JP2004287704A - Server device and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a device for authenticating the authenticity of electronic information, and for authenticating an access action from the outside to the electronic information. <P>SOLUTION: This electronic authentication system for authenticating specific information for specifying predetermined file information and access condition information showing the condition of access to the predetermined file information by using electronic information is provided with an output part 11 for outputting the specific information and the access condition information to the electronic authentication system in order to authenticate the contents and the access date and a storage part 20 for inputting electronic authentication information showing the authenticated electronic authentication from the electronic authentication system, and for storing the inputted electronic authentication information. The output part 11 outputs the electronic authentication information stored in the storage part 20 in response to a request from the outside. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a server device. In particular, the present invention relates to a technique for handling a certificate notarized by an electronic notarization system.
[0002]
[Prior art]
With the advancement of advanced information technology in society, the evidential ability (proof power) of the electronic information being handled has become a problem. For example, in order to improve the temporal evidentiality of electronic information, United States Technology Technologies Inc. Provides an electronic notary service called Digital Notary Service. This service receives a feature amount (hash value) of electronic information possessed by a customer from a customer, and generates and returns an electronic timestamp (electronic certification information) having temporal evidence ability based on the hash value. It is a service called. The electronic time stamp is not only easy to detect even if it has been tampered with, but also characterized by the fact that Surrey itself cannot falsify the electronic time stamp. The timely evidential ability of electronic information that has obtained a stamp has been improved. In the United States, it is also related to the fact that a patent is pre-inventive, and as a method of proving that electronic information existed at a certain point in time, the certifying power of an electronic time stamp has been recognized in a trial (Patent Document 1).
[0003]
In the future, with the advance of computerization, the situation that documents that had to be legally required to be preserved in the past had to be preserved in paper form has been improved, and it is allowed to preserve electronic documents as electronic media In the direction. For this reason, it is expected that electronic document management systems will become more and more popular in the future. In the electronic document management system, it is required to manage “electronic certification information” including the electronic time stamp and the electronic signature as described above together with the electronic document (see Patent Document 1).
[0004]
Based on the above premise, Patent Document 1 describes the following means for the purpose of providing an electronic document management system capable of acquiring electronic certification information and managing it together with an electronic document. ing. An electronic document management system having an electronic document management device and at least one terminal is provided. The system, in response to a request from a terminal, calculates a feature amount from content and attribute information of a document managed by an electronic document management device, acquires electronic certification information using the feature amount, The certification information is managed together with the document as a part of the attribute information. When the terminal requests updating of the contents of the document, the version of the contents is changed and the updated contents are stored. Further, when verification of the electronic certification information is requested, a feature amount is calculated from the content and the attribute information used at the time of acquiring the electronic certification information, and the verification is performed (see Patent Document 1).
[0005]
[Patent Document 1]
JP 2001-209714 A (Prior Art, Abstract)
[0006]
[Problems to be solved by the invention]
Here, for example, in a trial, there may be a dispute between the parties as to whether certain information has been viewed or not, that is, whether the information has been known. Usually, if the information is written on paper, it can be proved that the other party has known by sending a content proof mail with a delivery certificate to the other party. When the above is replaced with an electronic information document, if the electronic information document is stored on a server or the like and the electronic information document is viewed from the server by a contract or the like, the party really does not There is a problem that it is not known whether the user has viewed the information document. Even if the electronic certification information is managed as a part of the attribute information together with the electronic information document using the technology described in Patent Document 1, it cannot be determined whether or not the party has viewed the electronic information, and of course, it cannot be certified. .
[0007]
Also, the electronic information document that the other party claims to have seen may have been tampered with for the sake of the other party's convenience, but there is a problem that the other party cannot prove that the tampering has been done.
[0008]
That is, it is impossible to prove the action of the other party on the electronic information document. Therefore, it is impossible to prove whether the other party knew (whether it was malicious) or did not know (whether it was good intention).
[0009]
Not only in a dispute in a trial, for example, when necessary information is collected on a server, and when the parties proceed with a joint action (for example, a work project) while checking the server with each other, the other party is required. Can not confirm whether or not they have obtained the necessary information.
[0010]
Further, even if a notary is requested by an electronic notary system, it is not easy for the parties to request the above proof one by one. Moreover, management of notarized digital certificates is not easy.
[0011]
An object of the present invention is to provide a device that can certify the authenticity of electronic information and certify an external access to the electronic information.
[0012]
Another object of the present invention is to facilitate the acquisition and management of the above certification.
[0013]
[Means for Solving the Problems]
The server device according to the present invention provides an electronic notarization system for notarizing, using an electronic certificate, specific information for specifying predetermined file information and access status information indicating an access status to the predetermined file information. An output unit that outputs the specific information and the access status information to the electronic notarization system, in order to obtain a notary of the information and the access date and time for the information and the access status information,
For the specific information and the access status information output by the output unit, the electronic notarization system inputs electronic certification information indicating the notarized electronic certification, and stores the inputted electronic certification information. Department and
With
The output unit may further output the electronic certification information stored in the storage unit in response to an external request.
[0014]
The server device further includes:
An input unit for inputting the predetermined file information and access request information indicating an access request to the predetermined file information,
A generating unit that generates the specific information output by the output unit based on the predetermined file information input by the input unit;
When the access to the predetermined file information occurs, as the information corresponding to the time of the access and the status of the access based on the access request indicated in the access request information input by the input unit, A status information creating unit that creates the access status information output by the output unit;
With
The input unit may further input the electronic certification information to be stored in the storage unit from the electronic notary system.
