JP7378791B2 - Information processing device, information processing method, and program - Google Patents

Description

The present invention relates to an information processing device, an information processing method, and a program.

In recent years, personal information such as member information provided by a user to a service provider that provides a certain service may be used by another service provider after obtaining the user's consent to use the same. Increasingly, users' personal information is being used in Among these technologies, a technology has been proposed that uses distributed ledger technology such as blockchain to realize access management of personal information (see, for example, Patent Document 1).

International Publication No. 2018-043599

By using the above-mentioned technology, it is possible to guarantee the accuracy of information registered on the blockchain. However, the above-mentioned technology does not guarantee that the act of registering information on the blockchain by a terminal participating in the blockchain itself is properly performed based on the consent of the user.

The present invention has been made in view of these points, and an object of the present invention is to provide a technology for managing eligibility regarding the use of personal information.

A first aspect of the present invention is an information processing device. This device includes a terms of use including a plurality of clauses including at least a registration clause regarding registration of personal information, a computer program for realizing each of the plurality of clauses, a terms of use identifier for identifying the terms of use, a terms of use storage unit that stores terms of use data associated with the terms of use; an information acquisition unit that acquires consent information indicating acceptance of the terms of use from a user terminal used by the user; and, on the condition that the consent information is acquired, a program acquisition unit that reads a registration program, which is a computer program for realizing the registration terms, from the terms of use data stored in the terms of use storage unit; a program execution unit that associates the acquired personal information, the terms of service identifier, and a user identifier for identifying the user and stores it in a user information storage unit, and shares the information with another device different from the information processing device; A block chain containing a device identifier for identifying the information processing device, the terms of service identifier, a user information storage unit identifier for identifying the user information storage unit, and the personal information in the user information storage unit. and a blockchain registration unit that adds a new block including generation information indicating that the block has been newly stored.

The terms and conditions data may further be associated with a deletion clause regarding the deletion of the personal information and a deletion program that is a computer program for realizing the deletion clause, and the information acquisition unit The program acquisition unit may further acquire deletion request information indicating a deletion request of the personal information from the user, and the program acquisition unit may further acquire the deletion request information stored in the terms of use storage unit on the condition that the deletion request information is acquired. The deletion program may be read from the agreement data, and the program execution unit may delete the personal information stored in the user information storage unit from the user information storage unit by executing the deletion program. Often, the blockchain registration unit includes a device identifier for identifying the information processing device, the terms of service identifier, the user information storage unit identifier, and information indicating that the personal information has been deleted from the user information storage unit. A new block including the deletion information shown may be newly added to the blockchain.

The terms and conditions data may further be associated with a hash value of each computer program for realizing each of the plurality of terms, and the program acquisition unit is configured to acquire the terms and conditions stored in the terms and conditions storage unit. The computer program and a hash value corresponding to the computer program may be read from the data, and the program execution unit reads the hash value generated from the computer program that the program acquisition unit reads from the terms of use storage unit; The computer program may be executed on the condition that the hash value read by the program acquisition unit from the terms of use storage unit matches the hash value.

The rule data may be affixed with an electronic signature of an auditing organization that audits the operation of a computer program for realizing each of the plurality of provisions, and the program execution unit is configured to affix the electronic signature attached to the rule data. The computer program may be executed on condition that the signature is valid.

The terms and conditions data may further include a collaboration clause with another company indicating consent to the use of the personal information in another information processing device different from the information processing device, and the information processing device acquires the consent information. a request transmitting unit that transmits the personal information to the other information processing device on the condition that the personal information is obtained, and transmits a deletion request of the personal information to the other information processing device on the condition that the deletion request information is obtained. Further provision may be made.

The terms and conditions data includes a third-party collaboration registration program that is a computer program for storing personal information sent from the other information processing device in the user information storage unit based on a request from the other information processing device. The information processing device may be linked to the other company collaboration clause, and the information processing device may receive personal information sent from the other information processing device based on the other company collaboration clause established with the other information processing device. The program acquisition unit may further include a request receiving unit that receives other company collaboration registration request information indicating a request for information registration, and the program acquisition unit receives the terms of use storage unit on the condition that the other company collaboration registration request information is acquired. The other company cooperation registration program may be read from the rules data stored in the other company cooperation registration program, and the program execution unit may read the personal information acquired via the other information processing device by executing the other company cooperation registration program. may be stored in the user information storage unit, and the blockchain registration unit may store a device identifier for specifying the information processing device, another device identifier for specifying the other information processing device, and a device identifier for specifying the other information processing device. A block including a user information storage unit identifier and generation information indicating that the personal information has been newly stored in the user information storage unit may be newly added to the blockchain.

