JP2006053836A - Authenticity determination apparatus, and system for storing and utilizing electronic file - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authenticity determination apparatus capable of determining the authenticity of an electronic file only in a portable storage medium storing the electronic file. <P>SOLUTION: Since a hash value of an original electronic file is stored in a distribution information file in a portable storage medium 18, the possibility of alteration of the distribution information file is determined by verifying the signature of the distribution information file by a signature verifying section 22. Further, it is determined that the distribution information file is not altered, the hash value of the original electronic file in the distribution information file is compared with the hash value of the (duplicated) electronic file stored in the portable storage medium, so that it is possible to determine the authenticity of the (duplicated) electronic file only in the portable storage medium. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an authenticity determination device and an electronic file storage / utilization system.

  As the digitization of business has become more common, opportunities to store and use digitized files have become frequent. In such a case, in order to store and use the electronic file while guaranteeing the originality, for example, a mechanism that guarantees the authenticity of the data based on a certifier issued by a third party organization is required. Become.

For example, in the conventional techniques disclosed in Patent Documents 1 and 2 below, a hash value of data is stored in a database, and the originality at the time of data browsing is checked using the hash value.
In the prior art disclosed in Patent Document 3 below, version number management is performed by storing a history of hash values of data in a database.
Japanese Patent Laid-Open No. 2000-339223 “Originality Assured Electronic Storage Method and Computer-Readable Recording Medium Recording a Program for Executing the Method on a Computer” Japanese Patent Laid-Open No. 2004-29946 “Electronic Document System, Electronic Sealing Method, and Sealing History Management Method” JP 2001-306732 A "Originality Assurance Document Management Method and Storage Medium"

However, in the prior arts such as Patent Documents 1 to 3 described above, since a third-party organization issues a certificate, there is a problem that costs are generated each time a certificate is issued.
In addition, if you want to check the contents of information stored in a storage medium, etc., a description file may be attached to the electronic file, but there is a mechanism that ensures that the attached description file is not tampered with. Otherwise, there is a problem that it is impossible to know whether the information of the attached description file is correct.

  In addition, there is only a method for confirming the originality by referring to the database storing the hash value, which contributes to increasing the load on the client side that performs the originality confirmation on the server device side that manages the database. It was.

A first object of the present invention is to provide an authenticity determination device capable of determining the authenticity of an electronic file only in a portable storage medium storing the electronic file.
The second problem of the present invention is to provide an authenticity determination device that can analyze the suspected alteration of the electronic information file more finely even if the electronic information file is suspected of being altered.

  The authenticity determination device according to the first aspect of the present invention is the authenticity determination device that determines the authenticity of an electronic file corresponding to a case, a hash value calculation unit that calculates a hash value for specified information, and the electronic file A distribution information file composed of information including a hash value, and an electronic signature obtained by encoding the information including the hash value using an encoding key issued for each case, and the electronic file, When a distribution information file stored in the portable storage medium is designated for the portable storage medium in which the hash value is stored, the hash value calculation unit is used to calculate the hash value for the information including the hash value in the file. The electronic signature in the distribution information file calculated and stored in the portable storage medium is decrypted using a decryption key issued for each case, and the decryption is performed. A signature verification unit that verifies the electronic signature according to whether or not the received electronic signature matches a hash value for information including the hash value, and verifies the electronic signature of the distribution information file to When it is determined that there is no alteration, a hash value is calculated for the electronic file corresponding to the distribution information file by using a hash value calculation unit, and the calculated hash value of the electronic file and the distribution information file And an authenticity determination unit that determines authenticity of the electronic file stored in the portable storage medium based on whether or not the hash value of the electronic file matches.

  Here, since the hash value of the original electronic file is stored in the distribution information file in the portable storage medium, the signature verification unit verifies the signature of the distribution information file, thereby falsifying the distribution information file. When the distribution information file is determined not to be falsified, the authenticity determination unit stores the hash value of the original electronic file in the distribution information file and the portable storage medium. By comparing with the hash value of the (electronic) electronic file to be executed, it is possible to determine the authenticity of the (electronic) electronic file only in the portable storage medium.

