WO2025191796A1 - Secure computation method, secure computation system, data management server, computation execution server, and program - Google Patents

Abstract

Provided is a secure computation method for performing secure computation on data, which is provided to a user by a data provider, by using a computation method desired by the user while keeping the data hidden in a secure computation system that includes a data management server and a calculation execution server. The secure computation method comprises: a data acquisition step in which the data management server generates a data acquisition result including encrypted data obtained by encrypting data that satisfies a data condition representing a condition pertaining to data desired to be used by the user when determining that the data can be provided; and a computation execution step in which the computation execution server generates a first computation result including a computation result obtained by executing secure computation corresponding to the type of computation content and the type of secure computation, the types being specified by a computation condition representing a condition pertaining to secure computation desired to be used by the user for the encrypted data included in the data acquisition result.

Description

Secure computation method, secure computation system, data management server, computation execution server, and program

The present invention relates to secure computation technology under secure data distribution that maintains data confidentiality.

It has long been said that we are in an era where data will be utilized across organizations, industries, and business sectors. Users want to create new value by utilizing data, regardless of its confidentiality, in a computing environment where it can be used safely in accordance with policies set by the data provider. Next-generation data hub technology has been proposed as the technology that will form the foundation for data distribution to achieve this (see non-patent document 1).

Seiichiro Mochida, Takahiko Nagata, and Junshin Mihara, "Next-generation data hub technology for realizing a data-centric society through high-quality, highly reliable data distribution," NTT Technical Journal, December 2020, pp. 23-28, 2020.

However, when highly confidential data is provided by a data provider, there is still a security risk that the data will be used by an unspecified number of users, or that data leaks may occur due to the way the data is used. Meanwhile, users have no efficient way to search for data providers that hold the data they need, and even if they do find one, they may be required to negotiate individual terms regarding data usage. Even if the necessary data is available, users must use the data in a cumbersome manner, subject to strict data management in accordance with policies established by each data provider. To solve this problem, there is a need for a system that matches the requirements of both data providers offering highly confidential data and users who wish to use data for their own purposes, allowing users to obtain the desired computational results from the data provided by the data provider while maintaining the confidentiality of that data.

The present invention aims to provide a secure computation technology that allows users to obtain computation results using their desired computation method using data provided by a data provider, while ensuring the confidentiality of that data.

One aspect of the present invention is a secure computation method in a secure computation system including a data management server and a computation execution server, in which data provided by a data provider is secretly computed using a computation method desired by the user while keeping the data confidential from the user. The method includes a data acquisition step in which, if the data management server determines that the data can be provided, the data acquisition result includes encrypted data obtained by encrypting data that satisfies data conditions that represent conditions related to the data the user wants to use, and a computation execution step in which the computation execution server generates a first computation result including a computation result obtained by performing a secure computation corresponding to the type of computation content and type of secure computation specified in the computation conditions that represent conditions related to the secure computation that the user wants to use, on the encrypted data included in the data acquisition result.

According to the present invention, users can obtain calculation results using their desired calculation method using data provided by data providers while ensuring the confidentiality of that data.

1 is a block diagram showing the configuration of a secure computing system 10. [0023]FIG. FIG. 2 is a block diagram showing the configuration of a terminal 100. FIG. 2 is a block diagram showing the configuration of a gateway server 200. FIG. 3 is a block diagram showing the configuration of a dispatch server 300. FIG. 2 is a block diagram showing the configuration of a data management server 400. FIG. 2 is a block diagram showing the configuration of a calculation execution server 500. 1 is a sequence diagram showing the operation of the secure computing system 10. FIG. 1 is a sequence diagram showing the operation of the secure computing system 10. FIG. FIG. 2 is a block diagram showing the configuration of a data management server 400. FIG. 2 is a block diagram showing the configuration of a calculation execution server 500. 1 is a sequence diagram showing the operation of the secure computing system 10. FIG. FIG. 2 is a diagram illustrating an example of the functional configuration of a computer that realizes each device according to an embodiment of the present invention.

Embodiments of the present invention will be described in detail below. Components with the same functions will be assigned the same numbers, and duplicate explanations will be omitted.

