JP2000331088A - Method and system for approval mark management - Google Patents

Abstract

PROBLEM TO BE SOLVED: To obtain a method and a system for approval mark management which enable a user to confirm the validity of an approval mark that the approval mark displayed in a home page is given to an office, which publishes this home page, by an approval mark giving organization and maintain the reliability of the approval mark. SOLUTION: When giving the approval mark to an approved enterpriser meeting a prescribed condition, a mark giving organization 100 makes the URL of the approved enterpriser into a digital signature and further makes it into an electronic watermark and inserts it to the approval mark. When the approval mark displayed on a user terminal 5 is clicked, an electronic watermark taking-out means, a digital signature verification means, and a URL comparison means are started, and the taken-out URL and the URL being accessed are compared with each other to confirm the validity of the approval mark.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to a certification mark displayed on a homepage or the like on the Internet.
The present invention relates to a certified mark management system and a certified mark management method that allow a user to confirm the validity.

[0002]

2. Description of the Related Art As an example of a conventional certification mark management system, as of March 1, 1999, a UR on the Internet was used.
L ”http://www.jipdec.or.jp/security/MarkSystem.ht
ml "has a privacy mark system by the Japan Information Processing Development Association (JIPDEC).
The DEC conducts screening of private business establishments and affixes the "Privacy Mark" to private business establishments that have a system in place to take appropriate protective measures for the handling of personal information. . Businesses that have been granted a privacy mark can post the mark on their own website to indicate to the outside that it has been certified by a third party that sufficient protection of personal information, etc. has been achieved. The user determines the creditworthiness of the establishment based on the privacy mark.

[0003]

In the above privacy mark system, since the mark is given to the business establishment only as image data, it is easy for others to copy the mark from the homepage of the business establishment. It is easy for a business that has not been given a fraudulent display on a homepage. Then, in such a conventional certification mark operation system, there is a problem that when an unauthorized copy of the certification mark is made, the user cannot confirm the validity of the certification mark posted on the homepage. The present invention has been made to solve the above-described problems, and the certification mark displayed on the homepage is that the establishment that publishes this homepage has been granted by the certification mark granting mechanism. It is an object of the present invention to obtain a certification mark management system and a certification mark management method that enable a user to confirm the validity of the certification mark and maintain the reliability of the certification mark.

[0004] It is another object of the present invention to enable a certification mark providing mechanism to recognize a business establishment displaying an incorrect certification mark. The invention also provides
It is an object of the present invention to enable a user to easily obtain a means for confirming the validity of a certification mark.

[0005]

According to the present invention, there is provided a certification mark management system according to the present invention, wherein each establishment has different personal information, and the certification mark image data is sent to a certification establishment which is certified as satisfying a predetermined condition. A certification mark management system including a certification mark granting mechanism to be provided and mark data inspection means operating on the user terminal and confirming the validity of the certification mark displayed on the display means of the user terminal. The mark providing mechanism has a digital watermark inserting means for digitally watermarking the unique information of the accredited office and inserting it into the original image data of the accredited mark to generate accredited mark image data. Personal information fetching means for fetching personalized information of the instructed office designated by the client terminal; and the certification mark image data presented by the instructed establishment. The digital watermark extracting means for extracting the private information of the establishment, the personal information of the designated establishment and the extracted private information of the certified establishment are compared with each other, And unique information comparing means for determining whether the location is a location.

Further, in the certification mark management system according to the present invention, the certification mark granting mechanism digitally signs the personal information of the certified office with a digital signature private key to generate digital signature personal information. Means for digitally watermarking the digitally signed personal information generated by the digital signature generating means and inserting it into the original image data of the certification mark to generate certification mark image data; The inspecting means includes digital signature verifying means, the digital watermark extracting means extracts the digitally signed personal information from the certification mark image data presented by the designated office, and the digital signature verifying means extracts the digital watermark. Verifying the digitally signed personal information extracted by the means with the public key corresponding to the secret key. Verified personal information is generated, and the personal information comparing means compares the personal information of the designated office extracted by the personal information extracting means with the verified personal information verified by the digital signature verifying means. The information is compared with information to determine whether the designated establishment is an authorized establishment.

[0007] In the certification mark management system according to the present invention, the certification mark providing mechanism has expiration date setting means for setting an expiration date of the certification mark, and the expiration date information set by the expiration date setting means. Is digitally signed by the digital signature generation means to generate digital signature expiration date information, and the digital signature expiration information is digitally watermarked by the electronic watermark insertion means and inserted into the original image data of the certification mark, and the mark data Inspection means includes expiration date confirmation means for confirming whether or not the certification mark is within the expiration date, and the digital watermark extraction means is configured to convert the digital watermark digitalized from the authentication mark image data presented by the designated office. The signature expiration date information is extracted, and the digital signature verification unit verifies and verifies the extracted digital signature expiration date information. Validated expiration date information is generated, and the expiration date checking means compares the date information for checking the expiration date of the certification mark with the verified expiration date information to check whether the certification mark is within the expiration date. It is something to do.

Further, in the certification mark management system according to the present invention, the mark data inspection means may be arranged such that the digital signature verification means does not normally verify the digitally signed personal information, or If the comparing means determines that the designated business is not a certified business, the fraudulent notice to notify the certified mark granting mechanism that the certified mark displayed on the display means is a fraudulent mark. Means.

Further, in the certification mark management system according to the present invention, the certification mark granting mechanism has revocation verification means for storing personal information of a business holding a certification mark which has been granted and has expired. The data inspection means informs the revocation verification means of the personalized information of the designated business establishment determined to be a certified business establishment by the personalized information comparison means, and checks whether the certification mark of the designated business establishment has expired. Has an expiration verification requesting means for requesting the judgment of the above.

In the certification mark management system according to the present invention, the certification mark granting mechanism holds a list of certified establishments, and transmits the list to the user terminal when notified by the revocation verification requesting means. The revocation verification request means in the user terminal instructs the display means to display the received list.

