JP2008065485A - Database management device and database browsing terminal, and database management program and database browsing program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a database management device and a database browsing terminal, and a database management program and a database browsing program for making secret what type of data are stored in a database even when the database is leaked. <P>SOLUTION: A database management device 1 is configured to manage data relating to a plurality of items input to a database in which those plurality of items are associated with one another so that the correspondence relation of the data between those items can be made secret, and is provided with an item function table storage means 7; a changing/matching means 9; a sequence change database storage means 13; and a terminal type decision means 17. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a database management device and a database management program for managing a database, a database browsing terminal for browsing data of the database, and a database browsing program.

Conventionally, as a security technique for protecting data stored in a database, there is a technique in which the data is encrypted in advance. By doing this, even if the database leaks from the storage device in which the database is stored or leaks to the network, what the actual data is, unless encryption is released This is not understood (for example, see Patent Document 1).
JP 2004-282657 A

  However, if the data in the database is encrypted, if the encryption key used to encrypt the data is also leaked along with the database, the encryption is easily canceled and the actual data is There is a problem that the existence of data (how each data is in correspondence) is known to the registrant who registered the data in the database and a third party other than the administrator who manages the database.

  Even if only the database is leaked, if a third party knows that the data is encrypted, he or she will assign a key (encryption key, decryption key) that can be used to cancel the encryption. There is a possibility of searching by means and attempting to release, and if it is released, the same problem occurs.

  In particular, when data stored in a database is related to personal information, security technology that protects personal information is desired to be simple and highly safe in recent years with the enforcement of the Personal Information Protection Law. .

  Therefore, in the present invention, a database management apparatus and database browsing that can conceal what the data stored in the database is, even if the database is leaked, by solving the above-described problems An object is to provide a terminal, a database management program, and a database browsing program.

  In order to solve the above problem, the database management device according to claim 1 is configured such that data relating to the item input to a database in which a plurality of items are associated is concealed in data correspondence between the items. A database management apparatus that manages the function, and includes an item function table storage means, a change matching means, an order change database storage means, and a terminal type determination means, and the change matching means is the terminal type determination means. In accordance with the determined browseable item, a consistency processing database that matches the order of the data of the corresponding item in the order change database is generated, and the terminal type determination unit that requested the browsing of the generated consistency processing database It is characterized by transmitting to.

  According to such a configuration, the database management apparatus accumulates the item function table in which the item and the function that changes the order of the data in the item so as to be different from the original order are accumulated by the item function table accumulation unit. Then, the database management device generates an order change database in which the order of the data is changed using the item function table stored in the item function table storage means by the change matching means, and the order of the data in the order change database A consistency processing database that is consistent with the original order is generated.

  Then, the database management apparatus stores the order change database by the order change database storage means. Further, the database management device, based on the terminal type information indicating the type of the terminal that requested the browsing of the consistency processing database by the terminal type determination unit, and the terminal type function table in which the terminal type information and the function are associated with each other. The terminal requesting browsing determines items that can be browsed. Then, the database management device generates a matching processing database that matches the order of the data of the corresponding item in the order change database according to the viewable item determined by the terminal type determination unit by the change matching unit, The generated consistency processing database is transmitted by the type determining means.

The data managed by the database management apparatus may be any information, but if it is strong, unpublished data, for example, personal information may be mentioned. Also, the item function table information storage means and the order change database storage means indicate some hardware,
The item function table, the terminal type function table, the order change database, and the consistency processing database refer to some data set, that is, software.
In the database management device, the items that can be browsed are limited in advance depending on the type of the terminal that has transmitted the browsing request.

  The database management apparatus according to claim 2 is the database management apparatus according to claim 1, further comprising a data receiving unit that receives the data, and the change matching unit includes a data addition processing unit. .

  According to such a configuration, the database management apparatus adds the data received by the data receiving unit to the consistent processing database in which all the data orders in the order change database are matched by the data addition processing unit. Note that the consistency processing database to which the data has been added is again made into an order change database in which the order of the data has been changed by the change matching means and stored.

  According to a third aspect of the present invention, in the database management device according to the first or second aspect, the change matching unit includes a corresponding range change unit.

  According to such a configuration, the database management apparatus changes the order of the data with respect to the preset items so that the correspondence of the data between the items follows the preset rules by the correspondence range changing means. . For example, if the data is personal information and the item is an address and a telephone number, if the order of the data in these items is changed appropriately, it will appear to be an unnatural correspondence at first glance. The order is changed so that these items fall within an appropriate range (so as not to look like an unnatural correspondence at first glance).

  The database management apparatus according to claim 4 is the database management apparatus according to any one of claims 1 to 3, wherein the change matching unit includes a conversion table generation unit.

  According to such a configuration, the database management device generates a conversion table using a primitive polynomial based on a Galois field, which is an algebraic field having a finite number of elements, by using the conversion table generating means, with the number of data being a finite number. . Then, the database management apparatus changes the order of the data in the items by using the conversion table generated by the change matching unit.

  A database management device according to a fifth aspect is the database management device according to any one of the first to fourth aspects, further comprising an encryption processing unit and a decryption processing unit.

  According to such a configuration, the database management device encrypts the order change database by the encryption processing means. Further, the database management apparatus decrypts the encryption processing order change database encrypted by the encryption processing means by the decryption processing means. As a result, even if an encryption processing order change database is leaked via a network, etc. and obtained by an unauthorized third party, the third party can cancel the encryption, and the correct correspondence between each data in the database. There is a high possibility of recalling that

  The database browsing terminal according to claim 6 is a database browsing terminal for browsing a consistent processing database in which a part or all of the order of data in the order change database managed by the database management device according to claim 1 is matched. Thus, the browsing request means, the database receiving means, and the display means are provided.