[0015]
The storage unit stores at least one electronic certification information that has been notarized each time the access occurs.
The server device further includes an identification information providing unit that provides identification information for identifying the predetermined file information input by the input unit,
The storage unit stores an electronic certification information table in which the identification information given by the identification information giving unit is associated with each electronic certification information of the at least one electronic certification information,
The server device further includes an electronic certification information search unit that searches the electronic certification information table for the corresponding at least one electronic certification information based on the identification information given by the identification information giving unit,
The output unit outputs at least one electronic certification information retrieved by the electronic certification information retrieval unit.
[0016]
The input unit inputs bibliographic information regarding the predetermined file information,
The storage unit further stores bibliographic information input by the input unit and identification information given by the identification information giving unit in association with each other,
The server device includes an identification information search unit that searches for the identification information stored by the storage unit based on the bibliographic information,
The electronic certification information search unit searches the electronic certification information table for the corresponding at least one electronic certification information based on the identification information retrieved by the identification information retrieval unit.
[0017]
The storage unit further stores the specific information generated by the generation unit and the identification information provided by the identification information providing unit in association with each other,
The server device includes an identification information search unit that searches for the identification information stored by the storage unit based on the specific information,
The electronic certification information search unit searches the electronic certification information table for the corresponding at least one electronic certification information based on the identification information retrieved by the identification information retrieval unit.
[0018]
A server unit according to the present invention includes: a management unit that manages electronic certification information that has notarized an access record of the access every time an access to predetermined file information occurs;
An output unit that outputs the electronic certification information managed by the management unit;
It is characterized by having.
[0019]
A program according to the present invention provides an electronic notarization system that performs notarization using an electronic certificate with respect to identification information for identifying predetermined file information and access status information indicating an access status to the predetermined file information. An output process of outputting the specific information and the access status information to the electronic notarization system in order to obtain a notarization of the content of the access status information and the date and time when the access occurred;
For the specific information and the access status information output by the output processing, from the electronic notarization system, input processing of inputting electronic certification information indicating a notarized electronic certification when the access occurs.
A storage process of storing the electronic certification information input by the input process in a storage device,
An output process of outputting the electronic certification information stored in the storage device by the storage process in response to a request from outside;
Is a program for causing a computer to execute.
[0020]
A program according to the present invention includes a file information input process for inputting predetermined file information;
A generation process of generating specific information based on the predetermined file information input by the input process;
When access to the predetermined file information has occurred, status information creation processing for creating access status information as information that associates the access status with the time at which the access occurred,
When the access occurs, the identification information generated by the generation processing and the access status information generated by the status information generation processing are notified by an electronic notarization system using an electronic certificate. An output process of outputting the specific information and the access status information to the electronic notarization system, in order to seek notarization of the content and the date and time when the access has occurred with respect to the access status information,
For the specific information and the access status information output by the output processing, from the electronic notarization system, electronic certification information input processing for inputting electronic certification information indicating the notarized electronic certification,
Storage processing for storing the electronic certification information input in the electronic certification information input processing in a storage device;
An output process of outputting the electronic certification information stored in the storage device by the storage process;
Is a program for causing a computer to execute.
[0021]
BEST MODE FOR CARRYING OUT THE INVENTION
Embodiment 1 FIG.
FIG. 1 is a diagram showing a system configuration according to the first embodiment.
In FIG. 1, a server 100 is connected to clients 200 and 300 and an electronic notarization system 400 via a network 500. Although two clients 200 and 300 are shown in FIG. 1, the number of clients connected to the network 500 may be one, three or more. Hereinafter, description will be made using one client (the client 200 or the client 300 as an example). Other clients also have the same functions and can exchange with the server 100. This is the same in other embodiments.
[0022]
FIG. 2 is a diagram illustrating a configuration of the server according to the first embodiment.
2, a server 100 (an example of a server device) includes a communication unit 10, a storage unit 20, a hash calculation unit 30, and a status information creation unit 40. The communication unit 10 has an output unit 11, an input unit 12, and a notarization I / F (interface) 13. The server 100 is connected to an external storage device 150. In FIG. 2, the storage device 150 is located outside the server 100, but may be located inside the server 100.
[0023]
FIG. 3 is a diagram illustrating a configuration of the client according to the first embodiment.
3, the clients 200 and 300 each include a communication unit 210, a document data input unit 220, and a storage unit 240. The communication unit 210 has an output unit 211 and an input unit 212.
[0024]
First, in the client 200 or the client 300, the document data input unit 220 inputs document data from the user as an example of predetermined file information. For example, document data may be input from a medium such as an FD (Flexible Disk) using FDD (Flexible Disk drive). Document data may be input from other recording media such as an optical disc, a CD (compact disc), an MD (mini disc), and a DVD (Digital Versatile Disk). Alternatively, document data may be input from a keyboard or a mouse. In such a case, an FDD, an optical disk device, a CDD (compact disk drive), an MD device, a DVD device, a keyboard, or a mouse are examples of the document data input unit 220. Alternatively, document data may be input from an external network such as the Internet via the communication unit 210.
