JP2006094373A - Signed object validity suspension apparatus, verification apparatus, validity suspension method and verification method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To verify the reliability of a signed printed matter or the like for a long period of time. <P>SOLUTION: In a signed object validity suspension apparatus, a substitutive expression is extracted and decoded from a printed matter or electronic print image signed with the substitutive expression that can be decoded, to acquire substitutive expression information, and an electronic signature or a time stamp signature contained in that substitutive expression information is verified. On condition that the validity of an existent signature is verified, a new time stamp signature is then acquired, a substitutive expression is generated for information containing a new time stamp signature, and the substitutive expression is printed on the printed matter or given to the electronic print image. In a signed object verification apparatus of, a substitutive expression is extracted and decoded from a signed object which is processed by the validity suspension apparatus signed with the substitutive expression that can be decoded, to acquire substitutive expression information, an electronic signature or a novel or former time stamp signature contained in the substitutive expression information is verified, and the result of the verification is outputted. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an expiration date extension device, a verification device, an expiration date extension method, and a verification method for a signature grant, and extends, for example, an expiration date that can be verified to a printed matter protected by an electronic signature or a time stamp signature. The present invention relates to an apparatus and method, and an apparatus and method for verifying a printed matter with an extended deadline.

In recent years, paper is being used as a means for transmitting and storing important information, although paperlessness has been advocated. However, in the transmission and storage of information on paper, there is a problem of how to ensure the authenticity of the printed content. As a countermeasure against this, Japanese Patent Laid-Open No. 2004-228688 discloses that the print content data and the electronic signature for the print content are printed with a bar code that is an electronically readable substitute expression, thereby extracting the print content electronic data. A method that enables verification of its authenticity is disclosed.
JP 2002-62803 A

  In the disclosed technique of Patent Document 1, it is possible to verify authenticity such as non-falsification proof and creator's identity by applying an electronic signature to printed matter. Is months or years, and after the expiration date, authenticity cannot be verified.

  As one of the measures for extending the validity period for the electronic signature, a time stamp signature can be given. This also has a validity period, which is generally several years. Therefore, to realize long-term storage, it is necessary to update with a new time stamp signature before the expiration date.

  The present invention has been made in consideration of the above points, and provides an apparatus and method that enables verification of authenticity of a printed matter with a signature over a long period of time and enables long-term storage of the printed matter. It is what I tried to provide.

  A first aspect of the present invention is a signature grant verification period extension device applied to a system that enables verification of authenticity by giving a signature to a printed matter or an electronic print image, wherein (1) the signature is A substitute expression information acquisition means for acquiring at least one substitute expression from the attached signature provided by the decipherable substitute expression and decoding it to obtain the substitute expression information; and (2) included in the acquired substitute expression information. (3) a new time stamp signature acquisition means for acquiring a new time stamp signature on the condition that the validity of the existing signature is verified; and (4) A substitute expression generating means for generating a substitute expression for information including at least a new time stamp signature; and (5) printing the generated substitute expression on a printed material, or And a new generation substitute representation applying unit for applying the electronic print image, characterized in that to extend the effective verification of the original period signed add new timestamp signature for information including the signature.

  The second aspect of the present invention is a signature grant verification apparatus applied to a system that enables verification of authenticity by giving a signature to a printed matter or an electronic print image. Substitute expression information acquisition means for acquiring substitute expression information by extracting and decoding at least the substitute expression from the signature grant processed by the expiration date extension device of the first aspect of the present invention, which is assigned by expression; (2 And (3) a signature verification unit that verifies an electronic signature and old and new time stamp signatures included in the obtained substitute expression information; and (3) a verification result output unit that outputs a verification result.

  A third aspect of the present invention is a signature grant verification period extension method applied to a system that enables verification of authenticity by giving a signature to a printed matter or an electronic print image, wherein (1) the signature is A substitute expression information acquisition step of obtaining substitute expression information by extracting at least the substitute expression from the above-mentioned signature grant attached by a decodable substitute expression, and (2) included in the acquired substitute expression information An existing signature verification process for verifying a digital signature or a time stamp signature, (3) a new time stamp signature acquisition process for acquiring a new time stamp signature on the condition that the validity of the existing signature is verified, and (4) A substitute expression generation step of generating a substitute expression for information including at least a new time stamp signature; and (5) printing the generated substitute expression on a printed material, or And a new generation substitute representation imparting step of imparting to the electronic print image, characterized in that to extend the effective verification of the original period signed add new timestamp signature for information including the signature.

  According to a fourth aspect of the present invention, there is provided a signature grant verification method applied to a system capable of verifying authenticity by giving a signature to a printed matter or an electronic print image. A substitute expression information acquisition step of obtaining at least a substitute expression from the signature grant processed by the expiration date extension apparatus of the first aspect of the present invention, deciphering and acquiring the substitute expression information; (2) And (3) a signature verification step for verifying an electronic signature and old and new time stamp signatures included in the obtained substitute expression information, and (3) a verification result output step for outputting a verification result.

  ADVANTAGE OF THE INVENTION According to this invention, authenticity verification of the printed matter etc. with which the signature was provided is enabled over a long period, and long-term preservation | save of printed matter etc. is attained.