  According to this configuration, the database browsing terminal requests the database management apparatus to browse the matching process database and transmits terminal type information indicating the type of the own terminal by the browsing request unit. Then, the database browsing terminal receives the matching processing database transmitted from the database management device by the database receiving means, and displays the matching processing database received by the database receiving means by the display means.

  The database management program according to claim 7, in order to manage data related to the item input to a database in which a plurality of items are associated with each other so that the correspondence between the items of the data is concealed. Item function table storage means for storing an item function table that associates a function that changes the data order in the item so that it is different from the original order, and the data order in the item is different from the original order. A computer having an order change database storage means for storing an order change database changed to a function as a change matching means and a terminal type determination means, wherein the change matching means determines the browsing determined by the terminal type determination means Consistency processing in which the order of the data of the corresponding item in the order change database is matched according to possible items Generates a database, the terminal type judging means, the generated match processing database, and transmits to the terminal that requested access.

  According to this configuration, the database management program generates an order change database in which the order of data is changed using the item function table stored in the item function table storage means by the change matching means, and the order change database. The data processing order in the database is generated in the original order. Further, the database management program is based on the terminal type information indicating the type of the terminal that requested the browsing of the consistency processing database by the terminal type determination unit, and the terminal type function table in which the terminal type information and the function are associated with each other. The terminal requesting browsing determines items that can be browsed. Furthermore, the database management program generates a consistency processing database in which the order of data of the corresponding items in the order change database is matched according to the viewable items determined by the terminal type determination means by the change matching means, The generated matching process database is transmitted by the judging means.

  The database browsing program according to claim 8 is a computer for browsing a consistent processing database in which a part or all of the order of data in the order change database managed by the database management device according to claim 1 is consistent. Are configured to function as browsing request means, database receiving means, and display means.

  According to such a configuration, the database browsing program requests the database management device to browse the matching processing database by the browsing request unit, transmits the terminal type information indicating the type of the own terminal, and the database receiving unit performs the database management. The matching processing database transmitted from the apparatus is received, and the matching processing database received by the database receiving means is displayed by the display means.

  According to the first and seventh aspects of the present invention, the order of data relating to items in the stored order change database is changed, and even if this order change database leaks, the original correspondence can be known. Since there is nothing, it is possible to keep secret what kind of data is stored in the database.

  According to the second aspect of the present invention, when data is added, the data is temporarily returned to the consistency processing database, and then when the data is added and stored, the order of the data in the item is changed again. Therefore, even if this order change database is leaked, there is no way to know the original correspondence, so what kind of data is stored in the database? It can be kept secret.

  According to the third aspect of the present invention, even if the order of the data in the items is changed, the correspondence relationship between the data within the items is within the preset range, so that the stored order change database is leaked. However, even if an unauthorized third party obtains the database, it cannot be recalled that the order of the data has changed at first glance, and as a result, which data is actually stored in the database It is possible to conceal whether it is something like that.

  According to the invention described in claim 4, it is possible to generate an order change database in which the order of the data in the item is changed using the generated conversion table, and even if this order change database leaks, Since the original correspondence relationship cannot be obtained, it is possible to conceal what the data stored in the database is.

  According to the invention described in claim 5, by performing cryptographic processing in the order change database and storing it, the encryption processing order change database after this cryptographic processing is leaked and obtained by an unauthorized third party Even so, if only the encryption process is released, the third party is more likely to determine that the correct correspondence of the data in the database has been found, and as a result, the third party actually enters the database. It is possible to keep secret what kind of data is stored.

  According to the sixth and eighth aspects of the present invention, it is possible to browse the consistent processing database in which a part or all of the order of data in the order change database is matched by the terminal type information. That is, the browsing part of the database can be limited by the terminal.

Next, embodiments of the present invention will be described in detail with reference to the drawings as appropriate.
FIG. 1 is a block diagram of a database management browsing system. As shown in FIG. 1, the database management browsing system S is connected to a database management device 1 that manages data, and the Internet, which is a network that can be accessed by an unspecified person. A network that allows only a specific person to access the database management device 1 and a plurality of user terminals 2 (2 ₁ , 2 ₂ , 2 ₃ ,..., 2 _n (n is an arbitrary integer)). And a plurality of database browsing terminals 3 (3 ₁ , 3 ₂ , 3 ₃ ,..., 3 _m (m is an arbitrary integer)) connected via an intranet.

  In this embodiment, a user terminal (registration terminal) 2 for registering data is connected to the database management apparatus 1 via the Internet, and a database browsing terminal 3 for browsing data is connected via an intranet. It has a configuration. This configuration is based on the assumption that the security level of data can be set to a higher level in the intranet than at least the Internet in consideration of data leakage and tampering on the network. Is not to be done.

  Further, the database managed in the database management browsing system S has a plurality of items (tags) and stores data related to the items. In this embodiment, personal information is handled as data, and items include a user ID, which is a number for identifying each individual, name, address, age, occupation, telephone number, card number of a financial institution, and the like.

  In this database management browsing system S, the user terminal 2 for registering data is composed of a general computer, and therefore detailed description thereof is omitted. Hereinafter, the configuration of the database management device 1, the configuration of the database browsing terminal 3, a specific example of data registration, a specific example of data browsing, a specific example of a function, a specific example of generating a conversion table, the operation of the database management device 1, The operation will be described in the order of the operation of the database browsing terminal 3.

(Configuration of database management device)
FIG. 2 shows a block diagram of the database management apparatus 1. As shown in FIG. 2, the database management apparatus 1 includes a data receiving means 5, an item function table storage means 7, a change matching means 9, an encryption processing means 11, an order change database storage means 13, and a decryption processing means. 15, terminal type determination means 17, and terminal type function table storage means 19.

  The database management apparatus 1 manages an order change database in which a plurality of items are associated and data (personal information) related to the items is stored and the order of the data is changed. The database management apparatus 1 registers data in the order change database and transmits a matching process database in which the order of the data is matched based on a browsing request from the database browsing terminal 3.

