JP2019046262A - Information processing apparatus, information processing method, and information processing program - Google Patents

Abstract

To provide an information processing apparatus allowing data owned by another service providing entity to be easily used, an information processing method, and an information processing program.SOLUTION: An information processing apparatus includes: an acquisition unit which acquires encrypted data from another device; and an interface unit which generates data in accordance with a condition allowed by a provider of the encrypted data, on the basis of the encrypted data, to be output. The acquisition unit acquires multiple pieces of encrypted data encrypted by multiple providers. The interface unit generates data satisfying conditions of providers of multiple pieces of encrypted data, on the basis of at least two pieces of encrypted data, out of the multiple pieces of encrypted data, to be output.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an information processing apparatus, an information processing method, and an information processing program.

  Provision of services using networks is becoming active. In recent years, various service providers have provided various services.

JP, 2013-257793, A

  In order to provide better service to users, it is desirable to share data (e.g., user data) between multiple service providers. However, in this case, there is no denying that the data provided between other service providers may be illegally used. This fear is the same for other service providers. As a result, it is not easy to get other service providers to provide data.

  The present application has been made in view of the above, and it is an object of the present invention to make it easy to use data held by other service providers.

  The information processing apparatus according to the present application includes an acquisition unit that acquires encrypted data from another apparatus, and an interface unit that generates data based on the encrypted data according to the condition accepted by the provider of the encrypted data and outputs the data. Equipped with

  According to one aspect of the embodiment, it is possible to easily use data held by others.

FIG. 1 is a diagram illustrating an operation of the information processing system according to the embodiment. FIG. 2 is a diagram showing an example of encryption information stored in the storage unit. FIG. 3 is a diagram illustrating an exemplary configuration of a terminal device according to the embodiment. FIG. 4 is a diagram illustrating an exemplary configuration of the information processing apparatus according to the embodiment. FIG. 5 is a diagram showing an example of information stored in the acquired information database. FIG. 6 is a diagram showing an example of user information. FIG. 7 is a diagram showing an example of the encryption information database. FIG. 8 is a flowchart showing an example of the registration process. FIG. 9 is a flowchart showing an example of the output process. FIG. 10 is a flowchart showing an example of the charging process. FIG. 11 is a hardware configuration diagram showing an example of a computer for realizing the function of the information processing apparatus.

  Hereinafter, an information processing apparatus, an information processing method, and a mode for carrying out an information processing program according to the present application (hereinafter, referred to as “embodiment”) will be described in detail with reference to the drawings. Note that the information processing apparatus, the information processing method, and the information processing program according to the present application are not limited by the following embodiments. Moreover, the same code | symbol is attached | subjected to the same site | part in the following each embodiment, and the overlapping description is abbreviate | omitted.

[1. Operation of Information Processing Device]
First, the operation of the information processing apparatus will be described using the information processing system 1 including the information processing apparatus 20 of the present embodiment as an example.

  FIG. 1 is a diagram showing an operation of the information processing system 1 according to the embodiment. The information processing system 1 is a system for facilitating exchange of data between service providers. The "service" in the present embodiment is a service provided via the Internet. For example, services are services such as online shopping, advertisement delivery, email, games, news, auctions, bulletin boards, blogs, weather forecasts, finance, route search, maps, travel, job offers, real estate, restaurant introduction, data download, etc. . The service may be a cloud service for medical information (eg, medical records). In the following description, the service provider (ie, the service operator) is referred to as the operator.

The information processing system 1 includes terminal devices 10 ₁ , 10 ₂ , and 10 ₃ and information processing devices 20 ₁ , 20 ₂ , and 20 ₃ . Although three terminal devices are shown in the example of FIG. 1, the number of terminal devices may be less than three or more than three. In the following description, the terminal devices 10 ₁ , 10 ₂ , 10 _3, etc. may be collectively referred to as the terminal device 10. Further, although three information processing apparatuses are shown in the example of FIG. 1, the number of information processing apparatuses may be less than three or more than three. In the following description, it may be referred to as information processing apparatus 20 are collectively the information processing apparatus _{20 1,} 20 2, 20 _3, and the like.

The terminal device 10 is, for example, a user terminal such as a smart device (smart phone or tablet), a mobile phone, or a personal computer. Terminal apparatus 10 ₁ is a terminal used by company employees A, the terminal device 10 ₂ is a terminal used by company employees B, the terminal apparatus ₁₀₃ is a terminal used by company employees C . The company A, the company B, and the company C are service providers that provide predetermined services. The service provider is not limited to a company. The service providing entity may be an organization other than a company (company), for example, an organization such as a non-profit corporation or a public organization. "Organization" includes not only organizations such as non-profit corporations but also companies (company). Of course, the service provider may be an individual rather than an organization. Also, the service providing entity may be a predetermined division (for example, a division providing the first service) in the organization. In this case, other departments within the same organization (e.g., departments providing the second service) are other service providers. The "company" appearing in the following description may be replaced by "organization", "individual", or "department" as appropriate. The terminal device 10 communicates with the information processing device 20 via a network.

