JP2003281333A - System, method and program for electronic signature, and recording medium having the program recorded thereon - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent misoperations and malicious signature operations by judging the correctness and wrongness of a signatory and the order of signature. <P>SOLUTION: At least one signature area is prepared in an electronic document, and signature authority attribute information and signature order attribute information are set to each signature area. When one of the signature areas is selected (S11 and S12), the signature authority attribute information set to the signature area is compared with signature authority information within an IC card of the signatory. When both pieces of information are judged to be coincident with each other (S13), the signature order attribute information set in the signature area is compared with a value obtained by adding 1 to the counter value of a signature order counter to discriminate whether the signatory has signature authority to the signature area (S14). When it is discriminated that the signatory has signature authority to the signature area, electronic signature processing is carried out to the electronic document and stamp data are displayed in the signature area (S15). <P>COPYRIGHT: (C)2004,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic signature system, an electronic signature method, an electronic signature program, and a recording medium recording the electronic signature program, and more particularly to an electronic document for which a signature area is set. The present invention relates to an electronic signature system for performing signature processing, an electronic signature method, an electronic signature program, and a recording medium recording the electronic signature program.

[0002]

2. Description of the Related Art An electronic signature is a technique that can be handled as if an electromagnetic medium composed of an electronic document or the like was created or approved by the person himself, as in the case of imprinting or signature on a paper medium. It can be used as an approval operation when digitizing internal workflows such as various approvals that were conventionally performed on paper media.

PDF (registered trademark of Adobe Systems Incorporated)
When a digital signature is applied to a document or the like, by setting a signature area in advance, a seal imprint image can be displayed when a digital signature is applied. Therefore, if a plurality of signature areas are set for the number of approvers (see FIG. 2). Reference), a workflow can be realized on a computer (PC) with an image similar to a paper medium.

[0004]

However, in the conventional digital signature system, even if a plurality of signature areas such as a person-in-charge signature area, a section manager signature area, and a department manager signature area are set by the workflow, these signature areas are Whether the signer who signs the signature or whether the signature order is correct must be judged by a human as in the case of the conventional paper medium.
Even if the section manager and department manager make a signature in the wrong signature area, it cannot be automatically checked,
There is a problem that an erroneous operation, and eventually a malicious signature operation can be performed.

The present invention has been made to solve such a problem, and is capable of preventing erroneous operations and malicious signature operations, an electronic signature method, an electronic signature program, and an electronic signature. The purpose is to obtain a recording medium recording a program.

[0006]

The present invention is an electronic signature system for performing an electronic signature process on a target electronic document, and shows that the electronic document has been subjected to an electronic signature process. Signature area creating means for creating one or more signature areas for displaying imprint data, signature authority setting means for setting signature authority attribute information indicating signature qualification for the signature area for each signature area, and the signature For each area, a signature order setting unit that sets signature order attribute information indicating a signature order for the signature area, and a counter value that is set in the signature area when electronic signature processing is performed on the signature area. Signature order counter means for updating the signature order of signature order attribute information;
When a signer signature authority input means for inputting signature authority information of a signer who signs the signature area and a signature processing request for any one of the signature areas are inputted,
The signature authority attribute information set in the signature area is compared with the signature authority information of the signer to determine whether or not the signature authority attribute information and the signature authority information of the signer match. When it is determined that the signature is signed, the signature rank attribute information set in the signature area is compared with the value obtained by adding 1 to the counter value of the signature rank counter means, and the signer signs the signature. Second determining means for determining whether or not the area has signature authority, and the second determining means determines that the signer has signature authority for the signature area, An electronic signature including electronic signature processing means for displaying the signature imprint data of the signer in the signature area according to the electronic signature processing operation of the signer and executing the electronic signature processing for the electronic document. It is a stem.

Further, the second judging means, when the signature rank attribute information set in the signature area and the value obtained by adding 1 to the counter value of the signature rank counter means match, the signature is signed. It is determined that the person has the signature authority for the signature area.

Further, the second judging means determines that the signer determines that the signature rank attribute information set in the signature area is larger than a value obtained by adding 1 to the counter value of the signature rank counter means. It is determined that the user has the authority to sign the signature area.

