Information processing device

Abstract

Provided is an information device capable of proving whether a user's information satisfies a predetermined condition while ensuring the confidentiality of the user's information. A user terminal 10 stores first information calculation data, which are data obtained by encrypting first information of a plurality of members belonging to one corporation and then performing a secret calculation, and if the first information calculation data of the plurality of members satisfies a first investment condition of an investor, communicates with a corporation terminal 11 to execute zero-knowledge proof processing for proving that the first information calculation data of the plurality of members satisfies the first investment condition of the investor.

Description

Information processing device

[0001] The present invention relates to an information processing device that processes user information.

[0002] Conventionally, as an information processing device, the one described in Patent Document 1 is known. This information processing device is applied to an information management system that matches a plurality of companies belonging to a joint venture and job seekers. In this information management system, a job seeker's terminal, an information processing device of a human resources service company, a shared database, etc. are connected to a network.

[0003] In the case of this information management system, the job information data of companies is stored in the shared database, and the job hunting conditions and attribute information of job seekers are registered in the information processing device of the human resources service company via the terminal. Further, the work performance information of job seekers in the joint venture is registered in the blockchain.

[0004] Japanese Patent No. 6713588

[0005] In recent years, there is a risk that information may leak due to unauthorized access such as hacking. From this perspective, while ensuring the confidentiality of user information such as job seekers, without actually providing the user information to requesters such as companies, a configuration that can prove that the user information satisfies the predetermined conditions required by the requester is desired.

[0006] The present invention has been made to solve the above problems, and an object thereof is to provide an information device that can prove the sufficiency of user information for a predetermined condition while ensuring the confidentiality of user information.

[0007] To achieve the above objective, the invention according to claim 1 is an information processing device configured to perform data communication with an external information processing device via a network, comprising: a storage unit that stores first information calculation data which is data obtained by encrypting and then performing a secure computation on first information of one or more users from a plurality of users belonging to one group, or data obtained by performing a secure computation on first information of one or more users; and a processing unit that, when the first information calculation data satisfies a predetermined first condition, performs a zero-knowledge proof process to prove that the first information calculation data satisfies a predetermined first condition through communication with an external information processing device.

[0008] According to this information processing device, when the first information calculation data satisfies a predetermined first condition, a zero-knowledge proof process is performed to prove that the first information calculation data satisfies the predetermined first condition through communication with an external information processing device. As a result, the satisfaction of the first information calculation data with respect to the predetermined first condition is proven without the first information calculation data being transmitted to the external information processing device. Consequently, one or more users among multiple users belonging to a group can prove that their first information calculation data satisfies the predetermined first condition while ensuring the confidentiality of their own first information and first information calculation data.

[0009] Furthermore, because the first information calculation data is stored in the memory as data obtained by encrypting the first information of one or more users and then performing a secure calculation, even if unauthorized access such as hacking occurs to the information processing device, the first information itself can be prevented from being leaked to the outside, thus ensuring a high level of security regarding the first information of one or more users.

[0010] In the present invention, the first information preferably includes one or more evaluation scores representing the objective evaluations of one or more users, and the predetermined first condition is preferably a condition relating to whether an investor is willing to invest in a group.

[0011] According to this information processing device, the satisfaction of the first information calculation data with respect to a predetermined first condition can be proven without the first information calculation data being transmitted to an external information processing device. As a result, a group can prove the satisfaction of the first information with respect to a predetermined first condition while ensuring the confidentiality of the first information and the first information calculation data. Furthermore, because the first information includes one or more evaluation scores representing the objective evaluations of one or more users, investors can appropriately judge whether or not to invest in a group based on these evaluation scores.

[0012] In the present invention, the first information preferably includes information on the results of providing predetermined educational support to one or more users, and the predetermined first condition is preferably a condition in which the results of providing the predetermined educational support represent the effectiveness of the predetermined educational support.

[0013] According to this information processing device, the first information includes information on the results of providing predetermined educational support to one or more users, and the predetermined first condition is that the results of providing predetermined educational support represent the effectiveness of the predetermined educational support. Therefore, while ensuring the confidentiality of the first information and the first information calculation data, it is possible to prove that the condition that the results of providing predetermined educational support represent the predetermined effectiveness is satisfied for one or more users.

[0014] In the present invention, the first information includes information on the results of impact investments made by a corporation or organization for one or more users, and the predetermined first condition is preferably that the information on the results of impact investments made for one or more users represents the effectiveness of the impact investments.

[0015] According to this information processing device, which includes information on the results of impact investments conducted by organizations, including corporations, the predetermined first condition is that the information on the results of impact investments conducted for one or more users represents the effectiveness of the impact investments. Thus, while ensuring the confidentiality of the first information and the first information calculation data, a corporation or organization can externally prove that the condition that the results of impact investments conducted for one or more users represent the predetermined effectiveness has been met.

[0016] In the present invention, the storage unit further stores second information encrypted data obtained by encrypting second information that is different from first information of one or more users, and the processing unit preferably performs a zero-knowledge proof process to prove that the first information calculation data satisfies a predetermined first condition, and further proves that the second information encrypted data satisfies a predetermined second condition when the second information encrypted data satisfies a predetermined second condition.

[0017] According to this information processing device, the satisfaction of the first and second information data with respect to predetermined first and second conditions can be proven without the first information calculation data and the second information encryption data being transmitted to an external information processing device. As a result, one or more users can prove the satisfaction of the first information calculation data and the second information encryption data with respect to predetermined first and second conditions, while ensuring the confidentiality of their own first information calculation data and second information encryption data.

[0018] This figure shows the configuration of an information processing system equipped with an information processing device according to the first embodiment of the present invention. This is a sequence diagram showing the job information acquisition process. This is a sequence diagram showing the employment conditions acquisition process. This is a sequence diagram showing the condition fulfillment certification process. This is a sequence diagram showing the borrower information acquisition process. This is a sequence diagram showing the loan conditions acquisition process. This is a sequence diagram showing the condition fulfillment certification process of the second embodiment. This is a sequence diagram showing the investor information acquisition process. This is a sequence diagram showing the investment conditions acquisition process. This is a sequence diagram showing the condition fulfillment certification process of the third embodiment. This figure shows the configuration of an information processing system equipped with an information processing device according to the fourth embodiment. This is a sequence diagram showing the user data registration process and the certification data acquisition process. This is a sequence diagram showing the condition fulfillment certification process of the fourth embodiment.

[0019] Hereinafter, an information processing system equipped with an information processing device according to the first embodiment of the present invention will be described with reference to the drawings. The information processing system 1 shown in Figure 1 of this embodiment is for the user to perform various communication processes, as described below.

[0020] As shown in Figure 1, the information processing system 1 includes a management server 3, user terminals 10, and corporate terminals 11. In this case, although not shown in the figure, the information processing system 1 also includes a large number of user terminals configured similarly to user terminal 10, and a large number of corporate terminals configured similarly to corporate terminal 11.

