JP2006262408A - Electronic signature system, its constituent element, method executed therein, and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To early remove a portable electronic unit from an information processing apparatus in an electronic signature system for executing electronic signature in the information processing apparatus, by making use of the portable electronic unit storing a private key and a public key certificate therein. <P>SOLUTION: The electronic signature system 100 comprises an image processing apparatus 10, and an IC card 20. The IC card 10 includes a memory 20c for storing a first public key certificate 20c2 concerning the first public key and a first private key 20c1 corresponding thereto, and a first electronic signature 20b1 for generating a signature value of a second public key provided from the image processing apparatus 10 using the first private key 20c1. The image processing apparatus 10 includes a key generator for generating the second public key and a second private key corresponding thereto, and a certificate generator for generating a second public key certificate on the second public key. The second public key certificate includes a signature value provided from the second public key and the IC card 20, and the first public key certificate 20c2. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to the field of electronic signature technology.

  In recent years, the information society has made remarkable progress, and along with that, paperlessness is progressing. As a result, since there is a tendency for important documents that were previously signed and stamped on paper documents to be digitized, a technique called electronic signature corresponding to the significance of conventional signature and stamping has become important. It was. The electronic signature is data obtained by generating a digest value from data to be signed using a hash function and encrypting the digest value with the signer's private key. Based on this data, the authenticator can verify that the person who signed the document is the principal and that the document has not been tampered with.

  Currently, electronic data to which an electronic signature is added using an electronic signature technique is transmitted via a network or the like. In order to realize this, there is an electronic signature system including an image processing apparatus that enables an electronic signature using an IC card.

  A procedure for transmitting electronic data with an electronic signature by a conventional electronic signature system will be described with reference to FIG. First, in step ST1, the user prepares an image document to be digitally signed.

  Next, in step ST2, the user requests the image processing apparatus to digitize the image document prepared in step ST1 and to digitally sign it.

  In step ST3, in response to the electronic signature request, the image processing apparatus uses the public key certificate of the IC card, and the user (electronic electronic device) who is permitted to perform the electronic signature by the user who requests the electronic signature. It is determined whether or not the user is a signature permitted user. If it is determined that the user is an electronic signature permitted user, the image processing apparatus accepts an electronic signature request in step ST4. If not, the image processing apparatus receives image processing in step ST5. The device displays an error message and ends the process.

  Here, the public key certificate is a combination of data such as information on the public key owner, public key data, the validity period of the certificate, and information on the trusted third party (TTP) that issued the certificate. The TTP has issued and issued an electronic signature. Thereby, TTP guarantees that the owner of the public key is a genuine person.

  In step ST6, the image processing apparatus scans an image original using a scanner and generates scan data. In step ST7, the image processing apparatus generates electronic data by converting the data generated by scanning in step ST6 into PDF.

  In step ST8, the image processing apparatus determines whether or not the IC card used in step ST3 is mounted. If the IC card is mounted, in step ST9, the image processing apparatus Using the private key stored in the card, the electronic data converted to PDF in step ST7 is encrypted and encrypted to generate a signature value. Otherwise, in step ST11, the image processing apparatus displays an error message and ends the process.

  In step ST12, the image processing apparatus combines the signature value generated in step ST10, the public key certificate stored in the IC card, and the electronic data generated in step ST7 to add one file with an electronic signature. Generated as electronic data (execution of electronic signature).

In step ST12, the image processing apparatus transmits the electronic data with the electronic signature generated in step ST10 to the designated transmission destination.
JP 2001-184186 A

  In the above-described prior art, in order to digitally sign electronic data, the image processing apparatus must completely scan the image to be digitally signed, and the IC card must be mounted until electronic data with the electronic signature is generated. There must be.

  For example, in “timer transmission” in which electronic data with an electronic signature is transmitted at a set time, it is necessary to attach an electronic signature to the electronic data at the set time in order to obtain a guarantee that the electronic data has not been tampered with. is there. Accordingly, it is necessary that the IC card is mounted on the image processing apparatus at the set time.

  Similarly, when a large amount of image data is transmitted as electronic data with an electronic signature, the IC card is mounted on the image processing apparatus until the scanning of the large amount of image original is completed and the electronic signature is completed. There is a need.