Further, in the certification mark management system according to the present invention, the certification mark providing mechanism has the mark data inspection means, and when the certification mark image data is given to a certification establishment, the mark data inspection means is provided with the mark data inspection means. The user terminal obtains the mark data inspection means from the certified mark image data presented by the instructed establishment.

[0012] In the certification mark management system according to the present invention, the personal information of each business establishment is a URL of a homepage of each business establishment on the Internet, and the mark data inspection means is a display means of a user terminal. When the certification mark on the homepage of the instructed establishment displayed in the above is clicked, it is configured to be activated on the user terminal.

[0013] Further, according to the certification mark management method of the present invention, each establishment has different personal information and grants certification mark image data to a certification establishment that is certified as satisfying predetermined conditions. And a mark data inspection step for confirming the validity of the certification mark displayed on the display means of the user terminal. The certification mark granting step electronically stores the unique information of the certification establishment. A digital watermark insertion step of generating a watermark image by inserting it into the original image data of the certification mark and generating the certification mark image data, wherein the mark data inspection step is performed by the personal terminal of the designated office designated by the user terminal. A step of extracting personalized information for extracting information, and a step of extracting personalized information of the accredited establishment from the certification mark image data presented by the instructed establishment. Extracting the digital watermark to be extracted, and comparing the personal information of the designated office with the extracted personal information of the certified office to determine whether the designated office is a certified office. And a unique information comparison step.

[0014] The "digital signature" in the claims is also called an "electronic signature", and is well known as a technique for confirming the signature source of digitally signing data. The signing source has a secret key and a corresponding public key, and digitally signs the data with the secret key. The receiving side “verifies” the digitally signed data using the public key, and if the data is successfully verified, it is confirmed that the owner of the public key is the signature source.

The term “digital watermark” in the claims is well known as a technique for embedding predetermined information in data such as images and sounds. And, for example, Nikkei Electronics 683, P.S. 99-124, "" Digital watermarking protects the multimedia era "" (Feb. 2, 1997)
24, published by Nikkei BP), there is no possibility that information embedded in a digital watermark is falsified.

[0016] In the claims, "URL" means "Uniform Resource Locato."
This is an abbreviation for "r", and is well known as an "address" for specifying the location of information on the Internet.

[0017]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiment 1 Embodiment 1 will be described with reference to FIGS. FIG. 1 is a configuration diagram of a certification mark management system according to this embodiment, FIG. 2 is a configuration diagram of a user terminal showing an internal configuration of a mark data inspection unit in FIG. 1 in detail, and FIG. FIG. 4 is a flowchart for explaining the operation of the mark applying mechanism, FIG. 4 is a flowchart for explaining the operation of the mark data inspection means in this embodiment, and FIGS. 5 is a flowchart for explaining the operation according to the configuration of FIG.

The configuration will be described. In FIG. 1, 100
Permits business establishments (certified establishments) that have determined that they meet certain certification conditions, such as strictly managing customer personal information at a certain level or more, to display the certification mark on the website. A certification mark giving mechanism for giving image data of a certification mark to a certification establishment, 1 is a mark generation device which is owned by the certification mark giving mechanism 100 and generates a certification mark, and 11 is included in the mark generation device 1 and generates a mark. Communication means for the device 1 to communicate with the outside, 12 is included in the mark generation device 1, and mark generation means for generating original image data of a certification mark to be given to a certification establishment, 13 is included in the mark generation device 1. Digital signature generation means for digitally signing a URL which is included and is unique information of the authorized office and holds a secret key for digital signature. 14 is included in the mark generation device 1,
Digital watermarking means for electronically watermarking the digitally signed URL of the certified business office and inserting it into the original image data of the certified mark.

Reference numeral 2 denotes the certification mark providing mechanism 100
Mark operation device owned by the company and managing the certification mark, 21
Is included in the mark operation device 2 and a communication means for the mark operation device 2 to communicate with the outside, and 22 is included in the mark operation device 2 and accepts an application for certification from an external office and performs examination. The mark application receiving means 23 is a mark data inspection means included in the mark operation device 2 and used by the user to confirm the validity of the certification mark.
In this embodiment, the mark data inspection means 23
a applet.

Reference numeral 3 denotes a server of the establishment A. The establishment A owns a homepage at a URL called URLA on the Internet. Reference numeral 31 denotes communication means of the server of the office A, and reference numeral 32 denotes mark data posting means which is installed in the server 3 and generates a source file of a homepage. Reference numeral 4 denotes a server of the establishment B. The establishment B owns a homepage at a URL called URLB on the Internet. 41 is a communication means possessed by the server of the office B,
Reference numeral 42 denotes mark data posting means that is installed on the server 4 and generates a source file of a homepage.

Reference numeral 5 denotes a user terminal having a function of accessing a homepage of each business office on the Internet.
Reference numeral 51 denotes communication means of the user terminal 5; 52, display means such as a liquid crystal monitor provided in the user terminal 5;
Is mark data inspection means acquired by the user terminal 5, which is the same as the mark data inspection means 23, and is a Java applet. The communication means 51 is a URL of a homepage accessed by the user terminal.
It also has the function of retaining The user terminal 5 has a cursor operating means (not shown) for moving a cursor on the display means 52 and clicking at an arbitrary place. It is automatically activated when the certification mark on 52 is clicked by the user.

Reference numeral 6 denotes a network for interconnecting the mark generation device 1, the mark operation device 2, the establishment A server 3, the establishment B server 4, the user terminal 5, and the like.

In FIG. 2, reference numeral 71 denotes the image data of the certification mark (certification mark image data) posted on the homepage of the establishment through the communication means 51 of the user terminal 5.
And the URL of the certified business office (digitally signed URL) digitally signed from the certified mark image data
A digital watermark extracting unit 72 for extracting the digitally signed UR extracted by the electronic watermark extracting unit 71
URL verification means 73 for verifying L. URL of the homepage accessed by the user terminal 5 from the communication means 51
URL extracting means 74 for extracting the URL (URL (1)) verified by the digital signature verifying means 72 and the URL (URL) extracted by the URL extracting means 73.
UR to compare (2)) and determine whether they are the same
L comparison means. The mark data inspection unit 53 includes the digital watermark extraction unit 71, the digital signature verification unit 72,
It comprises a URL fetching unit 73 and a URL comparing unit 74. The mark data inspection unit 23 included in the mark operation device 2 has the same configuration as described above.