(A) First Embodiment Hereinafter, a first embodiment according to an apparatus and method for extending a validity period of a signature grant according to the present invention will be described with reference to the drawings.

(A-1) Configuration of the First Embodiment FIG. 1 is a block diagram showing a functional configuration of a signature grant validity period extension device according to the first embodiment. The signature extension expiry device of the first embodiment is applied to an information processing device such as a personal computer having a communication function with an external device connected to an image scanner or printer, for example. Although it is constructed by installing the extension program, it can be functionally represented in FIG. Here, the installation method of the expiration date extension program is not questioned. For example, it may be installed from a recording medium such as a CD-ROM, may be installed by downloading from another device, or may be input using a keyboard or the like.

  The apparatus 100 for extending the validity period of a signature grant according to the first embodiment includes a paper reading unit 101, a barcode decoding unit 102, a signature verification unit 103, a time stamp signature acquisition unit 104, a barcode generation unit 105, and a printing unit 106. Have.

  The paper surface reading unit 101 reads at least a two-dimensional barcode portion (see FIG. 4 described later), which is a signature information portion printed on a signed printed matter, and converts it into image data. For example, an image scanner can be applied, and a two-dimensional barcode portion may be automatically cut out from the obtained image data, or an operator may cut out. It is also possible to use a two-dimensional barcode reader or the like.

  The barcode decoding unit 102 is a part that converts (decodes) the two-dimensional barcode read by the paper reading unit 101 into electronic data (see FIG. 3 described later). For example, the CPU decodes the barcode by executing the corresponding software part. Note that a two-dimensional barcode reader as the paper reading unit 101 may also execute this decoding function.

  The signature verification unit 103 is a part that verifies an electronic signature, a time stamp signature, and the like of the electronic data acquired by the barcode decoding unit 102. For example, the CPU performs verification by executing the corresponding software part.

  When the signature verification unit 103 verifies, the time stamp signature acquisition unit 104 communicates with an external time stamp signature server provided by a certificate authority and acquires a new time stamp signature for extending the expiration date. It is a part to do. For example, a new time stamp signature is acquired by executing the corresponding software part by the CPU.

  The barcode generation unit 105 is a part that converts the new timestamp signature acquired by the timestamp signature acquisition unit 104 into a two-dimensional barcode image. For example, the CPU executes the corresponding software part to convert the new time stamp signature into a two-dimensional barcode image.

  The printing unit 106 prints the two-dimensional barcode image generated by the barcode generation unit 105 at a predetermined position on the original signed printed material. For example, a printer (concept including a printer driver), a printer, A multifunction device having a function and an image scanner function can be applied. The operator may set the printed matter with a signature to be printed at the printing position of the printing unit 106, and automatically provide the signed printed matter with a transport mechanism between the paper reading unit 101 and the printing unit 106. You may make it move to the printing position of the printing part 106 from the reading part 101. FIG.

  FIG. 4 is an explanatory diagram illustrating an example of a signed printed material that is a processing target of the expiration date extension apparatus according to the first embodiment. This printed matter with a signature is an example in which data of print contents and an electronic signature are printed with a two-dimensional barcode.

  In the example shown in FIG. 4, print data is printed on a sheet (printed product with signature) 401 in the form of an image 402 that can be visually confirmed by a human, such as text, and a two-dimensional barcode 403 that can be electronically extracted. ing. An expiration date or the like is printed on the right side of the two-dimensional barcode 403, but this is optional information for facilitating management and is not essential. Further, an area for extending the expiration date is opened in the lower right portion in the form of a margin 404. Note that the position of the margin 404 does not have to be the lower right, and may be any position.

  The two-dimensional barcode 403 includes information of the credential data 300 having a data structure illustrated in FIG. The credential data 300 includes, for example, control data 301 including an ID 302 indicating the type of service and location information 303 of the margin 404, print data 304 and an electronic signature 305 corresponding thereto, a time stamp signature 309 corresponding to the electronic signature 305, and the like. It is out. The electronic signature 305 includes a signature value 306 and a certificate 307, for example. The time stamp signature 309 includes, for example, a hash value 310, date / time information 311, and an electronic signature 312. Note that the time stamp signature 309 is optional and not required. Note that the control data 301 can be included in the target of the electronic signature 305, and the control data 301 and the print data 304 can be included in the target of the time stamp signature 309.

  FIG. 5 shows an example of the printed material after the expiration date is extended for the signed printed material shown in FIG.

  In FIG. 5, a sheet 501 is obtained by additionally printing a two-dimensional barcode 505 on the margin 404 of the printed material 401 shown in FIG. Note that the validity verification period and the like are printed on the right side of the additional two-dimensional barcode 505, but this is optional information for facilitating management and is not essential. The additional two-dimensional barcode 505 includes information shown in the additional data 320 in FIG.

  The additional data 320 is, for example, control data 321 including an ID 322 indicating the type of service, and a new time stamp signature 323 for the time stamp signature 309. It is possible to include information such as the print data 304 and the electronic signature 305 in the target of the time stamp signature 323.

(A-2) Operation of the First Embodiment Next, the operation (the expiration date extending method of the first embodiment) in the signature grant expiration date extension device of the first embodiment will be described.

