it allows a doctor or the like to input the test data 311 and transmits the test data 311 to the data verification server 20 via the network 50. An example of the data input terminal 10 is a personal computer.

[0020] Here, the test data 311 is not particularly limited as long as it is information on a patient obtained by a clinical trial. Examples of the test data 311 include basic information such as the patient's date of birth, sex, date of measurement, height, weight, presence or absence of allergies, details of allergies, medical history of malignant tumors within three years prior to obtaining consent, interview regarding familial tumors, disease information, medical history and complications of eyes, and information regarding medical history and complications of systemic diseases.

[0021] Specifically, the test data 311 is, for example, a combination of body temperature data of patients as shown in FIG. 2(a). Here, "Patient A", "Patient B", and "Patient C" in FIG. 2(a) are unique identification numbers or the like indicating specific patients, and based on these, the patient of the body temperature data (the patient linked to the body temperature data) can be identified. Note that FIG. 2(a) gives an example of the test data 311 in which only the body temperature data of each patient is combined, but multiple test data such as the patient's date of birth, sex, date of measurement, height, weight, and the presence or absence of allergies may be collected for each patient and combined, or as shown in FIG. 2(b), if the format of the test data 311 is determined (if the location of the test data of each patient is determined), only the body temperature data may be combined. Note that the test data 311 may be not only a combination of data of multiple patients as described above, but may also be composed of individual test data for each patient.

[0022] Next, the data verification server 20 will be described. Fig. 3 is a schematic conceptual diagram of the data verification server 20 according to this embodiment. As shown in this figure, the data verification server 20 has a test file creation unit 210, an index information creation unit 220, a data index information creation unit 221, a data transmission unit 230, a hashing unit 240, a time authentication unit 250, a test data related information extraction unit 260, a pre-time authentication test file hash extraction unit 261, a comparison test file creation unit 262, a test file hash comparison unit 263, a comparison test data extraction unit 270, a test data comparison unit 271, and a storage unit 200.

[0023] The test file creation unit 210 is not particularly limited as long as it can create the test file 201 from the test data 311 transmitted from the data input terminal 10. Here, the test file creation unit 210 may, for example, make the test data 311 into the test file 201 as it is, or may create the test file 201 by further combining the test data 311 in which a plurality of test data are combined (here, the test data 311 refers to a combination of a plurality of test data). That is, the test file creation unit 210 may create one test file 201 from one test data 311, or may create a test file 201 consisting of more test data 311. By combining a plurality of test data 311 to create the test file 201, the number of times to perform time authentication, which will be described later, can be reduced. As the test file creation unit 210, for example, a program having such a function can be given.

[0024] The index information creating unit 220 is not particularly limited as long as it can create the index information 202 for identifying the test file 201 containing the test data 311 .

[0025] Here, the index information 202 is not particularly limited as long as it is information that can identify the test file 201 that contains the test data 311. For example, in the case of the test file 201 shown in Fig. 2(a), the index information 202 may be the file name of the test file 201 that contains the body temperature "36.1" that is the test data 311 of "Patient A". That is, in this case, the index information 202 of a certain test file 201 includes the file name of the test file 201 and information such as the patient identification number included in the test file 201.

[0026] Therefore, for example, when "Patient A" and "Body temperature" are specified as request information described later, the index information 202 identifies the file name containing the information on "body temperature" of "Patient A," and therefore the test file 201 containing the body temperature "36.1," which is the test data 311 of "Patient A," can be specified. Note that the index information 202 may include the time when the data verification server 20 received the test file 201, or the time when the test file 201 was created by combining multiple test data 311. By including these times, search by time becomes possible.

[0027] The data index information creating unit 221 is not particularly limited as long as it can create the data index information 203 for identifying the test data 311 in the test file 201. The data index information creating unit 221 may be, for example, a program having such a function.

