Data provision program, data provision system, and data provision method

The data providing system manages correspondence information to enable flexible and secure data disclosure by providing processing-related data, addressing the limitations of time-based controls and ensuring secure data exchange.

JP7733059B2Active Publication Date: 2025-09-02JCB CO LTD
View PDF 4 Cites 0 Cited by

Patent Information

Application Number
JP2023092310
Authority / Receiving Office
JP · JP
Patent Type
Patents
Current Assignee / Owner
Filing Date
2023-06-05
Publication Date
2025-09-02
Estimated Expiration
2043-06-05

AI Technical Summary

Technical Problem

Existing data disclosure control methods do not allow for flexible disclosure controls beyond time-based conditions, failing to consider widespread data disclosure and private data provision to specific users.

Method used

A data providing system that manages correspondence information between pre-processed and processed data, enabling the provision of processing-related data such as pre-processed data and processing records in response to user requests, with features like encryption and authentication to ensure secure and flexible data disclosure.

Benefits of technology

Enables various and secure data disclosure controls, allowing flexible data processing and reference to pre-processed data as needed, reducing risks of data leakage and ensuring secure data exchange.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure 0007733059000001
    Figure 0007733059000001
  • Figure 0007733059000002
    Figure 0007733059000002
  • Figure 0007733059000003
    Figure 0007733059000003
Patent Text Reader

Abstract

To allow for smoothly implementing various disclosure controls.SOLUTION: A data providing program causes a computer to implement: a data management unit which manages correspondence relation information indicating a correspondence relation between pre-processing data and post-processing data obtained by subjecting the pre-processing data to prescribed processing; and a processing-related data providing unit which, in response to a provision request received from a browser terminal of a browser who refers to the post-processing data, and provides processing-related data including at least one of the pre-processing data corresponding to the post-processing data and processing record data about a record of the prescribed processing, on the basis of the correspondence relation information.SELECTED DRAWING: Figure 1
Need to check novelty before this filing date? Find Prior Art

Description

[Technical Field]

[0001] The present invention relates to a data providing program, a data providing system, and a data providing method. [Background technology]

[0002] 2. Description of the Related Art Conventionally, there is known a technique for managing private data and public data and controlling the range or content of public data.

[0003] For example, in the information disclosure control method described in Patent Document 1, the requested public data is read from a public data storage unit that stores public data including data to be subject to public disclosure control and public disclosure control condition data related to the validity period of the data to be subject to public disclosure control, and data that does not require public disclosure control, and it is determined whether the conditions specified in the public disclosure control condition data are satisfied. Furthermore, in this method, if the conditions specified in the public disclosure control condition data are satisfied, current public data is generated and output, including the data to be subject to public disclosure control and the data that does not require public disclosure control, which correspond to the public disclosure control condition data that is determined to satisfy the conditions. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2007-226370 Summary of the Invention [Problem to be solved by the invention]

[0005] However, in the information disclosure control method described in Patent Document 1, information to be disclosed is controlled based on whether or not the disclosure time has passed. Therefore, it is not assumed that disclosure control can be realized based on conditions other than the disclosure time, and for example, disclosure control such as widely disclosing public data and providing private data only to specified users has not been considered.

[0006] SUMMARY OF THE INVENTION It is therefore an object of the present invention to provide a data providing program, a data providing system, and a data providing method that are capable of smoothly implementing various disclosure controls. [Means for solving the problem]

[0007] A data provision program according to one embodiment of the present invention causes a computer to implement a data management unit that manages correspondence information indicating the correspondence between pre-processed data and processed data obtained by subjecting the pre-processed data to a predetermined processing process, and a processing-related data provision unit that provides processing-related data corresponding to the processed data based on the correspondence information, in response to a provision request received from a reference terminal of a referencer who references the processed data, the processing-related data including at least one of the pre-processed data and processing record data related to a record of the predetermined processing process.

