WO2022249293A1

WO2022249293A1 - Control method, control program, information processing system, and information processing device

Info

Publication number: WO2022249293A1
Application number: PCT/JP2021/019841
Authority: WO
Inventors: 孝一矢崎; 大山本; 洋介中村; 忠信角田; 陸大小嶋
Original assignee: 富士通株式会社
Priority date: 2021-05-25
Filing date: 2021-05-25
Publication date: 2022-12-01
Also published as: JPWO2022249293A1

Abstract

Upon receiving, from a first terminal, first information that identifies data of a first user as stored in a cloud storage and second information that identifies a second user who is a recipient of data, this information processing device transmits third information that indicates that a data provider is the first user and the recipient of data is the second user, and fourth information that indicates signature information of an information processing device relating to the third information, to the first terminal. Upon receiving, from a second terminal, the first information, the third information, the fourth information, and fifth information that indicates a data storage destination, the information processing device outputs an instruction to store data in the storage destination.

Description

Control method, control program, information processing system and information processing device

The present invention relates to control methods and the like.

　There is a demand for secure data sharing between senders and receivers in an environment where receiver authentication is not performed. In the following explanation, an environment in which recipient authentication is not performed in advance is appropriately referred to as an environment without presetting (Trusted Setup).

For example, in an environment without presetting, conventional technology 1, conventional technology 2, etc. are used to share data between the sender and the receiver.

FIG. 13 is a diagram for explaining prior art 1. FIG. In prior art 1, when data is shared between a sender and a receiver, a method of PPAP (Pre send Password file After send Password) is adopted.

In the example shown in FIG. 13, the sender 10A encrypts the personal data 2 using a predetermined tool 3 and saves it in the storage 4a of the terminal of the sender 10a. The tool 3 also transmits the encrypted data 2a and the password 2b for decrypting the encrypted data 2a to the terminal of the recipient 10B. The encrypted data 2a and password 2b are stored in the storage 4b of the terminal of the recipient 10B. The recipient 10B uses the password 2b to decrypt the encrypted data 2a and refers to the personal data 2. FIG.

In prior art 1, only the encrypted data 2a is stored in the storage 4a of the sender 10A, so even if the terminal of the sender 10A is illegally accessed by a third party, only the encrypted data 2a will be leaked.

However, in prior art 1, since it is premised that the receiver 10B appropriately manages the encrypted data 2a and the password 2b in the storage 4b to prevent information leakage, the problem described in FIG. 14 occurs. do.

FIG. 14 is a diagram for explaining the problem of prior art 1. FIG. For example, encrypted data 2a and password 2b transmitted from sender 10A are stored in reception box 8 of recipient 10B. Here, if the recipient 10B does not perform appropriate management and receives unauthorized access to the reception box 8 from a third party, the encrypted data 2a and password 2b will be read, and the personal data 2 will be leaked.

FIG. 15 is a diagram for explaining conventional technique 2. FIG. In prior art 2, data is shared between a sender and a receiver using storage on the cloud. In the following description, storage on the cloud will be referred to as "cloud storage" as appropriate.

In the example shown in FIG. 15, the sender 10A encrypts the personal data 2 using a predetermined tool 5 and saves it in the storage 4a of the terminal of the sender 10a. The tool 5 places the encrypted data in the cloud storage 6 and restricts access time to a fixed time. In addition, the tool 5 transmits the shared link information 7 that gives access rights to the cloud storage 6 to the terminal of the recipient 10B, and stores it in the reception box 8 or the like.

The shared link information 8 may be set with the password of the encrypted data placed in the cloud storage 6. The recipient 10B accesses the cloud storage 6 and acquires the personal data 2 based on the shared link information 7. FIG.

In prior art 2, access to data placed in cloud storage 6 is restricted by limiting access to only the sender who sent shared link information 7 . Moreover, since the data itself does not exist in the reception box 8, even if the reception box 8 is attacked by a third party as in the prior art 1, the data will not be leaked.

JP-A-2000-253042

However, even with the above-described prior art 2, there is a problem that it is not possible to prevent third parties from viewing information.

FIG. 16 is a diagram for explaining the problem of prior art 2. FIG. For example, a third party can access data placed in the cloud storage 6 if they know the shared link information 7 . Therefore, if the recipient 10B erroneously transfers the shared link information 7 to the third party 10C, the third party 10C can access the cloud storage 6 and obtain the data.