[0028] Here, the data index information 203 is not particularly limited as long as it is information that can identify the test data 311 included in the test file 201. For example, in the case of the test file 201 shown in Fig. 2(a), the data index information 203 is "2" because the body temperature "36.1" which is the test data 311 of "Patient A" is the second data from the top. Note that the data index information 203 is associated with the index information 202, and it goes without saying that data index information 203 exists for each index information 202.

[0029] The data transmission unit 230 is not particularly limited as long as it can transmit the test data 311, the index information 202, and the data index information 203 to the test data storage server 30. The data transmission unit 230 may be, for example, a program having such a function.

[0030] The hashing unit 240 is not particularly limited as long as it can hash the test file 201 to generate a test file hash. As the hashing unit 240, for example, a program having such a function can be mentioned.

[0031] The time stamping unit 250 is not particularly limited as long as it can transmit the test file hash to the time stamping server 100 and receive the time stamp token 204 including the time stamp value obtained by time stamping the time information and the test file hash by digitally signing them with predetermined private key information from the time stamping server 100, and the public key information. Here, the time information is not particularly limited as long as it is information indicating time. An example of the time information is the time when the test file hash is time stamped by the time stamping server 100. Also, the time stamp value is not particularly limited as long as it is obtained by time stamping the time information and the test file hash by digitally signing them with predetermined private key information. An example of the time stamping unit 250 is a program having such a function.

[0032] The storage unit 200 is not particularly limited as long as it can store the test file 201, the index information 202 related to the test file 201, and the time stamp token 204 related to the test file 201. Examples of the storage unit 200 include a storage medium such as a memory, commercially available database software, and the like.

[0033] The test data related information extraction unit 260 is not particularly limited as long as it can extract the test file 201 including the test data 311 related to the request information and the time stamp token 204 from the storage unit 200 based on the index information 202 of the test file 201 including the test data 311 related to the request information. As the test data related information extraction unit 260, for example, a program having such a function can be mentioned.

[0034] The pre-time-stamping test file hash extraction unit 261 is not particularly limited as long as it can extract a test file hash (pre-time-stamping test file hash) from the time stamp value included in the time stamp token 204 based on the public key information included in the time stamp token 204 extracted by the test data related information extraction unit 260. An example of the pre-time-stamping test file hash extraction unit 261 is a program having such a function.

[0035] The comparative test file creation unit 262 is not particularly limited as long as it can hash the test file 201 extracted by the test data related information extraction unit 260 and create a comparative test file hash. The comparative test file creation unit 262 may be, for example, a program having such a function.

[0036] The test file hash comparison unit 263 is not particularly limited as long as it can compare the comparison test file hash with the pre-time-authentication test file hash, create comparison information on whether they are identical or not, and transmit the information to the data output terminal 40. The test file hash comparison unit 263 can be, for example, a program having such a function.

[0037] The comparative test data extraction unit 270 is not particularly limited as long as it can extract comparative test data from the test file 201 stored in the memory unit 200 based on the index information 202 and the data index information 203 transmitted from the test data storage server 30. Examples of the comparative test data extraction unit 270 include programs having such functions. Here, the comparative test data is the test data 311 included in the test file 201 stored in the memory unit 200.

[0038] The test data collating unit 271 is not particularly limited as long as it can collate the comparative test data with the test data 311 transmitted from the test data storage server 30, generate data collation information indicating whether they are identical or not, and transmit it to the data output terminal 40. The test data collating unit 271 can be, for example, a program having such a function.

[0039] The data verification server 20 is not particularly limited as long as it has the above-mentioned functions. The data verification server 20 may be, for example, a personal computer.

[0040] Further, the test data storage server 30 will be described. Fig. 4 is a schematic conceptual diagram of the test data storage server 30 according to the present embodiment. As shown in this figure, the test data storage server 30 has a test data storage unit 31 and a test data extraction unit 32.

