JP7284957B2 - Information management device - Google Patents

Description

The present invention relates to an information management device that manages user information.

2. Description of the Related Art Conventionally, as an information management device, the one described in Patent Document 1 is known. This information management device is applied to an information management system that matches job seekers with a plurality of companies belonging to a joint venture. In this information management system, terminals of job seekers, information management devices of human resource service companies, shared databases, etc. are connected to a network.

In the case of this information management system, recruitment information data of a company is stored in a shared database, and job seeker's desired conditions of employment and attribute information are registered in the information management device of a personnel service company via a terminal. In addition, job seekers' work performance information at joint ventures is registered on the blockchain.

Japanese Patent No. 6713588

In recent years, when user information is stored in a server or the like, there is a risk of user information being leaked due to unauthorized access such as hacking. On the other hand, according to the above-mentioned conventional information management system, since the job seeker's attribute information is merely registered in the information management device of the personnel service company, unauthorized access to this information management device is carried out. In such a case, there is a risk that the job seeker's attribute information will be leaked.

SUMMARY OF THE INVENTION It is an object of the present invention to provide an information management apparatus capable of ensuring the safety of information registered by a user and ensuring high traceability. .

In order to achieve the above object, the invention according to claim 1 is connected to a user terminal owned by a user and a blockchain through a network, and information for managing registration data that is data for user registration. A management device comprising: a communication unit that performs data communication between a blockchain and a user terminal; and encryption processing and division when a registration signal including registration data from the user terminal is received by the communication unit An encrypted data creation unit that creates first encrypted data and second encrypted data by performing processing on the registration data, and a storage unit that stores the first encrypted data in a storage unit separate from the block chain. a registration unit; and a control unit that controls the communication unit to transmit a second encrypted data signal including the second encrypted data to the blockchain to register the second encrypted data in the blockchain. It is characterized by having

According to this information management device, when the registration signal including the registration data from the user terminal is received by the communication unit, the first encrypted data and the Second encrypted data is created, and the first encrypted data is stored in a storage separate from the blockchain by the registration unit. Further, the communication unit is controlled so as to transmit the second encrypted data signal including the second encrypted data to the block chain, so that the second encrypted data is registered in the block chain. As described above, by performing the encryption process and the division process on the registration data, the first encrypted data and the second encrypted data are created, the first encrypted data is stored in the storage unit, and the second encrypted data is stored. Since the encrypted data is registered in the blockchain, by encrypting the registration data, the security of the registration data can be improved, and all the encrypted registration data can be registered/stored in one place. The security of registration data can be further enhanced compared to the case where In addition, since the second encrypted data is registered in the block chain, it is possible to trace the viewing history of the second encrypted data and ensure high traceability.

The invention according to claim 2 is the information management device according to claim 1, in which, when the predetermined information signal is received from the user terminal by the communication unit, the secret key is acquired from the block chain, and the identification information data including the secret key is obtained. and further comprising an identification information data creation unit that divides the identification information data into first identification data and second identification data, the registration unit further storing the first identification data in the storage unit, The control unit controls the communication unit to transmit a signal including the second identification data to the user terminal, the registration signal includes the registration data and the second identification data, and the encrypted data creation unit , when the registration signal is received by the communication unit, the first identification information data is obtained from the storage unit, the secret key is obtained from the first identification information data and the second identification information data, and using the secret key, It is characterized by encrypting the data for registration.

According to this information management device, when the registration signal including the registration data and the second identification data is received by the communication unit, the encrypted data creation unit acquires the first identification data from the storage unit, A secret key is obtained from the first identification data and the second identification data, and the registration data is encrypted using the secret key. In this way, the private key cannot be acquired unless the communication unit receives the signal including the second identification data from the user terminal, so that the security of private key management can be enhanced. Also, the identification information data including the secret key is divided into first identification information data and second identification information data, a signal including the second identification information data is transmitted to the user terminal, and the first identification information data is stored in the storage unit. Therefore, even if unauthorized access such as hacking occurs to the storage unit, it is possible to avoid leakage of the private key and ensure high security.

