JP2021145221A - Information processor, information processing system, information processing method, and program - Google Patents

Abstract

To disclose an access right for data while protecting the data from leakage.SOLUTION: An access data acquisition unit 110 acquires access data including a first device identifier for identifying a first device, a second device identifier for identifying a second device, and access right information that is information on an access right to the first device. A first signature information acquisition unit 111 acquires from the first device a first public key, a public key of the first device, and first electronic signature data obtained by signing the access data using a secret key of the first device. A second signature information acquisition unit 112 acquires from the second device a second public key, a public key of the second device, and second electronic signature data obtained by signing the first electronic signature data using a secret key of the second device. A block chain registration unit 113 registers with a block chain the first public key, the second public key, a third public key that is a public key of an information processor 1, and signed access data obtained by signing the second electronic signature data using a secret key of the information processor 1.SELECTED DRAWING: Figure 2

Description

The present invention relates to an information processing apparatus, an information processing system, an information processing method, and a program.

In recent years, it has become necessary to manage customer's personal information more thoroughly than ever before. This means that, for example, when allowing access from other companies to personal information owned by the company through collaboration between companies, it is necessary to thoroughly manage at least the generation, reading history, update, and deletion of personal information. Means that there is.

When linking data including personal information between your company's system and another company's system, in order to control the access right of your company's data to the connected system, the system is determined individually with detailed specifications. Must be developed. As the number of connected systems increases, the number of combinations increases, and the system construction for cooperation becomes complicated. In particular, if one company is allowed to read and update data owned by the company, and another company is prohibited from updating but only read, it is only a combination between companies. Instead, it becomes necessary to manage access rights for each data, and the mechanism for cooperation becomes more complicated.

There is also a technology that manages the granting of access rights to data by applying existing technology without developing a system individually among users. For example, in Patent Document 1, the prescription data is stored in the blockchain from the doctor side by temporarily granting the access authority from the patient side, and the dispensing data is stored in the blockchain by referring to the prescription data from the pharmacist side. We are proposing a technology to store in.

Japanese Unexamined Patent Publication No. 2019-185642

The above technique is a technique for storing information on the prescription, that is, the data itself in the blockchain. Once a blockchain is created, its contents cannot be modified (including deletion). For this reason, blockchain is suitable for storing information that needs to be stored permanently, such as prescription information, but it is also used for storing personal information that customers may request to delete. It is hard to say that it is suitable. For the management of personal information, it is desired not only to prevent the leakage of data including the personal information, but also to develop a technology for clarifying the access right of the data.

The present invention has been made in view of these points, and an object of the present invention is to provide a technique for disclosing the access right of data while protecting the data from leakage.

The first aspect of the present invention is an information processing device capable of communicating with each of the first device and the second device via a communication network. This device includes a first device identifier for identifying the first device, a second device identifier for identifying the second device, and the first device set for a database managed by the second device. An access data acquisition unit that acquires access data including access right information that is information about an access right of one device, a first public key that is a public key of the first device, and the access data as the first public key. The first signature information acquisition unit that acquires the first electronic signature data, which is the data signed by the first private key, which is the private key corresponding to the above, from the first device via the communication network, and the second device. The second public key, which is the public key of the above, and the second electronic signature data, which is the data obtained by signing the first electronic signature data with the second private key, which is the private key corresponding to the second public key, are communicated with each other. A second signature information acquisition unit acquired from the second device via a network, the first public key, the second public key, the third public key which is the public key of the information processing device, and the second electron. At least the first device, the second device, and the information processing device can refer to the signed access data, which is the data obtained by signing the signature data with the third private key, which is the private key corresponding to the third public key. It is equipped with a blockchain registration unit for registering to a new blockchain.

The access right information includes a processing authority for the database granted to the first device, a data type accessible by the processing authority, and an authority period for determining a period during which the first device can access the database. It may be included.

A second aspect of the present invention is an information processing system including the above-mentioned information processing device, the first device, and the second device. In this system, the first device is a signature in which access target data including the first device identifier, a data identifier for specifying data to be processed, and the processing authority are signed with the first private key. The accessed access target data is transmitted to the second device, and the second device succeeds in (1) verifying the signature of the signed access data registered in the blockchain using the second public key. , (2) Successful verification of the signed access target data executed using the first public key registered in the blockchain, and (3) The third publication registered in the blockchain. On condition that the verification of the signed access data executed by using the key is successful, the processing permitted by the access right information is executed for the data to be processed received from the first apparatus.

