WO2021059434A1 - Information circulation system, information circulation method, and recording medium - Google Patents

Abstract

The present invention has a first computer that collects information and a second computer that provides the information collected by the first computer to the outside. The second computer has a purpose-of-use management unit that receives usage conditions for the information to be provided to the outside and stores the usage conditions as purpose-of-use information, a consent information management unit that receives consent to the usage conditions for providing the information collected by the first computer to the outside and stores the consent in consent information, an information management unit that, upon receiving an acquisition request for the information, acquires the information collected by the first computer and provides the information to the outside pursuant to the usage conditions for which consent has been received, and a trail management unit that generates a trail that indicates that an acquisition request for the information has been made or that the information has been provided and stores the trail in trail information. The second computer stores the purpose-of-use information, the consent information, and the trail information in a blockchain that is shared with the first computer.

Description

Information distribution system, information distribution method and storage medium

The present invention relates to an information distribution system that manages the distribution of personal information.

It is being considered to use personal information such as purchase information of goods purchased by individuals and service usage information for marketing. As a technique for utilizing personal information, for example, Patent Document 1 is known.

Patent Document 1 describes a technique for providing the latest personal information to a user by appropriately updating the personal information on the assumption that the personal information obtained from the service provider that provides the personal information changes depending on the situation. It is disclosed.

Further, in Patent Document 1, the individual inputs the provision conditions (industry of the person who wishes to purchase, selling price, etc.) for providing personal information to the user (purchaser of personal information) from the terminal, and the information management server It is stored in the information registrant management record (information management record) of the registrant information storage unit.

JP-A-2019-128648

However, in the above-mentioned Patent Document 1, the consent information (providing conditions) entered by the individual is centrally managed by the information management system, and falsification of the consent information cannot be detected. Therefore, reliable information can be provided based on the consent of the individual. It could not have been done.

Therefore, in the present invention, the consent information obtained from an individual and the purpose of use obtained from the user are stored and shared in the blockchain, and the consent information shared by the blockchain is stored and shared by the business parties (specific providers and information banks). By referring to it, the purpose is to ensure the transfer of personal information.

The present invention provides to the outside a first computer having a processor, a memory and a communication device and collecting information, and having a processor, a memory and a communication device and providing the information collected by the first computer to the outside. An information distribution system including a second computer, the second computer receives a usage condition of the information provided to the outside and stores the usage condition information in the usage purpose information, and the first purpose management unit. When the consent information management unit that accepts the consent to the terms of use provided to the outside and stores the information collected by the computer in the consent information and the request for acquisition of the information is received, the terms of use with the consent The information management unit that acquires the information collected by the first computer and provides it to the outside, and the trail management unit that generates a trail indicating that the information acquisition request or the information has been provided and stores it in the trail information. The second computer stores the purpose of use information, the consent information, and the trail information in a blockchain and shares the information with the first computer.

According to the present invention, the consent information shared by the blockchain is referred to by business parties (specific providers and information banks) who use an external computer, and the consent of the individual is confirmed after confirming the validity of the consent information. It is possible to send and receive reliable information based on.

Details of at least one implementation of the subject matter disclosed herein are described in the accompanying drawings and in the description below. Other features, aspects, and effects of the disclosed subject matter are manifested in the disclosures, drawings, and claims below.

It is a figure which shows the Example of this invention and shows the outline of the distribution of personal information. It is a block diagram which shows the Example of this invention and shows an example of the information distribution system which distributes personal information. It is a block diagram which shows the Example of this invention and shows an example of a bank management server. It is a block diagram which shows the Example of this invention and shows an example of an information management server. It is a sequence diagram which shows the Example of this invention and shows an example of the registration process of the item which can be provided and the personal information performed in the information distribution system. It is a sequence diagram which shows the Example of this invention and shows an example of the registration process of purpose of use performed in an information distribution system. It is a sequence diagram which shows the Example of this invention and shows an example of the registration process of consent information performed in an information distribution system. It is a sequence diagram which shows the Example of this invention and shows an example of the personal information provision processing performed in the information distribution system. It is a sequence diagram which shows the Example of this invention and shows an example of the browsing process of a trail performed in an information distribution system. It is a figure which shows the Example of this invention and shows an example of the offerable item table. It is a figure which shows the Example of this invention and shows an example of the personal information table. It is a figure which shows the Example of this invention and shows an example of the purpose of use table. It is a figure which shows the Example of this invention and shows an example of the consent information table. It is a figure which shows the Example of this invention and shows an example of the hash value table of personal information. It is a figure which shows the Example of this invention and shows an example of a trail table. It is a figure which shows the Example of this invention and shows an example of the ID information table. It is a figure which shows the Example of this invention and shows an example of the registration screen of the offerable item. It is a figure which shows the Example of this invention and shows an example of the registration screen of the purpose of use. It is a figure which shows the Example of this invention and shows an example of the registration screen of consent information. It is a figure which shows the Example of this invention and shows an example of the search screen of a trail.

Hereinafter, an embodiment of the present invention will be described with reference to the accompanying drawings.

<Overview>
FIG. 1 shows an embodiment of the present invention and is a diagram showing an outline of distribution of personal information. In the information distribution system of this embodiment, a personal terminal 400 used by an individual who uses a service or purchases an article, and a provider (company A to C) who provides the service or an article to an individual and accumulates personal information Data usage sites 2-A to 2-C operated and data usage sites 3-operated by users (Company X to Company Z) who use personal information stored in the data providing sites 2-A to 2-C. Includes information bank site 1 provided to X to 3-Z.

The information bank that operates the information bank site 1 and the providers (Company A to C) and the users (Company X to Z) have previously concluded a contract to use personal information based on the consent of the individual. There is. In the following description, when the data providing site is not individually specified, the code "2" is used with the "-" and subsequent parts omitted. The same applies to the codes of other components.

The data providing site 2 provides services and goods in response to an order from the personal terminal 400, and stores personal information acquired when purchasing the goods and using the services in the personal information table 4. Further, when the data providing site 2 registers the personal information in the personal information table 4, the hash value of the registered personal information is calculated, and the signature and the hash value of the data providing site 2 are used as the personal information of the blockchain 6. It is stored in the hash value table 63 and shared with the information bank site 1.

In addition, the data providing site 2 registers the items that can be provided to the user (hereinafter, the items that can be provided) from the accumulated personal information table 4 in the information bank site 1. The information bank site 1 acquires information on items that can be provided to the data utilization site 3 in the personal information table 4 of the data providing site 2, and stores the information in the providing personal information table 5.