Even if the terms and conditions data include a third-party cooperation deletion program, which is a computer program for deleting personal information stored in the user information storage unit based on the third-party cooperation registration request information, the third-party cooperation provision is linked to the third-party cooperation provision. Often, the request receiving unit may further receive other company collaboration deletion request information indicating a request to delete personal information registered based on the other company collaboration registration request information from the other information processing device, and the program The acquisition unit may read out the other company collaboration deletion program from the terms and conditions data stored in the terms of use storage unit, on the condition that the other company collaboration deletion request information is acquired, and the program execution unit reads the other company collaboration deletion program from the terms of use storage unit. Personal information acquired through the other information processing device may be deleted from the user information storage unit by executing a third-party collaboration deletion program, and the blockchain registration unit identifies the information processing device. a device identifier for identifying the other information processing device, another device identifier for identifying the other information processing device, the user information storage unit identifier, and deletion information indicating that the personal information has been deleted from the user information storage unit. New blocks may be added to the blockchain.

The rule data may further be associated with a readout clause regarding the readout of the personal information and a readout program that is a computer program for realizing the readout clause, and the program execution unit is configured to execute the readout program. The personal information stored in the user information storage unit may be read by executing the above, and the blockchain registration unit may include a device identifier for identifying the information processing device that read the personal information, and a device identifier for identifying the information processing device that read the personal information, and Adding a new block to the blockchain that includes a terms of service identifier, a user information storage unit identifier for identifying the user information storage unit, and read information indicating that the personal information has been read from the user information storage unit. May be added.

The agreement data may further be associated with an update clause regarding the update of the personal information and an update program that is a computer program for realizing the update clause, and the program execution unit is configured to execute the update program. The personal information stored in the user information storage unit may be updated by executing the above, and the blockchain registration unit may include a device identifier for identifying the information processing device that updated the personal information; Adding a new block to the blockchain that includes the terms of service identifier, a user information storage unit identifier for identifying the user information storage unit, and update information indicating that the personal information in the user information storage unit has been updated. may be added to.

A second aspect of the present invention is an information processing method. In this method, a processor included in an information processing device specifies terms of use including a plurality of clauses including at least a registration clause regarding registration of personal information, a computer program for realizing each of the plurality of clauses, and the terms of use. a step of storing, in a terms of use storage unit, terms of use data that is linked with a terms of use identifier for the use of the service; a step of obtaining consent information indicating acceptance of the terms of use from a user terminal used by the user; and a step of obtaining consent information indicating acceptance of the terms of use from a user terminal used by the user a step of reading a registration program, which is a computer program for realizing the registration terms, from the terms of use data stored in the terms of use storage unit, and executing the registration program, on the condition that the terms of use are obtained; a step of storing personal information acquired via the user terminal, the terms of use identifier, and a user identifier for identifying the user in a user information storage unit; A blockchain shared with the device includes a device identifier for identifying the information processing device, the terms of use identifier, a user information storage unit identifier for identifying the user information storage unit, and the user information storage unit. and generating information indicating that the personal information has been newly stored in the block.

The third aspect of the present invention is a program. This program includes, on a computer, terms of use that include a plurality of clauses including at least registration clauses regarding the registration of personal information, a computer program for realizing each of the plurality of clauses, and terms of use that specify the terms of use. a function to store agreement data in a terms of use storage section that is associated with an identifier, a function to acquire consent information indicating acceptance of the said terms of use from a user terminal used by a user, and a function to acquire said consent information. The conditions include a function of reading a registration program, which is a computer program for realizing the registration terms, from the terms of use data stored in the terms of use storage unit, and a function of causing the computer to execute the registration program. a function of linking the personal information acquired through the above, the terms of use identifier, and a user identifier for identifying the user and storing it in a user information storage unit, and sharing it with other devices different from the computer; A device identifier for identifying the computer, a terms of use identifier, a user information storage unit identifier for identifying the user information storage unit, and a new personal information in the user information storage unit are added to the blockchain. A function for newly adding a block including generation information indicating that the block has been stored is realized.

In order to provide this program or to update a part of the program, a computer-readable recording medium recording this program may be provided, and this program may be transmitted over a communication line.

Note that arbitrary combinations of the above components and expressions of the present invention converted between methods, apparatuses, systems, computer programs, data structures, recording media, etc. are also effective as aspects of the present invention.

According to the present invention, eligibility regarding the use of personal information can be managed.

1 is a diagram schematically showing an overview of the configuration of an information processing system according to an embodiment. FIG. 1 is a diagram schematically showing a functional configuration of an information processing device according to an embodiment. FIG. 3 is a diagram schematically showing a data structure of a terms of use storage unit according to an embodiment. FIG. 3 is a diagram schematically showing a data structure of a user information storage unit according to an embodiment. FIG. 1 is a diagram schematically showing a data structure of a blockchain according to an embodiment. 3 is a flowchart for explaining the flow of information processing executed by the information processing apparatus according to the embodiment.