  The present invention has been made on the basis of recognition of the above problems, and provides a new electronic signature technology, for example, information processing using a portable electronic unit storing a private key and a public key certificate. In an electronic signature system that executes an electronic signature in an apparatus, an object is to enable early removal of a portable electronic unit from an information processing apparatus.

  A first aspect of the present invention relates to an electronic signature system, and the electronic signature system includes an information processing apparatus and a portable electronic unit that is detachably connected to the information processing apparatus. The portable electronic unit uses a first public key certificate for a first public key, a memory storing a first private key corresponding to the first public key, and the first private key, And a first electronic signature unit that generates a signature value of the second public key provided from the information processing apparatus. The information processing apparatus generates a second public key and a key generation unit that generates a second secret key corresponding to the second public key, and a second public key certificate for the second public key. A certificate generation unit. Here, the second public key certificate generated by the certificate generation unit includes the second public key, the signature value provided from the portable electronic unit, and the first public key certificate.

  According to a preferred embodiment of the present invention, the information processing apparatus may further include an electronic data generation unit that generates electronic data to be digitally signed. Here, generation of the second public key and the second secret key by the key generation unit, generation of the signature value by the first electronic signature unit, and the second public key certificate by the certificate generation unit Is generated for the electronic data after the information processing apparatus receives the electronic data generation request and before the generation of the electronic data related to the generation request is completed.

  According to a preferred embodiment of the present invention, the information processing apparatus uses the second private key to generate a second signature value of electronic data generated by the electronic data generation unit. May further be included.

  According to a preferred embodiment of the present invention, the information processing apparatus includes the electronic data generated by the electronic data generation unit, the second signature value generated by the second electronic signature unit, and the certificate. And a combining unit that combines the second public key certificate generated by the generating unit to generate electronic data with an electronic signature.

  According to a preferred embodiment of the present invention, the information processing apparatus may further include a scanner. Here, the electronic data generation unit may generate electronic data based on scan data provided from the scanner.

  According to a preferred embodiment of the present invention, the information processing device includes a transmission unit that transmits the electronic data with the electronic signature generated by the combining unit to an external device, and after the set time has elapsed, And a control unit that causes the second electronic signature unit to generate the second signature value, causes the combining unit to generate the electronic data with the electronic signature, and causes the transmission unit to transmit the electronic data with the electronic signature.

  According to a preferred embodiment of the present invention, the information processing apparatus can have a first mode and a second mode. In the first mode, the control unit causes the second electronic signature unit to generate the second signature value, causes the combining unit to generate electronic data generated by the electronic data generation unit, and the second electronic signature The second signature value generated by the signature unit and the second public key certificate generated by the certificate generation unit are combined to generate electronic data with a first mode electronic signature, and the transmission unit In the second mode, after the electronic data with the first mode electronic signature is transmitted, the electronic data generation unit uses the first secret key for the second electronic signature unit after the set time is reached. Generating a third signature value of the electronic data generated by the electronic data generated by the electronic data generated by the electronic data generating unit and the third signature value generated by the second electronic signature unit; Serial to produce a second mode the digitally signed electronic data by coupling the second public key certificate from the portable electronic unit to transmit the second mode the digitally signed electronic data to said transmission unit.

  A second aspect of the present invention relates to a portable electronic unit having an interface for communicating with an information processing apparatus, and the portable electronic unit includes a first public key certificate for a first public key, and the first First generating a signature value of a second public key provided from the information processing apparatus via the interface, using a memory storing a first secret key corresponding to a public key and the first secret key And an electronic signature unit. Here, the signature value and the first public key certificate are transmitted to the information processing apparatus via the interface.

  A third aspect of the present invention relates to an information processing apparatus having an interface that communicates with a portable electronic unit. Here, the portable electronic unit stores a first public key certificate for the first public key, a memory storing a first secret key corresponding to the first public key, and the first secret key. And a first electronic signature unit that generates a signature value of a second public key provided from the information processing apparatus via the interface, wherein the signature value and the first public key certificate are the interface To the information processing apparatus. The information processing apparatus generates a second public key and a key generation unit that generates a second secret key corresponding to the second public key, and a second public key certificate for the second public key. A certificate generation unit, wherein the second public key certificate includes the second public key, the signature value provided from the portable electronic unit via the interface, and the first public key certificate. .