Note that the illustrated example shows an example in which personal information is provided from the personal information table 5 for provision stored in the information bank site 1 to the data use site 3, but the present invention is not limited to this. For example, the information bank site 1 does not accumulate personal information, requests the data providing site 2 for the personal information requested by the data using site 3, and relays the personal information output by the data providing site 2 to the data using site 3. You may try to do so. When personal information is relayed without accumulating personal information on the information bank site 1, the personal information may be kept up to date on the data providing site 2, so that the cost for maintaining the information can be reduced.

The user who operates the data use site 3 refers to the items that can be provided, and if there is data that can be used, registers the purpose of use on the information bank site 1. The purpose of use is stored in the purpose of use table 62 of the blockchain 6.

The individual who provides personal information concludes a contract with the information bank site 1 on the personal terminal 400, and agrees to the items of the personal information table 4 provided to the data use site 3 and the purpose of use. The content of the consent is stored in the consent information table 61 of the blockchain 6 and shared with the data providing site 2.

After that, the data usage sites 3-X to 3-Z acquire the personal information table 5 for provision from the information bank site 1 based on the consent information, and use it for marketing and the like. Then, the information bank site 1 generates a trail every time an information acquisition request is executed from the data use site 3, stores it in the trail table 64 of the blockchain 6, and shares it with the data providing site 2.

When the personal terminal 400 that has provided personal information requests the information bank site 1 to disclose the trail table 64, it browses when, who, and for what purpose the personal information provided by itself was used. Can be done. In addition, the personal terminal 400 can request the information bank site 1 to correct or delete the personal information table 5 for provision.

In the information distribution system of this embodiment, the consent information table 61 shared by the blockchain 6 is referred to by the business associates of the information bank site 1 and the data providing site 2, and after confirming the consent information table 61, the individual We will exchange personal information for provision based on consent. Since the consent information table 61 is stored in the blockchain 6, falsification can be easily detected.

Further, the information management server 210 calculates a hash value when registering personal information and stores it in the hash value table 63 of the personal information, so that the personal information table 4 or the personal information table 5 for provision can be exchanged. By referring to the hash value each time, tampering can be detected.

In this embodiment, the information bank site 1 receives the usage fee of the personal information table 5 for provision from the data use site 3, and returns the consideration for providing the personal information table 5 for provision to the data provision site 2. In addition, the information bank site 1 may return the consideration to the individual who has consented to the provision of personal information.

In this embodiment, an example in which the consent information table 61, the purpose of use table 62, the hash value table 63 of personal information, and the trail table 64 are stored in one blockchain 6 is shown, but the present invention is limited to this. It is not something that is done. For example, the consent information table 61, the purpose of use table 62, the hash value table 63 of personal information, and the trail table 64 can be managed by an independent blockchain.

Further, the consent information table 61 and the like stored in the blockchain 6 can easily detect the presence or absence of falsification by comparing the hash value included in the latest block with the hash value calculated from the data of the immediately preceding block. can do.

The block of the blockchain 6 is generated and the hash value is calculated by both the ledger management unit 25 of the bank management server 110 at the information bank site 1 and the ledger management unit 25 of the information management server 210 at the data providing site 2. To do.

<System configuration>
FIG. 2 is a block diagram showing an example of an information distribution system that distributes personal information. The information distribution system uses services provided by the data providing site 2 to provide information on a personal terminal 400 used by an individual who registers personal information at the time of use and items of personal information that can be provided by accumulating personal information. The data providing site 2 registered in the bank site 1 and the information bank site 1 that provides the personal information (or the personal information table 5 for provision) of the personal information table 4 to the data use site 3 based on the consent from the personal terminal 400. Includes a data usage site 3 that acquires and uses personal information from an information bank site 1, and a network 70 that interconnects each site and the like.

An individual who provides personal information connects to a data providing site 2 or an information bank site 1 using a personal terminal 400. An authentication device 410 that authenticates using biometric information is connected to the personal terminal 400 and is used for certifying an individual.

Since the data providing sites 2-A to 2-C for accumulating personal information have the same configuration, the data providing sites 2-A will be described below. The data providing site 2-A includes an information management server 210, a database 220, and a blockchain node 240 as computer resources. The information management server 210, the database 220, and the blockchain node 240 may be configured by independent computers, virtual computers, or containers.

The information management server 210 is a trail for confirming the usage status of the personal information management unit 221 that manages the personal information acquired from the personal terminal 400 and the personal information provided to the data usage site 3 via the information bank site 1. Includes management unit 222.

The personal information provided to the data use site 3 is the personal information corresponding to the provideable item table 121 in the personal information table 4, and is the information that the provider (individual) has permitted to provide to the user. ..

The personal information management unit 221 stores the personal information received from the personal terminal 400 in the database 220, registers the items that can be provided to the data use site 3 in the information bank site 1, and provides the personal information table to the data use site 3. Manage 4

The blockchain node 240 manages the blockchain 6 which is distributed and shared with the information bank site 1. The blockchain 6 includes a ledger 60 for storing information and a chain code 30 for realizing a smart contract with respect to the ledger 60.

The ledger 60 includes a consent information table 61, a purpose of use table 62, a hash value table 63 for personal information, and a trail table 64, as will be described later. The chain code 30 includes a consent information management unit 31, a purpose-of-use management unit 32, a personal information management unit 33, and a trail management unit 34 in order to control transactions and the like with respect to the ledger 60.

The consent information management unit 31 controls transactions for the consent information table 61 of the ledger 60. The purpose-of-use management unit 32 controls transactions with respect to the purpose-of-use table 62 of the ledger 60. The personal information management unit 33 controls transactions with respect to the hash value table 63 of personal information in the ledger 60. The trail management unit 34 controls transactions with respect to the trail table 64 of the ledger 60.

The information bank site 1 includes a bank management server 110, a database 120, an authentication server 130, and a blockchain node 140 as computer resources. The bank management server 110, the database 120, the authentication server 130, and the blockchain node 140 may each be configured by an independent calculator, a virtual calculator, or a container. Can be done.

The bank management server 110 receives from the personal information management unit 21 that manages the personal information acquired from the data providing site 2, the consent information management unit 22 that manages the consent information received from the personal terminal 400, and the data use site 3. It includes a purpose-of-use management unit 23 that manages the purpose of use, and a trail management unit 24 that generates a trail and stores it in the blockchain 6.

The personal information management unit 21 manages the personal information acquired from the personal information table 4 of the data providing site 2 in the providing personal information table 5. If the bank management server 110 does not manage the personal information table 5 for provision, the personal information management unit 21 responds to the request for acquisition of personal information from the data use site 3 by the personal information management unit 21. Mediate the acquisition of.

