JP2005135242A - Originality-guaranteeing electronic document management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an originality-guaranteeing electronic document management system capable of guaranteeing the originality of an electronic document with high reliability. <P>SOLUTION: The system includes a first means for creating an authentication value that makes it possible to verify the originality of original data to be registered either newly or after being updated, when the original data are registered either newly or after being updated, and for registering the authentication value in a third storage means together with the identifier of the original data to be registered; a second means for registering the authentication value in first and second storage means together with the identifier of the original data to be registered; a third means for causing the next falsification detection time of the original data registered in the first storage means set in a falsification detection history management table; and a fourth means for sequentially reading the original data in the first storage means according to the next falsification detection time set in the falsification detection history management table and for detecting whether or not the original data stored in the first storage means have been falsified according to the authentication value and the corresponding identifier registered in the third storage means. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an apparatus management system that guarantees the originality of an electronic document.

With the progress of computerization of documents used in government offices and companies, not only the prevention of falsification of digitized documents (hereinafter referred to as “electronic documents”) but also proof that the currently stored electronic documents have not been falsified. However, it has become an important issue to have a function to guarantee originality.
Integrity, confidentiality, and readability are important factors in ensuring the originality of electronic documents.
Therefore, conventionally, as a technique for ensuring the originality of an electronic document and detecting falsification of a stored document, for example, those described in Patent Document 1 and Patent Document 2 below are known.
The document described in Patent Document 1 uses a document management system that manages electronic files and a history management system that manages the history of electronic files connected to the document management system. Is input to the document management system, the summary value (hash value) of the input electronic file is obtained, and the obtained summary value is held in the history management system. Is entered, it is determined whether the summary value newly obtained from the corresponding electronic file in the document management system matches with the corresponding summary value in the history management system, and the result of the determination is two summary values. When a match is indicated, a certificate stating that the electronic file has not been tampered with and that the electronic file is the latest version is issued. .
Further, the one described in Patent Document 2 below is a copy of the copy data obtained by copying the original by the certificate issuing unit of the originality assurance electronic device when the original copy is held on a device other than the originality assurance electronic device. A storage certificate is issued, and the verification unit of the external device secures the validity of the copy data based on the stored document, thereby efficiently ensuring that this copy matches the copy of the original data. is there.
JP 2001-306732 A JP 2001-209581 A

However, in the originality assurance document management system, generally, the total amount of original data (electronic document) to be stored is large, the storage period of the original data is long, and the originality confirmation processing takes time. Therefore, the originality was basically confirmed only when the original data was registered, updated, or referenced. Therefore, if the original data is falsified for any reason other than registration / update / reference, the originality cannot be guaranteed. Therefore, it is conceivable to back up original data by a backup method applied to a normal file system.
However, there is a possibility that the original data at the time of backup may have already been falsified, so that the originality cannot be guaranteed with high reliability.

  An object of the present invention is to store an electronic document as original data and store the archive data, and periodically check whether or not the original data is falsified by the archive data at a different timing other than when newly registering, updating, or referring To check the originality periodically, and if the electronic document is found to be falsified or damaged, the document data is automatically repaired to ensure the originality with high reliability. It is to provide an originality assurance document management system that can be used.

In order to achieve the above object, the present invention provides originality assurance electronic equipment comprising: first storage means for storing original data serving as an original of an electronic document; and second storage means for storing an archive of the original data. A document management system,
At the time of new registration or update registration of the original data, an authentication value capable of confirming the originality of the original data to be newly registered or updated is generated, and the original management information is added to the authentication value together with the identifier of the original data to be registered. First means for registering in the third storage means for storing; second means for registering the original data to be registered for generating the authentication value in the first and second storage means together with the identifier; According to the third means for setting the next falsification detection time of the original data registered in the first storage means in the falsification detection history management table and the next falsification detection time set in the falsification detection history management table, The original data stored in the storage means are sequentially read out and stored in the first storage means using the authentication value and the authentication value of the corresponding original identifier registered in the third storage means. Characterized in that it comprises a fourth means for detecting the presence or absence of falsification of the original data.
Further, when the fourth means detects that the original data stored in the first storage means has been falsified, the fourth original data is stored in the second storage means. And a means for resetting the next falsification detection time of the original data in the falsification detection history management table.
The fourth means rearranges and stores the information of the next falsification detection time registered in the falsification history management table in the oldest order or the order closest to the current time, and sets the oldest time order or the current time. It is characterized in that the presence or absence of falsification of the original data is detected in order of proximity.
The fourth means is obtained from the second storage means when replacing the original data stored in the first storage means with the original data stored in the second storage means. Using the authentication value of the original data and the authentication value of the same original identifier registered in the third storage means, the presence / absence of falsification of the original data acquired from the second storage means was detected and falsified In this case, an error notification is output.