  A fourth aspect of the present invention relates to an electronic signature method in an electronic signature system comprising an information processing apparatus and a portable electronic unit that is detachably connected to the information processing apparatus. The portable electronic unit includes a memory storing a first public key certificate for a first public key and a first private key corresponding to the first public key. The electronic signature method includes a key generation step of generating a second public key and a second secret key corresponding to the second public key in the information processing apparatus, and the information processing apparatus to the portable electronic unit. A step of transmitting the second public key, a first electronic signature step of generating a signature value of the second public key using the first secret key in the portable electronic unit, and from the portable electronic unit Transmitting the signature value and the first public key certificate to the information processing apparatus; and a certificate generation step of generating a second public key certificate for the second public key in the information processing apparatus. And the second public key certificate includes the second public key, the signature value, and the first public key certificate.

  A fifth aspect of the present invention relates to a method for controlling a portable electronic unit having an interface that communicates with an information processing apparatus. The portable electronic unit includes a memory storing a first public key certificate for a first public key and a first private key corresponding to the first public key. The control method includes a step of receiving a second public key from the information processing apparatus via the interface, a step of generating a signature value of the second public key using the first secret key, and the signature value And transmitting the first public key certificate to the information processing apparatus via the interface.

  A sixth aspect of the present invention relates to a method for controlling an information processing apparatus having an interface that communicates with a portable electronic unit. The portable electronic unit includes a memory storing a first public key certificate for a first public key and a first private key corresponding to the first public key. The control method includes generating a second public key and a second secret key corresponding to the second public key, and transmitting the second public key to the portable electronic unit via the interface. Receiving the signature value of the second public key generated by the portable electronic unit using the first secret key from the portable electronic unit via the interface; and about the second public key Generating a second public key certificate, wherein the second public key certificate includes the second public key, the signature value, and the first public key certificate.

  According to the present invention, a new electronic signature technique is provided. For example, in an electronic signature system that executes an electronic signature in an information processing apparatus using a portable electronic unit that stores a private key and a public key certificate, It becomes possible to remove the portable electronic unit from the processing device at an early stage.

  Hereinafter, preferred embodiments of the present invention will be described with reference to the accompanying drawings.

  FIG. 2 is a diagram showing the configuration of the electronic signature system according to the preferred embodiment of the present invention. An electronic signature system 100 according to a preferred embodiment of the present invention includes an image processing apparatus 10 as an example of an information processing apparatus, and an IC card 20 as an example of a portable electronic unit that can be attached to and detached from the image processing apparatus 10. Including. The image processing apparatus 10 is typically shared by a plurality of users, and the IC card 20 can be managed by the user of the IC card 20.

  The image processing apparatus 10 includes an interface 10a for communicating with an external device such as an IC card 20, a processing unit 10b for executing data processing such as image processing, an operation unit 10d including a user interface such as a touch panel display unit, and data communication. A communication unit 10e for communicating with an external device (for example, an information processing device) via a line and a control unit 10f for controlling the blocks 10a to 10e are provided.

  In addition to the electronic signature function, the image processing apparatus 10 may be configured as a multifunction machine having at least one of a copy function, a facsimile function, a printer function, and the like.

  The IC card 20 includes an interface 20a for connecting to the image processing apparatus 10, a processing unit 20b, a memory 20c, and a control unit 20d that controls the blocks 20a to 20c. The processing unit 20b includes an electronic signature unit 20b1 that executes processing related to the electronic signature. The memory 20c stores a private key 20c1 unique to the user of the IC card 20, and a public key certificate 20c2 for the public key corresponding to the private key (that is, paired with the private key).