[0041] The test data storage unit 31 is not particularly limited as long as it can store the test data 311, the index information 202, and the data index information 203 transmitted from the data transmission unit 230. Examples of the test data storage unit 31 include a storage medium such as a memory, commercially available database software, and the like.

[0042] The test data extraction unit 32 is not particularly limited as long as it can extract, based on request information, the test data 311 related to the request information, the index information 202 of the test file 201 including the test data 311, and the data index information 203 related to the test data 311, and transmit them to the data verification server 20. As the test data extraction unit 32, for example, a program having such a function can be mentioned.

[0043] The test data storage server 30 is not particularly limited as long as it has the above-mentioned functions. The test data storage server 30 may be, for example, a personal computer.

[0044] Next, the time stamp server 100 will be described. The time stamp server 100 is not particularly limited as long as it has a token creation unit that creates a time stamp token 204 including a time authentication value time-authenticated by digitally signing a test file hash and time information using private key information, and public key information. In other words, the time stamp token 204 includes the time-authenticated test file hash and time information, and the public key information. An example of the time stamp server 100 is an information system (time stamp system) of a company that provides a time stamp service.

[0045] Further, the data output terminal 40 will be described. Fig. 5 is a schematic conceptual diagram of the data output terminal 40 according to the present embodiment. As shown in this figure, the data output terminal 40 has an input unit 41 and a display unit .

[0046] There is no particular limitation on the input unit 41 as long as it can input request information. Examples of the input unit 41 include a keyboard, a voice input system, and a touch panel.

[0047] The display unit 42 is not particularly limited as long as it can display the collation information and test data 311 transmitted by the test file hash collation unit 263, and the data collation information transmitted by the test data collation unit 271. Examples of the display unit 42 include a liquid crystal display and an organic EL display. Note that the display unit 42 may display the test data 311 only when the test file hash collation unit 263 determines that the comparison test file hash and the pre-time-authentication test file hash are identical, and the comparison test data and the test data transmitted from the test data storage server 30 are identical.

[0048] The data output terminal 40 is not particularly limited as long as it has the above-mentioned functions. An example of the data output terminal 40 is a personal computer.

[0049] Furthermore, the network 50 is not limited to a wired or wireless network, as long as it can connect the data input terminal 10, the data verification server 20, the test data storage server 30, the data output terminal 40, and the time stamp server 100. Examples of the network 50 include the Internet and an intranet.

[0050] Next, the operation of the test data certification system 1 according to this embodiment will be described. <Test data registration operations>

[0051] 6 is a flowchart showing the operation of the test data certification system 1 according to this embodiment regarding the registration of the test data 311 and the like. As shown in this figure, the test data certification system 1 operates (S1), and the test data 311 is transmitted from the data input terminal 10 to the data verification server 20 (S2). The data verification server 20, which has received the test data 311, creates a test file 201 including the test data 311 by the test file creation unit 210 (S3). Next, the index information creation unit 220 creates index information 202 (S4). Furthermore, the data index information creation unit 221 creates data index information 203 (S5). After that, the data verification server 20 transmits the test data 311, the index information 202, and the data index information 203 to the test data storage server 30 by the data transmission unit 230 (S6).

[0052] Next, the data verification server 20 creates a test file hash from the test file 201 using the hashing unit 240 (S7), and transmits the test file hash to the time stamp server 100 using the time stamping unit 250, and receives the time stamp token 204 (S8). After that, the data verification server 20 stores the test file 201, the index information 202 related to the test file, and the time stamp token 204 related to the test file 201 in the storage unit 200 (S9).

[0053] Meanwhile, the test data storage server 30, which has received the test data 311, the index information 202, and the data index information 203, stores the test data 311, the index information 202, and the data index information 203 in the test data storage unit 31 (S10).

[0054] As a result, the storage unit 200 of the data verification server 20 stores the test file 201, the index information 202, and the time stamp token 204. Meanwhile, the test data storage unit 31 of the test data storage server 30 stores the test data 311, the index information 202, and the data index information 203.