In one aspect, an object of the present invention is to provide a control method, a control program, an information processing system, and an information processing apparatus that can prevent third parties from viewing information.

In the first plan, the information processing device executes the following process as a control method. The information processing device receives, from the first terminal, first information identifying the data of the first user stored in the cloud storage, and second information identifying the second user who is the destination of the data. to receive The information processing device provides third information indicating that the data provider is the first user and the data provider is the second user, and signature information of the information processing device related to the third information. to the first terminal. When the information processing device receives the first information, the third information, the fourth information, and the fifth information indicating the data storage destination from the second terminal, the information processing device stores the data in the storage destination. output instructions to

It is possible to prevent third parties from viewing information.

FIG. 1 is a diagram (1) for explaining the processing of the information processing system according to the embodiment. FIG. 2 is a diagram (2) for explaining the processing of the information processing system according to the embodiment. FIG. 3 is a diagram showing an example of the data structure of a token. FIG. 4 is a diagram (3) for explaining the processing of the information processing system according to the embodiment. FIG. 5 is a diagram (4) for explaining the processing of the information processing system according to the embodiment. FIG. 6 is a functional block diagram showing the configuration of the terminal device 20A according to this embodiment. FIG. 7 is a functional block diagram showing the configuration of the information processing apparatus according to this embodiment. FIG. 8 is a flowchart (1) showing the processing procedure of the information processing apparatus according to the embodiment. FIG. 9 is a flowchart (2) showing the processing procedure of the information processing apparatus according to the embodiment. FIG. 10 is a diagram for explaining other processing of the information processing system. FIG. 11 is a diagram illustrating an example of a hardware configuration of a computer that implements functions similar to those of the information processing apparatus. FIG. 12 is a diagram showing an example of the hardware configuration of a computer that implements the same functions as the terminal device. FIG. 13 is a diagram for explaining prior art 1. FIG. FIG. 14 is a diagram for explaining the problem of prior art 1. FIG. FIG. 15 is a diagram for explaining the prior art 2. FIG. FIG. 16 is a diagram for explaining the problem of prior art 2. FIG.

Hereinafter, embodiments of the control method, control program, information processing system, and information processing apparatus disclosed in the present application will be described in detail based on the drawings. In addition, this invention is not limited by this Example.

FIG. 1 is a diagram (1) for explaining the processing of the information processing system according to this embodiment. In the example shown in FIG. 1, the information processing system has an information processing device 100 and

terminal devices

20A, 20B, and 20C. Although illustration is omitted, the information processing device 100 and the

terminal devices

20A, 20B, and 20C are interconnected via a network.

Let the terminal device 20A be the terminal device of the sender 10A. The terminal device 20B is assumed to be the terminal device of the recipient 10B. The terminal device 20C is assumed to be the terminal device of the third party 10C. FIG. 1 illustrates a case in which the personal data 15 of the sender 10A is provided to the receiver 10B.

An agent 30 is operating in the terminal device 20A. Upon receiving the personal data 15 input, the agent 30 arranges the personal data 15 in the cloud storage CS1 of the sender 10A. The agent 30 transmits the token 16 generated by the information processing device 100 to the terminal device 20B.

The token 16 includes an instruction to move the personal data 15 placed in the cloud storage CS1 of the sender 10A to the cloud storage CS2 accessible only by the recipient 10B.

The terminal device 20B transmits the token 16 to the information processing device 100 upon receiving the operation input of the recipient 10B. Upon receiving the token 16, the information processing apparatus 100 moves the personal data 15 in the cloud storage CS1 to the cloud storage CS2 based on the command of the token 16. FIG. Thereby, the recipient 10B can operate the terminal device 20B to acquire the personal data 15 from the cloud storage CS2.

Next, a case where the recipient 10B erroneously transfers the token 16 to the terminal device 20C will be described. The terminal device 20C transmits the token 16 to the information processing device 100 upon receiving the operation input from the third party 10C. Upon receiving the token 16, the information processing apparatus 100 moves the personal data 15 in the cloud storage CS1 to the cloud storage CS2 based on the command of the token 16. FIG.

Here, since the information processing apparatus 100 moves the personal data 15 based on the command of the token 16, even if the token 16 is received from the terminal device 20C, the personal data 15 in the cloud storage CS1 is Move to cloud storage CS2. In other words, the information processing device 100 never moves the personal data 15 to the cloud storage CS3 or the like of the third party 10C.