[0021] In this information processing system 1, the management server 3 and terminals 10-11 are configured to communicate with each other via network 5. This network 5 consists of a wireless communication network, a wired communication network, and the internet.

[0022] The management server 3 is for performing various control processes and has the functions of a control unit, a memory unit, and a communication unit. The control unit consists of a CPU, memory, and I / O interface, while the memory unit consists of storage devices such as ROM, RAM, and HDD. The communication unit consists of communication circuits.

[0023] This management server 3 stores job postings (recruitment information) from numerous corporations. In this case, the job postings include, for example, the job title / position and working conditions (salary, working hours).

[0024] Next, the user terminal 10 will be described. The user terminal 10 is a smartphone type and, as will be described later, is used by user M1 when obtaining corporate recruitment information or applying for job openings.

[0025] The user terminal 10 includes a controller (not shown), a display 10a, and a wireless communication device (not shown). The controller has application software installed for performing various control processes. The display 10a is a capacitive touch panel, positioned so that its front surface faces the surface of the user terminal 10.

[0026] Although not shown in the diagram, various icons corresponding to various application software are displayed on the display 10a. Furthermore, when user M1 performs an input operation on the display 10a (for example, tapping, swiping, pinching out, and pinching in), an operation signal representing this operation is output to the controller. Based on this operation signal, the controller performs various control processes, as described later.

[0027] Furthermore, user terminal 10 stores user M1's information data. This information data is recorded in SBT (SoulBound Token), and SBT is registered on a blockchain (not shown).

[0028] Furthermore, the information data is created by a designated organization and is configured to include first information computation data and second information encryption data. The first information computation data is numerical data obtained by encrypting the first information of user M1 using a predetermined encryption algorithm (e.g., a homomorphic encryption algorithm) and then performing a secure computation using a predetermined secure computation algorithm. The second information encryption data is numerical data obtained by encrypting the second information of user M1 using a predetermined encryption algorithm (e.g., a homomorphic encryption algorithm).

[0029] In this embodiment, the first information of user M1 includes a numerical value of user M1's ability score, which includes an overall performance score and an overall competency score. The overall performance score is a score that comprehensively reflects user M1's academic performance and other factors. The overall competency score is a score that indicates user M1's personal characteristics and abilities, and is specifically calculated using a method previously proposed by the applicant in Japanese Patent Publication No. 6589257.

[0030] Furthermore, the second information consists of user M1's personal information (such as the number of years of experience in the desired occupation). The first information calculation data and the second information encryption data described above are electronically certified by the designated organization that created the information data. In addition, the first information calculation data may be data in which user M1's first information has been securely calculated using a designated secure calculation algorithm (for example, a homomorphic encryption algorithm).

[0031] As described above, user terminal 10 is configured in the same way as user terminal 10. Note that user terminal 10 is not limited to smartphones; it can be any device equipped with computing and communication functions, such as a desktop PC, tablet PC, or notebook PC.

[0032] Furthermore, in this embodiment, the user terminal 10 corresponds to an information processing device and, as shown in Figure 1, is equipped with the functions of a storage unit 10x and a processing unit 10y.

[0033] In this embodiment of the information processing system 1, the management server 3, the corporate terminal 11, and the user terminal 10 may be located in the same country, or they may be located in different countries.

[0034] Next, the corporate terminal 11 will be described. The corporate terminal 11 consists of a desktop computer and is used by personnel recruitment staff M2 of recruiting companies when performing various control processes described later.

[0035] The corporate terminal 11 includes a display 11a, a main unit 11b, and an input interface 11c. The main unit 11b includes storage such as an HDD, a processor, memory (RAM, E2PROM, ROM, etc.), and I / O interface circuits (none of which are shown). Application software for performing various control processes, which will be described later, is installed on the storage of this main unit 11b.

[0036] Furthermore, the input interface 11c consists of a keyboard and mouse for operating the corporate terminal 11. The corporate terminal 11 is configured as described above, and other corporate terminals are configured in the same way as the corporate terminal 11. Note that the corporate terminal 11 is not limited to a desktop computer, but may be any device equipped with computing and communication functions, such as a notebook computer, tablet computer, or smartphone. Also, in this embodiment, the corporate terminal 11 corresponds to an external information processing device.

[0037] Next, we will explain the contents of the various control processes executed in the information processing system 1 configured as described above. First, we will explain the job information acquisition process with reference to Figure 2. This process is for user M1 to acquire job information. Note that the process in Figure 2 is executed after login authentication has been performed between the user terminal 10 and the management server 3.

[0038] As shown in Figure 2, first, the job information request process is executed on the user terminal 10 (Figure 2 / STEP 1). In this job information request process, a request command is sent from the user terminal 10 to the management server 3 by the user M1's operation on the user terminal 10. This request command requests job information data for the occupation in which user M1 wishes to work (for example, data scientist).

[0039] When this request command is received by the management server 3, the management server 3 executes the job information data transmission process (Figure 2 / STEP 2). In this job information data transmission process, job information data is sent from the management server 3 to the user terminal 10. This job information data is configured to include multiple job postings related to the job type desired by user M1 from among the many job postings registered in the management server 3.

[0040] When this job information data is received by the user terminal 10, the user terminal 10 executes a job information display process (Figure 2 / STEP 3). In this job information display process, multiple job postings are displayed on the display 10a of the user terminal 10. As a result, user M1 can select a job posting that meets their desired working conditions.

[0041] Next, referring to FIG. 3, the employment condition acquisition process will be described. This employment condition acquisition process is such that user M1 selects job information that meets his desired working conditions and acquires the employment conditions of that job information. Hereinafter, the company that provides the job information selected by user M1 to management server 3 is referred to as the "job applicant company".

[0042] As shown in FIG. 3, first, on user terminal 10, an employment condition request process is executed (FIG. 3 / STEP10). In this employment condition request process, an employment condition request command is transmitted from user terminal 10 to the corporate terminal 11 of the job applicant company by the operation of user terminal 10 by user M1. This employment condition request command is for user M1 to request the employment conditions of the job applicant company.

[0043] When this employment condition request command is received by the corporate terminal 11 of the job applicant company, on the corporate terminal 11, an employment condition transmission process is executed (FIG. 3 / STEP11). In this employment condition transmission process, employment condition data is transmitted from corporate terminal 11 to user terminal 10 by the operation of corporate terminal 11 by the human resources recruitment person M2.

[0044] This employment condition data includes the following first employment condition and second employment condition. The first employment condition is that the first information calculation data is a predetermined value or more, which corresponds to the applicant's ability score being a predetermined value or more. Also, the second employment condition is that the second information encryption data is within a predetermined range, which corresponds to the number of years of experience in the job type desired by the applicant being a predetermined number of years or more. Note that in the first employment condition or the second employment condition, it may be configured to include conditions other than those described above (for example, the number of years of experience in the position).