First Embodiment
The secure computation system 10 is a system that enables a data provider to perform secure computation on data provided by the data provider using a computation method desired by the user while keeping the data confidential from the user. Here, for example, homomorphic encryption or secret sharing can be used for the secure computation.

[Configuration of the secure computing system 10]
The configuration of the secure computation system 10 will be described below with reference to Figs. 1 to 6. Fig. 1 is a block diagram showing the configuration of the secure computation system 10. Fig. 2 is a block diagram showing the configuration of the terminal 100. Fig. 3 is a block diagram showing the configuration of the gateway server 200. Fig. 4 is a block diagram showing the configuration of the dispatch server 300. Fig. 5 is a block diagram showing the configuration of the data management server 400. Fig. 6 is a block diagram showing the configuration of the computation execution server 500.

As illustrated in FIG. 1, the secure computing system 10 includes a terminal 100, a gateway server 200, a dispatch server 300, a data management server 400, and a computation execution server 500. The terminal 100, gateway server 200, dispatch server 300, data management server 400, and computation execution server 500 are each connected to a network 900. The network 900 may be any network configured to enable the terminal 100, gateway server 200, dispatch server 300, data management server 400, and computation execution server 500 to communicate with each other, and may be the Internet, for example. FIG. 1 is a diagram showing the logical configuration of the secure computing system 10; physically, the secure computing system 10 may include one or more terminals 100, one or more gateway servers 200, one or more dispatch servers 300, one or more data management servers 400, and one or more computation execution servers 500.

As shown in FIG. 2, the terminal 100 includes a calculation request unit 110, a calculation result acquisition unit 120, a transmission/reception unit 180, and a recording unit 190. The transmission/reception unit 180 is a component for transmitting and receiving information necessary for processing by the terminal 100 via the network 900. The recording unit 190 is a component for appropriately recording information necessary for processing by the terminal 100. The terminal 100 is a terminal used by a user who wishes to perform secure computation on data managed by the secure computation system 10. Here, the data managed by the secure computation system 10 refers to data provided by a data provider.

As shown in FIG. 3, the gateway server 200 includes a management unit selection request unit 210, a computing environment selection request unit 220, a data acquisition request unit 230, a computing environment setup request unit 240, a computation completion confirmation unit 250, a transmission/reception unit 280, and a recording unit 290. The transmission/reception unit 280 is a component for transmitting and receiving information necessary for processing by the gateway server 200 via the network 900. The recording unit 290 is a component for appropriately recording information necessary for processing by the gateway server 200. The gateway server 200 is a server that accepts requests to perform secure computation from users.

As shown in FIG. 4, the dispatch server 300 includes a management unit selection unit 310, a data acquisition request unit 320, a transmission/reception unit 380, and a recording unit 390. The transmission/reception unit 380 is a component for transmitting and receiving information necessary for processing by the dispatch server 300 via the network 900. The recording unit 390 is a component for appropriately recording information necessary for processing by the dispatch server 300. The dispatch server 300 is a server that selects the data management server 400 that manages the data that the user wishes to use.

As shown in FIG. 5, the data management server 400 includes a data acquisition unit 410, a transmission/reception unit 480, and a recording unit 490. The transmission/reception unit 480 is a component for transmitting and receiving information necessary for processing by the data management server 400 via the network 900. The recording unit 490 is a component for appropriately recording information necessary for processing by the data management server 400. The data management server 400 is a server that manages data provided by data providers.

As shown in FIG. 6, the computation execution server 500 includes a computation environment selection unit 510, a computation execution unit 520, a transmission/reception unit 580, and a recording unit 590. The transmission/reception unit 580 is a component for transmitting and receiving information necessary for the processing of the computation execution server 500 via the network 900. The recording unit 590 is a component for appropriately recording information necessary for the processing of the computation execution server 500. The computation execution server 500 is a server that executes secure computations desired by the user.

[Operation of the secure computing system 10]
The operation of the secure computing system 10 will be described below with reference to Figures 7 and 8. Figures 7 and 8 are sequence diagrams showing the operation of the secure computing system 10, and the two figures, Figures 7 and 8, show a series of operations in the secure computing system 10.