  The data receiving means 5 receives data (personal information) transmitted from a plurality of user terminals 2. The data received by the data receiving means 5 is sent to the change matching means 9. Here, although not shown, a server is provided on the Internet that discloses the input format of data stored in the order change database, and data is received via this server. The input format includes items such as name, address, age, occupation, telephone number, card number of financial institutions, and the like.

  Then, the user (data registrant) of the user terminal 2 inputs data (personal information) according to the input format. Thereafter, the data receiving means 5 associates the address on the network of the user terminal 2 with the user ID that is a number for identifying each individual user in the order in which the data is received, and sends the received data to the change matching means 9. send. The user ID is a continuous number (1, 2, 3,...) Assigned in the order in which data is received.

  The item function table storage unit 7 associates items with functions that change the order of the data in the items so that they are different from the original order (correspondence of data received by the data receiving unit 5). Is to accumulate. This item function table (also referred to as a tag-function table) is received when the data receiving means 5 receives the data and the data is added to the order change database, or there is a browsing request from the database browsing terminal 3, and the terminal type When there is an item that can be browsed based on the determination result by the determination unit 17, the change matching unit 9 reads it.

  In this embodiment, the database management device 1 stores the item function table by the item function table storage means 7, but stores it in another more secure storage device (not shown) or the like. You may keep it. A specific example of this function will be described later.

  The change matching unit 9 reads the item function table stored in the item function table storage unit 7, and then uses this item function table to generate an order change database in which the order of the data in the items is changed (shuffled). In addition, in order to generate a consistency processing database in which a part or all of the data order in the order change database is matched (restored), a data addition processing means 9a, a correspondence range change means 9b, Conversion table generation means 9c.

  The change matching unit 9 uses a function associated with each item in the item function table to change the data order for each item, and generates an order change database. In addition, the change matching unit 9 generates a consistency processing database in which a part or all of the order of data in the order change database is matched using an inverse function of a function associated with each item in the item function table. .

  Then, the change matching means 9 sends it to the encryption processing means 11 when the order change database is encrypted, and sends it to the order change database storage means 13 when the encryption processing is not performed. Whether or not the order change database is to be encrypted can be arbitrarily determined by the administrator of the database management apparatus 1.

  In addition, the change matching unit 9 reads out the order change database from the order change database storage unit 13, and then creates a matching process database in which the order of data of items that can be browsed is matched based on the determination result by the terminal type determination unit 17. It is generated and sent to the terminal type determination means 17.

  When data is sent from the data receiving means 5, the data addition processing means 9a reads the order change database stored in the order change database storage means 13 and matches all the data orders in the order change database. The data is added to the matched processing database. When data (new row) is added without matching the order change database, an M-sequence function f (details will be described later) is used as an example function. Using such a function, a conversion table is generated in advance when necessary, and data is added based on it.

  When changing the order of data within an item, the correspondence range change means 9b changes the data of the data so that the data correspondence between the items is within the preset range between the preset items. The order is changed. Pre-set items (also referred to as specific items) means items that can be found (easily) that the correspondence of data in the database is incorrect when the data order is changed. For example, between the items such as “address” of the item and “phone number” of the item. The preset range refers to a range where the data correspondence between the items can actually exist even when the data order is changed, or a range that can be approximated to the original correspondence. In the case of an area code, “05” and a range such as “051” to “059” (when using dummy data to be described later, the area code may be the same, and the area code and the other numbers may be different from the original data. ).

  In this case, since the area code of the telephone number is determined in advance by the address (prefecture), if the correspondence between these items is changed, the database is leaked and obtained by an unauthorized third party. If this happens, you will easily know that the database is incorrect. Therefore, the change in the order of data between items such as the item “address” and the item “phone number” is limited by the corresponding range change means 9b.

  When the order of data between specific items is changed, the correspondence range change means 9b also uses the function used to change the order of one data to change the order of the other data. I am going to do that. For example, the function used to change the order of data in the item “address” is also used to change the order of data in the item “phone number”. Note that a specific method of change is performed in a specific example of data registration described later.

  The conversion table generating means 9c generates a conversion table using a primitive polynomial based on a Galois field that is an algebraic field having a finite number of data and a finite number of elements. The conversion table generating means 9c is provided with a storage area for securely storing the primitive polynomial and the initial value input to the primitive polynomial. The conversion table generating unit 9c generates dummy data when the number of data is insufficient when generating the conversion table. A specific example (details) for generating this conversion table will be described later.

  The conversion table is generated using a polynomial (primitive polynomial) composed of a plurality of terms in which the number of dimensions of the terms is increased or decreased according to the increase or decrease in the number of data. More specifically, the conversion table is generated using a shift register corresponding to the number of data.

  The cryptographic processing unit 11 performs cryptographic processing on the order change database generated by the change matching unit 9. The algorithm of the encryption processing by the encryption processing means 11 may be a general one, for example, AES of a common key encryption method. Then, the cryptographic processing means 11 sends the cryptographic processing order change database obtained by cryptographically processing the order change database to the order change database storage means 13.

  The order change database storage means 13 stores the order change database sent from the change matching means 9 or the encryption processing order change database sent from the encryption processing means 11, and is constituted by a general hardware disk, memory or the like. Has been.

  The decryption processing unit 15 decrypts the encryption processing order change database encrypted by the encryption processing unit 11. The decryption processing algorithm by the decryption processing means 15 corresponds to the encryption processing algorithm. Then, the decryption processing means 15 sends the order change database obtained by decrypting the encryption processing order change database to the change matching means 9.