<Overview of embodiment>
FIG. 1 is a diagram schematically showing an overview of the configuration of an information processing system S according to an embodiment. In the information processing system S according to the embodiment, an information processing device 1, a user terminal 2, an auditing agency terminal 3, an information user terminal 4, and a blockchain B are connected via a communication network N. In the information processing system S, the information processing device 1 obtains consent from the user who is the owner of the user terminal 2 to terms of use regarding the use of the user's personal information, and then manages the personal information (new registration, reading , update, and deletion).

The information processing device 1 implements a series of processes from acquiring personal information from the user terminal 2 to storing the acquired information in a user information storage unit managed by the information processing device 1 by executing a computer program. . The auditing agency terminal 3 audits whether the computer program executed by the information processing device 1 operates in accordance with the terms of use defined by the administrator of the information processing device 1. Therefore, the auditing agency terminal 3 is managed by a third party organization different from the administrator of the information processing device 1.

The information user terminal 4 is a device managed by a business operator that has been approved to use the personal information of the user of the user terminal 2 based on the terms of use determined by the administrator of the information processing device 1. The information user terminal 4 can read and use personal information managed by the information processing device 1 within the range permitted by the terms of use. At this time, the process by which the information processing device 1 provides personal information to the information user terminal 4 is also realized by a computer program that has been audited by a third-party organization that is the administrator of the auditing agency terminal 3. .

Similarly, the information processing device 1 also updates the personal information acquired from the user terminal 2 and deletes the personal information upon request from the user of the user terminal 2 by the third party organization that is the administrator of the auditing agency terminal 3. This is accomplished by running an audited computer program. This means that the processing executed by the information processing device 1 has been audited by a third-party organization, which can be used as evidence that the information processing device 1 complies with the terms of use.

The information processing device 1 stores in blockchain B the history of processing executed for managing personal information. Blockchain B is a type of distributed database, although a detailed explanation will be omitted because it is a known technology, and any device participating in Blockchain B can check the contents at any time. The accuracy of the content registered is guaranteed. By registering the history of processing performed by the information processing device 1 to manage personal information in the blockchain B, the user of the user terminal 2 who provided personal information to the information processing device 1 will be able to keep track of when and who the personal information was received. You can check whether your personal information has been registered, updated, or deleted, and when and by whom your personal information has been referenced.

Hereinafter, an overview of the flow of processing executed by the information processing system S will be explained in order from (1) to (10), and the numbers correspond to (1) to (10) in FIG.

(1) The information processing device 1 transmits to the auditing agency terminal 3 information indicating the terms of use of personal information and a computer program for managing the information based on the terms.
(2) The administrator of the auditing agency terminal 3 audits whether the computer program operates based on the terms of use received from the information processing device 1 and transmits the results to the information processing device 1.

(3) The information processing device 1 provides the user terminal 2 with information indicating the terms of use of personal information that has been audited by the administrator of the auditing agency terminal 3. Specifically, the information processing device 1 presents text that defines the terms of use of personal information on the display unit of the user terminal 2, and also displays icons (not shown) for selecting whether or not to agree to the terms. Present a GUI (Graphical User Interface).

(4) The user terminal 2 registers personal information in the information processing device 1 after accepting the terms of use formulated by the administrator of the information processing device 1. At this time, the information processing device 1 executes a computer program for registering personal information, and displays a GUI for registering personal information on the display unit of the user terminal 2. When the user of the user terminal 2 inputs personal information into the GUI displayed on the display section of the user terminal 2, the information processing apparatus 1 stores the information in a user information storage section managed by the information processing apparatus 1.

(5) The administrator of the information user terminal 4 uses the information user terminal 4 to apply for use of the personal information of the user of the user terminal 2 based on the terms of use.
(6) The information processing device 1 executes a computer program for transmitting personal information to the information user terminal 4, and provides the information user terminal 4 with personal information within the range specified in the terms of use.

(7) The information processing device 1 registers in the blockchain B a history indicating that personal information has been provided to the information user terminal 4.
(8) The user of the user terminal 2 can also use the user terminal 2 to request the information processing device 1 to update and delete personal information.

(9) The information processing device 1 executes a computer program for updating or deleting personal information in response to a request from the user of the user terminal 2.
(10) When the information processing device 1 updates or deletes personal information, it registers a history indicating this in the blockchain B.

In this way, the information processing device 1 manages personal information provided by the user of the user terminal 2 by executing a computer program whose operation has been certified by a third-party organization. Furthermore, the information processing device 1 registers the history of personal information in the blockchain B, thereby disclosing it to a third party. Thereby, the information processing device 1 can leave evidence that personal information is appropriately managed.

