Information processing systems, information processing methods, programs

Abstract

To provide an information processing system capable of more appropriately managing a secret key.SOLUTION: An information processing system 10 includes a storage part 42 and a transaction execution part 463. The storage part 42 stores a secret key for an employee for executing a transaction of a security token in an encrypted state. The transaction execution part 463 reads the encrypted secret key for an employee from the storage part 42, decrypts the encrypted secret key for an employee, and uses the decrypted secret key for an employee to execute a transaction of a security token on a block chain.SELECTED DRAWING: Figure 2

Description

Technical Field

[0001] The present invention relates to an information processing system, an information processing method, and a program.

Background Art

[0002] The system described in Patent Document 1 below issues security tokens obtained by digitizing securities such as stocks and bonds on a blockchain.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] In the system described in Patent Document 1, there is room for improvement in the management of the secret key for executing transactions related to security tokens. The present invention has been made in view of such circumstances, and an object thereof is to provide an information processing system, an information processing method, and a program capable of more appropriately managing a secret key.

Means for Solving the Problems

[0005] The information processing system for solving the above problems includes a storage unit and a transaction execution unit. In the storage unit, a first secret key for executing a transaction of a security token is stored in an encrypted state. The transaction execution unit reads, from the storage unit, the encrypted first secret key corresponding to the account of the trader based on the login operation of the trader, decrypts the encrypted first secret key, and uses the decrypted first secret key to execute a transaction of the security token on the blockchain.

[0006] In the information processing method that solves the above problem, the first private key for executing security token transactions is stored in an encrypted state in a memory unit. Based on the trader's login operation, the computer reads the encrypted first private key corresponding to the trader's account from the memory unit, decrypts the encrypted first private key, and uses the decrypted first private key to execute the security token transaction on the blockchain.

[0007] In the program that solves the above problem, the first private key for executing security token transactions is stored in an encrypted state in a memory unit. Based on the trader's login operation, the computer reads the encrypted first private key corresponding to the trader's account from the memory unit, decrypts the encrypted first private key, and uses the decrypted first private key to execute the security token transaction on the blockchain.

[0008] With this configuration, the first private key is read from the storage unit based on the trader's login operation, eliminating the need for the trader to manage the first private key themselves. Furthermore, the first private key is stored in an encrypted state in the storage unit. Therefore, it becomes possible to manage the first private key more appropriately. [Effects of the Invention]

[0009] According to the information processing system, information processing method, and program of the present invention, it is possible to manage secret keys more appropriately. [Brief explanation of the drawing]

[0010] [Figure 1] A block diagram showing the schematic configuration of the information processing system of the embodiment. [Figure 2] A block diagram showing the schematic configuration of the control device in the embodiment. [Figure 3] (A) and (B) are diagrams showing examples of data stored in the user database and financial institution database of the embodiment, respectively. [Figure 4] A sequence chart showing an example of the operation of the transaction execution unit of the embodiment. [Figure 5] A sequence chart showing an example of the operation of the information processing system of the embodiment. [Figure 6] A sequence chart showing an example of the operation of the information processing system of the embodiment. [Figure 7] A block diagram showing the hardware configuration of the computer in this embodiment. [Modes for carrying out the invention]

[0011] Hereinafter, preferred embodiments (hereinafter referred to as "this embodiment") of the information processing system, information processing method, and program of the present invention will be described with reference to the attached drawings. In each figure, components denoted by the same reference numerals have the same or similar configuration. In this embodiment, "part," "means," "apparatus," and "system" do not merely mean physical means, but also include cases where the functions of such "part," "means," "apparatus," and "system" are realized by software. Furthermore, the functions of one "part," "means," "apparatus," or "system" may be realized by two or more physical means or devices, and the functions of two or more "parts," "means," "apparatus," and "systems" may be realized by one physical means or device.