The invention according to claim 3 is the information management device according to claim 2, wherein when the predetermined information signal is received by the communication unit, the identification information data creation unit further acquires the public key from the blockchain, and the identification information The data is created as data containing a public key and a private key, and the encrypted data creation unit further creates an encrypted transaction code by encrypting the transaction code in the second encrypted data signal using the private key. , the registration unit further stores the encrypted transaction code in the storage unit, and when the communication unit receives a signal including the second identification data and requesting acquisition of registration data from the user terminal, the storage unit a code decryption unit that obtains the first identification information data from the first identification information data and the public key from the first identification information data and the second identification information data, and uses the public key to decrypt the encrypted transaction code; The unit further controls the communication unit to transmit a signal containing the transaction code decoded by the code decoding unit to the blockchain, and after the signal containing the transaction code is transmitted to the blockchain, a second signal from the blockchain 2 When a signal containing encrypted data is received by the communication unit, the first encrypted data is obtained from the storage unit, and the combining process and the public key are used for the first encrypted data and the second encrypted data. further comprising a registration data obtaining unit for obtaining registration data by performing decoding processing, wherein the control unit transmits a signal including the registration data obtained by the registration data obtaining unit to the user terminal; , further controlling the communication unit.

According to this information management device, when the signal including the second identification data and requesting acquisition of the registration data is received by the communication unit from the user terminal, the first identification data and the second identification data A public key is obtained from and the public key is used to decrypt the encrypted transaction code. Then, after the signal containing the decrypted transaction code is transmitted to the blockchain, when the signal containing the second encrypted data from the block chain is received by the communication unit, the second encrypted data and stored in the storage unit The registration data is acquired by performing the combination processing and the decryption processing using the public key on the first encrypted data thus obtained. In this way, the public key cannot be obtained unless the communication unit receives the signal including the second identification data from the user terminal, so that public key management security can be enhanced. Also, unless the public key is used to decrypt the encrypted transaction code, the second encrypted data cannot be obtained from the blockchain, and the first encrypted data and the second encrypted data are combined and decrypted. Since the registration data cannot be obtained, it is possible to improve the security of management of the registration data.

1 is a diagram schematically showing the configuration of an information management system including an information management device according to a first embodiment of the present invention; FIG. It is a block diagram which shows the functional structure of an information management apparatus. FIG. 10 is a sequence diagram showing control operations when registering a user's account in the information management system; FIG. 10 is a sequence diagram showing control operations when registration data is registered in the information management system; FIG. 10 is a sequence diagram showing control operations when necessary data is acquired from the information management system; FIG. 11 is a diagram schematically showing the configuration of an information management system including an information management device according to a second embodiment; FIG.

An information management system including an information management device according to a first embodiment of the present invention will be described below with reference to the drawings. This information management system manages personal information data of a plurality of users.

As shown in FIG. 1, an information management system 1 includes a data server 2, a plurality of user terminals 3 (only one is shown), a block chain 4, and the like. In this information management system 1, a data server 2 is connected to a user terminal 3 and a block chain 4 via a network 5 so as to enable data communication, and the network 5 is composed of a wireless network, a wired network, and the like. It is

The data server 2 as an information management device includes a controller 20, a storage 21, a communication device 22, etc., as shown in FIG. The controller 20 is composed of a processor, a memory and an I/O interface (none of which are shown), and software for data management, which will be described later, is installed.

Further, as shown in FIG. 2, the controller 20 functions as an identification information data creation unit 20a, an encrypted data creation unit 20b, a code decryption unit 20c, a control unit 20d, a registration data acquisition unit 20e, and a registration unit 20f. I have. The identification information data creation unit 20a executes the identification information data creation process (FIG. 3/STEP 4) described later, and the encrypted data creation unit 20b executes the data encryption division process (FIG. 4/STEP 22) described later. be done.

Further, the code decoding unit 20c executes a code decoding process (FIG. 5/STEP 42), which will be described later, and the control unit 20d controls the communication device 22 to execute various data communication processes, which will be described later. Further, the registration data acquisition unit 20e executes a data combination decryption process (FIG. 5/STEP 45) described later, and the registration unit 20f executes a storage process of the first encrypted data (FIG. 4/STEP 23) described later. be.

Also, the storage 21 is configured by a storage device such as an HDD, and stores a database in this storage 21 . This database contains, as data, first identification information data, first encrypted data, and encrypted code, which will be described later. In addition, in this embodiment, the storage 21 corresponds to a storage unit.

Furthermore, the communication device 22 performs data communication between the user terminal 3 and the blockchain 4 by having its operating state controlled by the controller 20 . In addition, in this embodiment, the communication device 22 corresponds to a communication unit.

On the other hand, the user terminal 3 is of a smartphone type, and includes a controller (not shown), a display 3a, a wireless communication device (not shown), and the like. Various application software including access software for accessing the information management system 1 and registering data is installed in this controller. Moreover, the display 3 a is configured by a capacitive touch panel, and is arranged so that its front surface faces the surface of the user terminal 3 .

