WO2022264205A1

WO2022264205A1 - Data processing system, secure computing device, data processing method, and program

Info

Publication number: WO2022264205A1
Application number: PCT/JP2021/022500
Authority: WO
Inventors: 元高橋; 哲之森田
Original assignee: 日本電信電話株式会社
Priority date: 2021-06-14
Filing date: 2021-06-14
Publication date: 2022-12-22

Abstract

In the present invention, a data manager terminal includes a limiting-condition generation unit for generating a table identifier, a threshold, and a data processing program identifier as limiting conditions and a data transmission unit for transmitting the limiting conditions to a secure computing device; a data analyzer terminal transmits, to the secure computing device, an analysis request in which the table identifier and the data processing program identifier are designated; and the secure computing device includes a data reception unit, an analysis request reception unit for receiving the analysis request, and a determination unit for determining the allowability of outputting the result of data processing, on the basis of whether or not the table identifier and the data processing program identifier included in the analysis request agree with the table identifier and the data processing program identifier included in the limiting conditions, and whether or not the execution result, with regard to the table identifier included in the analysis request, of a data processing program indicated by the data processing program identifier included in the analysis request satisfies a threshold condition associated with the table identifier.

Description

data processing system, secure computing device, data processing method, program

The present invention relates to a data processing system, a secure computing device, a data processing method, and a program that perform data processing using secure computing technology.

　Non-Patent Document 1 is disclosed as a conventional technique for personal zero-identification confidential data sharing analysis. By using the personal zero-identification confidential data sharing analysis, data can be secretly shared, data registration and data processing can be performed, and statistical information can be output. Data sharing analysis that combines data can be performed. Therefore, it is possible to analyze data while keeping it confidential, and extract only data (statistics) in which individuals cannot be identified. The operation of the system of Non-Patent Document 1 will be outlined below.

[1] Using a secret sharing program with an appropriate secret sharing algorithm, data is secret shared and registered separately on each server.

[2] Data processing is performed using a program that performs secure calculation with an appropriate secure calculation protocol that separates and manages data.

[3] The program that performs the above secure calculation determines whether the calculation result is appropriate statistical information using a secure calculation mechanism as secret sharing data, and outputs the result only in the case of statistical information.

[4] Confidentiality can be improved by setting appropriate statistical information standards and not outputting calculation results that do not meet the standards. This criterion can be predetermined for each statistic performed. It is desirable that the standards are set at a level where individuals cannot be clearly identified.

With the conventional technology, it is not possible to change the criteria later according to the registered data and conditions, as the calculation results are judged to be appropriate statistical information based on the criteria determined by the program in advance.

Since there are no appropriate standards that can be uniformly applied to data and data processing methods, the data controller (the entity responsible for managing data) judges whether the results of data processing are appropriate, and the data controller determines whether the results are appropriate. It would be desirable to have a mechanism for not outputting data other than those judged to be unacceptable, but currently there is no such mechanism.

Therefore, an object of the present invention is to provide a data processing system in which the criteria for whether or not to permit the output of data processing results by secret sharing can be changed depending on the situation.

The data processing system of the present invention includes a data administrator terminal, a data analyst terminal, and a secure computing device.

The data manager terminal includes a limiting condition generation unit and a data transmission unit. The limiting condition generator includes a table identifier that designates a table of data to be subjected to data processing by secure calculation, and a threshold that serves as a criterion for whether or not to permit output of the result of predetermined data processing by secure calculation. Then, a data processing program identifier, which is an identifier of a program that executes predetermined data processing by secure computation, is generated as a limiting condition. The data transmission unit transmits the limiting condition to the secure computing device.

The data analyst's terminal sends an analysis request specifying a table identifier specifying the data table to be analyzed and a data processing program identifier to the secure computing device.

The secure computing device includes a data reception unit, an analysis request reception unit, and a determination unit. The data receiver receives the limiting condition. The analysis request receiving unit receives an analysis request. The determination unit determines whether the table identifier and the data processing program identifier included in the analysis request match the table identifier and the data processing program identifier included in the limiting condition, and determines whether the data processing program identifier included in the analysis request matches. Whether or not to output the data processing result is determined based on whether the execution result of the data processing program shown in the table identifier included in the analysis request satisfies the threshold condition associated with the table identifier.

According to the data processing system of the present invention, it is possible to change the criteria for whether or not to permit the output of data processing results by secret sharing, depending on the situation.

