WO2022269861A1 - Système de collecte d'informations, système de gestion d'informations, procédé de collecte d'informations et programme - Google Patents

Système de collecte d'informations, système de gestion d'informations, procédé de collecte d'informations et programme Download PDF

Info

Publication number
WO2022269861A1
WO2022269861A1 PCT/JP2021/023955 JP2021023955W WO2022269861A1 WO 2022269861 A1 WO2022269861 A1 WO 2022269861A1 JP 2021023955 W JP2021023955 W JP 2021023955W WO 2022269861 A1 WO2022269861 A1 WO 2022269861A1
Authority
WO
WIPO (PCT)
Prior art keywords
information
basic
encrypted
additional
attribute
Prior art date
Application number
PCT/JP2021/023955
Other languages
English (en)
Japanese (ja)
Inventor
賢治 太田
Original Assignee
日本電信電話株式会社
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 日本電信電話株式会社 filed Critical 日本電信電話株式会社
Priority to PCT/JP2021/023955 priority Critical patent/WO2022269861A1/fr
Publication of WO2022269861A1 publication Critical patent/WO2022269861A1/fr

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules

Definitions

  • the present invention relates to an information collection system, an information management system, an information collection method, and a program for collecting and holding information such as personal information.
  • Non-Patent Literature 1 describes a service that distributes products, services, and advertisements tailored to individuals by using personal attribute information (personal information) collected by personal information holding organizations such as information banks. ing. As a technique for combining tables while making information confidential, a secure calculation technique disclosed in Non-Patent Document 2 is known.
  • An object of the present invention is to provide a technology that allows an information holding organization to easily obtain additional attribute information from an information provider.
  • the information collection system of the present invention includes an information management system and an analysis device.
  • the information management system includes a plaintext basic information recording unit, a basic information encryption unit, an additional information request unit, encrypted basic information recording means, encrypted additional information recording means, information combining means, and encrypted combined information recording means.
  • the plaintext basic information recording unit records plaintext basic information, which is plaintext information of a predetermined basic attribute.
  • the basic information encryption unit outputs encrypted basic information obtained by encrypting the plaintext basic information.
  • the additional information requesting unit requests information on additional attributes, which are attributes other than the basic attributes, from outside the information collecting system based on a request from the analysis device.
  • the encrypted basic information recording means records encrypted basic information.
  • the encrypted additional information recording means externally acquires and records encrypted additional information obtained by encrypting all or part of the basic attribute information and the additional attribute information.
  • the information combining means combines the encrypted basic information and the encrypted additional information based on all or part of the basic attribute information included in the encrypted additional information, and outputs encrypted combined information.
  • the encrypted combination information recording means records the encrypted combination information.
  • the analyzer includes an additional information requesting section and an analysis requesting section.
  • the additional information requesting unit requests the information management system to acquire additional attribute information.
  • the additional attribute information is acquired in an encrypted state, and the encrypted basic information and the encrypted additional information are combined to obtain the encrypted combined information. Subsequent analyzes using encrypted binding information can also be analyzed using secure computation techniques. Therefore, the information of the additional attribute can be maintained in a confidential state with respect to the information holding organization. Therefore, information providers do not have to worry about information leaks, so information holding organizations can easily obtain additional attribute information from information providers such as individuals.
  • FIG. 2 is a diagram showing a functional configuration example of the information collection system according to the first embodiment
  • FIG. FIG. 4 is a diagram showing an example of information on predetermined basic attributes
  • the figure which shows the processing flow after basic information is provided.
  • FIG. 10 is a diagram showing a processing flow for acquiring and recording additional information according to the first embodiment; The figure which shows the processing flow which combines basic information and additional information.
  • FIG. 10 is a diagram showing a functional configuration example of an information collection system according to modification 1;
  • FIG. 10 is a diagram showing a processing flow for acquiring and recording additional information according to Modification 1;
  • the figure which shows the functional structural example of a computer The figure which shows the functional structural example of a computer.
  • FIG. 1 shows a functional configuration example of the information collection system of the first embodiment.
  • the information collection system 10 includes an information management system 50 and an analysis device 300 .
  • the information management system 50 is composed of an information management device 100 and a secure computing system 200 .
  • the secure computing system 200 is composed of N secure computing devices 200 1 , . . . , 200 N .
  • M information providing devices 400 1 is primarily assumed to be a mobile terminal owned by an individual, but may be a database owned by a company.
  • FIG. 2 shows an example of information on predetermined basic attributes.
  • FIG. 3 shows an example of information with added attributes.