[0045] When this employment condition data is received by user terminal 10, on user terminal 10, an employment condition display process is executed (FIG. 3 / STEP12). In this employment condition display process, the above-described first employment condition and second employment condition of the job applicant company are displayed on display 10a of user terminal 10. Thereby, user M1 can determine whether his first information calculation data and second information encryption data satisfy both the first employment condition and the second employment condition.

[0046] Next, with reference to FIG. 4, the condition satisfaction proof process will be described. This condition satisfaction proof process is for the user M1 to prove to the hiring company that the user M1 has applied for the job recruitment when the first information calculation data and the second information encrypted data of the user M1 satisfy the first employment condition and the second employment condition of the hiring company, respectively.

[0047] As shown in FIG. 4, first, by operating the user terminal 10 by the user M1, the job application process is executed on the user terminal 10 (FIG. 4 / STEP20). In this job application process, the job application data is transmitted from the user terminal 10 to the company terminal 11. This job application data is data indicating that the user M1 applies for the job recruitment to the hiring company.

[0048] When this job application data is received by the company terminal 11, the company terminal 11 performs a proof request process (FIG. 4 / STEP21). In this proof request process, the proof request data is transmitted from the user terminal 10 to the company terminal 11. This proof request data requests the user M1 to prove that the first information calculation data of the user M1 satisfies the first employment condition and that the second information encrypted data of the user M1 satisfies the second employment condition.

[0049] When this proof request data is received by the user terminal 10, the user terminal 10 performs a zero-knowledge proof process (FIG. 4 / STEP22). This zero-knowledge proof process is a process for proving that the first information calculation data of the user M1 satisfies the first employment condition and that the second information encrypted data satisfies the second employment condition.

[0050] That is, it is a process for proving that the first information calculation data of the user M1 is greater than or equal to a predetermined value (that is, the ability score of the user M1 is greater than or equal to a predetermined value), and for proving that the second information encrypted data satisfies the second employment condition (that is, the number of years of experience in the job type desired by the user M1 is greater than or equal to a predetermined number of years).

[0051] Specifically, a non-interactive proof of the inner product is constructed from the first information computation data and the second information encryption data of user M1 using the bulletproofs method and the Fiat-Shamir transformation method. That is, the proof of the inner product is constructed using the Pedersen Commitment, and the proof of the inner product is transformed into a non-interactive proof of the inner product by the Fiat-Shamir transformation.

[0052] Then, the proof data, which includes the proof data of the inner product configured as described above, and electronic authentication data proving that the first information calculation data and the second information encryption data of user M1 have been electronically authenticated by a designated organization, is transmitted from the user terminal 10 to the corporate terminal 11.

[0053] When this certification data is received by the recruiting company's corporate terminal 11, the corporate terminal 11 executes a certification verification process (Figure 4 / STEP 23). In this certification verification process, the recruiting company's personnel officer M2 verifies the contents of the certification data using a predetermined algorithm by operating the corporate terminal 11. This confirms that user M1's first information calculation data and second information encryption data satisfy the company's first and second hiring conditions, respectively, and that this data is electronically authenticated. Based on this, the personnel officer M2 can decide whether or not to hire user M1.

[0054] In the information processing system of this embodiment, after the execution of the process shown in Figure 4, if the personnel recruitment officer M2 decides to hire user M1, a communication process is performed (not shown) to inform the employee of the decision.

[0055] As described above, according to the user terminal 10 of this embodiment, when the first information calculation data and the second information encryption data of user M1 satisfy the first and second adoption conditions of the company, respectively, a zero-knowledge proof process is performed through communication with the corporate terminal 11 to prove that the first information calculation data and the second information encryption data of user M1 satisfy the first and second adoption conditions, respectively.

[0056] As a result, the satisfaction of the first and second adoption conditions for the first and second information calculation data and the second information encryption data of user M1 is proven without the user M1's first information calculation data and second information encryption data being transmitted to the corporate terminal 11. In other words, user M1 can prove that the satisfaction of the first and second adoption conditions for the first information calculation data and the second information encryption data is achieved while ensuring the confidentiality of their own first information calculation data and second information encryption data.

[0057] Furthermore, in the user terminal 10, the first information calculation data is stored as data obtained by encrypted and then securely computed the first information, and the second information encryption data is stored as data obtained by encrypting the second information. Therefore, even if unauthorized access to the user terminal 10 occurs, such as hacking, the first and second information can be prevented from being leaked to the outside, and a high level of security can be ensured regarding the first and second information of user M1.

[0058] Although the zero-knowledge proof process in Figure 4 is an example of performing a non-interactive inner product proof, it may also be configured to perform an interactive inner product proof between the user terminal 10 and the corporate terminal 11 using the bulletproofs method.

[0059] Furthermore, while the process shown in Figure 4 is an example where the user terminal 10 and the corporate terminal 11 communicate directly, alternatively, the user terminal 10 and the corporate terminal 11 may be configured to communicate via the management server 3. In that case, the management server 3 should be configured to transfer data from one of the user terminals 10 or the corporate terminal 11 to the other.

[0060] Furthermore, while the first embodiment is an example in which both the first information calculation data and the second information encryption data are included in the user M1's information data, it is also possible to configure it so that only the first information calculation data is included in the user M1's information data. In that case, the zero-knowledge proof process in Figure 4 / STEP 22 described above should be configured to prove that the first information of user M1 satisfies the first adoption condition.

[0061] On the other hand, while the first embodiment uses SBT as the smart contract, NFT or the like may be used instead.

[0062] Next, an information processing system according to the second embodiment of the present invention will be described. In the case of the information processing system of this embodiment, the hardware configuration and other aspects are configured in the same way as the information processing system 1 of the first embodiment, except that the contents of the various control processes described later are different. Therefore, the differences from the first embodiment will be mainly described below.

[0063] In this embodiment of the information processing system, various processes are performed when user M1 applies for a loan from a financial institution, as described below. In this embodiment, the corporate terminal 11 is operated by a loan officer of a financial institution, and the management server 3 is assumed to have information on financial institutions that can provide loans registered.

[0064] Furthermore, user terminal 10 stores user M1's information data, which is recorded in SBT (SoulBound Token), and SBT is registered on a blockchain (not shown).

[0065] Furthermore, the information data is configured to include first information computation data and second information encryption data. The first information computation data is data obtained by encrypting the first information of user M1 using a predetermined encryption algorithm, and then performing a secure computation using a predetermined secure computation algorithm. The second information encryption data is data obtained by encrypting the second information of user M1 using a predetermined encryption algorithm.

[0066] In this embodiment, the first information is the annual income data of user M1, and this annual income data is electronically authenticated by a public institution (for example, a tax office). Furthermore, the second information consists of user M1's personal information (user M1's age, years of experience in their occupation, etc.), and is electronically authenticated by a local government and a corporation. In addition to this, the first information calculation data and the second information encryption data are also composed of electronically authenticated data by a local government and a corporation.