Although not shown, various icons corresponding to various application software including the above-described access software are displayed on the display 3a. Further, in the display 3a, when the user performs an input operation (for example, tap, swipe, pinch-out, pinch-in, etc.), an operation signal representing the operation is output to the controller. Based on this operation signal, the controller executes various control processes as will be described later.

Also, the block chain 4 is a public block chain, and is composed of a distributed network in which a plurality of nodes 4a (only six are shown) are network-connected so as to be able to communicate with each other. These nodes 4a are configured by, for example, servers. Note that the number of nodes 4a is not limited to six in FIG. 1, and may be any number.

An account of a user 6 is registered in this block chain 4, and a user ID, a private key and a public key are registered as account information of the user 6. FIG. As will be described later, an account information signal including these user ID, private key and public key is transmitted from the blockchain 4 to the data server 2 .

Next, the contents of the control operation executed in the information management system 1 configured as described above will be described. First, referring to FIG. 3, the control operation when the user 6 registers his/her own account in the information management system 1 will be described.

As shown in FIG. 3, the user terminal 3 first executes a process of inputting personal identification information (FIG. 3/STEP 1). In this process, first, the above-described access software is activated, and then the user 6 inputs his/her personal identification information to the user terminal 3 . In this case, in addition to personal information such as the date of birth of the user 6, information such as a password for identity verification is used as the identity verification information.

When the user 6 executes the transmission operation after completing the input of the personal identification information, the personal identification information signal including the personal identification information is transmitted from the user terminal 3 to the data server 2 .

When the personal identification information signal is received by the data server 2, the data server 2 executes information request processing (FIG. 3/STEP 2). In this information request process, an information request signal is sent from the data server 2 to the blockchain 4 . This information request signal requests account information of the user 6 .

When this information request signal is received by the block chain 4, the block chain 4 executes information output processing (FIG. 3/STEP 3). In this information output process, an account information signal is transmitted from the blockchain 4 to the data server 2 . This account information signal contains user 6's account information (ie user ID, private key and public key).

When the account information signal is received by the data server 2, the data server 2 executes processing for creating identification information data (FIG. 3/STEP 4). This creation process creates the identification information data of the user 6. In this case, the identification information data is a bar code or two-dimensional code containing the account information of the user 6 (i.e., user ID, secret key and public key). created as

Subsequently, the division processing of the identification information data is executed (FIG. 3/STEP5). In this division process, the identification information data is divided into first identification data and second identification data.

Next, the first identification data is stored as a database in the storage 21 of the data server 2 (FIG. 3/STEP 6).

Further, output processing of the second identification information data is executed (FIG. 3/STEP7). In this output process, a second identification data signal containing the second identification data is transmitted from the data server 2 to the user terminal 3 .

When the second identification data signal is received by the user terminal 3, the user terminal 3 executes a process of storing the second identification data (FIG. 3/STEP8). In this storage process, the second identification data contained in the second identification data signal is stored in the controller of the user terminal 3 .

As described above, in this information management system 1, the identification information data including the account information of the user 6 is divided into two, and the data after the division into two is stored in the data server 2 and the user terminal 3, respectively.

Next, the control operation when the user 6 registers data for registration (hereinafter referred to as "data for registration") in the information management system 1 will be described with reference to FIG.

As shown in FIG. 4, first, registration data input processing is executed (FIG. 4/STEP 20). In this process, first, the access software described above is activated, and then the user 6 inputs registration data to the user terminal 3 . This registration data is a signal containing various data such as personal information and activity records of the user 6 .

When the user 6 selects (tap) the second identification data displayed on the access software after completing the above registration data input, a registration signal is transmitted from the user terminal 3 to the data server 2. be. This registration signal is a signal containing registration data, a time stamp at the time of inputting the registration data, and second identification data.

When the registration signal is received by the data server 2, the data server 2 executes the encryption key acquisition process (FIG. 4/STEP 21). In this process, the first identification data stored in the database of the storage 21 is read, and the identification data is obtained from the first identification data and the second identification data included in the registration signal. and an encryption key is obtained from this identification information data.

Next, data encryption division processing is executed (FIG. 4/STEP 22). In this data encryption division processing, the encryption key obtained as described above is used to encrypt the registration data to create the encrypted data, and the encrypted data is divided into two to obtain the second data. First encrypted data and second encrypted data are created.