[0012] <Embodiment> First, an overview of the information processing system of this embodiment will be described. (Overview of the Information Processing System) The information processing system 10 of this embodiment, shown in Figure 1, is a system that issues security tokens on the blockchain using the private key of a trader and also manages the private key.

[0013] A security token is a digitalized financial product based on securities or the like, and refers to something represented by a property value that can be transferred using an electronic information processing organization (Article 1, Paragraph 4, Item 17, etc. of the Cabinet Office Ordinance on Financial Instruments Business, etc.). The applicable objects of security tokens include, for example, stocks, corporate bonds, monetary claims, etc.

[0014] A trader is a person who conducts transactions of security tokens. Traders include, for example, users, financial institutions, and system providers. A user is, for example, an investor who desires to acquire, sell, deposit, etc. security tokens.

[0015] A financial institution is a subject that issues security tokens, and includes, for example, business companies that raise funds, investment management operators (including asset management companies), and financial instruments traders (such as securities companies). Note that the financial institutions in this embodiment refer to traders other than users such as investors.

[0016] A system provider is a business operator that provides or operates a system (here, the information processing system 10) that enables transactions of security tokens, and refers to, for example, a business operator that constructs the system and makes the system available to users and financial institutions. The private key is information necessary for conducting various transactions of security tokens (such as issuance processing, forced transfer processing, deposit processing) with a wallet address in the information processing system 10. In other words, the private key is the only information that enables transactions of security tokens at the wallet address. Specifically, the private key is key information in the public key cryptosystem used in the blockchain. In this embodiment, the case where "electronic signature", which is a type of public key cryptosystem, is used during transactions using the blockchain will be taken as an example for explanation.

[0017] An electronic signature is a technology that proves the creator of digital information. By using a private key to create an electronic signature, it is possible to prove that "the data was created by the signer" and that "the data has not been tampered with." In the information processing system 10, the user and the system provider each have a private key. The user's private key is managed in a state not connected to the network, i.e., in a so-called cold wallet state. The private key possessed by the system provider is in an encrypted state and is managed in a state connected to the network, i.e., in a so-called hot wallet state. Hereinafter, the user's private key will be referred to as the "user private key," and the system provider's private key will be referred to as the "provider private key."

[0018] In the information processing system 10, when there is a request for various transactions of a security token from the user to the financial institution, the financial institution executes various transactions of the security token using the provider private key. Therefore, since the user private key is not used for various transactions of the security token, the user private key is safely stored in the cold wallet state.

[0019] (Configuration of Information Processing System) As shown in FIG. 1, the information processing system 10 includes a user terminal 20, a financial institution terminal 30, a management device 40, and a system terminal 50. The user terminal 20, the financial institution terminal 30, and the management device 40 are connected to each other via a communication network N so as to be able to communicate with each other by wire or wirelessly.

[0020] The user terminal 20 is possessed by the user. Based on the user's operation, the user terminal 20 requests, for example, various transactions of a security token to the financial institution terminal 30. The financial service provider terminal 30 is owned by the financial service provider. The financial service provider terminal 30 receives requests for various security token transactions transmitted from the user terminal 20. The financial service provider's representative can operate the financial service provider terminal 30 to log in to the management device 40 platform and instruct the management device 40 to execute the various security token transactions requested from the user terminal 20.

[0021] The management device 40 is a device used by financial service providers via the financial service terminal 30. The management device 40 is managed by the system provider. The management device 40 is a device that provides a platform capable of generating user wallet addresses and user private keys, as well as executing security token transactions. When the financial service terminal 30 instructs the management device 40 to execute various security token transactions, the management device 40 uses the business private key stored in the management device 40 to execute the transactions for the instructed security tokens against the user's wallet address on the blockchain BN.

[0022] Blockchain BN is a system used for trading encrypted currencies and security tokens. Blockchain BN consists of multiple nodes (computers) and manages ledger data in a distributed manner. The distributed ledger is managed in a way that makes it difficult to tamper with, as is the mechanism of Blockchain BN. Note that the distributed ledger management mechanism using Blockchain BN in this embodiment employs a common method, so a detailed explanation is omitted here. Blockchain BN can be built using, for example, Ethereum.