The information processing apparatus 20 is a server host computer that provides various services to a client terminal or a user who operates the client terminal. For example, the information processing apparatus 20 is a server that provides various services to the user. The information processing device 20 may be configured of one device or may be configured of a plurality of devices. The information processing apparatus 20 ₁ is a server that company A is operated, the information processing apparatus 20 ₂ is a server that operates the company B, the information processing apparatus 20 ₃ is a server for the company C is operated. Services provided by the information processing apparatus 20 include, for example, online shopping, advertisement delivery, mail, games, news, auctions, bulletin boards, blogs, weather forecasts, finance, route search, maps, travel, job offers, real estate, restaurant introduction, It is a service such as data download and medical care.

  The information processing apparatus 20 includes a database for recording data (hereinafter referred to as service data) acquired when providing a service. The service data is, for example, information of a user who has used the service. The database storing the service data may be RDB (Relational Database), or may be a database using a hyperscale database management system (scale-out type system) such as NoSQL (Not Only SQL). . At this time, NoSQL may be KVS (Key-Value Store).

  Further, the information processing device 20 has a storage unit for storing data published to another information processing device 20. The storage unit stores data encrypted by the interface unit. Further, data encrypted by the operator of the other information processing apparatus 20 is also recorded in the storage unit. The information processing apparatus 20 decrypts encrypted data provided by the provider via the interface unit.

  The interface unit is composed of functional blocks that execute a program for realizing the smart contract. At this time, the functional block may be a software block or a hardware block. For example, the functional block may be one software module implemented by software (including a microprogram) or one circuit block on a semiconductor chip (die).

  In addition, a smart contract is a mechanism that automates procedures such as condition confirmation and execution of a contract by a program. The program for realizing the smart contract is an API (Application Programming Interface) jointly developed by the operator of the information processing apparatus 20 constituting the information processing system 1 (company A, company B, company C in this embodiment) It may be.

  The program for realizing the smart contract (hereinafter referred to as a contract program) is configured to be able to define the contents of the contract by a provider of encrypted data (for example, an operator of another information processing apparatus 20). The contents of the contract include, for example, the conditions for enabling the use of encrypted data, the format of data output from the interface unit, the expiration date of the data, the range of usable data among the provided encrypted data, and data The charge amount when used, the charge method, and the like. The interface unit executes the contract program to generate and output data based on the encrypted data in accordance with the condition (range of use) recognized by the provider of the encrypted data.

  Hereinafter, the operation of the information processing system 1 provided with the information processing apparatus 20 of the present embodiment will be described with reference to FIG.

  First, when the information processing apparatus 20 acquires service data from the operator of the information processing apparatus 20 (steps S1a to S1c), the interface unit of the information processing apparatus 20 encrypts the service data and stores it in the storage unit (step S2a, step S2b, etc.).

  Further, when the service data is encrypted, the information processing device 20 transmits the encrypted data to the other information processing device 20. When the information processing device 20 acquires encrypted data from another information processing device 20, the information processing device 20 stores it in the storage unit. The plurality of information processing apparatuses 20 mutually transmit and receive encrypted data, and synchronizes the encrypted information stored in the storage unit (steps S3a to S3c). The key for decrypting the encrypted data is strictly managed by the contract program manager, and even the operator of the information processing apparatus 20 can not decrypt the encrypted data stored in the storage unit.

  FIG. 2 is a diagram showing an example of encryption information stored in the storage unit. The encryption information stores a plurality of encryption data encrypted by a plurality of providers. Each encrypted data is attached with a provider ID indicating a provider of the encrypted data. In the example of FIG. 2, the provider ID "A" indicates the company A, the provider ID "B" indicates the company B, and the provider ID "C" indicates the company C. There is. In the following description, company A, company B and company C are also referred to as providers.

  Note that the information processing device 20 may be configured to detect tampering of encrypted data acquired from another information processing device 20 based on information on the encrypted data from a plurality of devices holding the same encrypted data. . For example, the information processing device 20 may detect tampering of encrypted data by acquiring hash values of encrypted data from a plurality of devices holding the same encrypted data and collating with hash values of encrypted data owned by the information processing device 20 itself. . In addition, the information processing apparatus 20 may detect tampering of the encrypted data by forming a block chain with the encrypted data that the information processing apparatus 20 itself and the encrypted data that the other information processing apparatus 20 has.