Further, the present invention is an electronic signature system for performing an electronic signature process on a target electronic document, wherein seal imprint data indicating that the electronic signature process has been performed is displayed on the electronic document. Signature area creating means for creating one or more signature areas, signature authority setting means for setting signature authority attribute information indicating signature qualification for the signature area, and signature area setting information for each signature area. Signature order setting means for setting signature order attribute information indicating a signature order for the signature area, and the signature order attribute information whose counter value is set in the signature area when an electronic signature process is performed on the signature area. Signature order counter means for updating the signature order and the signer's signature authority inputting means for inputting the signature authority information of the signer who signs the signature area. By comparing the signature authority information input by the signer signature authority input means with the signature authority attribute information specified in the signature area, the signature area in which the signer has the signature authority is identified. A signature area specifying unit for specifying, the preset signature order attribute information of the signature area specified by the signature area specifying unit, and a value obtained by adding 1 to the counter value of the signature order counter unit. In comparison, the determining unit determines whether the signer has the signing authority for the signature area, and the determining unit determines that the signer has the signing authority for the signature area. In this case, the signer's imprint data is displayed in the signature area in accordance with the signer's digital signature processing operation, and the electronic signature for the digitized document is displayed. An electronic signature system comprising an electronic signature processing unit to perform the signing process.

Further, when the signature order attribute information set in the signature area and the value obtained by adding 1 to the counter value of the signature order counter means match, the decision means determines that the signer is concerned. It is determined that the user has the authority to sign the signature area.

When the signature rank attribute information set in the signature area is larger than a value obtained by adding 1 to the counter value of the signature rank counter means, the judging means determines that the signer has the signature area. It is determined that the user has the signing authority for.

Further, the present invention is an electronic signature method for performing an electronic signature process on a target electronic document, wherein seal imprint data indicating that the electronic signature process has been performed is displayed on the electronic document. A signature area creating step for creating one or more signature areas for
A signature authority setting step for setting signature authority attribute information indicating a signature qualification for the signature area; a signature order setting step for setting signature order attribute information indicating a signature order for the signature area for each signature area; A signature rank counter step of updating the counter value to the signature rank of the signature rank attribute information set in the signature area when a digital signature process is performed on the area;
The signer signature authority input step in which the signing authority information of the signer who signs the signature area is input, and the signature processing request for any one of the signature areas is set in the signature area. It is determined by the first determination step of comparing the signature authority attribute information that exists and the signature authority information of the signer to determine whether they match, and the first determination step. In case,
Second, comparing the signature order attribute information set in the signature area with a value obtained by adding 1 to the counter value to determine whether the signer has the signing authority for the signature area. When the signer is determined to have the signing authority for the signature area by the determining step and the second determining step, the signature area is signed in accordance with the electronic signature processing operation of the signer. A digital signature processing step of displaying digital signature data of a person and performing a digital signature processing on the digitalized document.

Further, there is provided a digital signature method for performing a digital signature process on a target digitalized document, which is for displaying seal imprint data indicating that the digital signature process has been performed on the digitalized document. A signature area creating step for creating the above signature area, a signature authority setting step for setting signature authority attribute information indicating signature qualification for the signature area for each signature area, and a signature area for the signature area for each signature area A signature order setting step of setting signature order attribute information indicating a signature order, and a counter value to a signature order of the signature order attribute information set in the signature area when a digital signature process is performed in the signature area. The signature rank counter step of updating and the signer signature authority input step in which the signature authority information of the signer who signs the signature area is input. A signature area in which the signer has the signing authority by comparing the signature authority information input in the signer signing authority input step with the signature authority attribute information specified in the signature area. A signature area specifying step for specifying the signature area, the signature order attribute information set in advance for the signature area specified by the signature area specifying step, and 1 for the counter value.
Is compared with a value obtained by adding, and a determination step of determining whether or not the signer has the signature authority for the signature area, and the determination step determines that the signer has the signature authority for the signature area. In the case where it is determined that the electronic signature processing step is performed, the electronic signature processing step of displaying the seal image data of the signer in the signature area and executing the electronic signature processing on the electronic document according to the electronic signature processing operation of the signer It is a digital signature method including and.

A digital signature program for performing a digital signature process on a target digital document, which is 1 for displaying seal imprint data indicating that the digital signature process has been performed on the digital document. A signature area creating step for creating the above signature area, a signature authority setting step for setting signature authority attribute information indicating signature qualification for the signature area for each signature area, and a signature area for the signature area for each signature area A signature order setting step of setting signature order attribute information indicating a signature order, and a counter value to a signature order of the signature order attribute information set in the signature area when a digital signature process is performed in the signature area. The signature rank counter step to be updated, and the signer's signature authority entry in which the signature authority information of the signer who signs the signature area is input. A step, when the signature processing request is input to one of the signature area,
The signature authority attribute information set in the signature area is compared with the signature authority information of the signer to determine whether or not they match, and a first determination step and a first determination step are performed. If it is determined that the signature area has been signed, the signature order attribute information set in the signature area is compared with the value obtained by adding 1 to the counter value, and the signer has the signature authority for the signature area. A second determination step for determining whether or not the signer has the signature authority for the signature area in the second determination step. According to the processing operation, the imprint data of the signer is displayed in the signature area, and an electronic signature processing step of executing an electronic signature processing on the electronic document is executed by a computer. It is because the digital signature program.