[0067] Next, the contents of the various control processes performed in the information processing system of the second embodiment will be described. In the information processing system of this embodiment, various processes are performed when user M1 applies for a loan from a financial institution, as described below.

[0068] First, the process for obtaining loan recipient information will be explained with reference to Figure 5. This process is for obtaining information on financial institutions that can provide a loan for the amount that user M1 wishes to borrow (hereinafter referred to as the "desired loan amount"). Note that the process in Figure 5 is executed after login authentication has been performed between the user terminal 10 and the management server 3.

[0069] As shown in Figure 5, first, the borrower information request process is executed on the user terminal 10 (Figure 5 / STEP 30). In this borrower information request process, a request command is sent from the user terminal 10 to the management server 3 by the user M1's operation on the user terminal 10. This request command requests information data of financial institutions that can provide loans for the amount requested by user M1.

[0070] When this request command is received by the management server 3, the management server 3 executes the borrower information data transmission process (Figure 5 / STEP 31). In this borrower information data transmission process, borrower information data is sent from the management server 3 to the user terminal 10. This borrower information data is configured to include information on financial institutions that can provide the requested loan amount from among the many financial institutions registered in the management server 3.

[0071] When this borrower information data is received by the user terminal 10, the user terminal 10 executes a borrower information display process (Figure 5 / STEP 32). In this borrower information display process, information on financial institutions that can provide the loan amount requested by user M1 is displayed on the display 10a of the user terminal 10. As a result, user M1 can identify financial institutions that can provide the loan amount requested by him.

[0072] Next, the loan terms acquisition process will be explained with reference to Figure 6. This loan terms acquisition process allows user M1 to select a financial institution that can provide a loan for the amount they wish to borrow and to obtain the loan terms from that financial institution. Hereinafter, the financial institution selected by user M1 will be referred to as the "selected financial institution."

[0073] As shown in Figure 6, first, the loan terms request process is executed on the user terminal 10 (Figure 6 / STEP 40). In this loan terms request process, the user M1 operates the user terminal 10, and the loan terms request data is transmitted from the user terminal 10 to the corporate terminal 11 of the selected financial institution. This loan terms request data is for user M1 to request the loan terms from the selected financial institution.

[0074] When this loan terms request data is received by the corporate terminal 11 of the borrowing company, the corporate terminal 11 executes the loan terms transmission process (Figure 6 / STEP 41). In this loan terms transmission process, the loan officer operates the corporate terminal 11 and transmits the loan terms data from the corporate terminal 11 to the user terminal 10.

[0075] This loan condition data includes the following first and second loan conditions. The first loan condition is that the first information calculation data is above a predetermined value, which corresponds to the loan applicant's annual income being above a predetermined amount. The second loan condition is that the second information encryption data is above a predetermined value, which corresponds to the loan applicant's length of employment being above a predetermined number of years.

[0076] When this loan condition data is received by the user terminal 10, the user terminal 10 executes a loan condition display process (Figure 6 / STEP 42). In this loan condition display process, the first and second loan conditions of the borrowing corporation are displayed on the display 10a of the user terminal 10. This allows user M1 to determine whether their first information calculation data and second information encryption data satisfy the first and second loan conditions, respectively.

[0077] Next, the condition satisfaction verification process will be explained with reference to Figure 7. This condition satisfaction verification process is for user M1 to prove to the selected financial institution that user M1's first information calculation data and second information encryption data satisfy the first and second loan conditions of the selected financial institution, respectively.

[0078] As shown in Figure 7, first, user M1 operates user terminal 10, and a loan request process is executed on user terminal 10 (Figure 7 / STEP 50). In this loan request process, loan request data is transmitted from user terminal 10 to corporate terminal 11. This loan request data represents that user M1 is requesting a loan from the selected lending institution.

[0079] When this loan request data is received by the corporate terminal 11, the corporate terminal 11 executes a certification request process (Figure 7 / STEP 51). In this certification request process, certification request data is sent from the corporate terminal 11 to the user terminal 10. This certification request data requests user M1 to prove that user M1's first information calculation data satisfies the first loan conditions and that user M1's second information encryption data satisfies the second loan conditions.

[0080] When this proof request data is received by the user terminal 10, the user terminal 10 performs a zero-knowledge proof process (Figure 4 / STEP 52). This zero-knowledge proof process is a process to prove that user M1's first information calculation data satisfies the first loan condition and that the second information encryption data satisfies the second loan condition.

[0081] In other words, this process is to prove that User M1's loan applicant's annual income is above a specified amount, and also to prove that User M1's length of employment is above a specified number of years.

[0082] Specifically, the certification data is created using the same method as in STEP 22 of Figure 4 described above. That is, after the dot product certification data is created based on the first information calculation data and the second information encryption data, the management server 3 transmits the certification data, which includes this dot product certification data, as well as electronic authentication data of the first information calculation data and the second information encryption data from public institutions and corporations, to the corporate terminal 11.

[0083] When this certification data is received by the corporate terminal 11 of the selected financial institution, the corporate terminal 11 performs a certification verification process (Figure 7 / STEP 53). Specifically, using the same method as STEP 23 in Figure 4 described above, it is confirmed that user M1's first information calculation data and second information encryption data satisfy the first and second loan conditions of the selected financial institution, respectively, and that user M1's first information calculation data and second information encryption data are electronically authenticated. Based on this, the loan officer of the selected financial institution can decide whether or not to grant a loan to user M1.

[0084] In the information processing system of this embodiment, after the processing shown in Figure 7 is executed, if the loan officer of the selected financial institution decides whether or not to grant a loan to user M1, a communication process is performed (not shown) to inform the user of the decision.

[0085] As described above, according to the user terminal 10 of this embodiment, when the first information calculation data and the second information encryption data of user M1 satisfy the first and second loan conditions of the financial institution, respectively, a zero-knowledge proof process is performed to prove this through communication with the corporate terminal 11.

[0086] As a result, the satisfaction of the first and second loan conditions in user M1's first information calculation data and second information encryption data will be proven without user M1's first information calculation data and second information encryption data being transmitted to the corporate terminal 11. In other words, user M1 can prove the satisfaction of the first and second loan conditions in their first information calculation data and second information encryption data while ensuring the confidentiality of their own data.

[0087] Furthermore, in the user terminal 10, the first information calculation data is stored as data obtained by encrypting the first information and then performing a secure calculation, and the second information encryption data is stored as data obtained by encrypting the second information. Therefore, even if unauthorized access to the user terminal 10 occurs, such as hacking, the first and second information can be prevented from being leaked to the outside, and a high level of security can be ensured regarding the first and second information of user M1.

[0088] In the second embodiment, the first and second loan conditions are examples where the loan conditions are those of a financial institution. However, the party presenting the loan conditions to user M1 is not limited to a financial institution; it may be an individual or a corporation other than a financial institution.