1 is a block diagram showing the configuration of a data processing system according to a first embodiment; FIG. 4 is a block diagram showing the functional configuration of the data manager terminal of the first embodiment; FIG. FIG. 2 is a block diagram showing the functional configuration of the secure computing device according to the first embodiment; FIG. 4 is a sequence diagram showing the operation of the data processing system according to the first embodiment; FIG. FIG. 2 is a block diagram showing the configuration of a data processing system according to a second embodiment; FIG. FIG. 11 is a block diagram showing the functional configuration of a data manager terminal according to the second embodiment; FIG. 11 is a block diagram showing the functional configuration of a secure computing device according to the second embodiment; FIG. 10 is a sequence diagram showing the operation of the data processing system according to the second embodiment; The figure which shows the functional structural example of a computer.

Hereinafter, embodiments of the present invention will be described in detail. Components having the same function are given the same number, and redundant description is omitted.

<Data processing system 1>
The configuration of the data processing system of the first embodiment will be described with reference to FIG. As shown in the figure, the data processing system 1 of this embodiment includes a data manager terminal 11 operated by a data manager, a data analyst terminal 12 operated by a data analyst, and a plurality of secure computing devices 13 . The number of secure computing devices 13 is determined according to the method of secret sharing. In the following embodiments, it is assumed that there are N secure computing devices (N is a natural number equal to or greater than 2). Each device is communicably connected through a network.

<Data manager terminal 11>
The functional configuration of the data manager terminal 11 of this embodiment will be described with reference to FIG. As shown in the figure, the data manager terminal 11 of this embodiment includes a limiting condition generator 111 and a data transmitter 112 .

<Secure Computing Device 13>
The functional configuration of the secure computing device 13 of this embodiment will be described with reference to FIG. As shown in the figure, the secure computing device 13 of this embodiment includes a data receiving unit 131, a data storage unit 132, an analysis request receiving unit 133, a determining unit 134, a data processing unit 135, and a data transmitting unit. 136.

<Operation of Data Processing System 1>
The operation of the data processing system 1 of this embodiment will be described below with reference to FIG.

<Data manager terminal 11-limited condition generator 111>
The limiting condition generation unit 111 includes a table identifier TblID, which is an identifier that designates a table of data to be subjected to data processing by secure calculation, and a criterion for whether or not to permit output of the result of predetermined data processing by secure calculation. and a data processing program identifier PgID, which is an identifier of a program PgCode for executing predetermined data processing by secure calculation, are generated as limiting conditions (S111). The limiting condition may also include the data processing program PgCode (program code), attribute information Attr of the data analyst, and the like.

<Data manager terminal 11-data transmission unit 112>
The data transmission unit 112 transmits the limiting condition to the secure computing device 13 (S112).

<Data analyst terminal 12 - transmission of analysis request>
The data analyst terminal 12 transmits an analysis request designating a table identifier TblID designating a table of data to be analyzed and a data processing program identifier PgID to the secure computing device 13 (S12-1). The analysis request may also include its own attribute information Attr and the like.

<Secure Computing Device 13-Data Receiving Unit 131>
The data receiving unit 131 receives the limiting condition from the data manager terminal 11 (S131).

<Secure Computing Device 13-Data Storage Unit 132>
The data storage unit 132 stores the received limiting condition (S132).

<Secure Computing Device 13—Analysis Request Receiving Unit 133>
The analysis request receiving unit 133 receives an analysis request from the data analyst terminal 12 (S133).

<Secure Computing Device 13-Determination Unit 134>
The determination unit 134 determines whether or not the table identifier TblID and the data processing program identifier PgID included in the analysis request match the table identifier TblID and the data processing program identifier PgID included in the limiting condition (Determination 1=permissible or not). ), and the execution result of the data processing program PgCode indicated by the data processing program identifier PgID included in the analysis request in the table identifier TblID included in the analysis request satisfies the condition of the threshold value Threshold associated with the table identifier TblID Based on (Determination 2=permissible or not), it is determined whether or not to output the result of the data processing (S134).

<Secure Computing Device 13-Data Processing Unit 135>
If the result of determination 1 is "Yes", the data processing unit 135 performs secure calculation by the data processing program PgCode indicated by the data processing program identifier PgID for the data table indicated by the table identifier TblID included in the analysis request. Data processing is executed (S135).