  • basic attribute information personal name, gender, age, address, telephone number, and e-mail address are recorded in plaintext (unencrypted) in the plaintext basic information recording unit 190 of the information management device 100.
  • the analysis device 300 wishes to use the information on the purchase frequency of the product group A to search for individuals who are likely to purchase the products, information such as that shown in FIG. 3 is required.
  • an individual cannot easily provide information on the purchase frequency of the A product group.
  • the present invention employs a technique for generating the information shown in FIG. 3 in an encrypted state.
  • the information shown in FIG. 3 is kept secret from both the organization (information holding organization) that owns the information management system 50 and the organization that owns the analysis device 300 (such as a company that sells product A). You can keep it in a solid state.
  • the present invention provides an environment in which an individual (information provider) can easily provide information by using a technique that can conceal information. By providing such an environment, the information holding organization can easily obtain additional attribute information from the information provider.
  • the information management system 50 is composed of an information management device 100 and a secure computing system 200 .
  • the secure computing system 200 is composed of N secure computing devices 200 1 , . . . , 200 N .
  • the information management device 100 includes a plaintext basic information recording unit 190 , a basic information encryption unit 110 and an additional information request unit 130 .
  • the information management device 100 may also include a basic attribute notification unit 120 .
  • the secure computing device 200n includes an information combiner 210n , an analyzer 250n , and a recorder 290n .
  • the information combining units 210 1 , . . . , 210 N constitute an information combining means 210 .
  • the recording unit 290 n records the n-th share of the encrypted basic information, the n-th share of the encrypted additional information, and the n-th share of the encrypted combined information.
  • Encrypted basic information recording means 291 is the part that records shares of the encrypted basic information of the recording units 290 1 , . . . , 290 N .
  • Encrypted additional information recording means 292 is a portion that records shares of the encrypted additional information of the recording units 290 1 , . . . , 290 N .
  • Encrypted combined information recording means 293 is a portion that records shares of encrypted combined information of recording units 290 1 , . . . , 290 N .
  • the analysis device 300 includes an additional information requesting section 320 , an analysis requesting section 340 and an analysis recording section 390 .
  • the analysis device 300 may also include an additional information extraction section 310 and a combination request section 330 .
  • the analysis recording unit 390 records analysis rules to be requested to the information management system 50 .
  • the analysis requesting section 340 requests the analysis recorded by the analysis recording section 390 to the information management system 50 .
  • the information providing device 400m includes a basic information providing section 410m , an additional information encrypting section 420m , an encrypted additional information providing section 430m , and a recording section 490m . Information on various attributes held by individuals is recorded in the recording unit 490m .
  • FIG. 4 is a diagram showing the processing flow after basic information is provided.
  • FIG. 5 is a diagram illustrating a processing flow for acquiring and recording additional information according to the first embodiment.
  • FIG. 6 is a diagram showing a processing flow for combining basic information and additional information.
  • the basic information providing unit 410m sends plaintext basic information, which is plaintext information of a predetermined basic attribute, to the information management device 100 ( S410m ).
  • the information management device 100 records plaintext basic information, which is plaintext information of a predetermined basic attribute, in the plaintext basic information recording unit 190 (S190).
  • the basic information encryption unit 110 outputs encrypted basic information (N shares of the plaintext basic information) obtained by encrypting the plaintext basic information, and sends the encrypted basic information (n-th share) to the secure computing device 200 n .
  • Send The recording unit 290n of the secure computing device 200n records the encrypted basic information (the n -th share of the basic information) ( S291n ).
  • Summarizing steps S291 1 , . . . , S291 N the encrypted basic information recording means 291 records the encrypted basic information (S291).
  • the information management device 100 also includes the basic attribute notification unit 120, the basic attribute notification unit 120 transmits the predetermined basic attribute type to the analysis device 300 (S120).
  • the analysis device 300 records the type of basic attribute in the analysis recording unit 390 (S391).
  • the "types of basic attributes" are personal name, sex, age, address, telephone number, and e-mail address.
  • the additional information extraction unit 310 stores the analysis rule to be requested to the information management system 50 and the types of basic attributes recorded in the analysis recording unit 390. By comparison, attributes that are insufficient with only the basic attributes are extracted, and additional attributes that need to be added are output (S310). If the types of basic attributes are known and the additional information extraction unit 310 is not provided, the administrator who manages the analysis device 300 may specify the additional attributes.
  • the additional information requesting unit 320 of the analysis device 300 requests the information management system 50 to acquire additional attribute information (S320).
  • the information management device 100 of the information management system 50 receives the request, and the additional information requesting unit 130 sends the information of the additional attribute, which is an attribute other than the basic attribute, to the information collection system 10 based on the request from the analysis device 300. is requested to the information providing devices 400 1 , .
