JP2007281713A - Information generation processing program, information generator, and information generation method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To ensure authenticity of attributes by strengthening a relationship between the respective attributes each other which enable to secure authenticity of content data by a plurality of authenticity securing information. <P>SOLUTION: A computer generates the content data to which a plurality of the authenticity securing information for securing the authenticity of the content data are added together with a plurality of attribute information showing the attributes whose authenticities are respectively secured by a plurality of the authenticity securing information. The computer sets the information whose authenticity is secured by each authenticity securing information into an attribute information setting region as attribute information. By this, it is possible to allow a user to recognize further accurate attribute information since a plurality of the authenticity securing information are made to relate to each other by the set attribute information, and also, it is possible to verify the authenticity of the attribute information. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a technical field of an information generation processing program, an information generation apparatus, and an information generation method for generating content data obtained by adding authenticity information such as an electronic signature for ensuring the authenticity of content data to content data.

  In recent years, as content data such as electronic documents has been released, transmitted and received on networks such as the Internet and intranets, electronic signatures (also referred to as digital signatures) are important for content data for which it is important to ensure authenticity. The digital signature information that guarantees that the content data has not been tampered with is generated, and the digital signature information is added to the content data.

  As a general digital signature, it is used to guarantee that the content data has not been tampered with, and to prove who has approved the content data (to ensure identity).

  In this case, for example, the information processing apparatus of the approver adds attribute information such as the name of the signer (approver), the date and time of signing, and the reason for signing to the content data, and uses this information as a powerful one-way hash function. After converting to a fixed-length digest, the digital signature information is generated by encrypting the digest with a secret key, and the digital signature information is added to the content data and transmitted via the network.

  On the other hand, the information processing apparatus of the receiver of the content data decrypts the electronic signature information added to the content data with the signer's public key, and the content data, the name of the signer added thereto, the signature date and time, the signature Whether or not the content data was created by the creator by converting attribute information such as the reason into a digest using the same hash function as the hash function and comparing the digest with the decrypted information It is verified whether it has been tampered with.

  However, in the digital signature, the authenticity of the signer can be ensured, but the authenticity of the signature time cannot be ensured. This is because the signature time added as the attribute information of the electronic signature is generally information with low reliability acquired from the timer circuit of the information processing apparatus of the signer itself.

  Therefore, in order to prove that content data existed at a certain date (to ensure its existence), a time stamp service (time stamping) provided by a reliable third party such as CA (Certificate Authority) Is also used).

  In such a service, for example, the information processing apparatus of the approver generates a digest of content data, and transmits the digest to a third party server via the network. The electronic signature information is generated by encrypting the date and time information accurately obtained by the digest and atomic clock with the private key of the third party organization itself, and the time stamp token including the electronic signature information and the date and time information is generated. It is transmitted to the information processing apparatus of the signer. Then, the information processing apparatus of the signer adds the received time stamp token to the content data and transmits it via the network.

  On the other hand, the information processing apparatus of the receiver of the content data decrypts the electronic signature information part of the time stamp token added to the content data with the public key of the third party organization, thereby indicating the content data in the date / time information. It is verified whether it existed at the date and time.

  By the way, when it is desired to prove the authenticity of a plurality of attributes such as the identity and existence (who approved at what time) of one content data, it has been conventionally described in, for example, Patent Documents 1 and 2. As described above, it has been common to generate a plurality of pieces of electronic signature information by adding an electronic signature to each attribute to be certified and add it to the content data.

JP 2005-229450 A JP 2005-303951 A

  However, in the conventional method as described above, although the authenticity of each attribute can be ensured for each electronic signature information, it is difficult to ensure the authenticity by associating the individual attributes. For example, even if the identity is secured by the electronic signature information and the existence is secured by the time stamp token, the approver indicated in the electronic signature information has truly approved the content data at the date and time indicated in the time stamp token. I can't go with anything.

  The present invention has been made in view of the above points, and strengthens the relevance between attributes that ensure the authenticity of content data by a plurality of authenticity securing information, and ensures the authenticity thereof. An object of the present invention is to provide an information generation processing program, an information generation apparatus, and an information generation method.

