JP2006279595A - Information processing system and program thereof - Google Patents

Abstract

An object of the present invention is to provide an information processing system capable of transmitting / receiving / processing / recording information so as not to be specified as individual information between untrusted entities.
A plurality of IDs including IDs of users of a client device 2 are generated and transmitted to the management server 1, passwords corresponding to the plurality of IDs are extracted by the management server 1 and an encryption key r is generated, The extracted password is subjected to encryption processing by calculating the exclusive OR x with the encryption key r, and the encryption key K is generated to encrypt the encryption key r and transmit it to the client apparatus 2 together with the encryption key K. The client device 2 calculates the exclusive OR of the user password and the exclusive OR x and decrypts the encryption key. The decrypted encryption key is encrypted with the encryption key K and compared with the encryption information of the encryption key r to determine the validity of the management server 1. If they match, the decrypted encryption key is transmitted to the management server 1 to determine the validity of the client device 2.
[Selection] Figure 2

Description

  The present invention relates to an information processing system and a program for protecting the information processing system so that individual information closely related to an individual or an object related to the system is not specified.

  As network systems such as the Internet rapidly spread, various types of information are transmitted and received on the network. However, there is a risk that information exchanged on the network is always illegally obtained or altered by a malicious third party. For this reason, various encryption processing techniques have been developed as a safety measure, and information transmitted and received on the network is encrypted to prevent unauthorized use and modification of the information.

  Such communication information encryption processing technology is effective for unauthorized acquisition and modification during communication, but it can handle misuse of information after the encrypted information has been properly acquired and decrypted. I can't.

  That is, when a specific individual sends an encrypted ID and password to a service provider and receives a service from the service provider, the service content received by the individual is stored in the service provider together with the ID, and the individual It is memorized as related information. The individual information accumulated in this way may be misappropriated even if strict information management is performed by the service provider. In particular, with the advancement of information processing systems, it has become possible to easily process a large amount of information, and the danger has increased. For example, although services for selling various products are provided on the Internet, purchase performance data for each individual may be used as basic data for sales promotion. On the other hand, for companies that provide services, the leakage of individual information leads to a decline in social credibility. Therefore, strict management of individual information is increasingly required, and the management burden increases. .

  In addition, in the case of individual information whose selection or entry contents are closely related to individuals, such as questionnaire surveys and elections, no matter how strictly it is encrypted when transmitting information, it is a database that is aggregated after decryption May leak to the outside, a large amount of individual information may be disclosed.

  In this specification, “individual information” refers to information regarding individuals, corporations such as companies, and items that are individually identified and handled (hereinafter referred to as “individuals”), and the names included in the information. , Which can identify a specific individual by date of birth or other description (including those that can be easily collated with other information, thereby identifying a specific individual, etc.) .)

  When transmitting and receiving individual information as described above in a network system such as the Internet, it is necessary to consider safety measures under the assumption that the individual information may be leaked. As one method for preventing such outflow of individual information, a method of transmitting and receiving information so that an individual is not specified has been proposed. For example, Patent Document 1 describes an anonymous authentication system using a group signature method. In the group signature method, authentication is performed without using key information for each member in a signature method that can be verified with a single group public key that is used for each group separately from the key information that the members of the group use for signature. Individual information such as service usage status for each member is not specified, and individual information is not stored in the service provider.

Patent Document 2 describes a device that performs anonymous authentication between a user terminal and a service providing server using a zero knowledge proof or a blind signature scheme. Further, in Patent Document 3, an encryption procedure for generating a code that shows an apparently different value that can be decoded into the same code is used to assign an identifier that appears variable to the user each time, and according to the nature of the variable identifier. It is described that the user information can be searched and the situation where the fixed identifier used for user identification and the user action history are deeply connected is described. In Patent Document 4, the service providing server generates a plurality of different temporary digital signatures that guarantee the same contents and transmits them to the user device, and the user device acquires a plurality of electronic certificates from the received temporary digital signature. Further, it is described that anonymous authentication is performed without providing user attribute information by performing authentication with any one of the electronic certificates.
JP 2004-320562 A Japanese Patent Laid-Open No. 2005-5778 JP 2004-362201 A JP 2004-242195 A

  In Patent Document 1 described above, individual user information is managed by the attribute issuance management server although it is not stored in the service provider, and there is still a risk of leakage of individual information from the attribute issuance management server. Become. Further, in Patent Documents 2 to 4, authentication is performed without using user attribute information. However, authentication is not performed after being completely separated from attribute information, and information used for authentication is associated with the user. Since the possibility of being transmitted cannot be excluded, information to be transmitted / received may be specified as individual information.

  As described above, when there is a possibility of being identified as individual information, information cannot be transmitted / received in a safe manner in an environment where a large number of entities that cannot be trusted with each other are connected via a network and information is transmitted / received. For example, in ubiquitous computing, which will become full-scale in the future, it is assumed that all personal information will be recorded by a computer and transmitted / received via a network. How will you protect such individual information? It is necessary to take measures.

  Accordingly, an object of the present invention is to provide an information processing system capable of transmitting and receiving information so that information closely related to an individual or an object such as individual information is not identified between entities that cannot be trusted with each other. Is.

  An information processing system according to the present invention is an information processing system comprising a plurality of client devices, and a server device connected to the client devices via a network and receiving and processing information from the client devices, The client device includes a storage unit that stores ID information and password information related to information managed by the device, and the storage unit based on a plurality of password information encrypted by a first encryption key received from a server device. Password processing means for encrypting the encryption key using the second encryption key received from the server device after calculating the encryption key used for the encryption processing of the plurality of password information using the password information stored in the server And encryption information by the second encryption key of the first encryption key received from the server device, and Server determination means for determining the validity of the server device based on the encryption information of the encryption key by the password processing means and transmitting the encryption key to the server device as client verification information when it is determined to be valid The server device includes: extraction means for extracting password information corresponding to a plurality of ID information including ID information of the client device; and a plurality of password information extracted by the extraction means using the first encryption key. A first encryption processing means for performing encryption processing using the second encryption key and transmitting the first encryption key to the client device together with the second encryption key. Based on the encryption processing means and the client verification information and the first encryption key transmitted from the client device, Characterized in that it includes a client determination means for determining the validity of the Ant device. The client device further includes ID information processing means for generating a plurality of ID information including the ID information of the device and transmitting it to the server device, and the extracting means of the server device receives the plurality of information received from the client device. The password information corresponding to the ID information is extracted.

