WO2013065545A1

WO2013065545A1 - Data sharing system

Info

Publication number: WO2013065545A1
Application number: PCT/JP2012/077462
Authority: WO
Inventors: 佐藤　敦; 壮一最首
Original assignee: 株式会社野村総合研究所
Priority date: 2011-11-01
Filing date: 2012-10-24
Publication date: 2013-05-10
Also published as: WO2013065135A1

Abstract

A data sharing system can perform processes such as editing on the original data shared among a plurality of users in a mechanism that divides the original data into a plurality of data divisions by a secret sharing scheme and saves the data in a distributed manner on a plurality of servers. A representative embodiment of the present invention has a plurality of servers (200) and a client terminal (100) that divides the original data into (n+1) data divisions by the secret sharing scheme, and saves n data distributed on n servers (200). The client terminal (100) has a division processor (110) that divides the original data into n data divisions (152) and one fixed data division (153), and stores the fixed data division (153) on the client terminal (100), and a distributed processor (120) to transmit n data divisions (152) to n servers (200). The division processor (110) generates the fixed data division (153) so that the value is the same even when the content of the original data was updated, and becomes essential when decoding the original data.

Description

Data sharing system

The present invention relates to a technique for sharing data among a plurality of users, and in particular, based on divided data generated from a target original data by a secret sharing method and distributed and stored in a plurality of servers and the like, the other users share the original data. The present invention relates to a technology that is effective when applied to a data sharing system that shares original data by restoration.

In recent years, from the viewpoint of information security, the handling of data such as files held and processed in information processing apparatuses such as PCs (Personal Computers) used by users has been regarded as important. In particular, in addition to notebook PCs, portable terminals such as so-called smartphones and tablet PCs that are increasingly used in business need to consider the risk of information leakage due to theft or loss of these terminals themselves. There is.

On the other hand, the risk of information leakage due to loss of the terminal due to the so-called thin client that stores data including important data in the terminal in an external data center or server where security measures are taken It is conceivable to reduce. At this time, the important data is not stored in an external server or the like as it is, but for example, the so-called secret sharing technique described in Non-Patent Document 1 or the like is used, and the important data alone is meaningless. It has also been proposed to divide into non-important data (important data cannot be restored / inferred) and store these non-important data in a plurality of external servers. Thereby, for example, the risk of information leakage can be reduced even in the case of storage in a virtual data center or virtual server in a cloud computing environment.

In addition, when important data is divided into a plurality of divided data by a secret sharing technique, even if a part of the divided data is lost, the original important data can be restored if a predetermined number or more of divided data can be collected. Can also improve the availability of data. For example, when important data is divided into n pieces of divided data by so-called (k, n) threshold type secret sharing, the important data can be restored if k or more pieces of divided data can be collected. In other words, it is possible to withstand the loss of up to (n−k) pieces of divided data. Utilizing such high availability, it is also considered that the divided data is distributed and stored in a plurality of remote locations to be used as a backup considering disaster countermeasures.

As described above, in a mechanism in which a plurality of divided data obtained by dividing the original data by the secret sharing technique is distributed and stored in a plurality of servers, etc., each user individually manages the divided data. It leads to a decrease in convenience. For example, it is necessary for the user to know the number of divided data generated from the original data, each file name, on which server each divided data is stored, and to restore the original data. It is difficult to force the user to operate by specifying a server or the like in which each piece of divided data is stored.

Therefore, normally, the system performs processing such as secret sharing processing (processing for dividing and restoring original data) that is performed when the original data is stored and referenced, distributed storage of generated divided data, and collection of divided data. It is automatically performed to conceal parts related to these processes from the user.

For example, in an information processing apparatus that performs secret sharing processing for dividing user original data into a plurality of divided data, such as a client terminal of each user or a specific management server such as a file server, which server or the like Management information including the location information indicating whether or not it has been stored (hereinafter, sometimes referred to as “distributed management information”) is stored. The distributed management information is associated with, for example, a dummy file representing the original data, and the user performs operations such as reference and editing on the dummy file.

Upon receiving an operation request for the original data from the user via the dummy file, the information processing apparatus refers to the distributed management information to identify the server where the necessary divided data is stored, and directly Access the server etc., collect the necessary divided data and restore the original data. As a result, the user can access the original data distributed and stored as a plurality of pieces of divided data by using an interface similar to a normal file operation.

For example, Japanese Patent Laid-Open No. 2007-213405 (Patent Document 1) stores tally folders A, B,... For storing tally files, a restoration destination folder for storing restoration files, and a tally object file by an information management computer. A tally object folder, a tally engine folder containing a restoration engine program and a division engine program, and a tally parameter including information on a decoding boundary, which is a range that can be read by the tally application, are set as tally object files A, B,. The tally file name / storage location and the object information of the restoration destination folder are stored in, the tally file is collected directly based on the tally file storage location and the decoding boundary, the restoration file is generated, and the restoration file is stored and opened. By the secret sharing method Distributed information file management means for restoring efficiently locate and original data to prevent file is described.

JP 2007-213405 A

In the prior art, the original data is divided into a plurality of divided data by secret sharing, and these are distributed and stored, so that the original data can be securely stored while increasing the availability. At this time, for example, the original data distributed and stored in the server or the like as a plurality of divided data is shared in the same manner as when sharing a normal file with other users by placing it on a file server or the like instead of on a local client terminal. There may naturally be a desire to share with other users.

At this time, if only reference sharing is performed without editing or updating the original data, it can be realized relatively easily in the prior art as in the case of normal file sharing. For example, the distribution management information and dummy files generated when the original data is divided by the secret sharing method (for example, the tally object file in the example described in Patent Document 1) and the creator of the original data and the sharer Sync online with or offline. Accordingly, the sharer can collect necessary divided data based on the synchronized distributed management information, and can restore and refer to the original data.