[0089] Furthermore, the second embodiment is an example in which both the first information calculation data and the second information encryption data are included in the user M1's information data, but it is also possible to configure it so that only the first information calculation data is included in the user M1's information data. In that case, the zero-knowledge proof process in Figure 7 / STEP 52 described above should be configured so that it is proven that the first information of user M1 satisfies the first loan condition.

[0090] Next, the contents of the various control processes performed in the information processing system of the third embodiment will be described. In the case of the information processing system of this embodiment, the hardware configuration and other aspects are configured in the same way as the information processing system 1 of the first embodiment, except that the contents of the control processes are different. Therefore, the differences from the first embodiment will be mainly described below.

[0091] In this embodiment, the user terminal 10 is used by a representative of the corporation that the investor is investing in (hereinafter referred to as the "investment target corporation"), and the corporation terminal 11 is used by the investor.

[0092] In this embodiment, the management server 3 stores information on a large number of investors. These investors include corporations, and the information stored on them includes various details such as the amount of money each investor can invest and their contact information.

[0093] Furthermore, the user terminal 10 stores information data of the investment target company. Specifically, the information data stored includes first information calculation data and second information encryption data of the investment target company. This first information calculation data and second information encryption data are created and electronically authenticated by a designated organization, and this data is recorded in SBT (SoulBound Token).

[0094] The first information computation data is a single numerical data obtained by first-order encryption of the first information of all members belonging to the investment target corporation, which has been encrypted using a predetermined encryption algorithm, and then securely computed using a predetermined secure computation algorithm. Furthermore, the multiple second information encryption data are single numerical data obtained by first-order encryption of the second information of all members belonging to the investment target corporation, which has been encrypted using a predetermined encryption algorithm.

[0095] In this embodiment, the first information for each member includes each member's ability score, and the ability score includes the aforementioned overall performance score and overall competency score.

[0096] Furthermore, each member's second information consists of each member's personal information (such as the number of years of experience in each member's occupation). The first information calculation data may be a single numerical data obtained by securely calculating the first information of all members using a predetermined secure calculation algorithm. In this embodiment, the investment target corporation corresponds to one group, and multiple members correspond to multiple users.

[0097] In this embodiment of the information processing system, various processes are performed when an investment target company applies to an investor, as described below.

[0098] First, the investor information acquisition process will be explained with reference to Figure 8. This process is used by the target company to acquire information on investors who can make investments in it. Note that the process in Figure 8 is executed after login authentication has been performed between the user terminal 10 and the management server 3.

[0099] As shown in Figure 8, first, the investor information request process is executed on the user terminal 10 (Figure 8 / STEP 60). In this investor information request process, a request command is sent from the user terminal 10 to the management server 3 by the operation of the user terminal 10 by the corporate representative. This request command requests investor information data.

[0100] When this request command is received by the management server 3, the management server 3 executes the investor information data transmission process (Figure 8 / STEP 61). In this investor information data transmission process, investor information data is sent from the management server 3 to the user terminal 10. This investor information data is configured to include information on a large number of lenders registered in the management server 3.

[0101] When this investor information data is received by the user terminal 10, the user terminal 10 executes an investor information display process (Figure 8 / STEP 62). In this investor information display process, information on numerous lenders is displayed on the display 10a of the user terminal 10. This allows the corporate representative to recognize information on investors who can make investments in the target corporation.

[0102] Next, we will explain the investment conditions acquisition process with reference to Figure 9. This investment conditions acquisition process allows a corporate representative to select one investor from among many investors and acquire the investment conditions for that investor. Hereinafter, the investor selected by the corporate representative will be referred to as the "selected investor."

[0103] As shown in Figure 9, first, the investment conditions request process is executed on the user terminal 10 (Figure 9 / STEP 70). In this investment conditions request process, the corporate representative operates the user terminal 10, and an investment conditions request command is sent from the user terminal 10 to the corporate terminal 11 of the selected investor. This investment conditions request command is for the corporate representative to request the investment conditions of the selected investor.

[0104] When this investment conditions request command is received by the investor's corporate terminal 11, the corporate terminal 11 executes the investment conditions transmission process (Figure 9 / STEP 71). In this investment conditions transmission process, the investment conditions data is transmitted from the corporate terminal 11 to the user terminal 10 by the operation of the corporate terminal 11 by the selected investor.

[0105] This investment condition data includes the following first and second investment conditions. The first investment condition is that the first information calculation data is above a predetermined value, which corresponds to the calculation results of the ability scores of all members meeting the predetermined conditions. The second loan condition is that the second information encryption data is above a predetermined value, which corresponds to the calculation results of the personal information of all members meeting the predetermined conditions.

[0106] When this investment condition data is received by the user terminal 10, the user terminal 10 executes an investment condition display process (Figure 9 / STEP 72). In this investment condition display process, the first and second investment conditions of the investor corporation described above are displayed on the display 10a of the user terminal 10. This allows the corporation representative to determine whether the first information calculation data and the second information encryption data of the target corporation satisfy the first and second investment conditions.

[0107] Next, the process for proving that the conditions have been met will be explained with reference to Figure 10. This process for proving that the conditions have been met is intended to prove that the first information calculation data and the second information encryption data of the target company satisfy the first and second investment conditions of the selected investor, respectively.

[0108] As shown in Figure 10, first, the user terminal 10 is operated by a representative of the target company, and the investment request process is executed on the user terminal 10 (Figure 10 / STEP 80). In this investment request process, investment request data is sent from the user terminal 10 to the company terminal 11. This investment request data indicates that the target company is requesting investment from the selected investment institution.

[0109] When this investment request data is received by the corporate terminal 11, the corporate terminal 11 executes a certification request process (Figure 10 / STEP 81). In this certification request process, the certification request data is sent from the corporate terminal 11 to the user terminal 10. This certification request data requests the target company to prove that its first information calculation data satisfies the first investment condition, and that its second information encryption data satisfies the second investment condition.

[0110] When this proof request data is received by the user terminal 10, the user terminal 10 executes a zero-knowledge proof process (Figure 10 / STEP 82). This zero-knowledge proof process is a process to prove that the first information calculation data of the target company satisfies the first investment condition and that the second information encryption data satisfies the second investment condition.

[0111] In other words, this process is to prove that the calculation results of the competence scores of all members of the investment target company meet the prescribed conditions, and also to prove that the calculation results of the personal information of all members meet the prescribed conditions.

[0112] Specifically, the proof data is created using the same method as in STEP 22 of Figure 4 described above. That is, after proof data of the dot product is created based on the first information calculation data and the second information encryption data, proof data including this proof data of the dot product, as well as electronic authentication data of the first information calculation data and the second information encryption data, is transmitted from the management server 3 to the corporate terminal 11.