  First, only the outline of a method for generating a signed printed material such as that shown in FIG. Note that the method for generating the signed printed material as shown in FIG. 4 is the same as the conventional method and does not form the feature of the first embodiment, but there are items that affect the expiration date extension operation. Only the outline will be explained. The generation of the signed printed material is executed by a generating device for the signed printed material (hereinafter referred to as a generating device as appropriate), and the generated device for the signed printed material is a personal computer that constitutes the expiration date extension device for the signed printed material. The same information processing apparatus may be used properly.

  First, the generation apparatus acquires the print data 304. The print data 304 is generated, for example, by reading a document file stored in a personal computer or acquiring data from a database. Next, the generation apparatus generates an image 402 that can be visually confirmed by a person such as text based on the print data 304.

  Subsequently, the generation device generates a hash value of the print data 304, generates a signature value 306 by encrypting the hash value using the secret key of the document creator, and public information for specifying the public key 308. An electronic signature 305 to which the key certificate 307 is attached is generated. It is also possible to store information such as the certification authority name and serial number for specifying the public key certificate 307 instead of the public key certificate 307.

  Further, the generation device generates a hash value 310 of the generated electronic signature 305, sends the generated hash value 310 to a time stamp signature server that provides a time stamp signature service, and receives a time stamp signature 309 from the time stamp signature server. receive. The contents of the time stamp signature 309 differ depending on the time stamp signature service, but are generally as follows. That is, the time stamp signature 309 is sent to the hash value 310, the correct date and time information 311 at that time, and the public key 315 is added to the signature value 313 obtained by encrypting the hash value corresponding thereto with the private key of the time stamp signature service. In general, it includes an electronic signature 312 with a public key certificate 314 for identification.

  Next, the generating apparatus generates control data 301 including an ID 302 indicating the type of service, location information 303 of margin 404, and the like, and the control data 301, print data 304, electronic signature 305, and time stamp signature 309 are collected. Data 300 is generated. Then, the credential data 300 is converted into a format that can be converted into a barcode by a method such as Base64, and a barcode image 403 is generated based on the converted data.

  Finally, a signed printed matter 401 is generated by printing an image 402 and a barcode image 403 that can be visually confirmed by a person on paper.

  FIG. 2 is a flowchart showing an operation of extending the expiration date of the printed matter with the signature generated as described above by an expiration date extension device (hereinafter referred to as an extension device as appropriate) 100.

  First, the extension device 100 acquires an image of a paper surface (printed material with a signature) by the paper surface reading unit 101, and sends it to the barcode analysis unit 102 (step 201). Next, the extension device 100 uses the barcode decoding unit 102 to detect and decode the barcode from the paper image acquired in the paper reading step 201 to decode it into electronic data. Further, when printing the signed printed matter Decryption is performed by using the method such as Base64, and the credential data 300 is acquired and sent to the signature verification unit 103 (step 202).

  The signature verification unit 103 first verifies the time stamp signature 309 included in the signature data 300 acquired in the barcode decoding step 202 as follows (step 203). The public key certificate 314 of the time stamp signature service is extracted from the time stamp signature 309 and the validity of the public key certificate 314 is not expired or the public key certificate 314 has been revoked is verified. Do. If the signature verification unit 103 determines that the signature is not valid, the signature verification unit 103 displays that effect on the screen and ends the series of processing. On the other hand, when the signature verification unit 103 determines that the signature is valid, the signature verification unit 103 decrypts the signature value 313 included in the time stamp signature 309 with the public key 315 included in the public key certificate 314, and decrypts the signature value 313. The hash value generated based on the date / time information 311 is compared. If the values do not match, the signature verification unit 103 determines that the falsification has been made, displays that fact on the screen, and ends the series of processing. If they match, the signature verification unit 103 determines whether the hash value of the electronic signature 305 matches the hash value 310 included in the time stamp signature 309. If the values do not match, the signature verification unit 103 determines that the falsification has been made, displays that fact on the screen, and ends the series of processing. If they match, it is determined that the time stamp signature 309 is valid, and the process proceeds to verification of the electronic signature 305 as described below (step 204).

  The signature verification unit 103 first verifies the validity of whether the public key certificate 307 has expired at the time of the date / time information 311 included in the time stamp signature 309. If it is determined that it is not valid, a message to that effect is displayed and the series of processing ends. If the signature verification unit 103 determines that the signature is valid, the signature verification unit 103 further decrypts the signature value 306 with the public key 308 included in the document creator's public key certificate 307, and the hash value for the print data 304 Is determined to match. If the values do not match, the signature verification unit 103 determines that the falsification has been made, displays that fact on the screen, and ends the series of processing. If they match, it is determined that the electronic signature 305 is valid, and the credential data 300 is sent to the time stamp signature acquisition unit 104.

  The timestamp signature acquisition unit 104 to which the credential data 300 is sent obtains a hash value 324 for the timestamp signature 309 included in the credential data 300, sends the generated hash value 324 to the timestamp signature server, and the timestamp The time stamp signature 323 is received from the signature server and sent to the barcode generation unit 105 (step 205). Although the contents of the time stamp signature 323 vary depending on the time stamp signature service, as shown in FIG. 3, the transmitted hash value 324, the accurate date and time information 325 at that time, and the hash value corresponding thereto are converted into the time stamp signature. It is common to include an electronic signature 326 to which a public key certificate 328 for specifying a public key 329 is added to a signature value 327 encrypted with a service private key.

