JP2020107342A - Information processing system - Google Patents

Abstract

To provide a technique for dynamically controlling and distributing contents stored in a block chain according to a request.SOLUTION: A contents registration section 101 of a management server 1 executes control for transmitting contents to an internal block chain 3 arranged in an internal network. A request reception section 501 of a Web server 5 receives information indicating the request of contents. A contents presentation section 502 of the Web server 5 extracts and presents one or more contents matching the request value received by the request reception section 501 from one or more contents stored in the internal block chain 3. Thus, the problem is solved.SELECTED DRAWING: Figure 3

Description

The present invention relates to an information processing system.

2. Description of the Related Art Conventionally, a service that provides an optimized network for delivering web content via the Internet, that is, a content delivery service has been popular.
However, there is a problem that the Web server goes down or an excessive load is applied to the network due to an increase in the capacity of the content to be distributed. Therefore, a technique has been proposed for shortening the processing time and for prompt distribution to clients (see, for example, Patent Document 1).

JP, 2017-091149, A

However, although only the conventional technology including the technology described in Patent Document 1 described above is compatible with static content, it is not fully compatible with dynamic content.

The present invention has been made in view of such a situation, and an object of the present invention is to provide a technique for dynamically controlling and distributing content stored in a block chain in response to a request.

In order to achieve the above object, an information processing system of one embodiment of the present invention is
Transmission control means for executing control of transmitting content to one or more block chains arranged in a predetermined network,
A reception means for receiving information indicating a content request,
Presentation means for extracting and presenting one or more contents that match the content of the request accepted by the acceptance means from the one or more contents stored in the one or more block chains.
Equipped with.

According to the present invention, contents stored in a blockchain can be dynamically controlled and delivered in response to a request.

It is a block diagram (internal type) which shows an example of a structure of the information processing system which concerns on one Embodiment of this invention. 2 is a block diagram showing an example of a hardware configuration of a management server in the information processing system shown in FIG. 1. FIG. FIG. 3 is a block diagram showing an example of a functional configuration for executing a content distribution process among the functional configurations of the information processing system including the management server of FIG. 2. FIG. 2 is a diagram showing an example of a configuration (external type) different from the configuration shown in FIG. 1 as an example of the configuration of the information processing system according to the embodiment of the present invention. It is a figure which shows an example of the login screen displayed when using this service.

Embodiments of the present invention will be described below with reference to the drawings.

First, a definition of terms in a service (hereinafter, referred to as “present service”) to which an information processing system to which the management server 1 according to an embodiment of the present invention is applied is described.
"Static content" means a content file that is not processed by a program. For example, files such as images, moving images, HTML, CSS, Javascript (registered trademark), etc. are included in the static content.
“CDN (Content Delivery Network)” means content distribution.
"Dynamic content" means a content file that performs program processing. For example, a file in which processing is written in PHP, JAVA (registered trademark), C language, etc. is included in the dynamic content.
“DCDN (Dynamic Content Delivery Network)” means dynamic content distribution.
“BC” means blockchain.

Next, the role of the existing Web cache server will be described.
An existing Web cache server such as a CDN service is generally used for increasing the response speed, reducing the load on the server, and reducing the traffic.

Next, a problem raised by the existing CDN service will be described.
It applies to static contents (content files that are not changed by programs such as moving images, images, HTML, CSS, and Javascript (registered trademark)), but does not apply to dynamic contents.
Also, the cache is created only for the responses of the servers in the same network. In the case of an external network, it is necessary to place the corresponding cache file for synchronous processing and file transfer in a prescribed location.
When it is changed, it is necessary to delete the cache by batch automatic execution or manual command execution.

Next, the existing cache technology will be described.
Roughly speaking, there are two general cache technologies: one that uses a template cache/query cache on the application software (hereinafter referred to as “app”) side and the other that uses a cache server.

Next, the block chain cache (BC Cache) will be described.
The present invention is a CDN service using a block chain, a block chain cache (hereinafter referred to as “BC Cache”).
"BC Cache" stores data for content distribution in the block chain. Content is distributed while performing dynamic control with the saved contract address and the request value given at execution.

The advantages of BC Cache include the following (1) to (5). That is, (1) it is possible to control the dynamic cache by the authority and the authentication function. (2) All P2P cache files can be synchronized. (3) Strengthening of tamper resistance. (4) The processing creation time at the time of cache replacement is reduced to 0 seconds. (5) Content can be provided only by the cache server.