[0113] When this certification data is received by the corporate terminal 11 of the selected investor, the corporate terminal 11 performs a certification verification process (Figure 10 / STEP 83). Specifically, using the same method as STEP 23 in Figure 4 described above, it is confirmed that the first information calculation data and the second information encryption data of the target company satisfy the first and second investment conditions of the selected investor, respectively, and that the first information calculation data and the second information encryption data are electronically authenticated. Based on this, the selected investor can decide whether or not to invest in the target company.

[0114] In the information processing system of this embodiment, after the processing shown in Figure 10 has been executed, if the selected investor decides whether or not to invest in the target company, a communication process is performed (not shown) to inform the investor of the decision.

[0115] As described above, according to the user terminal 10 of this embodiment, when the first information calculation data and the second information encryption data of the target corporation satisfy the first and second investment conditions of the selected investor, respectively, a zero-knowledge proof process is performed to prove this through communication with the corporation terminal 11.

[0116] As a result, the satisfaction of the first and second investment conditions in the first and second information calculation data and second information encryption data of the investee corporation can be proven without the investment corporation's first information calculation data and second information encryption data being transmitted to the corporate terminal 11. In other words, the investment corporation can prove the satisfaction of the first and second investment conditions in the first information calculation data and second information encryption data while ensuring the confidentiality of the first and second information calculation data.

[0117] Furthermore, in the user terminal 10, the first information calculation data is stored as data obtained by securely calculating the first information of all members after encryption, and the second information encryption data is stored as data obtained by encrypting the second information of all members. Therefore, even if unauthorized access to the user terminal 10 occurs, such as hacking, it is possible to prevent the leakage of the first and second information of all members to the outside, and a high level of security can be ensured regarding the first and second information of all members.

[0118] In the third embodiment, the system is configured such that, in order for the selecting investor to decide whether or not to invest in the target company, the first information calculation data and the second information encryption data of the target company satisfy the first and second investment conditions, respectively, by proving this through a zero-knowledge proof. Alternatively, the system may be configured such that, in order for the selecting investor to decide whether or not to invest in the target company, the first information calculation data of the target company satisfies the first investment condition, by proving this through a zero-knowledge proof. In that case, it is sufficient to configure the system so that only the first information calculation data of the target company is stored in the server 3.

[0119] Furthermore, the third embodiment is an example in which a selecting investor proves by zero-knowledge proof that the first information calculation data and the second information encryption data of the target company satisfy the first and second investment conditions, respectively, in order to decide whether or not to invest in the target company. Alternatively, the system may be configured so that an auditor proves by zero-knowledge proof that the first information calculation data and the second information encryption data of the audited company satisfy the first and second audit conditions, respectively, in order to conduct an audit of the audited company.

[0120] Furthermore, the third embodiment is an example in which the first information calculation data and the second information encryption data of the investment target company are stored in the user terminal 10. However, instead, the first information calculation data and the second information encryption data of the investment target company may be stored in the server 3. In that case, the zero-knowledge proof processing (STEP 82) shown in Figure 10 should be configured to be performed in the server 3. In the above configuration, the server 3 corresponds to the arithmetic processing unit.

[0121] In addition, the third embodiment is an example in which the first information calculation data and the second information encryption data are calculated from the information of all members belonging to one corporation. However, instead, the system may be configured to calculate the first information calculation data and the second information encryption data from the information of one or more members among the multiple members belonging to one corporation.

[0122] Furthermore, while the third embodiment is an example where one corporation is treated as one group, instead, one group may be a group of students, or a group consisting of multiple working adults from different professions.

[0123] Next, with reference to Figure 11, an information processing system 1A equipped with an information processing device according to the fourth embodiment of the present invention will be described. In the case of the information processing system 1A of this embodiment, except for a few parts, it is configured in the same way as the information processing system 1 of the first embodiment. Therefore, the same reference numerals will be used for the same components as in the information processing system 1 of the first embodiment, and their descriptions will be omitted. Only the differences will be described.

[0124] As shown in Figure 11, the information processing system 1A of this embodiment includes an auditor terminal 12 in addition to the management server 3, user terminal 10, and corporate terminal 11. Although not shown, this information processing system 1A also includes multiple user terminals configured similarly to the user terminal 10.

[0125] Furthermore, the management server 3 and terminals 10-12 are configured to communicate with each other via the network 5. In this embodiment of the information processing system 1A, the management server 3 and terminals 10-12 may be located in the same country, or they may be located in different countries.

[0126] Management Server 3 is managed by a designated management corporation, and this management server 3 stores the first information calculation data and the second information encryption data of multiple users. This first information calculation data and the second information encryption data are data recorded in SBT (SoulBound Token), and SBT is registered on the blockchain.

[0127] Each of the multiple first information computation data is numerical data obtained by secretly computing a predetermined secret computation algorithm after the user's first information, described later, has been encrypted using a predetermined encryption algorithm (e.g., a homomorphic encryption algorithm). Each of the multiple second information encryption data is numerical data obtained by encrypting the user M1's second information, described later, using a predetermined encryption algorithm (e.g., a homomorphic encryption algorithm).

[0128] Next, the user terminal 10 will be described. In this embodiment, user M1, who uses the user terminal 10, is one of several students belonging to a single group, and the user terminal 10 stores the information data described below. Hereinafter, this single group will be referred to as the "student group".

[0129] This information data includes first information computation data and second information encryption data. The first information computation data is numerical data obtained by encrypting the educational effectiveness score, which is the first piece of information, using a predetermined encryption algorithm (e.g., a homomorphic encryption algorithm), and then performing a secure computation using a predetermined secure computation algorithm. This educational effectiveness score is data that represents the degree of improvement in User M1's abilities when multiple students belonging to the aforementioned student group, including User M1, participate in a predetermined educational program implemented by a local government.

[0130] More specifically, the educational effectiveness score is calculated based on a pre-course competency assessment (evaluation of competency related to the educational program) and a post-course competency assessment. Furthermore, this educational effectiveness score is electronically certified by the local government that created it. It should be noted that the designated educational program taken by multiple students in a student group is not limited to those implemented by local governments, but may also be implemented by various organizations such as NPOs.

[0131] Furthermore, the second information encryption data is numerical data obtained by encrypting the capability score as second information using a predetermined encryption algorithm (for example, a homomorphic encryption algorithm), and the capability score is the same data as the capability score in the first embodiment described above. Moreover, as described above, the first information calculation data and the second information encryption data are data recorded in SBT, and SBT is registered in the blockchain.

[0132] As described above, the user terminal 10 is configured, and user M1 transmits information data to the management server 3 via the user terminal 10, as will be described later. In addition, other user terminals (not shown) are configured in the same way as user terminal 10 and are used by another student belonging to the student group.

[0133] Next, the corporate terminal 11 will be described. In this embodiment, the corporate terminal 11 is operated by the person in charge M11 of the corporation being audited (hereinafter referred to as the "audited corporation"). As will be described later, the corporate terminal 11 stores data which is a copy of the first information calculation data and second information encryption data of one or more students from among the first information calculation data and second information encryption data of multiple students belonging to a student group stored in the management server 3.