  Upon receiving the time stamp signature 323, the barcode generation unit 105 generates a barcode image 505 as follows (step 206). The barcode generation unit 105 generates additional data 320 obtained by adding control data 321 including an ID 322 for specifying a service to the received time stamp signature 323. Next, this data is converted into a format that can be converted into a barcode by a method such as Base64, and a barcode image 505 is generated based on the converted data and sent to the printing unit 106.

  The printing unit 106 prints the barcode image 505 on the paper 401 read in the paper reading step 201. Note that the print position is determined using the location information 303. It is also desirable to write (print) the valid verification period in a format that can be visually confirmed by a person such as text next to the barcode. The conveyance of the paper 401 from the paper reading unit 101 to the printing unit 106 is preferably automated, but can be performed by the user. An additional print of the barcode image 505 becomes a sheet 501 with an extended expiration date.

  Note that it is possible to extend the period multiple times by giving a new time stamp signature to the last time stamp signature.

(A-3) Effects of First Embodiment According to the first embodiment, the following effects can be achieved.

  According to the electronic signature 305, during the expiration date of the electronic signature 305, the print data 304 is created by the creator of the document that is the owner of the public key certificate 307, and the contents are not falsified. It becomes possible to verify. Further, the time stamp signature service 309 indicates that the electronic signature 305 is present at the time of the date / time information 311 included in the time stamp signature 309 during the expiration date of the time stamp signature 309. Guaranteed. Further, due to the time stamp signature 323 added on the premise of such a premise, the above-mentioned time at the time of the date / time information 325 included in the time stamp signature 323 is between the expiration date of the time stamp signature 323. The presence of the stamp signature 309 is guaranteed by the time stamp signature service.

  As a result, even if the public key certificate 307 expires after the creation date or the public key certificate 307 expires due to leakage of the private key, Indicates that the public key certificate 307 was valid as of the creation date, and the print data 304 was created by the document creator who is the owner of the public key certificate 307. It can be verified that the content has not been tampered with.

  That is, according to the first embodiment, the valid period of the electronic signature can be extended even in the printed material, and the authenticity can be verified even when the printed material is stored for a long time.

(B) Second Embodiment Next, an embodiment (second embodiment) according to a verification apparatus and a verification method for a signature grant with an extended expiration date according to the present invention will be described with reference to the drawings. . The verification apparatus and verification method of the second embodiment verify a sheet (printed product with a signature) whose expiration date has been extended by the expiration date extension apparatus and extension method of the first embodiment.

(B-1) Configuration of Second Embodiment FIG. 6 is a block diagram illustrating a functional configuration of a verification apparatus according to the second embodiment.

  The verification apparatus according to the second embodiment is constructed by installing a verification program for a signature grant to an information processing apparatus such as a personal computer to which an image scanner or a display is connected. Can be represented in FIG. Here, the installation method of the verification program is not limited. For example, it may be installed from a recording medium such as a CD-ROM, may be downloaded from another device, or may be input using a keyboard or the like. . In addition, the verification apparatus of 2nd Embodiment and the expiration date extension apparatus of 1st Embodiment may be constructed | assembled on the same information processing apparatus.

  A verification apparatus 600 according to the second embodiment includes a paper surface reading unit 601, a barcode decoding unit 602, a signature verification unit 603, and a display unit 604.

  The paper surface reading unit 601 is an image scanner that reads a two-dimensional barcode related to the extension of the expiration date printed on a signed printed material. It is also possible to use a two-dimensional barcode reader or the like.

  The barcode decoding unit 602 is a part that converts the two-dimensional barcode read by the paper reading unit 601 into electronic data. For example, the CPU decodes the barcode by executing the corresponding software part. Note that the two-dimensional barcode reader of the paper surface reading unit 601 may also function as the barcode decoding unit 602.

  The signature verification unit 603 is a part that verifies the electronic signature and the time stamp signature of the acquired electronic data by the barcode decoding unit 602. The time stamp signature for verification may be related to the extension of the expiration date. For example, the CPU verifies the electronic signature or the time stamp signature by executing the corresponding software part.

  The display unit 604 displays the verification result of the signature verification unit 603 and the print data. For example, the display executes the display operation of the verification result and the print data under the control of the CPU.

(B-2) Operation of Second Embodiment Next, the operation (verification method of the second embodiment) in the signature grant verification apparatus 600 of the second embodiment will be described with reference to the flowchart shown in FIG. While explaining.

  In the verification apparatus, the paper surface reading unit 601 acquires an image of a paper surface (printed material with a signature; see FIG. 5), and sends it to the barcode analysis unit 602 (step 701). In addition, in the signature grant verification apparatus 600 according to the second embodiment, a signed print without an expiration date extension operation as shown in FIG. 4 may be read. Hereinafter, the operation will be described on the assumption that a signed printed matter for which the expiration date has been extended is read.

  The verification device uses the barcode decoding unit 602 to detect and decode individual barcodes from the acquired image on the paper, to decode the electronic data, and further to decode by a technique such as Base64 used at the time of printing, The credential data 300 and the additional data 320 (see FIG. 3) are acquired and sent to the signature verification unit 603 (step 702). When a two-dimensional barcode reader is used, the procedure for reading and decoding barcodes individually is repeated for the number of barcodes.

