Patent Description:
In patent literature <NUM>, it is described that "in order to provide an infrastructure in which data can be recorded, shared, and verified while privacy and security of the data are maintained, a system where an IoT concept is applied to a food system by using a blockchain, a method, and a computer program product are provided".

Patent literature <NUM> relates to a method applying the Internet of Things and blockchain technology to agricultural traceability scenarios using agricultural sensors to detect product production environment parameters, and using blockchain technology combined with asymmetric passwords to provide security for the Internet of Things.

Patent literature <NUM> relates to a method for managing and providing provenance of a product using blockchain technology.

Patent literature <NUM> relates to a system, a method, and a computer program product using blockchain and applying the internet of things concept to a food system to provide an infrastructure to which data can be recorded, shared and validated while data privacy and security is maintained.

According to a first aspect of the present invention, a data recording apparatus is provided. The data recording apparatus may include a key exchange unit configured to exchange a first encryption key with a system in response to authentication by the system. The data recording apparatus may include a data collection unit configured to collect measurement data obtained by measuring a physical quantity associated with a measurement target. The data recording apparatus may include a data recording unit configured to record the measurement data. The data recording apparatus may include a data transmission unit configured to transmit the measurement data encrypted using the first encryption key to the system.

The key exchange unit may be configured to exchange a second encryption key with equipment that is capable of obtaining the measurement data, and the data collection unit may be configured to collect the measurement data encrypted by the equipment using the second encryption key.

The second encryption key may be the same as the first encryption key.

The data transmission unit may be configured to transmit identification information for identifying its own apparatus to the system together with the measurement data encrypted using the first encryption key.

The system may be configured to manage the measurement data using a distributed ledger technology.

According to a second aspect of the present invention, a data recording method is provided. The data recording method may include exchanging a first encryption key with a system in response to authentication by the system. The data recording method may include collecting measurement data obtained by measuring a physical quantity associated with a measurement target. The data recording method may include recording the measurement data. The data recording method may include transmitting the measurement data encrypted using the first encryption key to the system.

According to a third aspect of the present invention, a data recording program is provided. The data recording program may be executed by a computer. The data recording program may cause the computer to function as a key exchange unit configured to exchange a first encryption key with a system in response to authentication by the system. The data recording program may cause the computer to function as a data collection unit configured to collect measurement data obtained by measuring a physical quantity associated with a measurement target. The data recording program may cause the computer to function as a data recording unit configured to record the measurement data. The data recording program may cause the computer to function as a data transmission unit configured to transmit the measurement data encrypted using the first encryption key to the system.

According to a fourth aspect of the present invention, a system is provided. The system may include a key management unit configured to exchange a first encryption key with a data recording apparatus in response to authentication of the data recording apparatus. The system may include a data obtaining unit configured to obtain measurement data obtained by measuring a physical quantity associated with the measurement target which is encrypted by the data recording apparatus using the first encryption key. The system may include a data management unit configured to manage the measurement data using a distributed ledger technology.

The system may further include a query reception unit configured to receive a query regarding the measurement target, and a query response unit configured to refer to the measurement data managed using the distributed ledger technology to respond to the query.

The query reception unit may be configured to receive a query for requesting disclosure of the measurement data associated with the measurement target, and the query response unit may be configured to transmit a response including the measurement data managed using the distributed ledger technology.

The query reception unit may be configured to receive a query for requesting an indicator of a value to be added to the measurement target, and the query response unit may be configured to transmit a response including the indicator of the value calculated based on the measurement data managed using the distributed ledger technology.

The query reception unit may be configured to receive a query for requesting an indicator of a consideration of the value added to the measurement target, and the query response unit may be configured to transmit a response including the indicator of the consideration calculated based on the measurement data managed using the distributed ledger technology.

According to a fifth aspect of the present invention, a method is provided. The method may include exchanging a first encryption key with a data recording apparatus in response to authentication of the data recording apparatus. The method may include obtaining measurement data obtained by measuring a physical quantity associated with the measurement target which is encrypted by the data recording apparatus using the first encryption key. The method may include managing the measurement data using a distributed ledger technology.

According to a sixth aspect of the present invention, a program is provided. The program may be executed by a computer. The program may cause the computer to function as a key management unit configured to exchange a first encryption key with a data recording apparatus in response to authentication of the data recording apparatus. The program may cause the computer to function as a data obtaining unit configured to obtain measurement data obtained by measuring a physical quantity associated with the measurement target which is encrypted by the data recording apparatus using the first encryption key. The program may cause the computer to function as a data management unit configured to manage the measurement data using a distributed ledger technology.

The present invention may be a sub-combination of the features described above.

Hereinafter, the present invention will be described by way of embodiments of the invention, but the following embodiments are not intended to limit the invention according to the claims. Not all combinations of features described in the embodiments are necessarily imperative to solving means of the invention.

<FIG> illustrates a data recording apparatus <NUM> and a system <NUM> according to the present embodiment together with a communication network <NUM>, equipment <NUM>, and a terminal <NUM>. In the present embodiment, the data recording apparatus <NUM> collects measurement data of the physical quantity associated with a measurement target which is obtained by the equipment <NUM> in a time series manner. Then, the data recording apparatus <NUM> encrypts the measurement data using an encryption key exchanged with the system <NUM> in response to authentication by the system <NUM>, and transmits the encrypted measurement data to the system <NUM>. The system <NUM> obtains the measurement data encrypted by the data recording apparatus <NUM> via, for example, the communication network <NUM> in a time series manner, and manages the encrypted measurement data by using a distributed ledger technology (DLT). In this manner, in the present embodiment, a novel approach is proposed in which a data logger that can securely record data and a DLT/blockchain (hereinafter also simply referred to as the DLT or the blockchain) are integrated with each other.