[0008] A data provision system according to one aspect of the present invention includes a data management unit that manages correspondence information indicating the correspondence between pre-processed data and processed data obtained by subjecting the pre-processed data to a predetermined processing process, and a processing-related data provision unit that provides processing-related data that corresponds to the processed data based on the correspondence information, in response to a provision request received from a reference terminal of a reference person who references the processed data, and that includes at least one of the pre-processed data and processing record data related to a record of the predetermined processing process.

[0009] In one aspect of the data provision method of the present invention, a computer manages correspondence information indicating the correspondence between pre-processed data and processed data obtained by subjecting the pre-processed data to a specified processing process, and in response to a provision request received from a viewer terminal of a viewer who references the processed data, provides processing-related data corresponding to the processed data based on the correspondence information, the processing-related data including at least one of the pre-processed data and processing record data related to a record of the specified processing process.

[0010] In this invention, a "unit" does not simply mean a physical means, but also includes cases where the functions of the "unit" are realized by software. Furthermore, the functions of one "unit" or device may be realized by two or more physical means, devices, or software modules, and the functions of two or more "units" or devices may be realized by one physical means, device, or software module. [Effects of the Invention]

[0011] According to the present invention, it is possible to provide a data providing program, a data providing system, and a data providing method that can smoothly realize various disclosure controls. [Brief explanation of the drawings]

[0012] [Figure 1] FIG. 1 is a diagram showing an overview of processing in a data providing system 100 according to an embodiment of the present invention. [Figure 2] 1 is a diagram showing a configuration of a data providing system 100 according to an embodiment of the present invention. [Figure 3] 10 is a diagram showing an example of correspondence relationship information stored in a storage unit 110. FIG. [Figure 4] 1 is a sequence chart showing an example of processing in the data providing system 100. [Figure 5] 1 is a sequence chart showing an example of processing in the data providing system 100. DETAILED DESCRIPTION OF THE INVENTION

[0013] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Preferred embodiments of the present invention will now be described with reference to the accompanying drawings, in which: Figure 1 is a diagram showing an overview of processing in a data providing system 100 according to one embodiment of the present invention.

[0014] The data providing system 100 is an information processing system realized by a data providing program, and is an information processing system that provides processing-related data including at least one of pre-processing data and processing record data related to a specified processing record that corresponds to post-processing data based on correspondence information indicating the correspondence between pre-processing data and post-processing data.

[0015] First, the editor applies a predetermined processing process to the pre-processing data to generate processed data. The data providing system 100 acquires correspondence relationship information indicating the correspondence relationship between the pre-processing data and the processed data from the editor (S101) and manages the correspondence relationship information (S102). The processed data is made public based on the processing of a predetermined information processing system, for example, and a viewer references the processed data. The data providing system 100 acquires a request from the viewer to provide processing-related data corresponding to the processed data (S103). The data providing system 100 provides the viewer with processing-related data corresponding to the processed data (S104).

[0016] In recent years, social networking services (SNS) and virtual space interactions have attracted attention, and data is sometimes published and exchanged between users. In such cases, for example, from the perspective of privacy or the need to enjoy online communities by pretending to be someone else, users may modify the data before publishing or exchanging it.

[0017] Depending on the nature or type of data, it may be necessary to process it based on the data before processing. For example, when data indicating an address is to be widely disclosed, there is no problem in masking part of the data, but when verifying the identity of the person or delivering a package to the address indicated by the data, it is necessary to refer to the data before processing.

[0018] Therefore, the data providing system 100 provides processing-related data corresponding to the processed data based on the correspondence information, taking into account the need to process data and the need to refer to the data before processing. The processing-related data will be described in detail later, but the processing-related data is data that allows a viewer to refer to the data before processing by using the processing-related data, and includes, for example, the data before processing and processing record data.

[0019] This allows the user to refer to the pre-processing data as needed through the processing-related data corresponding to the processed data. Furthermore, because the user can refer to the pre-processing data as needed, it is possible to build a system that allows flexible data processing, allowing the disclosure or exchange of processed data when processing is not required, even in situations or data types where processing is required based on the pre-processing data, and also providing processing-related data as needed.