When the second device executes the process permitted by the access right information, the second device obtains the signed process information in which the process information including the data identifier and the access right information is signed by the second private key. At least the first device, the second device, and the information processing device may be registered in the log blockchain that can be referred to via the communication network.

A third aspect of the present invention is an information processing method. In this method, the processor of the information processing device capable of communicating with each of the first device and the second device via the communication network uses the first device identifier for identifying the first device and the second device. A step of acquiring access data including a second device identifier for identification and access right information which is information on the access right of the first device set for a database managed by the second device, and the above. The communication between the first public key, which is the public key of the first device, and the first electronic signature data, which is the data obtained by signing the access data with the first private key, which is the private key corresponding to the first public key. The step of acquiring from the first device via the network, the second public key which is the public key of the second device, and the second public key which is the private key corresponding to the second public key for the first electronic signature data. The step of acquiring the second electronic signature data, which is the data signed by the private key, from the second device via the communication network, and the disclosure of the first public key, the second public key, and the information processing device. The third public key, which is the key, and the signed access data, which is the data obtained by signing the second electronic signature data with the third private key, which is the private key corresponding to the third public key, are at least with the first device. The step of registering in the blockchain that the second device and the information processing device can refer to is executed.

A fourth aspect of the present invention is a program. This program identifies the first device identifier for identifying the first device and the second device for identifying the first device to a computer capable of communicating with each of the first device and the second device via a communication network. A function of acquiring access data including the second device identifier and access right information which is information on the access right of the first device set for the database managed by the second device, and the function of the first device. The first public key, which is a public key, and the first electronic signature data, which is data obtained by signing the access data with the first private key, which is a private key corresponding to the first public key, are transmitted via the communication network. The function acquired from the first device, the second public key which is the public key of the second device, and the first electronic signature data are signed by the second private key which is the private key corresponding to the second public key. The function of acquiring the second electronic signature data, which is the obtained data, from the second device via the communication network, the first public key, the second public key, and the third public key, which is the public key of the computer. The key and the signed access data, which is the data obtained by signing the second electronic signature data with the third private key, which is the private key corresponding to the third public key, are at least the first device, the second device, and the above. It realizes the function of registering in a blockchain that can be referred to by a computer.

In order to provide this program or to update a part of the program, a computer-readable recording medium on which the program is recorded may be provided, or the program may be transmitted over a communication line.

It should be noted that any combination of the above components and the conversion of the expression of the present invention between methods, devices, systems, computer programs, data structures, recording media and the like are also effective as aspects of the present invention.

According to the present invention, the access right of data can be disclosed while protecting the data from leakage.

It is a figure for demonstrating the outline of the information processing system which concerns on embodiment. It is a figure which shows typically the functional structure of the information processing apparatus which concerns on embodiment. It is a figure which shows typically the structure of the blockchain which concerns on embodiment. It is a figure which shows typically an example of the access right information which concerns on embodiment. It is a figure which shows typically the structure of the blockchain for log which concerns on embodiment. It is a sequence diagram for demonstrating the flow of the information processing executed by the 1st apparatus and 2nd apparatus which concerns on embodiment. It is a flowchart for demonstrating the flow of the confirmation processing whether or not the processing of the processing target data executed by the 2nd apparatus which concerns on embodiment is permitted.

<Outline of the embodiment>
FIG. 1 is a diagram for explaining an outline of the information processing system S according to the embodiment. Hereinafter, an outline of the embodiment will be described with reference to FIG.

The first device 2 according to the embodiment includes a blockchain B for registering access rights, an information processing device 1 for managing the blockchain B, a first device 2 managed by each company in cooperation with each other, and the like. The second device 3 and a database 30 for storing personal information managed by the second device 3 are included. The blockchain B can be accessed by at least three parties, the information processing device 1, the first device 2, and the second device 3, via a communication network N such as the Internet. In the information processing system S according to the embodiment, the information processing device 1, the first device 2, and the second device 3 can refer to the information registered in the blockchain B at any time. On the other hand, only the information processing device 1 has the authority to register data in the blockchain B. When the first device 2 and the second device 3 are linked, it means that the manager of each device has obtained the consent of each customer to share the personal information of the customer. do.

Hereinafter, the outline of the processing flow in the information processing system S will be described in the order of (1) to (6), and the numbers correspond to (1) to (6) in FIG.