[0025]
The client 200 or the client 300 accesses the server 100 to register the document data input by the document data input unit 220. In other words, the output unit 211 outputs access request information indicating an access request to the server 100. For example, if the access request is an access for registration, the registration request and the identification information of the client 200 or the client 300 are output as access request information. The identification information of the client 200 or the client 300 may be the name of the accessing user. Alternatively, the client 200 or the machine name that can identify the client 300 used by the user may be used.
If the access request is an access for browsing the already registered document data, the browsing request and the identification information of the client 200 or the client 300 are output as the access request information.
Alternatively, if the access request is an access for retrieving already registered document data, the retrieval request and the identification information of the client 200 or the client 300 are output as access request information.
[0026]
Then, the output unit 211 outputs the document data input by the document data input unit 220 to the server 100 for registration.
[0027]
On the server 100 side, the input unit 12 inputs document data from the client 200 or the client 300 as an example of predetermined file information. Further, the input unit 12 inputs access request information indicating an access request for the predetermined file information.
[0028]
As an example of the generation unit, the hash calculation unit 30 generates a hash value (an example of specific information) output by the output unit 11 based on the document data input by the input unit 12. The hash value is calculated based on a hash function. The hash value calculated based on the hash function is a value uniquely determined for one piece of file information. Then, if the file information is the same, the same hash value is calculated, but the corresponding file information cannot be decrypted from the hash value.
[0029]
When an access to the document data occurs, the status information creating unit 40 determines the access status based on the access request indicated by the access request information input by the input unit 12 and the time at which the access occurred. As the associated information, status information (an example of access status information) output by the output unit 11 is created. The access status is, for example, who performed what. In other words, for example, in the case of an access for registration as an access request, the situation is such that “the client 200 or the client 300 has registered.” Alternatively, a situation occurs in which “the user has registered” using the client 200 or the client 300.
[0030]
FIG. 4 is a diagram illustrating an example of the status information.
In FIG. 4, the time when the access occurred, the user name, and the action are described as an example of the situation information. The time when the access occurred is described as “February 12, 2003”, the user name corresponding to “User A”, and “registration” as the action corresponding to what has been done.
[0031]
The output unit 11 sends the hash value, which is an example of the specific information for specifying the document data, and the access status information indicating the access status to the document data to the electronic notarization system 400 for notarizing using the electronic certificate. The hash value and the access status information are output to the electronic notarization system 400 in order to obtain the notarization of the value, the contents of the access status information, and the access date and time.
[0032]
The input unit 12 further inputs the electronic certification information to be stored in the storage unit 20 from the electronic notary system 400.
[0033]
The storage unit 20 receives, via the input unit 12, electronic certificate information indicating the notarized electronic certificate from the electronic notarization system 400 with respect to the hash value and the access status information output by the output unit 11. When the user inputs and receives the electronic certification information from the electronic notarization system 400, the inputted electronic certification information is stored.
[0034]
The output unit 11 further outputs the electronic certification information stored in the storage unit 20 in response to an external request.
[0035]
Here, at the time of registration, the client only outputs the document data to the server 100 without outputting the access request information, and when the document data arrives, the server 100 also recognizes it as a registered access and performs the registration process. No problem. In this case, it is unknown who has registered, but since the hash value is determined by the document data and the registration access (act) and the access time (date and time) can be determined on the server side, the electronic certification information can also be obtained under the relevant conditions. If it is notarized who has performed the act in the subsequent browsing and retrieval, it is possible to prove the subsequent access to the registered document data.
[0036]
FIG. 5 is a diagram for explaining data transition when document data is registered.
In FIG. 5, as S (step) 501, the terminal (the client 200 or the client 300) inputs the document data 101.
In step S502, the terminal (the client 200 or the client 300) sends the document data 101 to the server 100 as registration access.
In step S503, when the document data 101 is registered from the terminal (the client 200 or the client 300), the server 100 calculates a hash value 103 from the document data, and creates status information 102 (when and who registered).
In step S <b> 504, the server 100 outputs the hash value 103 together with the status information 102 to the electronic notarization system 400 to obtain proof information.
In step S505, the electronic notarization system 400 inputs the hash value 103 and the status information 102 and performs notarization. The electronic certification information 104 is created as a notarized certification.
In step S506, the electronic notarization system 400 sends the electronic certification information 104 to the server 100.
In step S507, the server 100 inputs and stores the electronic certification information 104.
[0037]
FIG. 6 is a diagram illustrating data transition when browsing document data.
6, in step S601, the client 200 (or the client 300) outputs document browsing request information 105 indicating a document browsing request as document browsing access to the server 100.
In step S <b> 602, when the server 100 inputs the document browsing request information 105, the server 100 reads the hash value 103 of the requested document data 101, and creates status information 102 indicating when and who views the document data 101.
In step S603, the server 100 outputs the hash value 103 together with the status information 102 to the electronic notarization system 400 to obtain certification information.
In step S604, the electronic notarization system 400 inputs the hash value 103 and the status information 102 and performs notarization. The electronic certification information 104 is created as a notarized certification.
In step S605, the electronic notarization system 400 sends the electronic certification information 104 to the server 100.
In step S606, the server 100 inputs the electronic certification information 104, and stores (stores) the obtained electronic certification information in the server.
In step S607, the specified document data 101 is transferred from the server 100 to the client 200 in the reference mode.
[0038]
FIG. 7 is a diagram for explaining data transition when electronic certification information is requested.