<Functional configuration of information processing device 1 according to embodiment>
FIG. 2 is a diagram schematically showing the functional configuration of the information processing device 1 according to the embodiment. The information processing device 1 includes a storage section 10 and a control section 11. In FIG. 2, arrows indicate main data flows, and there may be data flows that are not shown in FIG. In FIG. 2, each functional block shows the configuration of a functional unit, not the configuration of a hardware (device) unit. Therefore, the functional blocks shown in FIG. 2 may be implemented within a single device, or may be implemented separately within multiple devices. Data may be exchanged between functional blocks via any means such as a data bus, a network, or a portable storage medium.

The storage unit 10 includes a ROM (Read Only Memory) that stores the BIOS (Basic Input Output System) of a computer that implements the information processing device 1, a RAM (Random Access Memory) that serves as a work area of the information processing device 1, and an OS (OS). It is a large-capacity storage device such as an HDD (Hard Disk Drive) or an SSD (Solid State Drive) that stores a variety of information that is referred to during the execution of the operating system (Operating System), application programs, and the application programs. The storage unit 10 includes a terms of use storage unit 100 and a user information storage unit 101.

The terms of use storage unit 100 stores terms of use including a plurality of clauses including at least a registration clause regarding registration of personal information, a computer program for realizing each of the plurality of clauses, and a terms of use identifier for identifying the terms of use. It stores the contract data that links the . Further, the user information storage unit 101 stores personal information acquired via the user terminal 2, a terms of service identifier, and a user identifier for identifying the user in association with each other.

The control unit 11 is a processor such as a CPU (Central Processing Unit) or a GPU (Graphics Processing Unit) of the information processing device 1, and controls the information acquisition unit 110 and the program acquisition unit by executing a program stored in the storage unit 10. 111, a program execution unit 112, a blockchain registration unit 113, a request transmission unit 114, and a request reception unit 115.

Note that FIG. 2 shows an example in which the information processing device 1 is configured as a single device. However, the information processing device 1 may be realized by calculation resources such as a plurality of processors and memories, such as a cloud computing system, for example. In this case, each unit constituting the control unit 11 is realized by executing a program by at least one of a plurality of different processors.

The information acquisition unit 110 acquires consent information indicating consent to the terms of use from the user terminal 2 used by the user. The program acquisition unit 111 reads a registration program, which is a computer program for realizing the registration terms, from the agreement data stored in the terms of use storage unit 100, on the condition that the information acquisition unit 110 acquires consent information.

Note that when the information acquisition unit 110 acquires the consent information, the information acquisition unit 110 stores the terms of use identifier and the user identifier for identifying the user in the terms of use approval database (not shown) stored in the storage unit 10 of the user terminal. The data with the electronic signature of the user No. 2 is stored.

The program execution unit 112 executes the registered program that the program acquisition unit 111 reads from the terms of use storage unit 100, thereby linking the personal information acquired via the user terminal 2, the terms of use identifier, and the user identifier. and stored in the user information storage unit 101.

The blockchain registration unit 113 stores a device identifier for identifying the information processing device 1, a terms of service identifier, and a terms of use identifier in a blockchain B shared with the information user terminal 4, which is another device different from the information processing device 1. A new block is added that includes a user information storage unit identifier for identifying the user information storage unit 101 and generated information indicating that personal information has been newly stored in the user information storage unit 101. From this, the information processing device 1 can appropriately store the user's personal information only in the user information storage unit 101 based on the terms of use.

FIG. 3 is a diagram schematically showing the data structure of the terms of use storage unit 100 according to the embodiment. FIG. 3 shows information linked to the terms of use whose terms of use identifier is ID000001. In the example shown in FIG. 3, the terms of use include "registration clause", "deletion clause", "reading clause", "update clause", and "other company collaboration clause".

In addition, computer programs for realizing each provision are ``registration program'', ``deletion program'', ``reading program'', ``update program'', ``other company cooperation registration program'', ``other company cooperation deletion program'', ``other company cooperation "Update program" and "Other company cooperation reading program" and the hash value of each computer program are registered in association with the terms of use identifier. The terms of use identifier, the terms of use, and the computer program constitute the terms of use data, but as shown in FIG. ing. As described above, each computer program stored in the terms of use storage unit 100 is a program that has been audited by the administrator of the auditing agency terminal 3, which is a third party organization. Further, the hash value is calculated using, for example, a known SHA-3 (Secure Hash Algorithm 3) hash function.

FIG. 4 is a diagram schematically showing the data structure of the user information storage unit 101 according to the embodiment. In the example shown in FIG. 4, personal information of a user who has accepted the terms of use whose terms of use identifier is ID00001 is stored. The user identifier for identifying this user is UIDXXXXX. In the example shown in FIG. 4, the personal information includes the user's address, name, age, annual income, etc.