In the above configuration, the public key corresponding to the digital signature private key held by the digital signature generation means 13 is disclosed as the public key of the certification mark providing mechanism 100, and the user terminal 5 has already It is assumed that the public key has been obtained.

Next, the operation will be described. First, the operation of the certification mark providing mechanism 100 will be described with reference to the flowchart of FIG. Establishment A gives certification mark to Network 6
When the application is made to the accredited mark providing mechanism 100 via the interface, the accredited mark applying mechanism 100 accepts this application by the mark application accepting means 22 in step S100. At the time of applying for this mark, establishment A is required to declare the URL of the homepage that wants to publish the certification mark. In this case, establishment A declares URLA. Next, step S101
The mark application receiving means 22 examines whether or not the establishment A satisfies the certification conditions, and rejects the application if the certification conditions are not satisfied, and informs the communication means 21 of the rejection in step S102. Contact place A. When the mark application receiving unit 22 determines that the establishment A satisfies the certification condition, the process proceeds to step S103, and the mark generation unit 12 in the mark generation device 1 generates original image data of the certification mark. Next, in step S104, the digital signature generation means 13 digitally signs the URL of the office A using the secret key. Step S
In step 105, the digitally signed URL is digitally watermarked by the digital watermark inserting means 14 and inserted into the original image data of the certification mark. In step S106, the URL is transmitted to the establishment A by the communication means 11 as certification mark image data.
At this time, the mark data inspection means 23 is attached and transmitted at the same time.

As described above, in this embodiment, the certification mark image data contains the URL information of the certification establishment digitally signed and further digitally watermarked. Is attached.

The establishment A receives the certification mark image data by the communication means 31 and inserts the certification mark image data into the source file of its homepage by the mark data posting means 32.

The user accesses the homepage of the business establishment A from the user terminal 5 and browses it on the display means 52. Since the certification mark given by the certification mark granting organization 100 to the establishment A is posted on the homepage of the establishment A, when the user clicks the certification mark, the certification mark is attached to the certification mark image data. Jav
The mark data inspection means 23, which is an applet, is downloaded to the user terminal 5 and activated as the mark data inspection means 53.

Hereinafter, the operation of the mark data inspection means 53 on the user terminal 5 will be described with reference to the flowchart of FIG. In step S1, mark data inspection means 5
3 obtains the certification mark image data, Step S2
Then, the digital watermark extracting means 71 extracts the digitally signed URL which has been digitally watermarked from the certification mark image data. Subsequently, in step S3, the digital signature verifying means 72 converts the digital signature URL into the certification mark imparting mechanism 100.
Verify with the public key published by. If the verification result is incorrect, the URL is not a digitally signed URL by the certification mark providing mechanism 100, and the display means 52 displays the fact that the mark is invalid in step S4. If the URL is digitally signed by the certification mark imparting mechanism 100, the verification result in step S3 is normal, so the URL verified in step S3 is set to URL (1). Here, URL (1) is URLA which is the URL of the establishment A.

Next, in step S5, the URL fetching means 7
3 retrieves the URL of the currently accessed home page from the communication means 51, and sets this URL as URL (2). Here, URL (2) is URLA which is the URL of the establishment A.

Subsequently, in step S6, the URL comparing means 7
4 compares the URL (1) with the URL (2) and determines whether both are the same. URL (1) and URL
The fact that (2) is the same means that the UR included in the certification mark displayed on the currently accessed homepage
L is the same as the URL of the establishment where the currently accessed homepage is posted, and this establishment displays the certification mark given by the certification mark granting mechanism 100 by itself. . Therefore the URL
If the URL (2) is the same as (1), the certification mark is a legitimate mark, and the display means 53 is caused to display the legitimate mark in step S7. If the URL (1) and the URL (2) are not the same in step S6, it is an invalid mark, and the display means 52 is caused to display that the mark is invalid in step S8. Here is the URL
Since both (1) and URL (2) are URLA,
In step S7, the display means 52 is caused to display that the mark is a legitimate mark. By viewing this display, the user can confirm that the establishment A has been granted the certification mark by the certification mark granting mechanism. That is, the validity of the certification mark can be confirmed.

Next, since the certification condition set by the certification mark granting mechanism 100 is not satisfied, the establishment B without the certification mark accesses the homepage of the establishment A with the certification mark. It is assumed that the certification mark displayed on the website of the establishment A is copied, and the certification mark is displayed on the website of the establishment B. As described above, the mark data inspection means is a Java applet, and the mark data inspection means 23 is also attached to the certification mark copied by the business establishment B from the homepage of the business establishment A. The URL of the website of establishment B is URL
B.

The user accesses the homepage of the establishment B from the user terminal 5 and browses it on the display means 52. On the home page of this establishment B, the certification mark given by the establishment A from the granting organization 100 is posted.
When the user clicks the certification mark, the mark data inspection means 23 is downloaded to the user terminal 5 and activated as the mark data inspection means 53. Thereafter, FIG.
The operation of the mark data inspection means 53 will be described with reference to the flowchart of FIG. When the mark data inspection means 53 acquires the certification mark image data in step S1, the digital watermark extracting means 71 extracts the digitally signed URL from the certification mark image data in step S2. This is a digital signature of the URL of the business establishment A, URLA. Subsequently, in step S3, the digital signature verifying means 72 checks the URL with the digital signature.
Is verified using the public key published by the certification mark providing mechanism 100. Since the digitally signed URL has been digitally signed by the certification mark providing mechanism, the verification result is normal. URL verified here
Let A be URL (I).