  An information processing method according to the present invention is an information processing method for processing information by connecting a server device to a plurality of client devices via a network, and includes a plurality of user ID information stored in the client device. ID information is generated and transmitted to the server device, password information corresponding to the transmitted plurality of ID information is extracted in the server device, and the extracted plurality of password information is encrypted with the first encryption key and One encryption key is encrypted with the second encryption key and transmitted to the client device together with the second encryption key. Based on the plurality of encrypted password information, the password information of the client device is used to After calculating the encryption key used for encryption, the encryption key is encrypted using the second encryption key, and the second encryption key is encrypted. The validity of the server device is determined based on the encryption information by the key and the encryption information of the encryption key, and when it is determined that the server device is valid, the encryption key is transmitted to the server device as client verification information. The validity of the client device is determined based on the client verification information and the first encryption key transmitted from the client device.

  A program according to the present invention is provided in an information processing system including a plurality of client devices and a server device that is connected to the client devices via a network and receives information from the client devices and processes the client devices. A program for causing a function of the client device to generate a plurality of pieces of ID information including ID information of a user of the device and to transmit the information to the server device, and to encrypt the client device using a first encryption key received from the server device The encryption key is calculated using the second encryption key received from the server device after calculating the encryption key used for encrypting the plurality of password information using the password information of the client device based on the plurality of password information Means for encrypting the second encryption key received from the server device Means for determining the validity of the server device based on the encryption information by the key and the encryption information of the encryption key, and when the server device is determined to be valid, the encryption key is used as client verification information to the server device It functions as a means for transmitting.

  A program according to the present invention provides an information processing system comprising a plurality of client devices and a server device connected to the client devices via a network and receiving and processing information from the client devices. A program for causing the server device to extract password information corresponding to a plurality of ID information received from the client device based on the stored ID information and password information of all users. Means for encrypting a plurality of password information using the first encryption key and transmitting the encrypted information to the client device; encrypting the first encryption key using the second encryption key and providing the client device together with the second encryption key Means for transmitting, client verification information transmitted from the client device, and the first No. means for determining the validity of the client device based on the key, to function as a.

Another information processing system according to the present invention provides data d _ij (i = 1, 2,..., M; j = 1, 2) corresponding to M items D _i (i = 1, 2,..., M). ,..., N) and N data management devices S _j (j = 1, 2,..., N), connected to the data management device via a network, and totaling data d _ij for each item. an information processing system and a data collection apparatus, a data management device S _k is the coefficient data _{a pq (p = 1,2, ...} , M; q = 1,2, ..., M) and the M Storage unit for storing the data d _ik (i = 1, 2,..., M), and M primary combined data v _pk (p = 1, 2,..., Using the data d _ik and the coefficient data a _pq . M) with the following formula (A)
v _pk = a _p1 d _1k + a _p2 d _2k + ... + a _pq d _qk + ... + a _pM d _Mk (A)
A registration means for registering the data management device S _j that is responsible for aggregating values calculated by all the data management devices S _j according to the order of the primary combined data v _pk , and other registered data one sends the primary binding data v _pk order required aggregated management device S _j of the order in which the data management apparatus S _k is responsible linear combination data _{v rj (1 ≦ r ≦ M} ; j = 1,2, ... , and a coupling collecting unit for transmitting and receiving the N) from the other data management device S _j aggregates the values of all the data management device S _j aggregated bound aggregated data to the data collection apparatus, data aggregation device , The storage unit for storing the coefficient data a _pq (p = 1, 2,..., M; q = 1, 2,..., M) and the combined total data received from each data management device S _j and calculates the total value of the data d _ij for each item D _i based on binding aggregated data and the coefficient data a _pq Characterized in that it includes a total data calculation means.

Another information processing method according to the present invention provides data d _ij (i = 1, 2,..., M; j = 1, 2) corresponding to M items D _i (i = 1, 2,..., M). ,..., N) that stores N data management devices S _j (j = 1, 2,..., N) via a network and a data aggregating device is connected to _collect data d _ij for each item. a method, a data management device S _k of the stored coefficient data _{a pq (p = 1,2, ...} , M; q = 1,2, ..., M) and M data d _ik (i = 1 , 2,..., M), and M primary combination data v _pk (p = 1, 2,..., M) is _expressed by the following equation (A)
v _pk = a _p1 d _1k + a _p2 d _2k + ... + a _pq d _qk + ... + a _pM d _Mk (A)
And the primary combined data v _{pk in} the order required for aggregation is transmitted to the other data management apparatus S _j responsible for the aggregation of the values calculated by all the data management apparatuses S _j according to the order of the primary combined data v _pk. , The primary combined data v _rj (1 ≦ r ≦ M; j = 1, 2,..., N) in the order in which the data management device S _k takes charge is received from the other data management devices S _j and all the data management devices The aggregated data obtained by aggregating the values of S _j is transmitted to the data aggregating device, and the data aggregating device receives the aggregated data received from the data management device S _j and the coefficient data a _pq for each item D _i . A total value of the data d _ij is calculated.

Another program according to the present invention provides data d _ij (i = 1, 2,..., M; j = 1, 2,...) Corresponding to M items D _i (i = 1, 2,..., M). , N), N data management devices S _j (j = 1, 2,..., N), and data aggregation that is connected to the data management device via a network and aggregates data d _ij for each item in the information processing system and a device, a program for causing a data management device S _k, the data management apparatus S _k, the coefficient data _{a pq (p = 1,2, ...} , M; q = 1, 2,..., M) and M data d _ik (i = 1, 2,..., M), and M primary combined data v _pk (p = 1, 2,..., M) The following formula (A)
v _pk = a _p1 d _1k + a _p2 d _2k + ... + a _pq d _qk + ... + a _pM d _Mk (A)
Is calculated by means transmits the primary binding data v primary binding data v _pk of the order by the order necessary for the aggregation in addition to the data management device S _j in charge of the summary of the calculated values in all data management apparatus S _{j pk} the data management device S _k is a linear combination data v order responsible _rj while (1 ≦ r ≦ M; j = 1,2, ..., N) all data management received from other data management device S _j The value of the device S _j is aggregated and functions as a means for transmitting the aggregated aggregated data to the data aggregation device.

Still another information processing system according to the present invention includes a plurality of client devices, a server device connected to the client devices via a network and transmitting and receiving information to and from the client devices, and the client device and the server. An information processing system comprising: a data storage device for storing data relating to specific information generated or used in the process of processing information with the device, wherein the client device has coefficient data a _pq (p = 1, 2,..., M; q = 1, 2,..., M), M data d _i (i = 1, 2,..., M) and coefficient data a _pq relating to the specific information Using the M primary combination data v _p (p = 1, 2,..., M), the following equation (B)
v _p = a _p1 d ₁ + a _p2 d ₂ + ... + a _pq d _i + ... + a _pM d _M (B)
Calculating means for transmitting the M primary combined data v _p calculated by the above to the data storage device, reading the primary combined data v _p stored in the data storage device, and summing up the data d _i A totaling unit that transmits the total value to the server device, the server device including a totalization processing unit that registers the total value received from the client device, and the data storage device received from the client device characterized in that it comprises a registration means for storing the primary binding data v _p, and read processing means for transmitting a primary binding data v _p that is stored for the client device.