  FIG. 3 is a diagram illustrating a configuration example of the processing unit 10 b of the image processing apparatus (information processing apparatus) 10. The processing unit 10b processes the scan data generated by scanning the image original by the key generation unit 32 and the scanner 10c that generate a key pair composed of a unique public key and secret key for the electronic data to be transmitted, and performs PDF processing. Scan data processing unit 34 that generates electronic data such as data, electronic signature unit 36 that generates a signature value from the electronic data generated by the scan data processing unit 34 using a secret key generated by the key generation unit 32, and key generation A public key certificate generating unit 38 that generates a public key certificate that proves by using the private key 20c1 and the public key certificate 20c2 of the IC card 20 that the public key generated by the unit 32 is authentic, and a public key certificate The electronic signature unit 36 uses the public key certificate generated by the certificate generation unit 38 and the private key generated by the key generation unit 32 to generate electronic data. A signature value that is al produced, by combining the electronic data scan data processing unit 34 has generated, including coupling unit 40 that generates a single file as an electronic signed digital data.

  The image processing apparatus 10 executes processing such as encryption and electronic signature by a public key method using a key pair composed of a public key and a private key.

  In the image processing apparatus 10, the key generation unit 32 generates a key pair including a public key and a secret key, and generates a signature value of electronic data to be transmitted using the secret key. Here, the signature value is, for example, data obtained by generating a digest value from electronic data using a hash function and encrypting the digest value with the secret key.

  The image processing apparatus 10 uses the public key certificate generation unit 38 to certify that the public key generated by the key generation unit 32 is authentic by using the private key 20c1 and the public key certificate 20c2 that the IC card 20 has. A key certificate is generated, and the public key certificate and a signature value generated from electronic data to be transmitted are combined with the electronic data and transmitted to the transmission destination.

  Here, the public key generated by the key generation unit 32 of the image processing apparatus 10 is the secret key 20c1 stored in the memory 20c of the IC card 20 (the public key corresponding to the secret key 20c1 is authentic). And the public key certificate generated by the public key certificate generation unit 38 of the image processing apparatus 10 together with the signature value encrypted by a public key certificate 20c2 issued by a third party). Included. In other words, the public key certificate generated by the public key certificate generating unit 38 indicates that the public key generated by the key generating unit 32 of the image processing apparatus 10 is authentic, and the public key is stored in the memory of the IC card 20 This is proved by a signature value obtained by encrypting the electronic signature unit 20b1 of the IC card 20 by using the secret key 20c1 stored in 20c. Therefore, the fact that the private key 20c1 and the public key certificate 20c2 stored in the memory 20c of the ICIC card 20 are authentic means that the signature value generated by the electronic signature unit 20b1 of the IC card 20 is also authentic. The public key generated by the key generation unit 32 of the image processing apparatus 10 proved by the signature value can be said to be authentic.

  Therefore, the public key certificate generated by the public key certificate generation unit 38 of the image processing apparatus 10 does not strictly involve certification by a third party, but the public key certificate certified by the third party Since it is proved by the signature value generated using the private key corresponding to the public key guaranteed by the certificate, it can be said that the proof substantially the same as the proof by the third party organization is given.

  4 and 5 are diagrams exemplarily showing a procedure for transmitting electronic data with an electronic signature by the electronic signature system 100 shown in FIGS. 2 and 3.

  An image document to be digitally signed is prepared by the user, and the operation unit 10d is operated by the user in step S22 to make a timer transmission request to the image processing apparatus 10, whereby the following processing is executed. . 6 to 9 exemplarily illustrate user interfaces displayed on the touch panel display unit of the operation unit 10d of the image processing apparatus 10. In the timer transmission mode, for example, the transmission setting box 601 on the initial screen 600 illustrated in FIG. 6 is touched, and the transmission setting screen 700 illustrated in FIG. 7 is displayed on the touch panel display in response thereto. The timer transmission box 701 can be set by touching. The setting of the timer transmission mode can be controlled by the control unit 10f.

  Next, in step ST23, the control unit 10f of the image processing apparatus 10 displays the timer transmission screen 800 illustrated in FIG. 8 on the touch panel display unit (operation unit 10d) in response to the setting of the timer transmission mode. The user is prompted to input the time for timer transmission, and the time for timer transmission is set by inputting the time in the time field 801.

  Next, in step ST24, the control unit 10f of the image processing apparatus 10 determines that the setting box 702 for setting electronic data transmission with a signature on the transmission setting screen 700 illustrated in FIG. Start processing.