  In order to solve the above-described problem, the invention described in claim 1 includes a plurality of pieces of authenticity securing information for ensuring the authenticity of content data, and a plurality of attributes indicating the attributes for which the authenticity is secured by the plurality of authenticity securing information. A computer for generating content data added together with the attribute information, including an attribute information setting area in which the plurality of attribute information is set, and a plurality of authenticity securing information setting areas in which the plurality of authenticity securing information is set A setting area adding means for adding one setting area to the content data; an attribute information setting means for setting at least approver information indicating an approver of the content data in the attribute information setting area as the attribute information; Functioning as authenticity securing information setting means for setting authenticity securing information in the authenticity securing information setting area, respectively. Is a portion in which the attribute information in which the authenticity is ensured by the plurality of authenticity securing information except the approver information in the attribute information setting area in the content data to which the setting area is added; and Each authenticity securing information is generated by a predetermined generation means for a portion excluding the authenticity ensuring information setting area in which the authenticity ensuring information is not set, and the generated authenticity ensuring information is respectively The attribute information for which the authenticity is ensured by the authenticity securing information when setting the authenticity securing information excluding the authenticity securing information that is set in the authenticity securing information setting area and ensures the authenticity of the approver information. And acquiring the attribute information from the authenticity securing information generated by the generating means, and setting the acquired attribute information in the attribute information setting area. The features.

  According to a second aspect of the present invention, in the information generation processing program according to the first aspect, the attribute information includes approval date and time information indicating a date and time when the content data is approved, and the authenticity securing information setting unit includes The authenticity generated by the generating means includes the date and time information indicating the current date and time when the authenticity ensuring information is ensured when setting the authenticity ensuring information for ensuring the authenticity of the approval date and time of the content data. The date and time information is acquired from the reservation information, and the acquired date and time information is set as the approval date and time information in the attribute information setting area.

  According to a third aspect of the present invention, in the information generation processing program according to the first or second aspect, the content data is data generated in a predetermined format, and the setting area adding means According to the specification, the setting area is added as one area.

  According to a fourth aspect of the present invention, in the information generation processing program according to any one of the first to third aspects, the content data is an electronic document including at least character information, and the approver information is When the electronic document is displayed by executing a predetermined application program by a computer, the image information is displayed together with the electronic document and includes image information representing an imprint indicating the approver.

  According to a fifth aspect of the present invention, in the information generation processing program according to any one of the first to fourth aspects, the setting area adding unit respectively stores the plurality of authenticity securing information set in the setting area. Adding the setting area including a specific information setting area in which specific information for specifying is set, information indicating the type of each of the authenticity securing information, and information indicating the range of the authenticity securing information setting area; The computer is further caused to function as specific information setting means for setting the specific information in the specific information setting area as the specific information.

  The invention according to claim 6 is the content data in which a plurality of pieces of authenticity ensuring information for ensuring the authenticity of the content data are added together with a plurality of pieces of attribute information indicating attributes for which the authenticity is ensured by the plurality of authenticity securing information. In the information generating apparatus that generates the information, the setting information includes one setting area including an attribute information setting area in which the plurality of attribute information is set and a plurality of authenticity securing information setting areas in which the plurality of authenticity securing information is set. Setting area adding means for adding to content data, attribute information setting means for setting at least approver information indicating an approver of the content data in the attribute information setting area, and the plurality of authenticity securing information as the attribute information Authenticity securing information setting means for setting in the authenticity securing information setting area, respectively. In the attributed content data, in the attribute information setting area, except for the approver information, a portion in which the attribute information whose authenticity is ensured by the plurality of authenticity securing information is set, and the authenticity securing information is set. Each authenticity securing information is generated by a predetermined generation means for a portion other than the authenticity securing information setting area that is not, and the generated authenticity securing information is set in the authenticity securing information setting area, respectively. When setting the authenticity securing information excluding the authenticity ensuring information for ensuring the authenticity of the approver information, the generating means includes the attribute information whose authenticity is ensured by the authenticity securing information. The attribute information is acquired from the generated authenticity securing information, and the acquired attribute information is set in the attribute information setting area.