Regarding (1) "Dynamic cache control by authority and authentication function", unlike the existing cache, the contract address storing the cache can be given the authority control/authentication function. The data of BC can be called according to the requested contract and the argument. Thereby, dynamic content control can be realized.

Regarding the above (2) "all synchronization of cache files by P2P", cache data is registered/updated in various servers by P2P and all synchronization is performed. Even if there is a difference in data, it operates with consensus processing by BC. The service does not stop due to the difference. In addition, all servers can continue to operate as long as they do not fail. Thereby, high availability is realized.

Regarding "Strengthening tamper resistance" in (3) above, blockchain is a mechanism with strong tamper resistance. By delivering the cache data in BC, it is possible to prevent the delivery destination from being specified. As a result, it is possible to always generate the history at the time of updating/registering. Further, it is possible to strengthen security against attacks such as cash poisoning and fraudulent acts from the administrator side.

Regarding (4) “Process creation time at cache replacement to 0 seconds”, when dynamic content distribution is performed by the existing CDN service, processing time at the time of cache file generation is required. Updates are not reflected. In this embodiment, when dynamic content distribution is performed, the generated content is registered in BC. As a result, it becomes possible for a user who is browsing to display a content at a response speed comparable to a time interval for displaying static content, even if the content is dynamic and takes a long time.

Regarding the above-mentioned (5) “Providing content only by cache server”, in the case of static content distribution, the server that distributes the content needs to be made public.
In this embodiment, a server that distributes content can be arranged in the internal network. In addition, the synchronous communication of contents can perform secure communication peculiar to BC. Further, the influence of the DDos attack on the content distribution source server is reduced, and the availability by P2P is improved.

Next, the mechanism of BC Cache will be described.
First, the generated content data (HTML, JSON, xml, etc.) is stored in the BC. Next, the content data of BC is acquired by PHP and a response is returned. The control by the authority of BC is performed by the contract.

FIG. 1 is a configuration diagram (internal type) showing an example of the configuration of an information processing system according to an embodiment of the present invention.
As shown in FIG. 1, an information processing system according to an embodiment of the present invention includes a management server 1, a service provider terminal 2, an internal block chain 3, an external block chain 4, and a Web server 5. , And the client terminal 6 are included.

The management server 1 is an information processing device that manages the content DB 181 in which one or more contents are stored and the website W.
The service provider terminal 2 is an information processing device operated by a service provider (not shown). The service provider terminal 2 is composed of, for example, a personal computer, a smartphone, a tablet, or the like.
The internal blockchain 3 is a blockchain realized by a blockchain server that constitutes an internal network on the service provider side.
The external block chain 4 is a block chain realized by a block chain server that constitutes an external network.
The web server 5 is an information processing device that provides a web service.
The client terminal 6 is an information processing device operated by a client (not shown) that uses content. The client terminal 6 is composed of, for example, a personal computer, a smartphone, a tablet, or the like.
The management server 1, the service provider terminal 2, and the internal block chain 3 form an internal network on the service provider side.

In the internal network, the content is registered in the internal block chain 3 via the management server 1 based on the operation of the service provider terminal 2 by the service provider (step S101).
Synchronization is performed between the internal block chain 3 and the external block chain 4 (step S102). As a result, the registered content is also shared by the external block chain 4.
The client terminal 6 requests content from the Web server 5 (step S103). The Web server 5 sends a request to the external block chain 4 (step S104) and presents the acquired content to the client terminal 6. That is, the Web server 5 extracts the content corresponding to the request from the client terminal 6 from the one or more contents stored in the external block chain 4 and transmits the content to the client terminal 6 (step S105).
With such an internal configuration, the service provider can distribute the content on the internal network. As a result, it is possible to realize the distribution of contents in a highly secure environment.

FIG. 2 is a block diagram showing an example of the hardware configuration of the management server in the information processing system shown in FIG.

The management server 1 includes a CPU (Central Processing Unit) 11, a ROM (Read Only Memory) 12, a RAM (Random Access Memory) 13, a bus 14, an input/output interface 15, an input unit 16, and an output unit 17. The storage unit 18, the communication unit 19, and the drive 20 are provided.

The CPU 11 executes various processes according to a program recorded in the ROM 12 or a program loaded from the storage unit 18 into the RAM 13.
The RAM 13 also appropriately stores data and the like necessary for the CPU 11 to execute various processes.

The CPU 11, ROM 12, and RAM 13 are connected to each other via a bus 14. An input/output interface 15 is also connected to the bus 14. An input unit 16, an output unit 17, a storage unit 18, a communication unit 19, and a drive 20 are connected to the input/output interface 15.

