Information processing method, information processing system, and information processing apparatus
In a case where data is provided to a plurality of third parties, an embodiment of the present invention provides a method and the like for checking the consent and disclosure history of disclosure to the third parties while also reducing the disadvantages from a data leak. An information processing method according to an embodiment of the present invention includes writing, to a blockchain, a consent record indicating a consent with respect to the handling of data and a related party related to the consent or the data. In the case where executing the handling in the consent record would allow the data to be usable by a third party that is neither the executing party executing the handling nor the related party, the consent record is written such that the identifier is changed to a different identifier uniquely corresponding to the third party.
1. An information processing method comprising:
writing, to a blockchain, a consent record indicating a consent with respect to a handling of data and an identifier expressing a related party that is related to the consent or the data, wherein
in a case where executing the handling in the consent record would allow the data to be usable by a third party that is neither an executing party executing the handling nor the related party, the consent record is written such that the identifier is changed to a different identifier uniquely corresponding to the third party.
2. The information processing method according to claim 1 , further comprising:
detecting, from the blockchain, a consent record that expresses the related party with an identifier that does not uniquely correspond to the third party in a case where a consent record in which a notation of the related party is an identifier uniquely corresponding to the third party has been written; and
writing the detected consent record to the blockchain again after changing the notation of the related party to the identifier uniquely corresponding to the third party.
3. The information processing method according to claim 2 , further comprising:
writing, to the blockchain, a handling execution record indicating that the handling indicated by a consent record in which the notation of the related party is an identifier uniquely corresponding to the third party has been executed, wherein
in the writing of the handling execution record, information enabling detection of the consent record with respect to the handling in the handling execution record and in which the notation of the related party is set with the identifier uniquely corresponding to the third party is included in the handling execution record.
4. The information processing method according to claim 3 , wherein
in the writing of the handling execution record, information enabling detection of a consent record in which the notation of the related party is an identifier other than the identifier uniquely corresponding to the third party is removed from the handling execution record.
5. The information processing method according to claim 1 , further comprising:
writing, to the blockchain, a handling execution record indicating that the handling indicated in the consent record has been executed.
6. The information processing method according to claim 1 , further comprising:
writing, to the blockchain, a usage record indicating that the data is usable by the third party or that the third party has used the data.
7. The information processing method according to claim 6 , wherein
in the writing of the usage record, at least one consent record in which the notation of the related party is an identifier uniquely corresponding to the third party is detected from the blockchain, and the identifier in the detected consent record is included in the usage record.
8. The information processing method according to claim 1 , wherein
the handling by which the data is usable by the third party is providing the data to the third party, and
the identifiers of the related party indicated in each consent record consenting to providing the data to respective third parties are different from each other.
9. The information processing method according to claim 1 , wherein
a consent record in which the identifier is changed to a different identifier uniquely corresponding to the third party and also a consent record in which the identifier is an identifier that does not uniquely correspond to the third party are written to the blockchain.
10. An information processing system comprising a first information processing apparatus, a second information processing apparatus configured to handle data from the first information processing apparatus, and a plurality of third information processing apparatuses configured to use the data from the second information processing apparatus, wherein
at least one of the first information processing apparatus and the second information processing apparatus directly or indirectly writes, to a blockchain, a consent record indicating a consent with respect to a handling of the data and a related party related to the consent or the data, and
when writing the consent record to the blockchain, in a case where the consent record relates to a handling that would allow the data to be usable by the third information processing apparatuses, at least one of the first information processing apparatus and the second information processing apparatus sets a notation of the related party to an identifier prescribed differently for each third information processing apparatus.
11. An information processing apparatus that writes, to a blockchain, a consent record indicating a consent with respect to a handling of data and a related party that is related to the consent or the data, wherein
when writing the consent record to the blockchain, in a case where the consent record relates to a handling that, when executed, would allow the data to be usable by a third party that is neither an executing party executing the handling nor the related party, the information processing apparatus sets a notation of the related party to an identifier uniquely corresponding to the third party.