As described above, the third party 10C cannot access the cloud storage CS2, so even if the recipient 10B erroneously transfers the token 16 to the terminal device 20C, the personal data 15 by the third party 10C is can be prevented from viewing.

Next, the processing explained with reference to FIG. 1 will be explained more specifically using FIG. FIG. 2 is a diagram (2) for explaining the processing of the information processing system according to the embodiment. As shown in FIG. 2, the information processing system executes the processes of steps S1 to S8 shown below.

The processing of step S1 executed by the information processing system will be explained. Upon receiving the input of the personal data 15, the agent 30 of the terminal device 20A arranges the personal data 15 in the cloud storage CS1 of the sender 10A. Also, the agent 30 moves the personal data 15 in the cloud storage CS1 to the TaaS area TS1 accessible by the information processing device 100 . It is assumed that the personal data 15 is given a data ID (Identification) that can uniquely identify the data. For example, the data ID set in the personal data 15 corresponds to "first information".

The processing of step S2 executed by the information processing system will be described. The agent 30 sends the destination list 11 specified by the sender 10A to the information processing device 100, thereby making a token generation request. In the address list 11, addresses (email addresses, etc.) of terminal devices to which personal data is provided are set. For example, when the personal data 15 is provided to the terminal device 20B of the recipient 10B, the destination list 11 is set with the address of the terminal device 20B. If there are multiple supply destinations, multiple addresses are set in the destination list 11 . In the description of FIG. 2, it is assumed that the address of the terminal device 20B (recipient 10B) is set in the destination list. The addresses set in the destination list 11 correspond to the "second information".

Also, the address set in the destination list 11 is used as information for identifying the recipient's cloud storage. For example, it is assumed that the recipient 10B uses two cloud storages CS2-1 and CS2-2 using the address of the terminal device 20B. In this case, the address of the terminal device 20B set in the destination list 11 identifies the cloud storages CS2-1 and CS2-2.

The processing of step S3 executed by the information processing system will be explained. The information processing apparatus 100 generates a token 16 upon receiving the destination list 11 . FIG. 3 is a diagram showing an example of the data structure of a token. As shown in FIG. 3, this token 16 has an address group, data ID, sender address, nonce, and signature information.

The addresses of the recipient 10B (the terminal device 20B of the recipient 10B) to which the personal data 15 set in the destination list 11 are provided are set in the address group. The data ID is information that uniquely identifies the personal data 15 . As the sender address, the address of the sender 10A (the terminal device 20A of the sender 10A) who provides the personal data 15 is set. A nonce is information used for countermeasures against replay attacks. The signature information is signature information generated by the TaaS key possessed by the information processing apparatus 100 . For example, the information processing apparatus 100 generates signature information by converting data in a predetermined area of the token 16 into a hash value using a hash function and encrypting the hash value using the TaaS key. The address group and sender address included in the token 16 correspond to "third information". The signature information included in the token 16 corresponds to "fourth information".

The processing of step S4 executed by the information processing system will be described. The agent 30 acquires the token 16 from the information processing device 100 .

The processing of step S5 executed by the information processing system will be described. The agent 30 transmits the token 16 obtained from the information processing device 100 to the terminal device 20B.

The processing of step S6 executed by the information processing system will be described. When the terminal device 20B receives the token 16 from the agent 30, the terminal device 20B displays screen information indicating that the token 16 (mail from the sender 10A) has been received on the display screen or the like of the terminal device 20B. The recipient 10B operates the terminal device 20B, selects the token 16, and selects one of the cloud storages CS2-1 and CS2-2. In the description of FIG. 2, the receiver 10B selects the cloud storage CS2-1 from among the cloud storages CS2-1 and CS2-2.

The terminal device 20B transmits the token 16 to the information processing device 100 upon receiving the operation from the recipient 10B. Information indicating that the cloud storage CS2-1 has been selected is added to the token 16. FIG. Such selected cloud storage information corresponds to "fifth information".

The processing of step S7 executed by the information processing system will be described. When the information processing device 100 receives the token 16, the information processing device 100 performs the following process. The information processing device 100 authenticates the token 16 based on the signature information included in the token 16 and the TaaS key. For example, the information processing apparatus 100 determines that the authentication of the token 16 has succeeded when the hash value of the data in the predetermined area of the token 16 with the hash function corresponds to the value obtained by decrypting the signature information with the TaaS key.