However, with the prior art, it is difficult to realize sharing with editing and updating of the original data while maintaining consistency. For example, when sharing distributed management information etc. by synchronizing multiple users as described above, the sharer restored the original data based on the synchronized distributed management information and edited this If secret sharing and distributed storage are performed again later, the newly generated or updated divided data and distributed management information will be different from those before editing. Further, depending on the system configuration, the location of a server or the like where each divided data is stored may be different from that before editing.

That is, the distributed management information held by each sharer specifies different versions of divided data for the same original data. Therefore, for example, a sharer other than the sharer who performed the edit cannot grasp that the edit has been performed, and the original data before the edit even if the original data is restored based on the distributed management information that the sharer has. Is restored, and the consistency of the original data among the sharers cannot be maintained. In order to solve this problem, it is necessary to perform processing such as re-synchronizing the distributed management information corresponding to the original data after editing between the sharers.

Therefore, an object of the present invention is to divide original data into a plurality of divided data by a secret sharing method and distribute the original data in a plurality of servers etc. to securely store the original data among a plurality of users. An object of the present invention is to provide a data sharing system that enables processing of editing and updating original data without requiring resynchronization processing for distributed management information and the like when sharing data. The above and other objects and novel features of the present invention will be apparent from the description of this specification and the accompanying drawings.

Of the inventions disclosed in this application, the outline of typical ones will be briefly described as follows.

A data sharing system according to a representative embodiment of the present invention is connected to a plurality of servers having storage devices and the servers via a network, and the original data is divided into (n + 1) pieces of divided data by a secret sharing method. A data sharing system having a first information processing apparatus that divides and stores n pieces of the divided data in the storage devices of the n servers, respectively, and has the following characteristics: is there.

That is, the first information processing apparatus divides the original data into n first divided data and one second divided data by a secret sharing method, and the second divided data is divided into the first divided data. A division processing unit held on the information processing apparatus, and a first distributed processing unit that transmits n pieces of the first divided data to different n servers. The division processing unit includes: The second divided data has the same value even when the contents of the original data are updated, and it is essential to use the second divided data when restoring the original data. The server includes a distributed storage unit that stores the first divided data transmitted from the first information processing apparatus in a storage device.

Among the inventions disclosed in the present application, effects obtained by typical ones will be briefly described as follows.

According to a typical embodiment of the present invention, in a mechanism for securely storing original data by dividing the original data into a plurality of divided data by the secret sharing method and distributing and storing them in a plurality of servers or the like. When the original data is shared among a plurality of users, it becomes possible to perform editing and update processing on the shared original data without requiring resynchronization processing for the distributed management information and the like.

It is the figure which showed the outline | summary about the structural example of the data sharing system which is Embodiment 1 of this invention. It is the figure which showed the outline | summary about the example in the case of performing the sharing accompanying the edit and update with respect to the original data in Embodiment 1 of this invention. It is the figure which showed the outline | summary about the example of the division | segmentation method of the original data in Embodiment 1 of this invention. It is the figure which showed the outline | summary about the example of the flow of a process at the time of preserve | saving original data in the client terminal in Embodiment 1 of this invention. It is the figure which showed the outline | summary about the example of the flow of a process at the time of decompress | restoring original data in the client terminal in Embodiment 1 of this invention. It is the figure which showed the outline | summary about the structural example of the data sharing system which is Embodiment 2 of this invention. It is the figure which showed the outline | summary about the example in the case of performing the sharing accompanying the edit and update with respect to the original data in a prior art.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. Note that components having the same function are denoted by the same reference symbols throughout the drawings for describing the embodiment, and the repetitive description thereof will be omitted. In the following, in order to make the features of the present invention easier to understand, the description will be made in comparison with the prior art.

<Embodiment 1>
[Overview]
As described above, in the conventional technique, the original data is divided into a plurality of divided data by the secret sharing method, and these are distributed and stored, so that the original data can be securely stored while increasing the availability. Here, when sharing original data that is distributed and stored in a server or the like as a plurality of divided data with other users, if the reference data is not edited or updated, only normal file sharing As in the case of, it can be realized relatively easily. For example, the distribution management information and dummy files generated when the original data is divided by the secret sharing method are synchronized online or offline between the creator of the original data and the sharer. Accordingly, the sharer can collect necessary divided data based on the synchronized distributed management information, and can restore and refer to the original data.

However, with the conventional technology, it is difficult to realize sharing with editing and updating of the original data while maintaining consistency. FIG. 7 is a diagram showing an outline of an example in the case of sharing with editing and updating of original data in the conventional technique. In the example of FIG. 7, first, when the user stores the original data 150a (version 1) in the client terminal A (100a), n pieces of original data 150a (for example, by (k, n) threshold secret sharing method) (see FIG. 7). 7 is divided into four pieces) divided data 152a (version 1), and these are distributed and stored in n servers 200. Here, for convenience of explanation, a plurality of divided data 152a is illustrated as being stored together in the server 200, but in reality, each divided data 152a is distributed and stored on n different servers 200. And

At this time, the client terminal A (100a) specifies each divided data 152a corresponding to the original data 150a, and generates distributed management information 151a (version 1) including information relating to the location of each divided data 152a. . The distributed management information 151a may be associated with a dummy file (for example, a so-called shortcut or alias for the original data 150a) corresponding to the original data 150a.