Returning to the explanation of FIG. 2. The information acquisition unit 110 can further acquire deletion request information indicating a request to delete personal information from the user terminal 2. The program acquisition unit 111 reads the deletion program from the rule data stored in the terms of use storage unit 100 on the condition that the information acquisition unit 110 acquires the deletion request information. The program execution unit 112 deletes the personal information stored in the user information storage unit 101 from the user information storage unit 101 by executing the deletion program that the program acquisition unit 111 has read and acquired from the terms of use storage unit 100.

The blockchain registration unit 113 stores a device identifier for identifying the information processing device 1, a terms of service identifier, a user information storage unit identification, and deletion information indicating that personal information has been deleted from the user information storage unit 101. Add a new block containing the block to blockchain B. Since the operations of the deletion program have been audited by a third party organization, the information processing device 1 uses the deletion program to delete personal information, thereby removing the personal information from the user information storage unit 101 based on the terms of use. I can guarantee that it has been deleted. Further, the user of the user terminal 2 who provided the personal information to the information processing device 1 can confirm that the personal information has been deleted from the user information storage unit 101 by the deletion request. By leaving the processing history from new registration of personal information to deletion on blockchain B, the information processing device 1 can fulfill one of the obligations stipulated by the GDPR (General Data Protection Regulation).

As described with reference to FIG. 3, the terms of use data stored in the terms of use storage unit 100 is further associated with hash values of computer programs for realizing each of the plurality of terms. The program acquisition unit 111 reads out the computer program and the hash value corresponding to the computer program from the rule data stored in the terms of use storage unit 100.

The program execution unit 112 sets a condition that the hash value generated from the computer program read from the terms of service storage unit 100 by the program acquisition unit 111 and the hash value read from the terms of use storage unit 100 by the program acquisition unit 111 match. to run a computer program. Thereby, the program execution unit 112 can confirm that the computer program stored in the terms of use storage unit 100 has not been tampered with before executing the computer program.

Further, as shown in FIG. 3, the rule data is affixed with an electronic signature of an auditing organization that audits the operation of computer programs for realizing each of the plurality of provisions. The program execution unit 112 verifies whether the electronic signature attached to the rule data is valid using a public key corresponding to the private key used to generate the electronic signature. The program execution unit 112 executes the computer program on the condition that the electronic signature is valid. Thereby, the information processing device 1 can guarantee that the computer program to be executed has been audited by a third party organization.

The agreement data stored in the terms of use storage unit 100 is also associated with a readout clause regarding reading out personal information and a readout program that is a computer program for realizing the readout clause. The program execution unit 112 reads the personal information stored in the user information storage unit 101 by executing the readout program read out by the program acquisition unit 111. The blockchain registration unit 113 stores a device identifier for identifying the information processing device 1 that has read the personal information, a terms of service identifier, a user information storage unit identifier for identifying the user information storage unit 101, and a user information storage A new block including read information indicating that personal information has been read from section 101 is newly added to blockchain B. Thereby, the information processing device 1 can disclose the history of when personal information was read by which device and from which storage unit.

The agreement data stored in the terms of use storage unit 100 is also associated with an update clause regarding the update of personal information and an update program that is a computer program for realizing the update clause. The program execution unit 112 updates the personal information stored in the user information storage unit 101 by executing the update program read by the control unit 11. Blockchain registration unit 113 newly adds a block to blockchain B that includes a device identifier, a terms of service identifier, a user information storage unit identifier, and update information indicating that personal information in the user information storage unit has been updated. do. Thereby, the information processing device 1 can publish the history of when personal information stored in which storage unit was updated and by which device.

Above, registration and deletion of personal information acquired by the information processing device 1 from the user terminal 2 have been mainly explained. Next, "collaboration with other companies" in which the personal information acquired by the information processing apparatus 1 from the user terminal 2 is used by another information processing apparatus (information user terminal 4 in FIG. 1) different from the information processing apparatus 1 will be explained. .

As shown in FIG. 3, the terms and conditions data further includes a collaboration clause with other companies indicating consent to the use of personal information in the information user terminal 4, which is another information processing device different from the information processing device 1. . Since the information user terminal 4 is not under the control of the administrator of the information processing device 1, once the information processing device 1 provides personal information to the information user terminal 4, that personal information is no longer managed by the information processing device 1. I end up. Therefore, even if the information processing device 1 receives a request to delete personal information from the user of the user terminal 2, the information processing device 1 cannot delete the personal information managed by the information user terminal 4.