  In the determination process of step ST25, the control unit 10f of the image processing apparatus 10 uses the public key certificate 20c2 stored in the memory 20c of the IC card 20 to allow the user associated with the electronic data transmission request to submit an electronic signature. It is determined whether or not the user is permitted to perform (electronic signature permitted user). In this determination, for example, when the IC card 20 is attached to the image processing apparatus 10, the user can be regarded as an electronic signature permitted user. Alternatively, the user's password is stored in the memory 20c of the IC card 20, the IC card 20 is mounted on the image processing apparatus 10, the user's password is input to the touch panel display unit (operation unit 10d), and both passwords are stored. It may be done by matching.

  If it is determined that the user is an electronic signature permitted user, in step ST26, the control unit 10f of the image processing apparatus 10 accepts the electronic signature request; otherwise, in step ST28, the control unit 10f Then, an error message is displayed on the touch panel display unit (operation unit 10d), and the process is terminated.

  Upon receiving the request for the electronic signature, in step ST27, the control unit 10f of the image processing apparatus 10 displays the signature method selection screen 900 illustrated in FIG. 9 on the touch panel display unit (operation unit 10d). Let the user select a signature method. Note that the selection screen 900 illustrated in FIG. 9 can be displayed after the setting box 702 of the transmission setting screen 700 illustrated in FIG. 7 is touched and the determination process in step ST25 is completed.

  Here, the electronic signature system 100 of this embodiment provides two modes as signature schemes.

  In the first signature mode, the image processing apparatus 10 generates a key pair composed of a public key and a private key before the timer set time or before completion of scanning of the image original, and the public key is used as an IC card. 20 is a mode in which the image processing apparatus 10 receives from the IC card 20 the signature value generated by encryption with the private key 20c1 of the IC card 20 and the public key certificate 20c2 stored in the IC card 20. Hereinafter, the first signature mode is also referred to as a card removal mode. In the card removal mode, the image processing apparatus 10 receives from the IC card 20 the signature value of the public key (the public key generated by the key generation unit 32 of the image processing apparatus 10) and the public key certificate 20c2 stored in the IC card 20. At this point, the user can remove the IC card 20 from the image processing apparatus 10.

  As described with reference to FIG. 1, the second signature mode is a mode in which the IC card 20 executes an electronic signature when the timer setting time comes. Hereinafter, the first signature mode is also referred to as a card mounting mode.

  When the card removal mode is selected, the control unit 10f of the image processing apparatus 10 executes public key certificate issuance processing in step ST29. A detailed example of the public key certificate issuance process is shown in FIG.

  First, in step ST291, the key generation unit 32 of the image processing apparatus 10 generates a key pair including a public key and a secret key under the control of the control unit 10f. Next, in step 292, the control unit 10f transmits the public key generated by the key generation unit 32 in step ST291 from the image processing apparatus 10 to the IC card 20 via the interfaces 10a and 20a.

Next, in step ST293, in the IC card 20, under the control of the control unit 20d, the electronic signature unit 20b1 stores the public key received from the image processing apparatus 10 in step ST292 in the secret 20c stored in the memory 20c of the IC card 20. Next, in step ST294, the control unit 20d of the IC card 20 generates a signature value (of the image processing apparatus 10) generated by the electronic signature unit 20b. Data obtained by encrypting the public key generated by the key generation unit 32 using the secret key 20c1 of the IC card 20) is transmitted from the IC card 20 to the image processing apparatus 10 via the interfaces 20a and 10a.

  Next, in step ST295, the control unit 20d of the IC card 20 transmits the public key certificate 20c2 stored in the memory 20c from the IC card 20 to the image processing apparatus 10 via the interfaces 20a and 10a. Here, the public key certificate 20c2 proves that the public key paired with the private key 20c1 given to the user of the IC card 20 stored in the memory 20c of the IC card 20 is authentic. To do.

  As schematically shown in FIG. 10, the public key certificate 20c2 provides a public key data to a third party (TTP) by a person (user) who requests certification of the public key 201 paired with the private key 20c1. In TTP, an electronic signature is applied to data that is a combination of data such as owner (user) information, public key data, certificate validity period, and information of the third party organization (TTP) that issued the certificate. It is a thing.