Thereafter, the distributed management information 151a is synchronized with another client terminal B (100b). For example, the distributed management information 151a can be transmitted to the client terminal B (100b) via the network 300 and synchronized online, or can be manually transferred to the user of the client terminal B (100b) and synchronized offline. .

In the client terminal B (100b) that has synchronized the distributed management information 151a, the client terminal B (100b) refers to the distributed management information 151a based on a request from the user or the like, and is k or more from the server 200 in which each divided data 152a is stored. The divided data 152a is acquired and collected. Further, the original data 150a is restored by the (k, n) threshold secret sharing method based on the collected k or more pieces of divided data 152a.

Thereafter, the user of the client terminal B (100b) edits or updates the original data 150a with a predetermined application or the like to obtain the edited original data 150b (version 2). Similarly, when storing the original data 150b, the original data 150b is divided into n (four in the example of FIG. 7) divided data 152b (version 2) by, for example, the (k, n) threshold secret sharing method. These are distributed and stored in n servers 200. The n servers 200 here may be partly or entirely different from the n servers 200 in which the divided data 152a (version 1) is stored. In addition, the client terminal B (100b) specifies each divided data 152b corresponding to the original data 150b, and generates distributed management information 151b (version 2) including information related to the location of the divided data 152b.

In this state, in the client terminal A (100a), what is specified by the distributed management information 151a (version 1) is the divided data 152a (version 1), not the divided data 152b (version 2). Therefore, unlike the client terminal B (100b), the latest original data 150b (version 2) cannot be restored. In order to make this consistent, it is necessary to synchronize the distributed management information 151b generated at the client terminal B (100b) with the client terminal A (100a) again.

Therefore, the data sharing system according to the first embodiment of the present invention edits and updates the original data 150 when dividing the original data 150 into the plurality of divided data 152 by the (k, n) threshold secret sharing method or the like. Even if the contents are changed by performing the above, each divided data 152 is generated so that one divided data always has the same value every time, and it is essential to use the divided data at the time of restoration. In the present embodiment, the essential divided data generated to have the same value every time (hereinafter may be referred to as “fixed divided data”) is not distributedly stored in the server 200 but secretly stored in this embodiment. The original data 150 is held on each client terminal 100 divided into divided data 152 by distributed processing, and the original data 150 is shared among a plurality of users.

In each client terminal 100, by using this fixed division data instead of the distributed management information 151, each server does not require the resynchronization processing of the distributed management information 151 accompanying the editing or updating of the original data 150. The corresponding divided data 152 (that is, the latest version of the divided data 152) is collected from 200, and the latest version of the original data 150 can be restored.

FIG. 2 is a diagram showing an outline of an example in the case of sharing with editing or updating of original data in the data sharing system according to an embodiment of the present invention. In the example of FIG. 2, as in the example of FIG. 7, first, when the user stores the original data 150a (version 1) in the client terminal A (100a), for example, the (k, n) threshold secret sharing method, etc. As described later, the original data 150a is divided into n (three in the example of FIG. 2) divided data 152a (version 1) and one fixed divided data 153 (n + 1) in total (FIG. 2). In this example, the data is divided into four pieces). As described above, the fixed divided data 153 is generated so as to have the same value every time even when the content is changed by editing or updating the original data 150a, and the original data 150a is restored. In this case, the divided data is indispensable to use the divided data.

FIG. 3 is a diagram showing an outline of an example of the original data dividing method in the present embodiment. In the example of FIG. 3, first, the original data 150 is divided into two data. Here, for example, (2, 2) threshold value secret sharing is used to divide the original data 150 so that it is essential to use both of these two data. After that, one of the two data obtained by the division is set as fixed division data 153, and the other data (intermediate data 154) is further restored by the (k, n) threshold secret sharing method or the like. The data is divided into n pieces (three pieces in the example of FIG. 3) that need k pieces or more. As a result, a total of (n + 1) pieces of divided data of n pieces of divided data 152 and one piece of fixed divided data 153 can be obtained so that the fixed pieces of divided data 153 are essential when the original data 150 is restored. . The dividing method of the original data 150 is not limited to the above method, and other methods can be used.

In the example of FIG. 2, n pieces of divided data 152a generated by the above procedure are distributed and stored in a plurality of servers 200. As in the example of FIG. 7, for convenience of explanation, a plurality of pieces of divided data 152 a are illustrated as being stored together in the server 200, but in reality, each piece of divided data 152 a is stored on n different servers 200. Shall be distributed and stored. At this time, the client terminal A (100a) holds the fixed divided data 153. Note that the fixed division data 153 may be associated with a dummy file corresponding to the original data 150a (for example, a so-called shortcut or alias for the original data 150a).

Thereafter, the fixed division data 153 is synchronized with the other client terminal B (100b). For example, the fixed division data 153 can be transmitted to the client terminal B (100b) via the network 300 and synchronized online, or can be manually passed to the user of the client terminal B (100b) and synchronized offline. . If the client terminal B (100b) already has the fixed divided data 153 due to synchronization in the past or the like, the resynchronization process is unnecessary.

The client terminal B (100b) that has synchronized the fixed divided data 153 acquires and collects k or more corresponding divided data 152a from each server 200 based on the fixed divided data 153 based on a request from the user or the like. . Further, the original data 150a is restored based on the collected k or more pieces of divided data 152a and one fixed divided data 153 held by itself. Here, for example, as the reverse process of the division method shown in the example of FIG. 3, first, the intermediate data 154 is restored from the collected k or more pieces of divided data 152a by the (k, n) threshold secret sharing method. Further, the original data 150a is restored from the intermediate data 154 and the fixed divided data 153 by the (2, 2) threshold secret sharing method.

