Information processing device, information processing method, and information processing program

Abstract

This information processing device: receives a request to refer to data; acquires first data and a user ID associated with the first data; compares the request with the first data; selects, from the first data, second data suitable for the request; generates third data obtained by anonymizing the second data; generates a data ID to be associated with the third data; generates, from the third data, a hash value of the third data; records the data ID, the hash value of the third data, and the user ID in a blockchain; and outputs the third data and the data ID to a transmission source of the request.

Description

Information Processing Apparatus, Information Processing Method, and Information Processing Program

[0001] The disclosed technology relates to an information processing apparatus, an information processing method, and an information processing program.

[0002] In Japanese Patent Application Laid-Open No. 2020-13175, data obtained from a data provider is managed by a data management device. When the data management device receives a data provision request from a requesting terminal and there is data that hits the request, the data management device anonymizes the data, obtains the hash value of the head block and the timestamp from the blockchain infrastructure to generate a pseudo-timestamp token, and transmits the anonymized data and the pseudo-timestamp token to the requester.

[0003] In Japanese Patent No. 7211517, a data providing device provides distribution target data (corresponding to the first data) to a data distribution device, and the data distribution device transmits processing target data (corresponding to the second data) including at least a part of the distribution target data to a data requesting device in response to a data distribution request from the data requesting device.

[0004] In Japanese Patent Application Laid-Open No. 2023-126889, in a terminal device, first personal identification information and second personal identification information that is less specific than the first personal identification information and can be viewed at the providing destination are stored, and the second personal identification information is provided to the providing destination.

[0005] In Japanese Patent Application Laid-Open No. 2023-43870, in a network including a user device, a remote node, and a plurality of intermediate nodes, data on the user device corresponding to a data request from the remote node is encrypted and transmitted to the intermediate node, and the intermediate node relays and transmits the encrypted data to the remote node.

[0006] In Japanese Patent Application Laid-Open No. 2023-534764, a cryptocurrency intermediation system including a user node, a plurality of VASP (Virtual Asset Service Provider) nodes, a verification node, and a blockchain network is described.

[0007] From a personal information protection standpoint, data is usually provided anonymized. In this process, k-anonymization is used to achieve both personal information protection and minimize data loss. Performing k-anonymization requires collecting and processing multiple data entries.

[0008] In one aspect, the aim is to provide an information processing device, an information processing method, and an information processing program that can anonymize data while also guaranteeing the ownership rights of the data owner.

[0009] A first aspect of this disclosure is an information processing device comprising a processor that mediates the referencing of data, wherein the processor receives a request to reference data, obtains first data and a user ID associated with the first data, compares the request with the first data, selects second data from the first data that matches the request, generates third data obtained by anonymizing the second data, generates a data ID associated with the third data, generates a hash value of the third data from the third data, records the data ID, the hash value of the third data, and the user ID on a blockchain, and outputs the third data and the data ID to the source of the request.

[0010] A second aspect of this disclosure is an information processing method for mediating data referencing, wherein a computer receives a request to reference data, obtains first data and a user ID associated with the first data, compares the request with the first data, selects second data from the first data that matches the request, generates third data obtained by anonymizing the second data, generates a data ID associated with the third data, generates a hash value of the third data from the third data, records the data ID, the hash value of the third data, and the user ID on a blockchain, and outputs the third data and the data ID to the source of the request.

[0011] A third aspect of this disclosure is an information processing program for mediating data referencing, which receives a request to reference data, obtains a first data and a user ID associated with the first data, compares the request with the first data, selects a second data that matches the request from the first data, generates a third data obtained by anonymizing the second data, generates a data ID associated with the third data, generates a hash value of the third data from the third data, records the data ID, the hash value of the third data, and the user ID on a blockchain, and causes a computer to execute a process to output the third data and the data ID to the source of the request.

[0012] In one respect, it can anonymize data while also guaranteeing ownership rights of the data owner.

[0013] This is an explanatory diagram showing an example configuration of the information processing system of this embodiment. This is a schematic block diagram of an example of a computer that functions as a server and a user terminal in this embodiment. This is a block diagram showing the configuration of the server in this embodiment. This is a flowchart showing the data reference mediation process in the server.