  In the first aspect, the authenticity determination device is further connected to a device that manages a hash value of an original electronic file as data for guaranteeing originality, and corresponds to the designated electronic file. A hash value acquisition unit that searches and acquires the hash value or history of hash values on the originality assurance data management device side, and the authenticity determination unit further uses the hash value acquisition unit to The history of the value is acquired, the acquired hash value or the history of the hash value is compared with the hash value calculated for the stored electronic file, and the authenticity for the electronic file stored in the portable storage medium It is also possible to determine.

  In this case, the hash value calculated for the electronic file stored in the portable storage medium by the authenticity determination unit is first calculated as the hash value of the original electronic file in the distribution information file stored in the same portable storage medium. It is determined whether they match, and subsequently, it is determined whether the original hash value or hash value history obtained by searching on the originality assurance data management device side matches. Even if a problem occurs, it becomes possible to analyze the suspected tampering in more detail.

  According to the present invention, since the hash value of the original electronic file is stored in the distribution information file in the portable storage medium, the distribution information file can be altered by verifying the signature of the distribution information file. When the distribution information file is determined not to be falsified, the hash value of the original electronic file in the distribution information file and the (stored) electronic data stored in the portable storage medium By comparing the hash value of the file, it is possible to determine the authenticity of the electronic file only in the portable storage medium that stores the electronic file. Thereby, for example, when the distribution information file includes a description of the electronic file in addition to the hash value of the original electronic file, it is possible to guarantee the description of the content.

  Further, according to the present invention, it is possible to determine the authenticity of the electronic file only in the portable storage medium storing the electronic file. In this case, the hash value is stored. It is possible to reduce the load on the client side that performs originality confirmation on the server device side that manages the database.

  Also, according to the present invention, the hash value calculated for the electronic file stored in the portable storage medium is first calculated as the hash value of the original electronic file in the distribution information file stored in the same portable storage medium. It is determined whether they match, and subsequently, it is determined whether the original hash value or hash value history obtained by searching on the originality assurance data management device side matches. Even if a problem occurs, it becomes possible to analyze the suspected tampering in more detail. In particular, when a history of hash values is acquired on the originality assurance data management device side, the hash value calculated for the electronic file stored in the portable storage medium is one of the hash values in the history. Since it is determined whether they match, it is possible to check not only the latest version but also the originality of the old version.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
In the following description, a file that is delivered electronically to a public institution or the like is assumed as an electronic file.

In electronic delivery, an electronic file corresponding to the case is created for each case, and the electronic file is stored (stored) for a period determined by law, for example.
In electronic delivery, the format of an electronic file created for each project is determined by law, for example, how to give a file name, how to give a business name (unusable characters, character limit), and the like. That is, a format such as “created in the PDF format and the display magnification is 100%” is determined for each electronic file of the case.

FIG. 1 is a schematic configuration diagram of an electronic file storage / utilization system according to an embodiment of the present invention.
In FIG. 1, an electronic file storage / utilization system uses a server device 10 as a device for managing data that guarantees originality (for example, a hash value for an electronic file), and a portable storage medium such as a CD-R. And a client device 20 as a device for determining the authenticity of the stored electronic file.

  The server device 10 includes a hash value calculation unit 11 that calculates a hash value, a self-signed certificate issuing unit 12 that issues a self-signed certificate in which information describing a key pair used in the item is stored, and individual item information A database 13 for storing hash values for the original electronic file, and the like. When a key pair (encoding key, decryption key) is issued by a key pair issuing unit (not shown), the self-signed certificate issuing unit 12 uses the self-signature for the key pair. A certificate is also issued.

  When the client device 20 is connected to the server device 10, for example, as illustrated in FIG. 1, the client device 20 side downloads the hash value calculation unit 21 and the signature verification unit 22 from the server device 10. Obtain and use. The key pair (encoding key and decryption key) issued for each project can be downloaded and obtained, and the information of the key pair is stored in a portable storage medium. It can also be obtained by receiving the portable storage medium.

  When the client device 20 is not connected to the server device 10, the hash value calculation unit 21 and the signature verification unit 22 are stored in a portable storage medium, and the portable storage medium is, for example, the client device 20 You may make it acquire in the client apparatus 20 side by mailing to the side.

  In any case, it goes without saying that the hash value calculation units 11 and 21 calculate the hash value based on, for example, the same hash algorithm described in the self-signed certificate.