There are several methods for collecting the corresponding divided data 152a based on the fixed divided data 153, and these can be applied as appropriate. For example, when the original data 150a is divided into the fixed divided data 153 and the divided data 152a by the secret sharing method in the client terminal A (100a), information such as a file ID for identifying the original data 150 is changed to the fixed divided data 153 and each It is added to the header of the divided data 152a. Thereby, the divided data 152a including the file ID information corresponding to the file ID information included in the header or the like of the fixed divided data 153 in the header or the like can be identified.

Thereafter, the user of the client terminal B (100b) edits or updates the original data 150a with a predetermined application or the like to obtain the edited original data 150b (version 2). Similarly, when the original data 150b is stored, n pieces of original data 150b (three pieces in the example of FIG. 2) and one piece of divided data 152b (version 2) are divided by the dividing method shown in FIG. 3, for example. Are divided into a total of (n + 1) pieces of divided data. Note that the value of the fixed division data 153 is unchanged from the value of the fixed division data 153 of the version before editing as described above.

In the example of FIG. 2, the generated n pieces of divided data 152b are distributed and stored in the n servers 200. The n servers 200 here may be partly or entirely different from the n servers 200 in which the divided data 152a (version 1) is stored. Further, the client terminal B (100b) holds the fixed divided data 153. At this time, the fixed division data 153 may be associated with a dummy file or the like corresponding to the original data 150b.

In this state, unlike the example of FIG. 7, in the client terminal A (100a), the content of the fixed division data 153 is the same as that in the client terminal B (100b). The latest latest divided data 152b (version 2) corresponding to the stored fixed divided data 153 is identified and collected based on the held fixed divided data 153 without the need for resynchronization processing, and the latest original data 150b (version 2) is collected. It is possible to restore. For this purpose, it is necessary to delete the old version of the divided data 152a in each server 200. That is, generation management cannot be performed, and it is necessary that each server 200 always has the latest version of the divided data 152.

[System configuration]
FIG. 1 is a diagram showing an outline of a configuration example of a data sharing system according to an embodiment of the present invention. In the data sharing system 1, a plurality of client terminals 100 sharing the original data 150 (two in the example of FIG. 1, client terminal A (100 a) and client terminal B (100 b)) and a plurality of servers 200 are connected to the Internet or the like. Are connected to each other via the network 300 and can communicate with each other.

The client terminal 100 is an information processing apparatus such as a PC or a portable terminal that is used by the user to create, edit, and store original data 150 including important data. ) The division processing unit 110 (110a, b), the distributed processing unit 120 (120a, b), the restoration processing unit 130 (130a, b), and the interface unit 140 (140a, b) implemented by the software program that operates on the above. Etc. have each part. Further, the above-described fixed divided data 153 generated from the original data 150 by the division processing unit 110 is held on a storage device such as an HDD (Hard Disk Disk Drive) (not shown).

The division processing unit 110 uses, for example, the (k, n) threshold secret sharing as illustrated in the example of FIG. 3 for the original data 150 instructed to be securely stored by the user via the interface unit 140 described later. A total of (n + 1) pieces of n pieces of divided data 152 distributedly stored in each server 200 and one fixed piece of divided data 153 held on the client terminal 100 in accordance with a predetermined procedure using a method (k ≦ n) or the like Divide into the divided data. Note that the secret sharing algorithm is not particularly limited, and a known method can be used. However, as shown in the example of FIG. 3, even if editing or updating is performed on certain original data 150, the same value is used each time. In addition, it has a function of generating one piece of fixed divided data 153 that is essential when the original data 150 is restored.

In the generally known secret sharing technique, the function of generating the fixed divided data 153 having the same value every time can be realized relatively easily. For example, in the case of the (2, 2) threshold secret sharing method using a polynomial, the slope of the secret information S represented by the intercept always passes through a specific coordinate on the straight line represented by the equation y = ax + S. Set the value of a. In this straight line, the data obtained based on the specific coordinate is set as fixed division data 153, and the intermediate data 154 which is the other data is determined based on the coordinates of one other point on the randomly selected straight line. be able to.

Note that, here, the fixed divided data 153 is generated so that the same value is obtained every time the original data 150 is edited or updated, but the same is applied to different original data 150. The fixed division data 153 may be generated so as to be a value. That is, you may make it produce | generate the fixed division | segmentation data 153 which can be used in common with respect to multiple types of original data 150. FIG.

The distributed processing unit 120 transmits, for example, each of the n pieces of divided data 152 generated from the original data 150 by the divided processing unit 110 to each server 200 according to a predetermined condition based on the contents of setting information (not shown) to be distributed and stored. To do. The setting information includes, for example, access information (IP address, host name, etc.) for each server 200 that is a distributed storage destination, and a criterion for selecting n servers 200 when there are more than n servers 200. And information such as the priority of the server 200, an ordered list, a rotation method, and the like can be set in advance by a file, a registry, or the like.

The distributed processing unit 120 restores the original data 150 from each server 200 based on a request from the restoration processing unit 130 when restoring the original data 150 by the restoration processing unit 130 described later. The divided data 152 (k ≦ m ≦ n) is collected and transferred to the restoration processing unit 130. As a method of collecting the m pieces of divided data 152, for example, as described above, each server 200 has the corresponding divided data 152 based on the fixed divided data 153 corresponding to the original data 150. It is collected from each server 200 having this by inquiring whether or not it exists.

If one or more of the n divided data 152 cannot be stored in each server 200 when the divided data 152 is distributed and stored due to a failure of the server 200 or the like, or more than k when the divided data 152 is collected. If the data cannot be collected, an error may be returned to the user. Further, when transmitting / receiving the divided data 152 to / from each server 200, the client terminal 100 and each server 200 perform transmission / reception after performing predetermined encryption on the divided data 152, thereby causing information leakage. This risk may be further reduced.