When the token 16 is successfully authenticated, the information processing device 100 accesses the TaaS area TS1 associated with the sender address of the token 16 and acquires the personal data 15 corresponding to the data ID.

The information processing apparatus 100 is the cloud storage CS2-1 selected by the recipient 10B from among the cloud storages CS2-1 and CS2-2 set in the address group, and corresponds to the cloud storage CS2-1. Identify the TaaS area TS2. The information processing device 100 arranges the personal data 15 in the TaaS area TS2.

The processing of step S8 executed by the information processing system will be explained. The terminal device 20B accesses the cloud storage CS2-1 and moves the personal data 15 arranged in the TaaS area TS2 to the cloud storage CS2-1.

As described above, the information processing system can securely share the personal data 15 between the sender 10A and the receiver 10B by executing the processes of steps S1 to S8. Although not shown in FIG. 2, even if the token 16 is erroneously transferred to the terminal device 20C of the third party 10C, as described in FIG. Since the personal data 15 is stored in the cloud storage CS2-1, information leakage of the personal data 15 can be prevented.

Note that the cloud storage shown in FIG. 2 and the TaaS area may be set in the same storage device. Also, the cloud storage of the sender 10A and the cloud storage of the receiver 10B may be the same cloud storage.

Next, an example of data flow in the information processing system of this embodiment will be described using FIGS. 4 and 5. FIG. 4 and 5 are diagrams (3) and (4) for explaining the processing of the information processing system according to the embodiment.

As shown in FIG. 4, the agent 30 of the terminal device 20A executes authentication processing with the cloud storage CS1 (step S20). If the authentication process succeeds, the agent 30 transmits personal data to the cloud storage CS1 (step S21). Cloud storage CS1 stores personal data (step S22).

The cloud storage CS1 moves the personal data to the TaaS area TS1 according to the agent 30's instruction (step S23). The TaaS area TS1 stores personal data (step S24). The information processing device 100 acquires the personal data saved in the TaaS area TS1 (step S25).

The agent 30 and the information processing device 100 execute authentication processing (step S26). When the authentication process is successful, the agent 30 transmits the destination list to the information processing device 100 (step S27).

The information processing device 100 generates a token (step S28). The information processing device 100 transmits the token to the agent 30 (step S29). The agent 30 transmits the token received from the information processing device 100 to the terminal device 20B (step S30).

Move to the description of Fig. 5. The terminal device 20B transmits the token received from the agent 30 of the terminal device 20A to the information processing device 100 (step S31).

The information processing device 100 identifies the destination of the personal data based on the token (step S32). The information processing device 100 moves the personal data to the TaaS area TS2 (step S33). The TaaS area TS2 stores personal data (step S34).

The TaaS domain TS2 notifies the terminal device 20B that the personal data has been saved according to the instruction from the information processing device 100 (step S35). The terminal device 20B executes authentication processing with the cloud storage CS2 (step S36).

The TaaS domain TS2 moves the personal data to the cloud storage CS2 according to the instruction from the terminal device 20B that has succeeded in the authentication process (step S37). Cloud storage CS2 stores the personal data (step S38). The terminal device 20B acquires personal data from the cloud storage CS2 (step S39).

Next, an example of the configuration of the terminal device 20A described in FIGS. 1, 2, etc. will be described. The terminal device 20A corresponds to a smart phone, a tablet terminal, a notebook PC (Personal Computer), a PC, or the like. Only functions that are closely related to this embodiment will be described here.

FIG. 6 is a functional block diagram showing the configuration of the terminal device 20A according to this embodiment. As shown in FIG. 6, the terminal device 20A has a communication section 21, an input section 22, a display section 23, a storage section 24, and a control section 25. FIG.

The communication unit 21 performs data communication with the information processing device 100, the terminal device 20B, the cloud storage CS1, etc. via the network. The communication unit 21 is an example of a communication device.

The input unit 22 is an input device for inputting various types of information to the terminal device 20A. For example, sender 10A operates input unit 22 to input personal data 15 . Further, the sender 10A operates the input unit 22 to input the address of the recipient of the personal data 15. FIG.