A digital signature program for performing a digital signature process on a target digital document, which is 1 for displaying seal imprint data indicating that the digital signature process has been performed on the digital document. A signature area creating step for creating the above signature area, a signature authority setting step for setting signature authority attribute information indicating signature qualification for the signature area for each signature area, and a signature area for the signature area for each signature area A signature order setting step of setting signature order attribute information indicating a signature order, and a counter value to a signature order of the signature order attribute information set in the signature area when a digital signature process is performed in the signature area. The signature rank counter step to be updated, and the signer's signature authority entry in which the signature authority information of the signer who signs the signature area is input. By comparing the signature authority information input in the step with the signature authority attribute information specified in the signature area, the signature area in which the signer has the signature authority The signature area specifying step for specifying the signature area, the signature area attribute information set in advance in the signature area specified by the signature area specifying step, and a value obtained by adding 1 to the counter value, A determining step of determining whether or not the signer has the signing authority for the signature area; and, in the case where it is determined by the determining step that the signer has the signing authority for the signature area, In accordance with the signer's digital signature processing operation, the imprint data of the signer is displayed in the signature area, and the digitalized document is processed. A digital signature program for executing the electronic signature processing step of executing child signature processing on a computer.

Further, the present invention is a recording medium recording an electronic signature program for performing an electronic signature process on a target electronic document, wherein the electronic document is subjected to the electronic signature process. 1 for displaying the imprint data
A signature area creating step for creating the above signature area, a signature authority setting step for setting signature authority attribute information indicating signature qualification for the signature area for each signature area, and a signature area for the signature area for each signature area A signature order setting step of setting signature order attribute information indicating a signature order, and a counter value to a signature order of the signature order attribute information set in the signature area when a digital signature process is performed in the signature area. When a signature rank counter step for updating, a signer signature authority input step for inputting signature authority information of a signer who signs the signature area, and a signature processing request for any one of the signature areas are inputted. , Comparing the signature authority attribute information set in the signature area with the signature authority information of the signer, If it is determined in the first determination step that determines whether or not they match, the signature order attribute information set in the signature area and the counter value are set in the signature area. A second determination step of determining whether or not the signer has the signing authority for the signature area by comparing with the value obtained by adding 1 and the signer determines the If it is determined that the user has the signature authority for the signature area, according to the electronic signature processing operation of the signer,
A computer-readable recording medium recording an electronic signature program for causing a computer to execute an electronic signature processing step of displaying the seal impression data of the signer in the signature area and executing an electronic signature processing on the electronic document. Is.

Further, the electronic medium is a recording medium in which an electronic signature program for performing an electronic signature process on a target electronic document is recorded, and imprint data indicating that the electronic signature process has been performed on the electronic document. A signature area creating step of creating one or more signature areas for displaying, a signature authority setting step of setting signature authority attribute information indicating signature qualification for the signature area for each signature area, and a signature area setting step for each signature area. A signature order setting step of setting signature order attribute information indicating a signature order for the signature area, and a signature order attribute for which a counter value is set in the signature area when an electronic signature process is performed on the signature area. The signature rank counter step of updating the signature rank of the information and the signing authority information of the signer who signs the signature area are input. And the signer signing authority input step,
By comparing the signature authority information input in the signer's signature authority input step with the signature authority attribute information specified in the signature area, the signature area in which the signer has the signature authority is specified. The signature area specifying step compares the preset signature order attribute information of the signature area specified by the signature area specifying step with a value obtained by adding 1 to the counter value, and the signer A determination step of determining whether or not the signature area has the signature authority, and if the signer is determined to have the signature authority of the signature area by the determination step, In accordance with the electronic signature processing operation, the imprint data of the signer is displayed in the signature area, and the electronic signature processing for the electronic document is performed. A computer-readable recording medium recording a digital signature program for executing the electronic signature processing step of rows in the computer.

[0018]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiment 1. FIG. 1 shows the overall configuration of the electronic signature system of the present invention. In FIG. 1, reference numeral 1 is a document creation unit that creates an electronic document (structured document) for performing an electronic signature process. In the document created by the document creating unit 1, signature areas equal to or more than the number of signers are set. This will be described later. Reference numeral 2 denotes a document input unit for inputting the document from the outside without creating the document with this device. 3 is a document creation unit 1
Alternatively, it is an electronic signature processing unit that displays an imprint image in each signature area of the document obtained by the document input unit 2 and performs an electronic signature process by encrypting with a private key owned by each signer. Reference numeral 4 denotes a combining unit that combines the document obtained by the document creating unit 1 or the document input unit 2 and the electronic signature-processed document obtained by the electronic signature processing unit 3 into one file. Reference numeral 5 is an electronic signature document output unit for outputting the file obtained by the combining unit 4 to a predetermined communication network 20 such as the Internet or Intranet, and 6 is a display device for displaying various files and data. It is a display unit. Reference numeral 7 denotes an electronic signature document input unit for inputting a document externally digitally signed through the communication network 20 and an original document before the electronic signature processing of the document is performed. Reference numeral 8 denotes an electronic signature document. A decryption unit that decrypts the electronic signature-processed document input to the input unit 7 with the public key paired with the signer's private key, and 9 is the above-mentioned original input to the electronic signature document input unit 7. It is a verification unit that compares the document of No. 1 with the document decrypted by the decryption unit 8 to verify whether the signature is the original person and whether the signature has been tampered with. Reference numeral 10 denotes a signature order counter whose counter value is updated every time a signature is made in order to manage the signature order.