Next, storage processing of the first encrypted data is executed (FIG. 4/STEP 23). In this storage process, the first encrypted data is stored in the storage 21 as a database.

After that, output processing of the second encrypted data is executed (FIG. 4/STEP 24). In this output process, a second encrypted data signal containing the second encrypted data and the transaction code is sent from the data server 2 to the blockchain 4 .

In the data server 2, code encryption processing is executed subsequent to the output processing of the second encrypted data (FIG. 4/STEP 25). In this code encryption process, an encrypted code is created by encrypting the transaction code of the second encrypted data signal using the private key.

Next, storage processing of the encrypted data is executed (FIG. 4/STEP 26). In this process, the encryption code described above is stored as a database in the storage 21 .

On the other hand, when the above-described second encrypted data signal is received by the block chain 4, the block chain 4 executes registration processing of the second encrypted data (FIG. 4/STEP 27). That is, the second encrypted data is registered within the block chain 4 .

Next, referring to FIG. 5, the control operation when acquiring the registration data required by the user 6 (hereinafter referred to as "required data") from the information management system 1 will be described.

As shown in FIG. 5, first, necessary data input processing is executed (FIG. 5/STEP 40). In this process, first, the access software described above is activated, and then the content of necessary data (registration date and time, etc.) is input to the user terminal 3 by the user 6 .

When the user 6 selects (tap) the second identification data displayed on the access software after completing the input of the above necessary data, a necessary information signal is transmitted from the user terminal 3 to the data server 2. . This necessary information signal is a signal containing the content of the necessary data and the second identification data.

When the necessary information signal is received by the data server 2, the data server 2 executes public key acquisition processing (FIG. 5/STEP 41). In this process, the first identification data stored in the database of the storage 21 is read, and the identification information data is obtained from the first identification data and the second identification data included in the necessary information signal. A public key is obtained from this identification information data.

A code decoding process is then executed (FIG. 5/STEP 42). In this process, the encrypted code stored in the database of the storage 21 is read based on the registration date and time data included in the required data, and the encrypted code is decrypted using the public key. , the transaction code is obtained.

Next, code signal output processing is executed (FIG. 5/STEP 43). In this process, a code signal containing the above transaction code is sent from the data server 2 to the blockchain 4 .

When this code signal is received by the block chain 4, the block chain 4 executes output processing of the second encrypted data (FIG. 5/STEP 44). In this process, the transaction code included in the code signal is read, and the second encrypted data corresponding to this transaction code is obtained from the second encrypted data registered in the block chain 4. A second encrypted data signal containing this second encrypted data is then transmitted from the block chain 4 to the data server 2 .

When the second encrypted data signal is received by the data server 2, the data server 2 executes data coupling decryption processing (FIG. 5/STEP 45). In this data combination decryption process, the first encrypted data corresponding to the second encrypted data included in the second encrypted data signal is obtained from the database in the storage 21, and the first encrypted data and the first encrypted data are obtained. Encrypted data is created by combining the two encrypted data.

By decrypting the encrypted data using the public key, the registration data required by the user 6, that is, the required data is acquired.

Next, necessary data output processing is executed (FIG. 5/STEP 46). In this process, a necessary data signal containing the necessary data described above is transmitted from the data server 2 to the user terminal 3 .

When the necessary data signal is received by the user terminal 3, the user terminal 3 executes arrival notification processing (FIG. 5/STEP 47). In this process, an audio signal indicating that the necessary data signal has arrived is output from a speaker (not shown) of the user terminal 3, and an image indicating that the necessary data signal has arrived is displayed on the display 3a.

As described above, according to the information management system 1 of the present embodiment, when the user 6 registers his or her own account in the information management system 1, the account information of the user 6 (that is, the user ID, Identity data including private key and public key) is created. After the identification information data is divided into the first identification data and the second identification data, the first identification data is stored in the storage 21 and the second identification data is stored in the user terminal 3. be done.

In this way, the identification information data including the secret key and the public key is divided into two, and the data after the division into two is stored in the storage 21 of the user terminal 3 and the data server 2, respectively. Even if an access occurs, it is possible to avoid leakage of the private key and the public key, thereby ensuring high security.

When the user 6 registers the registration data in the information management system 1, the data server 2 receives the registration signal including the registration data and the second identification data from the user terminal 3. , the first identification data is obtained from the storage 21, the identification information data is obtained from the first identification information data and the second identification information data, and the secret key is obtained from the identification information data. In this way, unless the data server 2 receives the second identification data from the user terminal 3, the private key cannot be obtained, so that the security of private key management can be enhanced.

