Abstract: An information processing apparatus includes processing circuitry configured to specify a first consent record that includes an identifier for a first business operator, which identifies the related party and which is assigned exclusively to the first business operator, and consent of the related party allowing the first business operator to execute a first handling of the data of the related party, and detect a related party identifier corresponding to the identifier for the first business operator included in the first consent record; and searching circuitry configured to search the first storage system for a second consent record that includes consent of the related party allowing a second business operator to execute a second handling of the data, wherein the processing circuitry is configured to generate an audit record including a record identifier that identifies the first consent record and information regarding the presence or absence of the second consent record.

Abstract: According to one embodiment, a data management method performed by a computer, includes: receiving first request information for requesting to execute a first process on first data, the first data being data regarding a person; and determining whether the first process is executable, based on the first request information and consent information, the consent information including a first condition that the person consents to perform the first process.

Abstract: According to one embodiment, an information processing apparatus includes a processor configured to: acquire a record that is at least one of a record related to a process for data and a record related to consent to the process for the data, from a first storage system that stores the record; acquire a log of an operation performed in relation to at least one of the process and the consent, from a second storage system that stores the log; and verify consistency of the acquired record, based on the acquired log.

Abstract: An information processing apparatus includes: a receiver to receive a verification request of consistency for an object of verification being a handling consent record or a handling execution record related to a handling of data; a searcher to search a storage system storing at least one handling consent record and at least one handling execution record on a basis of the verification request, and acquire the handling consent record or the handling execution record which is the object of verification and a handling consent record and a handling execution record related to the object of verification; a period calculator to calculate at least one of a consent period or a non-consent period on a basis of acquired handling consent record(s); and a verifier to verify the consistency on a basis of acquired handling execution record(s) and at least one of the consent period or the non-consent period.

Abstract: In a case where data is provided to a plurality of third parties, an embodiment of the present invention provides a method and the like for checking the consent and disclosure history of disclosure to the third parties while also reducing the disadvantages from a data leak. An information processing method according to an embodiment of the present invention includes writing, to a blockchain, a consent record indicating a consent with respect to the handling of data and a related party related to the consent or the data. In the case where executing the handling in the consent record would allow the data to be usable by a third party that is neither the executing party executing the handling nor the related party, the consent record is written such that the identifier is changed to a different identifier uniquely corresponding to the third party.

Abstract: According to an embodiment, an encryption processing device includes a memory and one or more processors. The memory stores a plurality of divided masks to be applied to an input sentence on which mask processing is performed in unit of processing of a predetermined size corresponding to a size of data obtained by dividing target data of encryption processing into a plurality of pieces, the divided masks having a same size as that of data obtained by further dividing the data of the unit of processing. The one or more processors are configured to: read out the plurality of divided masks from the memory at different respective timings, and generate a plurality of first masks by using the read-out divided masks at different respective timings; and execute arithmetic processing on intermediate data of the encryption processing using the plurality of first masks at different respective timings.

Abstract: According to one embodiment, a data management method performed by a computer, includes: receiving first request information for requesting to execute a first process on first data, the first data being data regarding a person; and determining whether the first process is executable, based on the first request information and consent information, the consent information including a first condition that the person consents to perform the first process.

Abstract: According to one embodiment, an information processing method performed by a computer includes receiving a holding request that includes target data and first identification information regarding the target data to generate second identification information different from the first identification information; generating first pseudonymized data that includes the second identification information and the target data, and holding the first pseudonymized data in a first hardware holding device; generating first pseudonymous association data that associates the first identification information with the second identification information, and storing the first pseudonymous association data in a first hardware storage; calculating a first value by an operation based on the first pseudonymous association data; and providing first record information for a storage system, the storage system being configured to store the first record information, the first record information including the first value and including first

Abstract: In a case where data is provided to a plurality of third parties, an embodiment of the present invention provides a method and the like for checking the consent and disclosure history of disclosure to the third parties while also reducing the disadvantages from a data leak. An information processing method according to an embodiment of the present invention includes writing, to a blockchain, a consent record indicating a consent with respect to the handling of data and a related party related to the consent or the data. In the case where executing the handling in the consent record would allow the data to be usable by a third party that is neither the executing party executing the handling nor the related party, the consent record is written such that the identifier is changed to a different identifier uniquely corresponding to the third party.

Abstract: According to an embodiment, an encryption processing device includes a memory and one or more processors. The memory stores a plurality of divided masks to be applied to an input sentence on which mask processing is performed in unit of processing of a predetermined size corresponding to a size of data obtained by dividing target data of encryption processing into a plurality of pieces, the divided masks having a same size as that of data obtained by further dividing the data of the unit of processing. The one or more processors are configured to: read out the plurality of divided masks from the memory at different respective timings, and generate a plurality of first masks by using the read-out divided masks at different respective timings; and execute arithmetic processing on intermediate data of the encryption processing using the plurality of first masks at different respective timings.

Abstract: According to an embodiment, a concealing apparatus includes a concealing processor, a mapping information generator, a tag generator, and a concealed, information output unit. The concealing processor is configured to generate a concealed text by concealing a plaintext with a concealing key. The mapping information generator is configured to generate mapping information that is mapped to a keyword for retrieving the plaintext. The tag generator is configured to generate a tag based on the keyword and the mapping information. The concealed information output unit is configured to output the concealed text and the tag as a pair.

Abstract: According to an embodiment, a generating device includes a first key generator, a second key generator, an output unit, and an update unit. The first key generator is configured to generate a first key that is a sequence of bits according to a first key rule on the basis of a random number. The second key generator is configured to generate multiple second keys that are sequences of bits partially having correlation with one another according to a second key rule on the basis of the first key. The output unit is configured to output the first key and at least one of the second keys. The update unit is configured to generate update information for updating a second key by updating a partial sequence of the second key, the partial sequence having no correlation with the other second keys not to be updated.

Abstract: According to an embodiment, a concealing apparatus includes a concealing processor, a mapping information generator, a tag generator, and a concealed, information output unit. The concealing processor is configured to generate a concealed text by concealing a plaintext with a concealing key. The mapping information generator is configured to generate mapping information that is mapped to a keyword for retrieving the plaintext. The tag generator is configured to generate a tag based on the keyword and the mapping information. The concealed information output unit is configured to output the concealed text and the tag as a pair.

Abstract: According to an embodiment, a generating device includes a first key generator, a second key generator, an output unit, and an update unit. The first key generator is configured to generate a first key that is a sequence of bits according to a first key rule on the basis of a random number. The second key generator is configured to generate multiple second keys that are sequences of bits partially having correlation with one another according to a second key rule on the basis of the first key. The output unit is configured to output the first key and at least one of the second keys. The update unit is configured to generate update information for updating a second key by updating a partial sequence of the second key, the partial sequence having no correlation with the other second keys not to be updated.