  When the interface unit of the information processing apparatus 20 receives a data output request together with a predetermined input (for example, the type of requested data) from the operator, the interface unit acquires encrypted data necessary for output from the encrypted information (step S4a, step S4b etc.). Then, the interface unit of the information processing device 20 generates data based on the encrypted data and outputs the data according to the condition recognized by the provider of the encrypted data (steps S5a to S5c). For example, it is assumed that an employee of company A instructs the interface unit to output encrypted data EC21 provided by company B. In addition, it is assumed that the condition that the company B does not allow the output of the information of the user's name is set in the contract program as the encrypted data EC21 is the user information including the user ID, name, gender, and age of each user. At this time, the interface unit decrypts the encrypted data EC21 included in the encrypted information, deletes the information of the user's name from the user information obtained by the decryption, and outputs the information to the employee of the company A.

  The interface unit of the information processing device 20 may generate output data based on a plurality of encrypted data. At this time, the plurality of pieces of encrypted data may be provided by different providers. Then, the interface unit may generate, as output data, data that satisfies any of the conditions of a plurality of providers. For example, it is assumed that an employee of company A instructs the interface unit to output user information of all other companies. Further, among the encryption information shown in FIG. 2, both the encryption data EC21 provided by the company B and the encryption data EC31 provided by the company C are the encrypted user information, and each user information is It is assumed that user ID, name, gender, and age information are included. Further, it is assumed that the condition that company B does not allow the output of the information of the user's name is set, and the condition that company C does not allow the output of the user's age information is set. At this time, the interface unit decrypts the encrypted data EC21 and the encrypted data EC31, and deletes the user's name and the user's age information from both of the user information obtained by the decryption. Then, the interface unit combines the user information of both parties and outputs it to the employee of the company A.

  The interface unit of the information processing device 20 may perform predetermined processing based on the decoded data, and use data generated as a result of the processing as output data. For example, the information processing apparatus 20 may generate and output recommendation information (recommendation data) on a predetermined target based on at least two pieces of encrypted data of a plurality of encrypted data. The predetermined target may be a product or a service. For example, among the encryption information shown in FIG. 2, it is assumed that the encryption data EC21 is user information, and the encryption data EC22 is a purchase history of a predetermined product of the user specified by the user information. At this time, if an employee of company A instructs to output the male-female ratio of the user who has purchased a predetermined product, the interface unit decrypts the encrypted data EC21 and the encrypted data EC22, and based on the decrypted data The number of sales of a predetermined product to a male user and the number of sales of a predetermined product to a female user are determined. Then, the interface unit outputs the male / female ratio calculated based on the determined number of sales.

  Further, the interface unit of the information processing device 20 may generate and output prediction data on a predetermined target based on at least two pieces of encrypted data of the plurality of pieces of encrypted data. The predetermined subject may be the user's body (i.e. the user's health or illness). For example, the information processing device 20 acquires a plurality of encrypted data obtained by encrypting medical data held by a plurality of providers. For example, the interface unit acquires a plurality of encrypted data obtained by respectively encrypting medical data of internal medicine and medical data of surgery. Then, the interface unit generates and outputs prediction data on the disease based on at least two of the plurality of encrypted data. For example, the interface unit predicts the user's disease by combining medical and surgical data, and outputs a prediction result.

  When the data processing apparatus 20 outputs data, the information processing apparatus 20 may execute processing concerning charging of the user of the data. For example, the information processing apparatus 20 may execute charging in accordance with the condition accepted by the provider of the encrypted data that is the basis of the output data. More specifically, the interface unit of the information processing device 20 calculates the charge amount for the operator who uses the data, based on the use fee of the data set in the contract program. The usage fee may be set by the provider of the encrypted data. Then, the interface unit performs processing for issuing a bill in which the charge amount is written, processing for confirming payment from the operator, and the like. The interface unit may perform processing related to payment in cooperation with the server of the financial institution.

  According to the present embodiment, the information processing apparatus 20 is configured to generate and output data according to the condition recognized by the provider of cryptographic data based on the cryptographic data. The provider of the encrypted data can provide the data at ease because the data is not used outside the range defined by the self. As a result, the service operator can easily use the data of other operators.

[2. Configuration Example of Information Processing System]
The operation of the information processing apparatus of the present embodiment has been described above by taking the information processing system 1 including the information processing apparatus 20 of the present embodiment as an example, but the configuration of the information processing system 1 of the present embodiment will be described below. As described above, the information processing system 1 includes the terminal device 10 and the information processing device 20. The terminal device 10 and the information processing device 20 are connected via a network. The network is a communication network such as a Local Area Network (LAN), a Wide Area Network (WAN), a telephone network (such as a mobile telephone network or a fixed telephone network), a regional IP (Internet Protocol) network, or the Internet. The network may include a wired network or may include a wireless network.