In S110, the calculation request unit 110 of the terminal 100 receives the data the user wishes to use and information related to secure calculation, generates a calculation request from that information, and the transmission/reception unit 180 of the terminal 100 transmits the calculation request to the gateway server 200. The transmission/reception unit 280 of the gateway server 200 receives the calculation request.

The computation request includes first and second data conditions that represent conditions related to the data the user wishes to use, and computation conditions that represent conditions related to the secure computation the user wishes to use. Here, the first data condition includes, for example, information related to the type of data (text, image, audio, etc.). The second data condition includes, for example, information related to the start date and size of the data. Note that the first and second data conditions are sometimes collectively referred to as data conditions. The computation condition includes, for example, information related to the type of computation content (statistical processing method, machine learning method, etc.) and the type of secure computation (homomorphic encryption, secret sharing, etc.).

The computation request may also include management unit conditions that represent conditions regarding the management unit of data that the user wishes to use. Here, the data management unit refers to the management unit of the data management server 400, and more specifically, refers to a collection of information for identifying the data management server 400 (hereinafter referred to as the data management server identifier). Here, the data management server identifier may be any information that can uniquely identify the data management server 400 in the secure computing system 10, and may be, for example, the IP address of the data management server 400. Furthermore, the management unit conditions include, for example, information for identifying the management unit (hereinafter referred to as the management unit identifier) and information regarding the number of management units that the user wishes to use for secure computation. Here, the management unit identifier may be any information that can uniquely identify the management unit in the secure computing system 10, and may be, for example, a combination of the IP address of the dispatch server 300 and a local number for management unit management in the dispatch server 300.

The computation request may include computation environment conditions that represent conditions regarding the computation environment that the user wishes to use. Here, the computation environment refers to the computation environment provided by the computation execution server 500. The computation environment conditions also include, for example, information for identifying the computation environment (hereinafter referred to as a computation environment identifier) and information regarding the number of computation environments that the user wishes to use for secure computation. Here, the computation environment identifier may be any information that can uniquely identify the computation environment in the secure computation system 10, and may, for example, be a combination of the IP address of the computation execution server 500 and a local number for computing environment management on that computation execution server 500.

Furthermore, the computation request may include information about the user. Here, information about the user may be, for example, the user name or the user's digital signature.

In S210, the management unit selection request unit 210 of the gateway server 200 receives the calculation request received in S110 as input and generates a management unit selection request from the calculation request, and the transmission/reception unit 280 of the gateway server 200 transmits the management unit selection request to the dispatch server 300. The transmission/reception unit 380 of the dispatch server 300 receives the management unit selection request. The management unit selection request includes the first data condition included in the calculation request. Furthermore, if the calculation request includes a management unit condition, the management unit selection request includes the management unit condition.

In S220, the computing environment selection request unit 220 of the gateway server 200 receives the computing request received in S110 as input and generates a computing environment selection request from the computing request, and the transmission/reception unit 280 of the gateway server 200 transmits the computing environment selection request to the computing execution server 500. The transmission/reception unit 580 of the computing execution server 500 receives the computing environment selection request. The computing environment selection request includes the computing conditions included in the computing request. Furthermore, if the computing request includes computing environment conditions, the computing environment selection request also includes the computing environment conditions.

At S310, the management unit selection unit 310 of the dispatch server 300 receives the management unit selection request received at S210 as input, selects one or more management units based on the management unit selection request, and generates a management unit selection result including a management unit identifier corresponding to the selected management unit. The transmission/reception unit 380 of the dispatch server 300 transmits the management unit selection result to the gateway server 200. The transmission/reception unit 280 of the gateway server 200 receives the management unit selection result. The management unit selection result also includes the data management server identifier included in the selected management unit. In other words, the management unit selection result includes one or more management unit identifiers and one or more data management server identifiers.

The management unit selection unit 310 uses the first data condition included in the management unit selection request to select a management unit that includes the data management server identifier of the data management server 400 that manages data of the data type specified in the first data condition. Furthermore, if the management unit selection request includes a management unit condition, and the management unit condition is information related to a management unit identifier, the management unit selection unit 310 selects the management unit corresponding to the management unit identifier, and if the management unit condition is information related to the number of management units, the management unit selection unit 310 selects that number of management units according to a predetermined criterion. Here, the predetermined criterion is, for example, descending order of the number of data management server identifiers included in the management units.