Still another information processing method according to the present invention provides data storage device with data relating to specific information generated or used in the process of information processing between a client device and a server device connected to the client device via a network. An information processing method for storing and aggregating data relating to the specific information, wherein coefficient data a _pq (p = 1, 2,..., M; q = 1, 2,..., M) stored in the client device And M pieces of data d _i (i = 1, 2,..., M) related to the specific information, and M primary combined data v _p (p = 1, 2,..., M) are expressed by the following formula (B )
v _p = a _p1 d ₁ + a _p2 d ₂ + ... + a _pq d _i + ... + a _pM d _M (B)
M primary combination data v _p calculated by the above is transmitted to the data storage device, and the primary storage data v _p received from the client device is stored in the data storage device. send the stored primary binding data v _p, and sends the aggregated value with aggregate data d _i to the server apparatus reads the primary binding data v _p stored in the data storage device at the client device, wherein In the server device, the total value received from the client device is registered.

Still another program according to the present invention includes a plurality of client devices, a server device connected to the client devices via a network and transmitting and receiving information to and from the client devices, and the client device and the server device. In an information processing system comprising a data storage device that stores data relating to specific information generated or used in the process of processing information between the programs, a program for causing the client device to function, the client device comprising: Using M pieces of data d _i (i = 1, 2,..., M) and coefficient data a _pq (p = 1, 2,..., M; q = 1, 2 _,. M primary combination data v _p (p = 1, 2,..., M) is expressed by the following equation (B)
v _p = a _p1 d ₁ + a _p2 d ₂ + ... + a _pq d _i + ... + a _pM d _M (B)
Means for transmitting the calculated M primary combination data v _p to the data storage device, reading the primary combination data v _p stored in the data storage device, totaling the data d _i, and calculating the total value It is made to function as a totaling means which transmits to a server apparatus.

  An information processing system and an information processing method according to the present invention generate a plurality of ID information including user ID information stored in a client device, transmit the generated ID information to a server device, and correspond to the transmitted plurality of ID information. The server extracts the password information, encrypts the extracted plurality of password information with the first encryption key, encrypts the first encryption key with the second encryption key, and sends it to the client device together with the second encryption key. After transmitting and calculating the encryption key used to encrypt the multiple password information using the password information of the client device based on the encrypted multiple password information, the encryption key is encrypted using the second encryption key To determine the legitimacy of the server device based on the encryption information of the second encryption key of the first encryption key and the encryption information of the encryption key In, it is not possible to identify the ID information of the user at the server apparatus, it can determine the validity of the server device on the client device.

  When it is determined that the server device is valid, the client device transmits the encryption key as client verification information to the server device, and based on the client verification information and the first encryption key transmitted from the client device. Since the legitimacy of the client apparatus is determined, the legitimacy of the client apparatus can also be determined in the server apparatus.

  In this way, since the server device cannot identify which user is accessing, the information transmitted / received to / from the client device is not specified as individual information, and the client device and the server device are mutually connected. Since the legitimacy can be determined, information can be transmitted and received with confirmation of legitimacy even between entities that cannot trust each other.

Another information processing system and information processing method according to the present invention, the coefficients stored in the data management apparatus S _k data _{a pq (p = 1,2, ...} , M; q = 1,2, ..., M) and M primary combination data v _pk (p = 1, 2,..., M) is calculated by the above equation (A) using M data d _ik (i = 1, 2,..., M), The primary combined data v _{pk in} the order required for aggregation is transmitted to the other data management apparatus S _j in charge of aggregation of the values calculated by all the data management apparatuses S _j according to the order of the primary combined data v _pk and the data management is performed. device S first order linear combination _{of j} is responsible data _{v rj (1 ≦ r ≦ M} ; j = 1,2, ..., N) receives from the other data management device S _j the value of all the data management device S _j since so as to aggregate, the data management apparatus S _j in charge of the aggregation is aggregated only primary binding data v _pk for some order, Do can be obtained data d other data management device . That is, since each data management device calculates the primary combined data v _pk using the common coefficient data a _pq , if all the primary combined data v _pk can be obtained, the coefficient is obtained using M data as variables. Data d can be obtained by solving M simultaneous linear equations using data a _pq , but simultaneous linear equations cannot be solved when only a part of the primary coupled data v _pk is present. As described above, in each data management device, the primary combined data v _pk can be aggregated for all the data management devices in order without specifying the data d with each other.

The data totaling device can calculate the total value of the data d _ij for each item D _i by obtaining the total data received from the data management device S _j and the coefficient data a _pq . That is, the combined total data V _r obtained by totaling the primary combined data v _rs (1 ≦ r ≦ M; s = 1, 2,..., N) in order by the data management device is as follows.
V _r = v _r1 + v _r2 + ... + v _rs + ... + v _rN = a _r1 Σd _1s + a _r2 Σd _2s + ... + a _rq Σd _is + ... + a _rM Σd _Ms
Therefore, the data totaling device obtains M pieces of combined total data V _r, and by solving M simultaneous linear equations using coefficient data a _pq using M Σd _ij as variables, data items D _{i are} classified. The total value Σd _ij can be obtained. At that time, the data totaling apparatus can only obtain the total data V _{r, and} therefore cannot specify each data d. Therefore, the individual information can be aggregated by transmitting the aggregate data to the outside without specifying the individual information from the data management device.

In addition, another information processing system according to the present invention uses M coefficient data a _pq to generate M pieces of data d _i related to information generated or used in the process of processing with the server apparatus, and v pieces of primary combined data v. _p (p = 1,2, ..., M) is expressed by the following formula (B)
v _p = a _p1 d ₁ + a _p2 d ₂ + ... + a _pq d _i + ... + a _pM d _M (B)
Thus, the data d _i is not specified even if it is transmitted to the outside in the form of the primary combined data v _p . Then, it is possible to be the primary binding data v _p as the server stores and manages the another data storage device, the server device is prevented from participating in the data d _i. If the client device reads the primary combined data v _p stored in the data storage device, aggregates the data d _i and transmits the aggregate value to the server device, only the aggregate value is transmitted to the server device. Thus, it is possible to prevent the data d _i corresponding to the individual information from being specified.

  Hereinafter, embodiments according to the present invention will be described in detail. The embodiments described below are preferable specific examples for carrying out the present invention, and thus various technical limitations are made. However, the present invention is particularly limited in the following description. Unless otherwise specified, the present invention is not limited to these forms.