Further, the personal information management unit 21 registers the provideable items received from the data providing site 2 in the provideable item table 121 of the database 120 and provides them to the data use site 3 as described later.

Further, as will be described later, the personal information management unit 21 associates the personal ID on the data providing sites 2-A to 2-C with the personal ID on the bank management server 110 and stores it in the ID information table 122 of the database 120. And manage it.

The consent information management unit 22 uses the consent information management unit 31 of the chain code to store the consent for the purpose of use received from the personal terminal 400 in the consent information table 61 of the blockchain 6. Then, when the consent information management unit 22 provides the personal information to the data use site 3, it verifies that the personal information acquired from the data provision site 2 is based on the consent of the individual.

The purpose of use management unit 23 uses the purpose of use management unit 32 of the chain code to store the purpose of use received from the data use terminal 300 of the data use site 3 in the purpose of use table 62 of the blockchain 6. Then, when the purpose of use management unit 23 provides the personal information to the data use site 3, it verifies that the personal information acquired from the data provision site 2 complies with the purpose of use.

The trail management unit 24 uses the trail management unit 34 of the chain code to receive a request for acquisition of personal information from the data use terminal 300 of the data use site 3, provides personal information of the data provision site 2, and the like. A trail of access or request for personal information is generated and stored in the trail table 64 of the blockchain 6. Further, when the trail management unit 24 receives the viewing request of the trail table 64, the trail management unit 24 acquires the trail of the designated personal ID from the trail table 64 and presents it.

The authentication server 130 uses the authentication unit 131 that authenticates an individual or a user based on the biometric information from the authentication device 410 of the personal terminal 400 or the authentication device 310 of the data utilization site 3, and the use of the individual or the data utilization site 3. It includes a public key management unit 132 that manages a person's public key and authentication information based on biometric information.

Note that the authentication server 130 shows an example of using a private key and a public key using biometric information, but the present invention is not limited to this. It suffices if authentication can be performed with a known or well-known key.

The blockchain node 140 manages the blockchain 6 which is distributed and shared with the data providing site 2. The blockchain 6 includes a ledger 60 for storing information as described above, and a chain code 30 for realizing a smart contract with respect to the ledger 60.

Since the data usage sites 3-X to 3-Z have the same configuration, the data usage sites 3-X will be described below. The data utilization site 3-X includes a data utilization terminal 300 that uses personal information provided by the information bank site 1, and an authentication device 310 for authenticating the biometric information of the person in charge of using the data utilization terminal 300.

The data use terminal 300 acquires personal information from the information bank site 1 based on the purpose of use table 62 and uses it according to a predetermined purpose.

<Bank management server>
FIG. 3 is a block diagram showing an example of the bank management server 110. FIG. 3 shows an example in which the database 120 and the blockchain node 140 are provided by the bank management server 110 among the computer resources of the information bank site 1. The authentication server 130 may be integrated in the bank management server 110.

The bank management server 110 is a computer including a processor 11, a memory 12, a storage device 16, an input device 13, an output device 14, and a communication device 15. The input device 13 is composed of a keyboard, a mouse, or a touch panel. The output device 14 is composed of a display. The communication device 15 is connected to the network 70 and communicates with another computer.

The memory 12 includes a personal information management unit 21, a consent information management unit 22, a purpose-of-use management unit 23, a trail management unit 24, a ledger management unit 25 for realizing the blockchain node 140, and a chain code 30. Is loaded as a program and executed by the processor 11.

As described above, the chain code 30 includes a consent information management unit 31 that controls transactions with respect to the consent information table 61 of the ledger 60, a purpose management unit 32 that controls transactions with respect to the purpose of use table 62 of the ledger 60, and a ledger 60. It includes a personal information management unit 33 that controls transactions with respect to the hash value table 63 of personal information, and a trail management unit 34 that controls transactions with respect to the trail table 64 of the ledger 60.

The processor 11 operates as a functional unit that provides a predetermined function by processing according to the program of each functional unit. For example, the processor 11 functions as the personal information management unit 21 by processing according to the personal information management program. The same applies to other programs. Further, the processor 11 also operates as a functional unit that provides each function of a plurality of processes executed by each program. A computer and a computer system are devices and systems including these functional parts.

The storage device 16 stores a database 120 and a ledger 60 for realizing the blockchain node 140. The personal information table 5 for provision, the item table 121 that can be provided, and the ID information table 122 are stored in the database 120.

The ledger 60 includes a consent information table 61 distributed and shared on the blockchain 6, a purpose of use table 62, a hash value table 63 of personal information, and a trail table 64 as described above.

<Information management server>
FIG. 4 is a block diagram showing an example of the information management server 210. FIG. 4 shows an example in which the information management server 210 provides the database 220 and the blockchain node 240 among the computer resources of the data providing site 2.

The information management server 210 is a computer including a processor 251, a memory 252, a storage device 26, an input device 253, an output device 254, and a communication device 255. The input device 253 is composed of a keyboard, a mouse, or a touch panel. The output device 254 is composed of a display. The communication device 255 is connected to the network 70 and communicates with other computers.

The personal information management unit 221 and the trail management unit 222, the ledger management unit 25 for realizing the blockchain node 240, and the chain code 30 are loaded into the memory 252 as a program and executed by the processor 251. The chain code 30 is the same as the bank management server 110 as described above.

The processor 251 operates as a functional unit that provides a predetermined function by processing according to the program of each functional unit. For example, the processor 251 functions as the personal information management unit 221 by processing according to the personal information management program. The same applies to other programs. Further, the processor 251 also operates as a functional unit that provides each function of a plurality of processes executed by each program. A computer and a computer system are devices and systems including these functional parts.

The storage device 26 stores a database 220 and a ledger 60 for realizing the blockchain node 240. In the database 120, the personal information collected from the personal terminal 400 is stored in the personal information table 4.

The ledger 60 includes a consent information table 61 distributed and shared on the blockchain 6, a purpose of use table 62, a hash value table 63 of personal information, and a trail table 64 as described above.

<Table>
The tables used by each server will be described below. FIG. 10 is a diagram showing an example of the provideable item table 121.

The provideable item table 121 is information input from the information management server 210 of the data providing site 2, and is held by the bank management server 110 of the information bank site 1.

The provideable item table 121 contains an item ID 1211 that stores an item identifier, a provider ID 1212 that stores an identifier of the data providing site 2, a personal information type 1213 that stores the type of personal information, and an item name of personal information. One record includes a personal information item name 1214 to be stored, a 1215 explaining what kind of information the personal information item is, and a sample value 1216 for storing information for presentation.