  Next, the verification apparatus performs verification of the time stamp signature 323 included in the additional data 320 acquired in the barcode decoding step 702 by the signature verification unit 603 as follows (step 703). The verification apparatus cuts out the public key certificate 328 of the time stamp signature service from the time stamp signature 323 and determines whether the public key certificate 328 has expired or the public key certificate 328 has been revoked. Verify the sex. If it is determined that the certificate is not valid, it is determined that the certificate is not valid. If it is determined that the signature is valid, the signature value 327 included in the time stamp signature 323 is decrypted with the public key 329 included in the public key certificate 328, and the hash value 324 and date / time information 325 are converted into the decrypted value. Compare with the originally generated hash value. If the values do not match, it is determined that the file has been tampered with. If they match, it is determined whether or not the hash value of the time stamp signature 309 matches the hash value 324 included in the time stamp signature 323. If the values do not match, it is determined that the file has been tampered with. If they match, it is determined that the time stamp signature 323 is valid.

  If the time stamp signature 323 is valid, the verification device sequentially verifies the time stamp signature 309 of the credential data 300 and the electronic signature 305 (steps 704 and 705). These verification operations are naturally different from those of the signature verification unit 603, but are the same as the processes of the time stamp signature verification step 203 and the signature verification step 204 described in the first embodiment. Also, sending the verification result, the credential data 300, and the additional data 320 to the display unit 604 is also different from the first embodiment.

  The verification device determines that the validity is not verified by any of the verification of the time stamp signature 323 included in the additional data 320, the verification of the time stamp signature 309 of the credential data 300, and the verification of the electronic signature 305. (Step 708) Using the display unit 604, the invalidation result and the print data 304 are displayed (Step 711). On the other hand, the time stamp signature 323 included in the additional data 320 is verified. If the validity can be verified by all of the verification of the time stamp signature 309 and the verification of the electronic signature 305 (step 707), the display unit 604 displays the verification result of the validity and the print data 304. (Step 711). When it is determined that the print data is valid, the print data can be acquired and used in other processes.

(B-3) Effect of Second Embodiment As described above, it is possible to verify the authenticity of a sheet (printed product with a signature) whose validity period has been extended according to the first embodiment and to confirm the result. It becomes.

(C) Third Embodiment Next, a third embodiment according to an apparatus for extending the validity period of a signature grant and a method for extending the validity period according to the present invention will be described with reference to the drawings.

  FIG. 8 is a block diagram showing a functional configuration of the apparatus for extending the validity period of a signature grant according to the third embodiment. The same reference numerals are given to the same parts as those in FIG. As shown.

  In the expiration date extension device of the first embodiment described above, a margin 404 (see FIG. 4) needs to be secured in advance on a sheet in order to additionally print a two-dimensional barcode related to expiration date extension information. . In the third embodiment, instead of additionally printing a barcode, a replacement image is generated and printed on a new sheet so that the margin 404 is not required. Therefore, in the expiration date extension device 800 of the third embodiment, the barcode generation unit 105 and the printing unit 106 of the first embodiment are replaced with a barcode generation unit 805 and a printing unit 806, The reading unit 101 to the time stamp signature obtaining unit 104 are the same as those in the first embodiment. However, in the case of the first embodiment, the paper surface reading unit 101 may be a two-dimensional barcode reader that reads only a two-dimensional barcode, but in the case of the third embodiment, the paper surface It must be an image scanner that can read the entire document.

  Note that the target paper (printed product with signature) for which the expiration date is to be extended is the same as that described in the first embodiment, but the margin 404 is not required, and the location included in the credibility data 300 is the same. The information 303 is not essential.

  FIG. 9 is a flowchart showing the operation of the expiration date extending apparatus according to the third embodiment. The same steps as those in FIG. 2 according to the first embodiment are denoted by the same reference numerals.

  Also in the expiration date extension device of the third embodiment, the processing (steps 201 to 205) until the time stamp signature 323 related to the extension of the expiration date is obtained is the same as that of the first embodiment.

  The extension device uses the barcode generation unit 805 to add the received time stamp signature 323 to the credential data 300 acquired in the barcode decoding step 202, and to identify the service in the control data 301 The new control data 1001 including the ID 1002 is generated to generate new credential data 1000, and this data is converted into a format that can be converted into a bar code by a method such as Base64. Based on the converted data, a new bar code image is generated. Is sent to the printing unit 806 (step 906).

  FIG. 10 is an explanatory diagram showing a configuration of new credential data 1000, and corresponds to the credential data 300 of FIG. 3 described above. The new credential data 1000 is obtained by adding a time stamp signature 323 to the credential data 300. Further, control data 1001 is provided instead of the control data 301 of the belief data 300.

  The printing unit 806 of the extension device erases the barcode image 403 from the paper image (see FIG. 4) acquired in the paper reading step 201, and inserts the new barcode image generated by the barcode generator 805 at that position. Then, printing is performed on a new sheet (step 907). If the valid verification period or the like is written in a format that can be visually confirmed by a person such as text next to the bar code, this portion also needs to be rewritten. The printed result looks the same as the original printed product 401, but the barcode 403 is replaced with a new one.