FIG. 1 is a schematic diagram showing a configuration of an embodiment relating to an information processing system according to the present invention. The management server 1 is connected to _N client devices 2 ₁ ,..., 2 _N via a network 4 such as the Internet. The management server 1 includes an information processing unit 10 and a storage unit 11. The information processing unit 10 reads data and programs stored in the storage unit 11, performs data processing, and transmits and receives data to and from the client device 2. It is like that. The client device 2 includes information processing units 20 ₁ ,..., 20 _N and storage units 21 ₁ ,..., 21 _N , respectively, and data and programs stored in the storage unit 21 by the information processing unit 20 Is processed to perform data processing, and data is transmitted to and received from the management server 1. Functions related to individual information processing in the management server 1 and the client device 2 are realized by a program installed in advance using a recording medium or a network.

FIG. 2 is a functional block diagram for determining validity between the management server 1 and the client device 2 _k . The information processing unit 10 of the management server 1 includes a password extraction unit 100, a first encryption key generation unit 101, a first encryption processing unit 102, a second encryption key generation unit 103, a second encryption processing unit 104, and a client determination unit. 105 and the transmission / reception unit 106, and these functions are realized by the server authentication program 110 stored in the storage unit 11. In the customer DB 111 stored in the storage unit 11, customer attribute information such as IDs, passwords, names, and addresses of all users who use the client device is registered.

  The password extraction unit 100 extracts a plurality of passwords p corresponding to an ID list composed of a plurality of IDs received from the client device from the customer DB 111 of the storage unit 11, and creates a password list corresponding to the arrangement order of the ID list.

The first encryption key generation unit 101 generates a random bit pattern r having the same length as the password p as the first encryption key used in the first encryption processing unit 102. The first encryption processing unit 102 performs an exclusive OR x between the first encryption key r and the password p in the password list created by the password extraction unit 100.
x = pXORr
Is calculated as encryption information of p, and an encryption password list corresponding to the password list is created.

  The second encryption key generation unit 103 generates a second encryption key K, and the second encryption processing unit 104 generates encrypted information K (r) obtained by encrypting the first encryption key r with the second encryption key K. And K (r) and K are used as server verification information. The encryption password list and encryption information K (r) are transmitted to the client device via the transmission / reception unit 106 together with the second encryption key K. The second encryption processing unit 104 may use encryption methods with different encryption keys and decryption keys. For example, the encryption processing may be performed using a known encryption method such as RSA.

  The client determination unit 105 compares the random bit pattern received as the client verification information from the client device with the random bit pattern r that is the first encryption key generated by the first encryption key generation unit 101 to verify the validity of the client device. judge. The transmission / reception unit 106 transmits / receives data to / from the client device.

The information processing unit 20 _k of the client device 2 _k includes an ID generation unit 200 _k , a password processing unit 201 _k , a server determination unit 202 _k and a transmission / reception unit 203 _k , and these functions are stored in the storage unit 21 _k. This is realized by the client authentication program 210 _k . Storage unit 21 _k is provided with an ID / password registration unit 211 _k for storing the ID _k and password p _k of the user using the client device.

The ID generation unit 200 _k generates a plurality of IDs including ID _k registered in the ID / password registration unit 211 _k of the storage unit 21 _k and creates an ID list. IDs other than the user ID _k are randomly generated based on the number of IDs of all users.

The password processing unit 201 _k is registered in the encryption password x and ID / password registration unit 211 _k corresponding to the position of ID _k registered in the ID / password registration unit 211 _k in the encryption password list received from the management server 1. Exclusive-or y with password q
y = xXORq
Further, y is encrypted using the second encryption key K received from the management server 1 by the same encryption method as the second encryption processing unit 104 and is set to K (y).

Here, in the password processing unit 201 _k , the encrypted password x received from the management server 1 is
x = pXORr
Therefore, if q = p,
y = xXORq = pXORrXORp = r (C)
Thus, the original first encryption key r is decrypted. For example,
p = 001100
r = 011000
If x = 010100
It becomes. Therefore,
xXORp = 01000 = r
It becomes.

The server determination unit 202 _k determines whether or not the encrypted random bit pattern K (r) received from the management server 1 matches the K (y) calculated by the password processing unit 201 _k by pattern comparison. If it is determined that they match, the management server 1 transmits the random bit pattern y (= r) calculated by the password processing unit 201 _k as valid to the management server 1, and if they do not match, the management server 1 Does not transmit random bit patterns as illegal.

FIG. 3 shows a processing flow for determining the legitimacy between the management server 1 and the client device 2 _k . First, when performing the authentication process, the client device 2 _k randomly generates (N−1) IDs from the IDs of all users (S100). In the case of generating a plurality of IDs, for example, the total number of IDs of all users is stored in advance in the storage unit 21 _k , and may be selected at random from the consecutive numbers of the total number of IDs. Then, the ID _{k of} the user registered in the client device 2 _k is read from the storage unit 21 _k and randomly arranged together with the generated IDs to create an ID list composed of N IDs (S101). . FIG. 4 shows an example of the ID list. In this example, the user ID _k is set for the t-th.

The created ID list is transmitted to the management server 1, and passwords corresponding to N IDs in the list are extracted from the storage unit 11 (S102). Then, the extracted passwords are arranged according to the ID list arrangement to create a password list (S103). FIG. 5 shows a password list created based on the ID list of FIG. At the t-th password list, user passwords _pk are listed.

Next, a random bit pattern r that is a first encryption key is generated (S104), and an exclusive OR x of the password in the password list and the random bit pattern r is calculated (S105). After calculating the exclusive logical sum x for each password in the password list, an encrypted password list is created by arranging according to the password list array (S106). FIG. 6 shows an encryption password list created based on the password list of FIG. The t-th exclusive OR x _{k in the} encryption password list corresponds to the user password p _k .

Here, in order to prevent the user to know directly the password other than p _k, each of the password list password before calculating the exclusive OR x of a random bit pattern r or later, keep in encrypting Also good. However, in this case, the client device 2 _k can calculate information obtained by encrypting p _k or the exclusive OR x of p _k and r, so that the client device 2 _k also has the same encryption key and encryption as the management server 1. It is necessary to provide a conversion mechanism. Of course, the encryption method in this case must have a different encryption key and decryption key.

Next, the second encryption key generation unit 103 generates a second encryption key K (S107), encrypts the random bit pattern r using the second encryption key K (S108), and the second encryption key K Then, the encrypted random bit pattern K (r) and the encrypted password list are transmitted to the client device 2 _k (S109).