  According to the seventh aspect of the present invention, content data obtained by adding a plurality of authenticity securing information for ensuring the authenticity of content data together with a plurality of attribute information indicating attributes for which authenticity is ensured by the plurality of authenticity securing information, respectively. In the information generation method for generating the plurality of attribute information, one setting area including: an attribute information setting area in which the plurality of attribute information is set; and a plurality of authenticity securing information setting areas in which the plurality of authenticity securing information is set. A setting area adding step for adding to content data, an attribute information setting step for setting at least approver information indicating an approver of the content data in the attribute information setting area as the attribute information, and the plurality of authenticity securing information. Respectively, in the authenticity securing information setting step, in the authenticity securing information setting step, Of the content data to which the authenticity information is set by the plurality of authenticity securing information except for the approver information in the attribute information setting area, and the authenticity securing information Each authenticity securing information is generated by a predetermined generation means for a portion excluding the unauthenticated authenticity securing information setting area, and each of the generated authenticity securing information is set in the authenticity securing information setting area. And setting the authenticity securing information excluding the authenticity securing information that secures the authenticity of the approver information, including the attribute information whose authenticity is ensured by the authenticity securing information. The attribute information is acquired from the authenticity securing information generated by the means, and the acquired attribute information is set in the attribute information setting area.

  According to the first aspect of the present invention, the information whose authenticity is ensured by each authenticity securing information is set as attribute information in the attribute setting area, so that a plurality of authenticity securing information can be obtained by the set attribute information. Since they are associated with each other, more accurate attribute information can be recognized by the user, and the authenticity of the attribute information can be verified.

  According to the second aspect of the present invention, it is possible to further ensure the authenticity of when and who approved the content data.

  According to the invention described in claim 3, since the relevance of each authenticity securing information is strengthened, the relevance between the respective attribute information for which the authenticity is ensured can be strengthened, and the authenticity can be further ensured. it can.

  According to the invention described in claim 4, a plurality of authenticity securing information is set in one setting area and added to the electronic document, and a person who has approved the contents of the electronic document is easily recognized. I'm going.

  According to the fifth aspect of the present invention, since each authenticity ensuring information can be specified reliably, the type and number of the authenticity securing information to be set can be easily changed.

  Hereinafter, the best embodiment of the present invention will be described in detail with reference to the drawings. In the embodiment described below, composite signature information including electronic signature information as an example of authenticity information and a time stamp token is created for an electronic document, and the composite signature information is added to the electronic document. This is an embodiment when the present invention is applied to an electronic document creation apparatus with a signature that implements a composite electronic signature.

[1. Structure of electronic document with composite signature information]
First, the structure and the like of an electronic document to which composite signature information according to this embodiment is added (hereinafter referred to as an electronic document with a composite signature) will be described with reference to FIG. In the following description, the term “electronic document” means both an electronic document to which no composite signature information is added and an electronic document with a composite signature.

  FIG. 1 is a diagram illustrating an example of the structure of an electronic document 100 with a composite signature according to the present embodiment.

  As shown in FIG. 1, an electronic document with a composite signature 100 is composed of an original electronic document 101 that is a signature target and a composite signature area 102 as an example of a setting area.

  Here, the electronic document according to the present embodiment is processed (for example, displayed, printed, edited, etc.) by executing a predetermined application program (hereinafter referred to as a predetermined application) by the signed electronic document creation apparatus. This is an electronic document file in a predetermined format. The format can handle a plurality of data as one file. In this case, a plurality of areas are provided in one file, and data is stored in each of the areas. The format also allows new data to be added to the original electronic document file. In this case, a new area is added to the original file and new data is stored in the area. Is done. An example of such a format is PDF (Portable Document Format) proposed by Adobe Systems, but if other data such as composite signature information can be added later, other formats are used. May be. An example of the predetermined application is Adobe Acrobat (trademark) of Adobe Systems, but is not limited to this.

  In this embodiment, in accordance with the specification of a predetermined format, a composite signature area 102 is provided as a new area separately from the area where the electronic document 101 is stored, and composite signature information is stored in the area. Here, in accordance with the format specification, the composite signature-added electronic document 100 includes, for example, a header area and an area for managing each area, but illustration thereof is omitted. The original electronic document 101 may include a plurality of data. In this case, electronic signature information such as composite signature information added in advance may be included.