In S510, the computing environment selection unit 510 of the computing execution server 500 receives the computing environment selection request received in S220 as input, selects one or more computing environments based on the computing environment selection request, and generates a computing environment selection result including a computing environment identifier corresponding to the selected computing environment. The transmission/reception unit 580 of the computing execution server 500 transmits the computing environment selection result to the gateway server 200. The transmission/reception unit 280 of the gateway server 200 receives the computing environment selection result.

The computing environment selection unit 510 uses the computation conditions included in the computation environment selection request to select a computation environment that can execute the type of computation content or type of secure computation specified in the computation conditions. Furthermore, if the computation environment selection request includes computation environment conditions, and the computation environment conditions are information related to a computation environment identifier, the computing environment selection unit 510 selects the computation environment corresponding to the computation environment identifier, and if the computation environment conditions are information related to the number of computation environments, the computing environment selection unit 510 selects that number of computation environments according to a predetermined criterion. Here, the predetermined criterion is, for example, the order of the most available computing environment resources (for example, CPUs and memory allocated to the computation environments).

At S230, the data acquisition request unit 230 of the gateway server 200 receives as input the calculation request received at S110, the management unit selection result received at S310, and the calculation environment selection result received at S510, and generates a first data acquisition request from the calculation result, the management unit selection result, and the calculation environment selection result. The transmission/reception unit 280 of the gateway server 200 transmits the first data acquisition request to the dispatch server 300. The transmission/reception unit 380 of the dispatch server 300 receives the first data acquisition request. The first data acquisition request includes the first data condition, second data condition, and calculation condition included in the calculation request, the management unit identifier included in the management unit selection result, and the calculation environment identifier included in the calculation environment selection result. The first data acquisition request may also include information about the user included in the calculation request.

At S240, the computing environment setup request unit 240 of the gateway server 200 receives as input the computing request received at S110, the management unit selection result received at S310, and the computing environment selection result received at S510, and generates a computing environment setup request from the computing result, the management unit selection result, and the computing environment selection result. The transmission/reception unit 280 of the gateway server 200 then transmits the computing environment setup request to the computing execution server 500. The transmission/reception unit 580 of the computing execution server 500 receives the computing environment setup request. The computing environment setup request includes the computing conditions included in the computing request, the data management server identifier included in the management unit selection result, and the computing environment identifier included in the computing environment selection result.

At S320, the data acquisition request unit 320 of the dispatch server 300 receives the first data acquisition request received at S230 as input, generates a second data acquisition request from the first data acquisition request, and the transmission/reception unit 380 of the dispatch server 300 transmits the second data acquisition request to the data management server 400. At that time, the data acquisition request unit 320 identifies the data management server 400 that will transmit the second data acquisition request using the data management server identifier included in the management unit corresponding to the management unit identifier included in the first data acquisition request. The transmission/reception unit 480 of the data management server 400 receives the second data acquisition request. The second data acquisition request includes the first data condition, second data condition, calculation condition, and calculation environment identifier included in the first data acquisition request. The second data acquisition request may also include information about the user included in the first data acquisition request.

At S410, the data acquisition unit 410 of the data management server 400 receives the second data acquisition request received at S320 as input and generates a data acquisition result based on the second data acquisition request. The transmission/reception unit 480 of the data management server 400 then transmits the data acquisition result to the calculation execution server 500. At this time, the data acquisition unit 410 determines whether to provide data based on the first data condition, second data condition, and calculation condition included in the second data acquisition request, as well as information about the user if the second data acquisition request includes such information. If it determines that data can be provided, the data acquisition unit 410 generates a data acquisition result that includes information indicating that data can be provided, encrypted data obtained by encrypting data that satisfies the first and second data conditions, and the calculation environment identifier included in the second data acquisition request. Otherwise, the data acquisition result includes information indicating that data cannot be provided. Here, the encrypted data is generated according to the type of secure computation specified in the calculation conditions. The transmission/reception unit 580 of the calculation execution server 500 receives the data acquisition result.