The input unit 16 includes, for example, a keyboard and inputs various information.
The output unit 17 includes a display such as a liquid crystal display, a speaker, and the like, and outputs various kinds of information as an image and a sound.
The storage unit 18 is configured by a DRAM (Dynamic Random Access Memory) or the like, and stores various data.
The communication unit 19 communicates with other devices and the like (for example, the service provider terminal 2 and the internal blockchain 3 in FIG. 1) via the network N including the Internet.

A removable medium 30, which is composed of a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, or the like, is appropriately mounted on the drive 20. The program read from the removable medium 30 by the drive 20 is installed in the storage unit 18 as needed.
Further, the removable medium 30 can also store various data stored in the storage unit 18 similarly to the storage unit 18.

Although not shown, the service provider terminal 2, the web server 5, and the client terminal 6 in FIG. 1 can also have basically the same configuration as the hardware configuration shown in FIG. Therefore, the description of the hardware configurations of the service provider terminal 2, the web server 5, and the client terminal 6 will be omitted.

By such cooperation of various hardware and various software of the management server 1 of FIG. 2, various processing including content distribution processing in the information processing system including the management server 1 can be executed. As a result, the service provider can provide the above service.
"Content distribution process" means a process executed to provide this service.
Hereinafter, with reference to FIG. 3, a functional configuration for executing a content distribution process, the execution of which is controlled in the information processing system including the management server 1 according to the present embodiment, will be described.

FIG. 3 is a block diagram showing an example of a functional configuration for executing a content distribution process among the functional configurations of the information processing system including the management server of FIG.

As shown in FIG. 3, in the CPU 11 of the management server 1, when the execution of the content distribution process is controlled, the content registration unit 101 and the content management unit 102 function. Further, in the CPU (not shown) of the Web server 5, the request receiving unit 501 and the content presenting unit 502 function.
A content DB 181 is provided in an area of the storage unit 18 of the management server 1. In the content DB 181, n pieces of content (n is an integer value of 1 or more) are managed in association with information (for example, ID) that can uniquely identify each of the n pieces of content.

The content registration unit 101 of the management server 1 registers the content by executing control of transmitting the content to the internal block chain arranged in the internal network.

The content management unit 102 of the management server 1 stores and manages one or more contents registered by the content registration unit 101 in the internal blockchain 3. When the internal block chain 3 and the external block chain 4 are synchronized, one or more contents stored in the internal block chain 3 are shared by the external block chain 4.

The request receiving unit 501 of the web server 5 receives information indicating a request for content. Specifically, the request receiving unit 501 receives a request for content from the client terminal 6.

The content presenting unit 502 of the Web server 5 has at least one that matches the request value received by the request receiving unit 501 from one or more contents stored in the internal block chain 3 and the external block chain 4. Content is extracted and presented to the client terminal 6.

FIG. 4 is a diagram showing an example of a configuration (external type) different from the configuration shown in FIG. 1 as an example of the configuration of the information processing system according to the embodiment of the present invention.

The information processing system shown in FIG. 4 is configured to include a management server 1, a service provider terminal 2, an external block chain 4, a Web server 5, and a client terminal 6.
The management server 1, the service provider terminal 2, the external block chain 4, the web server 5, and the client terminal 6 that compose the information processing system shown in FIG. 4 are the same as the configuration shown in FIG. Is omitted.

Unlike the information processing system shown in FIG. 1, the information processing system shown in FIG. 4 does not have the internal block chain 3 in the internal network.
In the internal network, the content is transmitted to and stored in the external block chain 4 via the management server 1 (step S201) based on the operation of the service provider terminal 2 by the service provider (step S202).
The client terminal 6 transmits a request for content to the web server 5 (step S203). The web server 5 extracts the content corresponding to the request from the client terminal 6 from the one or more contents stored in the external block chain 4 (step S204) and transmits the content to the client terminal 6 (step S205). ).
In such an external type configuration, it is not necessary to arrange the block chain (internal type block chain 3) in the internal network, so that the cost can be reduced. However, since it requires communication with the outside, it is not as secure as the internal type.

Next, a content delivery procedure will be described.
First, (1) locally distributed content is created. Next, (2) the content is stored in the confirmation contract address. Next, (3) a confirmation URL (Uniform Resource Locator) is executed for confirmation. Then, (4) the content is stored in the production contract address (reflecting the production).

