JP6910824B2 - Information provision system and information provision method - Google Patents

Description

The present invention provides a secure protection function for the provided information output by a wide variety of information acquisition terminals by ensuring privacy and security in the information acquisition terminal by encryption and then seamlessly encrypting the end user (user terminal). Regarding an information provision system that can transmit data while maintaining the above.

Recently, due to the development of telecommunications equipment, especially communication networks and equipment, measurement data, usage data, etc. acquired by a large number of equipment (sensors, etc.) are transmitted via the communication network and accumulated in one place. Sensor network utilization systems have begun to spread. There are systems that define a range and specialize in accumulating specific data in a certain range, and systems that accumulate a large amount of data without specifying a range, and there are a wide variety of such accumulated data. In order to make effective use of it in the field of data, it is beginning to be required to share and manage it on the cloud.

Japanese Patent Application Laid-Open No. 2013-210897

A similar sensor network utilization system that transmits such measurement data via a communication network and accumulates it in one place has already been disclosed.

Patent Document 1 discloses an invention that handles measurement data measured by a sensor, which measures data at particularly dense multipoints in detail within a limited fixed measurement range.

The measurement data acquired by the plurality of sensing units 3 is collected by the measurement data collection unit 10, output to the data collection base station 12, and temporarily stored. The measurement data accumulated in the data collection base station 12 is output to the data storage server 15, and the database 19 stores the measurement data from the data collection base station 12 in chronological order for each sensing unit 3. Further, the data distribution server 17 can access the database 19 based on the key information from the external terminal device and read the measurement data based on the key information.

However, in such a system, if the data collected in one place is related to personal privacy or trade secrets of a company, measures such as data encryption are not taken and there is a security problem. It can occur.

Further, simply encrypting the data accumulated in these one place requires decryption in order to confirm the contents of the data, and the security problem cannot be solved. Further, if the data accumulated in one place is encrypted without being decrypted, there arises a problem that only necessary data cannot be freely selected when trying to share and utilize the data.

In Patent Document 1, when the measurement data stored in the time series is encrypted, it is necessary to decrypt the encrypted measurement data once and select and acquire the desired measurement data. However, if the decryption process is executed in the process of transferring and receiving the measurement data, there is a possibility that a confidential leakage accident of the measurement data may occur.

Therefore, an object of the present invention is to freely select the desired measurement data from a plurality of types of measurement data without decoding the measurement data accumulated in one place, that is, the measurement data while maintaining confidentiality. The purpose is to provide an information providing system that can be selected.

The information providing system according to the present invention includes an information acquisition terminal, an information selection exchange server, and a user terminal, and the information acquisition terminal acquires a measurement value provided to the user terminal and obtains the measurement value. was separated into individual data of at least the minimum unit to create an advertisement by combining based on the individual data separated in the editing pattern, and the first encrypting the provided information created, and, the first encryption An attribute indicating the content of the provided information is added to the provided information based on the editing pattern and output to the information selection exchange server, and the information selection exchange server outputs the information output terminal. 1 The encrypted provided information is accumulated together with the attribute, and the provided information of the attribute corresponding to the user terminal is decrypted by re-encrypting the first encryption applied to the provided information, and the user terminal decrypts the provided information. The second encryption is possible, and the user terminal acquires the second encrypted provided information based on the corresponding attribute.

Here, re-encryption is to decrypt a ciphertext for one user A into a ciphertext for another user B as it is by using a special key called a "re-encryption key". Generally speaking, it is a technology to convert without returning to plaintext. At this time, only the user A can generate the re-encryption key, and even if he / she has the re-encryption key during the re-encryption process, he / she does not touch the plain text at all. Therefore, a third party cannot know the content of the plain text and can maintain confidentiality.

The acquisition information separation unit of the information acquisition terminal of the information providing system according to the present invention separates the acquired measured value into at least the smallest unit of individual data, and the separated individual data is based on the editing pattern. It is characterized in that the provided information is created by combining one or a plurality of them.

The information selection exchange server of the information providing system according to the present invention is characterized in that the relationship between the user terminal and the attribute corresponding to the user terminal is arranged and managed in a matrix.

The information acquisition terminal of the information providing system according to the present invention is characterized in that, in addition to the provided information, additional information input regarding the provided information is acquired.

The attribute addition unit of the information acquisition terminal of the information providing system according to the present invention is characterized in that the attribute adding one or a combination of one or a plurality of each provided information is created and added based on the editing pattern. do.

The information selection exchange server of the information providing system according to the present invention is characterized in that the attribute of the provided information that can be acquired by the user terminal can be changed by a request within the range permitted by the user terminal. And.

The user terminal of the information providing system according to the present invention is characterized in that the corresponding attribute is selected and acquired.