For example, the restoration processing unit 130 stores k or more pieces of divided data 152 that are necessary for restoring the original data 150 instructed to be used for reference or editing by the user via the interface unit 140. The request is acquired from the distributed processing unit 120. Further, the original data 150 is restored according to a predetermined procedure from the acquired k or more pieces of divided data 152 and one fixed divided data 153 held by itself. For example, the original data 150a is restored by the reverse procedure of the division method using the (k, n) threshold secret sharing method (k ≦ n) as shown in the example of FIG.

The interface unit 140 has a user interface such as a screen display in the client terminal 100 and an input / output function such as data transmission / reception. The user can use the functions of the client terminal 100 by using, for example, a file management screen of a general OS.

For example, on the file management screen, the user moves important data to a specific folder or the like by a simple operation such as drag and drop. With this as a trigger, the division processing unit 110 and the distribution processing unit 120 automatically divide the important data as original data 150 into n division data 152 and one fixed division data 153, and each division data 152 or The fixed divided data 153 can be distributed and stored in each server 200 or the like without making the user aware of it. At this time, the original data 150 is deleted from the client terminal 100, but the fixed divided data 153 can be specified corresponding to the original data 150, for example, so as not to make the user aware of it on the file management screen. A dummy file or the like (not shown) may be created and left.

Further, for example, the user performs operations such as reference and editing on the original data 150 by performing operations on the dummy file of the original data 150 managed in a specific folder on the file management screen. be able to. That is, using the operation on the dummy file or the like as a trigger, the distributed processing unit 120 and the restoration processing unit 130 automatically m (k ≦ m) from each server 200 based on the fixed division data 153 specified by the dummy file or the like. ≦ n) corresponding divided data 152 can be collected, and the original data 150 can be restored from these and the fixed divided data 153 and made available to the user.

As will be described later, for example, the fixed divided data 153 generated from the original data 150 at the client terminal A (100a) is synchronized with the other client terminal 100B (100b) online or offline, and the client terminal B ( 100b), a dummy file or the like for the fixed divided data 153 is newly generated. Thereby, on the client terminal B (100b), it is possible to perform operations such as reference and editing on the corresponding original data 150 by the same operation via the dummy file or the like, and the client terminal A (100a) and the original The data 150 can be shared. Instead of using a dummy file or the like, the fixed divided data 153 may be used as it is, and the original data 150 may be restored and made available to the user in response to an operation instruction from the user.

In the example of FIG. 1, each client terminal 100 individually performs processing such as division and restoration of the original data 150 by the secret sharing method, distributed storage in each server 200, etc. This process may be executed collectively on a specific server such as a file server that stores the original data 150.

Further, in the example of FIG. 1, each client terminal 100 has a configuration including both the division processing unit 110 and the restoration processing unit 130. The configuration may include only one of the units 130 (the division processing unit 110 and the restoration processing unit 130 may be present in at least one client terminal 100, respectively). For example, the client terminal A (100a) that performs distributed storage of the original data 150 has only the division processing unit 110a, and the client terminal B (100b) that restores and references the original data 150 has only the restoration processing unit 130b. be able to. In this case, the functions of the distributed processing unit 120 can also be configured to have only portions corresponding to the respective functions of division (distributed storage of the divided data 152) and restoration (collection of the divided data 152).

The server 200 is an information processing apparatus having a storage device such as an HDD (not shown) that can store the divided data 152 transmitted from the client terminal 100, and includes, for example, a file server or a storage server. Moreover, the data center which has these information processing apparatuses may be sufficient. Further, it may be a virtual server or a virtual data center by a cloud computing service.

The server 200 includes, for example, a distributed storage unit 210 that is implemented by a software program that runs on an OS (not shown). The distributed storage unit 210 stores the divided data 152 transmitted from the client terminal 100 in the storage device. Further, in response to the inquiry about the divided data 152 from the client terminal 100, whether or not the divided data 152 corresponding to the designated fixed divided data 153 is stored is searched, and the corresponding divided data 152 is stored. In this case, the divided data 152 is returned to the client terminal 100. At this time, the divided data 152 may be deleted from the storage device (the old version of the divided data 152 is not left).

Here, as described above, there are several methods for determining whether or not each stored divided data 152 corresponds to the designated fixed divided data 153. It can be applied as appropriate. For example, when the original data 150a is divided into the fixed divided data 153 and the divided data 152a by the secret sharing method at the client terminal A (100a), the original data 150 added to the header of the fixed divided data 153 and each divided data 152a, etc. The divided data 152 having the same file ID as the fixed divided data 153 can be searched based on information such as the file ID for identifying the file.

[Process flow]
FIG. 4 is a diagram showing an outline of an example of the flow of processing when the original data 150 is stored in the client terminal 100. For example, when the user instructs storage of the original data 150 by an operation via the interface unit 140a on the client terminal A (100a), first, the original data 150 is divided into a plurality of divided data by the secret sharing method by the division processing unit 110a. The data is divided into 152 and one fixed divided data 153 (S01). For example, the data is divided into a total of (n + 1) pieces of divided data including n pieces of divided data 152 and one fixed piece of divided data 153 by the procedure shown in the example of FIG.

Next, the distributed processing unit 120a transmits n pieces of divided data 152 to each of n different servers 200 determined based on a predetermined rule (S02). FIG. 4 shows an example in which the divided data 152 is transmitted to each server 200 including the server A (200a) and the server B (200b). Each server 200 that receives the divided data 152 stores the received divided data 152 in the storage device by the distributed storage unit 210 (S03), and returns the processing result to the client terminal A (100a).