Next, the technical advantages of this embodiment will be described.
When attacks are frequently made on the server of the content delivery destination, it is possible to limit the 80th and 443th ports to the IP address or to the internal network. As a result, it becomes difficult to perform a DDoS attack on the server to which the content is delivered or an unauthorized access from the outside.
A closed system is possible except for the BC-related port, so that a highly secure system can be realized.
Since it is P2P sharing using BC, data sharing becomes easy.

Next, a configuration example of the cache server will be described.
Examples of the configuration of the cache server include a web server (apache.nginx), a block chain, and a programming language (PHP).

Next, an example of the BC cache API will be described.
Examples of BC cache APIs include Cache set (cache registration) and Cache get (cache acquisition).

Next, the novelty and inventive step of BC Cache will be described.
It enables dynamic cache using authority control and authentication function. Existing cache servers are premised on static content.
It is possible to provide applications on a contract basis. Different apps can be provided only by the URL argument. Further, in the existing Web service, it is necessary to prepare a Web server and a DB for each application, but each application can be managed independently.
While the existing cache is premised on the same network, P2P cache synchronization is possible for each node of the external network.

Next, a dynamic content delivery system (DCDN) as a product example will be described.
The dynamic content distribution system has the following features.
The content shown to the client is the BC cache data.
The content delivery server can create content in the internal network, store it in the BC cache, and deliver it.
Save the content you want to distribute to the blockchain. It is possible to display the corresponding HTML according to the account address, the contract address, and various parameters by the request value of the URL.

Next, a service example using DCDN will be described.
Among the service examples using DCDN, (1) anonymous voting system will be described.
The anonymous voting system stores each voting form of the election in BC.
When voting on the Web, the voting destination data is stored in BC.
After completing the registration of the voting data with the contract, the personal information is emptied and a QR code (registered trademark) containing unique data as a voting result is issued.
From the QR code (registered trademark), who voted is displayed, but it cannot be discriminated from who voted.

Next, a processing flow of the anonymous voting system will be described. First, (1) On the login screen, log in by reading the My Number card or using the QR code (registered trademark) written on the ballot. Next, in (2) Election voting screen, the screen is displayed by BC Cache to vote for the target. Next, (3) on the election vote completion screen, the identification ID (for example, my number) that associates the target data with the content of the vote stored in the BC is deleted. Then, a QR code (registered trademark) for reconfirming the voting result of the person is displayed.
The following examples are specific examples of the above (3) election vote completion screen.
That is, the QR code (registered trademark) 3 is read on the voting result display screen of the person and the corresponding voting result is displayed. Further, on the election result screen, the total result of voting result data in BC is displayed. In (3), by deleting the identification ID for associating, "who voted" can be specified, and "who voted" can be made anonymous. ..

FIG. 5 is a diagram showing an example of a login screen displayed when using this service.
As shown in FIG. 5A, a login identifier (for example, QR code (registered trademark)) is displayed on a device other than the device that logs in. Then, as shown in FIG. 5B, the login identifier (for example, QR code (registered trademark)) displayed on the other device is read by the camera or the like of the device that logs in, and authentication is performed to log in.

Next, the earthquake disaster news distribution service will be described.
The earthquake news distribution service can display cached news data as long as a specific node is operating, even if a failure occurs due to a natural disaster in a specific area.

Here, a processing flow of the earthquake disaster news distribution system will be described.
First, (1) catastrophe occurs. (2) A user with a normal network registers the content at the corresponding contract address. (3) A user who is connected to another network confirms the contents.

Next, the medicine notebook/chart service will be described.
Doctors and pharmacists have the authority to refer to and write in the medicine notebook and medical record service to which this embodiment is applied. The user has only the right to refer. Others (other than doctors, pharmacists, and users) have neither reference authority nor write authority. With such an operation, safe data management can be realized.

Next, the flow of the medicine notebook/chart service will be described.
First, (1) the doctor or pharmacist registers the content data of the patient in the block chain. (2) The patient logs in using the issued QR code (registered trademark). (3) If the login is successful, check the contents. Here, the writing authority is possessed by the doctor/pharmacist side. Therefore, other people cannot rewrite the information. By authenticating the patient using a QR code (registered trademark) or the like to which personal information is not associated, it is possible to browse information with high anonymity while maintaining convenience.

Next, the qualification examination grade inquiry service will be described.
The examination organizer has the authority to refer to and to write the results of the qualification examination to which this embodiment is applied. The user has only the right to refer. Others (other than the test organizer and user) do not have the authority to reference or write. This allows for safe data management.