[3. Configuration Example of Terminal Device]
FIG. 3 is a diagram showing an exemplary configuration of the terminal device 10 according to the embodiment. The terminal device 10 is an information display device (information processing device) used by a user to browse a page. The terminal device 10 is, for example, a communication terminal such as a smartphone, a tablet, or a mobile phone. As long as it has a communication function, the terminal device 10 may be an information processing terminal such as a personal computer (notebook PC, desktop PC), PDA (Personal Digital Assistant) or the like. In this case, the information processing terminal is also a type of communication terminal. The terminal device 10 connects to the information processing device 20 via a network. As shown in FIG. 3, the terminal device 10 includes a communication unit 11, an input unit 12, a storage unit 13, an output unit 14, and a control unit 15. The configuration shown in FIG. 3 is a functional configuration, and the hardware configuration may be different therefrom.

  The communication unit 11 is a communication interface that communicates with an external device. The communication unit 11 may be a network interface or a device connection interface. For example, the communication unit 11 may be a LAN interface such as a NIC (Network Interface Card), or may be a USB interface configured by a USB (Universal Serial Bus) host controller, a USB port, or the like. The communication unit 11 may be a wired interface or a wireless interface. The communication unit 11 functions as a communication unit of the terminal device 10. The communication unit 11 communicates with the information processing apparatus 20 according to the control of the control unit 15.

  The input unit 12 is an input device that receives various inputs from the outside. For example, the input unit 12 is an operation device such as a keyboard, a mouse, or an operation key for the user to perform various operations. The input unit 12 functions as an input unit of the terminal device 10. When a touch panel is adopted for the terminal device 10, the touch panel is also included in the input unit 12. In this case, the user performs various operations by touching the screen with a finger or a stylus.

  The storage unit 13 is a storage device capable of reading and writing data, such as a dynamic random access memory (DRAM), a static random access memory (SRAM), a flash memory, and a hard disk. The storage unit 13 functions as a storage unit of the terminal device 10. The storage unit 13 stores data of application software such as a web browser. The user communicates with the information processing apparatus 20 via application software.

  The output unit 14 is a device that performs various outputs such as sound, light, vibration, and an image to the outside. The output unit 14 functions as an output unit of the terminal device 10. The output unit 14 includes a display device that displays various information. The display device is, for example, a liquid crystal display or an organic EL (Electro Luminescence) display. When a touch panel is adopted for the terminal device 10, the display device may be integrated with the input unit 12. The output unit 14 displays an image on the screen according to the control of the control unit 15.

  The control unit 15 is a controller, and for example, various programs stored in a storage device inside the terminal device 10 are processed by a processor such as a central processing unit (CPU) or a micro processing unit (MPU). It is realized by being implemented as a work area. The control unit 15 is a controller, and may be realized by an integrated circuit such as an application specific integrated circuit (ASIC) or a field programmable gate array (FPGA).

[4. Configuration Example of Information Processing Device]
Next, the configuration of the information processing apparatus 20 will be described in detail. The information processing device 20 is a server host computer (hereinafter, simply referred to as a “server”) that processes requests from client computers such as the terminal device 10. The information processing device 20 may be a PC server, a midrange server, or a mainframe server. In addition, the information processing apparatus 20 may be configured by one server, or may be configured by a plurality of servers that cooperate to execute processing. When the information processing apparatus 20 includes a plurality of servers, the installation locations of these servers may be remote. These servers can be regarded as one information processing apparatus if the processing is performed in cooperation with each other even if the installation site is far.

  FIG. 4 is a diagram illustrating an exemplary configuration of the information processing apparatus 20 according to the embodiment. The information processing apparatus 20 includes a communication unit 21, a storage unit 22, and a control unit 23. The configuration shown in FIG. 4 is a functional configuration, and the hardware configuration may be different from this.

  The communication unit 21 is a communication interface that communicates with an external device. The communication unit 21 may be a network interface or a device connection interface. For example, the communication unit 21 may be a LAN interface such as a NIC, or may be a USB interface configured by a USB host controller, a USB port, or the like. The communication unit 21 may be a wired interface or a wireless interface. The communication unit 21 functions as a communication unit of the information processing apparatus 20. The communication unit 21 communicates with the terminal device 10 and the other information processing apparatus 20 according to the control of the control unit 23.

  The storage unit 22 is a storage device capable of reading and writing data such as a DRAM, an SRAM, a flash memory, and a hard disk. The storage unit 22 functions as a storage unit of the information processing apparatus 20. The storage unit 22 stores an acquired information database 221 and an encrypted information database 222.

  The acquired information database 221 is a database for storing data (service data) acquired when the information processing apparatus 20 provides a service to the user. The acquired information database 221 may be an RDB, or may be a database using a hyperscale database management system such as NoSQL. At this time, NoSQL may be KVS. FIG. 5 is a diagram showing an example of the information stored in the acquired information database 221. As shown in FIG. In the example shown in FIG. 5, the acquired information database 221 has items such as data ID and service data.