In the present embodiment, a case where the data recording apparatus <NUM> and the system <NUM> are applied to a food cold chain will be described as one example. Such a food cold chain is compatible with the technique according to the present embodiment since a nature of the measurement target changes in the mid-course (for example, a quality is decreased due to a temperature, a humidity, vibration, and the like during transportation and during storage), and also a large number of stakeholders are involved in the mid-course. However, the configuration is not limited thereto. The technique according to the present embodiment may be applied to other supply chain managements in which, for example, a nature of a measurement target changes in the mid-course such as medicine, crude oil, art objects, animals, and plants, and may be applied to another management different from the supply chain management.

The communication network <NUM> is a network configured to connect a plurality of computers to each other. For example, the communication network <NUM> may be a global network in which a plurality of computer networks are interconnected, and as one example, the communication network <NUM> may be the Internet using an Internet protocol or the like. Alternatively, the communication network <NUM> may be realized by a dedicated circuitry. The communication network <NUM> connects the terminal <NUM>, the data recording apparatus <NUM>, and the system <NUM> with each other.

The equipment <NUM> may be capable of obtaining measurement data obtained by measuring the physical quantity associated with a measurement target set as a management target by the system <NUM> (for example, products such as Japanese sake, wine, and frozen food). As one example, the equipment <NUM> may be an IoT sensor that can measure environment data of surrounding atmosphere of the measurement target, and may be, for example, a temperature sensor, a humidity sensor, a vibration sensor, and the like. In addition, for example, the equipment <NUM> may be a sheet-type sensor affixed to the measurement target and configured to obtain the environment data of surrounding atmosphere of the measurement target, and may be a compact sensor embedded in a label, a cap, a cork, or the like of a bottle.

In addition, as will be described below, the equipment <NUM> may be capable of exchanging a second encryption key with the data recording apparatus <NUM>. Then, the equipment <NUM> may encrypt the measurement data obtained by the measurement by using the second encryption key, and transmit the encrypted measurement data to the data recording apparatus <NUM>. Note that when the equipment <NUM> does not have a network communication function, the equipment <NUM> may transmit the measurement data to the data recording apparatus <NUM> via an edge/gateway or the like that is not illustrated in the drawing. In the present embodiment, a plurality of pieces of the equipment <NUM> that is capable of obtaining such measurement data may be connected to the data recording apparatus <NUM> in a wired or wireless manner.

The terminal <NUM> is a device used by a user as an input and output terminal such as a personal computer (PC), a smartphone, or a handy terminal. The user accesses necessary information via a Web browser, a business intelligence (BI) tool, dedicated application for the terminal, and the like operating on the terminal <NUM>. In the present embodiment, a plurality of the terminals <NUM> described above may be connected to the system <NUM> via the communication network <NUM>.

The data recording apparatus <NUM> is a secure data logger provided with a security function and a connection function to a distributed ledger technology. Specifically, the data recording apparatus <NUM> may be provided with a wired or wireless input and output (I/O) function for connecting to the plurality of pieces of equipment <NUM>. Herein, a wired function may be, for example, signal transmission means such as a universal asynchronous receiver/transmitter (UART). In addition, a wireless function may be, for example, wireless communication means such as Bluetooth (registered trademark) low energy (LE), a non-contact tag (such as a radio frequency identifier (RFID or a near field communication (NFC)).

In addition, the data recording apparatus <NUM> may be provided with a data processing function for executing an analog-to-digital/digital-to-analog (AD/DA) conversion, data formatting, or the like. In addition, the data recording apparatus <NUM> may be provided with a database configured to record and store data. In addition, the data recording apparatus <NUM> may be provided with a data management function for executing data search, access management, or the like.

In addition, the data recording apparatus <NUM> may be provided with a security management function for executing user management for managing a user ID or a password, audit trail for storing information such as an operation record of the equipment and an error message in an unalterable state, cryptographic processing for encrypting and decrypting an electronic signature and data, and key management for managing a key for encrypting and decrypting the data.

In addition, the data recording apparatus <NUM> may be provided with a data viewer function for providing a user interface for the user who operates the data logger, and executing an operation and a setting of the equipment, display of a trend chart of the data, or the like. In addition, the data recording apparatus <NUM> may be provided with a DLT connection function having communication means (such as a wired LAN or a wireless LAN) or a network protocol (such as HTTP or FTP) for connecting to the distributed ledger technology. Details of the data recording apparatus <NUM> will be described below.

The system <NUM> realizes the application and a platform of the distributed ledger technology by software. The system <NUM> may be a computer such as a personal computer (PC), a tablet computer, a smartphone, a workstation, a server computer, or a general purpose computer, or may be a computer system in which a plurality of computers are connected to each other. The above-described computer system is also a computer in a broad sense. In addition, the system <NUM> may be implemented by one or more virtual computers that can be executed in the computer. Alternatively, the system <NUM> may be a dedicated computer that can realize the application and the platform of the distributed ledger technology, or may be a dedicated hardware realized by a dedicated circuitry. In addition, the system <NUM> may be implemented by a cloud computing or an on-premise server environment.

The application may have application for each stakeholder of the supply chain management. As one example, examples of the stakeholder of the food cold chain include a manufacturer, a wholesaler, a retail store, a transportation company, a consumer, and the like. Herein, the application for each stakeholder may have a dedicated function according to each work flow. For example, the application for consumers may have a function for specifying a product (measurement target) and displaying quality information on which the price of the product is to be based. At this time, a method of scanning a QR code (registered trademark) or the like may be employed as the method for specifying the product. In addition, various methods such as a method of displaying a scored quality and a method of displaying the presence or absence of a temperature deviation by using a trend chart may be employed as the method for displaying the quality information.