In the information providing method according to the present invention, the information acquisition terminal acquires the measured value to be provided to the user terminal, separates the acquired measured value into at least the smallest unit of individual data, and edits the separated individual data into an editing pattern. The step of creating the provided information by combining the provided information based on the above, the step of first encrypting the provided information and performing the first encryption, and the first encrypted provided information with the provided information based on the editing pattern. A step of adding an attribute to the provided information indicating the content of the above and outputting it to the information selection exchange server, and the first encrypted provided information output by the information acquisition terminal to the information selection exchange server together with the attribute. Corresponding to the step of accumulating and re-encrypting the provided information of the attribute corresponding to the user terminal from the first encryption provided in the provided information and performing the second encryption decipherable by the user terminal. It is characterized in that the step of acquiring the provided information second encrypted based on the attribute at the user terminal is executed.

As described above, according to the present invention, personal privacy information and sensor information acquired by a plurality of sensors, which are corporate secrets of a company, are encrypted, stored in a server from the sensor, and further, seamless confidentiality protection to the user. By realizing the function and freely selecting the sensor information desired by the user while maintaining confidentiality, it is possible to use the sensor information individually or jointly without waste, and it is possible to use the sensor network and the sensor. It is possible to improve the utilization efficiency of the sensor and provide a secure information system that responds to the user's request for flexible sensor information utilization without having an administrator on the server side.

Further, according to the present invention, the information acquisition terminal, the information selection exchange server, and the user terminal are provided, and the information acquisition terminal acquires the provided information (measured value) provided to the user terminal and provides the information. The information is first encrypted, an attribute is added to the first encrypted provided information, the information is output to the information selection exchange server, and the information is stored. The output data (provided information) is first encrypted. Security can be ensured by outputting to the information selection exchange server as it is.

Further, according to the present invention, the information acquisition terminal separates the acquired provided information (measured value) into at least the smallest unit of individual data, and the separated individual data is first encrypted and said to be the first. By adding the attribute to the encrypted individual data and outputting it to the information selection exchange server, the user terminal maintains the confidentiality of only the information provided in the desired encrypted state based on the attribute. It can be selected as it is.

Further, according to the present invention, the information selection exchange server accumulates the first encrypted provided information output by the information acquisition terminal together with the attribute, and the user terminal requests information acquisition of the corresponding attribute. In this case, the provided information is converted into a second encryption that can be decrypted by the user terminal without decrypting the first encryption provided in the provided information, and output to the user terminal. Security can be ensured by avoiding decrypting the first encryption in the information selection exchange server and outputting the information to be provided from the information acquisition terminal to the user terminal in a seamlessly encrypted state. ..

Further, according to the present invention, the information selection exchange server manages input / output by matching provided information in an information selection exchange matrix in which the relationship between the user terminal and attributes is arranged in a matrix. The user can confirm not the data of the provided information itself but the content of the attribute attached to the provided information, easily select the necessary information, and request the information selection exchange server to acquire the information. ..

Further, according to the present invention, the information acquisition terminal acquires additional information (comments, etc.) input regarding the provided information as necessary in addition to the provided information, and is based on the additional information. In addition to the provided information, information such as comments can be obtained.

Further, according to the present invention, the information acquisition terminal outputs a plurality of types of the provided information (for example, one information acquisition terminal, temperature, humidity, etc.), and for each of the plurality of types of the provided information. Is added with one or more of the above attributes. For example, it may be divided into "temperature", "humidity", "sunshine time", and "moisture amount", or "temperature", "humidity", "sunshine time", and "moisture amount" can be collectively set as one attribute as "measurement data". good. As a result, it is possible to request a plurality of provided information from the user terminal with a small number of information acquisition requests by collecting related provided information and reducing the attributes, and also for the information selection exchange server and the database. The number of processing cases and processing load can be reduced.

Further, according to the present invention, the information selection exchange server can change the attributes of the provided information that can be acquired by the user terminal in response to a request within the range permitted by the user terminal. For example, the user terminal may request all of "S1. Temperature", "S1. Humidity", "S1. Sunshine duration", and "S1. Moisture content", or request only 1 to 3 items among them. You may do so. As a result, the number of processing items and the processing load of the information selection exchange server and the database can be reduced by narrowing down the information acquisition request from the user terminal to the items that are really necessary.

Further, according to the present invention, the stored data is automatically saved by acquiring the provided information in the information acquisition terminal, acquiring the first encrypted provided information / storing the attribute in the information selection exchange server, and managing the attribute by the matrix-like arrangement. Since the provided information can be acquired by matching the information acquisition request from the user terminal and the second encrypted provided information can be provided to the user terminal, a person who distributes the provided information becomes unnecessary, and the confidential state of the information. It is possible to realize a seamless information protection function from the information acquisition terminal at the entrance to the user terminal at the exit by automatically performing the processing while ensuring the above.