  "Data ID" indicates identification information of service data. In the example of FIG. 5, values such as "001", "002", and "003" are stored in the item of data ID. 001 indicates the ID of the service data C11, 002 indicates the ID of the service data C12, and 003 indicates the ID of the service data C13.

  “Service data” indicates data acquired by the information processing apparatus 20 in providing a service. In the example of FIG. 5, conceptual information such as "C11" to "C13" is stored in the item of service, but in the item of service data, user information, sales information of goods, medical information (for example, , Medical records, etc. may be stored. The service data is not limited to user information, product sales information, and medical information. For example, the service data may be information of a store that is open in an online mall.

  FIG. 6 is a diagram showing an example of user information. The user information is an example of service data, and indicates information of a user who has used the net service. The user information has items such as user ID, user name, gender, age, and sales information. "User ID" is identification information of a user. The “user name” is the name of the user indicated by the user ID. "Gender" is the gender of the user indicated by the user ID. “Age” is the age of the user indicated by the user ID. The “sales information” is information on a product purchased by the user indicated by the user ID using the online shopping service.

  FIG. 7 is a diagram showing an example of the encryption information database. The encryption information stores a plurality of encryption data encrypted by a plurality of providers. The encryption information has items such as a provider ID and encryption data. The “provider ID” is identification information of a provider of encrypted data. “Encrypted data” is encrypted data obtained by encrypting service data held by a provider indicated by a provider ID.

  The control unit 23 is a controller, and is realized, for example, by a processor such as a CPU or an MPU executing various programs stored in a storage device in the information processing apparatus 20 using a RAM or the like as a work area. The control unit 23 is a controller, and may be realized by an integrated circuit such as an ASIC or an FPGA.

  As shown in FIG. 4, the control unit 23 includes an acquisition unit 231, an interface unit 232, a detection unit 233, a transmission unit 234, and a charging unit 235. The blocks (acquisition unit 231 to charging unit 235) constituting the control unit 23 are functional blocks each indicating the function of the control unit 23. These functional blocks may be software blocks or hardware blocks. For example, the functional blocks described above may be one software module implemented by software (including a microprogram) or one circuit block on a semiconductor chip (die). Of course, each functional block may be one processor or one integrated circuit. The configuration method of the functional block is arbitrary. In addition, the control part 23 may be comprised by the function unit different from the above-mentioned functional block.

  The acquisition unit 231 acquires encrypted data from the information processing apparatus 20. At this time, the acquisition unit 231 may acquire a plurality of encrypted data encrypted by a plurality of providers. In addition, the acquisition unit 231 acquires a plurality of encrypted data obtained by encrypting medical data held by a plurality of providers.

  The interface unit 232 is configured by functional blocks that execute a program for realizing the smart contract. A smart contract is a mechanism that automates procedures such as condition confirmation and enforcement of a contract by a program. The program for realizing the smart contract may be an API (Application Programming Interface) jointly developed by a plurality of operators of a plurality of information processing apparatuses 20 constituting the information processing system 1. The functions implemented by the acquisition unit 231, the detection unit 233, the transmission unit 234, and the charging unit 235 can be included in the interface unit 232.

  The interface unit 232 generates data based on the encrypted data and outputs the data according to the condition recognized by the provider of the encrypted data. At this time, the interface unit 232 may generate and output data meeting the conditions of the plurality of providers based on at least two of the plurality of encrypted data. The interface unit 232 also generates and outputs recommendation information on a predetermined target based on at least two pieces of encrypted data of the plurality of pieces of encrypted data.

  The interface unit 232 also generates and outputs prediction data on a predetermined target based on at least two of the plurality of pieces of encrypted data. For example, the interface unit 232 generates and outputs prediction data related to a disease based on at least two of the plurality of encrypted data.

  The detection unit 233 detects the falsification of the encrypted data acquired from the information processing device 20 based on the information related to the encrypted data from the plurality of devices holding the same encrypted data.

  The transmitting unit 234 transmits the encrypted data to the information processing apparatus 20. For example, the transmission unit 234 transmits the encrypted data generated by the interface unit 232 to the information processing apparatus 20.

  When the interface unit 232 outputs data, the charging unit 235 executes processing for charging of the user of the output data according to the condition accepted by the provider of the encrypted data. The interface unit 232 may execute the processing executed by the charging unit 235.

[5. Processing flow of information processing apparatus]
Next, the procedure of the process performed by the information processing device 20 will be described. The information processing apparatus 20 executes registration processing, output processing, and charging processing. The information processing apparatus 20 includes a multitasking OS, and can execute these processes in parallel.