In the client terminal A (100a), the distributed processing unit 120a determines whether all the n pieces of divided data 152 have been normally stored in the server 200 (S04). Here, if any one of the n pieces of divided data 152 cannot be stored normally, an error may be notified to the user via the interface unit 140a. At this time, the series of processes described above may be rolled back. In addition, even when there is divided data 152 that has not been normally stored, if the storage of k or more divided data 152 has been completed normally, the intermediate data 154 and the original data 150 can be restored, and an error will occur. You may not make it.

When the distributed storage to each server 200 is completed normally, the division processing unit 110a stores the fixed division data 153 generated in step S01 in a storage device or the like (S05). At this time, a dummy file that can specify the fixed divided data 153 corresponding to the original data 150 may be generated. The divided data 152 distributed and stored in each server 200 may be deleted from the storage device of the client terminal A (100a). Moreover, you may make it synchronize (transmit) the fixed division | segmentation data 153 with respect to the other client terminal 100 which shares the original data 150 as needed. At this time, the corresponding dummy file or the like may also be synchronized.

On the other hand, FIG. 5 is a diagram showing an outline of an example of a processing flow when the original data 150 is restored in the client terminal 100. For example, on the client terminal B (100b) that has received the synchronization of the fixed division data 153 from the client terminal A (100a), the user references (edits or updates) the original data 150 by operating the dummy file via the interface unit 140b. First, the restoration processing unit 130b acquires the fixed divided data 153 corresponding to the target original data 150 from the storage device (S11). For example, the corresponding fixed divided data 153 is specified and acquired based on information such as a dummy file operated by the user.

Next, the distributed processing unit 120b inquires of each server 200 whether or not the divided data 152 corresponding to the fixed divided data 153 is held (S12). Here, for example, an inquiry message is broadcast to each server 200 (or multicasted to servers 200 within a predetermined range). FIG. 5 shows an example in which an inquiry message is broadcast (or multicast) to each server 200 including the server A (200a) and the server B (200b).

In the server 200 that has received the inquiry message, the distributed storage unit 210 searches whether the divided data 152 corresponding to the fixed divided data 153 is held (S13). For example, as described above, the file ID is the same as that of the fixed divided data 153 based on information such as the file ID for identifying the original data 150 added to the fixed divided data 153 and the header of each divided data 152. The divided data 152 is searched.

For example, when the corresponding divided data 152 is included as in the server A (200a), it is transmitted to the client terminal B (100b) (S14). On the other hand, when the corresponding divided data 152 is not included as in the server B (200b), the fact may be transmitted to the client terminal B (100b).

In the client terminal B (100b), the distributed processing unit 120b determines whether or not the number m of the divided data 152 that can be collected is equal to or greater than the number required to restore the original data 150 (S15). For example, when the original data 150 is divided according to the procedure shown in FIG. 3 as in the present embodiment, the number m of pieces of divided data 152 that can be collected is determined by the (k, n) threshold secret sharing method. It is necessary that the number is k or more necessary for restoring the data 154. Here, if k or more pieces of divided data 152 cannot be collected, an error may be notified to the user via the interface unit 140b.

When k or more pieces of divided data 152 can be collected, the restoration processing unit 130b uses the collected pieces of k or more pieces of divided data 152 and the fixed divided data 153 acquired in step S11, for example, as shown in the example of FIG. The original data 150 is restored by the reverse procedure of the division method using the (k, n) threshold secret sharing method (k ≦ n) or the like (S16). The original data 150 restored here is the latest version as shown in FIG. The original data 150 is presented to the user via the interface unit 140b, and the user can perform processing such as reference, editing, and updating.

When storing the original data 150 after being edited or updated, the original data 150 is again divided by secret sharing and the divided data 152 is sent to each server 200 by the series of processes shown in FIG. Distributed storage is performed. As a result, the user of the client terminal A (100a) also restores the latest version of the original data 150 based on the fixed division data 153 held by the client terminal A (100a), and refers to, edits, etc. The original data 150 can be shared between the client terminal A (100a) and the client terminal B (100b).

As described above, according to the data sharing system 1 according to the first embodiment of the present invention, when the original data 150 is divided into the plurality of divided data 152 by the secret sharing method, the original data 150 is edited. Even when the content is changed due to the update, the fixed divided data 153 that always has the same value and is indispensable when the original data 150 is restored is generated. The fixed divided data 153 is not stored in the server 200 in a distributed manner but is held on each client terminal 100 obtained by dividing the original data 150 into the divided data 152 by the secret sharing process and is shared among a plurality of users. . As a result, each client terminal 100 collects the corresponding divided data 152 from each server 200 by using the fixed divided data 153 without requiring re-synchronization processing associated with editing or updating of the original data 150. Thus, the latest version of the original data 150 can be restored, and sharing of the original data 150 can be realized.

<Embodiment 2>
In the first embodiment, the fixed division data 153 generated from the original data 150 by the secret sharing method is held on the client terminal 100 that has performed the secret sharing process. The original data 150 can be shared with other users by synchronizing the fixed division data 153 with other users' client terminals 100 by individually transmitting / receiving them.

On the other hand, the data sharing system according to the second embodiment of the present invention has a configuration in which the fixed divided data 153 is transmitted to a predetermined server and stored on the server. A user who desires access to the original data 150 can restore the original data 150 in the same manner as in the first embodiment by acquiring the corresponding fixed divided data 153 from the server. As a result, a user who has distributed and stored the original data 150 can share the original data 150 with a plurality of other users only by transmitting the fixed divided data 153 to the server once. The load can be reduced. If the fixed divided data 153 is generated not only for the edit / update history of the same original data 150 but also for different types of original data 150 so as to have the same value, the reduction is further reduced. The effect can be enhanced.