  In the relationship with the above-described electronic delivery, for example, the server device 10 includes an ordering side of a case corresponding to an electronic file and a contractor side receiving an order for the case and delivering the electronic file corresponding to the case to the ordering source. Both functions are shown. In addition, the client device 20 is installed in a department that stores or uses an electronic file for the case, for example, and the functions of those departments are shown.

FIG. 2 is a block diagram showing a more detailed configuration of the originality assurance data management apparatus.
In FIG. 2, the originality assurance data management device 10 has a hash value calculation unit 11 that calculates a hash value for specified information, and a case corresponding to the electronic file based on the specified electronic file. The information is acquired, the hash value of the designated electronic file is calculated using the hash value calculation unit 11, and the hash value calculation unit 11 for the information composed of the calculated hash value of the electronic file and the item information is obtained. Is used to calculate the hash value, and the digital signature is obtained by encoding the hash value of the information composed of the hash value of the electronic file and the matter information using the encoding key issued for each matter. A distribution information file that is output as a distribution information file by adding its digital signature to the information composed of the hash value of the electronic file and the matter information An output unit 14, a distribution information file, and a designated electronic file can be stored in a portable storage medium 18 such as a CD-R, for example, based on an instruction from a user, A self-signed certificate issuing unit 12 that issues a self-signed certificate in which information describing the key pair to be used is stored, and a database 13 in which case information, calculated hash values, and the like are stored.

FIG. 3 is a block diagram showing a more detailed configuration of the authenticity determination device.
In the authenticity determination device 20 shown in FIG. 3, various processes are performed with reference to data in the portable storage medium 18 such as a CD-R in which the distribution information file and the electronic file described above are stored.

  The authenticity determination device 20, when a hash value calculation unit 21 that calculates a hash value for specified information and a distribution information file stored in the portable storage medium 18 are specified, Information including the hash value of the file and the matter information is acquired as a hash value calculation target, and the hash value is calculated for the calculation target using the hash value calculation unit 21 and stored in the portable storage medium 18. The electronic signature in the distribution information file is decrypted using the decryption key issued for each case, and the electronic signature is verified based on whether the decrypted electronic signature matches the hash value for the calculation target. When the signature verification unit 22 and the electronic file stored in the portable storage medium 18 are designated, the hash value calculation unit 21 is used for the electronic file. The hash value is calculated, and the authenticity of the electronic file stored in the portable storage medium 18 is determined based on whether or not the calculated hash value of the electronic file matches the hash value of the electronic file in the distribution information file. Authenticity determination unit 23.

  The authenticity determination device 20 may be configured to be connected to the originality assurance data management device 10. In that case, the authenticity determination device 20 transmits a search instruction to the originality assurance data management device 10 via the interface unit 26, and the hash value or hash value of the case corresponding to the above-described designated electronic file is transmitted. A hash value acquisition unit 25 that searches and acquires the history on the originality assurance data management device 10 side may be selectively provided. In this case, the authenticity determination unit 23 uses the hash value acquisition unit 25 to acquire a hash value or a history of hash values, and stores the acquired hash value or history of hash values and the portable storage medium 18 described above. The authenticity of the electronic file stored in the portable storage medium 18 is further determined based on whether or not the calculated hash value matches the stored electronic file.

  On the premise of such connection between the authenticity determination device 20 and the originality assurance data management device 10, the originality assurance data management device 10 corresponds to the hash value acquisition unit 25 provided on the authenticity determination device 20 side, As shown in FIG. 2, based on the search instruction received from the authenticity determination device 20 via the interface unit 16, that is, the information in the database 13 is specified using information specifying a case included in the search instruction, for example, a management number as a key. A search unit 15 that searches and acquires a hash value or a history of hash values of an electronic file corresponding to the key information as a search result, and transmits the search result to the authenticity determination device side via the interface unit 16. Selectively prepare.