Next, at step S5, the URL fetching means 7
3 retrieves the URL of the currently accessed home page from the communication means 51 and designates this URL as URL (2). Here, URL (2) is the URL of the establishment B, that is, URLB. Subsequently, in step S6, the URL comparing means 74 compares the URL (1) with the URL (2) and determines whether the two are the same. In this case the URL
Since (1) is URLA and URL (2) is URLB, which is different, the display means 52 is caused to display an invalid mark in step S8. This means that the URL included in the certification mark displayed on the homepage of the currently accessed establishment B is different from the URL of the establishment B, and this establishment B is different from other establishments. This is because the assigned certification mark is displayed.

The URL in the embodiment described above is the unique information according to the present invention. Similarly, the URL fetching means 73 is similarly used for the unique information fetching means and the URL comparing means 7.
4 is the unique information comparison means, the digitally signed URL is the digitally signed unique information, URL (1) is the verified unique information,
URL (2) is the private information of the instructed establishment. Also, step S105 in FIG. 3 is a digital watermark insertion step in the present invention, step S5 in FIG. 4 is an individual information extraction step, step S2 is an electronic watermark extraction step, and step S6 is a unique information comparison step.

As described above, according to the first embodiment, since the mark is provided with the mark data inspection means, the user clicks the mark on the home page displayed on the user terminal. Only with this certification mark, there is an effect that the legitimacy of the certification mark that the establishment publishing this homepage has been granted by the certification mark granting mechanism can be easily confirmed.

Also, in this embodiment, the URL of the business establishment that satisfies the certification condition is digitally signed using the secret key held by the certification mark attaching mechanism, so that tampering by another person can be prevented. There is an effect that the reliability of the mark image data can be maintained.

Further, in this embodiment, the URL of the business establishment that satisfies the certification condition is digitally signed and then inserted as a digital watermark into the certification mark image data, which is image data, so that it can be displayed on the Internet homepage. It is easy and easy to communicate to the user. In addition, there is an effect that an unauthorized copy of the certification mark image data by the establishments other than the certification establishment can be detected.

In the above embodiment, the certification mark has no particular expiration date.
00 may permit the establishment to display the certification mark only for a certain period of time. For this purpose, an expiration date setting means (not shown) is provided in the certification mark providing mechanism 100, and a corresponding expiration date checking means (not shown) is provided in the mark data inspection means. The certification mark granting organization 100 sets the expiration date information of the certification mark to be given by the expiration date setting means. The expiration date information is, for example, the expiration date is from June 1, 1999 to December 31, 1999. If so, it is indicated as "1999901-19991231". If only the last day of the expiration date is indicated, "-199" is displayed.
91231 ". Of course, the present invention is not limited to this format. The accredited mark granting organization 100 adds the expiration date information to the URL of the accredited establishment, converts the expiration date information into a digital signature by the digital signature generation means 13, and further converts the electronic signature. The watermark insertion unit 14 converts the digital watermark into an electronic watermark and inserts it into the certification mark image data.

Then, when the user clicks the certification mark on the user terminal 5, the mark data inspection means 53 operates according to the flowchart shown in FIG. In FIG. 5, the operations of the steps having the same numbers as those in the flowchart of FIG. 4 are the same as those in FIG. First, in step S1, the mark data inspection means acquires the certification mark image data,
In step S2, the digital watermark extracting means 71 extracts the digitally signed URL and expiration date information,
In step S3, the digital signature verifying means 72 checks the URL
And the expiration date information is verified. If the verification is successful, the validity is confirmed by comparing the URLs in step S6 as in the first embodiment. If the validity is confirmed in step S6, the expiration date checking means checks the expiration date information in step S20. The expiration date confirming means obtains information on the date for confirming the expiration date from a timer of the user terminal 5 (not shown), and if this date is within the expiration date, displays the "regular mark" on the display means 52 in S21. If the expiration date has not passed, the "out of date mark" is displayed in S22.
Is displayed. The expiration date information and the information on the date on which the expiration date confirmation unit checks the expiration date may include time information. For example, the expiration date may be set to 12: 0 on a predetermined day.
It may be set up to 0. In this way, it is possible to maintain the reliability of the certification mark by setting the expiration date on the certification mark and confirming it with the expiration date confirmation means, and the user can easily confirm the certification mark beyond the expiration date. effective. Further, since the expiration date information is also digitally signed and digitally watermarked, it is possible to prevent tampering and maintain the reliability of the certification mark.

Further, the mark data inspection means 53 may be provided with a fraud notification means (not shown). In this case, the mark data inspection means 53 operates according to the flowchart shown in FIG. 6, the operations of the steps having the same numbers as those in the flowchart of FIG. 4 are the same as those in FIG. In FIG. 6, if the verification result is incorrect in step S3, the fact that the mark is an incorrect mark is displayed on the display means 52 in step S4. Notify. Further, in step S6, the URL (1) and the URL (2)
Do not match, the fact that the mark is an invalid mark is displayed on the display means 52 in step S8, and at step S1
At 0, the result is notified to the certification mark giving mechanism 100 by the above-mentioned improper notification means. Thereby, there is an effect that the authorized mark providing mechanism 100 can grasp the distribution of the unauthorized mark.

In the above embodiment, the mark data inspection means is an example of a Java applet. However, the mark data inspection means may be software in another language. In the above embodiment, the user terminal downloads and uses the mark data inspection means. However, the mark data inspection means may be dedicated hardware provided in the user terminal. In this case, there is an effect that the processing speed is improved.

In the above-described embodiment, an example is shown in which the mark generating means 12 generates the original image data of the certification mark. However, the original image data is stored in the original image data storing means (not shown) in the mark generating apparatus 1. Alternatively, it may be obtained from outside the certification mark providing mechanism 100 every time a certification mark is provided.

Embodiment 2 Embodiment 2 will be described with reference to FIGS. 7 to 9. In the first embodiment, an example in which the user terminal checks the validity of the certification mark displayed on the homepage of the business establishment has been described. In the present embodiment,
After confirming the validity of the certification mark on the user terminal,
An example in which the validity of the certification mark is confirmed again by the certification mark providing mechanism will be described.