It is a system block diagram which concerns on embodiment of this invention. It is a figure which shows the example of the editing pattern of the provided information which concerns on embodiment of this invention. It is a figure which shows the example of the attribute which concerns on embodiment of this invention. It is a flow chart which shows the processing of the information provided from the information acquisition terminal to the information selection exchange server which concerns on embodiment of this invention. It is a figure which shows the acquisition and encryption processing of the provided information and additional information which concerns on embodiment of this invention. It is a figure which shows the information selection exchange matrix which concerns on embodiment of this invention. It is a flow diagram which shows the processing of the information provided from the information selection exchange server to a user terminal which concerns on embodiment of this invention. It is a figure which shows the order of the decoding processing of the provided information and additional information which concerns on embodiment of this invention.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 is a system configuration diagram according to an embodiment of the present invention.

The information providing system 1 according to the present invention has an information selection exchange server 3, a plurality of information acquisition terminals 10, and one or more user terminals 20, which are connected to a communication network 2.

[Information acquisition terminal]
First, the information acquisition terminal 10 will be described. As shown in FIG. 1, the information acquisition terminal 10 includes an information acquisition unit 11, an acquisition information separation unit 12, a first encryption unit 13, an attribute addition unit 14, an input information addition unit 15, and a transmission unit 16. There is.

The information acquisition terminal 10 encrypts the information acquired by the information acquisition unit 11 by the first encryption unit, creates an outline of the contents of the encrypted information in plain text by the attribute addition unit, and attaches it to the encrypted data. .. Then, it has a function of transmitting from the transmission unit 16 to the communication unit 4 of the information selection exchange server 3 via the communication network 2.

The information acquisition unit 11 outputs various provided information (measured values) as shown in FIG. The provided information (measured value) further outputs individual data of a plurality of types of minimum units. For example, it outputs a weather sensor (temperature, humidity, sunshine time, wind speed, wind direction, etc.), an acceleration sensor (acceleration, vibration, etc.), a Geiger counter (radiation amount), traffic volume, and the like. Various provided information (measured values) related to the information acquisition unit 11 and operating conditions (timer interval, etc.) of the information acquisition unit 11 are not particularly limited.

Here, as for the provided information (measured value) , the measured value "00234008540048000015" exemplified in the [information acquisition unit] of FIG. 2 is a series of alphanumeric characters indicating "temperature", "humidity", "sunshine time", and "moisture content". Although it is output as text, binary format, etc.), the provided information (measured value) may be not only the measured value but also, for example, a document file (text, binary format), multiple image files, audio files, etc. The contents, types, and formats of (measured values) are not limited to these.

The acquired information separation unit 12 has a function of separating the provided information (measured value) acquired by the information acquisition unit 11 into at least the smallest unit of individual data and creating the separated provided information 31.

Hereinafter, description will be made with reference to FIG. FIG. 2 is a diagram showing an example of an editing pattern of the provided information 31 in the acquired information separation unit 12. The measured value "00234008540048000015" illustrated in FIG. 2 is a series of alphanumeric characters indicating "temperature", "humidity", "sunshine time", and "moisture content". It is separated into individual data of "temperature", "humidity", "sunshine time", and "moisture content", and each is made into individual provided information 31. The separated and individual provided information 31 is transmitted to the information selection exchange server 3 with the first encryption and the attribute 32 added, and is stored in the database 7.

Next, an example of the editing pattern of the provided information 31 will be described with reference to FIG.
(1) In the editing pattern 1, the measured values are separated, and the provided information 31 is individually separated into "temperature", "humidity", "sunshine duration", and "moisture content" (step S11). The first encryption unit 13 adds the first encryption (step S13) and the attribute addition unit 14 adds the attribute 32 (step S14), which are individually separated contents.

(2) In the editing pattern 2, the measured values are separated, and the provided information 31 is separated into three cases of "temperature + humidity", "sunshine duration", and "moisture content" (step S11). In the combination of "temperature + humidity", the temperature and humidity of the measured values are processed as one provided information 31. The first encryption unit 13 performs the first encryption (step S13) with three cases of "temperature + humidity", "sunshine time", and "moisture content", and the attribute addition unit 14 uses "temperature + humidity" as a name indicating "warm". The attribute 32 of "humidity" is added, and the attribute 32 of "sunshine time" and "moisture content" is added (step S14).