FIG. 4 is a diagram showing the configuration of the database 13 in the originality assurance data management device 10 together with data examples.
As shown in FIG. 4, the database 13 includes a “management number (serial_no)” assigned to each item as a result of automatic numbering inside the system, drawings, documents, combinations of drawings and documents, and the like. “Class” that indicates the classification of the matter information, “Name” that indicates the name of the matter information, “Hakkoumoto” that indicates the department that issued the matter, The “issuer (hakkoutanto)” indicating the person in charge at the issuing department, the “distribution destination (haifusaki)” indicating the distribution destination when electronic files related to the matter are distributed in a limited manner, and the information in the database 13 “Update date (kousin_date)” indicating the update date, for example, the ordering department has ordered the matter, the electronic file corresponding to the matter has been format checked, and the hash value of the electronic file corresponding to the matter Calculated "Status (status)" that indicates the progress status of the matter, such as the status of the status, "certificate URL (cert_url)" that indicates the URL of the certificate, and the serial number assigned to the certificate "Certificate serial number (serial)" indicating the number, "Valid period (start) (valid_start)" and "Valid period (end) (valid_end)" indicating the start and end of the valid period, respectively, Consists of “hash value (hash)” indicating the hash value of the latest electronic file of the matter, “old hash value 1 (bak_hash1)” indicating the hash value of the previous electronic file of the matter, etc. Is done.

  In addition, for example, after the first edition is delivered, the contents of the electronic file are slightly changed to reflect the changes that accompany it, and the typographical / The version may be changed by correcting the omission, but as shown in the figure, the history information is also stored in the database 13 for the hash value calculated for each version of the electronic file. For example, it is stored in association with the case management number.

  For example, when a part of the registered content is modified for a specific use and the existing one is used as it is, that is, when a branch occurs in the history of the electronic file, the point at which the branch occurs To re-register as another matter.

  As will be described later, since the distribution information file and the electronic file are stored in one folder, by referring to the management number in the distribution information file in the same folder, the item corresponding to the electronic file is stored. Know the control number.

FIG. 5 is a diagram showing an outline of processing on the originality assurance data management apparatus 10 side that manages the hash value of electronic data.
5, first, in step S101, information is registered for each case in the database 13 of FIG. 2 by the user. Also, a key pair (encoding and decryption key) is issued for each case together with the self-signed certificate by the self-signed certificate issuing unit 12 of FIG. Before and after the processing performed in step S101, an electronic file for which a hash value as originality guarantee data is calculated is received at this department.

  In the subsequent step S102, the received electronic file is designated by the user, and a hash value (EF_H1) is calculated by the hash value calculation unit 11 of FIG. 2 for the designated electronic file.

  In step S103, the hash value (EF_H1) calculated in step S102 is used as the hash value (DB_H) for storing the database (DB), and is stored in the database 13 of FIG. Stored in association.

  In step S104, a distribution information file (Distribution Information File, DF) is generated, and the hash value (EF_H1) calculated in step S102 is used as a hash value (DF_H) for storing the distribution information file (DF). Stored in the distribution information file. At this time, for example, information stored in the database 13 in association with the management number of the case is also stored in the distribution information file.

  In step S105, an electronic signature is performed on the distribution information file obtained in step S104 using the self-signed certificate (encoding key) issued in step S101. That is, with respect to the contents of the distribution information file obtained in step S104 (the hash value of the electronic file designated in step S102, information about the case corresponding to the designated electronic file), the hash value calculation unit 11 in FIG. Then, a hash value is calculated, and the calculated hash value is encoded using the self-signed certificate (encoding key). This electronic signature is added to the distribution information file obtained in step S104, and a distribution information file as a finished product is output.

  The distribution information file and the electronic file are stored by a user in a folder indicated by a rectangle in the drawing, and further stored in a portable storage medium such as a CD-R by the user. The portable storage medium is distributed to a department that stores and uses the electronic file.

Moreover, said step S102-S105 is performed by the distribution information file output part 14 of FIG. 2, for example.
FIG. 6 is a diagram for explaining processing after step S102 in FIG.

FIG. 7 is a diagram showing the configuration of the distribution information file together with data examples.
In FIG. 7, for example, individual item information in the database 13 of FIG. 6 is divided into individual information and certificate information. For example, the distribution information file acquires individual information and certificate information from the data shown in FIG.

FIG. 8 is a diagram showing an outline of processing on the authenticity determination device 20 side that determines the authenticity of electronic data.
In FIG. 8, prior to each processing, the portable storage medium 18 in which the distribution information file and the electronic file are stored is received by the authenticity determination device 20 side.