The display unit 23 is a display device that displays information output from the control unit 25 .

The storage unit 24 has a destination list 11, personal data 15, and a token 16. The storage unit 24 corresponds to semiconductor memory devices such as RAM (Random Access Memory) and flash memory, and storage devices such as HDD (Hard Disk Drive).

The destination list 11 contains addresses to which the personal data 15 is provided. The addresses set in the destination list 11 are designated by the sender 10A.

The personal data 15 is data provided by the sender 10A to the recipient 10B.

The token 16 is information generated by the information processing device 100 . The data structure of token 16 corresponds to the data structure described in FIG.

The control unit 25 has a reception unit 25a and an agent execution unit 25b. The control unit 25 is implemented by hardwired logic such as a CPU (Central Processing Unit), a GPU (Graphics Processing Unit), an ASIC (Application Specific Integrated Circuit), and an FPGA (Field Programmable Gate Array).

The reception unit 25a receives various types of information from the communication unit 21 and the input unit 22. For example, reception unit 25 a receives personal data 15 from communication unit 21 or input unit 22 and stores it in storage unit 24 . Upon receiving the address of the recipient of the personal data 15 , the receiving unit 25 a sets the received address in the destination list 11 .

The agent execution unit 25b executes the agent 30. The contents of processing performed by the agent 30 correspond to the processing of the agent 30 described with reference to FIGS. 1, 2, and 4. FIG. An example of the contents of the processing of the agent 30 will be described below.

The agent 30 performs authentication processing with the cloud storage CS1. For example, the agent 30 uses the user ID and password specified by the sender 10A to issue an authentication request to the cloud storage CS1. The agent 30 stores the personal data 15 in the cloud storage CS1 when the authentication is successful. The agent 30 requests the cloud storage CS1 to move the personal data 15 to the TaaS area TS1.

The agent 30 performs authentication processing with the information processing device 100 . For example, the agent 30 makes an authentication request to the information processing device 100 using the user ID and password specified by the sender 10A. The agent 30 transmits a token generation request to the information processing device 100 when the authentication is successful. For example, the token generation request includes the destination list 11, the data ID for identifying the personal data 15, and the address of the terminal device 20A.

When the agent 30 receives the token 16 from the information processing device 100, the agent 30 transmits the token 16 to the terminal device (for example, the terminal device 20B) of the address set in the destination list 11.

By the way, the configurations of the

terminal devices

20B and 20C described with reference to FIG. 1 and the like correspond to smartphones, tablet terminals, notebook PCs, PCs, etc., so descriptions using functional block diagrams are omitted.

Next, an example of the configuration of the information processing apparatus 100 described with reference to FIGS. 1, 2, etc. will be described. FIG. 7 is a functional block diagram showing the configuration of the information processing apparatus according to this embodiment. As shown in FIG. 7 , the information processing apparatus 100 has a communication section 110 , a storage section 140 and a control section 150 .

The communication unit 110 performs data communication with the

terminal devices

20A, 20B, TaaS areas TS1, TS2, TS3, etc. via the network. Communication unit 110 is an example of a communication device.

The storage unit 140 has a personal data table 141, TaaS key information 142, and a token 16. The storage unit 140 corresponds to semiconductor memory elements such as RAM and flash memory, and storage devices such as HDD.

The personal data table 141 holds personal data (eg, personal data 15) provided by a sender (eg, sender 10A) to a receiver (eg, receiver 10B). Personal data 15 is obtained from the TaaS area TS1. Personal data in the personal data table 141 is associated with a unique data ID.

The TaaS key information 142 is used when generating signature information to be registered in the token 16 and when authenticating the signature information of the token 16.

The token 16 is generated by the control unit 150, which will be described later. The data structure of token 16 corresponds to the data structure described in FIG.

The control unit 150 has a reception unit 151 , a generation unit 152 and a movement control unit 153 . The control unit 150 is realized by hardwired logic such as CPU, GPU, ASIC, FPGA, or the like.

The receiving unit 151 periodically accesses the TaaS area TS1 and acquires the personal data 15. The receiving unit 151 registers the acquired personal data 15 in the personal data table 141 . The receiving unit 151 may access another TaaS area, acquire other personal data, and register it in the personal data table 141 .