Further, in FIG. 1, 20 is a communication network such as the above-mentioned intranet or the Internet,
Reference numeral 21 is connected to the communication network 20, and the digital signature system 1
00 is a directory server that manages and controls 00. Two
Reference numeral 2 denotes a storage unit which is connected to the directory server 21 and stores a database of signature authority information, signature order, signature area identification number, and the like, which is configured by a disk device or the like. FIG. 9 shows an example of the database in the storage unit 22. As shown in FIG. 9, the database 2
Reference numeral 20 denotes a document identification number 221 for identifying each digitized document, a signature area identification number 222 for identifying each signature area in the digitized document, and a signer who can sign each signature area. Signature authority information 223 indicating the authority and signature order information 224 indicating the order in which each signature area can be signed are stored. Each alphabet in the signature authority information 223 is, for example,
T: person in charge, C: section chief, K: section manager, KD: deputy section manager,
B: department manager, BD: representative of department manager, may be stored in the alphabet in this way, or may be stored in a code consisting of a predetermined number. The same applies to other information.

The digital signature system includes one or more digital signature devices 100 connected to the communication network 20, and a storage unit 22.
Each of the digital signature devices 100 has the functions indicated by reference numerals 1 to 10, and these functions can be configured by a computer such as a personal computer. In addition to the display unit 6 of, the input device such as a keyboard and a mouse (not shown)
It is also assumed that a reader / writer device (not shown) for reading the IC card is connected as necessary.

The operation will be described. First, as shown in the flow chart of FIG. 7, the document creating section 1 creates an electronic document for performing an electronic signature process (step S1). The document may be input from the outside by the document input unit 2. Next, for the digitized document, as shown in FIG. 2, one or more signature areas 30, which are used for displaying the imprint data in the approval process of the workflow process,
31 is set (step S2). In the example of FIG. 2, two signature areas, a section manager signature area 30 and a department manager signature area 31, are set. Next, each signature area 3
Signature authority attribute information indicating signable signers is set for each of 0 and 31 (step S3). Explaining this signature authority attribute information, for the section manager signature area 30,
For example, if the section chief and the section chief deputy can sign, the signature authority attribute information in this case is each preset code indicating the section chief and the section chief deputy. In the example of FIG.
Two codes (for example, “K” and “KD”) indicating the section manager and the section manager proxy are set in the section manager signature area 30, and one code indicating the section manager is set in the section manager signature area 31 ( For example, assume that "B") is set. Next, for each of the signature areas 30 and 31, signature order attribute information indicating a signature order that can be signed in the workflow is set (step S4). In the example of FIG. 2, it is assumed that the section manager signature area 30 is first signed and the section manager signature area 31 is secondly signed, and vice versa. It is assumed that "1" indicating the first is set as the signature sequential attribute information, and "2" indicating the second is set for the department chief signature area 31.

As shown in FIG. 3, a private key and a public key certificate are issued to the signer from a certificate authority which is a predetermined institution, and the public key certificate has attribute information (subject or extension) as attribute information. In addition, the signing authority information of the signer is stored. The signing authority information is a preset predetermined code indicating that the signer is a section manager if the signer is a section manager, and is set in advance indicating a section manager if the signer is a section manager. It is a predetermined code.

Further, as shown in FIG. 4, the private key and the public key certificate are stored in an IC card having a tamper resistant function together with the imprint data to be displayed on the electronic document to be signed at the time of electronic signature, and the signature is stored. Distribute to people. As a result, the signature authority information to be confirmed at the time of electronic signature, the private key for signature, and the seal imprint data displayed for identifying the signer on the electronic document to be signed can be identified and used as only one pair. The tamper resistant function is a function for preventing unauthorized internal analysis and alteration.