  Note that it is possible to extend the period multiple times by giving a new time stamp signature to the last time stamp signature.

  According to the third embodiment, the same effects as those of the first embodiment can be obtained, and since it is not necessary to provide an additional margin 404 on the printed matter, the layout of the paper can be considerably freed. There is also an effect.

(D) Fourth Embodiment Next, a fourth embodiment according to an apparatus for extending the validity period of a signature grant and a method for extending the validity period according to the present invention will be described with reference to the drawings.

(D-1) Configuration of the Fourth Embodiment FIG. 11 is a block diagram showing a functional configuration of the apparatus for extending the validity period of a signature grant according to the fourth embodiment, and relates to the above-described first embodiment. The same parts as those in FIG. 1 are denoted by the same reference numerals.

  In the first embodiment and the third embodiment, the credential data and the additional data are printed using a barcode that is an electronically readable substitute expression, but the fourth embodiment The credential data and the additional data are to be printed using a watermark (for example, see Japanese Patent Application Laid-Open No. 2003-101762).

  Therefore, the expiration date extension device 1100 of the fourth embodiment replaces the barcode decoding unit 102, barcode generation unit 104, and printing unit 106 of the first embodiment with a watermark decoding unit 1102, watermark generation unit 1105, and printing. Part 1106. The paper reading unit 101, the signature verification unit 103, and the time stamp signature acquisition unit 104 are the same as those in the first embodiment. However, the paper surface reading unit 101 needs to be an image scanner that can read the entire paper surface, not a two-dimensional barcode reader or the like that reads only a two-dimensional barcode.

  The watermark decrypting unit 1102 is a part that extracts a digital watermark from the image data obtained by the page reading unit 101 and returns it to the embedded electronic data.

  The watermark generation unit 1105 is a part that converts the new time stamp signature acquired by the time stamp signature acquisition unit 104 into a digital watermark.

  The printing unit 1106 prints the watermark image generated by the watermark generation unit 1105.

  FIG. 13 shows an example of a printed matter with a signature in which data of a print content and an electronic signature are printed with a watermark before the expiration date is extended.

  In the example shown in FIG. 13, print data is printed on a sheet 1301 in the form of an image 402 that can be visually confirmed by a person such as text, and a watermark 1303 that can be electronically extracted using a background tint pattern or the like. Yes. An expiration date and the like are printed on the sheet 1301, but this is optional information for facilitating management, and is not essential. Furthermore, an area for extending the expiration date is provided in the lower part in the form of a margin 1304. Note that the position of the margin 1304 does not have to be on the lower side, and may be any position. The data contained in the watermark 1303 is the same as the credential data 300 (see FIG. 3) described in the first embodiment.

  FIG. 14 shows an example after the expiration date is extended for the signed printed material of FIG. That is, the paper 1401 is obtained by additionally printing the watermark 1405 according to the additional data 320 (see FIG. 3) on the margin 1304 of the printed material 1301 shown in FIG. An expiration date and the like are printed together with the watermark 1405, but this is optional information for facilitating management and is not essential.

(D-2) Operation of the Fourth Embodiment Only the outline of the method for generating the printed matter in which the data of the print contents and the electronic signature are printed by the watermark as shown in FIG. 13 will be described.

  Up to the acquisition of the credential data 300 is the same as that described in the first embodiment. Next, an image 402 that can be visually confirmed by a person is generated, and an image in which the authenticity data 300 is embedded as a watermark image 1303 in the generated image 402 is generated. Finally, the printed image 1301 is generated by printing the generated image.

  FIG. 12 is a flowchart showing an operation (expiration date extension method) in which the expiration date extension apparatus of the fourth embodiment extends the expiration date of the signed printed matter 1301 generated as described above. The same steps as those in FIG. 2 according to the embodiment are denoted by the same reference numerals.

  First, the extension device acquires a paper image by the paper reading unit 101 and sends it to the watermark analysis unit 1102 (step 201). Next, the watermark decrypting unit 1102 detects the watermark from the acquired paper image and decrypts it to decrypt the electronic data, obtain the credential data 300, and send it to the signature verification unit 103 (step 1202). Subsequent operations from time stamp signature verification (step 203) to time stamp signature acquisition (step 205) are the same as those in the first embodiment.

  Next, the extension device uses the watermark generation unit 1105 to generate additional data 320 in which the control data 321 including the ID 322 for specifying the service is added to the time stamp signature 323 received in the time stamp signature acquisition step 205. The watermark image 1405 is generated based on the additional data 320 and sent to the printing unit 1106 (step 1206). Then, using the printing unit 1106, the watermark image 1405 is printed on the paper 1401 read in the paper reading step 201 (step 1207). Note that the printing position is determined using the location information 303. In addition, it is desirable to describe the valid verification period in a format that can be visually confirmed by a person such as text, together with the watermark image 1405. It should be noted that the conveyance of the paper 1401 from the paper surface reading unit 101 to the printing unit 1106 is preferably automated, but can be performed by the user. An additional print of the watermark image 1405 becomes a sheet 1401 on which the expiration date has been extended.

  Note that it is possible to extend the period multiple times by giving a new time stamp signature to the last time stamp signature.