  In step S201, signature verification is performed on the distribution information file stored in the received portable storage medium 18. That is, the distribution information file stored in the portable storage medium 18 is designated by the user, and the information composed of the hash value (DF_H) of the electronic file in the designated distribution information file and the matter information is stored as the hash value. Obtained as a calculation target, a hash value is calculated for the calculation target using the hash value calculation unit 21 of FIG. 3, and an electronic signature in the distribution information file stored in the portable storage medium 18 is issued for each case. The digital signature is verified based on whether or not the decrypted electronic signature matches the hash value for the calculation target.

If it is determined in step S201 that the decrypted electronic signature does not match the hash value for the calculation target, the process proceeds to step S205, where a message such as the following is displayed on the monitor (not shown) of the authenticity determination device 20, for example. Is displayed.
"There is a suspicion that the distribution information file has been tampered with, making the electronic file unusable."
On the other hand, if it is determined in step S201 that the decrypted electronic signature matches the hash value for the calculation target, it is determined that the distribution information file has not been tampered with, and the process proceeds to step S202.

  In step S202, a hash value (using a hash value calculation unit 21 in FIG. 3 is used for the electronic file stored in the same folder in the portable storage medium 18 corresponding to the distribution information file that has not been altered. EF_H2) is calculated. In step S203, the calculated hash value (EF_H2) of the electronic file is compared with the hash value (DF_H) of the electronic file stored in advance in the distribution information file.

If it is determined in step S203 that the calculated hash value (EF_H2) of the electronic file does not match the hash value (DF_H) of the electronic file stored in advance, the process proceeds to step S205, where: Is displayed on a monitor (not shown) of the authenticity determination device 20, for example.
“The electronic file stored on the storage medium is suspected of being tampered with, and the electronic file cannot be used.”
On the other hand, if it is determined in step S203 that the calculated hash value (EF_H2) of the electronic file matches the hash value (DF_H) of the electronic file stored in advance, it is stored in the portable storage medium 18. The electronic file is assumed not to be falsified, and the process proceeds to step S204.

  In step S204, the hash value acquisition unit 25 in FIG. 3 searches and acquires the hash value of the matter corresponding to the electronic file specified in step S202 or the history of the hash value on the originality assurance data management apparatus 10 side, The acquired hash value or a history of hash values is compared with the hash value (EF_H2) of the electronic file calculated in step S202.

If it is determined in step S204 that the acquired hash value or the hash value history does not match the calculated hash value (EF_H2) of the electronic file, the process proceeds to step S205, where a message such as the following message is displayed. For example, it is displayed on the monitor (not shown) of the authenticity determination device 20.
“The hash value corresponding to the electronic file stored on the storage medium is currently unregistered in the database on the management device. The version number is old and has already been deleted, or the new version has not yet been registered in the database. In addition, there is a suspicion that tampering has been performed on the distribution information file and the electronic file in the storage medium so that the verification in the storage medium does not make any alteration. I can't. "
On the other hand, if it is determined in step S204 that the acquired hash value or the history of hash values matches the calculated hash value (EF_H2) of the electronic file, the authenticity of the electronic file has been confirmed. For example, an electronic file whose authenticity is confirmed is used in a department that stores and uses data.

  In particular, when a history of hash values is acquired on the originality assurance data management device side in step S204, the hash value (EF_H2) calculated for the electronic file stored in the portable storage medium is included in the history. Therefore, it is possible to check the originality of the old version as well as the latest version. For example, referring to the position (subscript) of the array in which the hash value that matches the calculated hash value (EF_H2) is stored, information such as “previous version”, “previous version”, etc. Is obtained.

  Note that the above step S201 is performed by, for example, the signature verification unit 22 in FIG. 3, steps S202 and S203 are performed by the authenticity determination unit 23 in FIG. 3, and step S204 is performed by the authenticity determination unit 23 in FIG. This is done by activating the value acquisition unit 25.

FIG. 9 is a diagram showing step S205 in FIG. 8 in more detail as steps S206 to S208.
As described above, in the present embodiment, as shown in step S205 of FIG. 8 or steps S207 and S208 of FIG. 9, even if there is a suspicion of falsification in the electronic information file, the suspicion of the tampering is more detailed. It becomes possible to analyze.