[0020] 2 is a diagram showing the configuration of a data provision system 100 according to one embodiment of the present invention. The data provision system 100 is communicably connected to a data handler system 200, a processor terminal 300, and a reference terminal 400 via a network such as the Internet. Details of the data provision system 100 will be described later.

[0021] The data handler system 200 is an information processing system managed and operated by a data handler. The data handler system 200, for example, makes the processed data (described later) available to viewers, and provides the viewers with processing-related data in accordance with the processing of the data providing system 100.

[0022] The data handler may be, for example, a business operator that manages and operates a virtual space. Here, the virtual space is not particularly limited, but may be, for example, a game space, a metaverse, virtual reality, augmented reality, or mixed reality.

[0023] The data handler may also be, for example, a business that manages and operates a website, database, or social networking site for managing and publishing data.

[0024] The data handler may be, for example, a company, financial institution, or organization that handles customer data related to customers. The data handler may also be, for example, a company, educational institution, or organization that handles member data related to members to whom the data handler belongs. The data handler may also be, for example, a public organization such as a national government, a local government, a general incorporated association, or a general incorporated foundation.

[0025] The editor terminal 300 is a computer used by an editor who edits the unedited data, and is a smartphone, tablet terminal, personal computer, etc. The editor applies a predetermined editing process to the unedited data to generate edited data.

[0026] The processor can use the data handler system 200 through the processor terminal 300. In this case, the processor can indirectly use the data providing system 100 through the data handler system 200. The processor may also use the data providing system 100 directly through the processor terminal 300.

[0027] The reference user terminal 400 is a computer used by a reference user who references the processing-related data, and is a smartphone, a tablet terminal, a personal computer, etc. The reference user references the processed data through the data handler system 200, for example.

[0028] In addition, the viewer requests the provision of processing-related data through the data handler system 200. In addition, the viewer may request the provision of processing-related data from the data providing system 100 without going through the data handler system 200.

[0029] The referrer and the data handler may be the same entity. That is, the data handler may request the provision of processing-related data as the referrer.

[0030] Also, in Figure 2, one data handler system 200, one processor terminal 300, and one viewer terminal 400 are shown, but there may be multiple data handler systems 200, multiple processor terminals 300, and multiple viewer terminals 400.

[0031] Next, details of the data providing system 100 will be described. The data providing system 100 includes a storage unit 110, a correspondence relationship acquisition unit 115, a data management unit 120, a processing presence / absence information generation unit 125, a processing presence / absence information providing unit 130, a provision request acquisition unit 135, an authentication unit 140, a restoration unit 145, an encryption unit 150, a processing-related data providing unit 155, and a key providing unit 160. Each unit shown in Fig. 2 can be realized, for example, by using a storage area or by a processor executing a program stored in the storage area.

[0032] The storage unit 110 stores information to be processed in the data providing system 100. The storage unit 110 can store, for example, correspondence relationship information, which will be described later.

[0033] The correspondence relationship acquisition unit 115 acquires correspondence relationship information.

[0034] The correspondence relationship acquisition unit 115 can acquire the correspondence relationship information from the processor terminal 300, for example.

[0035] Furthermore, the correspondence acquisition unit 115 can acquire correspondence information from the data handler system 200. In this case, the processor terminal 300 may provide the correspondence information to the data handler system 200 and instruct the data handler system 200 to provide the correspondence information to the data providing system 100.

[0036] Here, the correspondence information is information that indicates the correspondence between the unprocessed data and the processed data.

[0037] The unprocessed data is data before a predetermined processing is performed. The unprocessed data is not particularly limited, but may be, for example, a user's personal identification information (e.g., information related to a personal identification number, a driver's license number, a passport number, or an SNS account number), contact information (e.g., information related to an address, a telephone number, or an email address), attribute information (e.g., information related to a date of birth, an age, a family structure, an educational background, a work history, a qualification held, or an asset held), or information related to a transaction history.