In addition, the application may have an added value calculation function for calculating and recording the added value to the product based on the data. As a method of calculating the added value, different methods may be used according to the type of target products or data. As one example, when a temperature management of a product volatile to a temperature change such as Japanese sake or wine is exemplified, an algorithm for "giving a negative added value corresponding to a time area during which temperature deviation has occurred" or "giving a higher added value to those having a smaller amount of temperature change" may be used. In addition, since it is also known that a quality of Japanese sake is affected by ultraviolet rays, the added value calculation may be reflected by a calculated value of the amount of exposure to ultraviolet rays, the presence or absence of measures for cutting ultraviolet rays, or the like.

In addition, the application may have a database that stores application for each of the above-mentioned stakeholders and data necessary for the added value calculation.

The platform may have a database provided with such features that the data is distributed and held in servers that are geographically away from each other, and the recorded data is not lost, and also the database continues operating even when some of the servers is hacked. The above-described database is characterized in that a unit of data storage called a block is generated at a certain time, and that it has a data verification model called a consensus algorithm (consensus building) that is held among servers. Representative implementation examples include techniques such as Ethereum and Hyperledger. In addition, examples of a consensus algorithm for ensuring anti-falsification of the data include techniques such as Proof of Work (PoW) and Proof of Authority (PoA). In the present embodiment, as the database of the platform, a database in which any of the above-described techniques is employed may be used.

In addition, the platform may have a smart contract function for automatically executing value exchange based on the added value calculation. Herein, the smart contract is a scheme for automatically executing a contract on the blockchain.

In addition, the platform may have a token/virtual currency exchange function for representing a value exchanged between the stakeholders as digital data such as a token or a crypto currency and circulating the token or the crypto currency when the added value calculated by the added value calculation function is automatically executed by the smart contract.

In addition, the platform may have a user management function for managing an ID of the user or apparatus that can access the system <NUM> and information such as passwords. In addition, the platform may have an authentication and authorization function for managing and controlling authentication of the user or apparatus, authorization of access to the data, and the like.

In addition, the platform may have a cryptographic processing engine configured to perform encryption and decryption of the data. At this time, for the cryptographic processing, cryptographic algorithms such as Advanced Encryption Standard (AES), Secure Hash Algorithm (SHA), Rivest-Shamir-Adlema cryptosystem (RSA), and Elliptic Curve Cryptography (ECC) may be used.

In addition, the platform may have a key management function for managing the key used for the cryptographic processing. Herein, the above-described key may be allocated to each of the data recording apparatuses <NUM>, each of the terminals <NUM>, or each of the users. At this time, a representative example of the key cryptography includes a public key cryptography method, and a technique such as a public key infrastructure (PKI) may be used as a method for managing a pair of a private key and a public key.

In addition, the platform may have an IoT equipment connection function for connecting to various pieces of equipment such as the data recording apparatus <NUM> via the communication network <NUM>. Details of the system <NUM> will be also described below.

<FIG> illustrates one example of a block diagram of the data recording apparatus <NUM> according to the present embodiment. Note that these blocks are functional blocks that are respectively separated in terms of functions, and may not necessarily be consistent with an actual device configuration. That is, even when one block is illustrated in the present drawing, the block may not necessarily be configured by a single device. In addition, even when separate blocks are illustrated in the present drawing, those blocks may not necessarily be configured by separate devices. The data recording apparatus <NUM> is provided with a registration request unit <NUM>, a key exchange unit <NUM>, a data collection unit <NUM>, a data recording unit <NUM>, an encryption unit <NUM>, and a data transmission unit <NUM>.

For example, the registration request unit <NUM> transmits a request for registering the data recording apparatus <NUM> of its own to the system <NUM> via the communication network <NUM> by the DLT connection function. At this time, the registration request unit <NUM> may transmit identification information for identifying the data recording apparatus <NUM> of its own to the system <NUM>.

The key exchange unit <NUM> exchanges a first encryption key with the system <NUM> in response to the authentication of the data recording apparatus <NUM> of its own by the system <NUM>. As one example, by the security management function, the key exchange unit <NUM> may exchange the first encryption key with the system <NUM> by obtaining, from the system <NUM>, a first public key corresponding to a first private key owned by the system <NUM> using the public key cryptography method.

In addition, the key exchange unit <NUM> exchanges a second encryption key with the equipment <NUM> that is capable of obtaining the measurement data. As one example, by the security management function, the key exchange unit <NUM> may exchange the second encryption key with the equipment <NUM> by supplying a second public key corresponding to a second private key owned by the data recording apparatus <NUM> to the equipment <NUM> by using the public key cryptography method. However, the configuration is not limited thereto. The key exchange unit <NUM> may exchange the second encryption key with the equipment <NUM> by directly supplying the first public key obtained from the system <NUM> to the equipment <NUM>. That is, the second encryption key may be the same as the first encryption key. In this manner, the encryption applied to the measurement data by the data recording apparatus <NUM> and the equipment <NUM> can be realized by the same encryption key.

The data collection unit <NUM> collects the measurement data obtained by measuring the physical quantity associated with the measurement target. As one example, the data collection unit <NUM> collects the measurement data obtained by measuring the physical quantity associated with the measurement target from the plural pieces of the equipment <NUM> connected in a wired or wireless manner by an I/O function. For example, in the food cold chain, the data collection unit <NUM> may obtain environment data such as a temperature, a humidity, and vibration in a surrounding atmosphere of the measurement target (product) during transportation or during storage from the plural pieces of the equipment <NUM> in a time series manner. Note that, as described above, in a case where the second encryption key is exchanged with the equipment <NUM>, the data collection unit <NUM> may collect the measurement data encrypted by the equipment <NUM> using the second encryption key.