[0023] The system terminal 50 is owned by the system provider. The system terminal 50 is a device that notifies the system provider of notifications, such as those from the management device 40, by displaying them on its screen. The information processing system 10 is equipped with a key storage device 60 that is not connected to the communication network N. The key storage device 60 is a device for storing user private keys generated by the management device 40 in a cold wallet state. For example, a safe can be used as the key storage device 60. For the management of user private keys, a hardware wallet method, among other cold wallet methods, is used. In this case, the management device 40 stores the user private keys in an external storage medium that is not connected to other devices for communication. For example, a USB (Universal Serial Bus) type storage medium or a card type storage medium can be used as the external storage medium. The key storage device 60 stores the external storage medium on which the user private keys are stored. In this embodiment, the key storage device 60 is an example of a storage unit.

[0024] The user terminal 20, the financial institution terminal 30, and the system terminal 50 are, for example, smartphones, mobile phones (feature phones), personal computers (e.g., desktops, laptops, tablets, etc.), media computer platforms (e.g., cable, satellite set-top boxes, digital video recorders), handheld computer devices (e.g., PDAs (Personal Digital Assistants), email clients, etc.), wearable devices (e.g., glasses-type devices, watch-type devices), other types of computers, or communication platforms.

[0025] The management device 40 is, for example, a cloud computer, a server computer, a personal computer (e.g., a desktop, laptop, tablet, etc.), a media computer platform (e.g., a cable, satellite set-top box, digital video recorder), a handheld computer device (e.g., a PDA, email client, etc.), or another type of computer or communication platform. At least a portion of the processing in the management device 40 may or may not be implemented by one or more computers (e.g., cloud computing composed of one or more computers).

[0026] (Configuration of the control device) Next, with reference to Figure 2, the specific configuration of the control device 40 will be described. As shown in Figure 2, the management device 40 includes a communication unit 41, a storage unit 42, an input unit 43, a display unit 44, an output unit 45, and a control unit 46.

[0027] The communication unit 41 communicates with the user terminal 20, the financial institution terminal 30, the system terminal 50, and the blockchain BN via the communication network N shown in Figure 1. The storage unit 42 stores various programs and data necessary for operating the management device 40. For example, the storage unit 42 stores the user database 420 and the financial business database 421.

[0028] As shown in Figure 3(A), the user database 420 contains information such as each user's identification number, name, email address, and wallet address. The identification number is, for example, a number that uniquely identifies a user. The wallet address is, for example, information indicating the user's wallet address in the blockchain BN.

[0029] As shown in Figure 3(B), the financial service provider database 421 stores, for example, the identification number, name, password, business private key, and data key of each financial service provider. The financial service provider identification number is, for example, a number that uniquely identifies a financial service provider. The password is, for example, character information used when a financial service provider logs in to the platform of the management device 40. The business private key and data key are stored in the financial service provider database 421 in an encrypted state. The business private key is information used when trading security tokens. A business private key is assigned individually to each of multiple financial service providers. The data key is used to decrypt the encrypted private key. In this embodiment, the business private key is an example of a first private key. The data key is an example of a second private key.

[0030] The input unit 43 accepts various input operations from the system provider's representative. For example, the input unit 43 accepts operations from the system provider's representative to issue a new user wallet address and user private key. In this embodiment, the user private key is an example of a third private key.

[0031] The display unit 44 displays various screens that can be viewed by the system provider's representative. For example, the display unit 44 displays a screen showing the identification number and user's private key for a newly issued user. The output unit 45 outputs and stores data on an external storage medium. For example, when the screen of the display unit 44, which displays the user's identification number and user's secret key, is converted into electronic data such as a PDF file, the output unit 45 outputs the converted electronic data to the external storage medium and stores it.