[0038] The format of the unprocessed data is not particularly limited, but may be, for example, text data, image data, video data, or audio data.

[0039] The processed data is data obtained by performing a predetermined processing process on the unprocessed data.

[0040] The specified processing may be, but is not limited to, a process of masking at least a portion of the information indicated by the unprocessed data, or a process of editing (e.g., adding, deleting, or replacing) at least a portion of the information indicated by the unprocessed data.

[0041] The process of masking at least a portion of the information indicated by the unprocessed data may be, for example, a process of masking a street number included in an address if the unprocessed data is information indicating an address. The process of editing at least a portion of the information indicated by the unprocessed data may be, for example, a process of changing a portion of the address if the unprocessed data is information indicating an address.

[0042] Furthermore, if the unprocessed data is image data or video data, the specified processing process may be a process of mosaicking at least a portion of the image or video, or a process of adding a specific mark to at least a portion of the image or video.

[0043] Furthermore, if the unprocessed data is audio data, the specified processing process may be a process of editing the frequency of the audio contained in the audio data, or more specifically, a process of editing the frequency based on the audio data (particularly, voiceprints and sounds contained in the background) to the extent that the user cannot be identified, for example.

[0044] Furthermore, the predetermined processing may include a plurality of processing operations. The pre-processing data corresponding to the plurality of processing operations may be data that has not been subjected to any of the plurality of processing operations. The post-processing data corresponding to the plurality of processing operations may be data that has been subjected to all of the plurality of processing operations, or may be data that has been subjected to some of the plurality of processing operations.

[0045] The processing record data is data relating to the record of a predetermined processing process. The processing record data may be, for example, data that allows the restoration unit 145 (described later) to restore the pre-processing data based on the post-processing data and the processing record data. Specifically, the processing record data may be, for example, data that records the arithmetic processing in the predetermined processing process, or may be data relating to the difference between the pre-processing data and the post-processing data.

[0046] The processor, for example, uses the processor terminal 300 to perform a predetermined processing on the pre-processing data to generate processed data. At this time, the processor may process the pre-processing data on the processor terminal 300. The processor may also use the processor terminal 300 to access the data providing system 100 and process the pre-processing data on the data providing system 100, or may use the processor terminal 300 to access the data handler system 200 and process the pre-processing data on the data handler system 200. When the processor processes the pre-processing data on the data handler system 200, the data handler system 200 may provide correspondence information to the data providing system 100.

[0047] The correspondence information may include, for example, unprocessed data and processed data that are associated with each other. In this case, the correspondence acquisition unit 115 acquires correspondence information that includes, for example, the unprocessed data and the processed data.

[0048] The correspondence information may also include processed data and processing record data relating to a record of a predetermined processing process. In this case, the correspondence acquisition unit 115 acquires, for example, the processed data and the processing record data.

[0049] Processing of pre-processed data (especially, for example, user identification information, contact information, attribute information, and transaction information) may be inappropriate, and disclosure of the post-processed data may be inappropriate. However, if the pre-processed data can be referenced as needed, inconveniences caused by processing the pre-processed data and disclosing the post-processed data can be avoided. Therefore, the data providing system 100 manages correspondence information and performs the processing-related data provision process described below.

[0050] When the correspondence acquisition unit 115 acquires correspondence information including processed data and processing record data, the correspondence acquisition unit 115 may acquire the processing record data itself, or may acquire the pre-processing data and post-processing data, generate processing record data based on the acquired pre-processing data and post-processing data, and acquire correspondence information including the generated processing record data.

[0051] The data management unit 120 manages the correspondence relationship information.

[0052] The data management unit 120 can manage the correspondence information by, for example, storing the correspondence information acquired by the correspondence acquisition unit 115 in the storage unit 110.