(3) In the editing pattern 3, the measured values are separated, and the provided information 31 is individually separated into "temperature", "humidity", "sunshine duration", and "moisture content" (step S11). For each of the individually separated provided information 31, the first encryption unit 13 adds the first encryption (step S13) and the attribute addition unit 14 adds a plurality of attributes 32 (step S14). Here, by giving the attribute 32 a plurality of attributes 32 such as "weather information, temperature", "weather information, humidity", "weather information, sunshine time", and "weather information, water content", the user terminal 20 selects information. When searching for information to be acquired from the exchange matrix 41, the number of keywords for searching the attribute 32 increases, so that the user terminal 20 can search for information from a wider range.

The separation of the provided information 31 by the acquired information separation unit 12 is not limited to the above (1) to (3), and various separation and combination patterns of the provided information 31 may be performed.

In this way, the acquisition information separation unit 12 separates various provision information 31 output from the information acquisition unit 11 and creates a pattern of combination, and the separated provision information 31 is used as the information selection exchange matrix 41. Register with and manage individually.

Further, the related provided information 31 and the provided information 31 presumed to be acquired by the user terminal 20 can be easily acquired as a group, and when a plurality of attributes 32 are added, the search range is expanded. The range of offers can be increased.

Further, by reducing the amount of information of the related provided information 31 as a whole, the number of processing cases and the processing load of the information selection exchange server 3 and the database 7 can be reduced.

The first encryption unit 13 performs a process of encrypting various provided information 31 acquired by the information acquisition unit 11. Encryption is performed using the public key of the information selection exchange server 3.

The attribute addition unit 14 adds a brief description of the various provided information 31 and / or the additional information 33 to the provided information 31 and / or the additional information 33 as the attribute 32. Since the provided information 31 and the additional information 33 are first encrypted, the contents cannot be known. Therefore, one or more plaintext attributes 32 are added. FIG. 3 shows a specific example of the attribute 32. The contents include "installation location, information content, time, terminal ID" and the like of the information acquisition terminal 10. FIG. 3 is an example, and the content of the attribute 32 is not limited to this. For example, the data size of the attribute 32 can be reduced by reducing the content of the attribute 32 to "installation location, content of information". Alternatively, by increasing the content, the information of the information acquisition terminal 10 can be known in detail.

The input information addition unit 15 performs a process of inputting information such as an additional comment to the provided information 31. For example, it is information such as a producer's name, a comment, a quality state, etc., which is manually input other than the provided information 31. For example, it may be a text sentence, a voice or an image.

The transmission unit 16 has a function of transmitting the first encrypted provided information 31, the additional information 33, and the attribute 32 to the communication unit 4 via the communication network 2.

[1st encryption, attribute addition processing]
Here, the processing procedures of the first encryption unit 13, the attribute addition unit 14, and the input information addition unit 15 will be described with reference to FIGS. 4 and 5.

First, the information acquisition unit 11 of the information acquisition terminal 10 outputs the provided information 31 at a predetermined timing (step S11). The provided information 31 output at this time is data such as various measurement data, and is in an unencrypted plain text state.

Next, the input information addition unit 15 acquires the additional information 33 corresponding to the provided information 31 (step S12). The provided information 31 and the additional information 33 are not output in pairs in perfect synchronization. For example, the provided information 31 may be output every minute and the additional information 33 may be output every day. Only 31 may be acquired, or only additional information 33 may be acquired.

Next, the first encryption unit 13 uses the public key of the information selection exchange server 3 to obtain the acquired provided information 31 and additional information 33 (or any one of the provided information 31 and the additional information 33). First encryption is performed (step S13). As a result, the contents of the first encrypted provided information 31 and the additional information 33 cannot be viewed on the information selection exchange server 3 and the communication network, and the confidentiality is maintained from an unspecified third party. Can be done.

Next, the attribute addition unit 14 adds the attribute 32 to the first encrypted provided information 31 and the additional information 33 (step S14). Since the user terminal 20 cannot see the contents of the first encrypted provided information 31 and the additional information 33, it is not possible to know what the provided information 31 and the additional information 33 are. Therefore, the plaintext attribute 32 (shown in FIG. 3) is added so that the user terminal 20 can discriminate the contents of the first encrypted provided information 31 and the additional information 33.

When the addition of the attribute 32 is completed, the transmission unit 16 transmits the first encrypted provision information 31, the additional information 33, and the attribute 32 to the communication unit 4 of the information selection exchange server 3 via the communication network 2 (step). S15).

The provided information 31 and the attribute 32 may all be transmitted to the information selection exchange server 3, and the provided information 31 and the attribute 32 to be kept confidential should be selected so as not to be transmitted to the information selection exchange server 3. You can do it.