  The terminal type determination unit 17 is a database requested to browse based on the terminal type information included in the browsing request transmitted from the database browsing terminal 3 and the terminal type function table stored in the terminal type function table storage unit 19. The browsing terminal 3 determines items that can be browsed, and transmits a matching processing database that matches the order of data of the browseable items to the database management device 1. Means 17b and matching processing database transmission means 17c are provided.

  The browsing request receiving means 17a receives the browsing request transmitted from the database browsing terminal 3. This browsing request includes terminal type information indicating the type of the database browsing terminal 3. This terminal type information is, for example, when the database browsing terminal 3 is connected to the database management apparatus 1 in the same company via an intranet, and is arranged in the sales department, accounting department, and research department in the company, These departments are assigned differently. That is, the database browsing terminal 3 is classified as a sales department terminal, an accounting department terminal, and a survey department terminal according to the terminal type information, and is configured so that items that can be browsed are different.

  The browseable item determination unit 17b determines items that can be browsed by the database browsing terminal 3 that requested browsing based on the terminal type information and the terminal type function table. That is, when the browseable item determination unit 17b matches the type of the terminal indicated by the terminal type information and the type of the terminal associated with the terminal type function table, a function name (hereinafter referred to as “function name”) that can be used from the table. The function name is sent to the change matching means 9. As a result, the change matching unit 9 uses the function of the corresponding item function table from the item function table storage unit 7 to match the order of the data in the order change database, and generates a matched matching processing database. It sends to the judgment means 17.

  In this example, the usable function name (usable key) is extracted from the terminal type information function table, but this usable function name (usable key) is stored in advance in an IC card or the like. Alternatively, it may be sent to the user of the database browsing terminal 3. In this case, an IC card reading device (not shown) that can read the IC card is attached to the database browsing terminal 3, and the database browsing terminal 3 can be used by attaching an IC card when making a browsing request. Read and send a valid function name (available key). Then, the database management device 1 is configured to be sent to the change matching unit 9 via the terminal type determination unit 17.

  When browsing data without matching the order change database, an M-sequence function f (details will be described later) is used as an example function. Using such a function, a conversion table is generated in advance when necessary, and data is browsed based thereon.

  The matching process database transmission unit 17c transmits the matching process database sent from the change matching unit 9 to the database browsing terminal 3 that has requested browsing. The matching process database transmission unit 17c transmits the matching process database when the terminal type indicated by the terminal type information does not match the terminal type associated with the terminal type information function table. Without changing the order database.

  The terminal type function table storage unit 19 stores a terminal type function table, and is configured by a general hard disk, memory, and the like. It should be noted that the available keys in this terminal type function table can be set as appropriate by the administrator of the database management apparatus 1.

  According to the database management apparatus 1, the order of data related to items in the order change database stored in the order change database storage means 13 is changed to be different from the original order, and this order change database is leaked. However, since it is not possible to know the original correspondence relationship, it is possible to conceal what the data stored in the database is.

  Further, according to the database management device 1, when adding data by the data addition processing means 9a, after returning to the consistent processing database once, adding the data and storing it in the order change database storage means 13. In this case, since the data is stored as an order change database in which the order of the data in the item is changed, even if this order change database is leaked, the original correspondence relationship cannot be obtained. It is possible to conceal what the stored data is.

  Further, according to the database management apparatus 1, even if the order of data in the items is changed by the correspondence range change means 9b, the correspondence of the data between items is within the preset range. Even if the order change database stored in the change database storage means 13 is leaked and obtained by an unauthorized third party, it is impossible to recall that the data order is changed at first glance. It is possible to conceal what the data stored in the database is.

  Furthermore, according to the database management apparatus 1, it is possible to generate an order change database in which the order of data in the items is changed using the conversion table generated by the conversion table generation means 9c, and this order change database is leaked. However, since it is not possible to know the original correspondence relationship, it is possible to conceal what the data stored in the database is.

  Furthermore, according to the database management apparatus 1, the encryption processing means 11 performs encryption processing on the order change database and stores it in the order change database storage means 13, whereby the encryption processing order after the encryption processing is performed. Even if a change database is leaked and an unauthorized third party obtains this encryption processing order change database, if the third party releases only the encryption processing, the exact correspondence of the data in the database is revealed. As a result, it is possible to conceal what the data actually stored in the database is.

(Configuration of database browsing terminal)
FIG. 3 shows a block diagram of the database browsing terminal 3. As shown in FIG. 3, the database browsing terminal 3 includes a browsing request unit 21, a terminal type information storage unit 23, a database receiving unit 25, a display unit 27, and an operation unit 29.

  The database browsing terminal 3 transmits a browsing request for the order change database stored in the database management apparatus 1 and browses the consistency processing database in which a part or all of the data order in the order change database is matched. Is. This matching processing database has different items that can be browsed depending on the terminal type information.

The browsing request means 21 requests browsing of the consistency processing database and transmits a browsing request including terminal type information.
The terminal type information accumulating unit 23 accumulates terminal type information of its own terminal, and is configured by a general hard disk, memory, and the like.

The database receiving means 25 receives the matching process database transmitted from the database management apparatus 1.
The display means 27 displays the matching process database received by the database receiving means 25.
The operation unit 29 performs operations of transmission of a browsing request by the browsing request unit 21 and display of the matching processing database by the display unit 27.

  According to the database browsing terminal 3, it is possible to browse the consistent processing database in which a part or all of the data order in the order change database is matched by the terminal type information.

(Specific examples of data registration)
Next, a specific example of data registration will be described with reference to FIGS. 4 to 6 (see FIGS. 2 and 3 as appropriate).
FIG. 4 is a diagram showing a specific example of data registration. When data is received by the data receiving means 5, the database management device 1 reads the order change database from the order change database storage means 13 as shown in FIG. 4A (database reception processing). Subsequently, the database management apparatus 1 uses the change matching means 9 to reverse the function (f1) of the function associated with each item of the read order change database in the item function table, as shown in FIG. 4B. ⁻¹ , f2 ⁻¹ , f3 ⁻¹ , f4 ⁻¹ , f5 ⁻¹ , f6 ⁻¹ , fm ⁻¹ ) are used to generate a consistency processing database (database consistency processing).