(1) The information processing device 1 refers to the first device identifier for specifying the first device 2, the second device identifier for specifying the second device 3, and the database 30 managed by the second device 3. The access data including the access right information which is the information about the access right of the first device 2 set in the above is acquired from the first device 2 or the second device 3. The access right information is information based on an agreement between the administrator of the first device 2 and the administrator of the second device 3. In FIG. 1, the information processing device 1 acquires access right information from the first device 2.

(2) The first device 2 uses the private key of the first device 2 to digitally sign the access data including the access right information.
(3) The first device 2 transmits the signed access data and the public key corresponding to the private key to the information processing device 1.

(4) The second device 3 further digitally signs the signed access data signed by the first device 2 using the private key of the second device 3. The second device 3 may acquire the signed access data signed by the first device 2 from the information processing device 1 or may be acquired from the second device 3.
(5) The second device 3 transmits the access data signed by the first device 2 and the public key corresponding to the private key to the information processing device 1.

(6) The information processing device 1 includes the device signatures and public keys of the first device 2 and the second device 3, the third public key which is the public key of the information processing device 1, and the first device 2 and the second device. The signed access data signed by each of 3 and the signed access data signed by the private key corresponding to the third public key is registered in the blockchain B. The blockchain B according to the embodiment cannot register information unless the private key of the information processing device 1 is used. Therefore, only the information processing device 1 can add information to the blockchain B.

In this way, the blockchain B stores only the access right to the data stored in the database 30, not the data itself stored in the database 30. The data stored in the database 30 can be referred to by any device participating in the blockchain B, but the data itself in the database 30 is not leaked by this. Further, as is known, since it is difficult to falsify the information registered in the blockchain B, the access right to the data stored in the database 30 is falsified by a third party to access the data in the database 30. The situation can be suppressed.

As a result, the information processing system S can protect the data stored in the database 30 from leakage and disclose the access right of the data stored in the database 30 at any time. Therefore, when the second device 3 stores the customer's personal information in the database 30, even if the customer inquires about the access right of the personal information (information of the cooperation destination and its access range), the access right can be obtained. Information can be disclosed at any time.

<Functional configuration of the information processing device 1 according to the embodiment>
FIG. 2 is a diagram schematically showing a functional configuration of the information processing device 1 according to the embodiment. The information processing device 1 includes a storage unit 10 and a control unit 11. In FIG. 2, the arrows indicate the main data flows, and there may be data flows not shown in FIG. In FIG. 2, each functional block shows not a hardware (device) unit configuration but a functional unit configuration. Therefore, the functional block shown in FIG. 2 may be mounted in a single device, or may be mounted separately in a plurality of devices. Data can be exchanged between functional blocks via any means such as a data bus, a network, or a portable storage medium.

The storage unit 10 includes a ROM (Read Only Memory) for storing the BIOS (Basic Input Output System) of the computer that realizes the information processing device 1, a RAM (Random Access Memory) that serves as a work area for the information processing device 1, and an OS (OS). An operating system), an application program, and a large-capacity storage device such as an HDD (Hard Disk Drive) or SSD (Solid State Drive) that stores various information referred to when the application program is executed.

The control unit 11 is a processor such as a CPU (Central Processing Unit) or GPU (Graphics Processing Unit) of the information processing device 1, and the access data acquisition unit 110, first, by executing a program stored in the storage unit 10. It functions as a signature information acquisition unit 111, a second signature information acquisition unit 112, and a blockchain registration unit 113.

Note that FIG. 2 shows an example in which the information processing device 1 is composed of a single device. However, the information processing device 1 may be realized by computing resources such as a plurality of processors and memories, such as a cloud computing system. In this case, each unit constituting the control unit 11 is realized by executing a program by at least one of a plurality of different processors.

The information processing device 1 can communicate with each of the first device 2 and the second device 3 via the communication network N. The access data acquisition unit 110 is set for the first device identifier for specifying the first device 2, the second device identifier for specifying the second device 3, and the database 30 managed by the second device 3. The access data including the access right information which is the information about the access right of the first device 2 is acquired.

The first signature information acquisition unit 111 is data in which the first public key, which is the public key of the first device 2, and the access data are signed by the first private key, which is the private key corresponding to the first public key. The electronic signature data is acquired from the first device 2 via the communication network N.