[0032] The control unit 46 controls the management device 40. The control unit 46 has a functional configuration realized by executing a program stored in the storage unit 42, and includes a first account issuance unit 460, a second account issuance unit 461, a decryption unit 462, and a transaction execution unit 463.

[0033] (First Account Issuance Department) The first account issuance unit 460 issues user accounts. For example, a representative of a financial institution sends application information to the management device 40 from the financial institution terminal 30 to request registration of a new user account. The application information includes the user's name and email address. Upon receiving the user's application information, the first account issuance unit 460 issues a new user identification number and stores the issued user identification number in the user database 420, associating it with the name and email address.

[0034] After the user's identification number and other information are stored in the user database 420 in this manner, the first account issuance unit 460 further issues a wallet address and a private key for the user corresponding to the user's identification number. The first account issuance unit 460 then associates the issued wallet address with the user's identification number and stores it further in the user database 420. This completes the issuance of the user account for trading security tokens.

[0035] (Second Account Issuance Department) The second account issuance unit 461 issues accounts for financial service providers. For example, a representative of a financial service provider sends application information to the management device 40 from the financial service provider terminal 30 to request registration of a new financial service provider account. The application information includes information such as the name of the financial service provider, password, and email address. Upon receiving the application information from the financial service provider, the second account issuance unit 461 issues a new identification number for the financial service provider and stores the newly issued identification number in the financial service provider database 421, associating it with the name and password of the financial service provider. This completes the issuance of the financial service provider account for conducting security token transactions.

[0036] (Decryption section) The decryption unit 462 decrypts the encrypted data key stored in the financial institution database 421 based on a request from the transaction execution unit 463. Specifically, the decryption unit 462 has the master key used when encrypting the data key, and uses this master key to decrypt the encrypted data key.

[0037] (Transaction execution unit) The transaction execution unit 463 executes a transaction related to security tokens on the blockchain BN based on a request from a financial institution. Figure 4 shows the procedure for executing a security token transaction by the transaction execution unit 463.

[0038] As shown in Figure 4, when a representative of a financial institution logs in to the platform of the management device 40 by entering the financial institution's identification number and password on the financial institution terminal 30 (step S10), the transaction execution unit 463 accepts the login operation (step S20) and then performs authentication processing of the financial institution by comparing the identification number and password entered by the financial institution's representative with the financial institution's identification number and password stored in the financial institution database 421 (step S21). After authentication by the transaction execution unit 463 is successful (step S22), when the financial institution's representative operates the financial institution terminal 30 to request the execution of an update process corresponding to the transaction details of the security token (step S11), the transaction execution unit 463 receives the security token update process (step S23). At this time, the transaction execution unit 463 reads the encrypted business private key and data key associated with the financial institution's identification number from the financial institution database 421 (step S24). Next, the transaction execution unit 463 decrypts the encrypted data key using the decryption unit 462 (step S25). Furthermore, the transaction execution unit 463 further decrypts the encrypted business private key using the decrypted data key (step S26). Then, the transaction execution unit 463 digitally signs the transaction data corresponding to the update process using the decrypted business private key and executes the signed transaction against the blockchain BN (step S27). With these steps, the security token transaction requested by the financial institution to the management device 40 is completed.

[0039] (Example of information processing system operation) Next, we will describe an example of the operation of the information processing system 10. First, referring to Figure 5, we will explain the procedure for issuing a user account in the management device 40. We will use the example where the user already has account information with a financial institution. As shown in Figure 5, in the information processing system 10 of this embodiment, when a user such as an investor who is a customer of the financial institution applies to the financial institution to conduct a new transaction such as depositing or purchasing security tokens, the financial institution creates a user account corresponding to that security token.