  According to the present invention, the process of confirming the originality of an electronic document stored as an original is not only executed when a registration / update / reference request is made, but is also periodically checked and altered at other times. In this case, since the archived electronic document is restored, the originality of the electronic document can be guaranteed with high reliability.

Hereinafter, an embodiment for carrying out the present invention will be specifically described with reference to the drawings.
FIG. 1 is a block diagram showing a specific configuration of an originality assurance electronic document management system according to an embodiment of the present invention.
As shown in FIG. 1, an originality assurance electronic document management system 100 according to this embodiment includes an originality assurance electronic document backup unit (hereinafter referred to as a backup unit) 101 and a server unit 102, and a network 103 such as the Internet. The electronic document registration / update / reference support program 1021 of the server unit 102 accepts new registration requests, update requests, and reference requests for the electronic document 105 from a plurality of user terminals 104 via The electronic document is registered, the registered electronic document is updated, and the registered electronic document can be read and transferred to the reference request source.
The backup unit 101 includes an original data storage medium 1011, an original archive data storage medium 1012, an originality assurance device 1013, a falsification detection history management device 1014, and a timer 1015.
The original data storage medium 1011 is a secondary storage device having a large capacity for storing original data (original electronic document) and a relatively high access speed, and is composed of, for example, a magnetic disk. The original archive data storage medium 1012 is a large-capacity and high-reliability secondary storage device that stores an archive of original data in the original data storage medium 1011. The original archive data storage medium 1012 includes, for example, a magneto-optical disk or a DVD. Preferably, it is a write once type storage medium.

The originality assurance device 1013 guarantees the originality of data input when there is a request for new registration, update, or reference of original data from the server unit 102 or when periodic alteration detection is performed internally. The original data handled in the backup unit 101 is uniquely managed by the original ID. A different original ID is assigned when the original data is updated. For example, when the original ID before update is ID = 001, another original ID is assigned to the original data after update, such as ID = 001-01, and stored in a storage area different from the original data before update. To do.
The functions of the originality assurance device 1013 include access control, acquisition of an access log to a storage medium, version management at the time of original update, in addition to detection of falsification of original data. Since any method may be used as long as the originality of the stored electronic document is not lost, only the falsification detection function of the original data will be described in detail.
The falsification detection function calculates the hash value of the original data at the time of registering the original, and records the result of applying the electronic signature to the original management information storage medium 1016.

FIG. 2A shows a configuration example of the original management information. The original management information shown in this example includes an original ID 201, a hash value 202, an electronic signature 203, and an attribute 204. The attribute 204 is data indicating the creator of the original data, the creation department signature, the creation date and time, and the like. In addition, the file name held by the registered original and information for the higher-level application to manage the original data may be included.
When there is a request for falsification detection of the original data stored in the original data storage medium 1011, the original data stored in the original data storage medium 1011 is read out, and the hash value is recalculated and stored in the original management information storage medium 1016. The presence or absence of falsification is detected by comparison with the stored hash value 202 (FIG. 2A).
A combination of a hash value and an electronic signature may be used as an authentication value, and the presence or absence of tampering may be detected based on the authentication value.
As shown in FIG. 2B, the original data stored in the original data storage medium 1011 is composed of the original ID 205 assigned to the original data and the data 206, and the hash value of the data 206 is recalculated. Compare with the hash value 202 of the same original ID of the original management information.
The original data stored in the original archive data storage medium 1012 also includes an original ID 207 and data 208 as shown in FIG.