[0134] In this embodiment, the corporate terminal 11 corresponds to an information processing device and, as shown in Figure 11, is equipped with the functions of a storage unit 11x and a processing unit 11y.

[0135] Next, the auditor terminal 12 will be described. The auditor terminal 12 is a desktop computer similar to the corporate terminal 11 and is used by auditor M12 when performing various control processes described later.

[0136] The auditor terminal 12 includes a display 12a, a device body 12b, and an input interface 12c, and these configuration elements 12a to 12c are configured in the same way as the configuration elements 11a to 11c of the corporate terminal 11, so their explanation will be omitted. In this embodiment, the auditor terminal 12 corresponds to an external processing unit.

[0137] Next, the contents of the various control processes performed in the information processing system 1A of the fourth embodiment will be described. In the information processing system 1A of this embodiment, various processes are performed as described below.

[0138] First, the user data registration process will be explained with reference to Figure 12. This user data registration process is for multiple students belonging to the aforementioned student group, including user M1, to register the aforementioned first information calculation data and second information encryption data to the management server 3.

[0139] The following explanation uses the user data registration process as an example, where user M1 registers their first information calculation data and second information encryption data with the management server 3. Furthermore, the following process is executed after login authentication has been completed between the user terminal 10 and the management server 3.

[0140] As shown in Figure 12, first, the user terminal 10 executes the registration data transmission process (Figure 12 / STEP 90). In this registration data transmission process, registration data is sent from the user terminal 10 to the management server 3 by user M1's operation of the user terminal 10. This registration data includes the first information calculation data and the second information encryption data of user M1 as described above.

[0141] When this registration data is received by the management server 3, the management server 3 executes the data registration process (Figure 12 / STEP 91). In this data registration process, the first information calculation data and the second information encryption data of user M1 are registered (stored) in the management server 3.

[0142] As described above, the user data registration process is performed between the user terminal 10 and the management server 3. Furthermore, although not shown in the diagram, the user data registration process is also performed between the user terminals of students belonging to student groups other than user M1 and the management server 3 in the same manner. As a result, the management server 3 registers the first information calculation data and the second information encryption data for all students belonging to the student group.

[0143] Next, the authentication data acquisition process will be explained with reference to Figure 12. This authentication data acquisition process acquires duplicate data of the first information calculation data and the second information encryption data of one or more students from the student group registered on the management server 3, and stores this data on the corporate terminal 11. Furthermore, the following process is executed after login authentication has been performed between the corporate terminal 11 and the management server 3.

[0144] As shown in Figure 12, first, the corporate terminal 11 executes the certification data request process (Figure 12 / STEP 92). In this certification data request process, the person in charge M11 operates the corporate terminal 11, and a certification data request command is sent from the corporate terminal 11 to the management server 3.

[0145] This certification data request command requests the management server 3 to send certification data. The certification data is a copy of the data of a student whose first information calculation data satisfies a predetermined first condition and whose second information encryption data satisfies a predetermined second condition, as registered in the management server 3 for each student group.

[0146] In this case, the educational effectiveness score of the first information computation data being equal to or greater than a predetermined first value corresponds to the fulfillment of the predetermined first condition, and the ability score of the second information cryptography data being equal to or greater than a predetermined second value corresponds to the fulfillment of the predetermined second condition. In other words, the proof data is data that shows that a student achieved a high level of educational effectiveness by taking a predetermined educational program, and that the student possesses high ability.

[0147] When this certification data request command is received by the management server 3, the management server 3 executes the certification data transmission process (Figure 12 / STEP 93). In this certification data transmission process, the certification data is sent from the management server 3 to the corporate terminal 11.

[0148] In the following explanation, we will use the example where, as proof data, duplicate data of user M1's first information calculation data and duplicate data of the second information encryption data are sent from the management server 3 to the corporate terminal 11.

[0149] When this certification data is received by the corporate terminal 11, the corporate terminal 11 executes a certification data storage process (Figure 12 / STEP 94). In this certification data storage process, the corporate terminal 11 stores copies of the first information calculation data and the second information encryption data of user M1, which are the certification data. These copies of the first information calculation data and the second information encryption data of user M1 are recorded as SBTs, and the SBTs are registered on the blockchain.

[0150] Although not shown in the diagram, after the certification data is stored in the corporate terminal 11, the cost of implementing the educational program for user M1 is paid by the audited corporation to the local government that implemented the program through the management organization. In this way, the audited corporation has provided educational support to user M1 as part of its social contribution. In other words, the audited corporation has made an impact investment in user M1.

[0151] Furthermore, the timing at which the audited entity pays the cost of the educational program to user M1 is not limited to the timing described above; it may also be at the time when the educational effectiveness score is calculated after user M1 has completed the program, or at any other time.

[0152] Next, the condition satisfaction verification process will be explained with reference to Figure 13. This condition satisfaction verification process is intended to prove to the auditor that the audited corporation has provided educational support to outstanding user M1 as part of its social contribution, and more specifically, to prove that the duplicated data of user M1's first information calculation data and the duplicated data of its second information encryption data satisfy the aforementioned predetermined first and second conditions, respectively.

[0153] As shown in Figure 13, first, the corporate terminal 11 is operated by the person in charge at the audited corporation M11, and the certification request process is executed on the corporate terminal 11 (Figure 13 / STEP 100). In this certification request process, the certification request data is sent from the corporate terminal 11 to the auditor's terminal 12. This certification request data is intended to request the auditor to perform a process to prove that the audited corporation has already implemented the above-mentioned educational support.

[0154] When this certification request data is received by the auditor's terminal 12, the auditor's terminal 12 executes the certification request process (Figure 13 / STEP 101). In this certification request process, the certification request data is sent from the auditor's terminal 12 to the corporate terminal 11. This certification request data is a request from the auditor to the audited corporation to certify that the audited corporation has already implemented the above-mentioned educational support or impact investment.

[0155] When this certification request data is received by the corporate terminal 11, the corporate terminal 11 performs a zero-knowledge certification process (Figure 13 / STEP 102). This zero-knowledge certification process is to prove that the audited corporation has already implemented the above-mentioned educational support or impact investment. In other words, it is a process to prove that the copy data of user M1's first information calculation data stored in the corporate terminal 11 satisfies a predetermined first condition, and that the copy data of user M1's second information encryption data satisfies a predetermined second condition.

[0156] Specifically, the certification data is created using the same method as in STEP 22 of Figure 4 described above. That is, after the certification data of the dot product is created based on the duplicate data of the first information calculation data and the duplicate data of the second information encryption data, the certification data, which includes this certification data of the dot product as well as the electronic authentication data of the first information calculation data and the second information encryption data, is transmitted from the corporate terminal 11 to the auditor terminal 12.