[System configuration]
FIG. 6 is a diagram showing an outline of a configuration example of the data sharing system according to the second embodiment of the present invention. In the example of FIG. 6, in addition to the configuration example of the data sharing system 1 illustrated in FIG. 1, the fixed divided data storage server 400 is added to the network 300 as a predetermined server that stores the fixed divided data 153 transmitted from the client terminal 100. It has a configuration to be connected.

The fixed divided data storage server 400 is an information processing apparatus having a storage device such as an HDD (not shown) that can store the fixed divided data 153 transmitted from the client terminal 100, similar to the server 200, for example, a file server And a storage server. Moreover, the data center which has these information processing apparatuses may be sufficient. Further, it may be a virtual server or a virtual data center by a cloud computing service.

The fixed divided data storage server 400 includes, for example, a fixed divided data storage unit 410 and an authentication unit 420 that are implemented by a software program that runs on an OS (not shown). The fixed divided data storage unit 410 stores the fixed divided data 153 transmitted from the client terminal 100 in the storage device. In addition, in response to an acquisition request for fixed division data 153 from the client terminal 100, when the authentication unit 420 permits the authentication processing, the corresponding fixed division data 153 is transmitted to the client terminal 100. The authentication unit 420 performs predetermined authentication processing such as user authentication and device authentication in response to an acquisition request for the fixed divided data 153 from the client terminal 410. Thereby, the access right to the fixed divided data 150 is controlled in accordance with the configuration in which the fixed divided data 150 is stored on the shared fixed divided data storage server 400.

In the example of FIG. 6, the fixed divided data storage server 400 is provided separately from the server 200, but the function as the fixed divided data storage server 400 coexists for any one of the plurality of servers 200. You may make it make it. At this time, a different server 200 may be caused to function as the corresponding fixed divided data storage server 400 for each original data 150 (fixed divided data 153). In any configuration, it is assumed that each client terminal 100 holds destination information and the like for specifying and accessing the target fixed divided data storage server 400.

As described above, in the present embodiment, the client terminal 100 transmits the fixed divided data 153 to the fixed divided data storage server 400 and stores it using the distributed processing unit 120 or the like. Accordingly, as shown in FIG. 6, the client terminal 100 does not hold the fixed divided data 153, but the fixed divided data 153 generated or acquired from the fixed divided data storage server 400 is stored on the client terminal 100. You may make it hold | maintain.

In addition, by configuring the fixed divided data storage server 400 as a so-called “trusted third party (TTP)” such as a certificate authority, the certificate authority is always interposed when the original data 150 is restored. It is possible to improve security.

[Process flow]
In order to adopt the above-described configuration, in the present embodiment, the steps for the divided data 152 in the process of storing the original data 150 in the client terminal A (100a) shown in FIG. 4 of the first embodiment. The series of processes of S01 to S04 is the same, but the process of step S05 is a process of storing the fixed divided data 150 in the fixed divided data storage server 400.

That is, the distributed processing unit 120a of the client terminal A (100a) transmits the fixed divided data 150 to the fixed divided data storage server 400 in the same manner as the processing of steps S02 to S04 for the divided data 152. In the fixed divided data storage server 400, the fixed divided data storage unit 410 stores the received fixed divided data 150 in a storage device, and returns a processing result to the client terminal A (100a). At this time, in the client terminal A (100a), the distributed processing unit 120a determines whether or not the fixed divided data 153 is normally stored in the fixed divided data storage server 400. If the fixed division data 153 cannot be stored normally, an error may be notified to the user via the interface unit 140a. At this time, a series of processes up to that time may be rolled back.

In the process of restoring the original data 150 in the client terminal B (100b) shown in FIG. 5 of the first embodiment, the process of step S11 acquires the fixed divided data 150 from the fixed divided data storage server 400. It becomes processing to do. That is, on the client terminal B (100b), when the user instructs reference to the original data 150 by an operation on the dummy file via the interface unit 140b, for example, this is handled based on information such as the dummy file operated by the user. The fixed division data 153 is specified. The distributed processing unit 120b accesses the fixed divided data storage server 400 that stores the specified fixed divided data 153 and requests acquisition of the fixed divided data 153.

In the fixed divided data storage server 400, the authentication unit 420 performs a predetermined authentication process, and when permitted, the fixed divided data storage unit 410 transmits the fixed divided data 153 to the client terminal B (100b). The distributed processing unit 120b of the client terminal B (100b) transfers the acquired fixed divided data 153 to the restoration processing unit 130b. The subsequent processes in steps S12 to S16 are the same as in the example of FIG. On the other hand, when the authentication process in the fixed divided data storage server 400 is rejected, an error may be notified to the user via the interface unit 140b of the client terminal B (100b).

As described above, according to the data sharing system 1 according to the second embodiment of the present invention, the fixed divided data storage server 400 is transmitted by sending the fixed divided data 153 to the fixed divided data storage server 400 and stored therein. This is shared among a plurality of users via a network. As a result, a user who has distributed and stored the original data 150 can share the original data 150 with a plurality of other users only by transmitting the fixed divided data 153 to the fixed divided data storage server 400 once. It becomes possible to reduce work load and network load. In addition, when the fixed divided data 153 is generated so as to have the same value not only with respect to the edit / update history of the same original data 150 but also with different types of original data 150, Further, the reduction effect can be enhanced.

As mentioned above, the invention made by the present inventor has been specifically described based on the embodiment. However, the present invention is not limited to the embodiment, and various modifications can be made without departing from the scope of the invention. Needless to say.