  Next, in step ST296, under the control of the control unit 10f, the public key certificate generation unit 38 of the image processing apparatus 10 receives the signature value received from the IC card 20 in step ST294 as schematically shown in FIG. The public key certificate 200 is generated for the public key 210 generated by the key generation unit 32 (image processing device 10) using 220 and the public key 210 generated by the key generation unit 32 of the image processing device 10 in step ST291. (Issue). Here, the public key certificate 200 generated by the public key certificate generation unit 38 is information included in the public key certificate 20c2 issued by a third party (TTP) stored in the memory 20c of the IC card 20. The signature value 220 and public key 210 information are combined.

  Next, with reference to FIG. 4 again, in step ST30, under the control of the control unit 10f, the scanner 10c of the image processing apparatus 10 scans the image original to generate scan data.

  Next, in step ST31, under the control of the control unit 10f, the scan data processing unit 34 (processing unit 10b) of the image processing apparatus 10 generates electronic data by converting the data generated by scanning in step ST30 into PDF. To do.

  Next, the control unit 10f of the image processing apparatus 10 waits for the arrival of the time set in step ST23. When the time comes, the control unit 10f signs the electronic signature unit 36 (processing unit 10b) in step ST33. Generate a value. Specifically, the electronic signature unit 36 generates a signature value of the electronic data generated in step ST31 using the private key generated by the key generation unit 32 in step ST291 (generation of an electronic signature). Here, the signature value of the electronic data is, for example, data obtained by generating a digest value from the electronic data using a hash function and encrypting the digest value with a secret key.

  Next, in step ST34, under the control of the control unit 10f, the combining unit 40 of the image processing apparatus 10 generates the electronic data generated by the scan data processing unit 34 in step ST31 and the electronic signature unit 36 generated in step ST33. The signature value and the public key certificate generated by the public key certificate generation unit 38 in step ST296 are combined to generate one file as electronic data with an electronic signature (execution of an electronic signature).

  Next, in step ST35, under the control of the control unit 10f, the communication unit 10e of the image processing apparatus transmits the electronic data with the electronic signature generated in step ST34 or step ST41 described later to the designated transmission destination.

  Next, a process when the card mounting mode is selected in step ST27 will be described.

  First, in step ST36, under the control of the control unit 10f, the scanner 10c of the image processing apparatus 10 scans an image original and generates scan data.

  Next, in step ST38, the control unit 10f of the image processing apparatus 10 waits for the arrival of the time set in step ST23, and executes the determination process of step ST39 when the time comes.

  In the determination process of step ST39, the control unit 10f determines whether or not the IC card 20 used in step ST25 is attached to the image processing apparatus 10. If the IC card 20 is attached to the image processing apparatus 10, in step ST40, the control unit 10f causes the electronic signature unit 36 to generate a signature value of electronic data. Specifically, the electronic signature unit 36 uses the private key 20c1 stored in the memory 20c of the IC card 20 to generate the signature value of the electronic data generated in step ST37 (generation of an electronic signature). Here, the signature value is, for example, data obtained by generating a digest value from electronic data using a hash function and encrypting the digest value with the secret key.

  Next, in step ST41, under the control of the control unit 10f, the combining unit 40 of the image processing apparatus 10 generates the electronic data generated by the scan data processing unit 34 in step ST37 and the electronic signature unit 36 generated in step ST40. The signature value and the public key certificate 20c2 stored in the IC card 20 are combined to generate one file as electronic data with an electronic signature (execution of an electronic signature). The electronic data with the electronic signature is transmitted to the designated transmission destination in the above-described step ST35.

  Control by the control units 10f and 20d as described above can also be performed by providing a computer program to a computer. Such a computer program causes the computer to execute the procedure exemplarily shown in FIGS. 4 and 5, thereby configuring the electronic signature system as described above. Such a computer program is provided to the image processing apparatus 10 as a single product, and is programmed such that the control portion 10f is configured by the first portion and the control portion 20d is configured by the second portion. It may be a thing. In this case, the second portion can be transferred from the image processing apparatus 10 to the IC card 20 via the interfaces 10a and 20a. On the contrary, the computer program is provided as a single product to the IC card 20 so that the first part forms the control unit 10f and the second part forms the control unit 20d. It may be programmed. The computer program may be provided separately to the image processing apparatus 10 and the IC card 20.