[0053] Specifically, when the correspondence acquisition unit 115 acquires correspondence information including the pre-processing data and the post-processing data, the data management unit 120 can store and manage the correspondence information including the pre-processing data and the post-processing data in the storage unit 110. Also, when the correspondence acquisition unit 115 acquires correspondence information including the post-processing data and the processing record data, the data management unit 120 can store and manage the correspondence information including the post-processing data and the processing record data in the storage unit 110.

[0054] 3 is a diagram showing an example of correspondence relationship information stored in the storage unit 110. The correspondence relationship information stored in the storage unit 110 includes, for example, an unprocessed data ID and a processed data ID.

[0055] The unprocessed data ID is information for identifying the unprocessed data to be processed by the data providing system 100. The processed data ID is information for identifying the processed data to be processed by the data providing system 100.

[0056] The correspondence information stored in the storage unit 110 may include, for example, a processed data ID and a processing record data ID. The processing record data ID is information for identifying the processing record data processed by the data providing system 100.

[0057] The processing presence / absence information generating unit 125 generates processing presence / absence information regarding whether or not a predetermined processing process has been performed.

[0058] The processing information may include a digital certificate that certifies that the data (e.g., processed data) is data generated by a predetermined processing process, or a digital certificate that certifies that the data (e.g., unprocessed data) is data that has not been subjected to a predetermined processing process. The processing information may also include a digital signature of the data providing system 100 that certifies that the predetermined processing has been performed or that the predetermined processing has not been performed.

[0059] The processing information providing unit 130 provides processing information.

[0060] The processing presence / absence information providing unit 130 may provide the processing presence / absence information to, for example, the data handler system 200. In this case, the data handler system 200 may publish the processed data associated with the processing presence / absence information.

[0061] Furthermore, the processing presence / absence information providing unit 130 may provide the processing presence / absence information to, for example, the processor terminal 300. In this case, the processor terminal 300 may provide the processed data associated with the processing presence / absence information to the data handler system 200, and the data handler system 200 may publish the processed data associated with the processing presence / absence information.

[0062] The provision request acquisition unit 135 acquires a provision request for requesting provision of processing-related data including at least one of unprocessed data and processing record data.

[0063] The provision request acquisition unit 135 may acquire the provision request directly from the reference user terminal 400, for example, or may acquire the provision request from the reference user terminal 400 indirectly via the data handler system 200.

[0064] The provision request acquired by the provision request acquisition unit 135 may be a provision request requesting the provision of decryption key information corresponding to specified encryption key information when the processing-related data has been encrypted using specified key information by the encryption unit 150 described later.

[0065] A viewer accesses the data handler system 200 through a viewer terminal 400 and views the processed data published in the data handler system 200. The viewer makes a provision request directly or indirectly to the data providing system 100 for the purpose of viewing processing-related data (e.g., pre-processing data, processing record data) corresponding to the processed data. The provision request acquisition unit 135 acquires the provision request.

[0066] The authentication unit 140 authenticates whether or not the processing-related data can be provided to the reference terminal 400.

[0067] For example, in response to acquisition of a provision request by the provision request acquisition unit 135, the authentication unit 140 can authenticate whether or not to provide the processing-related data to the reference user terminal 400 corresponding to the provision request.

[0068] In addition, when the key providing unit 160 described later provides decryption key information, the authentication unit 140 authenticates whether or not processing-related data can be provided to the viewer terminal 400, thereby authenticating whether or not the key providing unit 160 described later can provide decryption key information.

[0069] For example, when the referrer has a legitimate authority to refer to the processing-related data, the authentication unit 140 may authenticate that the processing-related data can be provided to the referrer terminal 400. For example, when the ID of the referrer registered in advance matches the ID of the referrer who has made the provision request, it may be determined that the referrer has the legitimate authority.

[0070] The legitimate authority may be granted to, for example, a public organization such as a national government, a local government, a general incorporated association, or a general incorporated foundation, or an organization that provides a specific public service such as an educational institution or a financial institution.

