Hash Value Matching for Private Information Leakage Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Registering private information on a distributed ledger alongside public information poses a risk of private information leakage, despite individual access rights being set for users, as the private information remains vulnerable to exposure.
Innovation Solution
An information provision system comprising an information accumulation server and an information provision server, where private information is transformed into a hash value and registered on a blockchain alongside public information, allowing secure transmission only to authorized users by matching hash values and retrieval keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If private information is registered on a distributed ledger alongside public information, then authenticity of information is ensured, but risk of private information leakage increases
Solution Approach 1:
The patent segments information into public information and private information, storing them in separate locations. Public information is registered on the distributed ledger for authenticity verification, while private information is stored only in the information accumulation server's database. This segmentation allows the system to maintain the authenticity benefits of blockchain while avoiding the security risks of storing sensitive data on the ledger.
Solution Approach 2:
The patent extracts private information from the distributed ledger registration process entirely. Only public information is extracted and registered on the blockchain, while private information remains exclusively in the centralized database. This extraction eliminates the security vulnerability of storing private data on the distributed ledger while preserving the authenticity verification capability for public information.
2Reliability
If access rights are individually set for each user client, then personal information protection is improved, but system complexity increases
Solution Approach 1:
The patent introduces an intermediary verification mechanism using hash values. Instead of managing complex individual access rights for each user to private information, the system uses hash value matching as an intermediary verification method. Users can verify the integrity of private information through hash values stored on the public ledger without directly accessing the private data itself, simplifying the access control mechanism.
Solution Approach 2:
The patent creates a cryptographic copy (hash value) of private information and stores it on the distributed ledger. This hash copy serves as a verification token that users can access publicly to confirm data integrity without accessing the actual private information. This copying mechanism provides protection without requiring complex access right management.
3Object-affected harmful factors
If only public information is registered on distributed ledger, then risk of information leakage is reduced, but authenticity verification of private information becomes difficult
Solution Approach 1:
The patent creates a cryptographic hash copy of private information and stores it on the distributed ledger alongside public information. This hash copy enables authenticity verification of private information without exposing the actual data. Users can verify whether private information has been tampered with by comparing the stored hash value with a newly calculated hash value, maintaining verification capability while preventing information leakage.
Solution Approach 2:
The patent transforms private information into a different parameter form (hash value) that can be publicly stored and verified without revealing the original information. This parameter transformation allows the system to maintain authenticity verification capability while changing the form of stored data from readable private information to unverifiable hash values, thus preventing leakage.
Data Source
AI summary
An information provision unit searches a distributed ledger by using a retrieval key as at least a part of public information contained in an information provision request. The information provision unit acquires BC registration information associated to the retrieval key from the distributed ledger. The information provision unit searches an information DB by using the retrieval key. The information provision unit acquires operation approval information associated to the retrieval key from the information DB. The information provision unit transforms private information acquired from the information DB through searching into a hash value for verification by using a predetermined hash function. The information provision unit compares a hash value for registration with the hash value for verification.