IP Library › Granted Patent US 11,720,689
Granted Patent B2
US 11,720,689 · App. 16/757,736 · Granted Aug 8, 2023

Data registration method, data decryption method, data structure, computer, and program

Inventors: Hiroki Watanabe (Yokosuka, JP); Shigenori Ohashi (Yokosuka, JP); Shigeru Fujimura (Yokosuka, JP); Atsushi Nakadaira (Yokosuka, JP); Satoshi Sakuma (Yokosuka, JP)
Assignee: Nippon Telegraph and Telephone Corporation
G06F21/602G06F16/27H04L9/0861H04L9/30H04L9/50
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,720,689
App. No.
16/757,736
Granted
Aug 8, 2023
Kind
B2
Abstract

An objective is to manage contract data registered in a distributed ledger with part of the contract data flexibly concealed without a centralized concealment server and without bothering the user with complicated procedures or the key management. A data registration method performed by a computer includes: generating a common key for encrypting and decrypting an item included in data that is registered in a distributed ledger; acquiring a public key for each account of a user having access authority to the item; encrypting the common key with the public key for each account; and registering the common key encrypted for each account in the distributed ledger via a transaction.

Claims (56)

1. A data registration method performed by a computer, comprising:

receiving a request for registering data from a user terminal, wherein the data includes a plurality of items;

receiving information indicating one of the items of the data is to be encrypted;

generating a common key for encrypting and decrypting the item, wherein the common key is associated with the item;

acquiring a public key for each account of a user having access authority to the item;

encrypting the common key with the public key for each account;

registering the common key encrypted for each account in a distributed ledger;

encrypting the item using the common key;

registering the data in the distributed ledger with a single transaction, wherein the transaction includes the item encrypted with the common key, and the remaining items of the data unencrypted with the common key;

receiving additional information indicating an additional item of the data to be encrypted; and

generating an additional common key for encrypting and decrypting the additional item, wherein the additional common key is associated with the additional item.

2. The data registration method according to claim 1 , wherein

the common key is generated in response to reception of the request for registering the data in the distributed ledger.

3. A data decryption method performed by a computer, comprising:

acquiring data that is registered in a distributed ledger via a single transaction, wherein the data includes a plurality of items, one of the items is an encrypted item encrypted with an associated common key, another one of the items is an additional encrypted item encrypted with an additional associated common key, and the remaining items are unencrypted with the associated common key or the additional associated common key;

acquiring concealment management information registered in the distributed ledger, wherein the concealment management information includes the associated common key encrypted with a public key for a user having access authority;

decrypting the encrypted associated common key using a secret key corresponding to an account of the user having access authority to obtain a decrypted associated common key;

decrypting the encrypted item using the decrypted associated common key;

decrypting the additional encrypted item using a decrypted additional associated common key; and

providing the data to the account of the user, wherein the data includes the decrypted item, the decrypted additional item, and the remaining items.

4. A non-transitory computer readable medium, storing a program that causes a computer to execute a process, comprising:

registering account information for a user having access authority to an encrypted item of data registered in a distributed ledger, wherein the account information includes a public key for the user;

receiving a request for registering data from a user terminal, wherein the data includes a plurality of items of data;

receiving information indicating one of the items of data is the encrypted item;

receiving information on the public key for the user having access authority;

encrypting an associated common key for the item with the public key for the user having access authority;

registering the data in the distributed ledger with a single transaction, wherein the transaction includes the encrypted item encrypted with the associated common key and the remaining items of the data unencrypted with the associated common key;

receiving additional information indicating an additional item of the data to be encrypted; and

generating an additional common key for encrypting and decrypting the additional item, wherein the additional common key is associated with the additional item,

wherein the associated common key and the additional common key are decrypted using a secret key corresponding to the public key for the user having access authority,

the decrypted associated common key is used for decrypting the encrypted item, and

the decrypted additional common key is used for decrypting the additional encrypted item.

5. A computer, comprising:

at least one memory; and

a processor, wherein the processor is configured to access the at least one memory and to execute functions that perform:

receiving a request for registering data from a user terminal, wherein the data includes a plurality of items;

receiving information indicating one of the items of the data is to be encrypted;

generating a common key for encrypting and decrypting the item, wherein the common key is associated with the item;

acquiring a public key for each account of a user having access authority to the item;

encrypting the common key with the public key for each account;

registering the common key encrypted for each account in a distributed ledger;

encrypting the item using the common key;

registering the data in the distributed ledger with a single transaction, wherein the transaction includes the item encrypted with the common key and the remaining items of the data unencrypted with the common key;

receiving additional information indicating an additional item of the data is to be encrypted; and

generating an additional common key for encrypting and decrypting the additional item, wherein the additional common key is associated with the additional item.

6. A non-transitory computer readable storage medium storing a program that causes a computer to execute a process comprising:

receiving a request for registering data from a user terminal, wherein the data includes a plurality of items;

receiving information indicating one of the items of the data is to be encrypted;

generating a common key for encrypting and decrypting the item, wherein the common key is associated with the item;

acquiring a public key for each account of a user having access authority to the item;

encrypting the common key with the public key for each account;

registering the common key encrypted for each account in a distributed ledger;

encrypting the item using the common key;

registering the data in the distributed ledger with a single transaction, wherein the transaction includes the item encrypted with the common key and the remaining items of the data unencrypted with the common key;

receiving additional information indicating an additional item of the data is to be encrypted; and

generating an additional common key for encrypting and decrypting the additional item, wherein the additional common key is associated with the additional item.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 20, 2020
From: WATANABE, HIROKI; OHASHI, SHIGENORI; FUJIMURA, SHIGERU; NAKADAIRA, ATSUSHI; SAKUMA, SATOSHI
To: NIPPON TELEGRAPH AND TELEPHONE CORPORATION
Reel/Frame 052446/0742 →
Priority Claims (1)
JP 2017-208384 · Oct 27, 2017 · national
Continuity (1)
Related Publication 20210192059A1 · Jun 24, 2021
Cited By (1)
US 12,219,046