The item ID 1211 stores the identifier given by the information management server 210. The provider ID 1212 stores an identifier set in the data providing site 2 that provides personal information.

The type of personal information is stored in the personal information type 1213. The item name of personal information is stored in the personal information item name 1214. The item content 1215 stores an explanation of what kind of information the personal information item is. The sample value 1216 stores a sample of data disclosed by the information management server 210 to the data utilization site 3.

The provideable item table 121 holds the types and item names of personal information that the provider of the data providing site 2 has permitted to provide to the data using site 3.

FIG. 11 is a diagram showing an example of the personal information table 4. The personal information table 4 is personal information collected by the information management server 210 of the data providing site 2.

The personal information table 4 stores a personal ID 41 that identifies an individual, a personal information type 42 that indicates the type of personal information, a personal information item name 43 that indicates an item name of personal information, and information corresponding to the personal information item name. The personal information 44 to be used is included in one record.

The personal ID 41 is an identifier given to an individual who is a customer by the information management server 210, and is a unique value in the data providing site 2. The personal information table 5 for provision managed by the bank management server 110 of the information bank site 1 has the personal information type 1213 registered in the provideable item table 121 of FIG. 10 and the personal information item name 1214 in the personal information table 4. The information corresponding to is stored. The format of the personal information table 5 for provision managed by the bank management server 110 is the same as that of the personal information table 4 of FIG. However, as will be described later, the identifier of the personal information table 4 (personal ID 41) is a unique identifier within the data providing site 2, and the identifier of the providing personal information table 5 is a unique identifier within the information bank site 1. There is a difference.

FIG. 12 is a diagram showing an example of the purpose of use table 62. The purpose of use table 62 is information input from the data use terminal 300 of the data use site 3, and is held at the information bank site 1.

The purpose of use table 62 stores the consent pattern ID 621, the user ID 622 that stores the identifier set in the data use site 3, the purpose of use (summary) 623 that stores the outline of the purpose of use, and the details of the purpose of use. Purpose of use (details) 624, provider ID 625 that identifies the provider of personal information, personal information type 626 that stores the type of personal information that you want to use on the data use site 3, and personal information that you want to use on the data use site 3. The personal information item name 627 that stores the item of is included in one record.

The consent pattern ID 621 is an identifier for presenting a plurality of personal information item names 627 when obtaining the consent of an individual, and is given by the bank management server 110. In the illustrated example, the consent pattern ID 621 indicates that the individual consent is obtained for the "electric power data" of "ag1", and the personal information item name 627 indicates that the individual consent is obtained for the two items of "contract type" and "electric power usage". By setting the same value for the consent pattern ID 621 in a plurality of records in this way, it is possible to permit the use of the plurality of personal information item names 627 with one consent.

FIG. 13 is a diagram showing an example of the consent information table 61. The consent information table 61 is generated by the bank management server 110 based on the input from the personal terminal 400, stored in the blockchain 6, and shared by the information bank site 1 and the data providing site 2.

The consent information table 61 is a provider that specifies the consent pattern ID 611, the personal ID 612 for identifying the individual given by the information management server 210 to the personal information, and the data providing site 2 that provides the personal information of the personal ID 612. ID 613 and is included in one record.

In the illustrated example, regarding the personal information held by the data providing site 2 whose provider ID 613 is "A", the individual whose personal ID 612 is "C1" agrees to the data (or data set) whose consent pattern ID 611 is "ag1". Show that you did.

The value of the consent pattern ID 621 of the purpose of use table 62 is set in the consent pattern ID 611, and the value of the provider ID 625 of the purpose of use table 62 is stored in the provider ID 613.

The consent information table 61 stored in the blockchain 6 is managed by the personal ID 612 assigned by the information management server 210 of the data providing site 2 that provides personal information. It is possible to conceal the information as to whether or not you agree with.

FIG. 14 is a diagram showing an example of a hash value table 63 of personal information. The hash value table 63 of personal information is generated by the information management server 210 of the data providing site 2, stored in the blockchain 6, and shared with the information bank site 1.

The hash value table 63 of personal information includes a personal ID 631 that stores an identifier that identifies an individual, a provider ID 632 that stores an identifier that identifies the data providing site 2, and an item name of the personal information table 4 that is the target of the hash value. The personal information item name 633 for storing the personal information, the hash value 634 calculated from the personal information, and the signature 635 for storing the electronic signature preset in the data providing site 2 are included in one record.

The personal ID 41 of the personal information table 4 is stored in the personal ID 631. The provider ID 632 stores an identifier preset in the data providing site 2. In the personal information item name 633, the value of the personal information item name 43 of the personal information table 4 for calculating the hash value is stored.

The hash value 634 stores the hash value calculated by the information management server 210 by a preset function. The signature 635 stores a digital signature preset in the data providing site 2 (or the information management server 210).

The information management server 210 calculates the hash value of the personal information 44 of the personal information table for each personal information item name 633 of the personal ID 631 and stores it in the hash value table 63 of the personal information, and the information management server 210 electronically signs it. Is stored in the signature 635 and shared with the information bank site 1 on the blockchain 6.

FIG. 15 is a diagram showing an example of the trail table 64. The trail table 64 is generated by the bank management server 110 of the information bank site 1, stored in the blockchain 6, and shared with the data providing site 2.

The trail table 64 includes an application No. 641 that stores an identifier for identifying an identifier for specifying an access request to the personal information table 5 for provision, and a user ID 642 that stores an identifier of a user or an individual who accesses the personal information table 5 for provision. , The provider ID 643 that stores the identifier that identifies the data providing site 2 that provided the personal information table 5 for provision of the access target, the application content 644 that stores the type of access to the personal information table 5 for provision, and the access target. One record includes a pattern ID 645 for storing an identifier of personal consent given to personal information for provision, a signature 646 for storing a user's signature, and a time stamp 647 for storing an access date and time.

When the bank management server 110 of the information bank site 1 receives an access request to the personal information table 5 for provision from the data use terminal 300 or the personal terminal 400, the application No. 641 is numbered and a new record is added to the trail table 64. Then, it is stored in the blockchain 6 and shared with the data providing site 2.

FIG. 16 is a diagram showing an example of the ID information table 122. The ID information table 122 is generated by the bank management server 110 of the information bank site 1 and stored in the database 120.

The ID information table 122 stores the personal ID (information bank management) 1221 given by the bank management server 110 as an identifier in the information bank site 1 and the identifier of the data providing site 2 that holds the personal information table 4 of the personal ID 1221. The provider ID 1222 to be used and the personal ID (provider management) 1223 for storing the personal identifier given by the data providing site 2 are included in one record.