In FIG. 7, as S701, the client 200 (or the client 300) outputs to the server 100 the electronic certification information request information 106 indicating the electronic certification information request as the electronic certification information request access.
In step S702, the server 100 inputs the electronic certification information request information 106 and outputs the stored electronic certification information 104 to the client 200 (or the client 300).
Since the user manages the electronic certification information 104 in the server 100, the user may obtain the stored electronic certification information 104 as needed.
[0039]
FIG. 8 is a view for explaining data transition when document data is taken out.
In FIG. 8, as S801, the client 200 (or the client 300) outputs document retrieval request information 107 indicating a document retrieval request as document retrieval access to the server 100.
In step S <b> 802, when the server 100 inputs the document retrieval request information 107, the server 100 reads the hash value 103 of the requested document data 101 and creates status information 102 indicating when and who retrieves the document data 101.
In step S <b> 803, the server 100 outputs the hash value 103 to the electronic notarization system 400 together with the status information 102 to obtain certification information.
In step S804, the electronic notarization system 400 inputs the hash value 103 and the status information 102 and performs notarization. The electronic certification information 104 is created as a notarized certification.
In step S805, the electronic notarization system 400 sends the electronic certification information 104 to the server 100.
In step S806, the server 100 inputs the electronic certification information 104, and stores (stores) the obtained electronic certification information in the server.
In step S807, the designated document data 101 is transferred from the server 100 to the client 200. When retrieving the document data 101, the obtained electronic certification information 104 may be sent to the client at the same time as the document data so that the retrieved document data 101 can be confirmed as authentic.
[0040]
As described above, according to the present embodiment, the authenticity of the predetermined file information can be proved by using the hash value, and the external access to the predetermined file information can be proved. Further, by acquiring and managing the electronic certification information 104 by the server 100, the acquisition and management of the certification by the client can be facilitated.
[0041]
Embodiment 2 FIG.
The system configuration in the second embodiment is the same as that in FIG.
FIG. 9 is a diagram illustrating a configuration of a server according to the second embodiment.
9, the server 100 (an example of a server device) further includes a management unit 90 in addition to the configuration of FIG. The management unit 90 includes a storage unit 20, a document management information creation unit 50, an electronic certification information table creation unit 60, an electronic certification information search unit 70, and a document management information search unit 80. The server 100 is connected to an external storage device 150. In FIG. 9, the storage device 150 is located outside the server 100, but may be located inside the server 100 as in the first embodiment. The storage unit 20 stores and stores the document management information 21 and the electronic certification information table 23 as a searchable database. Further, the storage unit 20 stores the electronic certification information 22 as in the first embodiment.
[0042]
FIG. 10 is a diagram illustrating a configuration of a client according to the second embodiment.
10, the clients 200 and 300 further include a bibliographic information input unit 230, a bibliographic information search unit 250, and a display unit 260 in addition to the configuration of FIG.
[0043]
In the second embodiment, when registering document data as an example of the predetermined file information, in the client 200 or the client 300, the bibliographic information input unit 230 inputs bibliographic information regarding the document data. For example, bibliographic information may be input from a medium such as an FD (Flexible Disk) by using FDD (Flexible Disk drive). Bibliographic information may be input from other recording media such as an optical disc, a CD (compact disc), an MD (mini disc), and a DVD (Digital Versatile Disk). Alternatively, bibliographic information may be input from a keyboard or a mouse. In such a case, an FDD, an optical disk device, a CDD (compact disk drive), an MD device, a DVD device, a keyboard, or a mouse are examples of the bibliographic information input unit 230. Alternatively, bibliographic information may be input from an external network such as the Internet via the communication unit 210.
[0044]
The client 200 or the client 300 accesses the server 100 to register the document data input by the document data input unit 220. As in the first embodiment, the output unit 211 outputs access request information indicating an access request to the server 100.
[0045]
Then, the output unit 211 outputs the document data and the bibliographic information input by the bibliographic information input unit 230 to the server 100 in order to register the document data input by the document data input unit 220.
[0046]
On the server 100 side, the input unit 12 inputs document data from the client 200 or the client 300 as an example of predetermined file information. Further, the input unit 12 inputs access request information indicating an access request to the predetermined file information and bibliographic information on document data as an example of the predetermined file information.
[0047]
Thereafter, when electronic certification information indicating a notarized electronic certification is input from the electronic notarization system 400 via the input unit 12 and the electronic certification information is received from the electronic notarization system 400, the input electronic certification information is stored. Is the same as in the first embodiment.
[0048]
Here, at the time of registration, the client only outputs the document data to the server 100 without outputting the access request information. When the document data arrives, the server 100 also recognizes the access as a registered access and performs the registration process. This is also the same as in the first embodiment.
[0049]
As described above, the storage unit 20 stores at least one electronic certification information 22 that has been notarized each time the above access occurs.
[0050]
As an example of the identification information assigning unit, the document management information creating unit 50 assigns identification information for identifying document data which is an example of the predetermined file information input by the input unit 12. In other words, the document management information creation unit 50 assigns a document ID to each document data 101. Further, the document management information creation unit 50 creates the document management information 21 based on the bibliographic information input by the input unit 11.
FIG. 11 is a diagram illustrating an example of the document management information.
In FIG. 11, the assigned document ID, the creator as the bibliographic information of the document, the title, the date, etc. are provided as the attributes of the document management information, and the information corresponding to each attribute (“0” for a 2-bit value) Alternatively, a value determined by “1” is stored. In addition, the hash value 103 calculated by the hash calculation unit 30 for searching is stored in order to specify a document and obtain the corresponding electronic certification information.