The receiving unit 151 receives an authentication request from the agent 30 of the terminal device 20A, and performs authentication based on the user ID, password, etc. received from the agent 30. The receiving unit 151 receives a token generation request from the agent 30 when the authentication is successful. The reception unit 151 outputs the information of the token generation request to the generation unit 152 .

The generation unit 152 is a processing unit that generates the token 16. The generation unit 152 sets the destination list 11, the data ID, and the address of the terminal device 20A included in the token generation request to the address group, data ID, and sender address of the token 16, respectively. The generation unit 152 generates nonce information and sets it in the token 16 .

The generation unit 152 uses the TaaS key information 142 to generate signature information and set it in the token 16 . For example, the generation unit 152 converts the address group, data ID, and sender address set in the token 16 into a hash value using a hash function, encrypts the hash value with the TaaS key information 142, and converts the signature information to Generate.

The generation unit 152 transmits the token 16 generated by the above process to the agent 30 of the terminal device 20A.

The movement control unit 153 is a processing unit that, when receiving the token 16 from the terminal device 20B or the like, moves the personal data 15 registered in the personal data table 141 to the designated TaaS area based on the token 16. For example, the movement control unit 153 executes the following processes.

When the movement control unit 153 receives the token 16, it authenticates whether the token 16 is a proper token. The movement control unit 153 converts the address group, data ID, and sender address set in the received token 16 into hash values using a hash function. The movement control unit 153 decrypts the signature information set in the received token 16 with the TaaS key information. The movement control unit 153 determines that the token 16 is a proper token when the decrypted value and the hash value match. The movement control unit 153 performs authentication using the nonce information set in the token 16 .

When the token 16 is successfully authenticated, the movement control unit 153 acquires the personal data 15 corresponding to the data ID set in the token 16 from the personal data table 141. The movement control unit 153 also identifies the cloud storage to which the personal data 15 is to be moved based on the addresses set in the address group of the token 16 . If there are a plurality of cloud storages corresponding to the address, the movement control unit 153 identifies the cloud storage to be the destination based on the cloud storage selection information given to the token 16 . The movement control unit 153 arranges the personal data 15 in the TaaS area corresponding to the specified cloud storage.

For example, when the destination of the personal data 15 is the cloud storage CS2-1, the movement control unit 153 places the personal data 15 in the TaaS area TS2. When the destination of the personal data 15 is the cloud storage CS2-2, the movement control unit 153 arranges the personal data 15 in the TaaS area TS3.

Next, an example of the processing procedure of the information processing apparatus 100 according to this embodiment will be described. FIG. 8 is a flowchart (1) showing the processing procedure of the information processing apparatus according to the embodiment. As shown in FIG. 8, the receiving unit 151 of the information processing device 100 acquires personal data from the TaaS area and registers the acquired personal data in the personal data table 141 (step S101).

The receiving unit 151 executes authentication processing with the agent of the terminal device (step S102). The receiving unit 151 receives a token generation request from the agent when the authentication is successful (step S103).

The generation unit 152 of the information processing device 100 generates the token 16 based on the token generation request (step S104). The generation unit 152 transmits the generated token 16 to the agent (step S105).

FIG. 9 is a flowchart (2) showing the processing procedure of the information processing apparatus according to this embodiment. As shown in FIG. 9, the movement control unit 153 of the information processing device 100 receives a token from the terminal device (step S201).

The movement control unit 153 executes token authentication (step S202). When the token authentication is successful, the movement control unit 153 acquires personal data corresponding to the data ID of the token from the personal data table 141 (step S203).

The movement control unit 153 identifies the destination TaaS area based on the token and selection information (step S204). The movement control unit 153 moves the personal data to the specified TaaS area (step S205).

Next, the effects of the information processing apparatus 100 according to this embodiment will be described. When receiving the token generation request (destination list 11) from the terminal device 20A, the information processing device 100 generates the token 16 and transmits the token 16 to the terminal device 20A. When information processing apparatus 100 receives token 16 from terminal device 20B, information processing apparatus 100 places personal data 15 placed in TaaS area TS1 in the TaaS area specified by token 16 (for example, TaaS area TS2). . The TaaS area TS2 is an area accessible only by the recipient 10B of the destination list 11 to which the personal data 15 is provided. Therefore, even if the token 16 is erroneously transferred to the terminal device 20C of the third party 10C, information leakage of the personal data 15 can be prevented.