  • the additional information encryption unit 420m of the information providing device 400m encrypts all or part of the basic attribute information and the additional attribute information.
  • Encrypted additional information (N shares of additional information) is generated by associating and encrypting the information (S420 m ).
  • the personal name, gender, age, address, telephone number, and e-mail address information which are all of the basic attributes shown in FIG. 2, may be associated with additional attribute information.
  • the email address information may be associated with additional attribute information.
  • the additional information may be associated with information that can identify an individual in the basic attribute information.
  • the encrypted additional information providing unit 430 m transmits the encrypted basic information (the nth share) to the secure computing device 200 n (S430 m ).
  • the recording unit 290n of the secure computing device 200n records the encrypted additional information (the n -th share of the additional information) ( S292n ).
  • steps S292 1 , . (S292). Through the processing of steps S310 to S292, the information management system 50 can acquire the anonymized additional information.
  • the combination requesting section 330 requests the information management system 50 to combine the encrypted basic information and the encrypted additional information (S330).
  • the encrypted basic information and the encrypted additional information may be combined automatically when the information management system 50 records the encrypted additional information. In that case, the connection requesting unit 330 is not required.
  • the information combining means 210 combines the encrypted basic information and the encrypted additional information based on the information of all or part of the basic attributes included in the encrypted additional information to obtain encrypted combined information (encrypted combined information). N shares) are output (S210). More specifically, the information combining units 210 1 , . . . , 210 N of the secure computing devices 200 1 , . Then, the encrypted basic information and the encrypted additional information with matching basic attribute information are combined (S210 1 , . . . , S210 N ).
  • the encrypted combined information recording means 293 records encrypted combined information (N shares of encrypted combined information). That is, the recording unit 290n of the secure computing device 200n records the encrypted combined information (the n -th share of combined information) ( S293n ). Through steps S210 and S293, information obtained by encrypting the information obtained by combining the basic attribute information and the additional attribute information shown in FIG. 3 is recorded in the information management system 50.
  • FIG. 1 the information combining units 210 1 ,
  • the analysis requesting unit 340 of the analysis device 300 requests the information management system 50 to perform analysis according to the analysis rule recorded by the analysis recording unit 390 (S341).
  • the analysis means 250 of the secure computing system 200 of the information management system 50 performs the requested analysis using secure computing (S250), and the analysis device 300 acquires the analysis result (S342).
  • Analysis using secure calculation may be executed by cooperative processing of analysis units 250 1 , . . . , 250 N .
  • the additional attribute information is acquired in an encrypted state, and the encrypted basic information and the encrypted additional information are combined to obtain the encrypted combined information. Subsequent analyzes using encrypted binding information can also be analyzed using secure computation techniques. Therefore, the information of the additional attribute can be maintained in a confidential state with respect to the information holding organization. Therefore, information providers (individuals, etc.) do not need to worry about information (personal information, etc.) leaking out. In such an environment, information holding organizations can easily obtain additional attribute information from information providers such as individuals. [Modification 1]
  • step S320 of the first embodiment the analysis device 300 transmits to the information management system 50 in plaintext what information is required as additional attributes.
  • the information holding organization does not know the additional attribute information itself, but can know what kind of information has been added as additional attribute information (type of additional attribute).
  • the information holding organization does not know the type of the additional attribute.
  • FIG. 7 shows a functional configuration example of the information collection system of Modification 1.
  • FIG. 8 shows a processing flow for acquiring and recording additional information in Modification 1.
  • the secure computing device 201n includes an information combining unit 210n and an analyzing unit 250n as in FIG .
  • secure computing system 201 comprises additional attribute request means 230 .
  • the additional attribute request means 230 is composed of additional attribute request units 230 1 , . . . , 230 N of the secure computing devices 201 1 , .
  • the analysis device 301 includes an encrypted additional information requesting section 325 instead of the additional information requesting section 320 .
  • the information providing device 401m also includes an additional attribute decoding unit 440m .
  • Other configurations are the same as those of the first embodiment.
  • the processing flow after basic information is provided is the same as in FIG. 4, and the processing flow for combining basic information and additional information is the same as in FIG.
  • the analysis device 301 also includes an additional information extraction unit 310
  • the additional information extraction unit 310 stores the analysis rules to be requested to the information management system 51 recorded by the analysis recording unit 390 and the types of basic attributes. By comparison, attributes that are insufficient with only the basic attributes are extracted, and additional attributes that need to be added are output (S310). If the types of basic attributes are known and the additional information extraction unit 310 is not provided, the administrator who manages the analysis device 301 may specify the additional attributes.