[0051]
The electronic certification information table creation unit 60 creates an electronic certification information table 23 corresponding to a document ID for at least one piece of electronic certification information 22.
FIG. 12 is a diagram illustrating an example of the electronic certification information table.
FIG. 12 shows an electronic certification information table 23 having electronic certification ID, electronic certification information, and document ID as elements. One record is generated for one acquired electronic certificate. The contents are an ID for uniquely identifying the issued electronic certification information 22, a file of the issued electronic certification information 22, and a document ID of the document data from which the electronic certification is obtained. In FIG. 12, the electronic certification information 22 “file A” of the electronic certification ID “00001” corresponds to the document ID “file B”. Further, the electronic certification information 22 “file C” of the electronic certification ID “00002” corresponds to the document ID “file D”. For example, when three accesses of registration, browsing, and retrieval occur in the document data 101 corresponding to the document ID “File B”, one electronic certification information 22 is registered for each of the three accesses of registration, browsing, and retrieval. For example, since “File A”, “File E”, and “File F” are obtained from the electronic notarization system, the corresponding digital certificate IDs, for example, “00001”, “00003”, “00004” Is given. Since these are all accesses to the document data 101 corresponding to the document ID “file B”, “file B” is stored in the document ID list. If the arrangement of the elements is changed, one document ID "file B" has three electronic certification IDs "00001", electronic certification information 22 "file A", an electronic certification ID "00003""fileE", and an electronic certification. This means that “file F” with ID “00004” is hanging.
[0052]
FIG. 13 is a diagram illustrating a case where the user obtains the electronic certification information.
FIG. 13 shows a case where the client 200 (or the client 300) stores the document ID 108 of the document data corresponding to the necessary electronic certification information 22. Alternatively, the case where the user inputs the document ID to the client 200 (or the client 300) is shown.
[0053]
In step S1301, the client 200 (or the client 300) outputs the document ID 108 to the server 100 as a request for electronic certification information.
In step S1302, the server 100 inputs the document ID. Here, on the server 100 side, the storage unit 20 stores the document ID 108, which is an example of the identification information given by the document management information creating unit 50, which is an example of the identification information giving unit, and the at least one electronic certification information 22. An electronic certification information table 23 corresponding to each electronic certification information 22 is stored. Therefore, the electronic certification information search unit 70 searches the electronic certification information table 23 for the corresponding at least one electronic certification information 22 based on the document ID 108 given by the document management information creation unit 50.
In step S1303, the output unit 11 of the server 100 outputs at least one piece of the electronic certification information 22 retrieved by the electronic certification information retrieval unit 70 to the client 200 (or the client 300).
In step S1304, the client 200 (or the client 300) inputs at least one piece of the electronic certification information 22.
In step S1305, the display unit 260 of the client 200 (or the client 300) displays at least one piece of the electronic certification information 22 input from the server 100. Alternatively, output to the outside.
[0054]
FIG. 14 is a diagram illustrating another case in which the user acquires the electronic certification information.
FIG. 14 shows a case where the client 200 (or the client 300) stores the hash value 103 of the document data corresponding to the necessary electronic certification information 22. Alternatively, the case where the user inputs the hash value 103 to the client 200 (or the client 300) is shown.
[0055]
In step S1401, the client 200 (or the client 300) outputs the hash value 103 to the server 100 as an electronic certification information request.
In step S1402, the server 100 inputs the hash value 103. Here, on the server 100 side, the storage unit 20 stores the document ID, which is an example of the identification information given by the document management information creating unit 50, which is an example of the identification information giving unit, and the at least one electronic certification information 22. An electronic certification information table 23 corresponding to each electronic certification information 22 is stored. The storage unit 20 further stores the hash value 103 calculated by the hash calculation unit 30 and the document ID assigned by the document management information creation unit 50 in association with each other as document management information 21. . Therefore, as an example of the identification information search unit, the document management information search unit 80 searches the document management information 21 stored in the storage unit for a document ID based on the hash value 103. Then, the electronic certification information search unit 70 searches the electronic certification information table 23 for the corresponding at least one electronic certification information 22 based on the document ID assigned by the document management information creation unit 50.
In step S1403, the output unit 11 of the server 100 outputs at least one piece of the electronic certification information 22 retrieved by the electronic certification information retrieval unit 70 to the client 200 (or the client 300).
In step S1404, the client 200 (or the client 300) inputs at least one piece of electronic certification information 22.
In step S1405, the display unit 260 of the client 200 (or the client 300) displays at least one piece of the electronic certification information 22 input from the server 100. Alternatively, output to the outside.
[0056]
FIG. 15 is a diagram illustrating another case in which the user acquires the electronic certification information.
FIG. 15 shows a case where the client 200 (or the client 300) stores the document data 101 corresponding to the necessary electronic certification information 22. Alternatively, the case where the user inputs the document data 101 to the client 200 (or the client 300) is shown.
[0057]
In step S1501, the client 200 (or the client 300) outputs the document data 101 to the server 100 as a request for electronic certification information.