When the communication unit 4 receives the first encrypted provided information 31, the additional information 33, and the attribute 32 (step S16), the communication unit 4 sends the information to the information management unit 5, and the information management unit 5 first encrypts the attribute 32. Up to this point, the provided information 31 and the additional information 33 are stored in the database 7 (step S17). Then, the information management unit 5 registers and manages the attribute 32 in the information selection exchange matrix 41 (shown in FIG. 6) (step S18).

In steps S11 to S14 shown in FIGS. 4 and 5, the processing order of "acquisition of provided information", "input of additional information", "first encryption", and "addition of attributes" has been described. "Acquisition" and "input of additional information" are asynchronous, and it is not always necessary to acquire a pair of information. Only one of the information may be acquired, or the acquisition order may be changed. That is, if the provided information 31 and / or the additional information 33 is always first encrypted and the attribute 32 is always added, the acquisition order and the processing order are not limited. Examples of the processing order are shown in (1) to (6) below, but the processing order is not limited to this.
(1) "Acquisition of provided information""Input of additional information""Firstencryption""Addition of attributes"
(2) "Input of additional information""Acquisition of provided information""Firstencryption""Addition of attributes"
(3) "Acquisition of provided information""1stencryption""Acquisition of provided information""1stencryption""Addition of attributes"
(4) "Acquisition of provided information""Firstencryption""Addition of attributes""Acquisition of provided information""Firstencryption""Addition of attributes"
(5) "Acquisition of provided information""Firstencryption""Addition of attributes"
(6) "Acquisition of provided information""Addition of attributes""First encryption (attributes are not first encrypted)"

[Information selection exchange server]
Next, the information selection exchange server 3 will be described. As shown in FIG. 1, the information selection exchange server 3 includes a communication unit 4, an information management unit 5, a second encryption unit 6, and a database (storage unit) 7.

The information selection exchange server 3 receives the attribute 32 and the first encrypted provided information 31 and the additional information 33 transmitted from the information acquisition terminal 10 and stores them in the information selection exchange matrix 41 (database 7 which is a recording medium). Then, the attribute 32 of the provided information 31 and the additional information 33 is managed by the information selection exchange matrix 41 (shown in FIG. 6). Then, when the user terminal 20 refers to the information selection exchange matrix 41 and receives an information acquisition request for the required attribute 32, the provided information 31 and the additional information 33 corresponding to the attribute 32 are extracted from the database 7, and the second information is extracted. It has a function of encrypting and returning the second encrypted provided information 31 and additional information 33 to the user terminal 20 that has requested the information acquisition. As a result, the provided information 31 and the additional information 33 output by the information acquisition terminal 10 are secured by the first encryption and the second encryption, and the data is stored up to the user terminal 20 while maintaining the continuous protection function. It is possible to send.

Specifically, the communication unit 4 has a function of receiving the attribute 32, the first encrypted provided information 31, and the additional information 33 from the transmission unit 16 of the information acquisition terminal 10 via the communication network 2. And, the function of receiving the information acquisition request from the communication unit 21 of the user terminal 20 via the communication network 2, and the user terminal 20 for which the information acquisition request is made regarding the second encrypted provided information 31 and the additional information 33. It has a function of replying to the communication unit 21 of.

As an input process, the information management unit 5 stores the first encrypted provided information 31 and the additional information 33 corresponding to the attribute 32 in the database 7, and selects the attribute 32 of the provided information 31 and the additional information 33. It is managed by the exchange matrix 41 (shown in FIG. 6).

Further, as an output process, when the information management unit 5 receives an information acquisition request from the user terminal 20, the information management unit 5 extracts the provided information 31 and the additional information 33 corresponding to the attribute 32 of the information acquisition request from the database 7, and second-encrypts the information. Output to unit 6.

The second encryption unit 6 can decrypt the first encrypted provided information 31 and the additional information 33 extracted by using the selected attribute 32 as a key by using the re-encryption technique on the user terminal 20. After the conversion to the second encryption, the process of sending the second encrypted provided information 31 and the additional information 33 to the communication unit 4 is performed.

Specifically, the first encryption is performed by the public key of the information selection exchange server 3. The second encryption key (re-encryption key) is generated from the private key of the information selection exchange server 3 and the public key of the user terminal 20. Further, the public key of the user terminal 20 is required to generate the encryption key for the second encryption, and the timing of obtaining the public key by the information selection exchange server 3 is at the time of initial setting registration of the user terminal 20 or information. It does not matter when the acquisition request is obtained, such as when the acquisition request is transmitted to the user terminal 20 each time.