The falsification detection history management apparatus 1014 manages, in the falsification detection history management table 1017, a history of processing for detecting falsification of original data among the processes for guaranteeing the originality, and stores it in the original data storage medium 1011. Scheduling is performed when periodic alteration detection is performed on the original data. A specific scheduling method will be described later.
The timer 108 is used to acquire the current time.
FIG. 2D shows a configuration example of the falsification detection history management table 1017 used by the falsification detection history management apparatus 1014. The constituent elements in the row of this table 1017 are composed of an original ID 2091, a last falsification detection execution time (previous falsification detection execution time) 2092, a falsification detection execution interval 2093, and a falsification detection execution scheduled time (next falsification detection execution time) 2094. .
The original ID 2091 uniquely represents original data, and the final falsification detection execution time 2092 represents the time when the falsification detection process was last performed on the original data.
The falsification detection execution time interval 2093 represents a time interval scheduled to periodically execute falsification detection determined for each original data.
The falsification detection scheduled execution time 2094 is a value obtained by adding the falsification detection execution interval 2093 to the final falsification detection execution time 2092 and represents the time at which falsification detection is scheduled to be executed next. The entire row of this table 1017 is sorted in the order in which the falsification detection scheduled execution time 2094 is close to the current time or in the oldest order. When falsification detection is actually executed, the last falsification detection execution time 2092 is updated to the current time, and accordingly the falsification detection execution scheduled time 2094 is also updated. Accordingly, the falsification detection scheduled execution time 2094 is rearranged in the order close to the current time or in the oldest order.

FIG. 3 is a flowchart showing original data new registration processing performed by the originality assurance device 1013 shown in FIG. 1 and falsification detection history management table 1017 update processing performed by the falsification detection history management device 1014.
In the update process of a registered electronic document, since a new original ID is assigned to the updated document as described above, the same process as a new registration is performed.
As illustrated in FIG. 3, when the originality assurance device 1013 receives a newly registered electronic document 105 from the server unit 102, first, the received electronic document 105 is unique within the originality assurance electronic document management system 100. Is assigned (step 301).
Next, the hash value 202 of the data 206 of the electronic document 105 input from the server unit 102 is calculated, and an electronic signature 203 is given to the hash value 202, and the original management information storage medium 1016 is stored in FIG. (Step 302).
Next, the electronic document 105 input from the server unit 102 is stored in the original data storage medium 1011 in a format as shown in FIG. 2B (step 303). Then, the same data is stored in the original archive data storage medium 1012 as an original archive (step 304).

Next, the process proceeds to update processing of the falsification detection history management table 1017 by the falsification detection history management device 106.
First, one new row is created for substitution in the falsification detection history management table 1017 of FIG. Then, the current time is acquired from the timer 1015 (step 305).
Next, the same original ID 2091 as the original ID assigned in step 301 is recorded in the newly created row in the falsification detection history management table 1017, and the current time is recorded as the last falsification detection time 2092 (step 306).
Next, a numerical value that designates the tampering detection time interval designated for each original is recorded in the tampering detection time interval 2093.
In this case, the falsification detection time interval 2093 may be a fixed time interval preset in the system, or may be a time interval arbitrarily designated by an administrator or a registrant.
The administrator or registrant can arbitrarily specify the time interval according to the importance of the original data, thereby improving the accuracy of falsification detection and improving safety.
If the falsification detection time interval 2093 is designated, the falsification detection history management table 1017 is obtained by adding the last falsification detection execution time 2092 (current time) to the time interval 2093 as the falsification detection execution scheduled time 2094. Record. Then, the rows of the falsification detection history management table 1017 are rearranged in order of the oldest falsification detection execution scheduled time (the order closest to the current time) (step 308).

An example of the falsification detection history management table 1017 is shown.
The process in which the falsification detection process is executed for the originals described in this table will be specifically described below. For simplicity, it is assumed that the falsification history management of all originals is managed by a single falsification detection history management table 1017.
At the time of original registration, a falsification detection execution interval 2093 indicating an interval of time for falsification detection to be executed by the upper application is designated according to the importance level of the document, and this is registered in the falsification detection history management table 1017. In this example, four levels of 1 month (30 days), 3 months (90 days), 6 months (180 days), and 12 months (365 days) are set. The time when the original was registered is set to the last tampering detection execution time 2092. A value obtained by adding the falsification detection execution interval 2093 to the final falsification detection execution time 2092 becomes the falsification detection execution scheduled time 2094. This value is inserted in the falsification detection history management table 1017 so as to be in the oldest order.
The final tampering detection execution time 2092 is updated when the original is referenced from a higher-level application in addition to the tampering detection based on the tampering detection history management table 1017. In the falsification detection history management table 1017, the value is rearranged so that the falsification detection execution scheduled time 2094 becomes old. In addition, when there are a plurality of the same falsification detection execution scheduled times 2094, it is assumed that the falsification detection process is executed by an appropriate method.
If there is no original that has reached the falsification detection execution time at a certain point in time and falsification detection processing is possible, the falsification detection execution scheduled time 2094 is the current time among the originals that have not reached the falsification detection execution scheduled time 2094. It is also possible to process the falsification detection process ahead of schedule in order from the closest.
On the other hand, if there is an original in which the falsification detection processing cannot be executed even if the falsification detection execution scheduled time 2094 is reached, the falsification detection execution scheduled time 2094 starts from the current time in the falsification detection history management table 1017. The originals that could not be executed are processed starting from the one with the most time.