The data recording unit <NUM> records the measurement data. As one example, by the security management function, the data recording apparatus <NUM> decrypts the measurement data collected by the data collection unit <NUM> using the second private key corresponding to the second public key. Then, the data recording apparatus <NUM> executes the AD/DA conversion or data formatting of the measurement data by a data processing function. Then, the data recording unit <NUM> records the measurement data obtained by decryption and data processing in the database in a time series manner.

The encryption unit <NUM> encrypts the measurement data. As one example, the encryption unit <NUM> encrypts the measurement data recorded by the data recording unit <NUM> in the database in a time series manner using the first public key (that is, the first encryption key).

The data transmission unit <NUM> transmits the measurement data encrypted using the first encryption key to the system <NUM>. As one example, the data transmission unit <NUM> transmits the measurement data encrypted by the encryption unit <NUM> using the first encryption key by the DLT connection function to the system <NUM> via the communication network <NUM>. At this time, the data transmission unit <NUM> may transmit the identification information for identifying the data recording apparatus <NUM> of its own to the system <NUM> together with the measurement data encrypted using the first encryption key. The system <NUM> corresponding to a transmission destination of the measurement data manages the above-described measurement data by using the distributed ledger technology.

<FIG> illustrates one example of a block diagram of the system <NUM> according to the present embodiment. Note that these blocks are functional blocks that are respectively separated in terms of functions, and may not necessarily be consistent with an actual device configuration.

That is, even when one block is illustrated in the present drawing, the block may not necessarily be configured by a single device. In addition, even when separate blocks are illustrated in the present drawing, those blocks may not necessarily be configured by separate devices. The system <NUM> is provided with a registration unit <NUM>, a key management unit <NUM>, a data obtaining unit <NUM>, a decryption unit <NUM>, a data management unit <NUM>, a query reception unit <NUM>, and a query response unit <NUM>.

The registration unit <NUM> registers the data recording apparatus <NUM>. As one example, the system <NUM> receives a request for requesting a registration from the data recording apparatus <NUM> via the communication network <NUM> by the IoT equipment connection function of the platform. Then, the registration unit <NUM> authenticates the data recording apparatus <NUM> that has transmitted the request by the authentication and authorization function of the platform. In addition, the registration unit <NUM> authorizes a resource access by giving an authorization to the data recording apparatus <NUM> that has been authenticated by the authentication and authorization function of the platform.

The key management unit <NUM> exchanges the first encryption key with the data recording apparatus <NUM> in response to the authentication of the data recording apparatus <NUM>. As one example, the key management unit <NUM> may exchange the first encryption key with the data recording apparatus <NUM> by supplying the first public key corresponding to the first private key owned by the system <NUM> by using the public key cryptography method by the key management function of the platform to the data recording apparatus <NUM>.

The data obtaining unit <NUM> obtains the measurement data obtained by measuring the physical quantity associated with the measurement target which has been encrypted by the data recording apparatus <NUM> using the first encryption key. As one example, the data obtaining unit <NUM> obtains the measurement data encrypted by the data recording apparatus <NUM> using the first encryption key from the data recording apparatus <NUM> via the communication network <NUM> by the IoT equipment connection function of the platform.

The decryption unit <NUM> decrypts the measurement data obtained by the data obtaining unit <NUM>. As one example, the decryption unit <NUM> decrypts the measurement data obtained by the data obtaining unit <NUM> by using the first private key corresponding to the first public key by the cryptographic processing engine of the platform.

The data management unit <NUM> manages the measurement data decrypted by the decryption unit <NUM> by using the distributed ledger technology. As one example, the data management unit <NUM> distributes and holds, and manages the measurement data in the servers or the like that are geographically separated from each other by the database of the platform.

The query reception unit <NUM> receives a query of the measurement target. As one example, the query reception unit <NUM> receives the query on the measurement target from the terminal <NUM> via the communication network <NUM> by the application for each stakeholder.

The query response unit <NUM> responds to the query by referring the measurement data managed using the distributed ledger technology. As one example, the query response unit <NUM> transmits the response according to the contents of the query to the terminal <NUM> via the communication network <NUM> by the application for each stakeholder.

<FIG> illustrates one example of a flow for constructing the network using the data recording apparatus <NUM> and the system <NUM> according to the present embodiment. In step <NUM>, for example, in response to press of a power button by the user, the data recording apparatus <NUM> is activated.

In step <NUM>, the data recording apparatus <NUM> requests the system <NUM> to register its own apparatus. As one example, the registration request unit <NUM> transmits a registration request including the identification information for identifying its own apparatus to the platform of the system <NUM> via the communication network <NUM>.

In step <NUM>, the platform of the system <NUM> authenticates and authorizes the data recording apparatus <NUM>. As one example, the registration unit <NUM> receives the registration request from the data recording apparatus <NUM> via the communication network <NUM>. Then, the registration unit <NUM> uniquely identifies the data recording apparatus <NUM> that has transmitted the registration request based on the identification information included in the registration request, and authenticates the data recording apparatus <NUM>. In addition, the registration unit <NUM> gives an authorization to the data recording apparatus <NUM> that has been authenticated, and authorizes the resource access.

In step <NUM>, in response to the authentication of the data recording apparatus <NUM> by the system <NUM>, the data recording apparatus <NUM> and the platform of the system <NUM> exchange the first encryption key. That is, the key exchange unit <NUM> exchanges the first encryption key with the system <NUM> in response to the authentication of the data recording apparatus <NUM> by the system <NUM>. In addition, the key management unit <NUM> exchanges the first encryption key with the data recording apparatus <NUM> in response to the authentication of the data recording apparatus <NUM> by the system <NUM>. As one example, the key management unit <NUM> may supply the first public key corresponding to the first private key owned by the system <NUM> by using the public key cryptography method to the data recording apparatus <NUM>, and the key exchange unit <NUM> may obtain the first public key from the system <NUM>, so that the first encryption key is exchanged therebetween.