[0014] An example of an embodiment of the disclosed technology will be described below with reference to the drawings. In each drawing, identical or equivalent components and parts are given the same reference numerals. Furthermore, the dimensional ratios in the drawings are exaggerated for illustrative purposes and may differ from actual ratios.

[0015] Personal data, such as medical information, is provided to third-party companies for use in drug discovery and AI development. From the perspective of protecting personal information, data is usually provided anonymized. In this process, instead of simply masking personally identifiable data such as names, addresses, and ages, k-anonymization is used to achieve both protection of personal information and prevention of data loss as much as possible. Here, k-anonymization is a process that processes data so that there are k or more data entries belonging to a certain attribute value. For example, this could involve changing an address to express only the prefecture name, or changing age to a 10-year age range. Performing k-anonymization requires collecting and processing multiple data entries. Therefore, in this embodiment, data is anonymized while also ensuring the ownership rights of the data owner.

[0016] <System Configuration> Figure 1 is an explanatory diagram showing an example configuration of the information processing system 2. In this embodiment, the information processing system 2 that performs data reference mediation processing using blockchain will be described. The information processing system 2 includes a server 10, a data server 70, an anonymous processor server 80, and a plurality of user terminals 20. The server 10, the data server 70, the anonymous processor server 80, and the plurality of user terminals 20 are communicated together via a network N.

[0017] The data to be used can be any type of data, such as medical data or inventory management data.

[0018] Server 10, data server 70, and anonymous processor server 80 are, for example, server computers capable of various information processing and information transmission / reception. Note that devices corresponding to server 10, data server 70, and anonymous processor server 80 are not limited to server computers, but may be, for example, personal computers. In this embodiment, server 10 functions as a device that anonymizes data, writes data to the blockchain, and reads data from the blockchain. Data server 70 functions as a device that stores data provided by user terminal 20. Anonymous processor server 80 functions as a device that communicates with user terminal 20 on the data user side.

[0019] The user terminal 20 is a general-purpose computer such as a personal computer. In this embodiment, the user terminal 20 functions as a device that requests the server 10 to write data to the data server 70 and to read data from the blockchain. The multiple user terminals 20 include terminals on the data owner side and terminals on the data user side that request the data. Here, the data owner is a user who has ownership rights to the data, such as a party to medical information. The data user is a user who wants to use the data, such as a pharmaceutical company or an AI service provider.

[0020] In this embodiment, the server 10 performs data referencing mediation processing using blockchain, but the local user terminal 20 may also perform data referencing mediation processing using blockchain. In other words, the distinction between the two is for convenience, and a single computer may perform the entire process.

[0021] <Server Configuration According to This Embodiment> Figure 2 is a block diagram showing the hardware configuration of the server 10 according to this embodiment.

[0022] As shown in Figure 2, the server 10 includes a CPU (Central Processing Unit) 11, ROM (Read Only Memory) 12, RAM (Random Access Memory) 13, storage 14, input unit 15, display unit 16, and communication interface (I / F) 17. Each component is connected to the others via a bus 19 so that they can communicate with each other.

[0023] The CPU 11 is a central processing unit that executes various programs and controls various parts. Specifically, the CPU 11 reads a program from the ROM 12 or storage 14 and executes the program using the RAM 13 as a working area. The CPU 11 controls each of the above components and performs various calculations according to the program stored in the ROM 12 or storage 14. In this embodiment, the ROM 12 or storage 14 stores an information processing program for data reference mediation processing. The information processing program may be a single program or a group of programs composed of multiple programs or modules.

[0024] ROM 12 stores various programs and data. RAM 13 temporarily stores programs or data as a working area. Storage 14 consists of an HDD (Hard Disk Drive) or SSD (Solid State Drive) and stores various programs, including the operating system, and various data.

[0025] The input unit 15 includes a pointing device such as a mouse and a keyboard, and is used for various types of input.

[0026] The display unit 16 is, for example, a liquid crystal display and displays various information. The display unit 16 may also function as an input unit 15 by employing a touch panel system.

[0027] The communication interface 17 is an interface for communicating with other devices, and standards such as Ethernet®, FDDI, and Wi-Fi® can be used.

[0028] Next, the functional configuration of server 10 will be described. Figure 3 is a block diagram showing an example of the functional configuration of server 10.