4 and 5, the originality assurance device 1013 performs processing for a reference request from the terminal 104 via the server 102, performs falsification detection processing for data acquired from the original data storage medium 1011, and falsification is detected. 3 is a flowchart showing a process for performing restoration processing from the original archive data storage medium 1012 to the original data storage medium 1011 and a process for the falsification detection history management apparatus 1014 to update the falsification detection history management table 1017.
First, the originality assurance device 1013 acquires the original data specified by the original ID corresponding to the original requested for reference from the original data storage medium 1011 (step 401). Next, the hash value 202 of the original data designated by the original ID is acquired from the original management information storage medium 1016 (step 402). Then, the electronic signature 203 attached to the hash value 202 is acquired, and the validity of the hash value 202 is checked (step 403). On the other hand, if the validity of the hash value cannot be confirmed, the original management information may be falsified or damaged, and the error content is notified to the administrator of this apparatus (step 404). In this case, a measure for restoring data from a backup of the original management information storage medium 1013 can be considered, but this error is out of the scope of the present invention and will be omitted.

When the validity of the hash value is confirmed, the original data specified by the original ID is read from the original data storage medium 1011 (step 405).
Next, a hash value of the original data is calculated (step 406). Then, the hash value 202 stored in the original management information storage medium 1016 is compared with the hash value calculated this time (step 407). If the two match, the original data has not been falsified, and the original data is output to the outside of the originality assurance device 1013 (step 409). That is, the request is transferred to the reference request source terminal 104 via the server unit 102.
If the two do not match, it means that the original data has been falsified. Therefore, the original data stored in the original data archive storage medium 1012 is read out and stored in the original data storage medium 1011 by the procedure shown in FIG. Perform original data restoration processing.
That is, the originality assurance device 1013 acquires an original ID to be restored (step 501). Next, original archive data corresponding to the original ID is acquired from the original archive data storage medium 1012 (step 502). Next, the hash value of the acquired archive data is calculated (step 503). Then, the hash value 202 of the original stored in the original management information storage medium 1016 is compared with the hash value calculated this time (step 504). On the other hand, if they are not equal, it means that the archive data has been tampered with, and error processing similar to step 404 in FIG. 4 is performed.

  If they are equal, the original data with the same original ID stored in the original data storage medium 1011 is replaced (restored) with the original archive data acquired from the original data archive storage medium 1012 (step 506).

Returning to step 409 in FIG. 4, if the two hash values are equal, or if the original data is restored from the original archive storage medium 1012 to the original data storage medium 1011, the original data is transferred to the terminal 104 that issued the reference request. .
Next, processing for updating the falsification detection history management table 1017 in the falsification detection history management apparatus 1014 is performed. First, the current time is acquired from the timer 108 (step 410). Then, the last tampering detection execution time 2092 in the row indicated by the original ID (the original data ID requested to be referred to) is updated to the current time (step 411). Next, the falsification detection scheduled execution time 2094 is calculated and substituted by adding the falsification detection execution interval 2093 of the same line to the current time. Then, this line is switched so that the falsification detection execution scheduled time 2094 of this line is in the oldest order in the management table 1017 (step 413).