The second signature information acquisition unit 112 uses the second public key, which is the public key of the second device 3, and the data obtained by signing the first electronic signature data with the second private key, which is the private key corresponding to the second public key. A certain second electronic signature data is acquired from the second device 3 or the information processing device 1 via the communication network N.

The order in which the access data is signed is arbitrary. The second device 3 may first sign the access data, and then the first device 2 may sign the data.

The blockchain registration unit 113 uses the first public key, the second public key, the third public key which is the public key of the information processing device 1, and the second electronic signature data as the private key corresponding to the third public key. 3. The signed access data, which is the data signed by the private key, is registered in the blockchain B which can be referred to by at least the first device 2, the second device 3, and the information processing device 1.

FIG. 3 is a diagram schematically showing the configuration of the blockchain B according to the embodiment. As shown in FIG. 3, the blockchain B is information in which a plurality of blocks are connected. Each of the plurality of blocks includes a hash value, a nonce value, a block registration date and time, signed access data, a first public key, a second public key, and a third public key of information indicating the immediately preceding block. .. The nonce value is information used to ensure that the hash value of a block satisfies a specific condition. Further, the access data includes a first device identifier, a second device identifier, and access right information, and is a first electronic signature which is an electronic signature of the first device 2 and an electronic signature of the second device 3. A second electronic signature and a third electronic signature, which is the electronic signature of the information processing apparatus 1, are attached.

FIG. 4 is a diagram schematically showing an example of access right information according to the embodiment. The access right information includes the processing authority for the database 30 granted to the first device 2, the data type accessible by the processing authority, and the authority period for determining the period during which the first device 2 can access the database 30. I'm out.

In the example shown in FIG. 4, "read" is set as the processing authority, "address, name, etc." is set as the data type, and "February 14, 2020 to March 14, 2020" is set as the authority period. This indicates that the first device 2 can read the address and the name stored in the database 30 between February 14, 2020 and March 14, 2020. Although not shown, the processing authority may be set to "generate", "update", "delete", etc. in addition to "read".

In this way, the information processing device 1 stores the processing authority for the database 30 granted to the first device 2 in the blockchain B, so that the first device 2 and the second device 3 can check the status of the processing authority at any time. can do. Further, since the blockchain B has strong resistance to tampering by a third party, it is possible to prevent the processing authority stored in the blockchain B from being tampered with by the second device 3 or a third party. Therefore, it is possible to suppress the leakage of the data in the database 30 due to the access based on the access right that is not originally given.

(Access to database 30)
Next, the processing performed when the second device 3 having the processing authority for the database 30 actually accesses the database 30 will be described.

The first device 2 transmits the signed access target data in which the access target data used for accessing the data stored in the database 30 is signed with the first private key to the second device 3. Here, the access target data is data including a first device identifier which is an identifier of the first device 2, a data identifier for specifying data to be processed, and a processing authority. The data identifier is information for specifying the processing target data stored in the database 30 when the processing content is read or deleted, and is newly added to the database 30 when the processing content is generated or updated. It is information including the data itself.

The second device 3 verifies the validity of the signed access data registered in the blockchain B by using the second public key held by itself. The second device 3 verifies the validity of the access target signature using the first public key registered in the blockchain B. The second device 3 further verifies the validity of the signed access data by using the third public key registered in the blockchain B. The second device 3 is a processing target received from the first device 2 on condition that the verification of the signed access data using the second public key and the second public key is successful and the verification of the access target signature is successful. Execute the process permitted by the access right information for the data to be.

In this way, the second device 3 first verifies that the signed access data stored in the blockchain B is valid by using the second public key which is its own public key, thereby performing the blockchain. Confirm the validity of B itself. Subsequently, the access target data was transmitted by confirming the validity of the access target signature received from the first device 2 using the first public key stored in the blockchain B whose validity was confirmed. 1 Confirm the validity of device 2. In addition, the second device 3 confirms the validity of the signed access data using the third public key stored in the blockchain B, so that the access right information can be obtained by the information processing device 1 in the blockchain B. Confirm that it has been registered in.

In this way, the second device 3 executes the process for the data in the database 30 after confirming the legitimacy of the first device 2 and the legitimacy of the processing authority of the second device 3. Thereby, the first device 2 can guarantee that the person who is permitted to access the data in the database 30 executes the processing in the permitted range.