  In the composite signature area 102, an attribute area 200 as an example of an attribute information setting area, a division management area 300 as an example of a specific information setting area, and a signature storage area 400 are provided.

  The attribute area 200 is an area in which attribute information of a composite electronic signature is set. The signature identification unit 201, a signature image 202 and signer 203 as an example of approver information, and a signature time 204 as an example of approval date information. , A signature reason 205 and a signature location 206 are set.

  The signature identification unit 201 is identification information indicating that the composite signature area 102 is an area in which electronic signature information is stored, and identification information to be set is determined according to the format specification.

  The signature image 202 is imprint image data representing a seal of a seal stamp in which the name of the person who has approved the contents of the electronic document 102 (including the person who created the electronic document 102) is engraved. When the creation apparatus executes a predetermined application, the imprint is displayed superimposed on the electronic document. Note that the signature image 202 includes information (for example, a display page and display coordinates on the electronic document) indicating a display position when the seal image is displayed.

  The signer 203 is text indicating the name of the person who approved the contents of the electronic document 102.

  The signature time 204 is date / time information that represents the date / time when the contents of the electronic document 102 are approved in UTC (Coordinated Universal Time), and accurate date / time information is set as will be described later.

  The reason for signature 205 is a text indicating the reason for approving the contents of the electronic document 102, and the signature location 206 is a text indicating the approved location. In the present embodiment, each of them is an arbitrary input by the signer. Is set.

  Next, the division management area 300 is a management area for specifying the electronic signature information and the time stamp token, and the area division number 301 and the table of contents information 302 and 303 are set therein.

  The area division number 301 is information indicating the number of signature areas provided in the signature storage area 400, and is 2 in this embodiment.

  The table of contents information 302 and 303 includes the type of electronic signature area 401 (area # 1) and time stamp area 402 (area # 2), and the start position as an example of information indicating the range (for example, the head of the composite signature area 102). Offset position from) and the size are set.

  Next, the signature storage area 400 is provided with an electronic signature area 401 in which electronic signature information is set and a time stamp area 402 in which a time stamp token is set as an example of an authenticity securing information setting area.

  Each area is a unique area in the present embodiment, or is recognized as a single composite signature area 102 on the format.

  The attribute area 200, the division management area 300, and the signature storage area 400 (the electronic signature area 401 and the time stamp area 402) are obtained by internally dividing the composite signature area 102. In this way, by adding a single area as the composite signature area 102 according to the specification of a predetermined format and dividing the inside uniquely, it is possible to set the digital signature information and the time stamp token, thereby adding a signature. When the electronic document creation apparatus executes a predetermined application, it is recognized as one electronic signature information.

[2. Configuration and function of electronic document creation apparatus with signature]
Next, the configuration and functions of the signed electronic document creation apparatus 1 according to the present embodiment will be described with reference to FIG.

  FIG. 2 is a diagram showing an example of a schematic configuration of the signed electronic document creation apparatus 1 according to the present embodiment.

  As shown in FIG. 2, the signed electronic document creation apparatus 1 is connected to a network NW. The network NW includes, for example, a local area network, a public line network, a mobile communication line network, the Internet, and the like.

  In addition to the signed electronic document creation apparatus 1, signed electronic document creation apparatuses 1a and 1b having the same configuration as the signed electronic document creation apparatus 1 are connected to the network NW. Each of the signed electronic document creation apparatuses 1, 1a, and 1b can create an electronic document with composite signature information, and can transmit / receive data such as the electronic document to / from each other via the network NW. In addition, these signed electronic document creation apparatuses can verify electronic documents with composite signature information. These electronic document creation apparatuses with signatures are used, for example, by employees who belong to the same company. In the following, the signed electronic document creation apparatus 1 will be described mainly on behalf of the signed electronic document creation apparatuses 1, 1a, and 1b.

  The network NW is further connected with a time stamp server 2 as an example of a generating means for generating a time stamp token. The time stamp server 2 and the signed electronic document creation apparatus 1 can exchange data with each other via the network NW. The time stamp server 2 acquires accurate date and time information as a time stamp time from, for example, an atomic clock (not shown). Then, the time stamp server 2 receives the digest of the electronic document from the signed electronic document creation apparatus 1 or the like, encrypts the digest and the time stamp time, etc., and creates a time stamp token consisting of these information to create the signed electronic document The data is transmitted to the device 1. In addition, since the structure and function of the time stamp server 2 are well-known, detailed description is abbreviate | omitted.