In step S1502, the server 100 inputs the document data 101. Here, on the server 100 side, the storage unit 20 stores the document ID, which is an example of the identification information given by the document management information creating unit 50, which is an example of the identification information giving unit, and the at least one electronic certification information 22. An electronic certification information table 23 corresponding to each electronic certification information 22 is stored. The storage unit 20 further stores the hash value 103 calculated by the hash calculation unit 30 and the document ID assigned by the document management information creation unit 50 in association with each other as document management information 21. . Therefore, the hash calculator 30 newly calculates the hash value 103 based on the document data 101 newly input by the input unit 12 this time. Then, as an example of the identification information search unit, the document management information search unit 80 searches the document management information 21 stored in the storage unit for a document ID based on the newly calculated hash value 103. Then, the electronic certification information search unit 70 searches the electronic certification information table 23 for the corresponding at least one electronic certification information 22 based on the document ID assigned by the document management information creation unit 50.
In step S1503, the output unit 11 of the server 100 outputs at least one piece of the electronic certification information 22 retrieved by the electronic certification information retrieval unit 70 to the client 200 (or the client 300).
In step S1504, the client 200 (or the client 300) inputs at least one piece of the electronic certification information 22.
In step S1505, the display unit 260 of the client 200 (or the client 300) displays at least one piece of the electronic certification information 22 input from the server 100. Alternatively, output to the outside.
[0058]
In other words, the next step is to specify the document from the client and obtain the electronic certification information on the document.
(1) Send a document from a client to a server.
(2) The server obtains a hash value from the obtained document.
(3) Search the document attribute information table based on the obtained hash value.
(4) A document ID is obtained from the matching hash value.
(5) The electronic certificate management table is searched from the obtained document ID, and the corresponding electronic certificate information is obtained.
(6) Based on the proof information, send to the terminal how the corresponding document was accessed.
[0059]
FIG. 16 is a diagram illustrating another case in which the user acquires the electronic certification information.
FIG. 16 shows a case where the client 200 (or the client 300) does not have information for reaching the necessary electronic certification information 22.
[0060]
In step S1601, in the client 200 (or the client 300), the bibliographic information search unit 250 outputs bibliographic information search request information 109 indicating a bibliographic information search request to the server 100 via the output unit 211.
In step S1602, in the server 100, the input unit 12 inputs the bibliographic information search request information 109. The management unit 90 outputs the document management information 21 stored in the storage unit 20 to the client 200 (or the client 300).
In step S1603, in the client 200 (or the client 300), the input unit 212 inputs the document management information 21.
In step S1604, the display unit 260 of the client 200 (or the client 300) displays the input document management information 21. Then, the bibliographic information search unit 250 allows the user to search the document management information 21 of the document data corresponding to the necessary electronic certification information 22.
In step S1605, in the client 200 (or the client 300), the output unit 211 outputs any one of the bibliographic information 110 in the retrieved document management information 21 to the server 100 as an electronic certification information request.
In step S1606, the server 100 inputs the bibliographic information 110. Here, on the server 100 side, the storage unit 20 stores the document ID, which is an example of the identification information given by the document management information creating unit 50, which is an example of the identification information giving unit, and the at least one electronic certification information 22. An electronic certification information table 23 corresponding to each electronic certification information 22 is stored. Further, the storage unit 20 stores the bibliographic information 110 and the document ID assigned by the document management information creating unit 50 as document management information 21 in association with each other. Therefore, as an example of the identification information search unit, the document management information search unit 80 searches the document management information 21 stored in the storage unit for a document ID based on the bibliographic information 110. Then, the electronic certification information searching unit 70 searches the electronic certification information table 23 for the corresponding at least one electronic certification information 22 based on the document ID given by the document management information creating unit 50. Here, when the document ID is input as the bibliographic information 110, the server 100 does not need to search the document ID.
In step S1607, the output unit 11 of the server 100 outputs at least one piece of the electronic certification information 22 retrieved by the electronic certification information retrieval unit 70 to the client 200 (or the client 300).
In step S1608, the client 200 (or the client 300) inputs at least one piece of electronic certification information 22.
In step S1609, the display unit 260 of the client 200 (or the client 300) displays at least one piece of the electronic certification information 22 input from the server 100. Alternatively, output to the outside.
[0061]
As described above, the server 100 manages the electronic certification information that has notarized the access record of the access each time the access to the predetermined file information occurs, and the electronic device managed by the management unit 90. An output unit 11 for outputting certification information.
[0062]
According to the second embodiment, in addition to the effect of the first embodiment, necessary electronic certification information can be obtained from all kinds of information such as document data, a document ID, a hash value, and bibliographic information. Further, even when there is no search information on the client side, the search information can be obtained from the server side.
[0063]
As described above, the “electronic certification information” referred to in the prior art is a method of calculating the characteristic amount of a document in order to detect falsification of a document registered in the document management system, and transmitting the certification information to an external electronic notarization system. In the above embodiment, “electronic certification” refers to the feature amount of a document and the information on who performed the action (registration, browsing, deletion, etc.) on the document and when. The information is requested together with the electronic notarization system for certification information.
Further, in the prior art, the certification information is managed as a part of the attribute of the document, but in the above embodiment, the document is associated as a part of the attribute of the certification information.
In the above embodiment, the electronic certificate is not obtained from the terminal.
[0064]
As described above, in the above embodiment, not only the attribute of the content and the feature amount from the content, but also information on when and by whom the action (registration, browsing, reference, etc.) was performed on the content. Obtain an electronic proof with the contents. Therefore, a plurality of pieces of electronic certification information are generated for one content. Therefore, the management unit is a content unit in the prior art, and one piece of certification information belongs to the content. In this method, information is managed in units of information, and content corresponding to one piece of electronic certification information is managed.