It is a figure explaining the transmission procedure of the electronic data with an electronic signature by the conventional electronic signature system. It is a figure which shows the structure of the electronic signature system of suitable embodiment of this invention. It is a figure which shows the structural example of the process part of the image processing apparatus shown in FIG. It is a figure which shows the transmission procedure of the electronic data with an electronic signature by the electronic signature system shown in FIG.2 and FIG.3 exemplarily. It is a figure which shows the transmission procedure of the electronic data with an electronic signature by the electronic signature system shown in FIG.2 and FIG.3 exemplarily. 3 illustrates an example of a user interface displayed on a touch panel display unit of an operation unit of the image processing apparatus. 3 illustrates an example of a user interface displayed on a touch panel display unit of an operation unit of the image processing apparatus. 3 illustrates an example of a user interface displayed on a touch panel display unit of an operation unit of the image processing apparatus. 3 illustrates an example of a user interface displayed on a touch panel display unit of an operation unit of the image processing apparatus. It is a figure which shows typically issue of the public key certificate by a third party organization. It is a figure which shows typically issue of the public key certificate by an image processing apparatus.

Claims (18)

An electronic signature system comprising an information processing device and a portable electronic unit that is detachably connected to the information processing device,
The portable electronic unit is:
A memory storing a first public key certificate for the first public key and a first private key corresponding to the first public key;
A first electronic signature unit that generates a signature value of a second public key provided from the information processing apparatus using the first secret key,
The information processing apparatus includes:
A key generation unit for generating the second public key and a second secret key corresponding to the second public key;
A certificate generation unit that generates a second public key certificate for the second public key,
The second public key certificate includes the second public key, the signature value provided from the portable electronic unit, and the first public key certificate.
An electronic signature system characterized by that. The information processing apparatus further includes an electronic data generation unit that generates electronic data to be digitally signed,
Generation of the second public key and the second secret key by the key generation unit, generation of the signature value by the first electronic signature unit, and generation of the second public key certificate by the certificate generation unit The information processing apparatus is executed for the electronic data after the electronic data generation request is received and before the generation of the electronic data related to the generation request is completed.
The electronic signature system according to claim 1. The information processing apparatus further includes a second electronic signature unit that generates a second signature value of electronic data generated by the electronic data generation unit using the second secret key.
The electronic signature system according to claim 2. The information processing apparatus includes: electronic data generated by the electronic data generation unit; the second signature value generated by the second electronic signature unit; and a second public key certificate generated by the certificate generation unit. And a combining unit that combines the document and generates electronic data with an electronic signature.
The electronic signature system according to claim 3. The information processing apparatus further includes a scanner,
The electronic data generation unit generates electronic data based on scan data provided from the scanner;
The electronic signature system according to claim 4. The information processing apparatus includes:
A transmitting unit that transmits the electronic data with the electronic signature generated by the combining unit to an external device;
After the set time, the second electronic signature unit generates the second signature value, the combining unit generates the electronic signature-added electronic data, and the transmission unit receives the electronic signature-added electronic data. A control unit to transmit,
The electronic signature system according to claim 5, further comprising: The information processing apparatus has a first mode and a second mode,
The controller is
In the first mode, the second digital signature unit generates the second signature value, and the combining unit generates the electronic data generated by the electronic data generation unit and the second electronic signature unit. The second signature value and the second public key certificate generated by the certificate generation unit are combined to generate electronic data with a first mode electronic signature, and the transmission unit generates the first mode electronic signature. Send electronic data with
In the second mode, after the set time, the third signature value of the electronic data generated by the electronic data generation unit is transmitted to the second electronic signature unit using the first secret key. And generating the electronic data generated by the electronic data generating unit, the third signature value generated by the second electronic signature unit, and the second provided from the portable electronic unit. Combining the public key certificate to generate electronic data with a second mode electronic signature, and causing the transmission unit to transmit the electronic data with the second mode electronic signature;
The electronic signature system according to claim 5.   The first public key certificate is obtained by digitally signing information indicating the user name, the first public key, the name of the third party organization and the validity period using the private key of the third party organization. The electronic signature system according to claim 1. A portable electronic unit having an interface for communicating with an information processing device,