[0055] Then, the operation of the test data certification system 1 regarding the registration of the test data 311 and the like is completed (S11). <Test data display operations>

[0056] 7 is a flowchart showing the operation of the test data certification system according to this embodiment with respect to the display of test data. As shown in this figure, when the test data certification system 1 is operated (SS1) and request information is input to the input unit 41 of the data output terminal 40 (SS2), the request information is transmitted to the data verification server 20 and the test data storage server 30 (SS3). Note that the request information may be transmitted to the test data storage server 30 via the data verification server 20.

[0057] Upon receiving the request information, the test data storage server 30 extracts the test data 311, the index information 202 of the test file containing the test data 311, and the data index information 203 related to the test data 311 based on the request information using the test data extraction unit 32, and transmits them to the data verification server 20 (SS4).

[0058] The data verification server 20 receives the test data 311, the index information 202 and the data index information 203, and the test data related information extraction unit 260 extracts the test file 201 and the timestamp token 204 containing the test data 311 related to the requested information from the memory unit 200 based on the index information 202 (SS5).

[0059] Next, the data verification server 20 uses the comparison test data extraction unit 270 to extract comparison test data from the test file 201 stored in the memory unit 200 based on the data index information 203 sent from the test data storage server 30 (SS6). Then, the test data collation unit 271 collates the comparison test data with the test data 311 sent from the test data storage server 30 (SS7), and if they do not match, displays data collation information to that effect on the display unit 42 of the data output terminal 40 and stops the process.

[0060] On the other hand, if the comparison test data matches the test data 311, the pre-time-authentication test file hash extraction unit 261 extracts the test file hash contained in the time stamp token 204 (SS8).

[0061] Next, the data verification server 20 hashes the test file 201 extracted by the test data related information extraction unit 260 to create a comparison test file hash (SS9). Then, the data verification server 20 compares the comparison test file hash with the test file hash extracted by the pre-time-authentication test file hash extraction unit 261 to create comparison information (SS10), and transmits the comparison information and the data comparison information together with the test data 311 to the data output terminal 40 (SS11).

[0062] Then, the data output terminal 40 that has received this information displays the test data 311 corresponding to the requested information, the matching information and the data matching information on the display unit 42 (SS12), and terminates the operation of the test data certification system related to the display of test data (SS13).

[0063] As described above, according to the test data certification system 1 of this embodiment, it is possible to indirectly prove the identity of the test data 311 at the time of transmission from the data verification server 20 to the test data storage server 30 and the test data 311 stored in the test data storage server 30. That is, according to the test data certification system 1, it is possible to compare the test data 311 stored in the test data storage unit 31 of the test data storage server 30 with the test data 311 included in the test file 201, and also to compare the test file hash of the test file 201 including the test data 311 at the time of transmission from the data verification server 20 to the test data storage server 30 with the test file hash included in the time-authenticated time stamp token 204. Therefore, if the test data 311 are the same and the test file hashes are the same, it is possible to indirectly prove that the test data 311 stored in the test data storage unit 31 of the test data storage server 30 is the same as the test data 311 at the time of time authentication (has not been tampered with). (Embodiment 2)

[0064] In embodiment 1, the test data storage unit does not particularly limit the method of storing the test data, index information, and data index information transmitted from the test file transmission unit, but the test data certification system may be configured to store these data in a read-only manner.