According to the information processing system of the present embodiment, data is not exposed to an unspecified number of people without pre-setting such as common passwords among related parties and which cloud storage is used as the delivery destination of personal data. Personal data can only be shared with the parties concerned.

When the information processing apparatus 100 receives the token 16, the information processing apparatus 100 authenticates the token 16 based on the signature information included in the token 16, and designates the personal data 15 as the token 16 when the authentication is successful. Move to the TaaS area where As a result, the personal data 15 can be moved appropriately.

The information processing device 100 acquires the personal data 15 from the TaaS area TS1 shared with the terminal device 20A. This allows the sender 10A of the terminal device 20A to securely transfer the personal data 15 to the information processing device 100. FIG.

By the way, the processing of the information processing system described above is an example, and other processing may be executed. For example, an agent may be introduced into the terminal device 20B to automate the work of the recipient 10B.

FIG. 10 is a diagram for explaining other processing of the information processing system. Among the processes shown in FIG. 10, the processes of steps S1 to S5 and S7 are the same as the processes of steps S1 to S5 and S7 described with reference to FIG. 3, so description thereof will be omitted. As shown in FIG. 10, an agent 31 operates in the terminal device 20B.

The processing of step S6' executed by the information processing system will be described. Upon receiving the token 16 from the agent 30 of the terminal device 20</b>A, the agent 31 transfers the token 16 to the information processing device 100 . If there are a plurality of cloud storages corresponding to the address of the terminal device 20B, the recipient 10B sets information indicating which cloud storage to use in the agent 31 in advance. The agent 31 provides the token 16 with cloud storage information set in advance.

A description will be given of the processing of step S8', which is timed by the information processing system. The agent 31 accesses the cloud storage CS2-1 and moves the personal data 15 placed in the TaaS area TS2 to the cloud storage CS2-1. For example, the agent 31 rewrites the link destination of the token in the Mail Box to the unique storage (cloud storage CS2-1) of the recipient 10B.

As described above, the recipient 10B can easily obtain the personal data 15 by having the agent 31 act for the recipient 10B.

Next, an example of the hardware configuration of a computer that implements the same functions as the information processing apparatus 100 shown in the above embodiment will be described. FIG. 11 is a diagram illustrating an example of a hardware configuration of a computer that implements functions similar to those of the information processing apparatus.

As shown in FIG. 11, the computer 200 has a CPU 201 that executes various arithmetic processes, an input device 202 that receives data input from the user, and a display 203 . The computer 200 also has a communication device 204 that receives data from an external device, and an interface device 205 that connects with various devices. The computer 200 has a RAM 206 that temporarily stores various information and a hard disk device 207 . Each device 201 - 207 is then connected to a bus 208 .

The hard disk device 207 has a reception program 207a, a generation program 207b, and a movement control program 207c. The CPU 201 reads out the reception program 207a, the generation program 207b, and the movement control program 207c and develops them in the RAM 206. FIG.

The receiving program 207a functions as a receiving process 206a. Generation program 207b functions as generation process 206b. The movement control program 207c functions as a movement control process 206c.

The processing of the receiving process 206a corresponds to the processing of the receiving unit 151. The processing of the generation process 206 b corresponds to the processing of the generation unit 152 . Processing of the movement control process 206 c corresponds to processing of the movement control unit 153 .

It should be noted that the programs 207a to 207c do not necessarily have to be stored in the hard disk device 207 from the beginning. For example, each program is stored in a “portable physical medium” such as a flexible disk (FD), CD-ROM, DVD disk, magneto-optical disk, IC card, etc. inserted into the computer 200 . Then, the computer 200 may read and execute each program 207a to 207c.

Next, an example of the hardware configuration of a computer that implements the same functions as the terminal device 20A (20B) shown in the above embodiment will be described. FIG. 12 is a diagram showing an example of the hardware configuration of a computer that implements the same functions as the terminal device.

As shown in FIG. 12, the computer 300 has a CPU 301 that executes various arithmetic processes, an input device 302 that receives data input from the user, and a display 303 . The computer 300 also has a communication device 304 that receives data from an external device, and an interface device 305 that connects to various devices. The computer 300 has a RAM 306 that temporarily stores various information and a hard disk device 307 . Each device 301 - 307 is then connected to a bus 308 .

The hard disk device 307 has a reception program 307a and an agent execution program 307b. The CPU 301 reads the receiving program 307 a and the agent execution program 307 b and develops them in the RAM 306 .