As described above, the blockchain B is a blockchain for storing the processing authority of the first device 2 for the database 30 managed by the second device 3. In addition to the access authority, if the access log of the database 30 is stored, it is possible to track when and by whom the data of the database 30 was generated, updated, read, and deleted after the fact. It is convenient.

Therefore, when the second device 3 executes the process permitted by the access right information, the second device 3 attaches the second process information signature, which is a signature by the second private key, to the process information including the data identifier and the access right information. The signed signed processing information may be registered in a log blockchain that can be referred to by at least the first device 2, the second device 3, and the information processing device 1 via the communication network N. The log blockchain may be shared with the blockchain B for storing the above-mentioned access data and the like, or may be a dedicated blockchain different from the blockchain B.

FIG. 5 is a diagram schematically showing a configuration of a log blockchain according to an embodiment, and is a diagram showing a log blockchain in the case of a dedicated blockchain different from the blockchain B. Like the blockchain B, the log blockchain is information obtained by concatenating a plurality of blocks. Each of the plurality of blocks includes a hash value, a nonce value, and a registration date and time of the information indicating the immediately preceding block. Further, each block in the log blockchain contains signed processing information with a second processing information signature, which is a signature by the second private key. Although not shown, the signed processing information may be further signed by the first private key.

As described above, the processing information is information including the data identifier and the access right information. Therefore, the information processing device 1, the first device 2, and the second device 3 can confirm when and by whom the data specified by the data identifier was generated, updated, read, or deleted. ..

<Processing flow of information processing method executed by information processing device 1>
FIG. 6 is a sequence diagram for explaining the flow of information processing executed by the first device 2 and the second device 3 according to the embodiment.

The first device 2 is a signed access in which the access target data including the first device identifier, the data identifier for specifying the data to be processed, and the processing authority are signed with the first private key. The target data is transmitted to the second device 3 (S2).

The second device 3 receives the signed access target data from the second device 3 (S4). The second device 3 confirms whether or not the processing of the signed data to be processed received from the first device 2 is permitted (S6).

When the processing is permitted (Yes in S8), the second device 3 executes the processing permitted by the processing authority for the data specified by the data identifier (S10). The second device 3 registers the processing history in the log blockchain (S12). If the processing is not permitted (No in S8), the second device 3 does not perform any special processing.

FIG. 7 is a flowchart for explaining the flow of the confirmation process of whether or not the processing of the processing target data executed by the second device 3 according to the embodiment is permitted, and step S6 in FIG. 6 is described in more detail. It is a figure for demonstrating to.

The second device 3 uses the second private key and the first public key and the third public key acquired from the blockchain B to digitally sign the signed access data stored in the blockchain B. (S60). When the verification of the validity of the electronic signature is successful (Yes in S61), the second device 3 verifies whether or not it is within the authority period included in the access right information (S62).

If it is within the authorization period (Yes in S63), the second device 3 verifies whether or not the processing authority included in the access target data is registered in the blockchain B (S64). If the verification is successful (Yes in S65), the second device 3 permits processing on the data specified by the data identifier (S66). If the verification of the validity of the electronic signature fails (No in S61), the verification of the authorization period fails (No in S63), or the verification of the processing authority fails (No in S65), the second device 3 Prohibits processing on the data specified by the data identifier (S67).

<Effects of the information processing device 1 according to the embodiment>
As described above, according to the information processing device 1 according to the embodiment, it is possible to disclose the access right of the data while protecting the data from leakage.

Although the present invention has been described above using the embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments, and various modifications and changes can be made within the scope of the gist thereof. be. For example, all or a part of the device can be functionally or physically distributed / integrated in any unit. Also included in the embodiments of the present invention are new embodiments resulting from any combination of the plurality of embodiments. The effect of the new embodiment produced by the combination also has the effect of the original embodiment.

<First modification>
In the above, the second device 3 verifies the validity of the information processing device 1 and the first device 2 by verifying the validity of the electronic signature attached to the signed access data. Alternatively or additionally, the second device 3 may verify the validity of the device that is the source of the data by using the IP (Internet Protocol) address of the device that is the source of the data.

<Second modification>
In the above, the case where the third public key, which is the public key of the information processing device 1, is registered in the blockchain B has been described. Instead, the blockchain B may not hold the third public key, and the second device 3 may hold the third public key securely. In this case, the administrator of the information processing device 1 hands the third public key to the administrator of the second device 3 in advance. Since the person who can use the third public key can be further limited, it is advantageous in that the security of data access between the first device 2 and the second device 3 can be further improved.