(D-3) Effect of Fourth Embodiment According to the fourth embodiment, the same effect as that of the first embodiment can be obtained. In addition, the watermark used in the fourth embodiment is embedded as a background pattern in the background, unlike a barcode that occupies a specific area for printing, so that a substitute expression that cannot be read by humans is not noticeable. In addition, the paper layout can be made quite free.

(E) Other Embodiments In the description of each of the above embodiments, various modified embodiments have been referred to, but further modified embodiments as exemplified below can be given.

  FIG. 7 showing the operation of the second embodiment shows the processing when the number of barcodes related to the extension of the expiration date is one, but substantially the same processing is performed when there are a plurality of barcodes. That is, when there are a plurality of additional data (320), the verification of the time stamp signature (323) in the additional data in step 703 is repeatedly executed for the number of additional data. For example, the verification is repeated from the new additional data side toward the old additional data side. If validity verification cannot be performed on the way, the process proceeds to step 708 to display invalidity.

  In the second embodiment, the signature verification result is displayed and output. However, the signature verification result may be printed and output by sound or voice. The display output is not limited to the output on the display, and may be an OK or NG binary output using a light emitting element such as an LED.

  Furthermore, in the first embodiment and the fourth embodiment, it is possible to print an additional barcode or an additional watermark on the back side of the paper. In addition, as a modified embodiment of the fourth embodiment, there is a method of printing a new sheet with the watermark of the credential data 1000 as in the relationship between the first embodiment and the third embodiment. Can do.

  Although the method for printing the credential data has been described with barcodes and watermarks, the method is not limited to these methods.

  It is also possible to add only a time stamp signature to the credential data subject to the extension of the expiration date without including an electronic signature.

  In the description of each of the embodiments described above, the object for which the expiration date is to be extended is a printed material, but the present invention can also be applied to an electronic print image. In this case, the means for reading the printed material becomes a means for acquiring an electronic print image, and the means for printing on the printed material becomes a means for changing and storing the electronic print image.

  In the first, third, and fourth embodiments, the time stamp signature is obtained using the time stamp signature server. However, the time stamp signature is generated in the own apparatus that is time-authenticated and the time is guaranteed. It is also possible.

  Furthermore, in the first and fourth embodiments, the barcode or watermark related to the new time stamp signature is printed in the margin, but the whole including the barcode or watermark related to the new time stamp signature is shown. May be printed on a new sheet.

  Furthermore, in the first embodiment, the barcode for the new time stamp signature is printed in the margin. However, the existing electronic signature and the time stamp signature and the new time stamp signature for the extension are not included. It is also possible to print on the margin the data including all the data (see FIG. 10) expressed in a barcode.

  In the above description, as the verification device, only the verification device of the second embodiment that verifies the printed matter extended by the extension device of the first embodiment has been described, but the extension of the third and fourth embodiments. The apparatus for verifying the printed matter extended by the apparatus can be configured in substantially the same manner as the verification apparatus of the second embodiment. If the verification apparatus is compatible with the extension apparatus of the third embodiment, the verification process of the time stamp signature of the additional data in step 703 in FIG. Replace it. In addition, if the verification device is compatible with the extension device of the fourth embodiment, the barcode decoding in step 702 may be replaced with watermark decoding.

It is a block diagram which shows the functional structure of the expiration date extension apparatus of the signature grant of 1st Embodiment. It is a flowchart which shows operation | movement of the expiration date extension apparatus of the signature provision of 1st Embodiment. It is explanatory drawing which shows the example of embedding information of the printed matter with a signature by which the expiration date was extended by 1st Embodiment. It is explanatory drawing which shows the printed matter example with a signature before the expiration date by 1st Embodiment is extended. It is explanatory drawing which shows the example of the printed matter with a signature after the expiration date by 1st Embodiment was extended. It is a block diagram which shows the functional structure of the verification apparatus after the expiration date extension of 2nd Embodiment. It is a flowchart which shows operation | movement of the verification apparatus after the expiration date extension of 2nd Embodiment. It is a block diagram which shows the functional structure of the expiration date extension apparatus of the signature grant of 3rd Embodiment. It is a flowchart which shows operation | movement of the expiration date extension apparatus of the signature provision of 3rd Embodiment. It is explanatory drawing which shows the example of embedding information of the printed matter with a signature by which the expiration date was extended by 3rd Embodiment. It is a block diagram which shows the functional structure of the expiration date extension apparatus of the signature provision of 4th Embodiment. It is a flowchart which shows operation | movement of the expiration date extension apparatus of the signature provision of 4th Embodiment. It is explanatory drawing which shows the example of the printed matter with a signature before the expiration date by 4th Embodiment is extended. It is explanatory drawing which shows the printed matter example with a signature after the expiration date by 4th Embodiment was extended.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100, 800, 1100 ... Expiration date extension apparatus of a signature grant, 101 ... Paper surface reading part, 102 ... Bar code decoding part, 103 ... Signature verification part, 104 ... Time stamp signature acquisition part, 105, 805 ... Bar code generation part , 106, 806, 1106... Printing unit, 600... Verification device for signature addition after extension of validity, 601... Paper reading unit, 602 .. barcode decoding unit, 603. Watermark decoding unit, 1105... Watermark generation unit.