Referring to the drawings, FIG. 7 is a block diagram of a certification mark management system according to this embodiment, and FIG. 8 is a block diagram of a user terminal showing in detail the internal configuration of mark data inspection means in this embodiment. FIG. 9 is a flowchart for explaining the operation of the mark data inspection means in this embodiment.

Next, the structure will be described. In FIGS. 7 and 8, the same parts as those in FIGS. 1 and 2 of the first embodiment are denoted by the same reference numerals, and description thereof will be omitted. In FIG. 7, reference numeral 23a denotes mark data checking means used when the user checks the validity of the certification mark. The mark data checking means 23 described in the first embodiment is provided with an expiration verification requesting means 75 described later. It was done. This mark data inspection means 23a
It is assumed to be an ava applet. Reference numeral 24 denotes revocation verification means for verifying whether or not the certification mark displayed on the homepage of a certain business site has been revoked. Reference numeral 53a denotes mark data inspection means acquired by the user terminal 5, and the mark data inspection means 23a This is the same as the mark data inspection unit 53 described in the first embodiment, except that an expiration verification requesting unit 75 described later is added. Others are in Figure 1
Is the same as

In FIG. 8, mark data inspection means 53
a includes the revocation verification requesting means 75 as described above. The revocation verification requesting means 75 verifies whether the certification mark displayed by a certain office is not revoked through the communication means 51 to the revocation verification means 24. Ask. FIG. 2 shows another configuration.
Is the same as As described above, the mark data inspection means 23a included in the mark operation device 2 has the same configuration as the mark data inspection means 53a.

In this embodiment, the expiration of the accreditation mark means that the accreditation mark was once granted to the business establishment by the certification mark granting mechanism 100, but thereafter, the business establishment has some inconvenience and the display of the certification mark is not permitted. It becomes the case when it becomes. The information of the establishment where the display of such a certification mark has been rejected is displayed together with the URL thereof together with the revocation verification means 24.
Is stored in

Next, the operation will be described. In this embodiment, as in the first embodiment, it is assumed that the establishment A has applied for the application of the certification mark to the certification mark granting mechanism. The operations performed after the accredited mark providing mechanism receives the application for the accredited mark from the establishment A until the accredited mark image data is assigned are the same as those described in the first embodiment using the flowchart of FIG. Omitted. However, in this embodiment, the mark data inspection means 23a is attached to the certification mark image data transmitted to the establishment A.

When receiving the certification mark image data, the establishment A inserts the certification mark image data into the source file of its own homepage by the mark data posting means 32 as in the first embodiment.

The user accesses the homepage of the business establishment A from the user terminal 5 and browses it on the display means 52. Since the certification mark given by the certification mark granting organization 100 to the establishment A is posted on the homepage of the establishment A, when the user clicks the certification mark, the certification mark is attached to the certification mark image data. J
The mark data inspection unit 23a, which is an ava applet, is downloaded to the user terminal 5 and activated as the mark data inspection unit 53a.

Hereinafter, the operation of the mark data inspection means 53a will be described with reference to the flowchart of FIG.
Steps S1 to S5 are similar to the operations in FIG. 4 described in the first embodiment, and thus description thereof is omitted.

In step S6 of FIG. 9, the URL comparing means 74
Is the URL (1) verified in step S3 and step S3.
The URL (2) extracted in step 5 is compared to determine whether the two are the same. Here, URL (1) and URL
Both (2) are URLLA. URL (1) and UR
The fact that L (2) is the same means that the certification mark displayed on the currently accessed homepage includes the U
This means that the RL information is the same as the URL of the establishment that posts the currently accessed homepage, and this establishment displays the certification mark given by the certification mark granting mechanism 100. . U in step S6
If RL (1) and URL (2) are not the same, the mark is an invalid mark, and the display means 52 is caused to display that the mark is invalid in step S7. Here URL (1)
Since both URL and URL (2) are URLLA, the process proceeds to step S30, where the revocation verification requesting means 75 is activated, reports this URLA to the mark operation device 2, and requests verification of the presence or absence of revocation.

When the mark operation device 2 is requested by the user terminal 5 to verify the presence or absence of revocation, the revocation verification means 2 checks the presence or absence of revocation of the business entity having this URL based on the URL received.
The verification is performed by 4 and the presence or absence of revocation is transmitted to the user terminal.
The revocation verification requesting means 75 receives this result in step S31, and instructs the display means 52 to display a valid certification mark in step S32 if the result is not revoked. If there is a revocation, an instruction is given to display on the display means 52 that the certification mark has been revoked in step S33.

As described above, in the second embodiment, in addition to the first embodiment,
Has revocation verification means 24 for verifying the revocation of the certification mark in response to a revocation verification request from the user terminal, and when there is revocation, the fact is displayed on the user terminal. In the user terminal, the certification mark displayed on the homepage can only evaluate the validity of whether or not the business that owns the homepage has been granted. Therefore, in the configuration of the first embodiment, the certification expired after the grant. Although the mark cannot be discriminated, in the second embodiment, since the certification mark providing mechanism is requested to verify the presence or absence of revocation, there is an effect that the reliability of the certification mark can be maintained.

Also, in the above embodiment, the user terminal only obtains an answer as to whether or not the certification mark has expired.
Information on the establishment that owns the certification mark that has not expired may be obtained. In this case, the mark operation device 2
Has an unillustrated granting office list storage unit, which stores information of a list of companies to which a certification mark that has not been expired has been assigned, and stores this list when replying to the revocation verification from the revocation verification requesting unit 75. Information to the user terminal 5
In the user terminal 5, the revocation verification request means 75 instructs the display means 52 to display this list together with the revocation verification result. In this case, if the revocation verification results in "Revoked", the user can select from the list a business that has been granted a certification mark that has not been revoked, improving convenience. This has the effect. Also, if the list is displayed when the verification result is "No expiration", the user can obtain information on other establishments that have been granted a certification mark that has not expired and can compare multiple establishments, etc. This has the effect of improving convenience.

Third Embodiment A third embodiment will be described with reference to FIGS. In the first and second embodiments, the certification mark providing mechanism 100 digitally watermarks the URL of the certified business office and inserts it into the certification mark. However, in the present embodiment, the certification mark providing mechanism 100 converts the URL of the certified business office into a digital signature. An example in which a digital watermark is inserted into a certification mark only is shown.