Therefore, the request transmitting unit 114 transmits the personal information to the information user terminal 4 on the condition that the information acquiring unit 110 acquires consent information from the user terminal 2, and the information acquiring unit 110 requests deletion from the user terminal 2. A request to delete personal information is sent to the information user terminal 4 on the condition that the information is acquired. Thereby, the information processing device 1 can share the personal information transmitted from the user terminal 2 with the information user terminal 4 or delete it from the information user terminal 4.

Further, the information processing device 1 may receive personal information received by the information user terminal 4 from the customer of the information user terminal 4. For this reason, the terms and conditions data also includes the other company collaboration registration program, which is a computer program for storing personal information sent from the information user terminal 4 in the user information storage unit 101 based on a request from the information user terminal 4. It is linked to other company cooperation clauses. The request receiving unit 115 receives, from the information user terminal 4, other company collaboration registration request information indicating a request for registration of personal information transmitted based on the other company collaboration terms established between the information user terminal 4 and the information user terminal 4. do.

The program acquisition unit 111 reads the other company collaboration registration program from the rule data stored in the terms of use storage unit 100, on the condition that the request reception unit 115 acquires other company collaboration registration request information. The program execution unit 112 stores the personal information acquired via the information user terminal 4 in the user information storage unit 101 by executing the other company cooperation registration program read out by the program acquisition unit 111.

The blockchain registration unit 113 stores a device identifier for identifying the information processing device 1, another device identifier for identifying the information user terminal 4, a user information storage unit identifier, and personal information in the user information storage unit 101. A new block is added to blockchain B, including generation information indicating that the block has been newly stored.

Since the information processing device 1 records personal information received from the information user terminal 4 in the user information storage unit 101, a mechanism for deleting the personal information should also be provided. Therefore, in the terms and conditions data, the other company cooperation deletion program, which is a computer program for deleting the personal information stored in the user information storage unit 101 based on the other company cooperation registration request information, is also linked to the other company cooperation clause.

The request receiving unit 115 further receives other company collaboration deletion request information from the information user terminal 4 indicating a request to delete personal information registered based on the other company collaboration registration request information. The program acquisition unit 111 reads out the other company cooperation deletion program from the rule data stored in the terms of use storage unit 100 on the condition that the request transmission unit 114 acquires the other company cooperation deletion request information.

The program execution unit 112 deletes the personal information acquired via the information user terminal 4 from the user information storage unit 101 by executing the other company collaboration deletion program read by the control unit 11. The blockchain registration unit 113 receives a device identifier for identifying the information processing device 1, another device identifier for identifying the information user terminal 4, a user information storage unit identifier, and personal information from the user information storage unit 101. A new block containing deletion information indicating that the block has been deleted is added to blockchain B.

In addition, as shown in FIG. 3, the terms and conditions data include a third-party collaboration update program for updating personal information stored in the user information storage unit 101 based on other-company collaboration registration request information; A "other company cooperation read program" for reading out personal information stored in the user information storage unit 101 based on the other company cooperation clause is also linked to the other company cooperation clause.

The third-party cooperation registration program, the third-party cooperation deletion program, the third-party cooperation update program, and the third-party cooperation reading program are programs whose processing contents have been audited by a third-party organization. Therefore, by using these programs, the information processing device 1 can ensure that the personal information acquired from the information user terminal 4 can be appropriately managed. In addition, by registering the history of processing of personal information using the other company cooperation registration program and the other company cooperation deletion program in blockchain B, which is a public ledger, the information processing device 1 can check the management status of personal information received from others. can be made public.

FIG. 5 is a diagram schematically showing the data structure of blockchain B according to the embodiment. Block chain B is information in which a plurality of blocks are connected, and FIG. 5 illustrates a first block B1 and a second block B2. Each of the plurality of blocks includes in common a hash value of information indicating the immediately preceding block, a nonce value, the registration date and time of the block, a device identifier, a terms of use identifier, and a user information storage unit identifier.

In FIG. 5, the first block B1 is a block added by the blockchain registration unit 113 when the program execution unit 112 executes the registered program. Therefore, the first block B1 also includes generation information. On the other hand, the second block B2 is a block added by the blockchain registration unit 113 when the program execution unit 112 executes the other company cooperation deletion program. Therefore, the second block B2 also includes the other device identifier and deletion information. In this way, the information processing device 1 can disclose the management status of the personal information by registering the history of processing related to the personal information in the blockchain B.

<Processing flow of the information processing method executed by the information processing device 1>
FIG. 6 is a flowchart for explaining the flow of information processing executed by the information processing device 1 according to the embodiment. The processing in this flowchart starts, for example, when the information processing device 1 is started up.

The information acquisition unit 110 acquires consent information indicating that the user has consented to the terms of use from the user terminal 2 used by the user (S2). The program acquisition unit 111 reads a registration program, which is a computer program for realizing the registration terms, from the rule data stored in the terms of use storage unit 100 (S4).