In step <NUM>, the data recording apparatus <NUM> is connected to the equipment <NUM>. At this time, the data recording apparatus <NUM> may establish the connection with plural pieces of the equipment <NUM>.

In step <NUM>, the second encryption key is exchanged between the data recording apparatus <NUM> and the equipment <NUM>. That is, the key exchange unit <NUM> exchanges the second encryption key with the equipment <NUM> that is capable of obtaining the measurement data. As one example, the key exchange unit <NUM> may supply the second public key corresponding to the second private key owned by the data recording apparatus <NUM> by using the public key cryptography method to the equipment <NUM>, and the equipment <NUM> may obtain the second public key from the data recording apparatus <NUM>, so that the second encryption key is exchanged therebetween. Alternatively, the key exchange unit <NUM> may directly supply the first public key obtained from the system <NUM> in step <NUM> to the equipment <NUM>, and the equipment <NUM> may obtain the first public key from the data recording apparatus <NUM>, so that the second encryption key is exchanged. That is, the second encryption key may be the same as the first encryption key.

<FIG> illustrates one example of a flow for collecting the measurement data using the data recording apparatus <NUM> and the system <NUM> according to the present embodiment. In step <NUM>, the equipment <NUM> measures the physical quantity associated with the measurement target. As one example, the equipment <NUM> measures environment data such as a temperature, a humidity, and vibration in a surrounding atmosphere of the measurement target (product) during transportation or during storage in the food cold chain.

In step <NUM>, the equipment <NUM> encrypts the data measured in step <NUM> by using the second encryption key exchanged with the data recording apparatus <NUM> in step <NUM>.

Then, in step <NUM>, the equipment <NUM> transmits the measurement data encrypted using the second encryption key in step <NUM> to the data recording apparatus <NUM>. In this manner, the data collection unit <NUM> collects the measurement data obtained by measuring the physical quantity associated with the measurement target, in more details, the measurement data encrypted by the equipment <NUM> using the second encryption key.

In step <NUM>, the data recording apparatus <NUM> decrypts the measurement data collected in step <NUM>. As one example, in a case where the equipment <NUM> encrypts the measurement data using the second public key, the data recording apparatus <NUM> decrypts the collected measurement data using the second private key. Note that, for example, in a case where the data recording apparatus <NUM> does not have a private key corresponding to a public key used for the encryption of the measurement data by the equipment <NUM> or the like, a configuration may be adopted where the data recording apparatus <NUM> does not decrypt the collected measurement data. That is, the data recording apparatus <NUM> may skip the processing in step <NUM>.

In step <NUM>, the data recording apparatus <NUM> records the measurement data decrypted in step <NUM>. As one example, the data recording unit <NUM> records the measurement data decrypted in step <NUM> on which the AD/DA conversion or data formatting has been performed in the database in a time series manner.

In step <NUM>, the data recording apparatus <NUM> encrypts the measurement data recorded in step <NUM>. As one example, the encryption unit <NUM> encrypts the measurement data recorded by the data recording unit <NUM> in step <NUM> by using the first encryption key exchanged with the system <NUM> in step <NUM>.

In step <NUM>, the data recording apparatus <NUM> transmits the measurement data encrypted in step <NUM> to the platform of the system <NUM>. As one example, the data transmission unit <NUM> transmits the measurement data encrypted by the encryption unit <NUM> using the first encryption key to the platform of the system <NUM> via the communication network <NUM>. At this time, the data transmission unit <NUM> may transmit the identification information for identifying the data recording apparatus <NUM> of its own to the platform of the system <NUM> together with the measurement data encrypted using the first encryption key. In this manner, the data obtaining unit <NUM> obtains the measurement data obtained by measuring the physical quantity associated with the measurement target that has been encrypted by the data recording apparatus <NUM> using the first encryption key together with the identification information of the data recording apparatus <NUM> that has transmitted this measurement data.

In step <NUM>, the platform of the system <NUM> decrypts the measurement data obtained in step <NUM>. As one example, the decryption unit <NUM> decrypts the measurement data obtained in step <NUM> by using the first private key.

In step <NUM>, the platform of the system <NUM> records the measurement data decrypted in step <NUM> in the database of the DLT. In this manner, the data management unit <NUM> manages the measurement data decrypted in step <NUM> by using the distributed ledger technology by the database of the platform.

In step <NUM>, the platform of the system <NUM> records data used for the application in the database of the application among the measurement data recorded in step <NUM>.

Up to now, it has been known that authenticity and traceability of data may be acquired by using the distributed ledger technology. However, IoT sensors and IoT equipment outside the blockchain, that is, IoT sensors and IoT equipment in a related art do not normally hold security (authenticity and traceability) equivalent to the blockchain. Therefore, no matter how robust and reliable the system of the blockchain may be, this level of security may not be applicable outside the blockchain. In addition, although a stand-alone secure data logger exists, integration with the blockchain has not yet been carried out, and this data logger has not been established as a foundation of trust. In contrast, according to the present embodiment, a novel approach is proposed in which the data logger that can securely record the data is integrated with the DLT/blockchain. In more details, in the present embodiment, the data recording apparatus <NUM> encrypts the measurement data using the encryption key exchanged with the system <NUM> in response to the authentication by the system <NUM> that realizes the platform the DLT platform. In this manner, according to the present embodiment, the authenticity and the traceability of the data can be acquired across the entire system, that is, inside and also outside the blockchain. Therefore, for example, it is possible to increase the transparency of the product quality which has been a black box for consumers.