[0040] Specifically, as shown in Figure 5, the financial institution's representative first operates the financial institution terminal 30 to send application information, including the user's name and email address, to the management device 40 (step S50), where the communication unit 41 of the management device 40 receives the application information (step S60). The first account issuance unit 460 of the management device 40 then executes a process to issue a user identification number (step S61), and stores the issued identification number in the user database 420, associating it with the user's name and email address (step S62). The first account issuance unit 460 also sends a notification to the system terminal 50 via email or other means indicating that the initial registration of the user's account is complete (step S63). When the system provider's representative views the notification sent from the management device 40 on the system terminal 50, the next step is to issue, for example, the user's wallet address and user private key within the secure room Rs on the management device 40.

[0041] Specifically, the input unit 43, display unit 44, and output unit 45 of the management device 40 are located within the secure room Rs. When a representative of the system provider requests the issuance of a user's wallet address and user private key to the input unit 43 (step S64), the first account issuance unit 460 creates a wallet address on the user's blockchain and issues a user private key that can be used for trading security tokens, based on the representative's request (step S65). Subsequently, the first account issuance unit 460 stores the issued wallet address in the user database 420, associating it with the user's identification number (step S66). This completes the issuance of the user's account. At this time, the first account issuance unit 460 does not store the issued user private key in the storage medium of the management device 40, such as the storage unit 42.

[0042] Next, the first account issuing unit 460 displays the issued user's private key along with the user's identification number on the screen of the display unit 44 (step S67). This allows the person in charge to visually confirm the user's identification number and the corresponding user's private key on the screen of the display unit 44. The first account issuing unit 460 may temporarily store the user's private key information in the storage medium of the management device 40, such as the storage unit 42, when displaying the user's private key on the display unit 44.

[0043] Next, the person in charge operates the input unit 43 to convert the screen information displayed on the display unit 44 into electronic data such as a PDF file (step S68). After that, when the person in charge stores the electronic data on an external storage medium, the output unit 45 outputs the converted electronic data to the external storage medium for storage (step S69). Subsequently, the person in charge removes the external storage medium from the output unit 45 and stores the external storage medium in the key storage device 60 (step S70). As a result, the user's private key information does not remain as data in the management device 40, but exists only in the key storage device 60, i.e., it is stored in a cold wallet state.

[0044] Next, with reference to Figure 6, the procedure for processing user security token transactions in the management device 40 will be described. As shown in Figure 6, when a user operates the user terminal 20 to request a transaction such as depositing or purchasing security tokens from a financial service provider (step S80), the transaction request information is received by the financial service provider terminal 30 (step S90). The financial service provider's representative then requests the management device 40 to execute a security token transaction corresponding to the user's transaction request information. Specifically, after the financial service provider's representative logs into the management device 40 platform by entering the financial service provider's identification number and password through the financial service provider terminal 30 (step S91), they request the management device 40 to execute an update process corresponding to the user's transaction details (step S92). The transaction execution unit 463 of the management device 40 then executes a security token transaction corresponding to the update process against the blockchain BN (step S100). Details of this transaction process are shown in Figure 4 and are therefore omitted here.

[0045] (Hardware configuration) Next, with reference to Figure 7, an example of a hardware configuration when the user terminal 20, financial institution terminal 30, management device 40, and system terminal 50 are implemented using a computer will be described. Figure 7 is a diagram showing an example of a computer hardware configuration.

[0046] As shown in Figure 7, the computer 1000 includes a processor 1001, a memory 1002, a storage device 1003, an input I / F unit 1004, a data I / F unit 1005, a communication I / F unit 1006, and a display device 1007. The processor 1001 is a control unit that controls various processes in the computer 1000 by executing programs stored in the memory 1002.

[0047] Memory 1002 is a storage medium such as RAM (Random Access Memory). Memory 1002 temporarily stores the program code of the program executed by the processor 1001, as well as data required during program execution. The storage device 1003 is a non-volatile storage medium such as a hard disk drive (HDD) or flash memory. The storage device 1003 stores the operating system and various programs for realizing the above configurations.

[0048] The input interface unit 1004 is a device for receiving input from the user. Specific examples of the input interface unit 1004 include keyboards, mice, touch panels, various sensors, and wearable devices. The input interface unit 1004 may be connected to the computer 1000 via an interface such as USB (Universal Serial Bus).