[0071] When the provision request acquired by the provision request acquisition unit 135 is a provision request requesting the provision of decryption key information corresponding to specified encryption key information, the authentication unit 140 may authenticate whether or not to provide decryption key information to the viewer terminal 400 as authentication of whether or not to provide processing-related data to the viewer terminal 400.

[0072] The restoration unit 145 restores the pre-processed data that was the basis for generating the post-processed data, based on the post-processed data and the processing record data.

[0073] The restoration unit 145 can generate and restore pre-processed data by, for example, performing an arithmetic operation on the processed data that is the opposite of the processing operation indicated by the processing record data. This eliminates the need for the data providing system 100 to manage the pre-processed data, thereby reducing the risk of the pre-processed data being leaked.

[0074] The encryption unit 150 encrypts the processing-related data using predetermined encryption key information to generate encrypted processing-related data.

[0075] The encryption process by the encryption unit 150 is not particularly limited, but may be, for example, a common key encryption method.

[0076] In response to a provision request received from the reference terminal 400, the processing-related data providing unit 155 provides processing-related data including at least one of pre-processing data and processing record data corresponding to the processed data based on the correspondence relationship information.

[0077] The processing-related data providing unit 155 may, for example, provide the processing-related data to the reference terminal 400, or may provide the processing-related data to the data handler system 200. When the processing-related data providing unit 155 provides the data to the data handler system 200, the data handler system 200 may further provide the processing-related data to the reference terminal 400.

[0078] The processing-related data providing unit 155 may provide pre-processing data or processing record data as the processing-related data. When the processing-related data providing unit 155 provides processing record data, the data handler system 200 or the reference terminal 400 that acquires the processing record data may, for example, generate (restore) pre-processing data based on the processed data and the acquired processing record data. This allows the data handler system 200 or the reference terminal 400 to acquire the pre-processing data.

[0079] Furthermore, the processing-related data providing unit 155 can provide processing-related data depending on the result of authentication by the authentication unit 140.

[0080] Furthermore, the processing-related data providing unit 155 can provide processing-related data that includes at least the pre-processing data restored by the restoration unit 145.

[0081] Furthermore, the processing-related data providing unit 155 can provide the processing-related data encrypted by the encryption unit 150. At this time, the processing-related data providing unit 155 may provide the encrypted processing-related data in accordance with the result of authentication by the authentication unit 140, or may provide (i.e., make public) the encrypted processing-related data without going through authentication by the authentication unit 140.

[0082] The key providing unit 160 provides the access user terminal 400 with decryption key information corresponding to the predetermined encryption key information used in the encryption process by the encryption unit 150 in accordance with the result of authentication by the authentication unit 140 .

[0083] Next, a first application example of the present invention will be described. Fig. 4 is a sequence chart showing an example of processing in the data providing system 100.

[0084] First, the processor uses the processor terminal 300 to process the unprocessed data and generate processed data (S401). The processor uses the processor terminal 300 to provide correspondence information including the unprocessed data and the processed data that are associated with each other to the data providing system 100, and registers the correspondence information. The correspondence acquisition unit 115 acquires the correspondence information from the processor terminal 300, and the data management unit 120 manages the correspondence information (S402).

[0085] The processor uses the processor terminal 300 to upload the processed data managed in the data management unit 120 to the data handler system 200 (S403). At this time, the processor terminal 300 may upload the processed data itself managed in the data management unit 120, or may upload the processed data ID of the processed data managed in the data management unit 120 in association with the processed data stored in the processor terminal 300.

[0086] The processing presence / absence information generating unit 125 generates processing presence / absence information (S404), and the processing presence / absence information providing unit 130 provides the processing presence / absence information to the data handler system 200 (S405). The data handler system 200 makes the processed data public (S406). At this time, the data handler system 200 may make the processed data associated with the processing presence / absence information public.