The second encryption unit 6 uses the re-encryption technology to perform the first encryption of the newly generated encryption key of the second encryption with respect to the provided information 31 and the additional information 33 that are first encrypted. A process of converting to a second encryption that can be decrypted by the user terminal 20 is performed without decrypting the encryption. In this way, by performing the process of converting the provided information 31 and the additional information 33 into the second encryption without decrypting the first encryption on the information selection exchange server 3, the user maintains the confidential state. It can be transmitted to the terminal 20.

Here, the decryption key for the second encryption used by the decryption unit 23 of the user terminal 20 is the private key of the user terminal 20.

Database 7 is a storage medium (including both hardware and software) and stores an information selection exchange matrix 41. The provided information 31 and the additional information 33 are recorded in the first encrypted state, and the attribute 32 is recorded in the unencrypted state. As a result, the information acquisition request from the user terminal 20 refers only to the attribute 32, and the provided information 31 and the additional information 33 are encrypted and remain confidential without being decrypted. It is possible to secure security measures such as information leakage from three parties.

[Information selection exchange matrix]
The information management unit 5 of the information selection / exchange server 3 has an information selection / exchange matrix 41 that manages the relationship between the user terminal 20 and the attribute 32 by arranging them in a matrix.

As shown in FIG. 6, in the information selection exchange matrix 41, the user terminal 20 is arranged on the vertical axis, and the provided information 31 acquired by the plurality of information acquisition terminals 10 and the attribute 32 of the additional information 33 are arranged on the horizontal axis. There is. Since the provided information 31 and the additional information 33 stored in the database 7 are first encrypted and the contents cannot be known, the provided information 31 and the additional information are referred to instead with reference to the plaintext attribute 32. The outline of the contents of 33 can be known, and the user terminal 20 refers to this attribute 32 and makes an information acquisition request for the information to be acquired.

The frame indicated by "○" on the information selection exchange matrix 41 indicates the provided information 31 and the additional information 33 that the user terminal 20 is permitted to acquire, and the user terminal 20 can request information acquisition. You can. Information other than the frame indicated by "○" cannot be acquired from the user terminal 20. The acquisition permission is registered in advance in the information selection exchange server 3.

Further, the attribute 32 registered in the information selection exchange matrix 41 does not need to register all the attributes 32 sent from the information acquisition terminal 10, and the information management unit 5 limits the registration and the information acquisition terminal 10. It is also possible to set a viewing restriction by a non-disclosure request from.

Further, the attribute 32 permitted to the user terminal 20 in the information selection exchange matrix 41 may be changed. The change may be performed in response to a change in the acquisition restriction of the attribute 32 from the user terminal 20 or a change request (not shown) from the outside of the information management unit 5.

Although the separated individual provided information (data) is arranged in a matrix and the provided information encrypted based on the attributes is selected, the structure for accumulating the provided information is not limited to the matrix. In short, any storage structure other than the matrix may be used as long as it is a storage structure of the provided information that can select the separated provided information based on the attributes.

[User terminal]
Subsequently, the user terminal 20 will be described. As shown in FIG. 1, the user terminal 20 includes a communication unit 21, an information acquisition request unit 22, a decoding unit 23, and a storage unit 24. The user terminal 20 refers to a terminal in which a user who can request information acquisition from the information providing system 1 can log in and connect to the communication network 2. The user terminal 20 is a general-purpose computer, a desktop computer, a portable (notebook, tablet, etc.) computer, a smartphone, or the like, and has a communication unit 21, an information acquisition request unit 22, a decoding unit 23, and a storage unit 24. If so, the shape and size are not limited.

The communication unit 21 has a function of transmitting and receiving data to and from the communication unit 4 via the communication network 2.

The information acquisition request unit 22 has a function of referring to the information selection exchange matrix 41 on the information selection exchange server 3 from the user terminal 20 and making an information acquisition request of the attribute 32 that the user terminal 20 wants to acquire. Explaining the information selection exchange matrix 41 shown in FIG. 6 as an example, the user terminal Y1 refers to the attribute 32 of the sensor S1 and refers to "S1. Temperature", "S1. Humidity", "S1. Sunlight time", and "S1. Moisture content". , The provided information 31 and the additional information 33 associated with "S2. Temperature" and "S2. Humidity" can be acquired by referring to the attribute 32 of the sensor S2 (for example, the sensor S3 does not acquire the temperature and humidity). ).
The information acquisition request from the information acquisition request unit 22 is transmitted to the information management unit 5 via the communication unit 21, the communication network 2, and the communication unit 4.

The decryption unit 23 decrypts the second-encrypted provided information 31 and the additional information 33 by the second encryption unit 6, returns them to plain text, and returns them to a state in which they can be viewed by the user terminal 20. The decryption key is the private key of the user terminal 20. Since a different decryption key (private key) exists for each user terminal 20, it cannot be decrypted by different user terminals 20, and even if information is erroneously transmitted or information is illegally obtained by different user terminals, it cannot be decrypted. Security can be improved.