Referring to FIG. 10, FIG. 10 is a block diagram of a certification mark management system according to this embodiment, and FIG.
FIG. 12 is a configuration diagram of a user terminal showing the internal configuration of the mark data inspection means in this embodiment in detail, FIG. 12 is a flowchart for explaining the operation of the certification mark providing mechanism in this embodiment, and FIG. 5 is a flowchart illustrating an operation of a mark data inspection unit according to the embodiment.

Next, the structure will be described. In FIGS. 10 and 11, the same parts as those in FIGS. 1 and 2 of the first embodiment are denoted by the same reference numerals, and description thereof is omitted. FIG. 10 shows a digital signature generation unit 1 based on the system configuration diagram of the first embodiment shown in FIG.
3 is deleted. Also, in FIG.
Is mark data checking means used when the user checks the validity of the certification mark. The mark data checking means 23 to the digital signature verifying means 7 described in the first embodiment.
2 is deleted. This mark data inspection means 2
3b is a Java applet. Also 53
b is a mark data checking means obtained by the user terminal 5, which is the same as the mark data checking means 23b, and is a mark data checking means 53 described in the first embodiment.
From which the digital signature verification means 72 is deleted.
Others are the same as FIG.

In FIG. 11, mark data inspection means 5
3b is obtained by deleting the digital signature verifying means 72 from the mark data checking means 53 of the first embodiment shown in FIG. 2 as described above. Others are the same as FIG.

Next, the operation will be described. In this embodiment, as in the first embodiment, it is assumed that the establishment A has applied for the application of the certification mark to the certification mark granting mechanism. First, the operation of the certification mark providing mechanism will be described with reference to the flowchart of FIG. 12. After the certification mark providing mechanism receives the application for the provision of the certification mark from the business establishment A, the steps from step S100 until the generation of the original image data are performed. The operation up to S103 is the same as that of FIG. 3 described in the first embodiment, and therefore the description is omitted. In step S200 of FIG. 12, the digital watermark inserting unit 14 converts the URL, which is the URL that the company A desires to publish the certification mark, into a digital watermark and inserts it into the original image data of the certification mark. Establishment A by communication means 11
Send to However, in this embodiment, the mark data inspection means 23b is attached to the certification mark image data transmitted to the establishment A.

When receiving the certification mark image data, the establishment A inserts the certification mark image data into the source file of its own homepage by the mark data posting means 32, as in the first embodiment.

The user accesses the homepage of the business establishment A from the user terminal 5 and browses it on the display means 52. Since the certification mark given by the granting organization 100 to the establishment A is posted on the homepage of the establishment A, when the user clicks the certification mark, the Java applet attached to the certification mark image data is clicked. Is downloaded to the user terminal 5 and activated as the mark data inspection means 53b.

Hereinafter, the operation of the mark data inspection means 53b will be described with reference to the flowchart of FIG. When the mark data inspection means 53 acquires the data of the certification mark in step S1, the digital watermark extracting means 71 extracts the URL from the certification mark image data in step S2. The extracted URL is defined as URL (1). Here, URL (1) is the URL of establishment A, URLA
It is.

Next, at step S5, the URL fetching means 7
3 retrieves the URL of the currently accessed home page and sets this URL as URL (2). Here UR
L (2) is URLA which is the URL of the establishment A.

Subsequently, at step S6, the URL comparing means 7
4 compares the URL (1) with the URL (2) and determines whether both are the same. URL (1) and URL
The fact that (2) is the same means that the UR included in the certification mark displayed on the currently accessed homepage
L information and the URL of the establishment that posts the currently accessed homepage is the same, and this establishment displays the certification mark given by the certification mark granting mechanism 100 by itself. become. Therefore U
If the RL (1) and the URL (2) are the same, the certification mark is a legitimate mark.
3 is displayed to indicate that it is a legitimate mark. Step S
If the URL (1) and the URL (2) are not the same in 6,
Since this establishment is displaying a certification mark which has not been given by itself, the display means 52 is caused to display an invalid mark in step S8. Here, since both the URL (1) and the URL (2) are URLA, the display means 52 is caused to display that the mark is a legitimate mark in step S7. By viewing this display, the user can confirm that the establishment A has been granted the certification mark by the certification mark granting mechanism. That is, the validity of the certification mark can be confirmed.

In this embodiment, the URL fetching means is the unique information fetching means of the present invention, and the URL comparing means 74 is the unique information comparing means of the present invention.
Step S200 in FIG. 12 is a digital watermark insertion step in the present invention.

As described above, according to the third embodiment, the user simply clicks the certification mark on the homepage displayed on the user terminal, and the establishment that publishes the homepage sets the certification conditions. There is an effect that it is possible to confirm the validity of the certification mark that the customer has been satisfied and the certification mark has been given by the certification mark providing mechanism.

Although the third embodiment differs from the first and second embodiments in that the URL is not digitally signed,
When the damage is small even if it is tampered with, or when the possibility of tampering is small, there is an effect that the processing speed is improved.

Also, in this embodiment, the URL of the business establishment that satisfies the certification condition is inserted as a digital watermark into the certification mark image data, which is image data, so that it can be easily displayed on the Internet homepage, There is an effect that it is easy to transmit.

[0071]

As described above, according to the accreditation mark management system of the present invention, the accreditation mark assigning mechanism converts the unique information of the accredited establishment into a digital watermark and inserts the information into the original image data of the accreditation mark. A digital watermark insertion unit for generating image data, wherein the mark data inspection unit comprises: a personalized information extracting unit for extracting personalized information of the designated office designated by the user terminal; Digital watermark extracting means for extracting the personalized information of the certified establishment from the certified mark image data to be compared with the personalized information of the designated establishment and the extracted personalized information of the certified establishment, Since it has the unique information comparing means for determining whether or not the instructed establishment is an authorized establishment, there is an effect that the user can confirm the validity of the authorized mark. Further, there is an advantage that the risk of alteration of the personal information included in the certification mark is small, and the reliability of the certification mark can be maintained.