[0049] The data I / F unit 1005 is a device for inputting data from outside the computer 1000. Specific examples of the data I / F unit 1005 include drive devices for reading data stored on various storage media. The data I / F unit 1005 may also be located outside the computer 1000. In that case, the data I / F unit 1005 would be connected to the computer 1000 via an interface such as USB.

[0050] The communication interface unit 1006 is a device for performing data communication with external devices of the computer 1000 via a communication network N, either by wire or wireless connection. The communication interface unit 1006 may also be located outside the computer 1000. In that case, the communication interface unit 1006 is connected to the computer 1000 via an interface such as USB.

[0051] The display device 1007 is a device for displaying various types of information. Specific examples of the display device 1007 include liquid crystal displays, organic EL (Electro-Luminescence) displays, and displays for wearable devices. The display device 1007 may be located outside the computer 1000. In that case, the display device 1007 is connected to the computer 1000, for example, via a display cable. Furthermore, if a touch panel is used as the input I / F unit 1004, the display device 1007 can be integrated with the input I / F unit 1004.

[0052] (Operation and effects of the information processing system of the embodiment) As described above, the information processing system 10 of this embodiment comprises a storage unit 42 and a transaction execution unit 463. The storage unit 42 stores an encrypted private key for business operators (first private key) for executing security token transactions. Based on the login operation of a financial operator (trader), the transaction execution unit 463 reads the encrypted private key for business operators corresponding to the financial operator's account from the storage unit 42, decrypts the encrypted private key, and uses the decrypted private key to execute a security token transaction on the blockchain BN. With this configuration, the business's private key is read from the storage unit 42 based on the financial institution's login operation, eliminating the need for the financial institution to manage the private key itself. Therefore, the business's private key can be managed more effectively. In addition, since the business's private key is stored in an encrypted state in the storage unit 42, security can be ensured.

[0053] The storage unit 42 also stores the data key (second private key) used to encrypt the business operator's private key, in an encrypted state. The information processing system 10 further includes a decryption unit 462 capable of decrypting the data key. Based on the financial operator's login operation, the transaction execution unit 463 reads the encrypted data key from the storage unit 42, decrypts the encrypted data key using the decryption unit 462, and uses the decrypted data key to decrypt the encrypted business operator's private key. With this configuration, the memory unit 42 also stores an encrypted data key that can decrypt the business operator's private key, making it difficult for the data key and the business operator's private key to be leaked to a third party. Therefore, security can be further enhanced.

[0054] The information processing system 10 of this embodiment further comprises a first account issuance unit 460 and an output unit 45. The first account issuance unit 460 issues a wallet address corresponding to a user requesting a security token transaction from a financial service provider, and a user private key (third private key) corresponding to the wallet address. The output unit 45 outputs the user private key issued by the first account issuance unit 460 in a manner that leaves no information about the user private key. Specifically, the output unit 45 displays the user private key on the display unit 44 in a manner that leaves no information about the user private key. With this configuration, information about the user's private key does not remain on the management device 40. Therefore, the security of the user's private key can be improved.

[0055] The information processing system 10 further includes a key storage device 60 (storage unit) capable of storing user private key information without being connected to the internet. The key storage device 60 stores an external storage medium in which the user private key is stored as electronic data. This configuration allows user private keys to be stored in a cold wallet, enabling more appropriate management of user private keys.

[0056] <Other Embodiments> This disclosure is not limited to the specific examples given above.

[0057] For example, in the information processing system 10, instead of the business operator's private key, issuer private keys individually assigned to each issuer of multiple security tokens may be used. In this case, if the transaction execution unit 463 receives a request from a predetermined financial business operator to perform update processing on multiple security tokens, for example, it will execute a transaction on the blockchain BN using multiple issuer private keys corresponding to each of the multiple security tokens. In this case, if a request for security token update processing is received from a financial business operator other than the predetermined financial business operator, the transaction execution unit 463 will execute a transaction on the blockchain BN using the same issuer private key, provided that the types of security tokens are the same. In other words, comparing this modified example with the above embodiment, the difference is that in this modified example, the same issuer private key is used for the same security tokens, whereas in the above embodiment, the same business operator's private key is used for the same financial business operator.