The storage unit 24 has a function of storing the provided information 31, the additional information 33, and the attribute 32 obtained by decrypting the second encryption. The storage unit 24 is a magnetic medium (HDD or the like) or a memory chip (RAM or the like).
Any of them may be used.

[Second encryption / decryption process]
Here, the processing procedures of the second encryption unit 6, the information acquisition request unit 22, and the decryption unit 23 will be described with reference to FIGS. 7 and 8.

FIG. 7 is a flow chart showing the processing of the provided information from the information selection exchange server 3 to the user terminal 20, and FIG. 8 is a diagram showing the order of decoding processing of the provided information 31 and the additional information 33.

First, the information acquisition request unit 22 of the user terminal 20 selects the attribute 32 that can be acquired in the information selection exchange matrix 41 (step S21), and outputs the information acquisition request to the communication unit 21. In FIG. 8, “S1. Temperature”, “S1. Humidity”, “S1. Sunshine duration”, “S1. Moisture content”, “T1. Input information 1”, and “T1. Input information 2” are selected as information acquisition requests.

At this time, the user terminal 20 can know the contents of the first encrypted provision information 31 and the additional information 33 from the contents described in the attribute 32. When the user terminal 20 wants to make an information acquisition request different from the conventional one, the attribute 32 is searched in the information selection exchange matrix 41, and the new provided information 31 and the additional information 33 are searched. At this time, as in the above-mentioned editing patterns 2 and 3, when the contents of the provided information 31 and the additional information 33 and the plurality of attributes 32 are present, the search range of the attribute 32 is expanded by the information selection exchange matrix 41, and a new attribute 32 is created. Helps to discover.

In this way, the user terminal 20 can freely select the provided information 31 and the additional information 33 in the information selection exchange matrix 41 while maintaining the confidentiality by encryption.

Next, the communication unit 21 transmits the information acquisition request to the communication unit 4 via the communication network 2, and the communication unit 4 outputs the received information acquisition request to the information management unit 5 (step S22).

Then, the information management unit 5 extracts the provided information 31 and the additional information 33 corresponding to the attribute 32 corresponding to the information acquisition request from the database 7 (step S23). At this time, both the provided information 31 and the additional information 33 are in the first encrypted state.

Next, the extracted provided information 31 and additional information 33 are second-encrypted by the second encryption unit 6 without decrypting the first encryption (step S24). At this time, the second encryption unit 6 uses the re-encryption technique to apply the newly generated encryption key of the second encryption to the first-encrypted provided information 31 and the additional information 33. A process of converting to the second encryption without decrypting the first encryption is performed. Since the attribute 32 is not second-encrypted and remains in plain text, the attribute 32 can be used to know what the provided information 31 and the additional information 33 are. In this way, security can be maintained without decoding on the information selection exchange server 3.

Then, the second encryption unit 6 outputs the second encrypted provided information 31, the additional information 33, and the attribute 32 to the communication unit 4, and the communication unit 4 second-encrypts the information acquisition request as a reply. The provided information 31, the additional information 33, and the attribute 32 are transmitted to the communication unit 21 via the communication network 2 (step S25).

The communication unit 21 outputs the received provided information 31 and additional information 33 to the decoding unit 23 of the user terminal 20. The decryption unit 23 decrypts the second encrypted provided information 31 and the additional information 33 with the decryption key (private key held by each user terminal 20) (step S26). By decoding, the contents of the provided information 31 and the additional information 33 can be confirmed on the user terminal 20. Further, the decrypted provided information 31 and additional information 33 are stored in the storage unit 24 (step S27), and the information acquisition request from the user terminal 20 ends (step S28).

As described above, the user terminal 20 makes an information acquisition request for the desired attribute 32 of the provided information 31 and the additional information 33 stored in the database 7 in the first encrypted state, and the information selection exchange server 3 uses the first encryption. By performing the process of converting to the second encryption without decrypting the encryption and returning it to the user terminal 20, the data is maintained while the encryption is maintained from the extraction from the database 7 to the decryption at the exit user terminal 20. By being able to send information, it is possible to prevent information leakage from unspecified third parties and maintain high security.

Further, in step S21 described above, all the attributes of S1 and T1 shown in FIG. 6 (“S1. Temperature”, “S1. Humidity”, “S1. Sunshine duration”, “S1. Moisture content”, “T1. Input information 1”. Although "T1. Input information 2") was used as the information acquisition request, only items 1 to 3 of these may be requested. As a result, the number of processes and the processing load of the information selection exchange server 3 and the database 7 can be reduced by narrowing down the information acquisition requests from the user terminal 20 to the items that are really necessary.