At S520, the computation execution unit 520 of the computation execution server 500 receives as input the computation environment setup request received at S240 and the data acquisition result received at S410, generates a first computation result based on the computation environment setup request and the data acquisition result, and the transceiver unit 580 of the computation execution server 500 transmits the first computation result to the gateway server 200. At this time, if the data acquisition result includes information indicating that data is available, and if the computation environment identifier included in the computation environment setup request matches the computation environment identifier included in the data acquisition result, the computation execution unit 520 places the encrypted data included in the data acquisition result in the computation environment corresponding to the computation environment identifier, performs secure computation corresponding to the type of computation content and type of secure computation specified in the computation conditions included in the computation environment setup request, and generates a first computation result including the obtained computation result; otherwise, the computation execution unit 520 generates a first computation result including information indicating that the computation cannot be performed. It is preferable that the computation execution unit 520 use the data management server identifier included in the computation environment setup request to determine whether the encrypted data required for secure computation is available. The transmitter/receiver 280 of the gateway server 200 receives the first calculation result.

In S250, the calculation completion confirmation unit 250 of the gateway server 200 receives the first calculation result received in S520 as input and generates a second calculation result from the first calculation result, and the transmission/reception unit 280 of the gateway server 200 transmits the second calculation result to the terminal 100. The transmission/reception unit 180 of the terminal 100 receives the second calculation result. The second calculation result includes either the calculation result included in the first calculation result or information indicating that the calculation cannot be performed.

In S120, the calculation result acquisition unit 120 of the terminal 100 receives as input the second calculation result received in S250, and if the second calculation result contains a calculation result, it decrypts the calculation result to obtain the plaintext calculation result; otherwise, it generates information to indicate to the user that the secure calculation could not be performed.

According to an embodiment of the present invention, users can obtain calculation results using their desired calculation method using data provided by data providers while ensuring the confidentiality of that data.

Second Embodiment
In the first embodiment, the first data condition and the second data condition corresponding to all conditions related to the data that the user wants to use are disclosed to the dispatch server 300. In this embodiment, a form in which the second data condition is not disclosed to the dispatch server 300 will be described.

[Configuration of the secure computing system 10]
The configuration of the secure computation system 10 will be described below with reference to Figures 1 to 4 and Figures 9 to 10. Figure 1 is a block diagram showing the configuration of the secure computation system 10. Figure 2 is a block diagram showing the configuration of the terminal 100. Figure 3 is a block diagram showing the configuration of the gateway server 200. Figure 4 is a block diagram showing the configuration of the dispatch server 300. Figure 9 is a block diagram showing the configuration of the data management server 400. Figure 10 is a block diagram showing the configuration of the computation execution server 500. In other words, the secure computation system 10 of this embodiment differs from the secure computation system 10 of the first embodiment in terms of the configurations of the data management server 400 and the computation execution server 500.

As shown in FIG. 9, the data management server 400 includes a data acquisition unit 410, a data acquisition condition request unit 420, a transmission/reception unit 480, and a recording unit 490. The data management server 400 of this embodiment differs from the data management server 400 of the first embodiment in that it includes the data acquisition condition request unit 420.

As shown in FIG. 10, the calculation execution server 500 includes a calculation environment selection unit 510, a calculation execution unit 520, a data acquisition condition specification unit 530, a transmission/reception unit 580, and a recording unit 590. The calculation execution server 500 of this embodiment differs from the calculation execution server 500 of the first embodiment in that it includes the data acquisition condition specification unit 530.

[Operation of the secure computing system 10]
The operation of the secure computing system 10 will be described below with reference to Fig. 7 and Fig. 11. Fig. 7 and Fig. 11 are sequence diagrams showing the operation of the secure computing system 10, and the two diagrams of Fig. 7 and Fig. 11 show a series of operations in the secure computing system 10.

The processing in S110, S210, S220, S310, and S510 is the same as that described in the first embodiment. Note that the second data conditions, calculation conditions, and user-related information included in the calculation request may be encrypted using a specified method before being included in the calculation request. In this case, each server that receives the encrypted conditions and information should be configured to be able to decrypt them as necessary.

The processing at S230 is the same as that described in the first embodiment. However, the first data acquisition request includes the first data condition included in the calculation request, the management unit identifier included in the management unit selection result, and the calculation environment identifier included in the calculation environment selection result.