  Then, the database management apparatus 1 uses the data addition processing unit 9a of the change matching unit 9 as shown in FIG. 4C, and the received data “user ID” is “n + 1” and “name” is “ “Forest”, “Address” is “Chiba Prefecture”, “Age” is “33”, “Occupation” is “Dentist”, “Telephone Number” is “042-885-5482”, “Card Number” is “91254611” Are added to the matching processing database (database addition processing).

  Then, the database management apparatus 1 uses the change matching unit 9 to store the functions (f1, f2, f3, f4, f5, f6, fm) associated with the item function table as shown in FIG. To generate an order change database (database shuffle process). And the database management apparatus 1 accumulate | stores an order change database in the order change database storage means 13, as shown in FIG.4 (e) (database registration).

FIG. 5 is a diagram showing a specific example of data registration (association between an item “address” and an item “phone number”). When data is received by the data receiving means 5, the database management device 1 reads the order change database from the order change database storage means 13 as shown in FIG. 5A (database reception processing). Subsequently, the database management apparatus 1 associates each item of the read order change database with the item function table as shown in FIG. 5B by the in-correspondence range change unit 9b of the change matching unit 9. The consistency processing database is generated using the inverse function (f1 ⁻¹ , f2 ⁻¹ , f3 ⁻¹ , f4 ⁻¹ , f2 ⁻¹ × f5_ prefecture ⁻¹ , f6 ⁻¹ , fm ⁻¹ ). (Database consistency processing). Here, the database management device 1 uses f2 ⁻¹ × f5 prefecture− ¹ by the correspondence range change means 9b, and the range in which the correspondence between the item “address” and the item “phone number” is set in advance. Within the range (the range in which data correspondence between items is actually possible). Note that f5_prefecture is a function prepared for each prefecture.

  Then, as shown in FIG. 5C, the database management apparatus 1 uses the data addition processing unit 9a of the change matching unit 9 to receive the received data, “user ID” is “n + 1”, and “name” is “ “Forest”, “Address” is “Chiba Prefecture”, “Age” is “33”, “Occupation” is “Dentist”, “Telephone Number” is “042-885-5482”, “Card Number” is “91254611” Are added to the matching processing database (database addition processing).

  Then, the database management apparatus 1 uses the function (f1, f2, f3, f4) associated with the item function table as shown in FIG. , F5_prefecture × f2, f6, fm), the order change database is generated (database shuffle process). Then, the database management device 1 stores the order change database in the order change database storage means 13 as shown in FIG. 5 (e) (database registration).

  FIG. 6 is a diagram showing a specific example of data registration (database encryption). When data is received by the data receiving means 5, the database management apparatus 1 sends the encryption processing order change database read from the order change database storage means 13 to the decryption processing means 15 as shown in FIG. processing). Subsequently, as shown in FIG. 6B, the database management apparatus 1 decrypts the encryption processing order change database by the decryption processing means 15 and sends it to the change matching means 9 as the order change database (database decryption processing). ).

Then, the database management device 1 uses the change matching unit 9 to reverse the functions (f1 ⁻¹ , f2 ⁻¹ , f3 ⁻¹ , f4 ⁻¹ , f5 ⁻¹ , f6 ⁻¹ , fm ⁻¹ ) are used to generate a matching process database (database matching process).

  Then, the database management apparatus 1 uses the data addition processing unit 9a of the change matching unit 9 as shown in FIG. 6D, and the received data, “user ID” is “n + 1” and “name” is “ “Forest”, “Address” is “Chiba Prefecture”, “Age” is “33”, “Occupation” is “Dentist”, “Telephone Number” is “042-885-5482”, “Card Number” is “91254611” Are added to the matching processing database (database addition processing).

  Then, the database management apparatus 1 uses the change matching unit 9 to store the functions (f1, f2, f3, f4, f5, f6, fm) associated with the item function table as shown in FIG. To generate an order change database (database shuffle process). Then, the database management device 1 stores the order change database in the order change database storage means 13 as shown in FIG. 6 (f) (database registration). In this case, the database management apparatus 1 may encrypt the order change database by using the encryption processing unit 11 as shown in FIG. 6G (database encryption processing).

(Specific examples of data browsing)
Next, specific examples of data browsing will be described with reference to FIGS. 7 to 9 (see FIGS. 2 and 3 as appropriate).
FIG. 7 is a diagram showing a specific example of data browsing (browsing example from the accounting department). When the browsing request received from the database browsing terminal (terminal 2 (accounting unit) in the figure) 3 is received by the browsing request receiving means 17a of the terminal type determining means 17, the database management apparatus 1 is shown in FIG. As shown, the order change database is read from the order change database storage means 13 (terminal type reception process).

  Subsequently, the database management device 1 can use the keys (f1, f2, f6) that can be used, that is, can be browsed by the browseable item determination unit 17b of the terminal type determination unit 17, as shown in FIG. 7B. The item is determined (terminal type identification process).

And the database management apparatus 1 is matched with each item (only a name, an address, and a card number) of an order change database with the item matching table 9 by the change matching means 9, as shown in FIG.7 (c). Using the inverse function (f1 ⁻¹ , f2 ⁻¹ , f6 ⁻¹ ) of the function, a matching process database is generated (database matching process). Then, the database management apparatus 1 transmits the matching process database as shown in FIG. 7D by the matching process database transmission unit 17c of the terminal type determination unit 17 (data search and extraction process).

  FIG. 8 is a diagram showing a specific example of data browsing (browsing example from the sales department, association between item “address” and item “phone number”). When the browsing request received from the database browsing terminal 3 is received by the browsing request receiving unit 17a of the terminal type determining unit 17, the database management device 1 starts from the order change database accumulating unit 13 as shown in FIG. Read the order change database (terminal type reception process).