10 ... Storage unit 11 ... Control unit 110 ... Access data acquisition unit 111 ... First signature information acquisition unit 112 ... Second signature information acquisition unit 113 ... Blockchain registration unit 2.・ ・ First device 3 ・ ・ ・ Second device 30 ・ ・ ・ Database B ・ ・ ・ Blockchain N ・ ・ ・ Communication network S ・ ・ ・ Information processing system

Claims (6)

An information processing device capable of communicating with each of the first device and the second device via a communication network.
The first device identifier for identifying the first device, the second device identifier for identifying the second device, and the access of the first device set for the database managed by the second device. An access data acquisition unit that acquires access data including access right information, which is information related to rights,
The first public key, which is the public key of the first device, and the first electronic signature data, which is the data obtained by signing the access data with the first private key, which is the private key corresponding to the first public key, are described above. The first signature information acquisition unit acquired from the first device via the communication network, and
The second public key, which is the public key of the second device, and the second electronic signature data, which is the data obtained by signing the first electronic signature data with the second private key, which is the private key corresponding to the second public key. With the second signature information acquisition unit that acquires from the second device via the communication network.
The first public key, the second public key, the third public key which is the public key of the information processing device, and the third private key which is the secret key corresponding to the third public key for the second electronic signature data. A blockchain registration unit that registers the signed access data, which is the data signed in, in a blockchain that can be referred to by at least the first device, the second device, and the information processing device.
Information processing device equipped with. The access right information includes a processing authority for the database granted to the first device, a data type accessible by the processing authority, and an authority period for determining a period during which the first device can access the database. include,
The information processing device according to claim 1. An information processing system including the information processing device according to claim 2, the first device, and the second device.
The first device is signed access target data in which access target data including the first device identifier, a data identifier for identifying data to be processed, and the processing authority are signed with the first private key. To the second device
The second device has (1) successfully verified the signature of the signed access data registered in the blockchain using the second public key, and (2) said that it is registered in the blockchain. The verification of the signed access target data executed using the first public key was successful, and (3) the verification of the signed access data executed using the third public key registered in the blockchain. Is successful, the process permitted by the access right information is executed for the data to be processed received from the first device.
Information processing system. When the second device executes the process permitted by the access right information, the second device obtains the signed process information in which the process information including the data identifier and the access right information is signed by the second private key. At least the first device, the second device, and the information processing device are registered in the log blockchain that can be referred to via the communication network.
The information processing system according to claim 3. The processor of the information processing device capable of communicating with each of the first device and the second device via the communication network
The first device identifier for identifying the first device, the second device identifier for identifying the second device, and the access of the first device set for the database managed by the second device. Steps to acquire access data including access right information, which is information about rights, and
The first public key, which is the public key of the first device, and the first electronic signature data, which is the data obtained by signing the access data with the first private key, which is the private key corresponding to the first public key, are described above. The step of acquiring from the first device via the communication network and
The second public key, which is the public key of the second device, and the second electronic signature data, which is the data obtained by signing the first electronic signature data with the second private key, which is the private key corresponding to the second public key. From the second device via the communication network, and
The first public key, the second public key, the third public key which is the public key of the information processing device, and the third private key which is the secret key corresponding to the third public key for the second electronic signature data. A step of registering the signed access data, which is the data signed in, in a block chain that can be referred to by at least the first device, the second device, and the information processing device.
Information processing method to execute. To a computer that can communicate with each of the first device and the second device via a communication network,
The first device identifier for identifying the first device, the second device identifier for identifying the second device, and the access of the first device set for the database managed by the second device. A function to acquire access data including access right information, which is information about rights, and
The first public key, which is the public key of the first device, and the first electronic signature data, which is the data obtained by signing the access data with the first private key, which is the private key corresponding to the first public key, are described above. The function acquired from the first device via the communication network and
The second public key, which is the public key of the second device, and the second electronic signature data, which is the data obtained by signing the first electronic signature data with the second private key, which is the private key corresponding to the second public key. From the second device via the communication network, and
The first public key, the second public key, the third public key which is the public key of the computer, and the second electronic signature data are signed by the third private key which is the private key corresponding to the third public key. A function of registering the signed access data, which is the data obtained, in a block chain that can be referred to by at least the first device, the second device, and the computer.
A program that realizes.

Images