Next, a processing flow of the qualification test result inquiry system will be described.
First, (1) the sponsor side registers the examinee's content data in the blockchain. (2) The examinee logs in using the issued QR code (registered trademark). (3) If the login is successful, check the contents.
Here, the organizer has write authority. Therefore, other people cannot rewrite the information. The test taker authenticates using a QR code (registered trademark) or the like, which is not associated with personal information. As a result, it is possible to browse information with high anonymity while maintaining convenience.

Next, the closed content distribution system will be described.
Until now, content distribution required a procedure for disclosure to the outside. It required work such as encrypted communication support and server disclosure procedures.
In this embodiment, an individual/group/company having a BC server can distribute, share, and browse contents without disclosing the contents to the outside. Content can be registered in a BC server arranged on the internal network, and the content can be distributed to a partner who has the same BC server.

Next, a processing flow of the closed content distribution system will be described.
First, (1) the content distributor side registers the content. (2) The user sends a request to the BC by designating the contract address of the content to be viewed. (3) If there is no problem in the processing result, display the content.
This enables highly secure information browsing in a closed environment. As a result, information can be shared by the local area network only by BC communication.

Although one embodiment of the present invention has been described above, the present invention is not limited to the above-described embodiment, and modifications, improvements, etc. within a range in which the object of the present invention can be achieved are included in the present invention. Is.

Further, for example, the series of processes described above can be executed by hardware or software.
In other words, the system configuration of FIG. 1, the hardware configuration of FIG. 2, and the functional configuration of FIG. 3 are merely examples and are not particularly limited.
That is, it is sufficient if the information processing system is provided with a function capable of executing the above-described series of processing as a whole, and what kind of functional block is used to realize this function is not particularly limited to the example of FIG. Further, the location of the functional block is not particularly limited to that shown in FIG. 3, and may be arbitrary. For example, the functional block of the management server 1 may be transferred to the service provider terminal 2 or the like. On the contrary, the functional block of the service provider terminal 2 may be transferred to the management server 1 or the like.
Further, one functional block may be configured by hardware alone, software alone, or a combination thereof.

When the series of processes is executed by software, a program forming the software is installed in a computer or the like from a network or a recording medium.
The computer may be a computer embedded in dedicated hardware.
Further, the computer may be a computer capable of executing various functions by installing various programs, for example, a general-purpose smartphone or a personal computer other than a server.

The recording medium containing such a program is not only configured by a removable medium (not shown) which is distributed separately from the apparatus main body to provide the program to the client etc. It is composed of a recording medium or the like provided to others.

In the present specification, the steps for writing the program recorded on the recording medium are not limited to the processing performed in time series according to the order, but are not necessarily performed in time series, and may be performed in parallel or individually. It also includes the processing to be executed.
In addition, in the present specification, the term system is meant to mean an overall device including a plurality of devices and a plurality of means.

In other words, the information processing apparatus to which the present invention is applied only needs to have the following configuration, and can take various various embodiments.
That is, the information processing system to which the present invention is applied is
Transmission control means (for example, the content of the management server 1 in FIG. 3) that executes control to transmit content to one or more block chains (for example, the internal block chain 3 and the external block chain 4) arranged in a predetermined network. Registration unit 101),
A reception unit that receives information indicating a content request (for example, the request reception unit 501 of the Web server 5 in FIG. 3 ),
Presentation means for extracting and presenting one or more contents that match the details of the request accepted by the acceptance means from the one or more contents stored in the one or more block chains (for example, in FIG. 3). A content presentation unit 502) of the Web server 5,
Equipped with.

As a result, the content stored in the block chain can be dynamically controlled and delivered in response to a request.

1... Management server, 2... Service provider terminal, 3... Internal block chain, 4... External block chain, 5... Web server, 6... Client terminal, 11. ..CPU, 12... ROM, 13... RAM, 14... Bus, 15... Input/output interface, 16... Input unit, 17... Output unit, 18... Storage unit , 19...communication unit, 20...drive, 30...removable media, 101...content registration unit, 102...content management unit, 501...request accepting unit, 502...content Presentation unit, 181... Content DB, W... Web service, S... Each step

Claims (1)

Transmission control means for executing control of transmitting content to one or more block chains arranged in a predetermined network,
A reception means for receiving information indicating a content request,
Presentation means for extracting and presenting one or more contents that match the content of the request accepted by the acceptance means from the one or more contents stored in the one or more block chains.
An information processing system including.

Images