[0029] Functionally, as shown in Figure 3, the server 10 is configured to include a reception unit 21, an acquisition unit 23, a sorting unit 25, an anonymization unit 27, an ID generation unit 29, a hash value generation unit 31, a recording unit 33, and an output unit 35.

[0030] The reception unit 21 receives requests to access anonymous data from user terminals 20 on the data user side who wish to use anonymous data, via the anonymous data processor server 80. The data to be accessed is represented as structured data, as described later, and is, for example, data corresponding to an RDB (Relational Database). The request is also expressed in the form of a query against the structured data, and is, for example, a query corresponding to an SQL (Structured Query Language).

[0031] The acquisition unit 23 acquires the first data and the user ID associated with the first data from the data server 70. Here, the data server 70 stores a data repository in which the first data and the user ID associated with the first data are pre-registered for each data owner.

[0032] For example, a data repository in which the anonymous user ID of the data owner (e.g., an Ethereum EOA account address or Decentralized Identifier) ​​and the first data are pre-registered is stored in the data server 70. The first data is represented, for example, by the structured data shown in Table 1.

[0033]

[0034] Specifically, the acquisition unit 23 acquires the first data and the user ID associated with the first data from each data repository of the data server 70.

[0035] In this embodiment, the acquisition unit 23 acquires the encrypted first data and the user ID associated with the first data, and decrypts the encrypted first data and user ID. Alternatively, the data may be processed in its encrypted state without decryption.

[0036] The sorting unit 25 compares the received request with the acquired first data and selects the second data that matches the request from the first data.

[0037] Specifically, the screening unit 25 collates the data items (e.g., "white blood cells", "hemoglobin level") included in the received request with the data items of the first data, and selects the second data (e.g., data of "white blood cells", "hemoglobin level") that conforms to the request from the first data.

[0038] Note that the screening unit 25 may also select the second data that conforms to the conditions (e.g., "women aged 20 or older" or "persons with a history of hypertension") included in the received request from the first data obtained from each data repository of the data server 70.

[0039] The anonymization unit 27 generates the third data obtained by anonymizing the selected second data.

[0040] Specifically, the anonymization unit 27 performs k-anonymization on the selected second data to generate the third data. For example, a process is performed so that the number of data entries belonging to a certain data item is k or more. For example, the data of the "address" data entry is processed so that it becomes the name of the prefecture, and the data of the "age" data entry is processed so that it becomes a decade in 10-year increments.

[0041] The ID generation unit 29 generates an anonymous data ID associated with the generated third data.

[0042] The hash value generation unit 31 generates the hash value of the third data from the generated third data.

[0043] The recording unit 33 records a triple of the anonymous data ID, the hash value of the third data, and the anonymous user ID in the block 51 of the blockchain 50.

[0044] The blockchain 50 is constructed by a blockchain network composed of a plurality of computer terminals, and is a concatenation of blocks 51 including data and IDs for specifying the data in chronological order.

[0045] Each time a triple of an anonymous data ID, a hash value of the third data, and an anonymous user ID is to be written, the recording unit 33 writes the triple to the block 51 on the blockchain 50, thereby preventing tampering of the triple. Thus, by writing the triple of the anonymous data ID, the hash value of the third data, and the anonymous user ID as data to the blockchain 50, the ownership of the data can be proven.

[0046] The output unit 35 outputs the third data and the anonymous data ID to the user terminal 20 that is the transmission source of the request.

[0047] <Configuration of User Terminal According to This Embodiment> FIG. 2 above is a block diagram showing the hardware configuration of the user terminal 20 of this embodiment.

[0048] As shown in FIG. 2 above, the user terminal 20 has a CPU 11, a ROM 12, a RAM 13, a storage 14, an input unit 15, a display unit 16, and a communication interface (I / F) 17, similar to the server 10. Each component is communicably connected to each other via a bus 19.

[0049] A program for writing data to the data server 70 or requesting data from the server 10 is stored in the ROM 12 or the storage 14. This program may be a single program or a program group composed of a plurality of programs or modules.

[0050] The input unit 15 receives the first data to be registered in the data server 70 in advance. For example, it receives medical data or inventory data. Also, the input unit 15 receives a data reference request for requesting data to be referred to from the server 10.