FIG. 6 shows that the originality specified in the falsification detection history management table 1017 in the falsification detection history management device 106 is periodically detected by the originality assurance device 1013 in the original data storage medium 1011. 10 is a flowchart showing processing for restoring original data from the original archive data storage medium 1012 when falsification of the original data is detected.
First, an original ID having the oldest falsification detection scheduled execution time is acquired from the falsification detection history management table 1017 (step 601).
Next, the hash value 202 of the original data stored in the original management information management medium 1013 is acquired (step 602). Then, the validity of the electronic signature of this hash value is checked (step 603). On the other hand, if the validity of the hash value cannot be confirmed, error processing similar to that in step 404 in FIG. 4 is performed, and the process ends (step 604).
When the validity of the hash value 202 is confirmed, the original data of the original ID stored in the original data storage medium 1011 is acquired (step 605). Then, a hash value of the acquired original data is calculated (step 606). Subsequently, the obtained two hash values are compared (step 607). On the other hand, if they do not match, the original archive data with the same original ID is read from the original archive data storage medium 1012 and restored as the original data of the original data storage medium 1011 by the procedure shown in FIG. 5 (step 608). ).
Next, the falsification detection history management device 1014 updates the falsification detection history management table 1017.
First, the current time is acquired using the timer 108 (step 609). Next, the current time is substituted into the last tampering detection execution time 2092 of the original (step 610). Then, the falsification detection execution interval 2093 is added to the current time and substituted into the falsification detection execution scheduled time 2094 (step 611).
Finally, each row in the management table 1017 is rearranged so that the falsification detection execution scheduled execution time 2094 is arranged in order from the oldest row (step 612).

As described above, according to the above-described embodiment, the originality confirmation process of the electronic document stored as the original is performed when there is a registration / update / reference request, and is also periodically performed at other times. If the electronic document archived is restored and the archived electronic document is restored, the originality of the electronic document can be guaranteed with high reliability.
In addition, the time interval for falsification detection can be set for each original electronic document, and this time interval can be arbitrarily set or changed as necessary, so it can be flexibly adapted to the type and importance of the original. The execution of falsification detection can be controlled efficiently.
Also, if the archived original data has become unreadable due to aging of the storage medium, or if the storage medium itself has been discarded, the administrator will be notified by error handling, so take countermeasures. It can be implemented as soon as possible and contribute to the continuous operation of the system.

It is a block diagram which shows the structure of the management system of the originality assurance electronic document concerning one Embodiment of this invention. It is a figure which shows the example of the original management information stored in a storage medium, original data, and falsification detection history information. It is a flowchart which shows the process at the time of the new registration of the electronic document used as an original, or an original update. It is a flowchart which shows the process at the time of original data reference. It is a flowchart which shows the restore process when the alteration of original data is detected. It is a flowchart which shows the periodic alteration detection process of original data.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Originality assurance electronic document management system 101 Originality assurance document backup part 102 Server part 103 Network 104 Terminal 105 Electronic document 108 Timer 1011 Original data storage apparatus 1012 Original archive data storage apparatus 1013 Originality assurance apparatus 1014 Tampering detection history management apparatus 1016 Original management information storage medium 1017 Falsification detection history management table

Claims (4)

An originality assurance electronic document management system comprising: a first storage unit that stores original data that is an original of an electronic document; and a second storage unit that stores an archive of the original data.
At the time of new registration or update registration of the original data, an authentication value capable of confirming the originality of the original data to be newly registered or updated is generated, and the original management information is added to the authentication value together with the identifier of the original data to be registered. First means for registering in the third storage means for storing; second means for registering the original data to be registered for generating the authentication value in the first and second storage means together with the identifier; According to the third means for setting the next falsification detection time of the original data registered in the first storage means in the falsification detection history management table and the next falsification detection time set in the falsification detection history management table, The original data stored in the storage means is sequentially read out and stored in the first storage means using the authentication value and the authentication value of the corresponding original identifier registered in the third storage means. Management system originality assurance electronic document, characterized in that it comprises a fourth means for detecting the presence or absence of falsification of the original data.   When the fourth means detects that the original data stored in the first storage means is falsified, the original stored in the second storage means is the original data stored in the second storage means. 2. The originality assurance electronic document management system according to claim 1, further comprising means for replacing the data with data and resetting the next alteration detection timing of the original data in the alteration detection history management table.   The fourth means rearranges and stores the information of the next alteration detection time registered in the alteration history management table in the oldest order or the order closest to the current time, and the oldest time order or the order closer to the current time. 3. The originality assurance electronic document management system according to claim 1, wherein presence or absence of falsification of original data is detected.   When the fourth means replaces the original data stored in the first storage means with the original data stored in the second storage means, the original data acquired from the second storage means If the original data acquired from the second storage means is detected by using the authentication value and the authentication value of the same original identifier registered in the third storage means, and has been falsified 4. The originality assurance electronic document management system according to claim 2, wherein an error notification is output.

Images