<FIG> illustrates one example of a flow for searching for and disclosing the measurement data using the system <NUM> according to the present embodiment. In step <NUM>, the application of the system <NUM> logs in to the platform. As one example, the user operates the terminal <NUM> and accesses the application for each stakeholder via the Web browser or the like operating on the terminal <NUM>. Then, the user inputs a user ID or a password to log in to the platform from the application.

In step <NUM>, the application of the system <NUM> specifies a product that is set as a target (measurement target). When the product is wine as one example, the user scans a QR code affixed on a bottle of the wine by using the terminal <NUM>. Then, the terminal <NUM> transmits identification information read by the QR code and also a request for disclosing the measurement data associated with the product to the application. In this manner, the query reception unit <NUM> receives the query for requesting the disclosure of the measurement data associated with the measurement target from the terminal <NUM>. In this manner, the application of the system <NUM> specifies the product for which the disclosure of the measurement data is requested.

In step <NUM>, the application of the system <NUM> supplies the data related to the query received in step <NUM> to the platform.

In step <NUM>, the platform of the system <NUM> makes inquiries to the database of application, the DLT, and the data recording apparatus <NUM> in response to the supply of the query data from the application in step <NUM>, and searches for and collects the measurement data associated with the specified product.

In step <NUM>, the platform of the system <NUM> checks, based on the DLT, whether the measurement data collected in step <NUM> is falsified. At this time, the platform may confirm the authenticity of the data by accessing the data recording apparatus <NUM>.

In step <NUM>, the platform of the system <NUM> supplies a set of the measurement data in which the authenticity is confirmed in step <NUM> to the application.

In step <NUM>, the application of the system <NUM> discloses the set of the measurement data supplied from the platform in step <NUM>. As one example, the query response unit <NUM> transmits a response including the set of the measurement data supplied from the platform in step <NUM>, that is, the measurement data managed using the distributed ledger technology to the terminal <NUM>.

In this manner, in the system <NUM>, the query reception unit <NUM> may receive the query regarding the measurement target, and the query response unit <NUM> may refer to the measurement data managed using the distributed ledger technology, and as one example of a response to the query, transmit a response including the measurement data managed using the distributed ledger technology to the query for requesting the disclosure of the measurement data.

<FIG> illustrates one example of a flow for calculating a price using the data recording apparatus <NUM> and the system <NUM> according to the present embodiment. In the present drawing, a case will be described as one example where stakeholders of a manufacturer, a transportation company A, and a transportation company B respectively have a data recording apparatus 200P, a data recording apparatus 200A, and a data recording apparatus 200B (which will be collectively referred to as the data recording apparatus <NUM> in a case where no distinction is required).

In step <NUM>, the data recording apparatus 200P records the measurement data obtained by measuring the physical quantity associated with the measurement target which has been collected over a period when the measurement target is managed by the manufacturer.

In step <NUM>, the data recording apparatus 200P encrypts the measurement data recorded in step <NUM> by using encryption key exchanged with the system <NUM>, and thereafter transmits the encrypted measurement data to the platform of the system <NUM>.

In step <NUM>, the platform of the system <NUM> records the measurement data transmitted in step <NUM> in the DLT. At this time, the platform calculates a value to be added to the measurement target according to a predetermined algorithm based on the recorded measurement data. Then, the platform records the calculated added value as a point.

Similarly, in step <NUM>, the data recording apparatus 200A records the measurement data obtained by measuring the physical quantity associated with the measurement target which has been collected over a period when the measurement target is managed by the transportation company A.

In step <NUM>, the data recording apparatus 200A encrypts the measurement data recorded in step <NUM> by using the encryption key exchanged with the system <NUM>, and thereafter transmits the encrypted measurement data to the platform of the system <NUM>.

Similarly, in step <NUM>, the data recording apparatus 200B records the measurement data obtained by measuring the physical quantity associated with the measurement target which has been collected over a period when the measurement target is managed by the transportation company B.

In step <NUM>, the data recording apparatus 200B encrypts the measurement data recorded in step <NUM> by using the encryption key exchanged with the system <NUM>, and thereafter transmits the encrypted measurement data to the platform of the system <NUM>.

In step <NUM>, application for the retail store in the system <NUM> requests the platform to carry out pricing of the added value regarding the specified product (measurement target). As one example, the user operates the terminal <NUM>, and accesses the application for the retail store via the Web browser or the like operating on the terminal <NUM>. Then, the terminal <NUM> transmits the identification information of the product and also a request regarding an indicator of the added value of the measurement target to the application for the retail store. In this manner, the query reception unit <NUM> receives, from the terminal <NUM>, the identification information of the product (measurement target) and also the query for requesting the indicator of the value to be added to the measurement target. Then, the application for the retail store supplies the data related to the received query to the platform.

In step <NUM>, the platform of the system <NUM> decides an added value price according to a predetermined algorithm based on the added value points calculated in step <NUM>, step <NUM>, and step <NUM>.

In step <NUM>, the platform of the system <NUM> supplies the added value price decided in step <NUM> to the application for the retail store. Then, the query response unit <NUM> transmits a response including the added value price decided by the platform, that is, the indicator of the value calculated based on the measurement data managed using the distributed ledger technology to the terminal <NUM>.

In step <NUM>, the retailer decides a selling price of the product based on the added value price supplied in step <NUM>. For example, for Japanese sake with a manufacturer's suggested retail price of <NUM> Japanese Yen, in a case where the product is expected be able to maintain a high quality since a management state until the product is supplied to the retail store from the manufacturer is satisfactory, the retailer may sell the product at <NUM> Yen including the added value of <NUM> Yen. Alternatively, for Japanese sake with the manufacturer's suggested retail price of <NUM> Yen, in a case where the product is expected to have a degraded quality since the management state until the product is supplied to the retail store from the manufacturer is dissatisfactory, the retailer may sell the product at a price of <NUM> Yen including a discount of <NUM> Yen. Note that, an actual selling price may be manually decided by the retailer by referring to the added value price, or may be automatically decided based on the added value price.