The present invention relates to a data sharing system in which original data is shared by other users restoring original data based on divided data generated from a target original data by a secret sharing method and distributed and stored in a plurality of servers. Is available.

1 ... Data sharing system,
100 (100a, b) ... Client terminal, 110 (110a, b) ... Split processing unit, 120 (120a, b) ... Distributed processing unit, 130 (130a, b) ... Restoration processing unit, 140 (140a, b) ... Interface unit, 150 (150a, b) ... Original data, 151 (151a, b) ... Distributed management information, 152 (152a, b) ... Divided data, 153 ... Fixed divided data, 154 ... Intermediate data,
200 ... server, 210 ... distributed storage unit,
300 ... Network,
400: fixed divided data storage server, 410: fixed divided data storage unit, 420: authentication unit.

Claims

A plurality of servers having storage devices;
The server is connected to each server via a network, the original data is divided into (n + 1) pieces of divided data by a secret sharing method, and n pieces of the pieces of divided data are respectively stored in the storage devices of the n pieces of servers. A data sharing system having a first information processing apparatus for distributed storage,
The first information processing apparatus includes:
A division processing unit which divides the original data into n first divided data and one second divided data by a secret sharing method, and holds the second divided data on the first information processing apparatus When,
a first distributed processing unit that transmits n pieces of the first divided data to different n pieces of the servers,
The division processing unit has the same value as the second divided data even when the content of the original data is updated, and uses the second divided data when the original data is restored. To make it mandatory,
The server
A data sharing system comprising: a distributed storage unit that stores the first divided data transmitted from the first information processing apparatus in a storage device.
The data sharing system according to claim 1,
The second information processing apparatus connected to the first information processing apparatus or each of the servers via the network is:
a restoration processing unit that restores the original data from the k or more pieces of the first divided data and one piece of the second divided data by a secret sharing method;
A message for designating the second divided data corresponding to the original data to be restored and inquiring whether or not each server holds the first divided data corresponding to the second divided data A second distributed processing unit that collects k or more pieces of the first divided data and delivers them to the restoration processing unit,
The distributed storage unit of each server is
A search is performed to determine whether the first divided data corresponding to the second divided data specified in the message is stored in its own storage device. If the first divided data is stored, the corresponding first divided data is retrieved. A data sharing system that transmits the message to the first or second information processing apparatus that has transmitted the message.
A plurality of first servers having a storage device;
The first data is connected to each first server via a network, the original data is divided into (n + 1) divided data by a secret sharing method, and n pieces of the divided data are divided into n first pieces of the first data. A data sharing system having a first information processing device distributed and stored in a storage device of a server,
Further, a second server having a storage device for storing one piece of the divided data other than those distributed and stored in the storage devices of the n first servers among the (n + 1) pieces of divided data Have
The first information processing apparatus includes:
A division processing unit that divides the original data into n first divided data and one second divided data by a secret sharing method;
a first distributed processing unit that transmits n pieces of the first divided data to different n first servers, and transmits the second divided data to the second server,
The division processing unit has the same value as the second divided data even when the content of the original data is updated, and uses the second divided data when the original data is restored. To make it mandatory,
The first server is
A distributed storage unit that stores the first divided data transmitted from the first information processing apparatus in a storage device;
The second server is
A fixed divided data storage unit for storing the second divided data transmitted from the first information processing apparatus in a storage device;
An authentication unit that performs authentication processing when storing the second divided data in the storage device by the fixed divided data storage unit and accessing the second divided data stored in the storage device. Characteristic data sharing system.
The data sharing system according to claim 3,
The second information processing apparatus connected to the first information processing apparatus or each of the servers via the network is:
a restoration processing unit that restores the original data from the k or more pieces of the first divided data and one piece of the second divided data by a secret sharing method;
The second divided data corresponding to the original data to be restored is acquired from the second server, the acquired second divided data is designated, and the second data is specified to each first server. A second distribution that broadcasts a message inquiring whether or not the first divided data corresponding to the divided data is held, collects k or more pieces of the first divided data, and delivers them to the restoration processing unit A processing unit,
The distributed storage unit of each server is
A search is performed to determine whether the first divided data corresponding to the second divided data specified in the message is stored in its own storage device. If the first divided data is stored, the corresponding first divided data is retrieved. A data sharing system that transmits the message to the first or second information processing apparatus that has transmitted the message.
The data sharing system according to claim 2 or 4,
The division processing unit divides the original data into n pieces of the first divided data and one piece of the second divided data by a secret sharing method.
One of the two divided data obtained by dividing the original data by the (2, 2) threshold secret sharing method is used as the second divided data, and the other is further divided by the (k, n) threshold secret sharing method. A data sharing system, wherein the n pieces of divided data obtained as described above are used as the first divided data.
The data sharing system according to claim 5, wherein
When the restoration processing unit restores the original data from the k or more pieces of the first divided data and one piece of the second divided data by a secret sharing method,
Data is restored from the k or more pieces of the first divided data by the (k, n) threshold secret sharing method, and (2, 2) threshold secret sharing method from the restored data and the second divided data. A data sharing system, wherein the original data is restored.
The data sharing system according to claim 1 or 3,
The first information processing apparatus includes:
When the division processing unit divides the original data into n first divided data and one second divided data, the second divided data is identified corresponding to the original data. A data sharing system that generates and holds a dummy file that can be stored.
The data sharing system according to claim 2,
The first information processing apparatus includes:
A data sharing system, wherein the second divided data generated by the division processing unit is transmitted to the second information processing apparatus that does not have the second divided data.