[0087] The referrer accesses the data handler system 200 using the referrer terminal 400 and refers to the processed data. The referrer uses the referrer terminal 400 to make a provision request to the data handler system 200, requesting the provision of processing-related data corresponding to the processed data (S407). The data handler system 200 makes a provision request to the data providing system 100, requesting the provision of processing-related data corresponding to the processed data, and the provision request acquisition unit 135 acquires the provision request (S408).

[0088] The authentication unit 140 authenticates whether or not the processing-related data can be provided (S409). The processing-related data providing unit 155 provides the processing-related data to the reference terminal 400 according to the result of authentication by the authentication unit 140 (S410). At this time, the processing-related data providing unit 155 may provide the pre-processing data managed by the data management unit 120, the pre-processing data restored by the restoration unit 145, or the processing record data. When the processing-related data providing unit 155 provides the processing record data, the reference terminal 400 may restore the pre-processing data based on the processing-related data and the post-processing data. Then, the reference terminal 400 references the processing-related data (particularly the pre-processing data) (S411).

[0089] Next, a second application example of the present invention will be described. Fig. 5 is a sequence chart showing an example of processing in the data providing system 100.

[0090] S501 to S503 may be the same as those in Fig. 4. That is, first, the processor uses the processor terminal 300 to process the pre-processing data to generate processed data (S501). The processor uses the processor terminal 300 to provide correspondence information including the pre-processing data and the processed data that are associated with each other to the data providing system 100, and registers the correspondence information. The correspondence acquisition unit 115 acquires the correspondence information from the processor terminal 300, and the data management unit 120 manages the correspondence information (S502). The processor uses the processor terminal 300 to upload the processed data managed in the data management unit 120 to the data handler system 200 (S503).

[0091] Next, the encryption unit 150 encrypts the processing-related data using predetermined key information (S504). The processing-related data providing unit 155 provides the encrypted processing-related data to the data handler system 200 (S505), and the data handler system 200 makes the processed data and the encrypted processing-related data public (S506).

[0092] The viewer accesses the data handler system 200 using the viewer terminal 400 and views the processed data. The viewer uses the viewer terminal 400 to make a provision request to the data handler system 200, requesting the provision of decryption key information for decrypting the encrypted processing-related data (S507). The data handler system 200 makes a provision request to the data provider system 100, requesting the provision of decryption key information, and the provision request acquisition unit 135 acquires the provision request (S508).

[0093] The authentication unit 140 authenticates whether or not the decryption key information can be provided (S509). The key providing unit 160 provides the decryption key information to the reference terminal 400 in accordance with the result of authentication by the authentication unit 140 (S510). Then, the reference terminal 400 decrypts the encrypted processing-related data using the decryption key information, and references the processing-related data (particularly, the data before processing) (S511).

[0094] The above describes one embodiment of the present invention. The data providing system 100 manages correspondence information indicating the correspondence between unprocessed data and processed data, and can provide processing-related data based on the correspondence information in response to a provision request received from a viewer terminal 400. This allows the data providing system 100 and the data handler system 200 to smoothly implement various disclosure controls.

[0095] Furthermore, the data providing system 100 can authenticate whether or not to provide the processing-related data to the viewer terminal 400, and can provide the processing-related data depending on the authentication result. This allows only authenticated viewers to view the processing-related data, making it possible to achieve disclosure control with higher security.

[0096] Furthermore, the data providing system 100 can restore the pre-processing data based on the processed data and the processing record data, and provide processing-related data that includes at least the restored pre-processing data. This allows the data providing system 100 to restore and provide the pre-processing data without managing the pre-processing data.

[0097] Furthermore, the data providing system 100 can encrypt processing-related data using predetermined encryption key information, provide the encrypted processing-related data, and provide decryption key information corresponding to the predetermined encryption key information according to the authentication result. This makes it possible to realize disclosure control in the form of disclosing encrypted processing-related data and providing decryption key information to viewers.

[0098] Furthermore, the data providing system 100 can generate information on whether or not the data has been processed, thereby enabling the viewer to know whether or not the data has been processed.