The receiving program 307a functions as a receiving process 306a. Agent execution program 307b functions as agent execution process 306b.

The processing of the reception process 306a corresponds to the processing of the reception unit 25a. Processing of the agent execution process 306b corresponds to processing of the agent execution unit 25b.

Note that the

programs

307a and 307b do not necessarily have to be stored in the hard disk device 307 from the beginning. For example, each program is stored in a “portable physical medium” such as a flexible disk (FD), CD-ROM, DVD disk, magneto-optical disk, IC card, etc. inserted into the computer 300 . Then, the computer 300 may read and execute the

programs

307a and 307b.

11 destination list 15 personal data 16 token 20A, 20B, 20C terminal device 21, 110 communication unit 22 input unit 23 display unit 24, 140 storage unit 25, 150 control unit 25a reception unit 25b agent execution unit 100 information processing device 141 personal data Table 142 TaaS key information 151 Reception unit 152 Generation unit 153 Movement control unit

Claims

The information processing device receives, from a first terminal, first information identifying data of a first user stored in a cloud storage, and second information identifying a second user who is a destination of the data. is received, third information indicating that the source of the data is the first user and the destination of the data is the second user; transmitting fourth information indicating the signature information of the information processing device to the first terminal;
When the information processing device receives the first information, the third information, the fourth information, and the fifth information indicating the storage destination of the data from the second terminal, the information processing device outputting an instruction to store the data in a storage destination;
A control method characterized by executing a process.
The information processing device further performs authentication processing based on the fourth information, and outputs an instruction to store the data in the storage location when the authentication is successful. Item 1. The control method according to item 1.
2. The control according to claim 1, wherein the information processing device acquires the data stored in a shared area shared by the first terminal and the information processing device in the cloud storage. Method.
When receiving, from a first terminal, first information identifying data of a first user stored in the cloud storage and second information identifying a second user to whom the data is provided, Third information indicating that the source of the data is the first user and the destination of the data is the second user, and signature information of the information processing device related to the third information. sending fourth information indicating to the first terminal,
When the first information, the third information, the fourth information, and the fifth information indicating the storage location of the data are received from the second terminal, the data is stored in the storage location. outputs instructions to store,
A control program that causes a computer to execute processing.
5. The control according to claim 4, further comprising executing a process of performing authentication based on the fourth information, and outputting an instruction to store the data in the storage destination when the authentication is successful. program.
5. The control program according to claim 4, wherein the data stored in a shared area shared by the first terminal and the information processing device in the cloud storage is acquired.
An information processing system having a cloud storage shared between an information processing device, a first terminal, a second terminal, and the information processing device and the first terminal,
The information processing apparatus receives, from the first terminal, first information identifying first user data stored in the cloud storage, and first information identifying a second user who is a destination of the data. 2 information, third information indicating that the source of the data is the first user and the destination of the data is the second user; transmitting fourth information indicating signature information of the information processing device related to the information to the first terminal;
When the information processing device receives the first information, the third information, the fourth information, and the fifth information indicating the storage location of the data from the second terminal, outputting an instruction to store the data in the storage destination;
An information processing system characterized by:
The information processing device further performs authentication processing based on the fourth information, and outputs an instruction to store the data in the storage location when the authentication is successful. Item 8. The information processing system according to item 7.
8. The information according to claim 7, wherein the information processing device acquires the data stored in a shared area shared by the first terminal and the information processing device in the cloud storage. processing system.
When receiving, from a first terminal, first information identifying data of a first user stored in the cloud storage and second information identifying a second user to whom the data is provided, third information indicating that the source of the data is the first user and the destination of the data is the second user; and a signature of the information processing device itself relating to the third information. a generation unit that transmits fourth information indicating information to the first terminal;
When the first information, the third information, the fourth information, and the fifth information indicating the storage location of the data are received from the second terminal, the data is stored in the storage location. and a movement control unit that outputs an instruction to store.
The movement control unit further executes a process of performing authentication based on the fourth information, and outputs an instruction to store the data in the storage destination when the authentication is successful. Item 11. The information processing device according to item 10.
11. The information processing according to claim 10, wherein said cloud storage further comprises a receiving unit for acquiring said data stored in a shared area shared by said first terminal and said information processing apparatus. Device.