[0051] When the CPU 11 receives the first data to be registered in the data server 70 in advance, the CPU 11 registers the first data and an anonymous user ID indicating the owner of the first data in the data repository of the data server 70.

[0052] When the CPU 11 receives a data reference request, the CPU 11 requests the server 10 to refer to the data via the anonymous processor server 80.

[0053] <Operation of Server 10 According to This Embodiment> Next, the operation of Server 10 According to this Embodiment will be described.

[0054] First, when the server 10 receives a data retrieval request from the user terminal 20, the CPU 11 reads an information processing program from the ROM 12 or storage 14, loads it into the RAM 13, and executes it, thereby performing the data retrieval mediation process shown in Figure 4.

[0055] First, in step S100, the reception unit 21 receives a request to access data from a user terminal 20 on the data user side who wants to use anonymous data, via the anonymous data processor server 80.

[0056] In step S102, the acquisition unit 23 acquires encrypted first data and an anonymous user ID associated with the first data from each data repository of the data server 70.

[0057] In step S104, the acquisition unit 23 decrypts the encrypted first data and anonymous user ID.

[0058] In step S106, the sorting unit 25 compares the received request with the acquired first data and selects the second data that matches the request from the first data.

[0059] In step S108, the anonymization unit 27 generates third data obtained by anonymizing the selected second data.

[0060] In step S110, the ID generation unit 29 generates an anonymous data ID to associate with the generated third data.

[0061] In step S112, the hash value generation unit 31 generates a hash value of the third data from the third data.

[0062] In step S114, the recording unit 33 records the triplicate consisting of the anonymous data ID, the hash value of the third data, and the anonymous user ID in block 51 of the blockchain 50.

[0063] In step S116, the output unit 35 outputs the third data and the anonymous data ID to the user terminal 20, which is the source of the request.

[0064] As described above, according to the information processing system of this embodiment, the system receives a request from the data user to access data, and obtains the first data and the user ID associated with the first data from the data server. The server compares the request with the first data and selects the second data that matches the request from the first data. The server generates third data obtained by anonymizing the second data, generates a data ID to associate with the third data, and generates a hash value of the third data from the third data. The server records the data ID, the hash value of the third data, and the user ID on the blockchain and outputs the third data and the data ID to the request sender. This makes it possible to anonymize the data for the protection of personal information and to guarantee the ownership rights of the data owner.

[0065] <Modifications> The present invention is not limited to the embodiments described above, and various modifications and applications are possible without departing from the spirit of the invention.

[0066] For example, the explanation described the case where a triplicate consisting of a data ID, the hash value of a third data, and a user ID is recorded on the blockchain, but it is not limited to this. The triplicate consisting of a data ID, the hash value of a third data, and a user ID may also be represented as an NFT (Non-Fungible Token). Furthermore, to strengthen proof of ownership, a certificate (e.g., a Verified Credential) may be issued with the anonymous processor server as the issuer. In this case, after recording the triplicate consisting of a data ID, the hash value of a third data, and a user ID on the blockchain, the anonymous processor server can issue a certificate and store it on the blockchain as well as on the anonymous processor server.

[0067] Furthermore, the various processes that the CPU reads and executes in each of the above embodiments may be executed by various processors other than the CPU. Examples of such processors include dedicated electrical circuits, which are processors with circuit configurations specifically designed to execute particular processes, such as FPGAs (Field-Programmable Gate Arrays), PLDs (Programmable Logic Devices) whose circuit configurations can be changed after manufacturing, and ASICs (Application Specific Integrated Circuits). In addition, data reference mediation processing may be executed by one of these various processors, or by a combination of two or more processors of the same or different types (for example, multiple FPGAs, and a combination of a CPU and an FPGA). More specifically, the hardware structure of these various processors is an electrical circuit that combines circuit elements such as semiconductor elements.

[0068] Furthermore, although the above embodiments describe a configuration in which the information processing program is pre-stored (installed) in the storage 14, the invention is not limited to this. The program may be provided in a form stored on a non-transitor storage medium such as a CD-ROM (Compact Disk Read Only Memory), DVD-ROM (Digital Versatile Disk Read Only Memory), or USB (Universal Serial Bus) memory. Alternatively, the program may be provided in a form downloaded from an external device via a network.