  • the encrypted additional information requesting unit 325 of the analysis device 301 encrypts the type of the additional attribute, generates an encrypted additional attribute (N shares indicating the type of the additional attribute) indicating the type of the additional attribute, and encrypts the type of the additional attribute.
  • Information acquisition is requested to the information management system 51 (S325).
  • the secure computing system 201 of the information management system 51 receives the request, and the additional attribute request means 230 sends the information of the additional attribute, which is an attribute other than the basic attribute, to the information collection system 11 based on the request from the analysis device 301. is requested to the information providing devices 401 1 , .
  • the secure computing device 201 n receives one of the N shares (n-th share) indicating the type of additional attribute, and the additional attribute requesting unit 230 n requests based on the request from the analysis device 301 , 401M for information on additional attributes other than the basic attributes ( S230n ) .
  • the information providing device 401 m receives K or more shares among the shares indicating the types of additional attributes, and the additional attribute decoding unit 440 m decodes the types of additional information (S440 m ).
  • the additional information encryption unit 420m of the information providing device 401m encrypts all or part of the basic attribute information and the additional attribute information. Encrypted additional information (N shares of additional information) is generated by associating and encrypting the information (S420 m ).
  • the encrypted additional information providing unit 430 m transmits the encrypted basic information (the nth share) to the secure computing device 201 n (S430 m ).
  • the recording unit 290n of the secure computing device 201n records the encrypted additional information (the n -th share of the additional information) ( S292n ).
  • steps S292 1 , . (S292). Through the processing of steps S310 to S292, the information management system 51 can acquire the anonymized additional information.
  • Embodiment 1 According to the information collection system of Modification 1, the same effects as in Embodiment 1 can be obtained while preventing the information holding organization from knowing the types of additional attributes.
  • the recording unit 2020 of the computer 2000 shown in FIG. 7 reads a program for executing each step of the above method, and the control unit 2010, the input unit 2030, the output unit 2040, the display unit 2050, etc. operate. It can be implemented by
  • a program that describes this process can be recorded on a computer-readable recording medium.
  • Any computer-readable recording medium may be used, for example, a magnetic recording device, an optical disk, a magneto-optical recording medium, a semiconductor memory, or the like.
  • this program is carried out, for example, by selling, assigning, lending, etc. portable recording media such as DVDs and CD-ROMs on which the program is recorded.
  • the program may be distributed by storing the program in the storage device of the server computer and transferring the program from the server computer to other computers via the network.
  • a computer that executes such a program for example, first stores the program recorded on a portable recording medium or the program transferred from the server computer once in its own storage device. Then, when executing the process, this computer reads the program stored in its own recording medium and executes the process according to the read program. Also, as another execution form of this program, the computer may read the program directly from a portable recording medium and execute processing according to the program, and the program is transferred from the server computer to this computer. Each time, the processing according to the received program may be executed sequentially. In addition, the above-mentioned processing is executed by a so-called ASP (Application Service Provider) type service, which does not transfer the program from the server computer to this computer, and realizes the processing function only by its execution instruction and result acquisition. may be It should be noted that the program in this embodiment includes information that is used for processing by a computer and that conforms to the program (data that is not a direct instruction to the computer but has the property of prescribing the processing of the computer, etc.).
  • ASP
  • the device is configured by executing a predetermined program on a computer, but at least part of these processing contents may be implemented by hardware.
  • Information collection system 50 51 Information management system 100, 101 Information management device 110 Basic information encryption unit 120 Basic attribute notification unit 130 Additional information request unit 190 Plaintext basic information recording unit 200, 201 Secure computing system 200 n , 201 n secure computing device 210 information combining means 210 n information combining section 230 additional attribute requesting means 230 n additional attribute requesting section 250 analyzing means 250 n analyzing section 290 n recording section 291 encrypted basic information recording means 292 encrypted additional information recording means 293 Encrypted combined information recording means 300, 301 Analysis device 310 Additional information extraction unit 320 Additional information request unit 325 Encrypted additional information request unit 330 Combine request unit 340 Analysis request unit 390 Analysis recording unit 400 m , 401 m Information providing device 410 m Basic information providing unit 420 m Additional information encryption unit 430 m Encrypted additional information providing unit 440 m Additional information decoding unit 490 m Recording unit 400 m , 401 m Information providing device 410 m Basic information providing unit 420 m Additional information encryption unit