Claims (16)

A signature extension verification period extension device applied to a system that enables verification of authenticity by giving a signature to a printed matter or an electronic print image,
A substitute expression information acquisition means for taking out at least a substitute expression from the attached signature to which the signature is attached by a decipherable substitute expression and decoding it to obtain substitute expression information;
An existing signature verification means for verifying an electronic signature or a time stamp signature included in the obtained substitute expression information;
A new timestamp signature acquisition means for acquiring a new timestamp signature on the condition that the validity of the existing signature is verified;
A substitute expression generating means for generating a substitute expression for information including at least a new time stamp signature;
A new generated substitute expression providing means for printing the generated substitute expression on a printed matter or adding it to an electronic print image;
An apparatus for extending a validity period of a signature grant, characterized in that a new time stamp signature for information including a signature is added to extend the validity verification period of the initial signature.   The apparatus for extending a validity period of a signature grant according to claim 1, wherein the substitute expression generating means generates a substitute expression including only information of a new time stamp signature.   The substitute expression generation means generates a substitute expression including a new time stamp signature and all signature information of the electronic signature and the time stamp signature included in the substitute expression information acquired by the substitute expression information acquisition means. The expiration date extension apparatus of the signature grant of Claim 1 characterized by the above-mentioned.   The newly generated surrogate expression providing means assigns the surrogate expression generated by the surrogate expression generating means to the front margin or back margin of the signature grant that the surrogate expression information acquiring means has performed the acquisition operation. The expiration date extension apparatus of the signature grant in any one of Claims 1-3 characterized by the above-mentioned.   The newly generated surrogate expression providing means assigns the substitute expression generated by the substitute expression generating means to a signature grant that replaces the signature grant that the substitute expression information acquiring means has performed the acquisition operation. The expiration date extension apparatus of the signature grant in any one of Claims 1-3.   6. The expiration date extension of a signature grant according to claim 1, wherein the new time stamp signature acquisition means receives a time stamp signature generated by an external time stamp signature server. apparatus.   6. The expiration date extension of a signature grant according to claim 1, wherein the new time stamp signature acquisition unit generates a time stamp signature within the device that has received time authentication. apparatus. In a signature grant verification apparatus applied to a system that enables verification of authenticity by giving a signature to a printed matter or an electronic print image,
The signature is given by a decipherable substitute expression, and at least the substitute expression is extracted from the signature grant processed by the expiration date extension device according to any one of claims 1 to 7, and the substitute expression information is decoded. A substitute expression information acquisition means to acquire;
A signature verification means for verifying the electronic signature and the old and new time stamp signatures included in the obtained substitute expression information;
And a verification result output means for outputting a verification result. A method for extending a verification period of a signature grant applied to a system that enables verification of authenticity by giving a signature to a printed matter or an electronic print image,
A substitute expression information acquisition step of obtaining a substitute expression information by taking out and decoding at least a substitute expression from the signature grant that is provided by a substitute expression that can be decrypted by a signature;
An existing signature verification process for verifying an electronic signature and a time stamp signature included in the obtained substitute expression information;
A new time stamp signature obtaining step for obtaining a new time stamp signature on the condition that the validity of the existing signature is verified;
A surrogate expression generation step of generating a surrogate expression for information including at least a new timestamp signature;
Printing a generated substitute expression on a printed matter or adding a new generated substitute expression to an electronic print image,
A method for extending the validity period of a signature grant, wherein a new time stamp signature for information including a signature is added to extend the validity verification period of the initial signature.   10. The method for extending an expiration date of a signature grant according to claim 9, wherein the substitute expression generating step generates a substitute expression including only information of a new time stamp signature.   The substitute expression generation step generates a substitute expression including a new time stamp signature and all the signature information of the electronic signature and time stamp signature included in the substitute expression information acquired by the substitute expression information acquisition step. The method for extending an expiration date of a signature grant according to claim 9, wherein:   The new generation substitute expression assigning step is to give the substitute expression generated by the substitute expression generation step to the front margin or the back margin portion of the signature grant that the substitute expression information acquisition step performed the acquisition operation. The method for extending an expiration date of a signature grant according to any one of claims 9 to 11.   The newly generated substitute expression providing step is characterized in that the substitute expression generated by the substitute expression generating step is given to a signature grant that replaces the signature grant that the substitute expression information acquiring step performed the acquisition operation. The method for extending an expiration date of a signature grant according to any one of claims 9 to 11.   The extension of the validity period of a signature grant according to any one of claims 9 to 13, wherein the new time stamp signature obtaining step receives a time stamp signature generated by an external time stamp signature server. Method.   14. The expiration date extension of a signature grant according to any one of claims 9 to 13, wherein the new time stamp signature acquisition step is to generate a time stamp signature in the device that has received time authentication. Method. In a verification method of a signature grant applied to a system that enables verification of authenticity by giving a signature to a printed matter or an electronic print image,
The signature is given by a decipherable substitute expression, and at least the substitute expression is extracted from the signature grant processed by the expiration date extension device according to any one of claims 1 to 7, and the substitute expression information is decoded. Substitute expression information acquisition process to acquire,
A signature verification process for verifying the electronic signature and the old and new time stamp signatures included in the obtained substitute expression information;
And a verification result output step for outputting a verification result.

Images