  As shown in FIG. 2, the signed electronic document creation apparatus 1 is connected to a network NW and controls a communication unit 11 that controls communication with the signed electronic document creation apparatuses 1a and 1b and the time stamp server 2, and characters and images. Display unit 12 (for example, a liquid crystal display) that displays information such as, and an operation unit 13 (for example, a button, a keyboard, and the like) that receives an operation instruction from a user and outputs the instruction content to the system control unit 16 as an instruction signal. Mouse), a clock unit 14 that outputs date and time information indicating the current date and time to the system control unit 16, a storage unit 15 (for example, a hard disk drive, a flash memory, and the like) that stores various programs and data, and a CPU ( Setting area adding means including Central Processing Unit), RAM (Random Access Memory), ROM (Read Only Memory), etc., attribute information setting means, Information setting means, the system control unit 16 as an example of authenticity ensuring information setting means and generating means, comprising a, the system control unit 16 and the respective portions are connected to each other via a system bus 17.

  As the signed electronic document creation apparatus 1, for example, a personal computer, a PDA (Personal Digital Assistant) or the like can be applied, but is not limited thereto.

  The storage unit 15 stores a predetermined operating system, various application programs, a composite electronic signature program as an example of an information generation processing program, and the like. The composite electronic signature program or the like may be downloaded from a predetermined server or the like via the network NW, or may be recorded on a recording medium such as a CD-ROM and read via an optical disk drive or the like. You may make it.

  The storage unit 15 stores a plurality of electronic documents as electronic document files having a predetermined format.

  The storage unit 15 further stores seal management information, a private key for creating an electronic signature, an electronic certificate, a public key for verifying a time stamp, and the like.

  The seal stamp management information is information related to the seal stamp owned by the user of the signed electronic document creation apparatus 1, and specifically includes seal stamp image data representing the seal stamp and the owner name (namely, user name). Yes. For example, an imprint of a seal stamp actually owned by a user is captured by an image scanner or the like and stored as image data of a predetermined format.

  The private key for creating an electronic signature is a key used when creating electronic signature information for assuring that the signer of the electronic document is the user of the signed electronic document creation apparatus 1. In order to create electronic signature information using the private key, the user's own electronic certificate is required.

  The electronic certificate includes an electronic certificate of the user of the signed electronic document creation apparatus 1 and an electronic certificate of a user of the other signed electronic document creation apparatuses 1a and 1b. This electronic certificate is information issued from a CA or the like to a user, and includes a public key for verifying electronic signature information created using a private key.

  The public key for time stamp verification is a key for verifying the time stamp token created by the time stamp server 2.

  The system control unit 16 reads and executes various programs stored in the ROM and the storage unit 15 to control the entire signed electronic document creation apparatus 1, as well as a setting area adding unit, an attribute information setting unit, and a specific information setting unit. It functions as authenticity securing information setting means and generating means for creating electronic signature information.

  Specifically, the system control unit 16 displays an electronic document on the screen of the display unit 12 by executing a predetermined application.

  FIG. 3 is a diagram illustrating an example of a display screen of an electronic document with a composite signature.

  As shown in FIG. 3, the electronic document is displayed in the electronic document display area 51 on the electronic document display screen. When the electronic document is an electronic document with a composite signature, an imprint image 52 indicating a signer is displayed in an superimposed manner on the electronic document in the electronic document display area 51. The imprint image 52 is displayed based on the signature image 202. By displaying this imprint image 52 together with the electronic document, the user can recognize that the composite signature information is added to the electronic document.

  In the signature list display area 53, table of contents information of all electronic signature information added to the electronic document displayed in the electronic document display area 51 is displayed. Although the composite signature information according to the present embodiment includes electronic signature information and a time stamp token, only the table of contents information 54 of the composite signature information is displayed in the electronic document display area 51 due to the structure described above (of course, other This is not the case when the electronic signature information is added).