The client device 2 _k extracts the t-th exclusive OR x _k from the received encryption password list (S110), and performs exclusive logic with the user password p _k registered in the storage unit 21 _k. The sum is calculated (S111). Since the random bit pattern y is calculated by the calculation process in step S111 as shown in the equation (C), the calculated random bit pattern is encrypted using the second encryption key K (S112). The encrypted random bit pattern K (y) is compared with the random bit pattern K (r) received from the management server 1 (S113), and the validity of the management server 1 is determined. If they match, the management server 1 correctly calculates the exclusive OR of all the IDs in the ID list received from the client device 2 _k and the random bit pattern r, and determines that the management server 1 is a valid management server. can do. Therefore, the random bit pattern y calculated in step S111 is transmitted to the management server 1 (S114). If they do not match in step S113, the management server determines that the management server is illegal and ends without transmitting the random bit pattern y.

Management server 1 determines a random bit pattern y received as compared to random bit pattern r that is generated in step S104 (S115) the validity of the client device 2 _k. If they match, it is possible to authenticate the client apparatus 2 _k using the password contained in the encrypted password list transmitted from the management server 1 has processed, and starts the service provided to the client device 2 _k. If they do not match, the client device 2 _k has not processed using the password included in the encryption password list, and therefore transmits an error message as invalid (S116) and ends.

In the above processing, since the ID list is transmitted from the client device 2 _k , the management server 1 does not specify which ID user is accessing, and can confirm the validity of the user. Then, in the client device 2 _k , the management server 1 is correctly processing by confirming that the random bit pattern K (r) transmitted from the management server 1 matches the K (y) calculated by itself. I can confirm that. In this case, the password of the other user is transmitted to the client device, but the exclusive OR of the password or the password and the random bit pattern is also decrypted by encrypting with an encryption method in which the encryption key and the decryption key are different. Since another key is required for the conversion, unauthorized use in the client device can be easily prevented. Similarly, since the encryption of the random bit pattern r used in the management server 1 is performed by an encryption method in which the encryption key and the decryption key are different, the encrypted random bit pattern K (r) is directly decrypted and the management server Unauthorized processing, such as sending to, is also prevented. That is, the random bit pattern r cannot be decrypted by the client device without the authentic password.

Since the password is processed using the common random bit pattern r in the encryption password list, the management server 1 does not specify what number password in the encryption password list is decrypted. Further, since the validity is determined by the random bit pattern y received from the client device 2 _k , the management server 1 can perform authentication without specifying the user.

FIG. 7 shows a functional block diagram relating to a system for aggregating individual information using the information processing system of FIG. N client devices 2 ₁ ,..., 2 _N function as data management devices S ₁ ,..., S _N , respectively, and the management server 1 functions as a data aggregation device C.

Each data management device includes information processing units 20 ₁ ,..., 20 _N and storage units 21 ₁ ,..., 21 _N , and the information processing unit 20 includes a data extraction unit, a combination calculation unit, and a combination. It functions as a totaling unit, and such a function is realized by a data management program stored in each storage unit 21 _k . Each storage unit 21 _k stores coefficient data a _pq (p = 1, 2,..., M; q = 1, 2,..., M) and an assigned data table in which the order in which each data management device is in charge of registration is registered. Are stored. Further, the storage unit 21 ₁ stores digitized personal data d _i1 (i = 1, 2,..., M) corresponding to M data items D _i (i = 1, 2,..., M). Similarly, the storage unit 21 ₂ stores personal data d _i2 (i = 1, 2,..., M),..., And the storage unit 21 _k stores personal data d _ik (i = 1, 2,..., M),..., And the storage unit 21 _N stores personal data d _iN (i = 1, 2,..., M).

The function of the information processing unit 20 _k will be described. The data extraction unit extracts coefficient data a _pq and personal data d _ik as necessary from the storage unit 21 _k . The combination calculation unit calculates M primary combination data v _pk (p = 1, 2,..., M) using the extracted personal data d _ik and coefficient data a _{pq according} to the following equation (A).
v _pk = a _p1 d _1k + a _p2 d _2k + ... + a _pq d _qk + ... + a _pM d _Mk (A)
The combined tabulation unit sequentially outputs M × N primary combined data v _ps (p = 1, 2,..., M; s = 1, 2,..., N) calculated by the combined calculation unit of all the data management devices. Separately, the values calculated by all data management devices are aggregated. Which data management device is in charge of the aggregation of the primary combined data v _{ps in} which order is registered in advance in the responsible data table. One data management device may be responsible for a plurality of orders of primary combined data. The combined tabulation unit transmits data other than the assigned order of the device to the other data management device based on the data of the assigned data table, and receives the assigned order data from the other data management device and adds the data. I do. When the primary combined data v _rs (1 ≦ r ≦ M; s = 1, 2,..., N) in the order _r is totaled, the combined total data V _r is as follows.
V _r = v _r1 + v _r2 + ... + v _rs + ... + v _rN = a _r1 Σd _1s + a _r2 Σd _2s + ... + a _rq Σd _qs + ... + a _rM Σd _Ms
Therefore, the combined total data V _r becomes the right-side value of the simultaneous linear equations using the coefficient data a _pq with the total value Σd _ij for each data item D _i (i = 1, 2,..., M) as a variable. The combined totaling unit transmits the combined total data V _p (p = 1, 2,..., M) calculated in this way to the data totaling device C.

The data totaling apparatus C includes an information processing unit 10 and a storage unit 11, and the information processing unit 10 functions as a combined data totaling unit and a total data calculating unit, and these functions are the data stored in the storage unit 11. Realized by the aggregation program. The storage unit 11 stores coefficient data a _pq (p = 1, 2,..., M; q = 1, 2,..., M).

The combined data totaling unit of the information processing unit 10 receives M pieces of combined total data V _p from each data management device. Based on the received M pieces of combined total data V _p and the coefficient data a _pq stored in the storage unit 11, the total data calculating unit M uses M coefficient Σd _ij as a variable and uses M coefficient data a _pq. can be calculated data item D _i another total value [Sigma] d _ij by solving the simultaneous linear equations.

Accordingly, the data collection apparatus C is capable of performing statistical processing such the average value is calculated using the data item D _i another total value [Sigma] d _ij. Further, by adding the square value of personal data as a data item, it becomes possible to perform processing such as dispersion and covariance. Furthermore, the appearance frequency of a specific range can also be calculated by setting a data item that is 1 when the data is included in the predetermined range and 0 when the data is not included.

  Moreover, if the answer items of the questionnaire survey are digitized, the questionnaire results can be easily aggregated. It can also be used to count the number of votes cast in an election.

Since the data totaling device C can obtain only the combined total data V _p , the personal data d _ij cannot be specified. Therefore, it is possible to transmit the total data to the outside without specifying the individual information from the data management apparatus, and it is possible to perform the total without specifying the individual information. Further, each data management device can obtain only a part of primary combined data of other data management devices, and therefore cannot know personal data of other data management devices. In other words, each data management device cannot identify simultaneous linear equations with personal data as variables unless it can obtain all the linear combination data in which coefficient data a _pq is stored. It will never be done.