According to the certification mark management system of the present invention, the certification mark granting mechanism digitally signs the personalized information of the certified business with the digital signature private key to generate digitally signed personalized information. Generating means for digitally watermarking the digitally signed personal information generated by the digital signature generating means and inserting it into original image data of a certification mark to generate certification mark image data; The data inspection means includes a digital signature verifying means, the digital watermark extracting means extracts the digitally signed personal information from the certification mark image data presented by the designated establishment, and the digital signature verifying means outputs the digital watermark. Verifies the digitally signed personal information extracted by the extracting means with the public key corresponding to the secret key The personal information comparing means generates the verified personal information by using the personal information of the designated office extracted by the personal information extracting means and the verified personal information verified by the digital signature verifying means. Since it is determined whether or not the indicated establishment is an authorized establishment by comparing the information with the existing information, the user can confirm the validity of the authorized mark. In addition, the risk that the proprietary information included in the certification mark is falsified is further reduced, and the reliability of the certification mark can be maintained.

According to the certification mark management system of the present invention, the certification mark assigning mechanism has expiration date setting means for setting the expiration date of the certification mark, and the expiration date information set by the expiration date setting means is provided. Is digitally signed by the digital signature generation means to generate digital signature expiration date information, and the digital signature expiration information is digitally watermarked by the electronic watermark insertion means and inserted into the original image data of the certification mark, and the mark data Inspection means includes expiration date confirmation means for confirming whether or not the certification mark is within the expiration date, and the digital watermark extraction means is configured to convert the digital watermark digitalized from the authentication mark image data presented by the designated office. The signature expiration date information is extracted, and the digital signature verification unit verifies and verifies the extracted digital signature expiration date information. Validated expiration date information is generated, and the expiration date checking means compares the date information for checking the expiration date of the certification mark with the verified expiration date information to check whether the certification mark is within the expiration date. So
The user can easily confirm whether or not the certification mark is within the expiration date, and this has the effect that the reliability of the certification mark can be maintained. In addition, there is an effect that the risk that the expiration date information is falsified is small, and the reliability of the certification mark can be maintained.

Further, according to the certification mark management system of the present invention, the mark data checking means may not perform the verification of the digitally signed personal information correctly in the digital signature verifying means, or If the information comparing means determines that the designated establishment is not an authorized establishment, the fraudulent informing the accreditation mark giving mechanism that the accreditation mark displayed on the display means is an improper mark. The provision of the notification means has the effect that the certification mark providing mechanism can grasp the distribution of the unauthorized certification mark.

According to the accreditation mark management system of the present invention, the accreditation mark assigning mechanism has revocation verification means for storing personal information of a business holding an accreditation mark that has been granted and has expired. The data inspection means communicates the proprietary information of the designated establishment determined to be a certified establishment by the individualized information comparison means to the certification mark granting mechanism, and determines whether or not the certification mark of the designated establishment has expired. Has the effect of enabling the user to easily know whether the certification mark has expired and to maintain the reliability of the certification mark.

According to the accreditation mark management system of the present invention, the accreditation mark assigning mechanism holds a list of accredited establishments and, when notified by the revocation verification request means, stores the list in the user terminal. Since the request is sent and the revocation verification requesting means in the user terminal instructs the display means to display the list, there is an effect that the convenience of the user is improved.

According to the certification mark management system of the present invention, the certification mark providing mechanism owns the mark data inspection means, and when the certification mark image data is given to the certification establishment, the mark data inspection means operates the mark data inspection means. Since the user terminal obtains the mark data inspection means from the certified mark image data presented by the indicated establishment, the user terminal can easily acquire the mark data inspection means. .

According to the certification mark management system of the present invention, the personal information of each business establishment is the URL of the homepage of each business establishment on the Internet, and the mark data inspection means is displayed on the display means of the user terminal. When the certification mark on the indicated establishment homepage is clicked, the certification mark is activated on the user terminal, so that the user can easily use the mark data inspection means. There is.

Further, the certified mark management method of the present invention includes a certified mark assigning step and a mark data inspecting step. In the certified mark assigning step, the unique information of the certified establishment is digitally watermarked and inserted into the original image data of the certified mark. A digital watermark insertion step of generating certification mark image data, wherein the mark data inspection step comprises: a step of extracting personal information of the designated office designated by the user terminal; A digital watermark extracting step of extracting the personalized information of the certified business establishment from the certified mark image data presented by the designated business establishment, and the personalized information of the designated business establishment and the extracted personalized information of the certified business establishment And a unique information comparison step of determining whether the designated establishment is an authorized establishment. There is an effect that can confirm the validity of the constant mark. Further, there is an advantage that the risk of alteration of the personal information included in the certification mark is small, and the reliability of the certification mark can be maintained.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of a certification mark management system according to a first embodiment of the present invention.

FIG. 2 is a configuration diagram of a user terminal according to the first embodiment of the present invention.

FIG. 3 is a flowchart of an operation of a certification mark providing mechanism according to the first embodiment of the present invention.

FIG. 4 is a flowchart of an operation of a mark data inspection unit according to the first embodiment of the present invention.

FIG. 5 is a flowchart of an operation of a mark data inspection unit according to another configuration of the first embodiment of the present invention.

FIG. 6 is a flowchart of an operation of a mark data inspection unit according to still another configuration in the first embodiment of the present invention.

FIG. 7 is a configuration diagram of a certification mark management system according to a second embodiment of the present invention.

FIG. 8 is a configuration diagram of a user terminal according to Embodiment 2 of the present invention.

FIG. 9 is a flowchart of an operation of a mark data inspection unit according to the second embodiment of the present invention.

FIG. 10 is a configuration diagram of a certification mark management system according to a third embodiment of the present invention.

FIG. 11 is a configuration diagram of a user terminal according to Embodiment 3 of the present invention.

FIG. 12 is a flowchart of the operation of a certification mark providing mechanism according to Embodiment 3 of the present invention.