  Next, the system control unit 16 calculates the size of the composite signature area 102 as a setting area adding means by executing the composite electronic signature program, and then composites the electronic document to be signed according to the specification of a predetermined format. A signature area 102 is added.

  Further, the system control unit 16 as the attribute information setting means sets each attribute information in the attribute area 200 of the added composite signature area 102.

  Further, the system control unit 16 as specific information setting means sets the area division number 301 and the table of contents information 302 and 303 in the division management area of the added composite signature area 102.

  Further, the system control unit 16 as the authenticity securing information setting means sets the electronic signature information and the time stamp token in the electronic signature area 401 and the time stamp area 402 of the added composite signature area 102, respectively. .

  First, in order to set electronic signature information, the system control unit 16 includes a part in which the signature time 204 of the attribute area 200 is set, an electronic signature area 401 and a time stamp in the electronic document to which the composite signature area 102 is added. The digest for the range excluding the area 402 (the entire range of the signature storage area 400) is calculated. Here, the part where the signature time 204 is set is excluded from the digest calculation target because the time stamp time included in the time stamp token is set later. Then, the system control unit 16 serving as a generation unit generates, as electronic signature information, the digest encrypted with the user's own private key of the signed electronic document creation apparatus 1.

  Next, the system control unit 16 excludes the part where the signature time 204 of the attribute area 200 is set and the time stamp area 402 from the electronic document to which the composite signature area 102 is added in order to set the time stamp token. The digest for the range is calculated. Then, the time stamp token creation request is transmitted to the time stamp server 2 using the digest as a parameter, the time stamp token transmitted from the time stamp server 2 is received, and the time stamp time included in the time stamp token is determined. The signature time 204 is set in the attribute area 200.

  Note that the composite electronic signature program may be executed independently of a predetermined application, for example, or may be executed as an add-in of the application by being called from the predetermined application.

[3. Operation of signed electronic document creation device]
Next, the operation of the signed electronic document creation apparatus 1 will be described with reference to FIGS. 4 to 6. When the composite electronic signature is implemented, when the composite signed electronic document is verified with the composite electronic signature, This will be explained separately.

  FIG. 4 is a diagram showing a processing example when the composite electronic signature of the system control unit 16 of the signed electronic document creation apparatus 1 according to the present embodiment is implemented.

  When performing a composite electronic signature, first, the user operates the operation unit 13 such as a mouse to start the composite electronic signature program in the system control unit 16 and displays the electronic document to be signed on the screen of the display unit 12. Let Then, the user designates the seal location (position where the seal image is displayed) of his / her seal with respect to the electronic document displayed on the screen using the operation unit 13.

  Then, the system control unit 16 calculates the size of the composite signature area 102 as shown in FIG. 4 (step S1). Specifically, since each piece of attribute information set in the attribute area 200 has a fixed size, the size of the attribute area 200 is set to a preset size. The size of the division management area 300 is obtained by calculating the size of the area division number 301 + the size of the table of contents information x the number of table of contents information (the number of digital signature information set in the signature storage area). Also, since the electronic signature information and the time stamp token are obtained in a constant size regardless of the content of the target digest, for example, the electronic signature information and the time obtained for the dummy data set in the RAM or the like are the targets. Let the size of the stamp token be the size of the electronic signature area 401 and the time stamp area 402, respectively. Note that the size of the composite signature area 102 may be calculated with the sizes of the electronic signature area 401 and the time stamp area 402 as fixed sizes set in advance.

  Thereafter, the system control unit 16 adds the composite signature area 102 to the electronic document with the size obtained in step S1 in accordance with the specification of the predetermined format, and sets zero data as an initial value in the area (step S2). .

  Next, the system control unit 16 sets each attribute information in the attribute area 200 of the added composite signature area 102 (step S3). Specifically, the system control unit 16 sets identification information according to the specification of a predetermined format as the signature identification unit 201. Further, the system control unit 16 sets the display position of the seal image data stored as the seal stamp management information in the storage unit 15 and the seal image designated by the user as the signature image 202, and sets the owner name of the seal stamp as the signer. 203 is set. Further, the system control unit 16 temporarily sets the current date and time information acquired from the time measuring unit 14 as the signature time 204, but it may not be set at this time. Further, the system control unit 16 sets, for example, an arbitrary text such as “I am the creator of this document” as the signature reason 205, and an arbitrary text such as “XXX Corporation” as the signature location 206. Set as.

