Method, server and program for secure data exchange

• US 20060271482A1
• Filed: 08/29/2005
• Published: 11/30/2006
• Est. Priority Date: 05/27/2005
• Status: Abandoned Application

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Haga, Masashi, Bito, Yoshitaka
• Application Number:
  US11/212,534
• Publication Number:
  US 20060271482A1
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

The invention provides a data exchange method, a data exchange management apparatus and a data exchange management program each capable of insuring high concealment and integrity and not requiring a data center. A data sending terminal generates a query for retrieving data, and make it up to a signed query by adding encryption information of the query (signature). When a data receiving terminal requests the data sending terminal to send the data, the data receiving terminal sends the signed query retrieved by a predetermined procedure. The data sending terminal verifies the signature of the signed queryand after verification proves successful, the data sending terminal sends the data retrieved by the query to the data receiving terminal.

Claims

1. A data exchange method for exchanging data among a plurality of terminals and a data exchange management server for managing said plurality of terminals, connected to said plurality of terminals through a network, wherein:

a terminal operating as a data sending terminal among said plurality of terminals executes a step of generating a query for extracting data and encryption information for preventing falsification of said query;

said data exchange management server executes a step of receiving and storing said query and said encryption information from said data sending terminal and a step of verifying said encryption information; and

a terminal operating as a data receiving terminal among said plurality of terminals executes a step of receiving said query and said encryption information from said data exchange management server and a step of retrieving predetermined data from said data sending terminal on the basis of said query and said encryption information.

2. A data exchange method according to claim 1, wherein said data exchange management server executes a step of generating a query control key from said query and a step of sending said query control key to said data sending terminal;

said data sending terminal executes a step of receiving said query control key from said data exchange management server;

said data receiving terminal executes a step of sending said query control key sent to said data sending terminal and retrieved by a predetermined procedure to said data exchange management server; and

said data exchange management server executes a step of receiving said query control key from said data receiving terminal and a step of verifying said query control key received.

3. A data exchange method according to claim 1, wherein said data sending terminal executes a step of applying query ID and a time stamp to said query and a step of verifying said query ID and said time stamp.

8. A data exchange management program for causing said data exchange method according to claim 1 to be executed by a computer.

4. A data exchange method for exchanging data among a plurality of terminals connected to one another through a network, wherein a terminal operating as a data sending terminal among said plurality of terminals executes a step of generating a query for extracting data and encryption information for preventing falsification of said query, a step of sending said query and said encryption information to a data terminal operating as a data receiving terminal and a step of verifying said encryption information;

and

said data receiving terminal executes a step of retrieving and storing said query and said encryption information from said data sending terminal and a step of retrieving predetermined data from said data sending terminal on the basis of said query and said encryption information.

7. A data exchange management program for causing said data exchange method according to claim 4 to be executed by a computer.

5. A data exchange management system used for a data exchange system for exchanging data among a plurality of terminals and a data exchange management server for controlling said plurality of terminals, connected to said plurality of terminals through a network, comprising:

a session management portion for establishing encryption communication paths among a data terminal operating as a data sending terminal and a data terminal operating as a date receiving terminal among said plurality of terminals and said data exchange server;

a query control portion for sending said query for extracting data from said data sending terminal and said encryption information for preventing falsification of said query to said data receiving terminal; and

an electronic signature verification portion for verifying said encryption information.

6. A data exchange management system according to claim 5, wherein said query control portion has the function of generating a query control key from said query and sending said query control key to said data sending terminal, the function of receiving said query control key sent from said data sending terminal and retrieved by said data receiving terminal in a predetermined procedure from said data receiving terminal and verifying said query control key, and the function of extracting said query and said encryption information corresponding to said query from said data receiving terminal.