[0058] The output unit 45 is not limited to storing the user's identification number and user's private key information on an external storage medium, but may also be, for example, a printing device that prints a paper medium on which the user's identification number and user's private key are printed. In this case, the key storage device 60 will store the paper medium on which the user's identification number and user's private key are printed.

[0059] Even the above-mentioned examples, with appropriate design modifications by those skilled in the art, are included within the scope of this disclosure, as long as they possess the features of this disclosure. The elements, their arrangement, conditions, shapes, etc., of each of the above-mentioned examples are not limited to those exemplified and can be modified as appropriate. The elements of each of the above-mentioned examples can be combined in different ways as appropriate, as long as no technical inconsistencies arise. [Explanation of symbols]

[0060] 10: Information processing system, 42: Storage unit, 44: Display unit, 45: Output unit, 60: Key storage device (storage unit), 460: First account issuance unit, 462: Decryption unit, 463: Transaction execution unit, 1000: Computer.

Claims

1. A storage unit in which the first private key for executing security token transactions is stored in an encrypted state, A transaction execution unit reads the encrypted first private key corresponding to the trader's account from the storage unit based on the trader's login operation, decrypts the encrypted first private key, and uses the decrypted first private key to execute a transaction of the security token on the blockchain. An issuing unit that issues a wallet address corresponding to a user who requests the transaction of the security token from the aforementioned trader, and a third private key corresponding to the wallet address, The system includes an output unit that outputs the third secret key issued by the issuing unit in such a way that no information about the third secret key remains on the storage medium of the computer that issued the third secret key. Information processing system.

2. The storage unit also stores the second secret key, which was used to encrypt the first secret key, in an encrypted state. The system further comprises a decryption unit capable of decrypting the second secret key, The transaction execution unit reads the encrypted second private key from the storage unit based on the transaction user's login operation, decrypts the encrypted second private key using the decryption unit, and uses the decrypted second private key to decrypt the encrypted first private key. The information processing system according to claim 1.

3. The output unit either prints a paper medium on which the third secret key is printed, or displays the third secret key on the display unit, so that no information about the third secret key remains. The information processing system according to claim 1.

4. The storage unit further stores the user's wallet address associated with the user's identification number. The information processing system according to claim 1.

5. The system further comprises a storage unit capable of storing the information of the third private key when not connected to the internet. The information processing system according to claim 1.

6. The storage unit stores a paper medium on which the third secret key is printed, or a storage medium in which the third secret key is stored as electronic data. The information processing system according to claim 5.

7. The first private key for executing security token transactions is stored in the memory in an encrypted state. Computers Based on the trader's login operation, the encrypted first private key corresponding to the trader's account is read from the storage unit, the encrypted first private key is decrypted, and the security token transaction is executed on the blockchain using the decrypted first private key. The system issues a wallet address corresponding to a user requesting the transaction of the security token from the aforementioned trader, and a third private key corresponding to the aforementioned wallet address. The third secret key is output in such a way that no information about the third secret key remains on the storage medium of the computer. Information processing methods.

8. The first private key for executing security token transactions is stored in the memory in an encrypted state. On the computer, Based on the trader's login operation, the encrypted first private key corresponding to the trader's account is read from the storage unit, the encrypted first private key is decrypted, and the security token transaction is executed on the blockchain using the decrypted first private key. The aforementioned trader is instructed to issue a wallet address corresponding to the user requesting the transaction of the security token, and a third private key corresponding to the wallet address. The third secret key is output in such a way that no information about the third secret key remains on the storage medium of the computer. program.

Images