  Then, the system control unit 16 sets each piece of management information in the divided management area 300 of the added composite signature area 102 (step S4). Specifically, the system control unit 16 sets 2 as the area division number 301. Further, the system control unit 16 sets the start position, size, and type of the electronic signature area 401 and the time stamp area 402 as the table of contents information 302 and the table of contents information 303, respectively.

  Next, the system control unit 16 creates electronic signature information of the electronic document (step S5). Specifically, the system control unit 16 excludes the part in which the signature time 204 of the attribute area 200 is set, the electronic signature area 401, and the time stamp area 402 from the electronic document to which the composite signature area 102 is added. Is created using a predetermined hash function. Then, the system control unit 16 encrypts the created digest with the user's own private key stored in the storage unit 15 to create electronic signature information.

  Then, the system control unit 16 sets the created electronic signature information in the electronic signature area 401 (step S6).

  Next, the system control unit 16 acquires a time stamp token of the electronic document (step S7). Specifically, the system control unit 16 determines the digest of the electronic document to which the composite signature area 102 has been added from the range excluding the part where the signature time 204 of the attribute area 200 is set and the time stamp area 402. Created using a predetermined hash function. Then, the system control unit 16 transmits a time stamp token creation request to the time stamp server 2 via the network NW, using the created digest as a parameter.

  The time stamp server 2 that has received the request acquires the current accurate date and time information as the time stamp time, encrypts the time stamp time and the received digest, etc. with a secret key, and the time stamp time, the digest, etc. Create a timestamp token by combining the data. Then, the time stamp server 2 transmits the created time stamp token to the signed electronic document creation apparatus 1.

  When receiving the time stamp token, the system control unit 16 sets the time stamp token in the time stamp area 402 (step S8).

  Next, the system control unit 16 obtains the time stamp time included in the time stamp token, sets the date / time information in the attribute area 200 as the signature time 204 (step S9), and ends the process.

  FIG. 5A is a diagram illustrating an example of an electronic signature information display screen, and FIG. 5B is a diagram illustrating an example of a time stamp information display screen.

  When the electronic document to which the composite electronic signature information is added as described above is displayed by a predetermined application, it is displayed as shown in FIG. Then, for example, when the user selects the seal image 52 or the table of contents information 54 on the display screen shown in FIG. 3, an electronic signature information display screen as shown in FIG. 5A is displayed.

  In FIG. 5A, in the signature information display area 61, the signer 203, the signature time 204, the signature reason 205, and the signature location 206 set in the attribute area 200 are displayed.

  In the verification result display area 62, the result of verifying the electronic document with the electronic signature information set in the electronic signature area 401 is displayed.

  An OK button 63 is a button for erasing the electronic signature information display screen, and an electronic certificate button 64 displays information on the electronic certificate of the person who signed the electronic document (signer displayed in the signature information display area 61). It is a button for displaying.

  When the user selects the time stamp button 65, a time stamp information display screen as shown in FIG. 5B is displayed.

  In FIG. 5B, the verification result display area 71 displays the result of verifying the electronic document using the time stamp token set in the time stamp area 402.

  In the time stamp time display area 72, the time stamp time included in the time stamp token is displayed.

  An OK button 73 is a button for deleting the time stamp information display screen, and a detail button 74 is a button for displaying detailed information of the time stamp token.

  Here, since the time stamp time included in the time stamp token is set as the signature time in step S9, as shown in FIGS. 5A and 5B, the signature time displayed on the electronic signature information display screen is displayed. And the time stamp time displayed on the time stamp information display screen are the same. As described above, since the signature time of the electronic signature and the time stamp time of the time stamp are associated with each other, an accurate signature time can be displayed as attribute information of the composite electronic signature. In other words, it is possible to more accurately display “when and who approved”.

  FIG. 6 is a diagram showing an example of processing in a case where a digital signature-added electronic document is verified by a composite digital signature of the system control unit 16 of the signature-added electronic document creation apparatus 1 according to the present embodiment.