[0065]
As described above, in the above embodiment, since the document management system is based on the premise that the electronic certificate exists, the presence or absence of the electronic certificate is not displayed. Further, even when there is an electronic certificate, a plurality of pieces of electronic certification information usually exist for one content (at least one electronic certification information exists). .
[0066]
As described above, in the above embodiment, the document stored in the terminal is sent to the document management system, and the document management system (that is, the server 100) calculates the hash value which is the feature amount of the document. Then, a corresponding document can be searched from the stored electronic certification information, and the terminal can be notified of when and who did the document.
[0067]
In the above description, what has been described as "-unit" in the description of each embodiment can be partially or entirely constituted by a computer-operable program. These programs can be created in C language, for example. Alternatively, HTML, SGML, or XML may be used. Alternatively, the screen may be displayed using JAVA (registered trademark).
[0068]
In the above description, when what is described as “-unit” in the description of each embodiment is partially or entirely configured by a computer-operable program, the server 100 is represented by a system unit, and a CRT (CathodeRay) is used. Tube) A display device, a keyboard (K / B), a mouse, a compact disk device (CDD), a printer device, and a scanner device may be connected by a cable. The clients 200 and 300 may be similarly configured.
[0069]
The server 100 includes a CPU (Central Processing Unit) that executes a program. The CPU includes a ROM (an example of a storage device), a RAM (an example of a storage device), a communication board, a CRT display device, a K / B, a mouse, an FDD (Flexible Disk Drive), and a magnetic disk device via a bus. (An example of a storage device), a CDD, a printer device, and a scanner device. The communication board is connected to a network 500 such as the Internet. The clients 200 and 300 also include a CPU that executes a program. Other configurations may be similarly configured.
[0070]
When the communication unit 10 or the communication unit 210 is configured by hardware, for example, the communication board 44 is an example of the communication unit 10 or the communication unit 210. When the document data input unit 220 or the bibliographic information input unit 230 is configured by hardware, for example, the K / B 42 and the FDD 45 are examples of the document data input unit 220 or the bibliographic information input unit 230.
When the processing performed by the communication unit 10 or the communication unit 210 is configured by a program, the program may perform the processing using, for example, an input device called the communication board 44. Alternatively, it may be performed as internal processing of the CPU using the CPU.
When the processing performed by the document data input unit 220 or the bibliographic information input unit 230 is configured by a program, the program may perform the processing using, for example, input devices such as K / B and FDD. Alternatively, it may be performed as internal processing of the CPU using the CPU.
When the storage unit 20 or the storage unit 240 is configured by hardware, for example, a ROM, a RAM, and a magnetic disk device are examples of the storage unit 20 or the storage unit 240. When the processing performed by the storage unit 20 or the storage unit 240 is configured by a program, the program may perform the processing using a storage device such as a ROM, a RAM, and a magnetic disk device.
When each unit other than the above is configured by hardware, for example, the CPU 37 is an example of each unit other than the above. When the processing performed by each unit other than the above is configured by a program, the program causes the CPU to perform the processing.
[0071]
Here, the communication board is not limited to the Internet, and may be directly connected to a LAN (Wide Area Network) such as a LAN or ISDN.
The magnetic disk device stores an operating system (OS), a window system, a group of programs, and a group of files. The program group is executed by a CPU, an OS, and a window system.
[0072]
When constituted by programs, the programs stored in the above-described program group are those executed by those described as “-unit” in the description of each embodiment. In the file group, those described as “document data”, “〜table”, “〜information”, and “hash value” in the description of the above embodiment are stored.
[0073]
In addition, what is described as “-unit” in the description of each embodiment may be realized by firmware stored in a ROM. Alternatively, the present invention may be implemented by software, hardware, or a combination of software, hardware, and firmware.
[0074]
Further, a program for implementing the above-described embodiments includes a magnetic disk device, an FD (Flexible Disk), an optical disk, a CD (Compact Disk), an MD (Mini Disk), a DVD (Digital Versatile Disk), and the like. The information may be stored using a recording device using a medium.
[0075]
【The invention's effect】
According to the present invention, it is possible to certify the authenticity of the predetermined file information and to certify the external access to the predetermined file information. In addition, the client can easily obtain and manage the certificate.
[Brief description of the drawings]
FIG. 1 is a diagram showing a system configuration according to a first embodiment.
FIG. 2 is a diagram showing a configuration of a server according to the first embodiment.
FIG. 3 is a diagram showing a configuration of a client according to the first embodiment.
FIG. 4 is a diagram illustrating an example of status information.
FIG. 5 is a diagram illustrating data transition when document data is registered.
FIG. 6 is a diagram illustrating data transition when browsing document data.
FIG. 7 is a diagram illustrating data transition when electronic certification information is requested.
FIG. 8 is a view for explaining data transition when document data is taken out.
FIG. 9 is a diagram showing a configuration of a server according to the second embodiment.
FIG. 10 is a diagram showing a configuration of a client according to the second embodiment.
FIG. 11 illustrates an example of document management information.
FIG. 12 is a diagram illustrating an example of an electronic certification information table.
FIG. 13 is a diagram illustrating a case where a user acquires electronic certification information.