<Secure Computing Device 13-Data Transmission Unit 136>
If both the result of determination 1 and the result of determination 2 in step S134 are "Yes", the data transmission unit 136 transmits the data processing result to the data analyst terminal 12 (S136).

<Data analyst terminal 12—reception of data processing results>
The data analyst terminal 12 receives the data processing result from the secure computing device 13 (S12-2).

<Data processing system 2>
The configuration of the data processing system of the second embodiment will be described with reference to FIG. As shown in the figure, the data processing system 2 of this embodiment includes a data administrator terminal 21 operated by a data administrator, a data analyst terminal 12 operated by a data analyst, and N secure computing devices 23. . The number of secure computing devices 23 is determined according to the method of secret sharing. Each device is communicably connected through a network.

<Data manager terminal 21>
The functional configuration of the data manager terminal 21 of this embodiment will be described with reference to FIG. As shown in the figure, the data manager terminal 21 of this embodiment includes a private/public key generation unit 211, a private/public key storage unit 212, a public key transmission unit 213, and a limiting condition generation unit 111. , a signature generation unit 214 and a data transmission unit 2112 . The function of the limiting condition generator 111 is the same as that of the first embodiment.

<Secure computing device 23>
The functional configuration of the secure computing device 23 of this embodiment will be described with reference to FIG. As shown in the figure, the secure computing device 23 of this embodiment includes a data reception unit 2131, a data storage unit 2132, a public key reception unit 231, a public key storage unit 232, a signature decryption unit 233, and an analysis unit 233. It includes a request receiving unit 133 , a determining unit 134 , a data processing unit 135 and a data transmitting unit 136 . The functions of the analysis request receiving unit 133, the determining unit 134, the data processing unit 135, and the data transmitting unit 136 are the same as those of the first embodiment.

<Operation of data processing system 2>
Hereinafter, among the operations of the data processing system 2 of the present embodiment, operations different from those of the first embodiment will be described with reference to FIG.

<Data manager terminal 21-private key/public key generator 211>
The secret key/public key generation unit 211 generates a secret key s and a public key Pk (S211).

<Data manager terminal 21-private key/public key storage unit 212>
The secret key/public key storage unit 212 stores the generated secret key s and public key Pk (S212).

<Data manager terminal 21-public key transmission unit 213>
The public key transmission unit 213 transmits the public key Pk to the private computing device 23 (S213).

<Secret computing device 23-Public key receiving unit 231>
The public key receiving unit 231 receives the public key Pk from the data administrator terminal 21 (S231).

<Secret Computing Device 23-Public Key Storage Unit 232>
The public key storage unit 232 stores the received public key Pk (S232).

<Data administrator terminal 21-signature generation unit 214>
The signature generation unit 214 encrypts the limiting conditions generated in step S111 based on the secret key s to generate signature sig (S214). For example, a signature can be generated by encrypting a hash value H such as:

H=Hash(TblID||PgID||Threshold||PgCode||Attr)
sig = enc(H,s)
<Data manager terminal 21-data transmission unit 2112>
The data transmission unit 2112 transmits the table identifier TblID and the signature sig to the secret computing device 23 (S2112).

<Secure computing device 23-data receiving unit 2131>
The data receiving unit 2131 receives the table identifier TblID and the signature sig from the data administrator terminal 21 (S2131).

<Secure Computing Device 23-Data Storage Unit 2132>
The data storage unit 2132 associates and stores the table identifier TblID and the signature sig (S2132). The table identifier TblID is used as an index when searching the data storage unit 2132 .

<Secret computing device 23-signature decoding unit 233>
The signature decryption unit 233 decrypts the signature sig corresponding to the table identifier TblID included in the analysis request using the public key Pk to acquire the limiting condition (S233).

The following operations are the same as those of the first embodiment (S134, S135, S136, S12-2). Step S134 can be realized, for example, by executing the process shown in the following formula.

H=Hash(TblID||PgID||Threshold||Pgcode||Attr)
H'=Dec(sig,Pk)
if H≠H' output invalid and stop
output valid
<Modification - Concerning Joining Tables>
When creating a table that joins tables of multiple different data managers, the processing limitation for the joined table is to create and register the electronic signatures of the two data managers for the newly created table. You can do it.

Alternatively, a determination may be made regarding the processing limitation for the newly created table according to a predetermined rule such as the product set of the contents of the electronic signatures of the tables to be combined.