  In this embodiment, since the hash value of the original electronic file is stored in the distribution information file in the portable storage medium, the signature of the distribution information file is verified, and the distribution information file can be altered. When the possibility is determined and the distribution information file is not falsified, it is stored in the hash value of the original electronic file in the distribution information file and in the portable storage medium (of the copy) By comparing the hash value of the electronic file, it is possible to determine the authenticity of the (copy) electronic file only in the portable storage medium.

FIG. 10 is a diagram illustrating an example of a storage medium that stores a program that causes a computer to execute each process according to the present embodiment.
As shown in FIG. 10, the storage medium includes a portable storage medium 46 detachable from a medium drive device 47 such as a CD-ROM or a flexible disk (MO, DVD, removable hard disk or the like), a network, and the like. A storage unit (database or the like) 42 in an external apparatus (server or the like) to which the program is transmitted via the line 43 and a memory (RAM or hard disk or the like) 45 in the main body 44 of the information processing apparatus 41 are included. A program for performing each process of the present embodiment is loaded from the storage medium to the memory 45 in the main body 44 and executed.

  In the above description, the distribution information file is generated on the originality assurance data management apparatus 10 side in FIG. 2, but the department that orders the project and the department that receives the order are installed in different locations. Is also possible. In this case, the distribution information file is generated at the department that receives the order. The method is as follows, for example.

  First, on the ordering side, item information in the database 13 in FIG. 2, a format check program for electronic delivery, a hash value calculation unit 11, a distribution information file output unit 14, a key for encoding the item, Are stored in a portable storage medium (such as a CD-R) and sent to the order receiving side.

  Upon receipt of this portable storage medium, the order receiving side creates an electronic file corresponding to this case, or orders it for others. Then, the format check is performed on the created electronic file using the above-described format check program for electronic delivery. A distribution information file is created by the distribution information file output unit 14 for the electronic file that has passed this format check, but instead of acquiring the corresponding item information from the database 13 as shown in FIG. Acquires information on matters already stored in the portable storage medium.

  In this way, the distribution information file and the electronic file are stored in one folder in the portable storage medium. A plurality of such portable storage media are created by copying and ordered from the order receiving side. Delivered to the side. On the ordering side, for example, it is assumed that the electronic file of the original is stored in one of them, and the portable storage medium itself is stored, or the contents of the portable storage medium are stored in other storage means. Copy and store in (memory). The original electronic file is stored in, for example, another department that is neither the server apparatus nor the client apparatus in FIG. 1, but can be stored in a database in the server apparatus.

Moreover, although the above description was performed about the electronic file used for the electronic delivery in a public institution, the application object of this invention is not limited to this.
For example, when considering software development, one system is usually developed by a plurality of workers. In such a case, each worker proceeds with development while sharing work in units of functions and modules. However, it is necessary to perform development based on specifications of the same version number.

  If the specifications are revised during development, but are not applied immediately, work based on the old version for a while and apply the latest version when switching is possible. There are things to do.

  In other words, for the worker, the latest version of the specification does not always match the specification used in the work. For workers, when working based on a specification of a specific version that is not necessarily the latest version, check the version of the specification and check that the contents of the specification have not been tampered with. It will be necessary.

  When the present invention is applied to such software development, the version number of the specification itself can be managed and whether or not falsification has been performed. Therefore, the version number can be managed and whether or not falsification has been confirmed for the specifications used in the work.

1 is a schematic configuration diagram of an electronic file storage / utilization system according to an embodiment of the present invention. It is a block diagram which shows the more detailed structure of an originality guarantee data management apparatus. It is a block diagram which shows the more detailed structure of an authenticity determination apparatus. It is a figure which shows the structure of the database in an originality guarantee data management apparatus with a data example. It is a figure which shows the process outline | summary in the originality guarantee data management apparatus side which manages the hash value of electronic data. It is a figure explaining the process after step S102 in FIG. It is a figure which shows the structure of a distribution information file with a data example. It is a figure which shows the process outline | summary in the authenticity determination apparatus side which determines the authenticity of electronic data. It is the figure which showed step S205 of FIG. 8 in detail. It is a figure which shows the example of a storage medium.