The processing in S240 is the same as that described in the first embodiment. However, the computing environment setup request includes the second data conditions and computation conditions included in the computation request, the data management server identifier included in the management unit selection result, and the computation environment identifier included in the computation environment selection result. The computing environment setup request may also include information about the user included in the computation request.

The processing at S320 is the same as that described in the first embodiment. However, the second data acquisition request includes the first data condition and computing environment identifier included in the first data acquisition request.

At S420, the data acquisition condition request unit 420 of the data management server 400 receives the second data acquisition request received at S320 as input and generates a data acquisition condition request based on the second data acquisition request. The transmission/reception unit 480 of the data management server 400 then transmits the data acquisition condition request to the calculation execution server 500. At that time, the data acquisition condition request unit 420 determines whether the data provision conditions can be provided using the first data conditions and calculation environment identifier included in the second data acquisition request. If it determines that the data provision conditions can be provided, it generates a data acquisition condition request including the data provision conditions and information indicating that the data provision conditions can be provided; otherwise, it generates a data acquisition condition request including information indicating that the data provision conditions cannot be provided. The transmission/reception unit 580 of the calculation execution server 500 receives the data acquisition condition request.

At S530, the data acquisition condition specification unit 530 of the calculation execution server 500 receives as input the calculation environment setup request received at S240 and the data acquisition condition request received at S420, generates a data acquisition condition specification result based on the calculation environment setup request and the data acquisition condition request, and the transmission/reception unit 580 of the calculation execution server 500 transmits the data acquisition condition specification result to the data management server 400. At that time, if the data acquisition condition request includes information indicating that the data provision conditions can be provided, and the data acquisition condition specification unit 530 determines that the data provision conditions are met, the data acquisition condition specification unit 530 generates a data acquisition condition specification result that includes the second data condition and calculation condition included in the calculation environment setup request; otherwise, it generates a data acquisition condition specification result that includes information indicating that calculation cannot be executed. The data acquisition condition specification result may also include information about the user included in the calculation environment setup request. The transmission/reception unit 480 of the data management server 400 receives the data acquisition condition specification result.

At S410, the data acquisition unit 410 of the data management server 400 receives as input the second data acquisition request received at S320 and the data acquisition condition specification result received at S530, generates a data acquisition result based on the second data acquisition request and the data acquisition condition specification result, and the transceiver unit 480 of the data management server 400 transmits the data acquisition result to the calculation execution server 500. At this time, the data acquisition unit 410 determines whether to provide data using the first data condition included in the second data acquisition request, the second data condition included in the data acquisition condition specification result, and the calculation conditions, as well as information about the user if such information is included in the data acquisition condition specification result. If it determines that data can be provided, it generates a data acquisition result that includes information indicating that data can be provided, encrypted data obtained by encrypting data that satisfies the first and second data conditions, and the calculation environment identifier included in the second data acquisition request. Otherwise, it generates a data acquisition result that includes information indicating that data cannot be provided. Here, the encrypted data is generated according to the type of secure calculation specified in the calculation conditions. The transmission/reception unit 580 of the calculation execution server 500 receives the data acquisition results.

The processing in S520, S250, and S120 is the same as that described in the first embodiment.

According to an embodiment of the present invention, users can obtain calculation results using their desired calculation method using data provided by data providers while ensuring the confidentiality of that data.

<Additional Notes>
The functions performed by the components described herein may be implemented in circuitry or processing circuitry, including general-purpose processors, application-specific processors, integrated circuits, ASICs (Application Specific Integrated Circuits), CPUs (Central Processing Units), conventional circuits, and/or combinations thereof, programmed to perform the described functions. A processor includes transistors and other circuits and is considered to be circuitry or processing circuitry. A processor may also be a programmed processor that executes programs stored in memory.

In this specification, a circuit, unit, or means refers to hardware that is programmed to realize or executes the described functions. The hardware may be any hardware disclosed in this specification or any hardware known to be programmed to realize or execute the described functions.

If the hardware is a processor, which is considered to be a type of circuitry, the circuitry, means, or unit is the combination of the hardware and the software used to configure the hardware and/or processor.