<Modification - Attribute Information of Analyst>
Analyst attribute information Attr is not essential.

<Addendum>
The apparatus of the present invention includes, for example, a single hardware entity, which includes an input unit to which a keyboard can be connected, an output unit to which a liquid crystal display can be connected, and a communication device (for example, a communication cable) capable of communicating with the outside of the hardware entity. can be connected to the communication unit, CPU (Central Processing Unit, which may include cache memory, registers, etc.), memory RAM and ROM, external storage device such as hard disk, input unit, output unit, communication unit , a CPU, a RAM, a ROM, and a bus for connecting data to and from an external storage device. Also, if necessary, the hardware entity may be provided with a device (drive) capable of reading and writing a recording medium such as a CD-ROM. A physical entity with such hardware resources includes a general purpose computer.

The external storage device of the hardware entity stores a program necessary for realizing the functions described above and data required for the processing of this program (not limited to the external storage device; It may be stored in a ROM, which is a dedicated storage device). Data obtained by processing these programs are appropriately stored in a RAM, an external storage device, or the like.

In the hardware entity, each program stored in an external storage device (or ROM, etc.) and the data necessary for processing each program are read into the memory as needed, and interpreted, executed and processed by the CPU as appropriate. . As a result, the CPU realizes a predetermined function (each component expressed as above, . . . unit, . . . means, etc.).

The present invention is not limited to the above-described embodiments, and modifications can be made as appropriate without departing from the scope of the present invention. Further, the processes described in the above embodiments are not only executed in chronological order according to the described order, but may also be executed in parallel or individually according to the processing capacity of the device that executes the processes or as necessary. .

As described above, when the processing functions of the hardware entity (apparatus of the present invention) described in the above embodiments are implemented by a computer, the processing contents of the functions that the hardware entity should have are described by a program. By executing this program on a computer, the processing functions of the hardware entity are realized on the computer.

The various processes described above are performed by loading a program for executing each step of the above method into the recording unit 10020 of the computer 10000 shown in FIG. can.

A program that describes this process can be recorded on a computer-readable recording medium. Any computer-readable recording medium may be used, for example, a magnetic recording device, an optical disk, a magneto-optical recording medium, a semiconductor memory, or the like. Specifically, for example, as magnetic recording devices, hard disk devices, flexible disks, magnetic tapes, etc., as optical discs, DVD (Digital Versatile Disc), DVD-RAM (Random Access Memory), CD-ROM (Compact Disc Read Only Memory), CD-R (Recordable) / RW (ReWritable), etc. as magneto-optical recording media, such as MO (Magneto-Optical disc), etc. as semiconductor memory, EEP-ROM (Electrically Erasable and Programmable-Read Only Memory), etc. can be used.

In addition, the distribution of this program is carried out, for example, by selling, assigning, lending, etc. portable recording media such as DVDs and CD-ROMs on which the program is recorded. Further, the program may be distributed by storing the program in the storage device of the server computer and transferring the program from the server computer to other computers via the network.

A computer that executes such a program, for example, first stores the program recorded on a portable recording medium or the program transferred from the server computer once in its own storage device. When executing the process, this computer reads the program stored in its own recording medium and executes the process according to the read program. Also, as another execution form of this program, the computer may read the program directly from a portable recording medium and execute processing according to the program, and the program is transferred from the server computer to this computer. Each time, the processing according to the received program may be executed sequentially. In addition, the above-mentioned processing is executed by a so-called ASP (Application Service Provider) type service, which does not transfer the program from the server computer to this computer, and realizes the processing function only by its execution instruction and result acquisition. may be It should be noted that the program in this embodiment includes information used for processing by a computer and conforming to the program (data that is not a direct instruction to the computer but has the property of prescribing the processing of the computer, etc.).

Also, in this embodiment, a hardware entity is configured by executing a predetermined program on a computer, but at least part of these processing contents may be implemented by hardware.