8 uses the information processing system shown in FIG. 1 to provide a function for determining the legitimacy between the management server 1 and the client device 2 _k shown in FIG. FIG. 8 is a functional block diagram relating to a system for aggregating transaction information so that individual management information related to the client device 2 _k is not specified by the management server 1 using the method described in FIG. 7. In FIG. 8, the data storage device 3 is connected to the network in the information processing system shown in FIG.

The information processing unit 10 of the management server 1 includes an access processing unit 107, a transaction processing unit 108, a totalization processing unit 109, and a transmission / reception unit 106, and these functions are server transaction processing programs 112 stored in the storage unit 11. It is realized by. In the customer DB 111 stored in the storage unit 11, customer attribute information such as IDs, passwords, names, and addresses of all users who use the client device is registered. The storage unit 11 transactions aggregation registration unit 113 stored in the aggregate values are registered for individual transaction information received from the client apparatus 2 _k.

  The access processing unit 107 includes the functions of the respective processing units of the management server 1 for determining mutual validity described with reference to FIG. 2, and the description thereof is omitted because it is the same function as FIG. Then, when it is determined that there is a legitimacy, the access processing unit 107 instructs the data storage device 3 described later to permit writing.

Transaction processing unit 108 performs processing relating to transactions between the client device 2 _k, it transmits a separate transaction information to the client apparatus 2 _k.

The totalization processing unit 109 transmits a totalization instruction signal to the client device 2 _k for each predetermined period or every predetermined number of transactions and instructs the data storage device 3 to permit reading. Then, the total value transmitted from the client device 2 _k is processed and stored in the transaction total registration unit 113.

The information processing unit 20 _k of the client device 2 _k includes an access processing unit 204 _k , a transaction processing unit 205 _k , a combination calculation unit 206 _k , a transaction totaling unit 207 _k and a transmission / reception unit 203 _k , and these functions are stored in memory. This is implemented by the client transaction processing program 212 _k stored in the unit 21 _k . Storage unit 21 _k is provided with a separate transaction registration section 213 _k for storing a plurality of data d _i and described below the coefficient data a _pq indicating the individual transaction information transaction processing with the management server 1. Examples of the plurality of pieces of data d _i indicating individual transaction information include transaction date / time, transaction partner, transaction amount, transaction amount, and the like. Such information is converted into data as binary numbers of 0 and 1.

The access processing unit 204 _k includes the functions of the processing units of the client device 2 _k for determining mutual validity described with reference to FIG. 2, and the description thereof is omitted because it is the same function as FIG. 2.

Transaction processing unit 205 _k performs information processing related transactions with the management server 1 registers the plurality of data d _i indicating the individual transaction information to the individual transaction registration section 213 _k.

The combination calculation unit 206 _k includes M data d _i (i = 1, 2,..., M) indicating individual transaction information registered in the individual transaction registration unit 213 _k and coefficient data a _pq (p = 1, , M; q = 1, 2,..., M), and M primary coupled data v _p (p = 1, 2,..., M) are expressed by the following equation (B)
v _p = a _p1 d ₁ + a _p2 d ₂ + ... + a _pq d _i + ... + a _pM d _M (B)
Calculated by Since the M pieces of primary combination data v _p calculated in this way are very difficult to know M pieces of data d _i unless the coefficient data a _pq is known, the primary combination data v _p is transmitted to the outside. Can prevent the contents of individual transaction information from being known. The calculated primary combined data v _p is transmitted to and stored in the data storage device 3 via the transmission / reception unit 203 _k instead of the data d _i .

The transaction totaling unit 207 _k reads the primary combined data v _p stored in the data storage device 3 for a predetermined period or every predetermined number of transactions, totals the data d _i that is individual transaction information, and sends it to the management server 1. Send. In the case of aggregation, the primary combined data v _rs (1 ≦ 1) of the order r of the primary combined data v _ps (p = 1, 2,..., M; s = 1, 2,..., N) corresponding to N pieces of transaction information. r ≦ M; s = 1, 2,..., N) is calculated to calculate combined total data V _r . The combined total data V _r is as follows.
V _r = v _r1 + v _r2 + ... + v _rs + ... + v _rN = a _r1 Σd _1s + a _r2 Σd _2s + ... + a _rq Σd _qs + ... + a _rM Σd _Ms
Therefore, the combined aggregated data V _r is a simultaneous primary using the coefficient data a _pq with the aggregate value Σd _is of the data d _is (i = 1, 2,..., M; s = 1, 2,..., N) as a variable. It becomes the right-side value of the equation. The transaction totaling unit 207 _k reads the coefficient data a _pq registered in the individual transaction registration unit 213 _k , and is based on the calculated M combined total data V _p (p = 1, 2,..., M). Solve the linear equation to obtain the total value Σd _is . Then, for example, the transaction amount and the total value related to the transaction amount are transmitted to the management server 1 via the transmission / reception unit 203 _k .

The information processing unit 30 of the data storage device 3 includes a registration processing unit 301, a reading processing unit 302, and a transmission / reception unit 303, and a combined information registration unit 310 is stored in the storage unit 31. The registration processing unit 301 receives the write permission from the management server 1 and registers the primary combined data v _p transmitted from the client device 2 _k in the combined information registration unit 310. In response to the read permission instruction from the management server 1, the read processing unit 302 transmits the primary combined data v _p for each predetermined period or every predetermined number of transactions to the client device 2 _k .

The data storage device 3 receives registration permission and read permission from the management server 1 and performs registration processing and read processing with the client device 2 _k , but does not allow data read processing with the management server 1. Has been. Even if the data is read illegally, the contents are not known unless the coefficient data _apq is known. Therefore, the management server 1 cannot be involved in data exchange between the data storage device 3 and the client device 2 _k .

FIG. 9 shows a processing flow for storing transaction information related to the client device 2 _k in the data storage device 3. First, an access process is performed between the management server 1 and the client device 2 _k to determine the validity of each other (S200, S201). Since this access process is the same as that shown in FIG. If it is determined that the two are valid, the client device 2 _k transmits a transaction processing request to the management server 1 (S202), and the management server 1 performs the transaction processing (S203). When the transaction process ends, the management server 1 generates transaction information and transmits it to the client device 2 _k (S204). The client device 2 _k once registers the received transaction information in the individual transaction registration unit 213 _k (S205), and calculates primary combined data v _p based on the data d _i indicating the transaction information (S206). On the other hand, the management server 1 transmits the write permission to the data storage device 3, the data storage device 3 stores the primary binding data v _p transmitted from the client apparatus 2 _k Depending upon the write permission (S208).