When the bank management server 110 acquires the data of the personal information table 4 from the information management server 210 of the data providing site 2, the bank management server 110 can identify the identifier given to the individual at the data providing site 2 and the individual such as a name and an address. Get information. When the same individual exists on different data providing sites 2, the bank management server 110 assigns the same identifier to the personal ID (information bank management) 1221.

The bank management server 110 stores the identifier of an individual who uses a different data providing site 2 in the personal ID (provider management) 1223, and separately stores the identifier in the information bank site 1 (personal ID (information bank management) 1221). In the personal information table 5 for granting and providing, the personal ID (information bank management) 1221 is used.

This makes it possible to prevent the identifier used in the data providing site 2 from being disclosed to the data using site 3.

<Processing>
FIG. 5 is a sequence diagram showing an example of the registration process of the items that can be provided and the personal information performed in the information distribution system.

When the provider who manages the personal information table 4 at the data providing site 2 determines the item name of the personal information table 4 to be provided to the information bank site 1, the bank management server of the information bank site 1 via the information management server 210. Request the registration of personal information that can be provided to 110 (S1).

The bank management server 110 outputs the registration screen 1700 of the personal information item that can be provided as shown in FIG. 17, and the personal information type 1213, the personal information item name 1214, the item content 1215, and the sample value are output from the information management server 210. Accepts 1216.

From the information management server 210, the bank management server 110 includes a sample of personal information type 1213 indicating the type of personal information, personal information item name 1214 indicating the item name of personal information, and item content 1215 indicating the content of personal information. A new record is added to the available item table 121 by accepting the value 1216, and the item ID 1211 is assigned (S2). The bank management server 110 notifies the information management server 210 of the data providing site 2 of the completion of registration (S3).

By the above processing, the bank management server 110 of the information bank site 1 registers new items that can be provided with personal information in the item table 121 that can be provided.

Next, in order to purchase goods and use services on the data providing site 2, the personal terminal 400 accesses the information management server 210 of the data providing site 2 and inputs personal information (S4).

The information management server 210 stores the personal information received from the personal terminal 400 in the personal information table 4 of the database 220 (S5). The information management server 210 calculates the hash value of the registered personal information using a preset function (S6), and acquires the electronic signature of the data providing site 2 (or the information management server 210) in which the personal information is registered. Then, the hash value and the electronic signature are stored in the hash value table 63 of the personal information of the blockchain 6 (S8).

The hash value 634 stored in the hash value table 63 of personal information is shared with the bank management server 110 of the information bank site 1 by the blockchain 6 (S9). By the above processing, new personal information is stored in the personal information table 4 of the data providing site 2, and a new record is added to the hash value table 63 of the personal information of the blockchain 6.

FIG. 6 is a sequence diagram showing an example of the purpose of use registration process performed in the information distribution system.

The user of the data use site 3 that uses personal information accesses the bank management server 110 of the information bank site 1 via the data use terminal 300, and requests the provideable item table 121 (S11).

When requesting the provideable item table 121, biometric information for certifying the user (person in charge) is input from the authentication device 310 connected to the data use terminal 300, and authentication based on the biometric information is performed. To do. The authentication based on biometric information is the same as above, and a well-known technique may be used, so the description thereof will be omitted.

The bank management server 110 acquires the provideable item table 121 from the database 120 (S12) and responds to the data use terminal 300 (S13).

The user (person in charge) who operates the data use terminal 300 selects a provideable item to be used from the provideable item table 121 on the registration screen 1800 shown in FIG. 18 (S14), and requests registration of the purpose of use (S14). S15).

On the registration screen 1800, a provider name 1801 for designating the data providing site 2, a personal information type 1802, and a personal information item name 1803 can be input, and the data using terminal 300 sets a value for any of the items. The search button 1804 is operated to search the provideable item table 121.

The search results are displayed in the provider name 1810, the personal information type 1213 in the provideable item table 121, and the personal information item name 1214. The user of the data use terminal 300 selects the line selection switch 1820 of the used data, inputs necessary items into the purpose of use (overview) 623 and the purpose of use (details) 624, and operates the registration button 1821. Then, the registration request is carried out.

The bank management server 110 registers the input purpose of use in the purpose of use table 62 of the blockchain 6 (S16) and shares it with the data providing site 2 (S17). The bank management server 110 assigns the consent pattern ID 621 to the new record in the purpose of use table 62. In this embodiment, if the same personal information type 626 is used, the same consent pattern ID is given, but the present invention is not limited to this. Then, the bank management server 110 notifies the data use terminal 300 that the registration of the purpose of use has been completed (S18).

By the above processing, the information bank site 1 adds a new purpose of use table 62 to the blockchain 6.

FIG. 7 is a sequence diagram showing an example of the consent information registration process performed in the information distribution system.

An individual who uses the personal terminal 400 provides personal information to the bank management server 110 of the information bank site 1 in order to consent to provide the personal information stored in the data providing site 2 to the data using site 3. (S21). At the time of request, biometric information for proving that the person is the provider of personal information is input from the authentication device 410 connected to the personal terminal 400, and authentication based on the biometric information is performed. The authentication based on biometric information is the same as above, and a well-known technique may be used, so the description thereof will be omitted. The bank management server 110 relays the request for providing personal information and relays the request for acquiring personal information to the information management server 210 of the data providing site 2 (S22).

The information management server 210 acquires the data of the personal information table 4 specified in the personal information acquisition request from the database 220 (S23), and responds to the bank management server 110 (S24). In this embodiment, the acquisition of personal information between the personal terminal 400 and the information management server 210 of the data providing site 2 is relayed through the bank management server 110, but the present invention is not limited to this. Absent. For example, it is desirable to use authentication such as OAuth 2.0.

When the bank management server 110 acquires the data of the personal information table 4 from the information management server 210, it determines whether the same person as the designated individual has already been registered from the personally identifiable information such as the name and address. If it is already registered, the registered personal ID (information bank management) 1221 of the ID information table 122 is given to the individual, and a new record is added to the ID information table 122 (S25).

Next, the bank management server 110 acquires the purpose of use for using personal information from the purpose of use table 62 of the blockchain 6 (S26). The information management server 210 responds to the personal terminal 400 with the requested personal information and the purpose of use (S27). For example, the bank management server 110 outputs the consent information registration screen 1900 to the personal terminal 400 as shown in FIG. 19, and displays the personal information and the purpose of use.