Next, the electronic signature process is performed on the digitized document in which the signature area created as described above is set. FIG. 8 shows a processing flow for digital signature. First, the signer inserts an IC card into a reader / writer (not shown) connected to the electronic signature device 100. As a result, the signing authority information of the signer, which is the attribute information of the certificate stored in the IC card, is read. Next, the signer selects the signature area to be digitally signed by a predetermined operation such as moving the mouse pointer to the signature area to be signed and clicking, and displays the signature area (step S11). An operation of pressing an electronic signature button (not shown) displayed on the section 6 is performed (step S12). As a result, the signature authority information set in the signature area is compared with the signature authority information of the certificate stored in the IC card of the signer (step 13), and if they do not match, an error message is displayed. Then (step S17), the process ends. If there is a match,
The signature order set in the signature area and the value obtained by adding 1 to the counter value of the signature order counter 10 are compared (step S14), and if they do not match, an error message is displayed (step S17), and the processing is performed. To finish. If they match, a digital signature process is performed using the private key in the IC card,
The imprint data in the IC card is displayed in the signature area (step S15). Further, the counter value of the signature rank counter 10 is rewritten to the signature rank set in the signature area (step S16), and the process is ended.

Thus, in the present embodiment, the signature authority attribute and the signature rank attribute are set in advance in the signature area as in the processing flow of FIG. 7, and the processing flow of FIG. 8 is executed. For example, when an attempt is made to perform a signature operation with the IC card of the sales department manager in the signature area 31 in which only the attributes of the sales department manager are set as the signature authority information as shown in FIG. 5, an error message is displayed and processed. Since the process is terminated, it is possible to prevent an erroneous operation and an unauthorized approval process.

Further, as shown in FIG. 6, even when the signature authority information of the signature area 31 and the signature authority attribute of the certificate stored in the IC card of the signer match, the signature of the signature area 30 having a lower signature order If is not executed, an error message is displayed and the process is terminated, so that workflow control of a predetermined approval process can be realized.

Further, in the workflow processing, it is also necessary to be able to dynamically change the signature authority attribute information and the signature rank attribute information set in the signature area according to changes in the business processing. In this case, an identification number may be given to the signature area, and the directory server 21 may centrally manage the signature authority information and the signature order corresponding to the signature area together with the signature area identification number. This enables the workflow administrator to manage the directory server 2
1, the signature authority attribute information for the signature area can be changed and managed, and the signature authority attribute information and the signature rank attribute information of the signature area are inquired to the directory server 21 via the communication network 20 at the time of signature, so that the latest Workflow control based on the signature authority attribute information can be realized.

As described above, in the present embodiment,
By adding the signature authority and signature order attribute information to the signature area, it is possible to automatically identify when a person who does not have the signature authority attempts to sign or when a signature is out of order. And As a result, a workflow function is realized, and it is possible to prevent erroneous operations and malicious approval operations.

Embodiment 2. In the above-described first embodiment, an example is shown in which the signer selects the signature area in step S11 of the processing flow of FIG. 8. However, in the present embodiment, the electronic signature system 10 is used.
The digital signature processing unit 3 of 0 refers to the signature authority information, which is the attribute information in the public key certificate stored in the IC card of the signer, and automatically specifies the signature area that can be signed. So that other signature areas cannot be accessed. Since other configurations and operations are the same as those in the first embodiment, the description thereof will be omitted here.

In the present embodiment, since the signature area is automatically designated by referring to the signature authority information of the public key certificate in the IC card, further erroneous operation and malicious approval operation can be performed. It can be prevented.

Embodiment 3. In the first and second embodiments described above, in step S14 of the processing flow of FIG. 8, the signature rank set in the signature area is compared with the value obtained by adding 1 to the counter value of the signature rank counter 10, An example of determining whether or not they match is shown. In this case, for example, after the section chief has signed, if the section manager skips the signature and the section manager attempts to sign, it is rejected, which is inconvenient. In the present embodiment,
In step S14 of FIG. 8, the signature rank set in the signature area is compared with the value obtained by adding 1 to the counter value of the signature rank counter 10, and the signature rank set in the signature area is larger. If so, the process proceeds to step S15. Since other configurations and operations are the same as those in the first embodiment, the description thereof will be omitted here.

In the present embodiment, even when the signature in the signature area having a low signature order is not executed,
Since the signature can be made, the convenience is improved and, like the first and second embodiments described above, it is possible to prevent an erroneous operation or a malicious approval operation.

It should be noted that, of course, digital information for realizing the above functions in each electronic signature device 100 and the directory server 21 and executing each process, that is, program code and data, is, needless to say, usually omitted in each computer It is configured to be stored inside the device or in an external storage device and read and executed at any time. However, the present invention can be implemented as long as the functions for realizing the above-described processing can be formed in each computer device. Therefore, for example, a portable recording medium such as a CD-ROM or FD that can be separated from each computer device. Alternatively, it may be recorded in a program server or the like connected to a network, read at the time of use, recorded in an internal storage device of the computer device or used for execution at any time.