In this manner, in the system <NUM>, the query reception unit <NUM> may receive the query regarding the measurement target, and the query response unit <NUM> may refer to the measurement data managed using the distributed ledger technology, and as one example of a response to the query, transmit a response including the indicator of the value calculated based on the measurement data managed using the distributed ledger technology to the query for requesting the indicator of the value to be added to the measurement target.

<FIG> illustrates one example of a flow for reaching an agreement by using the system <NUM> according to the present embodiment. In step <NUM>, the application for the retail store recognizes that the consumer has purchased the product from the retailer. The system <NUM> may determine that an indicator of a consideration to the value added to the purchased product is requested for in response to the purchase of the product. That is, the query reception unit <NUM> may receive a query for requesting the indicator of the consideration to the value added to the measurement target.

In step <NUM>, the application for the retail store registers a transaction of the product in the platform. At this time, the application of the retail store may manually register the transaction of the product via a user input, or may automatically register the transaction of the product by cooperating with a POS system. Note that in a case where the consumer has executed purchase processing of the product through e-commerce (EC), the transaction of the product may be automatically registered in a stage where the product is received by the consumer.

In step <NUM>, the platform of the system <NUM> respectively calculates allocations of the added value to the respective stakeholders based on the added value points respectively calculated in step <NUM>, step <NUM>, and step <NUM> for each stakeholder.

In step <NUM>, the platform allocates virtual currencies/tokens to the respective stakeholders based on the allocations of the values added for the respective stakeholders that are respectively calculated in step <NUM> for each stakeholder.

In step <NUM> to step <NUM>, each stakeholder may operate the terminal <NUM>, access the application for each stakeholder via the Web browser or the like operating on the terminal <NUM>, and confirm and exchange the allocated virtual currency/token with a real currency (Yen or Dollar) to be withdrawn. That is, the query response unit may transmit the response including the indicator of the consideration calculated based on the measurement data that is managed using the distributed ledger technology.

In this manner, in the system <NUM>, the query reception unit <NUM> may receive the query regarding the measurement target, and the query response unit <NUM> may refer to the measurement data managed using the distributed ledger technology, and as one example of a response to the query, transmit a response including the indicator of the consideration calculated based on the measurement data managed using the distributed ledger technology to the query for requesting the indicator of the consideration to the value added to the measurement target.

In this manner, according to the present embodiment, it is possible to provide a token economics mechanism in which the pricing is automatically changed according to the nature or quality of the measurement target or an autonomous price agreement mechanism in which even in the case of the same product, the price of the product in which the temperature deviation occurs is set to be lower than the product in which no temperature deviation occurs. In this manner, according to the present embodiment, it is possible to increase the transparency of the product quality which has been a black box for consumers in the past, and also enable payment of the consideration consistent with the product value. In addition, according to the present embodiment, it is possible to back up the trust on the efforts to maintain the quality by the stakeholders on the supply chain management such as the transportation company by the DLT and the data logger, and assign an appropriate reward to the value.

Various embodiments of the present invention may be described with reference to flowcharts and block diagrams, whose blocks may represent (<NUM>) steps of processes in which operations are performed or (<NUM>) units of apparatuses responsible for performing operations. Certain steps and units may be implemented by at least any one of a dedicated circuitry, a programmable circuitry supplied with computer-readable instructions stored on computer-readable media, and processors supplied with computer-readable instructions stored on computer-readable media. A dedicated circuitry may include digital and/or analog hardware circuits and may include integrated circuits (IC) and/or discrete circuits. A programmable circuitry may include reconfigurable hardware circuits including logical AND, OR, XOR, NAND, NOR, and other logical operations, flip-flops, registers, memory elements such as field-programmable gate arrays (FPGA) and programmable logic arrays (PLA), and the like.

Computer-readable media may include any tangible device that can store instructions for execution by a suitable device, such that the computer-readable medium having instructions stored therein is provided with an article of manufacture including instructions which may be executed to create means for performing operations specified in the flowcharts or block diagrams. Examples of computer-readable media may include an electronic storage medium, a magnetic storage medium, an optical storage medium, an electromagnetic storage medium, a semiconductor storage medium, and the like. More specific examples of computer-readable media may include a Floppy (registered trademark) disk, a diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an electrically erasable programmable read-only memory (EEPROM), a static random access memory (SRAM), a compact disc read-only memory (CD-ROM), a digital versatile disk (DVD), a BLU-RAY (registered trademark) disc, a memory stick, an integrated circuit card, and the like.

Computer-readable instructions may include assembler instructions, instruction-set-architecture (ISA) instructions, machine instructions, machine dependent instructions, microcode, firmware instructions, state-setting data, or either source code or object code written in any combination of one or more programming languages, including an object oriented programming language such as Smalltalk (registered trademark), JAVA (registered trademark), and C++, and conventional procedural programming languages, such as the "C" programming language or similar programming languages.

Computer-readable instructions may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus, or to a programmable circuitry, locally or via a local area network (LAN), wide area network (WAN) such as the Internet, or the like, to execute the computer-readable instructions to create means for performing operations specified in the flowcharts or block diagrams. Examples of processors include computer processors, processing units, microprocessors, digital signal processors, controllers, microcontrollers, and the like.