[5-1. registration process〕
First, the registration process will be described. FIG. 8 is a flowchart showing an example of the registration process. The registration process is a process of registering data in the acquired information database 221 and the encryption information database 222. When the power is turned on, the information processing apparatus 20 executes a registration process.

  First, the information processing device 20 determines whether service data is acquired from the terminal device 10 together with information on whether data can be shared (step S11). When the service data is not acquired (step S11: No), the information processing device 20 repeats step S11 until acquiring the service data.

  When the service data is acquired (step S11: Yes), the information processing apparatus 20 attaches a data ID to the service data, and registers the service data with the data ID in the acquired information database 221 (step S12).

  Subsequently, the information processing apparatus 20 determines whether the acquired service data is data that can be shared (step S13). For example, the information processing apparatus 20 determines whether the acquired service data is data that can be shared with another service providing entity under the conditions determined by the provider of the service data (step S13). If the service data can not be shared (step S13: No), the information processing device 20 returns the process to step S11.

  If the service data can be shared (step S13: Yes), the information processing device 20 encrypts the service data using the interface unit 232 (step S14). Then, the information processing apparatus 20 attaches a provider ID indicating the provider of the data to the encrypted data, and registers the encrypted data with the provider ID in the encryption information database 222 (step S15).

  After that, the information processing apparatus 20 transmits the newly registered encrypted data to the other information processing apparatus 20 in order to synchronize the encryption information held by the other information processing apparatus 20 and the encryption information held by itself (step S16). The other information processing apparatus 20 receives the transmission of the encrypted data and updates its own encryption information database 222. When the transmission of the encrypted data is completed, the information processing device 20 returns the process to step S11.

5-2. Output processing]
First, output processing will be described. FIG. 9 is a flowchart showing an example of the output process. The output process is a process of generating data from the encrypted data according to the instruction of the user operating the terminal device 10 and outputting the data. The information processing apparatus 20 starts output processing when the power is turned on.

  First, the information processing apparatus 20 determines whether a request for data (output request) has been received from the terminal apparatus 10 together with a predetermined input (for example, the type of requested data) (step S21). When the request has not been received (step S21: No), the information processing device 20 repeats step S21 until the request is received.

  If the request has been received (step S21: Yes), the information processing device 20 acquires encrypted data necessary for generating data from the encryption information database 222 (step S22). At this time, if multiple pieces of encrypted data are required to generate data, multiple pieces of encrypted data are acquired from the encrypted information database 222. The plurality of encrypted data may be provided by different providers.

  The information processing apparatus 20 determines whether the encrypted data acquired in step S22 is authentic (step S23). That is, the information processing device 20 verifies whether or not the encrypted data is falsified. For example, the information processing device 20 acquires hash values of encrypted data from a plurality of devices holding the same encrypted data, and detects tampering of the encrypted data by collating with the hash values of the encrypted data owned by the information processing device 20 itself. If the encrypted data is not authentic (step S23: No), the information processing device 20 returns the process to step S21. The information processing device 20 may reacquire genuine encrypted data from another device.

  If the encrypted data is authentic (step S23: Yes), the information processing apparatus 20 generates data satisfying the user's request based on the encrypted data (step S24). At this time, the information processing device 20 uses the interface unit 232 to generate data in accordance with the condition accepted by the provider of the encrypted data.

  Then, the information processing device 20 outputs the data generated in step S24 to the terminal device 10 (step S25). When the output is completed, the information processing apparatus 20 returns the process to step S21 and waits for a request.

[5-3. Billing process]
Next, the charging process will be described. FIG. 10 is a flowchart showing an example of the charging process. The charging process is a process for charging a user of encrypted data. When the power is turned on, the information processing apparatus 20 starts charging processing.

  First, the information processing apparatus 20 determines whether a charging date has arrived (step S31). The charge date may be, for example, the end of the month. If the charging date has not arrived (step S31: No), the information processing apparatus 20 repeats the process of step S31 until the charging date arrives.

  If the billing date has arrived (step S31: Yes), the information processing apparatus 20 calculates the billing amount based on the usage history of the encrypted data and the like (step S32). The information processing apparatus 20 may calculate the billing amount based on the usage fee of the data set in the contract program.

  Then, the information processing device 20 executes charging processing for the user of the encrypted data (that is, the operator of the information processing device 20) (step S33). For example, the information processing apparatus 20 performs processing for issuing a bill in which the charge amount is written, processing for confirming payment from a notification user, and the like.

  When the charging process is completed, the information processing device 20 returns to step S31 and waits for the arrival of the charging date.

[6. Modified example]
The above embodiment is an example, and various modifications and applications are possible.