A memory storing a first public key certificate for the first public key and a first private key corresponding to the first public key;
A first electronic signature unit that generates a signature value of a second public key provided from the information processing apparatus via the interface using the first secret key;
The signature value and the first public key certificate are transmitted to the information processing apparatus via the interface.
A portable electronic unit characterized by that. An information processing apparatus having an interface for communicating with a portable electronic unit,
The portable electronic unit is:
A memory storing a first public key certificate for the first public key and a first private key corresponding to the first public key;
A first electronic signature unit that generates a signature value of a second public key provided from the information processing apparatus via the interface using the first secret key,
The signature value and the first public key certificate are transmitted to the information processing apparatus via the interface,
The information processing apparatus includes:
A key generation unit for generating the second public key and a second secret key corresponding to the second public key;
A certificate generation unit that generates a second public key certificate for the second public key,
The second public key certificate includes the second public key, the signature value provided from the portable electronic unit via the interface, and the first public key certificate.
An information processing apparatus characterized by that. An electronic data generation unit for generating electronic data to be digitally signed;
Generation of the second public key and the second secret key by the key generation unit, generation of the signature value by the first electronic signature unit, and generation of the second public key certificate by the certificate generation unit The information processing apparatus is executed for the electronic data after the electronic data generation request is received and before the generation of the electronic data related to the generation request is completed.
The information processing apparatus according to claim 10. A second electronic signature unit that generates a second signature value of electronic data generated by the electronic data generation unit using the second secret key;
The information processing apparatus according to claim 11. Electronic data generated by the electronic data generation unit;
A combining unit that combines the second signature value generated by the second electronic signature unit and the second public key certificate generated by the certificate generation unit to generate electronic data with an electronic signature;
The information processing apparatus according to claim 12, further comprising: Further including a scanner,
The electronic data generation unit generates electronic data based on scan data provided from the scanner;
The information processing apparatus according to claim 13. A transmitting unit that transmits the electronic data with the electronic signature generated by the combining unit to an external device;
After the set time, the second electronic signature unit generates the second signature value, the combining unit generates the electronic signature-added electronic data, and the transmission unit receives the electronic signature-added electronic data. A control unit to transmit,
The information processing apparatus according to claim 14, further comprising: Having a first mode and a second mode;
The controller is
In the first mode, the second electronic signature unit generates the second signature value, and the combining unit generates the electronic data generated by the electronic data generation unit and the second electronic signature unit. The second signature value and the second public key certificate generated by the certificate generation unit are combined to generate electronic data with a first mode electronic signature, and the transmission unit generates the first mode electronic signature. Send electronic data with
In the second mode, after the set time is reached, the third signature value of the electronic data generated by the electronic data generation unit is transmitted to the second electronic signature unit using the first secret key. And generating the electronic data generated by the electronic data generating unit, the third signature value generated by the second electronic signature unit, and the second provided from the portable electronic unit. Combining the public key certificate to generate electronic data with the second mode electronic signature, and causing the transmission unit to transmit the electronic data with the second mode electronic signature;
The information processing apparatus according to claim 14. An electronic signature method in an electronic signature system comprising an information processing device and a portable electronic unit that is detachably connected to the information processing device,
The portable electronic unit includes a memory that stores a first public key certificate for a first public key and a first private key corresponding to the first public key,
The electronic signature method is:
In the information processing apparatus, a key generation step of generating a second public key and a second secret key corresponding to the second public key;
Transmitting the second public key from the information processing apparatus to the portable electronic unit;
A first electronic signature step of generating a signature value of the second public key using the first secret key in the portable electronic unit;
Transmitting the signature value and the first public key certificate from the portable electronic unit to the information processing apparatus;
A certificate generation step of generating a second public key certificate for the second public key in the information processing apparatus;
The second public key certificate includes the second public key, the signature value, and the first public key certificate.
An electronic signature method characterized by the above.   A computer program for causing a computer to execute the electronic signature method according to claim 17.

Images