On the consent information registration screen 1900, the provider name (name of the data providing site 2), ID and password are entered in the personal information search form 1901, and the search button is operated to register the consent information in advance on the data providing site 2. The personal information facing the ID and the purpose of use set in the personal information are displayed.

As the personal information, the provider name 1902, the personal information type 42 of the personal information table 4, the personal information item name 43, and the personal information 44 are displayed. As the purpose of use, the user name 1903 corresponding to the user ID 622 of the purpose of use table 62, the purpose of use (summary) 623, and the purpose of use (details) 624 of the purpose of use table 62 are displayed.

The individual who operates the personal terminal 400 confirms the registration screen 1900, and if he / she accepts the user name 1903 and the purpose of use 623 that use the personal information item name 43, he / she operates the check box of the agreement 1904. Operate the registration button 1905. By this process, the selection of the consent target (S28) and the registration request of the consent information (S29) of FIG. 7 are carried out.

When the bank management server 110 receives consent from the personal terminal 400, it acquires the consent pattern ID 621 and the provider ID 625 from the purpose of use table 62, obtains the personal ID (information bank management) 1221 from the ID information table 122, and agrees. Information is generated and registered in the consent information table 61 of the blockchain 6 (S30).

The consent information table 61 stored in the blockchain 6 is shared with the data providing site 2 (S31). The bank management server 110 notifies the personal terminal 400 that the registration of the consent information has been completed (S32).

By the above processing, the individual requests consent from the personal terminal 400 to the bank management server 110 of the information bank site 1, and confirms his / her personal information and the purpose of use and user name set in the item of personal information. You can consent to the use of personal information.

FIG. 8 is a sequence diagram showing an example of personal information provision processing performed in the information distribution system. In the following example, the information bank site 1 relays the distribution of personal information between the data providing site 2 and the data using site 3 without using the personal information table 5 for providing the information bank site 1. Shown.

The data use terminal 300 of the data use site 3 requests the provision of personal information based on a preset purpose of use (S41). In the request for providing personal information, an example of specifying the personal information to be used by the personal information type or the personal information item name is shown. Further, when requesting the provision of personal information, as described above, the authentication device 310 is used to perform authentication based on the biometric information of the person in charge.

The bank management server 110 that has received the request refers to the provideable item table 121 or the purpose of use table 62, and refers to the provider ID 1212 or the provider of the data providing site 2 that stores the requested personal information type or personal information item name. 625 is specified (S42).

The bank management server 110 acquires the user ID, the provider ID 1212, and the consent pattern ID 611 of the consent information table 61, acquires the user's electronic signature, and adds a new record to the trail table 64 (S13). ). The bank management server 110 assigns the application No. 641 and the time stamp 647. Further, the user's electronic signature may be a public key or the like based on biometric information.

The record added to the trail table 64 is shared with the data providing site 2 by the blockchain 6 (S44). The bank management server 110 requests the data providing site 2 specified in step S42 to provide personal information (S45). The request for providing personal information includes a user ID 642 and a consent pattern ID 611.

The information management server 210 of the data providing site 2 searches the trail table 64 from the user ID 642 and the consent pattern ID 611, and determines that the user's signature 646 is valid (S46).

Next, the information management server 210 acquires the personal information type 626 and the personal information item name 627 corresponding to the consent pattern ID 621 of the usage purpose table 62 of the blockchain 6. Further, the personal ID 612 that matches the consent pattern ID 621 is acquired from the consent information table 61. The personal information type 626 corresponding to the personal ID 612 and the personal information corresponding to the personal information item name 627 are acquired from the personal information table 4 of the database 220 (S47).

The information management server 210 adds the user ID of the data usage site 3 and the trail that provided personal information with the consent pattern ID to the trail table 64 of the blockchain 6, and electronically signs the information management server 210 and the time stamp 647. Is recorded (S48). The trail table 64 to which a new record is added is shared by the blockchain 6 with the bank management server 110 (S49).

The information management server 210 responds to the bank management server 110 with the personal information acquired from the personal information table 4 (S50). The bank management server 110 that has received the personal information has the personal information type 626 and the personal information item name 627 corresponding to the consent pattern ID 621 of the purpose of use table 62 of the blockchain 6, and the personal information type and the personal information item of the received personal information. Make sure it matches the name. Further, it is confirmed that the personal ID 612 corresponding to the consent pattern ID 621 in the consent information table matches the received personal information ID (S51).

The bank management server 110 acquires the hash value 634 from the hash value table 63 of the personal information of the blockchain 6 if the personal information matches the consent pattern ID 611. Then, a hash value is calculated for each personal ID of the acquired personal information, it is determined that the acquired personal information matches the hash value 634, and falsification is detected (S52).

Next, when the bank management server 110 acquires personal information from a plurality of data providing sites 2, the personal ID (information provider management) 1223 of each data providing site 2 and the personal ID (information) assigned by the bank management server 110 (Bank management) 1221 is associated, and the same personal ID (information bank management) 1221 is set for the same individual (S53).

Finally, the bank management server 110 provides the personal information acquired from the data providing site 2 to the data using terminal 300 of the data using site 3 and ends the process (S54).

By the above process, the bank management server 110 acquires personal information based on the consent information from the information management server 210 of the data providing site 2, detects the validity of the consent content and the falsification of the personal information, and then performs the data. It is possible to provide personal information to the data usage terminal 300 of the usage site 3. As a result, personal information can be distributed among the business associates of the data providing site 2, the information bank site 1, and the data using site 3 while observing the contents agreed by the individual.

FIG. 9 is a sequence diagram showing an example of browsing processing of the trail table 64 performed in the information distribution system.

The personal terminal 400 accesses the bank management server 110 of the information bank site 1 by using authentication using biometric information, and requests a trail of personal information (S61). The bank management server 110 acquires the personal ID from the authentication information and the like, and acquires the consent pattern ID 611 that the individual has agreed to from the consent information table 61.

Then, the bank management server 110 searches the trail table 64 of the blockchain 6 with the search condition specified as the consent pattern ID 611 (S62), and provides the corresponding record to the personal terminal 400 (S63).

FIG. 20 is a diagram showing an example of the trail search screen 2000. The search screen 2000 includes search conditions 2001 and search results (2011 to 2018).

In the search condition 2001, the provider name (name of the data providing site 2), the personal information type, the user name (name of the data using site 3), and the providing period (date and time) can be specified.

The search results include the provider name 2011, the personal information type 2012, the personal information item name 2013, the item value 2014, the user name 2015, the purpose of use (summary) 2016, and the purpose of use (details) 2017. , The date and time of provision 2018 is included.