FIG. 10 shows a processing flow for reading the primary combined data v _p from the data storage device 3 and performing aggregation. First, the management server 1 transmits an aggregation instruction to the client device 2 _k (S300), and transmits a read permission to the data storage device 3 (S301). Upon receiving the totaling instruction, the client device 2 _k transmits a primary combined data read request to the data storage device 3 (S302). The data storage device 3 receives the read permission from the client device 2 _k , receives the read permission, reads the primary combined data v _p corresponding to the transaction information for a predetermined period or the predetermined number of transactions, and transmits it to the client device 2 _k ( S303). The client device 2 _k calculates the combined aggregate data V _r based on the received primary combined data v _p as described above, obtains the aggregate value Σd _is , and transmits it to the management server 1 (S304). The management server 1 registers the received total value Σd _is in the transaction total registration unit 113, and thereafter performs charging processing based on the total data.

As described above, by storing the data d _i indicating the transaction information by converting it into the primary combined data v _p in the data storage device 3, the individual transaction information of the client device 2 _k is not known outside. The transaction information of the client device 2 _k is not specified. The data storage device 3, since it is managed to write and read by the management server 1, it is possible to prevent tampering with the data the client device 2 _k accesses the freely data storage device 3.

In addition, in order to prevent an illegal act such as the client device 2 _k registering false transaction information, information such as the cumulative number of transactions and the transaction time of the client device 2 _k is also combined with the transaction information, and the transaction contents as necessary. You may be able to check.

  As described above, the information processing system according to the present invention transmits / receives the individual information so that the untrusted entities transmit / receive the individual information so that the individual information is not specified. Information can be output to the information receiving side, and the burden of strictly managing the information is reduced for the information receiving side.

  In particular, it is assumed that the network will spread not only in companies but also in homes due to the progress of ubiquitous computing in the future. In the information processing system according to the present invention, individual information is used without using a complicated system configuration. Cannot be specified, and can be applied to various information devices used for ubiquitous computing.

  In addition, when calculating the overall average salary of employees in multiple companies belonging to a certain industry, if you want to investigate the number of infections of a specific disease in a specific population, distribution of the height and weight of a specific population In the past, it has been necessary to disclose individual salary, medical history information or physical information to organizations that conduct statistical surveys. However, the individual information processing system according to the present invention identifies such individual information. Statistical processing can be easily performed without any problem.

It is the schematic which shows the structure of embodiment regarding the information processing system which concerns on this invention. It is a functional block diagram for determining the correctness between a management server and a client apparatus. It is a processing flow for determining the legitimacy between the management server and the client device. It is explanatory drawing regarding an ID list. It is explanatory drawing regarding a password list. It is explanatory drawing regarding an encryption password list. It is a functional block diagram regarding the information processing system for totaling individual information. It is a functional block diagram regarding the information processing system for totaling transaction information so that individual transaction information may not be specified by a management server. It is a processing flow for registering transaction information so that individual transaction information is not specified in a management server. It is a processing flow for totaling transaction information so that individual transaction information may not be specified by the management server.

Explanation of symbols

1 management server 2 client device 3 data storage device 4 network
10 Information processing department
11 Memory
20 Information processing department
21 Memory
30 Information processing department
31 Memory

Claims (11)