The program execution unit 112 reads the hash value of the registered program from the terms of use data stored in the terms of use storage unit 100 (S6). Furthermore, the program execution unit 112 generates a hash value of the registered program by applying a hash function to the registered program (S8).

If the hash read from the rule data matches the hash value generated from the registered program (Yes in S10), the program execution unit 112 verifies the validity of the electronic signature attached to the rule data (S12). If the electronic signature is valid (Yes in S14), the program execution unit 112 executes the registered program read from the rule data (S16). The blockchain registration unit 113 adds a new block including the device identifier, the terms of use identifier, the user information storage unit identifier, and the generation information to the blockchain B as a processing history (S18).

If the hash value read from the contract data does not match the hash value generated from the registration program (No in S10), if the electronic signature is not valid (No in S14), or if the blockchain registration unit 113 adds a new value to blockchain B. Once the block is added, the processing in this flowchart ends.

<Effects achieved by the information processing device 1 according to the embodiment>
As explained above, according to the information processing device 1 according to the embodiment, eligibility regarding the use of personal information can be managed. Additionally, the usage status of personal information can be made public.

Although the present invention has been described above using the embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments, and various modifications and changes can be made within the scope of the gist. be. For example, all or part of the device can be functionally or physically distributed and integrated into arbitrary units. In addition, new embodiments created by arbitrary combinations of multiple embodiments are also included in the embodiments of the present invention. The effects of the new embodiment resulting from the combination have the effects of the original embodiment.

1... Information processing device 10... Storage unit 100... Terms of use storage unit 101... User information storage unit 11... Control unit 110... Information acquisition unit 111... Program acquisition unit 112 ...Program execution unit 113...Block chain registration unit 114...Request transmission unit 115...Request reception unit 2...User terminal 3...Inspection agency terminal 4...Information user terminal B ... Blockchain N ... Communication network S ... Information processing system

Claims (11)