FIG. 14 is a diagram illustrating another case in which a user acquires electronic certification information.
FIG. 15 is a diagram illustrating another case in which a user acquires electronic certification information.
FIG. 16 is a diagram illustrating another case in which a user acquires electronic certification information.
[Explanation of symbols]
Reference Signs List 10 communication unit, 11 output unit, 12 input unit, 13 notarization I / F (interface), 20 storage unit, 21 document management information, 22 electronic certification information, 23 electronic certification information table, 30 hash calculation unit, 37 CPU, 40 Status information creation unit, 42 K / B, 44 communication board, 45 FDD, 50 document management information creation unit, 60 electronic certification information table creation unit, 70 electronic certification information search unit, 80 document management information search unit, 90 management unit, 100 server, 101 document data, 102 status information, 103 hash value, 104 electronic certification information, 105 document browsing request information, 106 electronic certification information request information, 108 document ID, 109 bibliographic information search request information, 110 bibliographic information, 150 storage Device, 200, 300 client, 210 communication unit, 211 output unit, 212 input unit, 220 Document data input section, 230 Bibliographic information input section, 240 storage section, 250 Bibliographic information search section, 260 display section, 400 electronic notarization system, 500 network.

Claims (8)

An electronic notarization system that performs notarization using an electronic certificate with respect to specific information that specifies predetermined file information and access status information that indicates an access status to the predetermined file information. An output unit that outputs the specific information and the access status information to the electronic notarization system in order to obtain the notarization of the contents and the access date and time.
For the specific information and the access status information output by the output unit, electronic certification information indicating the notarized electronic certification is input from the electronic notarization system, and the input electronic certification information is stored. Department and
The server device, wherein the output unit further outputs the electronic certification information stored in the storage unit in response to an external request. The server device further includes:
An input unit for inputting the predetermined file information and access request information indicating an access request to the predetermined file information,
A generating unit that generates the specific information output by the output unit based on the predetermined file information input by the input unit;
When the access to the predetermined file information occurs, as the information corresponding to the time of the access and the status of the access based on the access request indicated in the access request information input by the input unit, A status information creating unit that creates the access status information output by the output unit,
2. The server device according to claim 1, wherein the input unit further inputs the electronic certification information to be stored in the storage unit from the electronic notarization system. The storage unit stores at least one electronic certification information that has been notarized each time the access occurs.
The server device further includes an identification information providing unit that provides identification information for identifying the predetermined file information input by the input unit,
The storage unit stores an electronic certification information table in which the identification information given by the identification information giving unit is associated with each electronic certification information of the at least one electronic certification information,
The server device further includes an electronic certification information search unit that searches the electronic certification information table for the corresponding at least one electronic certification information based on the identification information given by the identification information giving unit,
The server device according to claim 2, wherein the output unit outputs at least one piece of electronic certification information retrieved by the electronic certification information retrieval unit. The input unit inputs bibliographic information regarding the predetermined file information,
The storage unit further stores bibliographic information input by the input unit and identification information given by the identification information giving unit in association with each other,
The server device includes an identification information search unit that searches for the identification information stored by the storage unit based on the bibliographic information,
4. The electronic certificate information search unit according to claim 3, wherein the electronic certificate information search unit searches the electronic certificate information table for the corresponding at least one electronic certificate information based on the identification information searched by the identification information search unit. Server device. The storage unit further stores the specific information generated by the generation unit and the identification information provided by the identification information providing unit in association with each other,
The server device includes an identification information search unit that searches for the identification information stored by the storage unit based on the specific information,
4. The electronic certificate information search unit according to claim 3, wherein the electronic certificate information search unit searches the electronic certificate information table for the corresponding at least one electronic certificate information based on the identification information searched by the identification information search unit. Server device. A management unit that manages electronic certification information that has notarized the access record of the access each time access to predetermined file information occurs;
A server for outputting the electronic certification information managed by the management unit. The contents of the specific information and the access status information are provided to an electronic notarization system that performs notarization using an electronic certificate with respect to the specific information for specifying the predetermined file information and the access status information indicating the access status to the predetermined file information. And an output process of outputting the specific information and the access status information to the electronic notarization system in order to obtain a notarization of the date and time when the access occurred.
For the specific information and the access status information output by the output processing, from the electronic notarization system, input processing of inputting electronic certification information indicating a notarized electronic certification when the access occurs.
A storage process of storing the electronic certification information input by the input process in a storage device,
A program for causing a computer to execute, in response to a request from the outside, an output process of outputting the electronic certification information stored in the storage device by the storage process. File information input processing for inputting predetermined file information;
A generation process of generating specific information based on the predetermined file information input by the input process;
When access to the predetermined file information has occurred, status information creation processing for creating access status information as information that associates the access status with the time at which the access occurred,
When the access occurs, the identification information generated by the generation processing and the access status information generated by the status information generation processing are notified by an electronic notarization system using an electronic certificate. An output process of outputting the specific information and the access status information to the electronic notarization system, in order to seek notarization of the content and the date and time when the access has occurred with respect to the access status information,
For the specific information and the access status information output by the output processing, from the electronic notarization system, electronic certification information input processing for inputting electronic certification information indicating the notarized electronic certification,
Storage processing for storing the electronic certification information input in the electronic certification information input processing in a storage device;
A program for causing a computer to execute an output process of outputting the electronic certification information stored in the storage device by the storage process.

Images