FIG. 13 is a flowchart of an operation of a mark data inspection unit according to the third embodiment of the present invention.

[Explanation of symbols]

 REFERENCE SIGNS LIST 1 mark generation device 2 mark operation device 3 establishment A server 4 establishment B server 5 user terminal 6 network 11 communication means 12 mark generation means 13 digital signature generation means 14 digital watermark insertion means 21 communication means 22 mark application acceptance means 23 Mark data checking means 23a mark data checking means 23b mark data checking means 24 revocation checking means 31 communication means 32 mark data posting means 41 communication means 42 mark data posting means 51 communication means 52 display means 53 mark data checking means 53a mark data checking means 53b mark data inspection means 71 digital watermark extraction means 72 digital signature confirmation and verification means 73 URL extraction means 74 URL comparison means 75 revocation verification request means 100 certification mark giving mechanism.

 ──────────────────────────────────────────────────続 き Continued on the front page F term (reference) 5B049 AA05 BB07 CC23 CC31 DD01 EE07 EE09 FF03 FF04 GG04 GG07 GG08 GG10 5C076 AA14 BA06 5J104 AA09 AA14 LA03 LA06 PA09 9A001 EE02 EE03 HH28 JJ25 KK56 LL03

Claims (9)

[Claims] 1. An accredited mark providing mechanism, wherein each of the offices has different personalized information and assigns image data of an accredited mark to an accredited establishment that is certified as satisfying a predetermined condition;
A mark data inspection unit that operates on the user terminal and checks the validity of the certification mark displayed on the display unit of the user terminal. Electronic watermarking means for inserting the unique information of the digital watermark into the original image data of the certification mark to generate certification mark image data, the mark data inspection means comprising: Personal information extracting means for extracting personal information of a business establishment; electronic watermark extracting means for extracting personal information of the certified business establishment from the certification mark image data presented by the designated establishment; and the designated business establishment Comparing the proprietary information of the designated establishment with the extracted proprietary information of the certified establishment to determine whether the designated establishment is a certified establishment. Certification mark management system which is characterized in that. 2. The certification mark adding mechanism includes a digital signature generating means for digitally signing the personal information of the certified business office with a digital signature private key to generate digital signature personal information, and the digital watermark inserting means. Digitally watermarks the digitally signed personal information generated by the digital signature generating means and inserts it into the original image data of the certification mark to generate certification mark image data. The mark data inspection means includes digital signature verification means. The digital watermark extracting means extracts the digitally signed personal information from the certification mark image data presented by the designated establishment, and the digital signature verifying means extracts the digitally signed personal information extracted by the digital watermark extracting means. Verifying the proprietary information with a public key corresponding to the secret key to generate verified proprietary information; The comparing means compares the personal information of the designated business fetched by the personal information fetching means with the verified personal information verified by the digital signature verifying means, and the designated business is certified. The certification mark management system according to claim 1, wherein it is determined whether or not the business is a business establishment. 3. The certification mark providing mechanism has a validity term setting means for setting a validity term of the certification mark, and the validity term information set by the validity term setting means is digitally signed by the digital signature generating means. Digital signature expiration date information is generated, the digital signature expiration date information is digitally watermarked by the digital watermark insertion means and inserted into the original image data of the certification mark. Includes expiration date checking means for checking whether the
The digital watermark extracting means extracts the digitally signed digital signature expiration date information from the authentication mark image data presented by the instructed establishment, and the digital signature verification means extracts the extracted digital signature expiration date information. Verifies and generates verified expiration date information, compares the information of the date on which the expiration date checking unit checks the expiration date of the certification mark with the verified expiration date information, and the certification mark is within the expiration date. The certification mark management system according to claim 2, wherein whether or not the certification mark management system determines whether or not the certification mark management system is in use is determined. 4. The mark data inspection means, wherein the digital signature verification means does not normally verify the digitally signed personal information, or the mark information inspection means, If it is determined that the certification mark is not a certified establishment, the certification mark granting mechanism has a fraud notification means for notifying that the certification mark displayed on the display means is a fraudulent mark. Item 2. The certification mark management system according to Item 2. 5. The certification mark providing mechanism includes revocation verification means for storing proprietary information of a business holding a certification mark that has been revoked after being granted, and wherein the mark data inspection means includes the proprietary information. Revocation verification requesting means for contacting the revocation verification means with the personal information of the designated business establishment determined to be a certified business establishment by the comparison means and requesting the revocation verification means to determine whether or not the certification mark of the designated business establishment has expired. The certification mark management system according to any one of claims 1 to 4, further comprising: 6. The certification mark granting mechanism holds a list of certified establishments, and transmits the list to the user terminal when notified from the revocation verification requesting means, and the revocation list is sent to the user terminal. The verification request means instructs the display means to display the received list.
Certification mark management system described in. 7. The certification mark applying mechanism has the mark data inspection means, and attaches and attaches the mark data inspection means when attaching the certification mark image data to a certification establishment. The certification mark management system according to any one of claims 1 to 6, wherein the mark data inspection means is obtained from certification mark image data presented by the designated office. 8. The personalized information of each business establishment is a URL of a homepage of each business establishment on the Internet, and the mark data inspection means is a designated business establishment displayed on a display means of a user terminal. The certification mark management system according to any one of claims 1 to 7, wherein the certification mark management system is configured to be activated on the user terminal when a certification mark on a homepage is clicked. 9. An accredited mark providing step of assigning image data of an accredited mark to an accredited establishment that is certified to satisfy predetermined conditions, wherein each of the establishments has different personal information, and a display means of a user terminal. And a mark data inspection step for confirming the validity of the certification mark displayed on the certification mark. A digital watermark insertion step of generating certification mark image data, wherein the mark data inspection step includes: a personal information extracting step of extracting personal information of the designated office designated by the user terminal; A digital watermark extracting step of extracting personalized information of the certified office from the certified mark image data presented by the designated establishment; Comparing the proprietary information of the designated establishment with the extracted proprietary information of the certified establishment to determine whether the designated establishment is a certified establishment. A certification mark management method characterized by having.