[0034]

The present invention provides an electronic signature system, an electronic signature method, an electronic signature program for performing an electronic signature process on a target electronic document, and a recording medium recording the electronic signature system. One or more signature areas for displaying the imprint data indicating that the electronic signature processing has been performed are created in the document, and signature authority attribute information indicating the signature qualification for the signature area is set for each signature area. , Signature order attribute information indicating a signature order for the signature area is set for each signature area, and a counter value is set in the signature area when a digital signature process is performed on the signature area. The signature authority information of the signer who signs the signature area is updated, and the signature processing information for any one of the signature areas is updated. Is entered, the signature authority attribute information set in the signature area is compared with the signature authority information of the signer to determine whether they match, and it is determined that they match. In this case, the signature rank attribute information set in the signature area is compared with the value obtained by adding 1 to the counter value to determine whether the signer has the signing authority for the signature area. If it is determined that the signer has the authority to sign the signature area, the signer's imprint data is displayed in the signature area in accordance with the electronic signature processing operation of the signer, Since the electronic signature process is performed on the digitized document, it is possible to prevent erroneous operations and malicious signature operations by determining whether the signer or the signature order is correct.

Further, there are provided an electronic signature system, an electronic signature method, an electronic signature program for performing an electronic signature process on a target electronic document, and a recording medium recording the electronic signature system. One or more signature areas for displaying the imprint data indicating that the signature processing has been performed are created, and signature authority attribute information indicating a signature qualification for the signature area is set for each signature area. For each of the signature areas, signature order attribute information indicating the signature order is set, and when a digital signature process is performed on the signature area, a counter value is signed by the signature order attribute information set in the signature area. The signature authority information of the signer who updates the order and signs the signature area is input, and based on the input signature authority information,
The signature area in which the signer has the signing authority is searched for and designated, and the preset signature order attribute information of the designated signature area and a value obtained by adding 1 to the counter value. And whether the signer has the signing authority for the signature area, and if the signer is determined to have the signing authority for the signature area, the signature The signer's imprint data is displayed in the signature area and the electronic signature process for the digitized document is executed in accordance with the person's electronic signature processing operation. As a result, it is possible to prevent erroneous operations and malicious signature operations.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of an electronic signature system of the present invention.

FIG. 2 is an explanatory diagram showing an example of a signature area set in a digitized document to be signed in the digital signature system of the present invention.

FIG. 3 is an explanatory diagram schematically showing a private key and a public key certificate issued to a signer.

FIG. 4 is an explanatory diagram schematically showing an IC card in which a private key issued to a signer, a public key certificate, and imprint data are registered.

FIG. 5 is an explanatory diagram showing an erroneous operation in which an error message is displayed in the digital signature system of the present invention.

FIG. 6 is an explanatory diagram showing an erroneous operation in which an error message is displayed in the digital signature system of the present invention.

FIG. 7 is a flowchart showing the operation of the document creation unit provided in the digital signature system of the present invention.

FIG. 8 is a flowchart showing the operation of the electronic signature processing section 3 provided in the electronic signature system of the present invention.

FIG. 9 is an explanatory diagram showing an example of a database in a storage unit 22 provided in a directory server 21 connected to the electronic signature system of the present invention.

[Explanation of symbols]

1 document creation unit, 2 document input unit, 3 electronic signature processing unit, 4 combining unit, 5 electronic signature document output unit, 6 display unit, 7 electronic signature document input unit, 8 decryption unit, 9 verification unit, 10 signature order counter , 20 communication network, 21 directory server, 22 storage unit, 30, 31 signature area, 100 electronic signature device, 220 database,
221, document identification number information, 222 signature area identification number information, 223 signature authority information, 224 signature order information.

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) H04L 9/00 675Z

Claims (12)