The provider name 2011 is the name of the data providing site 2 corresponding to the provider ID 643 of the trail table 64. The personal information type 2012 and the personal information item name 2013 are the personal information type 626 and the personal information item name 627 corresponding to the consent pattern ID 611. The user name 2015 is the name of the data usage site 3 corresponding to the user ID 642 in the trail table 64.

The purpose of use (summary) 2016 and the purpose of use (details) 2017 are the purpose of use (summary) 623 and the purpose of use (details) 624 of the purpose of use table 62 corresponding to the consent pattern ID 621. The date and time of provision 2018 is the time stamp 647 of the trail table 64.

As described above, the individual who provided the personal information can confirm how his / her personal information is used via the personal terminal 400. Further, by sharing the trail table 64 between the information bank site 1 and the data providing site 2 participating in the information distribution system, it is possible to easily verify that the processing based on the individual consent information is surely performed. ..

For example, when an individual applies for deletion or update of personal information, the result can be confirmed by the trail table 64. This makes it possible to ensure compliance or execution of the consent and request of the individual who provides personal information.

In the above embodiment, an example of distributing personal information has been described, but the present invention is not limited to this. For example, information such as information assets and inventories of goods may be distributed between specific companies among companies.

<Conclusion>
The information distribution system of the above embodiment can have the following configuration.

(1) Communicating with a first computer (information management server 210) having a processor (251), a memory (252), and a communication device (255) and collecting information, a processor (11), and a memory (12). A second computer (bank management server) having the device (15) and providing the information (personal information) collected by the first computer (210) to the outside (data use terminal 300 of the data use site 3). 110), the second computer (110) receives the usage conditions of the information provided to the outside (300) and uses the purpose of use management unit (32) via the purpose of use management unit (32). Accepts consent to the terms of use for providing the information (4) collected by the purpose of use management unit (23) stored in the information (purpose of use table 62) and the first computer (210) to the outside (300). When the consent information management unit (22) stored in the consent information (consent information table 61) and the acquisition request of the information (4) are received via the consent information management unit (31), the terms of use having the consent. Then, the information management unit (personal information management unit 21 personal information management unit 33) and the trail management unit (34) that acquire the information (4) collected by the first computer (210) and provide it to the outside (300). ), And a trail management unit (24) that generates a trail indicating that the acquisition request of the information (4) or the provision of the information has been performed and stores it in the trail information (trail table 64). The second computer (110) stores the purpose of use information (62), the consent information (61), and the trail information (64) in the blockchain (6), and stores the first computer (210). ), An information distribution system characterized by sharing with.

With the above configuration, the consent information shared on the blockchain is referred to by the business parties (specific providers (individuals) and information banks) who use the external computer (data use terminal 300), and the validity of the consent information is verified. After confirmation, it is possible to send and receive reliable information based on the consent of the individual.

(2) In the information distribution system according to (1) above, the trail management unit (24) receives a request for viewing the trail, and the blockchain (6) via the trail management unit (34). An information distribution system characterized in that the trail corresponding to the browsing request is acquired and output from the trail information (64) stored in.

With the above configuration, the individual who provided the personal information can confirm from the trail table 64 how his / her personal information is used via the personal terminal 400. Further, by sharing the trail table 64 between the information bank site 1 and the data providing site 2 participating in the information distribution system, it is possible to easily verify that the processing based on the individual consent information is surely performed. ..

(3) The information distribution system according to (1) above, wherein the consent information management unit (22) performs authentication based on biometric information when accepting the consent. system.

With the above configuration, fraud such as spoofing can be prevented by proving the person who provides personal information by authentication based on biometric information.

(4) In the information distribution system according to (1) above, the first computer (210) generates a hash value (634) of the collected information (4) to generate the blockchain (6). ) Is stored in the hash value information (hash value table 63 of personal information), and the personal information management unit (21) of the second computer (110) acquires the information from the first computer (210). Then, the hash value of the personal information is calculated, and the hash value information stored in the blockchain is compared with the hash value corresponding to the personal information to detect falsification, which is an information distribution system.

With the above configuration, the bank management server 110 detects falsification of personal information by calculating and comparing the hash value 634 shared by the blockchain 6 with the hash value of personal information acquired from the information management server 210. be able to.

(5) In the information distribution system described in (1) above, the consent information management unit (22) obtains the content of the consent received through the consent information management unit (31) in the information (4). An information distribution system characterized in that the item (personal information item name 627) and the user (user ID 622) are managed by the consent pattern identifier (consent pattern ID 621).

With the above configuration, the consent information table 61 stored in the blockchain 6 is managed by the consent pattern ID 611 that can be identified only by the parties (individuals and the provider of the information (data providing site) and the information bank). Can be concealed.

(6) In the information distribution system according to (1) above, the second computer (110) is connected to a plurality of the first computers (210), and the personal information management unit (21) When the information (4) is acquired from the first computer (210), the identifier of the first computer (210) that manages the provider (individual) of the information (4) is first provided. A second provision indicating the provider (individual) who provided the information (4) to the information acquired as the original identifier (personal ID (provider management) 1223) and acquired from the first computer (210). The original identifier (personal ID (information bank management)) 1221 is assigned, and the pair of the first provider identifier (1223) and the second provider identifier (1221) is managed as ID information (ID information table 122). When the first provider identifier (1223) acquired from the plurality of first computers (210) is the same provider (individual), the second provider of the ID information (122) An information distribution system characterized in that the same identifier is set for the identifier (1221).

With the above configuration, it is possible to manage the personal ID (provider management) 1223, which is different for each data providing site that provides personal information, in association with the personal ID (information bank management) 1221 at the information bank site 1.

(7) In the information distribution system according to (1) above, the information collected by the first computer (210) includes confidential information (personal information table 4), and the second computer (110) The consent received by the consent information management unit (22) is the consent of the confidential information provider (individual), and the consent is the consent of the parties to the confidential information and the first computer that is the provider of the confidential information. An information distribution system characterized in that only (210) and the second computer (110) can be identified.

With the above configuration, the consent information shared on the blockchain is referred to by specific providers, individuals, and information banks, and after confirming the validity of the consent information, reliable information is exchanged based on the consent of the individual. It becomes possible.

The present invention is not limited to the above-described embodiment, and includes various modifications. For example, the above-described embodiment is described in detail in order to explain the present invention in an easy-to-understand manner, and is not necessarily limited to the one including all the configurations described. Further, it is possible to replace a part of the configuration of one embodiment with the configuration of another embodiment, and it is also possible to add the configuration of another embodiment to the configuration of one embodiment. Further, for a part of the configurations of each embodiment, any of addition, deletion, or replacement of other configurations can be applied alone or in combination.