Claims

A data processing system including a data manager terminal, a data analyst terminal, and a secure computing device,
The data manager terminal
A table identifier that designates a table of data to be processed by secure calculation, a threshold that determines whether or not to permit output of the result of predetermined data processing by secure calculation, and a predetermined value by secure calculation. a limiting condition generator that generates, as a limiting condition, a data processing program identifier that is an identifier of a program that executes the data processing of
including a data transmission unit that transmits the limited condition to the secure computing device;
The data analyst terminal
transmitting an analysis request designating the table identifier designating the table of data to be analyzed and the data processing program identifier to the secure computing device;
The secure computing device is
a data receiving unit that receives the limiting condition;
an analysis request receiving unit that receives the analysis request;
whether or not the table identifier and the data processing program identifier included in the analysis request match the table identifier and the data processing program identifier included in the limiting condition; and whether or not the data included in the analysis request outputting the result of data processing based on whether or not the execution result of the data processing program indicated by the processing program identifier in the table identifier included in the analysis request satisfies the threshold condition associated with the table identifier; A data processing system including a judgment unit for judging acceptance.
The data processing system of claim 1, wherein
The data manager terminal
a private key/public key generation unit that generates a private key and a public key;
a public key transmission unit that transmits the public key to the private computing device;
further comprising a signature generation unit that encrypts the limiting condition based on the private key to generate a signature;
The data transmission unit transmits the table identifier and the signature to the private computing device,
The data receiving unit receives the table identifier and the signature from the data manager terminal,
The secure computing device is
a public key receiving unit that receives the public key;
The data processing system further includes a signature decryption unit that decrypts the signature corresponding to the table identifier included in the analysis request with the public key to obtain the limiting condition.
A secure computing device that communicates with a data manager terminal and a data analyst terminal,
A table identifier that designates a table of data to be processed by secure calculation, a threshold that determines whether or not to permit output of the result of predetermined data processing by secure calculation, and a predetermined value by secure calculation. The data processing program identifier, which is the identifier of the program that executes the data processing of
The data specifying the table identifier specifying the table of data to be analyzed and the data processing program identifier shall be referred to as an analysis request,
a data receiving unit that receives the limiting condition from the data manager terminal;
an analysis request receiving unit that receives the analysis request from the data analyst terminal;
whether or not the table identifier and the data processing program identifier included in the analysis request match the table identifier and the data processing program identifier included in the limiting condition; and whether or not the data included in the analysis request outputting the result of data processing based on whether or not the execution result of the data processing program indicated by the processing program identifier in the table identifier included in the analysis request satisfies the threshold condition associated with the table identifier; A secure computing device including a determination unit that determines acceptance.
The secure computing device according to claim 3,
The data manager terminal generates a private key and a public key and transmits the public key to the private computing device;
The data receiving unit receives the signature obtained by encrypting the limiting condition based on the table identifier and the private key from the data manager terminal,
The secure computing device is
a public key receiving unit that receives the public key generated by the data manager terminal;
The secret computing device further includes a signature decryption unit that decrypts the signature corresponding to the table identifier included in the analysis request with the public key to acquire the limiting condition.
A data processing method executed by a data manager terminal, a data analyst terminal, and a secure computing device,
The data manager terminal
A table identifier that designates a table of data to be processed by secure calculation, a threshold that determines whether or not to permit output of the result of predetermined data processing by secure calculation, and a predetermined value by secure calculation. a limiting condition generation step of generating, as a limiting condition, a data processing program identifier that is the identifier of a program that executes the data processing of
performing a data transmission step of transmitting the limiting condition to the secure computing device;
The data analyst terminal
transmitting an analysis request designating the table identifier designating the table of data to be analyzed and the data processing program identifier to the secure computing device;
The secure computing device is
a data receiving step of receiving the limiting condition;
an analysis request receiving step of receiving the analysis request;
whether or not the table identifier and the data processing program identifier included in the analysis request match the table identifier and the data processing program identifier included in the limiting condition; and whether or not the data included in the analysis request outputting the result of data processing based on whether or not the execution result of the data processing program indicated by the processing program identifier in the table identifier included in the analysis request satisfies the threshold condition associated with the table identifier; A data processing method for executing a judgment step for judging acceptance or rejection.
The data processing method according to claim 5,
The data manager terminal
a private key/public key generation step for generating a private key and a public key;
a public key transmission step of transmitting the public key to the private computing device;
further performing a signature generation step of encrypting the limit condition based on the private key to generate a signature;
In the data transmission step, the table identifier and the signature are transmitted to the private computing device,
In the data receiving step, the table identifier and the signature are received from the data manager terminal,
The secure computing device is
a public key receiving step of receiving the public key;
A data processing method further comprising: decrypting the signature corresponding to the table identifier included in the analysis request with the public key to obtain the limiting condition.
A program that causes a computer to function as the secure computing device according to claim 3 or 4.