[0157] When this certification data is received by the auditor's terminal 12, the auditor's terminal 12 performs a certification verification process (Figure 13 / STEP 103). Specifically, using the same method as STEP 23 in Figure 4 described above, it is confirmed that the duplicate data of user M1's first information calculation data and the duplicate data of the second information encryption data satisfy the predetermined first and second conditions, respectively, and that the first information calculation data and the second information encryption data are electronically authenticated. From this, the auditor can confirm that the audited company has provided educational support to outstanding user M1 as part of its social contribution. At the same time, the auditor can confirm that the audited company has made an impact investment in outstanding user M1.

[0158] Although not shown in the diagram, after the process described in Figure 13 is executed, if the auditor confirms that the audited corporation has provided educational support as described above, a notification process will be executed to inform the auditor of this.

[0159] As described above, according to the corporate terminal 11 of this embodiment, when the duplicate data of the first information calculation data and the duplicate data of the second information encryption data of user M1 satisfy the predetermined first condition and the predetermined second condition, respectively, a zero-knowledge proof process is performed to prove this through communication with the auditor terminal 12.

[0160] As a result, the satisfaction of the predetermined first and second conditions in the duplicated data of the first information calculation data and the duplicated data of the second information encryption data of user M1 will be proven without the duplicated data being transmitted to the auditor's terminal 12. In other words, the audited corporation can prove the satisfaction of the predetermined first and second conditions in the duplicated data of the first information calculation data and the duplicated data of the second information encryption data while ensuring the confidentiality of the duplicated data.

[0161] Furthermore, in the corporate terminal 11, the duplicate data of the first information calculation data is stored as the duplicate data of the data obtained by securely calculating the first information of user M1 after encryption, and the duplicate data of the second information encryption data is stored as the duplicate data of the data obtained by encrypting the second information of user M. Therefore, even if unauthorized access to the corporate terminal 11 occurs, such as hacking, it is possible to prevent the leakage of user M1's first and second information to the outside, and a high level of security can be ensured regarding user M1's first and second information.

[0162] In addition, the fourth embodiment is an example in which, in order to prove that the audited corporation provided educational support to outstanding user M1 as part of its social contribution, it is proven by zero-knowledge proof that the duplicate data of user M1's first information calculation data and the duplicate data of its second information encryption data satisfy predetermined first and second conditions, respectively. However, instead, in order to prove that the audited corporation provided educational support to outstanding user M1 as part of its social contribution, it may be configured to prove by zero-knowledge proof that the duplicate data of user M1's first information calculation data satisfies predetermined first condition.

[0163] Furthermore, the fourth embodiment is an example in which, in the certification data acquisition process shown in Figure 12, duplicate data of the first information calculation data and duplicate data of the second information encryption data of user M1 are acquired as certification data. However, the system may be configured to acquire duplicate data of the first information calculation data and duplicate data of the second information encryption data of one or more students other than user M1 in the student group, including user M1, as certification data.

[0164] In that case, it is sufficient to prove, by zero-knowledge proof in the condition satisfaction proof process shown in Figure 13, that the duplicate data of the first information computation data and the duplicate data of the second information encryption data of user M1 and one or more students satisfy the predetermined first condition and predetermined second condition, respectively.

[0165] Furthermore, in the certification data acquisition process shown in Figure 12, instead of using duplicate data of user M1's first information calculation data and duplicate data of the second information encryption data as certification data, the corporate terminal 11 may receive the first information calculation data itself and the second information encryption data itself from the management server 3, and store this data in the corporate terminal 11.

[0166] In that case, it is sufficient to prove that user M1's first information calculation data and second information encryption data satisfy the predetermined first and second conditions, respectively, by zero-knowledge proof in the condition satisfaction proof process shown in Figure 13.

[0167] Furthermore, while the fourth embodiment is an example in which one group is a student group to which multiple students belong, instead, one group may be a group of working adults to which multiple working adults belong.

[0168] Furthermore, while the fourth embodiment is an example in which a predetermined educational program is used as predetermined educational support, instead, predetermined educational courses and predetermined teaching practice may be used as predetermined educational support.

[0169] Furthermore, while the fourth embodiment is an example in which the educational effectiveness score of user M1 upon completion of a predetermined educational program is used as information regarding the results of the predetermined educational support, alternatively, the absolute ability evaluation of user M1 after completion of the predetermined educational program may be used as information regarding the results of the predetermined educational support.

[0170] Furthermore, in the fourth embodiment, the condition that User M's educational effectiveness score is above a predetermined value is replaced with the condition that the results of implementing the predetermined educational support represent the effectiveness of the predetermined educational support. Alternatively, the condition that User M1's ability evaluation after taking the predetermined educational program is above a predetermined value may be replaced with the condition that the results of implementing the predetermined educational support represent the effectiveness of the predetermined educational support.

[0171] Furthermore, while the fourth embodiment is an example in which the audited corporation certifies to the auditor that it provided educational support to outstanding user M1 as part of its social contribution in the condition satisfaction certification process, it is also possible to configure the condition satisfaction certification process to certify to another corporation or organization that the audited corporation provided educational support to outstanding user M1 as part of its social contribution.

[0172] 1 Information Processing System 1A Information Processing System 5 Network 10 User Terminal (Information Processing Device) 10x Storage Unit 10y Processing Unit 11 Corporate Terminal (External Information Processing Device, Information Processing Device) 11x Storage Unit 11y Processing Unit 12 Auditor Terminal (External Information Processing Device) M1 User M12 Auditor

Claims

1. An information processing device configured to perform data communication with an external information processing device via a network, comprising: a storage unit that stores data obtained by encrypting and then performing a secure computation on first information of one or more users belonging to a group, or first information computation data which is data obtained by performing a secure computation on said first information of said one or more users; and a processing unit that, when the first information computation data satisfies a predetermined first condition, performs a zero-knowledge proof process to prove that the first information computation data satisfies the predetermined first condition through communication with the external information processing device.

2. An information processing device according to claim 1, wherein the first information includes one or more evaluation scores representing the objective evaluations of one or more users, and the predetermined first condition is a condition relating to whether or not an investor can invest in one group.

3. An information processing device according to claim 1, wherein the first information includes information on the results of providing predetermined educational support to one or more users, and the predetermined first condition is a condition that the information on the results of providing the predetermined educational support represents the effectiveness of providing the predetermined educational support.

4. An information processing device according to claim 1, wherein the first information includes information on the results of an impact investment made by a corporation or organization for one or more users, and the predetermined first condition is that the information on the results of the impact investment made for one or more users represents the effectiveness of the impact investment.

5. An information processing apparatus according to any one of claims 1 to 4, wherein the storage unit further stores second encrypted information data obtained by encrypting second information different from the first information of one or more users, and the processing unit performs the zero-knowledge proof process in order to prove that the first calculated information data satisfies the predetermined first condition, and further proves that the second encrypted information data satisfies the predetermined second condition when the second encrypted information data satisfies the predetermined second condition.

Images