  For example, in the above-described embodiment, the encrypted data generated by the interface unit 232 is data obtained by encrypting service data. However, the encrypted data may not be data obtained by encrypting the service data. The encrypted data may be data obtained by encrypting data (for example, management information of an employee, etc.) that is not related to the provision of the service.

  The control device for controlling the information processing device 20 of the present embodiment may be realized by a dedicated computer system or may be realized by a normal computer system. For example, a program for executing the above-described operation is stored in a computer-readable recording medium such as an optical disk, semiconductor memory, magnetic tape, flexible disk, etc. and distributed, the program is installed in a computer, and the above-described processing is performed. The control device may be configured by execution. The control device may be an external device (for example, a personal computer) outside the information processing device 20 or an internal device (for example, the control unit 23). In addition, the program may be stored in a disk device provided in a server device on a network such as the Internet so that the program can be downloaded to a computer. In addition, the above-described functions may be realized by cooperation of an OS (Operating System) and application software. In this case, the part other than the OS may be stored in the medium and distributed, or the part other than the OS may be stored in the server apparatus and downloaded to the computer.

  Further, among the processes described in the above-described embodiments, all or part of the process described as being automatically performed may be manually performed, or the process described as being manually performed. All or part of can be performed automatically by known methods. In addition, information including processing procedures, specific names, various data and parameters shown in the above-mentioned documents and drawings can be arbitrarily changed unless otherwise specified. For example, the various information shown in each figure is not limited to the illustrated information.

  Further, each component of each device illustrated is functionally conceptual, and does not necessarily have to be physically configured as illustrated. That is, the specific form of the distribution and integration of each device is not limited to the illustrated one, and all or a part thereof may be functionally or physically dispersed in any unit depending on various loads, usage conditions, etc. It can be integrated and configured.

  Moreover, it is possible to combine suitably each embodiment mentioned above in the range which does not contradict process content.

[7. Hardware configuration]
The information processing apparatus 20 according to the embodiment and the modification can also be realized by, for example, a computer 1000 configured as shown in FIG. FIG. 11 is a hardware configuration diagram showing an example of a computer that implements the functions of the information processing apparatus 20. The computer 1000 includes a central processing unit (CPU) 1100, a RAM 1200, a ROM 1300, a hard disk drive (HDD) 1400, a communication interface (I / F) 1500, an input / output interface (I / F) 1600, and a media interface (I / F). ) 1700.

  The CPU 1100 operates based on a program stored in the ROM 1300 or the HDD 1400 to control each part. The ROM 1300 stores a boot program executed by the CPU 1100 when the computer 1000 starts up, a program depending on the hardware of the computer 1000, and the like.

  The HDD 1400 stores a program executed by the CPU 1100, data used by the program, and the like. The communication interface 1500 receives data from another device via the network N, sends the data to the CPU 1100, and transmits data generated by the CPU 1100 to the other device via the network N.

  The CPU 1100 controls output devices such as a display and a printer and input devices such as a keyboard and a mouse via the input / output interface 1600. The CPU 1100 acquires data from an input device via the input / output interface 1600. The CPU 1100 also outputs the generated data to the output device via the input / output interface 1600.

  The media interface 1700 reads a program or data stored in the recording medium 1800 and provides the CPU 1100 with the program via the RAM 1200. The CPU 1100 loads such a program from the recording medium 1800 onto the RAM 1200 via the media interface 1700 and executes the loaded program. The recording medium 1800 is, for example, an optical recording medium such as a digital versatile disc (DVD) or a phase change rewritable disc (PD), a magneto-optical recording medium such as a magneto-optical disk (MO), a tape medium, a magnetic recording medium, or a semiconductor memory. Etc.

  For example, when the computer 1000 functions as the information processing apparatus 20 according to the embodiment, the CPU 1100 of the computer 1000 implements the control unit 23 by executing a program loaded on the RAM 1200. The CPU 1100 of the computer 1000 reads these programs from the recording medium 1800 and executes them, but as another example, these programs may be acquired from another device via the network N.

  Although some of the embodiments of the present application have been described in detail based on the drawings, these are only examples, and various modifications can be made based on the knowledge of those skilled in the art, including the aspects described in the rows of the disclosure of the invention. It is possible to implement the invention in other improved forms.

[8. effect〕
According to the present embodiment, the information processing device 20 acquires encrypted data from another device. Then, the information processing device 20 generates data based on the encrypted data and outputs the data according to the condition recognized by the provider of the encrypted data. The provider of the encrypted data can provide the data at ease because the data is not used outside the range defined by the self. As a result, the service operator can easily use the data of other operators.

  The information processing apparatus 20 acquires a plurality of encrypted data encrypted by a plurality of providers. Then, the information processing device 20 generates and outputs data satisfying the conditions of the plurality of providers based on at least two of the plurality of encrypted data. Since the information processing apparatus 20 generates output data using data of a plurality of providers, it can output data with high accuracy (for example, prediction data with high accuracy).