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Storage Device Security (AREA)

Abstract

Ce système de gestion d'informations comprend une unité de chiffrement d'informations de base, une unité de demande d'informations supplémentaires, un moyen d'enregistrement d'informations de base chiffrées, un moyen d'enregistrement d'informations supplémentaires chiffrées, un moyen de combinaison d'informations et un moyen d'enregistrement d'informations combinées chiffrées. L'unité de chiffrement d'informations de base produit des informations de base chiffrées obtenues par chiffrement d'informations de base en clair. L'unité de demande d'informations supplémentaires demande des informations concernant un attribut supplémentaire qui est un attribut autre qu'un attribut de base. Le moyen d'enregistrement d'informations de base chiffrées enregistre les informations de base chiffrées. Le moyen d'enregistrement d'informations supplémentaires chiffrées acquiert et enregistre des informations supplémentaires chiffrées obtenues par chiffrement des informations concernant l'attribut de base et des informations concernant l'attribut supplémentaire. Le moyen de combinaison d'informations combine les informations de base chiffrées et les informations supplémentaires chiffrées sur la base des informations concernant l'attribut de base incluses dans les informations supplémentaires chiffrées, et produit des informations combinées chiffrées. Le moyen d'enregistrement d'informations combinées chiffrées enregistre les informations combinées chiffrées.
PCT/JP2021/023955 2021-06-24 2021-06-24 Système de collecte d'informations, système de gestion d'informations, procédé de collecte d'informations et programme WO2022269861A1 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PCT/JP2021/023955 WO2022269861A1 (fr) 2021-06-24 2021-06-24 Système de collecte d'informations, système de gestion d'informations, procédé de collecte d'informations et programme