[0099] It should be noted that the present embodiment is provided to facilitate understanding of the present invention and is not intended to limit the present invention. The present invention may be modified or improved without departing from the spirit thereof, and equivalents thereof are also included in the present invention. [Explanation of symbols]

[0100] 100 data providing system, 110 memory unit, 115 correspondence relationship acquisition unit, 120 data management unit, 125 processing presence / absence information generation unit, 130 processing presence / absence information provision unit, 135 provision request acquisition unit, 140 authentication unit, 145 restoration unit, 150 encryption unit, 155 processing-related data provision unit, 160 key provision unit, 200 data handler system, 300 processor terminal, 400 reference terminal

Claims

1. On the computer, a data management unit that manages correspondence information indicating a correspondence between unprocessed data and processed data obtained by performing a predetermined processing process on the unprocessed data; a processing presence / absence information generating unit that generates processing presence / absence information regarding the presence or absence of the predetermined processing; a processing-related data providing unit that provides processing-related data corresponding to the processed data, including at least one of the pre-processing data and processing record data related to a record of the predetermined processing process, based on the correspondence relationship information, in response to a provision request received from a reference terminal of a reference person who references the processed data; To achieve this, If the predetermined processing has not been performed, the processing information includes a digital certificate that certifies that the unprocessed data is data that has not been subjected to the predetermined processing. Data provision program.

2. The unprocessed data is a number used for user identification, contact information, attribute information, or transaction history. The data providing program according to claim 1 .

3. The computer further implements an authentication unit that authenticates whether or not the processing-related data can be provided to the reference terminal, the processing-related data providing unit provides the processing-related data in accordance with a result of the authentication.

3. The data providing program according to claim 1.

4. the correspondence information includes the processing record data, a restoration unit configured to restore the unprocessed data based on the processed data and the processing record data; the processing-related data providing unit provides the processing-related data including at least the restored pre-processing data.

3. The data providing program according to claim 1.

5. The computer, an authentication unit that authenticates whether or not the processing-related data can be provided to the reference terminal; an encryption unit that encrypts the processing-related data using predetermined encryption key information; a key providing unit that provides decryption key information corresponding to the predetermined encryption key information in accordance with a result of the authentication; To further realize this, the processing-related data providing unit provides the encrypted processing-related data.

3. The data providing program according to claim 1.

6. a data management unit that manages correspondence information indicating a correspondence between unprocessed data and processed data obtained by performing a predetermined processing process on the unprocessed data; a processing presence / absence information generating unit that generates processing presence / absence information regarding the presence or absence of the predetermined processing; a processing-related data providing unit that provides processing-related data corresponding to the processed data, including at least one of the pre-processing data and processing record data related to a record of the predetermined processing process, based on the correspondence relationship information, in response to a provision request received from a reference terminal of a reference person who references the processed data; Equipped with If the predetermined processing has not been performed, the processing information includes a digital certificate that certifies that the unprocessed data is data that has not been subjected to the predetermined processing. Data provision system.

7. The computer managing correspondence relationship information indicating a correspondence relationship between the unprocessed data and processed data obtained by performing a predetermined processing process on the unprocessed data; generating processing presence / absence information regarding the presence or absence of the predetermined processing; providing processing-related data corresponding to the processed data, including at least one of the pre-processing data and processing record data related to a record of the predetermined processing processing, based on the correspondence relationship information, in response to a provision request received from a reference terminal of a reference person who references the processed data; If the predetermined processing has not been performed, the processing information includes a digital certificate that certifies that the unprocessed data is data that has not been subjected to the predetermined processing. How data is provided.

Citation Information

Patent Citations

  • Imaging apparatus, data structure of image file

    JP2009033738A

  • Distribution system, reception client terminal, and distribution method

    JP2020022015A

  • JP226370A

  • Data transaction management device, data transaction management method, and computer readable medium

    WO2022091233A1