  Subsequently, the database management device 1 uses the browseable item determination unit 17b of the terminal type determination unit 17 to use the available keys (f1, f2, f3, f4, f5_prefecture × f2 as shown in FIG. 8B). ) (Refer to FIG. 5 and FIG. 7), that is, an item that can be browsed is determined (terminal type identification process).

Then, the database management device 1 uses the change range matching means 9b of the change matching means 9 to change each item (name, address, age, occupation, phone number) of the order change database as shown in FIG. ) Using the inverse function (f1 ⁻¹ , f2 ⁻¹ , f3 ⁻¹ , f4 ⁻¹ , f2 ⁻¹ × f5_ prefecture ⁻¹ ) of the function associated with the item function table, Generate (database consistency processing). Then, the database management apparatus 1 transmits the matching process database as shown in FIG. 8D by the matching process database transmission unit 17c of the terminal type determination unit 17 (data search and extraction process).

  FIG. 9 is a diagram showing a specific example of data browsing (database encryption). When the database management device 1 receives the browsing request transmitted from the database browsing terminal (terminal 2 (accounting unit) in the figure) 3 by the browsing request receiving unit 17a of the terminal type determining unit 17, FIG. As shown, the encryption processing order change database read from the order change database storage means 13 is sent to the decryption processing means 15 (terminal type reception process).

  Subsequently, as shown in FIG. 9B, the database management apparatus 1 decrypts the encryption processing order change database by the decryption processing means 15 and sends it to the change matching means 9 as the order change database (database decryption processing). ). Then, the database management device 1 uses the browsable item determination unit 17b of the terminal type determination unit 17 as shown in FIG. 9C, and can use the available keys (f1, f2, f6), that is, browseable items. (Terminal type identification process).

And the database management apparatus 1 is matched with each item (only a name, an address, and a card number) of an order change database with the item matching table 9 by the change matching means 9, as shown in FIG.9 (d). Using the inverse function (f1 ⁻¹ , f2 ⁻¹ , f6 ⁻¹ ) of the function, a matching process database is generated (database matching process). Then, the database management apparatus 1 transmits the matching process database as shown in FIG. 9 (e) by the matching process database transmission unit 17c of the terminal type determination unit 17 (data search and extraction process).

(Specific examples of functions)
Next, specific examples of functions will be described with reference to FIGS. 10 and 11.
FIG. 10 is a diagram showing a specific example of the function (example of generating the function f by the M series). As shown in FIG. 10, when a function f based on M series is used as a function, this function f is a 4-bit shift register based on the primitive polynomial x ⁴ + x + 1 (the number 1 in the circle in the figure). To 4) by substituting the initial value (1, 0, 0, 0). In this function f, for example, the order of the data in the item is changed to “14” th, the order of “2” is left unchanged, and the order of “3” is changed. It is changed to “13” th. The primitive polynomial may be a primitive polynomial based on a Galois field in order to increase data security (so that a third party cannot easily understand the exact correspondence of data between items). Here, since the number of data is 16 or less, a 4-bit shift register is used. However, when the number of data increases, it can be dealt with by changing the primitive polynomial. This case can be dealt with by increasing the number of bits of the shift register.

FIG. 11 is a diagram showing a specific example of a function (example of generating functions f and f_prefectures using M series). As shown in FIG. 11, when an M-sequence function f is used as a function, this function f is a 4-bit shift register based on the primitive polynomial x ⁴ + x + 1 (circled number 1 in the figure). To 4) by substituting the initial value (1, 0, 0, 0). Furthermore, the function f_prefecture substitutes an initial value (0, 1, 0, 0) into a 4-bit shift register (circled numbers 1 to 4 in the figure) based on the primitive polynomial x ⁴ + x + 1. Given.

In this function f_prefecture, the order of the data in the item is changed to the “13” th, the order of the “2” th is changed to the “1” th, and the “3” th The order of things is changed to the “12” th.
Further, in this function f_prefecture, 2, 15, 32, 44, 61,..., Which is the order of only a certain prefecture (the order of the same data in a certain item, for example, Tokyo) is extracted. This order is displayed in the map column.

(Specific example when generating a conversion table)
Next, a specific example of generating a conversion table will be described with reference to FIGS.
FIG. 12 is a diagram showing a specific example (initial registration example of the order change database) when generating the conversion table. The database management apparatus 1 selects the primitive polynomial and the initial value (selection of the primitive polynomial and the initial value) as shown in FIG. 12A by the conversion table generating unit 9c of the change matching unit 9. Here, when the number of data (m) in one item is 13, 2 ⁴ −1> 13, so that N = 4, whereby the primitive polynomial x ⁴ + x + 1, the initial value (1, 0, 0, 0) is selected.

  Then, the database management device 1 generates a conversion table from the selected primitive polynomial and initial value by the conversion table generation unit 9c of the change matching unit 9 as shown in FIG. 12B (generation of conversion table). . Subsequently, the database management apparatus 1 uses the conversion table generated by the conversion table generation unit 9c by the change matching unit 9, and as shown in FIG. Generate a reordering database that changes the order of the data in the item (shuffle data). Here, when the order change database is generated using the conversion table, since the number of data in the item is insufficient, two dummy data (Nakada (dummy 1), Ono (dummy 2)) ).

  Then, the database management apparatus 1 discards the conversion table generated by the conversion table generating unit 9c (discarding the conversion table), as shown in FIG. Further, the database management apparatus 1 repeats the processes (a) to (d) for other items (other tags) while changing the primitive polynomial and the initial value (or changing only the initial value), For the item, an order change database in which the order of data in the item is changed is generated (repeating (a) to (d) with other tags).