Further, by automatically distributing the information acquisition request from the user terminal 20 in the information selection exchange matrix 41 and extracting it from the database, a person who distributes the information provided from the information selection exchange server 3 becomes unnecessary, and erroneous distribution or delayed distribution becomes unnecessary. It is possible to prevent human error such as.

The method of using the public key of the information selection exchange server 3 for the first encryption and the public key of the user terminal 20 and the private key of the information selection exchange server 3 for the second encryption has been described. For example, information acquisition has been described. Encrypted provision information 31 and additional information 33 have never been transmitted between the information acquisition terminal 10 and the user terminal 20, such as processing all the terminals of the terminal 10, the information selection exchange server 3, and the user terminal 20 with a common key. Any encryption method can be used as long as it can maintain the confidential state by encryption without being decrypted.

As described above, the provided information 31 and the additional information 33 acquired by the information acquisition unit 11 of the information acquisition terminal 10 are first encrypted and stored in the database 7 with the first encryption, and the user terminal 20 has the desired attribute 32. The information selection exchange server 3 performs a process of converting to a second encryption that can be decrypted by the user terminal 20 without decrypting the first encryption, and returns the information to the user terminal 20. By being able to send data from the information acquisition unit 11 at the entrance to the storage unit 24 of the user terminal 20 at the exit while maintaining encryption, information leakage can be prevented and high security can be maintained.

The present invention can be embodied in many forms without departing from its essential properties. Therefore, it goes without saying that the above-described embodiments are merely explanatory and do not limit the present invention.

1 Information provision system 2 Communication network 3 Information selection exchange server 4 Communication unit 5 Information management unit 6 Second encryption unit 7 Database (storage unit)
10 Information acquisition terminal 11 Information acquisition unit 12 Acquisition information separation unit 13 First encryption unit 14 Attribute addition unit 15 Input information addition unit 16 Transmission unit 20 User terminal 21 Communication unit 22 Information acquisition request unit 23 Decoding unit 24 Storage unit 31 Provided information 32 Attribute 33 Additional information 41 Information selection exchange matrix

Claims (8)

It has an information acquisition terminal, an information selection exchange server, and a user terminal.
The information acquisition terminal acquires the measured value to be provided to the user terminal, separates the acquired measured value into at least the smallest unit of individual data, and provides the separated individual data in combination based on an editing pattern. Information is created, and the created provided information is first encrypted .
In addition, an attribute indicating the content of the provided information is added to the first encrypted provided information based on the editing pattern, and the information is output to the information selection exchange server.
The information selection exchange server stores the first encrypted provided information output by the information acquisition terminal together with the attribute, and the provided information of the attribute corresponding to the user terminal is used as the provided information. The first encryption is re-encrypted and the second encryption that can be decrypted by the user terminal is performed.
The information providing system, wherein the user terminal acquires the provided information that is second-encrypted based on the corresponding attribute. The acquisition information separation unit of the information acquisition terminal separates the acquired measured values into at least the smallest unit of individual data, and provides the separated individual data in combination of one or more based on the editing pattern. The information providing system according to claim 1, wherein the information providing system is characterized in that. The information providing system according to claim 1, wherein the information selection exchange server manages the relationship between the user terminal and the attributes corresponding to the user terminal by arranging them in a matrix. The information providing system according to claim 1, wherein the information acquisition terminal acquires additional information input regarding the provided information in addition to the provided information. The information according to claim 1, wherein the attribute addition unit of the information acquisition terminal creates and adds the attribute, which is a combination of one or a plurality of the provided information, based on the editing pattern. Offering system. The information selection exchange server according to claim 1, wherein the information selection exchange server can change the attribute of the provided information that can be acquired by the user terminal by a request within the range permitted by the user terminal. Information provision system. The information providing system according to claim 1, wherein the user terminal selects and acquires the corresponding attribute. Acquire the measured value provided to the user terminal with the information acquisition terminal,
A step of separating the acquired measured values into at least the smallest unit of individual data, and combining the separated individual data based on an editing pattern to create provided information.
The step of first encrypting the provided information and performing the first encryption,
A step of adding an attribute to the provided information indicating the content of the provided information based on the editing pattern to the first encrypted provided information and outputting the information to the information selection exchange server.
The first encrypted provided information output by the information acquisition terminal is stored together with the attribute in the information selection exchange server, and the provided information of the attribute corresponding to the user terminal is used as the provided information. The step of re-encrypting the first encryption and performing the second encryption that can be decrypted by the user terminal,
An information providing method comprising executing a step of acquiring the provided information second encrypted based on the corresponding attribute on the user terminal.

Images