Furthermore, by encrypting the registration data using the private key, encrypted data is created, and by dividing this encrypted data into two, the first encrypted data and the second encrypted data are created. be. Since the first encrypted data is stored in the storage 21 and the second encrypted data is registered in the block chain 4, the security of the registration data can be enhanced by encrypting the registration data. In addition, the security of the registration data can be ensured as compared with the case where all encrypted registration data are registered/stored in one place.

On the other hand, when the user 6 acquires the necessary data in the information management system 1, the data server 2 receives the necessary information signal including the second identification data and the contents of the necessary data from the user terminal 3. At this time, the identification information data is obtained from the first identification information data and the second identification information data, the public key is obtained from the identification information data, and the encrypted transaction code is decrypted using the public key. After the code signal containing the decrypted transaction code is transmitted to the blockchain 4, when the second encrypted data signal containing the second encrypted data is received from the block chain 4, the second encrypted data And the necessary data is obtained by performing the combining process and the decryption process using the public key on the first encrypted data stored in the storage unit.

In this way, unless the data server 2 receives the second identification data from the user terminal 3, the public key cannot be obtained, so that public key management security can be enhanced. Also, unless the public key is used to decrypt the encrypted transaction code, the second encrypted data cannot be obtained from the blockchain 4, and the first encrypted data and the second encrypted data are combined and decrypted. Since the registration data cannot be obtained by using the remote control, the security of the registration data management can be enhanced.

In the information management system 1, from the viewpoint of enhancing traceability, a log server separate from the data server is provided in the information management system 1, and in this log server, the data server 2, the user terminal 3 or the block chain 4 The communication log between and the operation log of the data server 2 may be all stored.

The first embodiment is an example in which the first identification data, the first encrypted data and the encrypted transaction code are stored in the storage 21 of the data server 2, but the first identification data, the first encrypted data and the Alternatively, the encrypted transaction code may be stored in a database server separate from the data server 2 instead of the data server 2 . In this case, the database server corresponds to the storage unit.

Alternatively, the first identification data, the first encrypted data and the encrypted transaction code may be registered (stored) in a block chain separate from the block chain 4 instead of the data server 2 . In this case, a blockchain separate from the blockchain corresponds to the storage unit.

The first embodiment is an example of using a smartphone type as the user terminal 3, but instead of this, a notebook PC, desktop PC, tablet PC, wearable computer, or the like may be used as the user terminal.

The first embodiment is an example in which the first encrypted data and the second encrypted data are created by dividing the encrypted registration data into two in the data encryption division process (FIG. 4/STEP 22). Alternatively, the first encrypted data and the second encrypted data may be created by dividing the registration data into two and then encrypting the two divided registration data.

In the first embodiment, in the data combination decryption process (FIG. 5/STEP 45), the encrypted data is created by combining the first encrypted data and the second encrypted data, and the encrypted data is decrypted. However, instead of this, after decrypting the first encrypted data and the second encrypted data, they are combined to obtain the registration data. You may

The first embodiment is an example of using a public blockchain as the blockchain 4, but instead of this, a consortium blockchain or a private blockchain may be used.

The first embodiment is an example in which the information management system 1 continuously uses the private key and public key as the account information of the user 6, but each time the user 6 uses the information management system 1, the private key and A new public key may be obtained from the block chain 4, and the new private key and public key may be used to encrypt registration data and decrypt encrypted data.

The first embodiment is an example in which the data server 2 is configured to have all of the functions of an identification information data creation unit, an encrypted data creation unit, a code decryption unit, a control unit, a registration data acquisition unit, and a registration unit. However, data server 2 may provide some of these functions, and one or more devices (eg, servers) other than data server 2 may provide the remaining functions. In this case, the data server 2 and one or more devices correspond to the information management device.

Next, an information management system according to a second embodiment of the invention will be described. An information management system 1A (see FIG. 6) of the second embodiment is used when a user 6 who is a student makes an entry to a company's job offer.

When compared with the information management system 1 of the first embodiment, the information management system 1A of the present embodiment has substantially the same configuration except for some parts. The same components are denoted by the same reference numerals, and description thereof will be omitted, and only different points will be described.

First, in the case of the information management system 1A of this embodiment, as shown in FIG. company side terminal 8 is connected to the network 5 .