<FIG> illustrates an example of a computer <NUM> in which a plurality of aspects of the present invention may be wholly or partly embodied. A program that is installed in the computer <NUM> can cause the computer <NUM> to function as or perform operations associated with apparatuses according to the embodiments of the present invention or one or more units thereof, and/or cause the computer <NUM> to perform processes of the embodiments of the present invention or steps thereof. Such a program may be executed by a CPU <NUM> to cause the computer <NUM> to perform certain operations associated with some or all of the blocks of flowcharts and block diagrams described herein.

The computer <NUM> according to the present embodiment includes the CPU <NUM>, a RAM <NUM>, a graphics controller <NUM>, and a display device <NUM>, which are mutually connected by a host controller <NUM>. The computer <NUM> also includes input/output units such as a communication interface <NUM>, a hard disk drive <NUM>, a DVD-ROM drive <NUM>, and an IC card drive, which are connected to the host controller <NUM> via an input/output controller <NUM>. The computer also includes legacy input/output units such as a ROM <NUM> and a keyboard <NUM>, which are connected to the input/output controller <NUM> through an input/output chip <NUM>.

The CPU <NUM> operates according to programs stored in the ROM <NUM> and the RAM <NUM>, thereby controlling each unit. The graphics controller <NUM> obtains image data generated by the CPU <NUM> on a frame buffer or the like provided in the RAM <NUM> or in itself, and causes the image data to be displayed on the display device <NUM>.

The communication interface <NUM> communicates with other electronic devices via a network. The hard disk drive <NUM> stores programs and data used by the CPU <NUM> within the computer <NUM>. The DVD-ROM drive <NUM> reads the programs or the data from the DVD-ROM <NUM>, and provides the hard disk drive <NUM> with the programs or the data via the RAM <NUM>. The IC card drive reads programs and data from an IC card, and/or writes programs and data into the IC card.

The ROM <NUM> stores therein a boot program or the like executed by the computer <NUM> at the time of activation, and/or a program depending on the hardware of the computer <NUM>. The input/output chip <NUM> may connect various input/output units via a parallel port, a serial port, a keyboard port, a mouse port, and the like to the input/output controller <NUM>.

A program is provided by computer-readable media such as the DVD-ROM <NUM> or the IC card. The program is read from the computer-readable media, installed into the hard disk drive <NUM>, RAM <NUM>, or ROM <NUM>, which are also examples of computer-readable media, and executed by the CPU <NUM>. The information processing described in these programs is read into the computer <NUM>, resulting in cooperation between a program and the above-mentioned various types of hardware resources. An apparatus or method may be constituted by realizing the operation or processing of information in accordance with the usage of the computer <NUM>.

For example, when communication is performed between the computer <NUM> and an external device, the CPU <NUM> may execute a communication program loaded onto the RAM <NUM> to instruct communication processing to the communication interface <NUM>, based on the processing described in the communication program. The communication interface <NUM>, under control of the CPU <NUM>, reads transmission data stored on a transmission buffering region provided in a recording medium such as the RAM <NUM>, the hard disk drive <NUM>, the DVD-ROM <NUM>, or the IC card, and transmits the read transmission data to a network or writes reception data received from a network to a reception buffering region or the like provided on the recording media.

In addition, the CPU <NUM> may cause all or a necessary portion of a file or a database to be read into the RAM <NUM>, the file or the database having been stored in an external recording medium such as the hard disk drive <NUM>, the DVD-ROM drive <NUM> (DVD-ROM <NUM>), the IC card, or the like, and perform various types of processing on the data on the RAM <NUM>. The CPU <NUM> then writes back the processed data to the external recording medium.

Various types of information, such as various types of programs, data, tables, and databases, may be stored in the recording medium to undergo information processing. The CPU <NUM> may perform various types of processing on the data read from the RAM <NUM>, including various types of operations, processing of information, condition judging, conditional branch, unconditional branch, search/replace of information, and the like, as described throughout this disclosure and designated by an instruction sequence of programs, and writes the result back to the RAM <NUM>. In addition, the CPU <NUM> may search for information in a file, a database, or the like, in the recording medium. For example, when a plurality of entries, each having an attribute value of a first attribute associated with an attribute value of a second attribute, are stored in the recording medium, the CPU <NUM> may search for an entry matching the condition whose attribute value of the first attribute is designated, from among the plurality of entries, and read the attribute value of the second attribute stored in the entry, thereby obtaining the attribute value of the second attribute associated with the first attribute satisfying the predetermined condition.

The above-explained program or software modules may be stored in the computer-readable media on the computer <NUM> or near the computer <NUM>. In addition, a recording medium such as a hard disk or a RAM provided in a server system connected to a dedicated communication network or the Internet can be used as the computer-readable media, thereby providing the program to the computer <NUM> via the network.

While the present invention have been described by way of the embodiments, the technical scope of the present invention is not limited to the above-described embodiments. It is apparent to persons skilled in the art that various alterations and improvements can be added to the above-described embodiments. It is also apparent from the scope of the claims that the embodiments added with such alterations or improvements can be included in the technical scope of the present invention.

Claim 1:
A data recording apparatus (<NUM>) comprising:
a data collection unit (<NUM>) configured to collect measurement data obtained by measuring a physical quantity associated with a measurement target;
a registration request unit (<NUM>) configured to transmit, to a system (<NUM>) configured to manage the measurement data using a distributed ledger technology, a registration request including identification information for identifying the data recording apparatus (<NUM>);
a key exchange unit (<NUM>) configured to exchange a first encryption key with the system (<NUM>) in response to authentication by the system (<NUM>) based on the identification information;
a data recording unit (<NUM>) configured to record the measurement data; and
a data transmission unit (<NUM>) configured to transmit, to the system (<NUM>), the measurement data encrypted using the first encryption key together with the identification information.