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/JP2021/023955 WO2022269861A1 (fr) 2021-06-24 2021-06-24 Système de collecte d'informations, système de gestion d'informations, procédé de collecte d'informations et programme

Publications (1)

Publication Number Publication Date
WO2022269861A1 true WO2022269861A1 (fr) 2022-12-29

Family

ID=84544260

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2021/023955 WO2022269861A1 (fr) 2021-06-24 2021-06-24 Système de collecte d'informations, système de gestion d'informations, procédé de collecte d'informations et programme

Country Status (1)

Country Link
WO (1) WO2022269861A1 (fr)

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20200342464A1 (en) * 2019-04-26 2020-10-29 Tenspace Co., Ltd. Server, method, and system for evaluating user by analyzing social network
JP2021503117A (ja) * 2017-12-26 2021-02-04 マインドウェアワークス カンパニー リミテッド 個人情報保護基盤のクエリ処理サービス提供システム

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2021503117A (ja) * 2017-12-26 2021-02-04 マインドウェアワークス カンパニー リミテッド 個人情報保護基盤のクエリ処理サービス提供システム
US20200342464A1 (en) * 2019-04-26 2020-10-29 Tenspace Co., Ltd. Server, method, and system for evaluating user by analyzing social network

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
KIRIBUCHI, NAOTO ET AL.: "An Efficient Equi-join Algorithm for Secure Computation and Its Implementation toward Secure Comprehensive Analyses of Users' Attribute and History Information", PROCEEDINGS OF COMPUTER SECURITY SYMPOSIUM, 4 October 2016 (2016-10-04), pages 1072 - 1078, XP055741167 *

Similar Documents

Publication Publication Date Title
US10204227B2 (en) Privacy firewall
JP6538570B2 (ja) クラウドデータセキュリティのためのシステム及び方法
EP4068130A1 (fr) Système de partage de données, procédé de partage de données et programme de partage de données
KR20190061078A (ko) 특정 식별 정보를 공개하지 않고 식별자들 간의 링크를 설정
Dehling et al. Secure provision of patient-centered health information technology services in public networks—leveraging security and privacy features provided by the German nationwide health information technology infrastructure
JP2008276756A (ja) ウェブ・サービス仲介装置
US20210049299A1 (en) System and methods for providing data analytics for secure cloud compute data
WO2015136801A1 (fr) Système de gestion d'informations
WO2020004139A1 (fr) Système et procédé d'analyse d'informations personnelles
Karegar et al. Opportunities and challenges of CREDENTIAL: towards a metadata-privacy respecting identity provider
WO2022269861A1 (fr) Système de collecte d'informations, système de gestion d'informations, procédé de collecte d'informations et programme
JP6558126B2 (ja) 情報処理システム及び情報処理方法
US20170061140A1 (en) Secure document repository
JP7178811B2 (ja) サービス支援システム、及びサービス支援方法
US20200177383A1 (en) Centralized system for a hardware security module for access to encryption keys
Kumar et al. Design of retrievable data perturbation approach and TPA for public cloud data security
WO2022269862A1 (fr) Système d'extraction de client, système de gestion d'informations, dispositif de demande d'analyse, procédé d'extraction de client et programme
JP2019153060A (ja) 情報管理システム、情報管理方法及び情報管理装置
JP7500771B2 (ja) サービス提供システム
Hasimi Cost-effective solutions in cloud computing security
Ahmad et al. Tokenization based service model for cloud computing environment
JP2006350139A (ja) 情報提供装置、情報取得装置、秘匿化システム、情報提供方法、情報取得方法、情報提供プログラム及び情報取得プログラム
Nguyen-Vu et al. Privacy enhancement using selective encryption scheme in data outsourcing
US20230161907A1 (en) Method and system for unifying de-identified data from mulitple sources
Satyanarayana Murty et al. A Hybrid Intelligent Cryptography Algorithm for Distributed Big Data Storage in Cloud Computing Security

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 21947146

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 21947146

Country of ref document: EP

Kind code of ref document: A1