An information processing device,
A terms of use including a plurality of clauses including at least a registration clause regarding the registration of personal information, a computer program for realizing each of the plurality of clauses, and a terms of use identifier for identifying the terms of use are linked. a terms of use storage unit that stores terms of use data;
an information acquisition unit that acquires consent information indicating consent to the terms of use from a user terminal used by the user;
a program acquisition unit that reads a registration program, which is a computer program for realizing the registration terms, from the agreement data stored in the terms of use storage unit, on the condition that the consent information is acquired;
Executing a program that associates personal information acquired via the user terminal, the terms of service identifier, and a user identifier for identifying the user by executing the registration program, and stores the linked information in a user information storage unit. Department and
A blockchain shared with another device different from the information processing device includes a device identifier for identifying the information processing device, the terms of use identifier, and a user information storage unit for identifying the user information storage unit. a blockchain registration unit that newly adds a block including an identifier and generation information indicating that the personal information has been newly stored in the user information storage unit;
An information processing device comprising: The terms and conditions data are further associated with a deletion clause regarding the deletion of the personal information and a deletion program that is a computer program for realizing the deletion clause,
The information acquisition unit further acquires deletion request information indicating a deletion request of the personal information from the user terminal,
The program acquisition unit reads the deletion program from the agreement data stored in the terms of use storage unit, on the condition that the deletion request information is acquired;
The program execution unit deletes the personal information stored in the user information storage unit from the user information storage unit by executing the deletion program,
The blockchain registration unit includes a device identifier for identifying the information processing device, the terms of service identifier, the user information storage unit identifier, and a deletion information indicating that the personal information has been deleted from the user information storage unit. adding a new block containing information to the blockchain;
The information processing device according to claim 1. The regulation data is further associated with hash values of computer programs for realizing each of the plurality of clauses,
The program acquisition unit reads the computer program and a hash value corresponding to the computer program from the agreement data stored in the terms of use storage unit,
The program execution unit is configured to provide a condition that the hash value generated from the computer program read by the program acquisition unit from the terms of use storage unit and the hash value read from the terms of use storage unit by the program acquisition unit match. executing the computer program as
The information processing device according to claim 1 or 2. The said regulation data is affixed with an electronic signature of an auditing organization that audits the operation of a computer program for realizing each of the plurality of provisions,
The program execution unit executes the computer program on the condition that the electronic signature attached to the rule data is valid.
The information processing device according to any one of claims 1 to 3. The terms and conditions data further includes a collaboration clause with another company indicating consent to the use of the personal information in another information processing device different from the information processing device,
The information processing device includes:
Sending the personal information to the other information processing device on the condition that the consent information is obtained, and sending a request to delete the personal information to the other information processing device on the condition that the deletion request information is obtained. further comprising a request transmitting unit for transmitting the request;
The information processing device according to claim 2. The terms and conditions data includes a third-party collaboration registration program that is a computer program for storing personal information sent from the other information processing device in the user information storage unit based on a request from the other information processing device. It is linked to the above-mentioned cooperation clause with other companies,
The information processing device receives other company collaboration registration request information indicating a request for registration of personal information transmitted from the other information processing device based on the other company collaboration clause established with the other information processing device. further comprising a request receiving section for receiving the request;
The program acquisition unit reads the other company collaboration registration program from the terms and conditions data stored in the terms of use storage unit, on the condition that the other company collaboration registration request information is acquired;
The program execution unit stores personal information acquired via the other information processing device in the user information storage unit by executing the other company collaboration registration program,
The blockchain registration unit stores a device identifier for identifying the information processing device, another device identifier for identifying the other information processing device, the user information storage unit identifier, and the user information storage unit. adding a new block to the blockchain, including generated information indicating that the personal information has been newly stored;
The information processing device according to claim 5. In the terms and conditions data, a third-party collaboration deletion program, which is a computer program for deleting personal information stored in the user information storage unit based on the third-party collaboration registration request information, is linked to the third-party collaboration clause;
The request receiving unit further receives, from the other information processing device, other company cooperation deletion request information indicating a request to delete personal information registered based on the other company cooperation registration request information,
The program acquisition unit reads the other company collaboration deletion program from the terms and conditions data stored in the terms of use storage unit, on the condition that the other company collaboration deletion request information is acquired;
The program execution unit deletes the personal information acquired via the other information processing device from the user information storage unit by executing the other company collaboration deletion program,
The blockchain registration unit includes a device identifier for specifying the information processing device, another device identifier for specifying the other information processing device, the user information storage unit identifier, and information from the user information storage unit. adding a new block to the blockchain, including deletion information indicating that the personal information has been deleted;
The information processing device according to claim 6. The regulation data is further associated with a readout clause regarding the readout of the personal information and a readout program that is a computer program for realizing the readout clause,
The program execution unit reads the personal information stored in the user information storage unit by executing the reading program,
The blockchain registration unit includes a device identifier for identifying the information processing device that read the personal information, the terms of use identifier, a user information storage unit identifier for identifying the user information storage unit, and the user information storage unit identifier. adding a new block to the blockchain, including readout information indicating that the personal information has been read out from the information storage unit;
The information processing device according to any one of claims 1 to 7. The terms and conditions data are further associated with an update clause regarding the update of the personal information and an update program that is a computer program for realizing the update clause,
The program execution unit updates the personal information stored in the user information storage unit by executing the update program,
The blockchain registration unit includes a device identifier for identifying the information processing device that updated the personal information, the terms of service identifier, a user information storage unit identifier for identifying the user information storage unit, and the user information storage unit identifier for identifying the information processing device that updated the personal information. adding a new block to the blockchain, including update information indicating that the personal information in the information storage unit has been updated;
The information processing device according to any one of claims 1 to 8. A processor included in the information processing device,
A terms of use including a plurality of clauses including at least a registration clause regarding the registration of personal information, a computer program for realizing each of the plurality of clauses, and a terms of use identifier for identifying the terms of use are linked. storing the terms of use data in the terms of use storage;
a step of acquiring consent information indicating consent to the terms of use from a user terminal used by the user;
a step of reading a registration program, which is a computer program for realizing the registration terms, from the terms and conditions data stored in the terms of use storage unit, on the condition that the consent information is obtained;
executing the registration program to associate the personal information acquired via the user terminal, the terms of use identifier, and a user identifier for identifying the user and store them in a user information storage unit; ,
A blockchain shared with another device different from the information processing device includes a device identifier for identifying the information processing device, the terms of use identifier, and a user information storage unit for identifying the user information storage unit. adding a new block including an identifier and generated information indicating that the personal information has been newly stored in the user information storage unit;
An information processing method that performs. to the computer,
A terms of use including a plurality of clauses including at least a registration clause regarding the registration of personal information, a computer program for realizing each of the plurality of clauses, and a terms of use identifier for identifying the terms of use are linked. A function to store the terms of use data in the terms of use storage unit,
a function of acquiring consent information indicating consent to the terms of use from a user terminal used by the user;
A function of reading a registration program, which is a computer program for realizing the registration terms, from the terms of use data stored in the terms of use storage unit, on the condition that the consent information is acquired;
By causing the computer to execute the registration program, personal information acquired via the user terminal, the terms of service identifier, and a user identifier for identifying the user are linked and stored in a user information storage unit. and the ability to
A blockchain shared with another device different from the computer includes a device identifier for identifying the computer, the terms of use identifier, a user information storage unit identifier for identifying the user information storage unit, and the a function of adding a new block including generated information indicating that the personal information has been newly stored in the user information storage unit;
A program that makes this possible.

Images