[0065] By configuring the test data certification system in this way, the test data storage unit can store the test data, index information, and data index information in a read-only manner, so that these pieces of information will not be changed. As a result, the power of proving the integrity of the test data can be improved. (Other embodiments)

[0066] In the above embodiment, the comparison test data is compared with the test data 311 before the comparison test file hash is compared with the test file hash, but the present invention is not limited to this. The same effect can be obtained even if the comparison test data is compared with the test data 311 after the comparison test file hash is compared with the test file hash. [Explanation of symbols]

[0067] 1. Test Data Certification System 10 Data entry terminal 20 Data Verification Server 200 Storage section 201 Exam File 202 Index Information 203 Data Index Information 204 Time Token 210 Test File Creation Department 220 Index Information Creation Department 221 Data Index Information Creation Department 230 Data transmission unit 240 Hashing section 250 Time authentication unit 260 Test Data Related Information Extraction Unit 261 Pre-time authentication test file hash extraction section 262 Comparison Test File Creation Department 263 Test File Hash Matching Unit 270 Comparative test data extraction section 271 Test Data Collation Department 30 Test data storage server 31 Test data storage section 32 Test Data Extraction Section 310 Test Data Storage Unit 311 Test Data 40 Data output terminal 41 Input section 42 Display section 50 Network 100 Time Authentication Server

Claims

1. a data input terminal into which test data relating to a predetermined test is input; a data output terminal for displaying the test data based on request information related to the input test data; A data verification server; A time authentication server; A test data storage server; a test data certification system in which a test data storage server and a test data storage server are connected to each other via a network, and which indirectly certifies the integrity of the test data stored in the test data storage server by using a public key cryptosystem that uses a predetermined private key information and public key information corresponding to the predetermined private key information, The data verification server includes: a test file creation unit that creates a test file from the test data transmitted from the data input terminal; an index information creating unit that creates index information for identifying the test file; a data index information creating unit that creates data index information for identifying the test data included in the test file; a data transmission unit that transmits the test data, the index information, and the data index information to the test data storage server; a hashing unit that hashes the test file to create a test file hash; a time stamp unit that transmits the test file hash to the time stamp server and receives a time stamp token including a time stamp value obtained by time stamping the test file hash by digitally signing the time information and the test file hash with the predetermined private key information by the time stamp server, and the public key information; a storage unit for storing the test file, the index information associated with the test file, and the time stamp token associated with the test file; a test data related information extraction unit that extracts, from the storage unit, the test file including the test data related to the request information and the time stamp token based on the index information of the test file including the test data related to the request information; a pre-time-stamping test file hash extraction unit that extracts the test file hash from the time stamp value included in the time stamp token based on the public key information included in the time stamp token extracted by the test data related information extraction unit; a comparison test file creation unit that hashes the test file extracted by the test data related information extraction unit to create a comparison test file hash; a test file hash comparison unit that compares the comparison test file hash with the test file hash extracted by the pre-time authentication test file hash extraction unit, creates comparison information indicating whether they are identical or not, and transmits the comparison information to the data output terminal; a comparison test data extraction unit that extracts comparison test data from the test file stored in the storage unit based on the index information and the data index information transmitted from the test data storage server; a test data collation unit that compares the comparative test data with the test data transmitted from the test data storage server, creates data collation information indicating whether the data are identical or not, and transmits the data collation information to the data output terminal; The test data storage server includes: a test data storage unit for storing the test data, the index information, and the data index information transmitted from the data transmission unit; a test data extraction unit that extracts, based on the request information, the test data related to the request information, the index information of the test file including the test data, and the data index information related to the test data, The time authentication server includes: a token generating unit that adds time information to the test file hash, and then performs time authentication by digitally signing the test file hash using the private key information, and generates a time stamp token to which the public key information is added; The data output terminal is an input unit for inputting the request information; the test data acquisition unit transmitting the request information to the test data storage server and acquiring the test data related to the request information from the test data storage server; a display unit that displays the verification information and the test data transmitted from the test file hash verification unit and the test data verification unit, A test data certification system comprising:

2. 2. The test data certification system according to claim 1, wherein the test file creation section creates a test file by combining a plurality of test data transmitted from said data input terminal.

3. 3. The test data certification system according to claim 1, wherein the test data storage unit stores the test data, the index information, and the data index information transmitted from the data transmission unit in a read-only manner.

Images