FIG. 13 is a diagram showing a specific example (data registration example) when a conversion table is generated. As shown in FIG. 13A, the database management apparatus 1 uses the conversion table generation unit 9c of the change matching unit 9 to change the number of data items in the item (m + 1) to 2 ^N −1 or less, as shown in FIG. Similarly to the case shown in Fig. 5, the conversion table is generated from the primitive polynomial x ⁴ + x + 1 and the initial value (1, 0, 0, 0). Further, when the number of data in the item (m + 1) exceeds 2 ^N −1, a conversion table is generated by changing the primitive polynomial and the initial value as N + 1 (generation of a conversion table).

  When the database management apparatus 1 newly registers data (assumed as new data), as shown in FIG. 13B, as an example of new data (example of registered data), name: Saito, address: Kagawa Register prefecture, age: 23, occupation: musician, phone number: 0823-34-7667, card number: 74589631 (overwrite registration data). In this case, since the actual number of data m is 13, the data of n = 10 where f (n) = 13 + 1 is overwritten with new data. Then, as shown in FIG. 13C, the database management apparatus 1 discards the conversion table (conversion of the conversion table), and performs the processes (a) to (c) for other items (other tags). Repeat and generate an order change database in which new data is overwritten for all items (repeat (a) to (c) with other tags).

  FIG. 14 is a diagram showing a specific example (example of browsing data by user ID) when generating a conversion table. When the browsing request received from the database browsing terminal (terminal 2 (accounting department) in the figure) 3 is received by the browsing request receiving means 17a of the terminal type determining means 17, the database management device 1 is shown in FIG. As shown, the terminal type function table is read from the terminal type function table storage unit 19 (terminal type reception process). In the case of the accounting department, only the name, address and card number can be viewed.

Subsequently, the database management device 1 converts the primitive polynomial x ⁴ + x + 1 from the initial value (1, 0, 0, 0) by the conversion table generation unit 9c of the change matching unit 9, as shown in FIG. Generate a table (generate conversion table).

  And the database management apparatus 1 extracts the data of an applicable item by the change matching means 9, using the produced | generated conversion table based on the user ID to refer, as shown in FIG.14 (c). Then, as shown in FIG. 14C, the database management device 1 discards the conversion table (conversion of the conversion table), and performs the processes (a) to (d) for other items (other tags). Repeatedly, a consistency processing database in which data of the corresponding item is extracted is generated (repeating (a) to (d) with other tags). For example, assuming that the user ID to be referred to is 10, when the name function is the f1 function, a consistency processing database that enables browsing of n = 8 data where f1 (n) = 10 is generated. In this case, if only the corresponding data is listed, the name is Sakaguchi, the address is Nagasaki, and the card number is 65457884.

FIG. 15 is a diagram showing a specific example (example of browsing data by name) when generating a conversion table. The database management device 1 generates a conversion table from the primitive polynomial x ⁴ + x + 1 and the initial value (1, 0, 0, 0) by the conversion table generation unit 9c of the change matching unit 9, as shown in FIG. (Conversion table generation).

  Then, the database management apparatus 1 uses the change matching unit 9 to extract the data of the corresponding item using the generated conversion table based on the name to be referred to, as shown in FIG. Then, as shown in FIG. 15C, the database management apparatus 1 discards the conversion table (discards the conversion table), and generates a consistency processing database in which the data of the corresponding item is extracted from the actual user ID. (Search by user ID). For example, if the name to be referred to is Nakamori, the user ID in this case is 15, so f (15) = 8. That is, the actual user ID is 8, and the same processing as in the data browsing example using the user ID shown in FIG. 14 is performed. In this case (in the case of the accounting department), if only relevant data is listed, name: Nakamori, address: Kagawa Prefecture, card number: 1121146.

(Operation of database management unit [during data registration])
Next, with reference to the flowchart shown in FIG. 16, the operation at the time of data registration of the database management apparatus 1 will be described (see FIG. 2 as appropriate).
First, the database management device 1 receives data transmitted from the user terminal 2 by the data receiving means 5 (step S1). Subsequently, the database management apparatus 1 is read from the order change database storage unit 13 by the change matching unit 9 using the inverse function of the function associated with the item function table read from the item function table storage unit 7. The order change database is made a consistent processing database (step S2).

  Then, the database management device 1 adds data by the data addition processing means 9a (step S3), and the function associated with the item function table read from the item function table storage means 7 by the change matching means 9 is displayed. The matching process database is changed to an order change database (step S4). Then, the database management device 1 stores this order change database in the order change database storage means 13 (step S5).

(Operation of database management device [when viewing data])
Next, referring to the flowchart shown in FIG. 17, the operation of the database management apparatus 1 when browsing data will be described (see FIG. 2 as appropriate).
First, the database management apparatus 1 receives the browsing request transmitted from the database browsing terminal 3 by the browsing request receiving unit 17a of the terminal type determining unit 17 (step S11). Subsequently, the database management apparatus 1 determines the items that can be browsed by the browseable item determination unit 17b of the terminal type determination unit 17 (step S12).

  Then, the database management device 1 uses the change matching unit 9 to match the order change database read from the order change database storage unit 13 with respect to the items that can be browsed, and to match the order of the data in the items to the original order. A database is created (step S13). Then, the database management apparatus 1 transmits the consistency processing database to the database browsing terminal 3 that has transmitted the browsing request by the matching process database transmission unit 17c of the terminal type determination unit 17 (step S14).

(Operation of database browsing terminal)
Next, the operation of the database browsing terminal 3 will be described with reference to the flowchart shown in FIG. 18 (see FIG. 3 as appropriate).
The database browsing terminal 3 transmits a browsing request to the database management apparatus 1 by the browsing request means 21 (step S21). Then, the database browsing terminal 3 receives the matching process database by the database receiving unit 25 (step S22), and displays the received matching process database by the display unit 27 (step S23).