Explanation of symbols

10 Originality assurance data management device (server device)
11, 21 Hash value calculation unit 12 Self-signed certificate issuing unit 13 Database 14 Distribution information file output unit 15 Search unit 16, 26 Interface unit 20 Authenticity determination device (client device)
22 signature verification unit 23 authenticity determination unit 25 hash value acquisition unit

Claims (12)

In the authenticity determination device that determines the authenticity of the electronic file corresponding to the matter,
A hash value calculation unit for calculating a hash value for the specified information;
A distribution information file composed of information including a hash value for the electronic file, and an electronic signature obtained by encoding the information including the hash value using an encoding key issued for each case; For a portable storage medium storing the electronic file, when a distribution information file stored in the portable storage medium is designated, a hash value calculation unit is used for information including the hash value in the file To calculate a hash value, decrypt the electronic signature in the distribution information file stored in the portable storage medium using a decryption key issued for each case, and the decrypted electronic signature; A signature verification unit that verifies the electronic signature according to whether a hash value for information including the hash value matches;
When it is determined that the distribution information file has not been tampered with by verifying the electronic signature of the distribution information file, a hash value is calculated using a hash value calculation unit for the electronic file corresponding to the distribution information file And an authenticity determination unit for determining the authenticity of the electronic file stored in the portable storage medium based on whether or not the calculated hash value of the electronic file matches the hash value of the electronic file in the distribution information file; And an authenticity determination device. The authenticity determination device is further connected to a device for managing a hash value of an original electronic file as data for guaranteeing originality,
A hash value acquisition unit that acquires and acquires a hash value of a matter corresponding to the specified electronic file or a history of hash values on the originality assurance data management device side;
The authenticity determination unit further acquires a hash value or a hash value history using the hash value acquisition unit, and is calculated for the acquired hash value or hash value history and the stored electronic file. 2. The authenticity determination device according to claim 1, wherein the authenticity determination apparatus determines whether the electronic file stored in the portable storage medium is authentic by comparing with a hash value.   2. The authenticity determination device according to claim 1, wherein the distribution information file and the electronic file are stored in the same folder in the portable storage medium. In a system for storing and using electronic files,
A first hash value calculation unit that calculates a hash value for the specified information, and acquires information about a matter corresponding to the electronic file based on the specified electronic file, and the first hash value calculation unit The hash value of the designated electronic file is calculated using the first hash value calculation unit for the information composed of the calculated hash value of the electronic file and the matter information, and the hash value is calculated. The hash value of the electronic file and the matter information are obtained by encoding the hash value of the information composed of the hash value of the electronic file and the matter information using an encoding key issued for each matter to obtain an electronic signature. A distribution information file output unit that outputs the distribution information file by adding the electronic signature to the information composed of the distribution information file, the specified information And originality assurance data management apparatus having a storage control unit capable of storing the electronic file in a portable storage medium,
A second hash value calculation unit that calculates a hash value for the specified information, and when a distribution information file stored in the portable storage medium is specified, a hash value of the electronic file in the file, In the distribution information file stored in the portable storage medium, the information composed of the item information is acquired as the hash value calculation target, the hash value is calculated for the calculation target using the second hash value calculation unit. The electronic signature is decrypted by using a decryption key issued for each case, and the electronic signature is verified based on whether or not the decrypted electronic signature matches the hash value for the calculation target Corresponding to the distribution information file if the distribution information file is not falsified by verifying the electronic signature of the distribution information file with the verification unit A hash value is calculated for the electronic file using the second hash value calculation unit, and the hash value of the calculated electronic file and the hash value of the electronic file in the distribution information file are equal to each other. An authenticity determination device having an authenticity determination unit for determining authenticity of an electronic file stored in a portable storage medium;
An electronic file storage and utilization system characterized by comprising: The authenticity determination device is further connected to the originality assurance data management device,
A hash value acquisition unit that acquires and acquires a hash value of a matter corresponding to the specified electronic file or a history of hash values on the originality assurance data management device side;
The authenticity determination unit further acquires a hash value or a hash value history using the hash value acquisition unit, and is calculated for the acquired hash value or hash value history and the stored electronic file. 5. The electronic file storage / utilization system according to claim 4, wherein authenticity of the electronic file stored in the portable storage medium is determined by comparing with a hash value. In the authentication program for causing a computer to execute processing for determining the authenticity of an electronic file corresponding to a matter,