An information processing system comprising a plurality of client devices and a server device connected to the client devices via a network and receiving and processing information from the client devices,
The client device includes a storage unit that stores ID information and password information related to information managed by the device, and the storage unit based on a plurality of password information encrypted by a first encryption key received from a server device. Password processing means for encrypting the encryption key using the second encryption key received from the server device after calculating the encryption key used for the encryption processing of the plurality of password information using the password information stored in the server And determining the validity of the server device based on the encryption information by the second encryption key of the first encryption key received from the server device and the encryption information of the encryption key by the password processing means and having the validity Server determination means for transmitting the encryption key to the server device as client verification information when determined.
The server device extracts password information corresponding to a plurality of ID information including ID information of the client device, and encrypts the plurality of password information extracted by the extraction device using the first encryption key. First encryption processing means for performing encryption processing and transmitting to the client device, and second encryption processing for encrypting the first encryption key using the second encryption key and transmitting to the client device together with the second encryption key An information processing system comprising: means; and client determination means for determining the validity of the client device based on the client verification information and the first encryption key transmitted from the client device.   The client device includes ID information processing means for generating and transmitting a plurality of ID information including ID information of the device to the server device, and the extracting means of the server device receives a plurality of IDs received from the client device. The information processing system according to claim 1, wherein password information corresponding to the information is extracted. An information processing method for processing information by connecting a server device to a plurality of client devices via a network,
A plurality of ID information including user ID information stored in the client device is generated and transmitted to the server device, password information corresponding to the transmitted plurality of ID information is extracted in the server device, and the extracted plurality The first encryption key is encrypted with the first encryption key, the first encryption key is encrypted with the second encryption key, and sent to the client device together with the second encryption key. Based on the plurality of encrypted password information After calculating the encryption key used to encrypt the plurality of password information using the password information of the client device, the encryption key is encrypted using the second encryption key, and the second encryption of the first encryption key is performed. When the validity of the server device is determined based on the encryption information by the key and the encryption information of the encryption key, and it is determined that the server device is valid The serial encryption key transmitted to the server apparatus as a client verification information, an information processing method characterized by determining the validity of the client device based on the client verification information and the first encryption key transmitted from the client device. A program for causing a client device to function in an information processing system including a plurality of client devices and a server device that is connected to the client devices via a network and receives and processes information from the client devices. And
The client device;
Means for generating a plurality of ID information including the ID information of the user of the device and transmitting it to the server device;
Based on the plurality of password information encrypted by the first encryption key received from the server device, the encryption key used for encrypting the plurality of password information is calculated using the password information of the client device and then received from the server device. Means for encrypting the encryption key using the second encryption key,
Means for determining the legitimacy of the server device based on the encryption information by the second encryption key of the first encryption key received from the server device and the encryption information of the encryption key;
Means for transmitting the encryption key to the server device as client verification information when it is determined that the server device is valid;
Program to function as. A program for causing a server device to function in an information processing system including a plurality of client devices and a server device connected to the client device via a network and receiving and processing information from the client device. And
The server device,
Means for extracting password information corresponding to a plurality of ID information received from the client device based on the stored ID information and password information of all users;
Means for encrypting a plurality of extracted password information using a first encryption key and transmitting the encrypted information to a client device;
Means for encrypting the first encryption key using the second encryption key and transmitting it to the client device together with the second encryption key;
Means for determining the validity of the client device based on the client verification information transmitted from the client device and the first encryption key;
Program to function as. N pieces of data d _ij (i = 1, 2,..., M; j = 1, 2,..., N) corresponding to M items D _i (i = 1, 2,..., M) are stored. Information processing system comprising a data management device S _j (j = 1, 2,..., N) and a data totaling device connected to the data management device via a network and totaling data d _ij for each item Because
The data management device S _k includes coefficient data a _pq (p = 1, 2,..., M; q = 1, 2,..., M) and M pieces of data d _ik (i = 1, 2,..., M). , M data of the primary combined data v _pk (p = 1, 2,..., M) using the data d _ik and the coefficient data a _pq
v _pk = a _p1 d _1k + a _p2 d _2k + ... + a _pq d _qk + ... + a _pM d _Mk (A)
A registration means for registering the data management device S _j that is responsible for aggregating values calculated by all the data management devices S _j according to the order of the primary combined data v _pk , and other registered data one sends the primary binding data v _pk order required aggregated management device S _j of the order in which the data management apparatus S _k is responsible linear combination data _{v rj (1 ≦ r ≦ M} ; j = 1,2, ... , and a coupling collecting unit for transmitting and receiving the N) from the other data management device S _j aggregates the values of all the data management device S _j aggregated bound aggregated data to the data collection apparatus,
The data totaling device includes storage means for storing the coefficient data a _pq (p = 1, 2,..., M; q = 1, 2,..., M), and combined total data received from each data management device S _j. And an aggregate data calculating means for calculating the aggregate value of the data d _ij for each item D _i based on the combined aggregate data and the coefficient data a _pq . N pieces of data d _ij (i = 1, 2,..., M; j = 1, 2,..., N) corresponding to M items D _i (i = 1, 2,..., M) are stored. An information processing method in which a data aggregation device is connected to a data management device S _j (j = 1, 2,..., N) via a network, and data d _ij is aggregated for each item,
Coefficients stored in the data management apparatus S _k data _{a pq (p = 1,2, ...} , M; q = 1,2, ..., M) and M data _{d ik (i = 1,2, ...} , M) is used to _convert M primary combined data v _pk (p = 1, 2,..., M) to the following formula (A)
v _pk = a _p1 d _1k + a _p2 d _2k + ... + a _pq d _qk + ... + a _pM d _Mk (A)
And the primary combined data v _{pk in} the order required for aggregation is transmitted to the other data management apparatus S _j responsible for the aggregation of the values calculated by all the data management apparatuses S _j according to the order of the primary combined data v _pk. , The primary combined data v _rj (1 ≦ r ≦ M; j = 1, 2,..., N) in the order in which the data management device S _k takes charge is received from the other data management devices S _j and all the data management devices The aggregated data obtained by aggregating the values of S _j is transmitted to the data aggregating device, and the data aggregating device receives the aggregated data received from the data management device S _j and the coefficient data a _pq for each item D _i . An information processing method characterized by calculating a total value of data d _ij . N pieces of data d _ij (i = 1, 2,..., M; j = 1, 2,..., N) corresponding to M items D _i (i = 1, 2,..., M) are stored. Information processing system comprising a data management device S _j (j = 1, 2,..., N) and a data totaling device connected to the data management device via a network and totaling data d _ij for each item The program for causing the data management device _Sk to function,
The data management device _Sk is
M primary values using coefficient data a _pq (p = 1, 2,..., M; q = 1, 2,..., M) and M data d _ik (i = 1, 2,..., M). The combined data v _pk (p = 1, 2,..., M) is _expressed by the following equation (A)
v _pk = a _p1 d _1k + a _p2 d _2k + ... + a _pq d _qk + ... + a _pM d _Mk (A)
Means for calculating by
The primary combined data v _{pk in} the order required for aggregation is transmitted to the other data management apparatus S _j in charge of aggregation of the values calculated by all the data management apparatuses S _j according to the order of the primary combined data v _pk and the data management is performed. device S first order linear combination _{of k} is responsible data _{v rj (1 ≦ r ≦ M} ; j = 1,2, ..., N) receives from the other data management device S _j the value of all the data management device S _j Means to aggregate the aggregated data and send the aggregated aggregated data to the data aggregation device,
Program to function as. Generated or used in the course of processing information between a client device, a server device connected to the client device via a network and transmitting / receiving information to / from the client device, and between the client device and the server device An information processing system comprising a data storage device that stores data relating to specific information,
The client device stores storage means for storing coefficient data a _pq (p = 1, 2,..., M; q = 1, 2,..., M), and M pieces of data d _i (i = 1, 2,..., M) and coefficient data a _pq , M primary combined data v _p (p = 1, 2,..., M) are expressed by the following equation (B)
v _p = a _p1 d ₁ + a _p2 d ₂ + ... + a _pq d _i + ... + a _pM d _M (B)
Calculating means for transmitting the M primary combined data v _p calculated by the above to the data storage device, reading the primary combined data v _p stored in the data storage device, and summing up the data d _i A totaling means for transmitting a total value to the server device;
The server device includes a totalization processing unit for registering a total value received from the client device,
The data storage device includes registration processing means for storing the primary combined data v _p received from the client device, and read processing means for transmitting the primary combined data v _p stored to the client device. An information processing system characterized by this. Information for storing data related to specific information generated or used in the process of information processing between the client device and the server device connected to the client device via a network in a data storage device and totaling the data related to the specific information A processing method,
Coefficient data a _pq (p = 1, 2,..., M; q = 1, 2,..., M) stored in the client device and M pieces of data d _i (i = 1, 2, .., M) is used to convert M pieces of primary combined data v _p (p = 1, 2,..., M) to the following formula (B)
v _p = a _p1 d ₁ + a _p2 d ₂ + ... + a _pq d _i + ... + a _pM d _M (B)
M primary combination data v _p calculated by the above is transmitted to the data storage device, and the primary storage data v _p received from the client device is stored in the data storage device. send the stored primary binding data v _p, and sends the aggregated value with aggregate data d _i to the server apparatus reads the primary binding data v _p stored in the data storage device at the client device, wherein An information processing method comprising: registering a total value received from the client device in a server device. Generated or used in the course of processing information between a client device, a server device connected to the client device via a network and transmitting / receiving information to / from the client device, and between the client device and the server device In an information processing system comprising a data storage device that stores data relating to specific information, a program for causing the client device to function,
The client device;
Using M pieces of data d _i (i = 1, 2,..., M) and coefficient data a _pq (p = 1, 2,..., M; q = 1, 2 _,. M primary combination data v _p (p = 1, 2,..., M) is expressed by the following equation (B)
v _p = a _p1 d ₁ + a _p2 d ₂ + ... + a _pq d _i + ... + a _pM d _M (B)
Means for transmitting the M primary combined data v _p calculated by calculating to the data storage device;
A totaling means for reading the primary combined data v _p stored in the data storage device and totaling the data d _i and transmitting the total value to the server device;
Program to function as.

Images