The various processes described above can be implemented by loading a program that executes each step of the above method into the recording unit 2020 of the computer 2000 shown in FIG. 12 and operating the control unit 2010, input unit 2030, output unit 2040, display unit 2050, etc.

The program describing this processing can be recorded on a computer-readable recording medium. Examples of computer-readable recording media include magnetic recording devices, optical disks, magneto-optical recording media, and semiconductor memory.

In addition, this program may be distributed, for example, by selling, transferring, or lending portable recording media such as DVDs or CD-ROMs on which the program is recorded. Furthermore, the program may be stored in a storage device on a server computer, and then transferred from the server computer to other computers via a network, thereby distributing the program.

A computer that executes such a program, for example, first stores the program recorded on a portable recording medium or transferred from a server computer in its own storage device. Then, when executing processing, the computer reads the program stored in its storage device and executes processing in accordance with the read program. As another form of execution of this program, the computer may read the program directly from the portable recording medium and execute processing in accordance with that program, or it may execute processing in accordance with the received program each time a program is transferred to this computer from the server computer. Alternatively, the server computer may not transfer the program to this computer, but rather executes processing using a so-called ASP (Application Service Provider) type service, which realizes processing functions simply by issuing execution instructions and obtaining results. Furthermore, the computer may be configured to execute terminal processing using a so-called SaaS (Software as a Service) type service, which allows users to use part of a server computer along with the program. In this embodiment, the program includes information used for processing by an electronic computer that is equivalent to a program (such as data that is not a direct command to a computer but has properties that dictate computer processing).

In addition, in this embodiment, the device is configured by executing a specific program on a computer, but at least part of the processing may also be implemented in hardware.

The present invention is not limited to the above-described embodiments, and modifications can be made as appropriate without departing from the spirit of the present invention. Furthermore, the processes described in the above embodiments are not limited to being executed chronologically in the order described, but may also be executed in parallel or individually depending on the processing capacity of the device executing the processes or as needed.

Claims (5)

A secure computation method for a secure computation system including a data management server and a computation execution server, in which data provided by a data provider is computed secretly from a user using a computation method desired by the user, while keeping the data confidential, comprising:
a data acquisition step in which the data management server generates a data acquisition result including encrypted data obtained by encrypting data that satisfies a data condition that indicates a condition related to data that the user wants to use, when the data management server determines that the data can be provided;
a calculation execution step in which the calculation execution server generates a first calculation result including a calculation result obtained by executing a secure calculation corresponding to a type of calculation content and a type of secure calculation specified in a calculation condition that represents a condition related to secure calculation that the user wants to use, using the encrypted data included in the data acquisition result as the target;
A secret computation method including: A secure computation system including a data management server and a computation execution server, which performs secure computation on data provided by a data provider using a computation method desired by the user while keeping the data confidential from the user,
The data management server
a data acquisition unit that generates a data acquisition result including encrypted data obtained by encrypting data that satisfies a data condition that indicates a condition related to data that the user wants to use when it is determined that the data can be provided;
Including,
The calculation execution server
a calculation execution unit that generates a first calculation result including a calculation result obtained by executing a secure calculation corresponding to a type of calculation content and a type of secure calculation specified in a calculation condition that indicates a condition related to secure calculation that a user wants to use, on encrypted data included in the data acquisition result; and
A secure computing system including: A data management server included in a secure computation system that performs secure computation on data provided by a data provider using a computation method desired by the user while keeping the data confidential from the user,
a data acquisition unit that generates a data acquisition result including encrypted data obtained by encrypting data that satisfies a data condition that indicates a condition related to data that the user wants to use when it is determined that the data can be provided;
a data management server including: A calculation execution server included in a secure calculation system that performs secure calculation on data provided by a data provider using a calculation method desired by the user while keeping the data confidential from the user,
a calculation execution unit that generates a first calculation result including a calculation result obtained by executing a secure calculation corresponding to a type of calculation content and a type of secure calculation specified in a calculation condition that represents a condition related to secure calculation that the user wants to use, on encrypted data obtained by encrypting data that satisfies a data condition that represents a condition related to data that the user wants to use;
A calculation execution server including: A program for causing a computer to function as either the data management server described in claim 3 or the calculation execution server described in claim 4.