Further, each of the above configurations, functions, processing units, processing means, etc. may be realized by hardware by designing a part or all of them by, for example, an integrated circuit. Further, each of the above configurations, functions, and the like may be realized by software by the processor interpreting and executing a program that realizes each function. Information such as programs, tables, and files that realize each function can be placed in a memory, a hard disk, a recording device such as an SSD (Solid State Drive), or a recording medium such as an IC card, an SD card, or a DVD.

In addition, the control lines and information lines indicate those that are considered necessary for explanation, and not all control lines and information lines are necessarily indicated on the product. In practice, it can be considered that almost all configurations are interconnected.

Claims (15)

1. A first computer that has a processor, memory, and a communication device to collect information,
   An information distribution system having a processor, a memory, and a communication device, and having a second computer that provides information collected by the first computer to the outside.
   The second computer is
   The purpose of use management unit that accepts the terms of use of the information provided to the outside and stores it in the purpose of use information,
   The consent information management unit that accepts the consent to the terms of use provided to the outside and stores the information collected by the first computer in the consent information.
   Upon receiving the request for acquisition of the information, the information management unit that acquires the information collected by the first computer and provides it to the outside under the terms of use with the consent.
   It has a trail management unit that generates a trail indicating that the information acquisition request or the information has been provided and stores it in the trail information.
   The second computer is
   An information distribution system characterized in that the purpose of use information, the consent information, and the trail information are stored in a blockchain and shared with the first computer.
2. The information distribution system according to claim 1.
   The trail management department
   An information distribution system characterized in that it receives a viewing request for the trail, acquires the trail corresponding to the viewing request from the trail information stored in the blockchain, and outputs the trail.
3. The information distribution system according to claim 1.
   The consent information management department
   An information distribution system characterized by performing authentication based on biometric information when accepting the consent.
4. The information distribution system according to claim 1.
   The first computer is
   A hash value of the collected information is generated and stored in the hash value information of the blockchain.
   The information management unit of the second computer
   When the information is acquired from the first computer, the hash value of the information is calculated, and the hash value information stored in the blockchain is compared with the hash value corresponding to the information to detect falsification. An information distribution system that features it.
5. The information distribution system according to claim 1.
   The consent information management department
   An information distribution system characterized in that the content of the received consent is managed by an item that provides the information and a consent pattern identifier that identifies a user.
6. The information distribution system according to claim 1.
   The second computer is connected to a plurality of the first computers.
   The information management department
   When acquiring the information from the first computer, the identifier of the first computer that manages the provider of the information is acquired as the first provider identifier.
   A second provider identifier indicating the provider who provided the information is added to the information obtained from the first computer.
   When the pair of the first provider identifier and the second provider identifier is managed as ID information and the first provider identifier obtained from the plurality of first computers is the same provider, the same provider is used. An information distribution system characterized in that the same identifier is set for the second provider identifier of the ID information.
7. The information distribution system according to claim 1.
   The information collected by the first computer includes confidential information.
   The consent received by the consent information management unit of the second computer is the consent of the provider of the confidential information.
   The information distribution system is characterized in that the consent can be identified only by the parties to the confidential information, the first computer that is the provider of the confidential information, and the second computer.
8. Information by a first computer having a processor, a memory and a communication device to collect information, and a second computer having a processor, a memory and a communication device and providing the information collected by the first computer to the outside. It is an information distribution method that distributes
   A usage purpose management step in which the second computer receives the usage conditions of the information provided to the outside and stores the usage conditions in the usage purpose information.
   The second computer accepts the consent to the terms of use that provides the information collected by the first computer to the outside, and the consent information management step that makes the consent information horny.
   When the second computer receives the request for acquisition of the information, the information management step of acquiring the information collected by the first computer and providing it to the outside under the terms of use with the consent.
   A trail management step in which the second computer generates a trail indicating that the acquisition request for the information or the provision of the information has been performed and stores the trail in the trail information.
   A sharing step in which the second computer stores the purpose of use information, the consent information, and the trail information in a blockchain and shares the information with the first computer.
   An information distribution method characterized by including.
9. The information distribution method according to claim 8.
   The trail management step
   An information distribution method comprising receiving a viewing request for a trail, acquiring the trail corresponding to the viewing request from the trail information stored in the blockchain, and outputting the trail.
10. The information distribution method according to claim 8.
    The consent information management step is
    An information distribution method characterized by performing authentication based on biometric information when accepting the consent.
11. The information distribution method according to claim 8.
    The first computer is
    A hash value of the collected information is generated and stored in the hash value information of the blockchain.
    The information management step of the second computer is
    When the information is acquired from the first computer, the hash value of the information is calculated, and the hash value information stored in the blockchain is compared with the hash value corresponding to the information to detect falsification. Characteristic information distribution method.
12. The information distribution method according to claim 8.
    The consent information management step is
    An information distribution method characterized in that the content of the received consent is managed by an item for providing the information and a consent pattern identifier that identifies a user.
13. The information distribution method according to claim 8.
    The second computer is connected to a plurality of the first computers.
    The information management step
    When acquiring the information from the first computer, the identifier of the first computer that manages the provider of the information is acquired as the first provider identifier.
    A second provider identifier indicating the provider who provided the information is added to the information obtained from the first computer.
    When the pair of the first provider identifier and the second provider identifier is managed as ID information and the first provider identifier obtained from the plurality of first computers is the same provider, the same provider is used. An information distribution method, characterized in that the same identifier is set for the second provider identifier of the ID information.
14. The information distribution method according to claim 8.
    The information collected by the first computer includes confidential information.
    In the consent information management step,
    The consent received by the second calculator is
    It is the consent of the provider of the confidential information.
    The information distribution method is characterized in that the consent is managed by an identifier that can be identified only by the parties to the confidential information, the first computer that is the provider of the confidential information, and the second computer.
15. A storage medium in which a computer having a processor, a memory, and a communication device stores a program for acquiring information from the outside and providing the information to the outside.
    A purpose management step that accepts the terms of use of the information to be provided to the outside and stores the terms of use in the purpose of use information.
    The consent information management step, which accepts the consent to the terms of use for providing the information collected by the first computer to the outside, and makes the consent information angry,
    Upon receiving the information acquisition request, the information management step of acquiring the information collected by the first computer and providing it to the outside under the terms of use with the consent, and
    A trail management step that generates a trail indicating that the information acquisition request or the information has been provided and stores it in the trail information.
    A sharing step for storing the purpose of use information, the consent information, and the trail information in the blockchain.
    A non-temporary computer-readable storage medium that stores a program for causing the computer to execute.

Images