  The information processing device 20 generates and outputs recommendation information on a predetermined target based on at least two pieces of encrypted data of the plurality of pieces of encrypted data. The information processing apparatus 20 generates recommendation information using a plurality of encrypted data, and therefore can output recommendation information with high accuracy.

  The information processing apparatus 20 generates and outputs prediction data on a predetermined target based on at least two of the plurality of pieces of encrypted data. Since the information processing apparatus 20 generates prediction data using data of a plurality of providers, the information processing apparatus 20 can output prediction data with high accuracy.

  The information processing apparatus 20 acquires a plurality of encrypted data obtained by encrypting medical data held by a plurality of providers. Then, the information processing device 20 generates and outputs prediction data related to a disease based on at least two of the plurality of encrypted data. Since the information processing apparatus 20 generates prediction data using a plurality of encrypted data, it can output prediction data with high accuracy.

  The information processing device 20 detects tampering of encrypted data acquired from another device based on information on the encrypted data from a plurality of devices holding the same encrypted data. The user of the encrypted data can be confident that the provided encrypted data is authentic, so the output data can be used with confidence.

  The information processing device 20 transmits the encrypted data to another device. Then, the information processing device 20 encrypts the data provided by the user and transmits the encrypted data to another device. Since the data is encrypted, the user can provide the data at ease.

  When the information processing apparatus 20 generates data based on the encrypted data according to the conditions accepted by the provider of the encrypted data and outputs the data, the information data provider recognizes the user of the output data by the provider of the encrypted data Execute processing related to charging according to the specified conditions. As a result, the operator of the information processing apparatus 20 can obtain compensation for the provision of data. As many operators will provide data, service operators can easily use the data of many operators.

  Although some of the embodiments of the present application have been described above in detail based on the drawings, these are only examples, and various modifications can be made based on the knowledge of those skilled in the art, including the aspects described in the section of the description of the invention. It is possible to implement the invention in other improved forms.

  In addition, the "section (module, unit)" described above can be read as "means" or "circuit". For example, the interface unit can be read as an interface means or an interface circuit.

1 ... information processing system 10, 10 ₁ , 10 ₂ , 10 ₃ ... terminal device 11, 21 ... communication unit 12 ... input unit 13, 22 ... storage unit 14 ... output unit 15, 23 ... control unit 20, 20 ₁ , 20 ₂ , 20 ₃ ... Information processing device 221 ... Acquisition information database 222 ... Encryption information database 231 ... Acquisition unit 232 ... Interface unit 233 ... Detection unit 234 ... Transmission unit 235 ... Accounting unit

Claims (10)

An acquisition unit that acquires encrypted data from another device;
An interface unit that generates data based on the encrypted data and outputs the data according to the condition recognized by the provider of the encrypted data;
An information processing apparatus comprising: The acquisition unit acquires a plurality of encrypted data respectively encrypted by a plurality of providers,
The interface unit generates and outputs data meeting the conditions of the plurality of providers based on at least two of the plurality of encrypted data.
An information processing apparatus according to claim 1, characterized in that. The interface unit generates and outputs recommendation information on a predetermined target based on at least two encrypted data of the plurality of encrypted data.
The information processing apparatus according to claim 2, characterized in that: The interface unit generates and outputs prediction data on a predetermined target based on at least two of the plurality of encrypted data.
The information processing apparatus according to claim 2 or 3, characterized in that: The acquisition unit acquires a plurality of encrypted data obtained by encrypting medical data held by a plurality of providers.
The interface unit generates and outputs prediction data on disease based on at least two of the plurality of encrypted data.
The information processing apparatus according to claim 4, characterized in that: A detection unit that detects tampering of the encrypted data acquired from the other device based on information on the encrypted data from a plurality of devices holding the same encrypted data;
The information processing apparatus according to any one of claims 1 to 5, further comprising: A transmitting unit that transmits encrypted data to the other device;
The interface unit encrypts data provided by the user,
The transmission unit transmits the encrypted data generated by the interface unit to the other device.
The information processing apparatus according to any one of claims 1 to 6, characterized in that: A charging unit that executes processing relating to charging according to the condition accepted by the provider of the encrypted data to the user of the output data when the interface unit outputs the data;
The information processing apparatus according to any one of claims 1 to 7, further comprising: An information processing method executed by the information processing apparatus;
An acquisition process for acquiring encrypted data;
An interface step of generating data based on the encrypted data and outputting the data according to the condition recognized by the provider of the encrypted data;
An information processing method comprising: Acquisition procedure for acquiring encrypted data,
An interface procedure for generating data based on the encrypted data and outputting the data according to the condition recognized by the provider of the encrypted data;
An information processing program for making a computer execute.

Images