In the case of this information management system 1A, by the same method as the information management system 1 of the first embodiment, the personal information data when the user 6 conducts job hunting is encrypted as encrypted data, and the first encrypted data is encrypted. and divided into two as second encrypted data. The first encrypted data and the encrypted code are stored in the data server 2 and the second encrypted data is registered in the block chain 4 .

On the other hand, job hunting data server 7 stores job hunting data of many users 6 and public keys of many users 6 . These public keys are provided from the data server 2 to the job-hunting data server 7 side when many users 6 permit their job-hunting data to be provided to companies in which they wish to work.

Job-hunting data server 7 acquires job-hunting data for each user by using these public keys and the above-described method. That is, encrypted data is acquired based on the first encrypted data from the data server 2 and the second encrypted data from the block chain 4, and the encrypted data is decrypted with the public key, thereby Utilization data is obtained for each user. These job hunting data are stored in the job hunting data server 7 as a database.

On the other hand, the company's recruiting staff 9 accesses the database in the job hunting data server 7 via the company's terminal 8 . In this case, the database in the job hunting data server 7 can only be accessed from the company terminal 8 of the company permitted by the user 6 within the period specified by the user 6. are configured so that they cannot be downloaded or copied.

Further, when the period specified by the user 6 expires, the job-hunting data of the user 6 is automatically deleted from the database in the job-hunting data server 7 .

With the above configuration, the information management system 1A can ensure a high degree of safety when managing the job-hunting data of the user 6 .

In the information management system 1A of the second embodiment, from the viewpoint of enhancing traceability, a log server separate from the data server 2 and the job hunting data server 7 is provided in the information management system 1A. It may be configured to store all communication logs between the server 2 and the user terminal 3, the blockchain 4, or the job-hunting data server 7, operation logs of the data server 2 and the job-hunting data server 7, and the like.

1 information management system 2 data server (information management device)
20 controller 20a identification information data creation unit 20b encrypted data creation unit 20c code decryption unit 20d control unit 20e registration data acquisition unit 20f registration unit 21 storage (storage unit)
22 communication device (communication unit)
3 User terminal 4 Block chain 5 Network 6 User

Claims (3)

An information management device connected to a user terminal and a blockchain owned by a user via a network and for managing registration data, which is data for registration of the user,
a communication unit that performs data communication between the blockchain and the user terminal;
When a registration signal including the registration data from the user terminal is received by the communication unit, the first encrypted data and the second encrypted data are encrypted and divided by performing encryption processing and division processing on the registration data. an encrypted data creation unit that creates data;
a registration unit for storing the first encrypted data in a storage unit separate from the blockchain;
a control unit for controlling the communication unit to transmit a second encrypted data signal including the second encrypted data to the block chain in order to register the second encrypted data in the block chain;
with
When a predetermined information signal is received from the user terminal by the communication unit, a secret key is obtained from the block chain, identification information data including the secret key is created, and the identification information data is converted to first identification information data. and an identification information data creation unit that divides into two second identification information data,
The registration unit causes the storage unit to further store the first identification data,
The control unit controls the communication unit to transmit a signal including the second identification data to the user terminal,
The registration signal includes the registration data and the second identification data,
The encrypted data creation unit acquires the first identification information data from the storage unit when the registration signal is received by the communication unit, and converts the secret key to the first identification information data and the second identification information data. An information management device characterized by obtaining from identification information data and encrypting the registration data using the secret key. (delete) In the information management device according to claim 1,
The identification information data creation unit further acquires a public key from the blockchain when the predetermined information signal is received by the communication unit, and creates the identification information data as data including the public key and the private key. death,
The encrypted data creation unit further creates an encrypted transaction code by encrypting the transaction code in the second encrypted data signal using the secret key,
The registration unit further stores the encrypted transaction code in the storage unit,
When the communication unit receives a signal including the second identification data and requesting acquisition of the registration data from the user terminal, acquires the first identification data from the storage unit, further comprising a code decryption unit that acquires the public key from the first identification information data and the second identification information data and decrypts the encrypted transaction code using the public key;
The control unit further controls the communication unit to transmit a signal including the transaction code decoded by the code decoding unit to the blockchain,
After the signal containing the transaction code is transmitted to the block chain, when the signal containing the second encrypted data from the block chain is received by the communication unit, the first encrypted data is sent from the storage unit. a registration data acquisition unit that acquires the registration data by performing a combining process and a decryption process using the public key on the first encrypted data and the second encrypted data, further prepared,
The information management device, wherein the control unit further controls the communication unit so as to transmit a signal including the registration data acquired by the registration data acquisition unit to the user terminal.

Images