[0069] The technology disclosed herein extends to all program products. A program product includes all forms of products for providing programs. For example, a program product includes programs provided via a network such as the Internet, and non-temporary computer-readable recording media such as CD-ROMs, DVDs, and USB memory sticks on which programs are stored.

[0070] The embodiments disclosed herein should be considered in all respects to be illustrative and not restrictive. The scope of the present invention is indicated by the claims, not in the sense described above, and all modifications within the sense and scope equivalent to the claims are intended.

[0071] The following additional information is disclosed regarding the embodiments described above.

[0072] (Note 1) An information processing device equipped with a processor that mediates the referencing of data, wherein the processor receives a request to reference data, obtains first data and a user ID associated with the first data, compares the request with the first data, selects second data from the first data that matches the request, generates third data obtained by anonymizing the second data, generates a data ID to associate with the third data, generates a hash value of the third data from the third data, records the data ID, the hash value of the third data, and the user ID on a blockchain, and outputs the third data and the data ID to the source of the request.

[0073] (Note 2) The information processing apparatus according to Note 1, wherein the processor obtains the encrypted first data and the user ID associated with the first data, and further decrypts the encrypted first data and the user ID.

[0074] (Note 3) The information processing apparatus according to Note 1 or 2, wherein the processor compares the data items included in the request with the data items of the first data and selects the second data that conforms to the request from the first data.

[0075] (Note 4) An information processing method for mediating the referencing of data, wherein a computer performs the following processes: receiving a request to reference data; obtaining a first data and a user ID associated with the first data; comparing the request with the first data; selecting a second data from the first data that matches the request; generating a third data obtained by anonymizing the second data; generating a data ID to associate with the third data; generating a hash value of the third data from the third data; recording the data ID, the hash value of the third data, and the user ID on a blockchain; and outputting the third data and the data ID to the source of the request.

[0076] (Note 5) An information processing program for mediating data referencing, which receives a request to reference data, obtains a first data and a user ID associated with the first data, compares the request with the first data, selects a second data from the first data that matches the request, generates a third data obtained by anonymizing the second data, generates a data ID to associate with the third data, generates a hash value of the third data from the third data, records the data ID, the hash value of the third data, and the user ID on a blockchain, and causes a computer to execute the process of outputting the third data and the data ID to the source of the request.

[0077] The disclosure of Japanese Patent Application 2024-174408 is incorporated herein by reference in its entirety.

[0078] All documents, patent applications, and technical standards described herein are incorporated by reference to the same extent as if each individual document, patent application, and technical standard were specifically and individually described as being incorporated by reference.

Claims

1. An information processing device comprising a processor that mediates the referencing of data, wherein the processor receives a request to reference data, obtains first data and a user ID associated with the first data, compares the request with the first data, selects second data from the first data that matches the request, generates third data obtained by anonymizing the second data, generates a data ID to associate with the third data, generates a hash value of the third data from the third data, records the data ID, the hash value of the third data, and the user ID on a blockchain, and outputs the third data and the data ID to the source of the request.

2. The information processing apparatus according to claim 1, wherein the processor obtains encrypted first data and the user ID associated with the first data, and further decrypts the encrypted first data and the user ID.

3. The information processing apparatus according to claim 1, wherein the processor compares the data items included in the request with the data items of the first data and selects the second data that conforms to the request from the first data.

4. An information processing method for mediating data referencing, wherein a computer performs the following processes: receives a request to refer to data; obtains first data and a user ID associated with the first data; compares the request with the first data; selects second data from the first data that matches the request; generates third data obtained by anonymizing the second data; generates a data ID associated with the third data; generates a hash value of the third data from the third data; records the data ID, the hash value of the third data, and the user ID on a blockchain; and outputs the third data and the data ID to the source of the request.

5. An information processing program for mediating data referencing, which receives a request to reference data, obtains a first data and a user ID associated with the first data, compares the request with the first data, selects a second data from the first data that matches the request, generates a third data obtained by anonymizing the second data, generates a data ID to associate with the third data, generates a hash value of the third data from the third data, records the data ID, the hash value of the third data, and the user ID on a blockchain, and causes a computer to execute the process of outputting the third data and the data ID to the source of the request.

Images