[Claims] 1. An electronic signature system for performing an electronic signature process on a target electronic document, comprising: 1 for displaying seal imprint data indicating that the electronic signature process has been performed on the electronic document. Signature area creating means for creating the above signature area, signature authority setting means for setting signature authority attribute information indicating signature qualification for the signature area for each signature area, and signature area for the signature area for each signature area Signature order setting means for setting signature order attribute information indicating a signature order, and, when an electronic signature process is performed on the signature area, a counter value is set to the signature order of the signature order attribute information set in the signature area. Signature order counter means for updating; signer signature authority input means for inputting signature authority information of a signer who signs the signature area; and the signature When a signature processing request for any one of the areas is input, the signature authority attribute information set in the signature area is compared with the signature authority information of the signer to determine whether they match. When it is determined by the first determining means and the first determining means that they match, the signature order attribute information set in the signature area and the counter value of the signature order counter means A second determination unit that compares the value obtained by adding 1 to determine whether the signer has the signing authority for the signature area, and the second determination unit determines that the signer is When it is determined that the user has the signature authority for the signature area, the signer's imprint data is displayed in the signature area according to the electronic signature processing operation of the signer, and the digitalized document is displayed. Electronic signature system, characterized in that an electronic signature processing means for performing digital signature processing to. 2. The second determination means includes signature rank attribute information set in the signature area,
2. The electronic device according to claim 1, wherein when the value obtained by adding 1 to the counter value of the signature rank counter means matches, it is determined that the signer has the authority to sign the signature area. Signature system. 3. The signature level attribute information set in the signature area is
2. The electronic signature system according to claim 1, wherein when the counter value of the signature rank counter means is larger than a value obtained by adding 1, the signer is determined to have the signature authority for the signature area. . 4. An electronic signature system for performing an electronic signature process on a target electronic document, comprising: 1 for displaying imprint data indicating that the electronic signature process has been performed on the electronic document. Signature area creating means for creating the above signature area, signature authority setting means for setting signature authority attribute information indicating signature qualification for the signature area for each signature area, and signature area for the signature area for each signature area Signature order setting means for setting signature order attribute information indicating a signature order, and, when an electronic signature process is performed on the signature area, a counter value is set to the signature order of the signature order attribute information set in the signature area. Signature order counter means for updating; signer signature authority input means for inputting signature authority information of a signer who signs the signature area; and the signature A signature area for identifying a signature area in which the signer has the signature authority by comparing the signature authority information input by the signature authority input means with the signature authority attribute information specified in the signature area. A comparing unit compares the preset signature order attribute information of the signature area specified by the signature area specifying unit with a value obtained by adding 1 to the counter value of the signature order counter unit, When the signer determines that the signer has the signing authority for the signature area, and when the signer determines that the signer has the signing authority for the signature area, In accordance with the signer's digital signature processing operation, the imprint data of the signer is displayed in the signature area, and the electronic signature process for the digitized document is performed. Electronic signature system, characterized in that an electronic signature processing means for line. 5. The determination means includes signature rank attribute information set in the signature area,
5. The electronic device according to claim 4, wherein when the value obtained by adding 1 to the counter value of the signature rank counter means matches, it is determined that the signer has the signature authority for the signature area. Signature system. 6. The determination means is characterized in that the signature order attribute information set in the signature area is
5. The electronic signature system according to claim 4, wherein when it is larger than a value obtained by adding 1 to the counter value of the signature rank counter means, it is determined that the signer has the authority to sign the signature area. . 7. A digital signature method for performing a digital signature process on a target digital document, comprising: 1 for displaying seal imprint data indicating that the digital signature process has been performed on the digital document. A signature area creating step for creating the above signature area, a signature authority setting step for setting signature authority attribute information indicating signature qualification for the signature area for each signature area, and a signature area for the signature area for each signature area A signature order setting step of setting signature order attribute information indicating a signature order, and a counter value to a signature order of the signature order attribute information set in the signature area when a digital signature process is performed on the signature area. The signature rank counter step of updating, and the signer signature authority input step in which the signature authority information of the signer who signs the signature area is entered. When a signature processing request for any one of the signature areas is input, the signature authority attribute information set in the signature area is compared with the signature authority information of the signer, and they match each other. If it is determined in the first determination step that determines whether or not there is a match, the signature order attribute information set in the signature area and the counter value are set to 1 A second determination step of determining whether or not the signer has the signing authority for the signature area by comparing the added value, and the signer determines the signature area by the second determination step. When it is determined that the signer has the signing authority for, the signer's imprint data is displayed in the signature area according to the signer's electronic signature processing operation,
An electronic signature processing step of executing an electronic signature processing on the electronic document. 8. A digital signature method for performing a digital signature process on a target digital document, comprising: 1 for displaying imprint data indicating that the digital signature process has been performed on the digital document. A signature area creating step for creating the above signature area, a signature authority setting step for setting signature authority attribute information indicating signature qualification for the signature area for each signature area, and a signature area for the signature area for each signature area A signature order setting step of setting signature order attribute information indicating a signature order, and a counter value to a signature order of the signature order attribute information set in the signature area when a digital signature process is performed on the signature area. The signature rank counter step of updating, and the signer signature authority input step in which the signature authority information of the signer who signs the signature area is entered. By comparing the signature authority information input in the signer signature authority input step with the signature authority attribute information specified in the signature area, the signature area in which the signer has the signature authority is identified. A signature area specifying step for specifying, and the signature order attribute information set in advance for the signature area specified by the signature area specifying step,