  As mentioned above, although embodiment of this invention was described, this invention is not limited to the said embodiment. For example, in the present embodiment, the database management apparatus 1 and the database browsing terminal 3 have been described. However, the description is made in a general or special computer language so that the processing of each component in the apparatus 1 or the terminal 3 can be performed. It is also possible to configure as a database management program and a database browsing program.

1 is a block diagram of a database management browsing system according to an embodiment of the present invention. It is a block diagram of the database management device concerning an embodiment of the present invention. It is a block diagram of the database browsing terminal which concerns on embodiment of this invention. It is a figure explaining the specific example of data registration. It is a figure explaining the specific example (association with the item "address" and the item "phone number") of data registration. It is a figure explaining the specific example (database encryption) of data registration. It is a figure explaining the specific example (browsing from an accounting department) of data browsing. It is the figure explaining the specific example (The browsing example from a sales department, correlation with the item "address" and the item "phone number"). It is a figure explaining the specific example (database encryption) of data browsing. It is the figure which showed the specific example (generation example of the function f by an M series) of a function. It is the figure which showed the specific example (Generation of the function f by M series, f_prefecture generation example). It is the figure which showed the specific example (initial registration example of an order change database) in the case of producing | generating a conversion table. It is the figure which showed the specific example (data registration example) in the case of producing | generating a conversion table. It is the figure which showed the specific example (browsing by user ID) in the case of producing | generating a conversion table. It is the figure which showed the specific example (browsing by a name) in the case of producing | generating a conversion table. It is the flowchart which showed the operation | movement (at the time of data registration) of the database management apparatus shown in FIG. It is the flowchart which showed operation | movement (at the time of data browsing) of the database management apparatus shown in FIG. It is the flowchart which showed operation | movement of the database browsing terminal shown in FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Database management apparatus 2 User terminal 3 Database browsing terminal 5 Data receiving means 7 Item function table storage means 9 Change matching means 9a Data addition processing means 9b Corresponding relation range changing means 9c Conversion table generating means 11 Cryptographic processing means 13 Order change database Storage means 15 Decoding processing means 17 Terminal type determination means 17a Browsing request reception means 17b Browseable item determination means 17c Consistency processing database transmission means 19 Terminal type function table storage means 21 Browsing request means 23 Terminal type information storage means 25 Database reception means 27 Display means 29 Operating means

Claims (8)

A database management device that manages data related to an item input to a database in which a plurality of items are associated with each other so that the data correspondence between the items is concealed,
Item function table storage means for storing an item function table in which the items are associated with functions that change the order of data in the items to be different from the original order;
Using the item function table stored in the item function table storage means, the order change database is generated by changing the order of the data, and the order of the data in the order change database is matched to the original order. A change matching means for generating a processing database;
Order change database storage means for storing the order change database;
Items that can be browsed by the terminal that has requested browsing based on terminal type information indicating the type of the terminal that has requested browsing of the matching processing database, and a terminal type function table that associates the terminal type information with the function Terminal type determination means for determining
The change matching unit generates a matching process database that matches the order of data in the corresponding item in the order change database according to the browseable items determined by the terminal type determination unit,
The database management apparatus, wherein the terminal type determination unit transmits the generated consistency processing database to a terminal that has requested browsing. Data receiving means for receiving the data;
The change matching means includes data addition processing means for adding data received by the data receiving means to a matching processing database in which all of the order of data in the order change database is matched. The database management device described.   The change matching unit includes a correspondence range changing unit that changes the order of the data so that the correspondence of the data between the items follows a preset rule between the items. The database management apparatus according to claim 1 or 2.   The change matching unit includes a conversion table generating unit that generates a conversion table using a primitive polynomial based on a Galois field that is an algebraic field having a finite number of elements, and the number of the data is a finite number. The database management device according to any one of claims 1 to 3. Cryptographic processing means for cryptographic processing the order change database;
5. The database management apparatus according to claim 1, further comprising a decryption processing unit configured to decrypt the encryption processing order change database encrypted by the encryption processing unit. 6. A database browsing terminal for browsing a consistent processing database in which part or all of the order of data in the order change database managed by the database management device according to claim 1 is matched,
Requesting browsing of the consistency processing database, and browsing request means for transmitting terminal type information indicating the type of the own terminal to the database management device;
Database receiving means for receiving the consistency processing database transmitted from the database management device;
Display means for displaying the consistency processing database received by the database receiving means;
A database browsing terminal comprising: In order to manage the data related to the item input to the database in which a plurality of items are associated with each other so that the data correspondence between the items is concealed, the order of the data in the items is the original order. An item function table accumulating unit for accumulating an item function table in which functions to be changed differently are stored, and an order for storing an order change database in which the order of data in the items is different from the original order A computer equipped with a change database storage means;
Use the item function table stored in the item function table storage means to generate an order change database in which the order of the data is changed, and match the order of the data in the order change database to the original order Change matching means to generate a processing database,
Items that can be browsed by the terminal that has requested browsing based on terminal type information indicating the type of the terminal that has requested browsing of the matching processing database, and a terminal type function table that associates the terminal type information with the function Function as a terminal type determination means for determining
The change matching unit generates a matching process database that matches the order of data of corresponding items in the order change database according to the browseable items determined by the terminal type determination unit,
The database management program, wherein the terminal type determination means transmits the generated consistency processing database to a terminal that has requested browsing. In order to view the consistent processing database in which a part or all of the order of data in the order change database managed by the database management device according to claim 1 is consistent,
Requesting browsing of the consistency processing database and browsing request means for transmitting terminal type information indicating the type of the own terminal to the database management device,
Database receiving means for receiving the consistency processing database transmitted from the database management device;
Display means for displaying the consistency processing database received by the database receiving means;
Database browsing program characterized by functioning as

Images