A distribution information file composed of information including a hash value for the electronic file, and an electronic signature obtained by encoding the information including the hash value using an encoding key issued for each case; When a distribution information file stored in the portable storage medium is specified for the portable storage medium in which the electronic file is stored, a hash value is calculated for information including the hash value in the file When,
Decrypting the electronic signature in the distribution information file stored in the portable storage medium using a decryption key issued for each case;
Verifying the electronic signature based on whether the decrypted electronic signature matches a hash value for information including the hash value;
A step of calculating a hash value for an electronic file corresponding to the distribution information file when the distribution information file is not falsified by verifying an electronic signature of the distribution information file;
A first authenticity determining step of determining authenticity of the electronic file stored in the portable storage medium based on whether or not the calculated hash value of the electronic file matches the hash value of the electronic file in the distribution information file; , Causing the computer to execute authentication. The computer is further connected to a device for managing a hash value of an original electronic file as data for guaranteeing originality,
Obtaining and obtaining a hash value of a matter corresponding to the designated electronic file or a history of hash values on the originality assurance data management device side;
A second authenticity for comparing the acquired hash value or a history of hash values with a hash value calculated for the stored electronic file to determine the authenticity of the electronic file stored in the portable storage medium The authenticity determination program according to claim 6, further causing the computer to execute a determination step. In a storage medium used in a computer that performs processing to determine the authenticity of an electronic file corresponding to a matter,
A distribution information file composed of information including a hash value for the electronic file, and an electronic signature obtained by encoding the information including the hash value using an encoding key issued for each case; When a distribution information file stored in the portable storage medium is specified for the portable storage medium in which the electronic file is stored, a hash value is calculated for information including the hash value in the file When,
Decrypting the electronic signature in the distribution information file stored in the portable storage medium using a decryption key issued for each case;
Verifying the electronic signature based on whether the decrypted electronic signature matches a hash value for information including the hash value;
A step of calculating a hash value for an electronic file corresponding to the distribution information file when the distribution information file is not falsified by verifying an electronic signature of the distribution information file;
A first authenticity determining step of determining authenticity of the electronic file stored in the portable storage medium based on whether or not the calculated hash value of the electronic file matches the hash value of the electronic file in the distribution information file; A computer-readable portable storage medium storing an authentication program for causing the computer to execute the above. The computer is further connected to a device that manages a hash value of an original electronic file as data that guarantees originality, and the authenticity determination program includes:
Obtaining and obtaining a hash value of a matter corresponding to the designated electronic file or a history of hash values on the originality assurance data management device side;
A second authenticity for comparing the acquired hash value or a history of hash values with a hash value calculated for the stored electronic file to determine the authenticity of the electronic file stored in the portable storage medium 9. The storage medium for an authenticity determination program according to claim 8, further causing the computer to execute a determination step. A distribution information file composed of information including a hash value for an electronic file, and an electronic signature obtained by encoding the information including the hash value using an encoding key issued for each case;
A portable storage medium storing the electronic file. In the method in which the computer performs the process of determining the authenticity of the electronic file corresponding to the matter,
A distribution information file composed of information including a hash value for the electronic file, and an electronic signature obtained by encoding the information including the hash value using an encoding key issued for each case; For a portable storage medium storing the electronic file, when a distribution information file stored in the portable storage medium is designated, a hash value is calculated for information including the hash value in the file,
Decrypting the electronic signature in the distribution information file stored in the portable storage medium using a decryption key issued for each case;
Verifying the electronic signature by checking whether the decrypted electronic signature matches a hash value for the information including the hash value;
When it is determined that the distribution information file has not been tampered with by verifying the electronic signature of the distribution information file, a hash value is calculated for the electronic file corresponding to the distribution information file,
The authenticity of the electronic file stored in the portable storage medium is determined based on whether or not the calculated hash value of the electronic file matches the hash value of the electronic file in the distribution information file. Authentication method. The computer is further connected to a device for managing a hash value of an original electronic file as data for guaranteeing originality, and
A hash value of a matter corresponding to the specified electronic file or a history of hash values is obtained by searching on the originality assurance data management device side,
Comparing the acquired hash value or a history of hash values with a hash value calculated for the stored electronic file to determine the authenticity of the electronic file stored in the portable storage medium; The authenticity determination method according to claim 11, wherein:

Images