A judgment step of judging whether or not the signer has a signing authority for the signature area by comparing with a value obtained by adding 1 to the counter value; If it is determined that the signer has the signing authority to the signer, the signer's imprint data is displayed in the signature area and the electronic signature process is performed on the digitized document in accordance with the signer's digital signature processing operation. And a digital signature processing step. 9. A digital signature program for performing a digital signature process on a target digital document, comprising: 1 for displaying seal imprint data indicating that the digital signature process has been performed on the digital document. A signature area creating step for creating the above signature area, a signature authority setting step for setting signature authority attribute information indicating signature qualification for the signature area for each signature area, and a signature area for the signature area for each signature area A signature order setting step of setting signature order attribute information indicating a signature order, and a counter value to a signature order of the signature order attribute information set in the signature area when a digital signature process is performed on the signature area. Signature order counter step for updating, and signer signature authority input in which signature authority information of the signer who signs the signature area is entered When a signature processing request for one of the signature areas is input, the signature authority attribute information set in the signature area and the signature authority information of the signer are compared and found to match. If it is determined in the first determination step that it is determined that they match, the signature order attribute information set in the signature area and the counter value are set to 1 And a value obtained by adding the sign to the signature area, the second judgment step of judging whether or not the signer has the signing authority for the signature area, and the signer makes the signature by the second judgment step. When it is determined that the signer has the authority to sign the area, the signer's imprint data is displayed in the signature area according to the electronic signature processing operation of the signer,
An electronic signature program for causing a computer to execute an electronic signature processing step of executing an electronic signature processing on the electronic document. 10. An electronic signature program for performing an electronic signature process on a target electronic document, comprising: 1 for displaying seal imprint data indicating that the electronic signature process has been performed on the electronic document. A signature area creating step for creating the above signature area, a signature authority setting step for setting signature authority attribute information indicating signature qualification for the signature area for each signature area, and a signature area for the signature area for each signature area A signature order setting step of setting signature order attribute information indicating a signature order, and a counter value to a signature order of the signature order attribute information set in the signature area when a digital signature process is performed on the signature area. The signature order counter step of updating, and the signer signature authority entry in which the signature authority information of the signer who signs the signature area is input. A signature area in which the signer has the signing authority by comparing the signing authority information input in the signer's signing authority input step with the signing authority attribute information specified in the signature area. A signature area specifying step for specifying, and the signature order attribute information set in advance for the signature area specified by the signature area specifying step,
A judgment step of judging whether or not the signer has a signing authority for the signature area by comparing with a value obtained by adding 1 to the counter value; If it is determined that the signer has the signing authority to the signer, the signer's imprint data is displayed in the signature area and the electronic signature process is performed on the digitized document in accordance with the signer's digital signature processing operation. An electronic signature program for causing a computer to execute the electronic signature processing step. 11. A recording medium in which an electronic signature program for performing an electronic signature process on a target electronic document is recorded, wherein imprint data indicating that the electronic signature process has been performed on the electronic document. A signature area creating step of creating one or more signature areas for displaying; a signature authority setting step of setting signature authority attribute information indicating signature qualification for the signature area for each signature area; A signature rank setting step for setting signature rank attribute information indicating a signature rank for the signature area, and a signature rank attribute for which a counter value is set in the signature area when a digital signature process is performed on the signature area. A signature rank counter step of updating the signature rank of the information and the signing authority information of the signer who signs the signature area are input. Signer signature authority input step, and when a signature processing request for any one of the signature areas is inputted, the signature authority attribute information set in the signature area is compared with the signature authority information of the signer. And a first determination step of determining whether or not they match, and signature order attribute information set in the signature area when it is determined that they match in the first determination step. A second determination step of determining whether or not the signer has the signing authority for the signature area by comparing with a value obtained by adding 1 to the counter value; If it is determined that the signer has the authority to sign the signature area, the signer's imprint data is displayed in the signature area according to the electronic signature processing operation of the signer. Rutotomoni,
A computer-readable recording medium recording an electronic signature program for causing a computer to execute an electronic signature processing step of executing an electronic signature processing on the electronic document. 12. A recording medium in which an electronic signature program for performing an electronic signature process on a target electronic document is recorded, wherein imprint data indicating that the electronic signature process has been performed on the electronic document. A signature area creating step of creating one or more signature areas for displaying; a signature authority setting step of setting signature authority attribute information indicating signature qualification for the signature area for each signature area; A signature rank setting step for setting signature rank attribute information indicating a signature rank for the signature area, and a signature rank attribute for which a counter value is set in the signature area when a digital signature process is performed on the signature area. A signature rank counter step of updating the signature rank of the information and the signing authority information of the signer who signs the signature area are input. The signer has the signing authority by comparing the signing authority information input in the signer signing authority input step with the signing authority attribute information specified in the signature area. A signature area specifying step for specifying a signature area, and the preset signature order attribute information of the signature area specified by the signature area specifying step,
A judgment step of judging whether or not the signer has a signing authority for the signature area by comparing with a value obtained by adding 1 to the counter value; If it is determined that the signer has the signing authority to the signer, the signer's imprint data is displayed in the signature area and the electronic signature process is performed on the digitized document in accordance with the signer's digital signature processing operation. And a computer-readable recording medium recording an electronic signature program for causing a computer to execute the electronic signature processing step.