  When verifying an electronic document with a composite signature using a composite electronic signature, the system control unit 16 refers to the division management area 300 of the added composite signature area 102 as shown in FIG. The size is specified, and the time stamp token is read from the time stamp area 402 and copied onto the RAM (step S21).

  Next, the system control unit 16 verifies the electronic document with the composite signature based on the time stamp (step S22). Specifically, the system control unit 16 has the same range as the time when the time stamping is performed in the electronic document with a composite signature (the range excluding the portion where the signature time 204 of the attribute area 200 is set and the time stamp area 402). ), A digest is created with the same hash function as when the time stamp was performed. Then, the created digest is compared with the digest included in the time stamp token copied on the RAM. Further, the system control unit 16 decrypts the encrypted data included in the time stamp token with the public key for time stamp verification, and compares the decrypted data with the digest.

  Then, the system control unit 16 determines whether or not the result of the verification is normal (step S23), and if the created digest does not match the digest included in the time stamp token, or the decryption is performed. If the data does not match the digest, it is determined that an abnormality has been detected (step S23: NO), and information indicating that an abnormality has been detected in the time stamp verification is displayed on the screen of the display unit 12 ( Step S30), the process ends.

  On the other hand, if the created digest matches the digest included in the time stamp token, and the decrypted data matches the digest, the system control unit 16 determines that the digest is normal (step S23). : YES), the signature time set in the attribute area 200 is compared with the time stamp time included in the time stamp token (step S24).

  Then, the system control unit 16 determines whether or not the signature time and the time stamp time match (step S25), and if they do not match (step S25: NO), information indicating that the signature time has been tampered with. Is displayed on the screen of the display unit 12 (step S30), and the process ends.

  On the other hand, when the signature time and the time stamp time match (step S25: YES), the system control unit 16 refers to the division management area 300, identifies the position and size of the electronic signature area 401, and sets the electronic signature area 401. The electronic signature information is read out from and copied onto the RAM (step S26).

  Next, the system control unit verifies the electronic document with the composite signature using the electronic signature (step S27). Specifically, the system control unit 16 has the same range as that when the electronic signature is executed in the composite signature-added electronic document (the part where the signature time 204 of the attribute area 200 is set, the electronic signature area 401, and the time stamp area 402. For the range excluding and), a digest is created with the same hash function as when the electronic signature was implemented. Then, the electronic signature information copied onto the RAM is decrypted with the public key of the signer indicated by the signer 203 set in the attribute area 200, and the decrypted data is compared with the digest.

  Then, the system control unit determines whether or not the result of the verification is normal (step S28), and determines that an abnormality has been detected when the decoded data and the digest do not match (step S28). : NO), information indicating that an abnormality has been detected in the verification by the electronic signature is displayed on the screen of the display unit 12 (step S30), and the process ends.

  On the other hand, if the decrypted data and the digest match, the system control unit 16 determines that the data is normal (step S28: YES), information indicating that the overall verification result is normal, and individual information Information indicating that the verification results are normal is displayed on the screen of the display unit 12 (step S29), and the process ends.

  As described above, according to the present embodiment, the system control unit 16 includes the attribute area 200 in which the attribute information of the composite electronic signature is set, the electronic signature area 401 in which the digital signature information is set, and the time stamp token. 1 is added to the electronic document, and each attribute information is set in the attribute area 200. Among the electronic documents to which the composite signature area 102 is added, After creating the electronic signature information for the range excluding the part where the signature time 204 of the attribute area 200 is set, the electronic signature area 401, and the time stamp area 402, and setting the electronic signature information in the electronic signature area 401, Of the electronic document to which the composite signature area 102 is added, a part in which the signature time 204 of the attribute area 200 is set and a time stamp area 402 are The time stamp server 2 creates a time stamp token for the range that has been set, sets the time stamp token in the time stamp area 402, and sets the time stamp time included in the time stamp token as the signature time 204 to the attribute area 200. It is supposed to be set to.

  Therefore, by associating the electronic signature and the time stamp, it is possible to more accurately display when and who approved the electronic document. Also, the authenticity of the signature time 204 can be easily verified.

  The electronic document is data created in a predetermined format, and the system control unit 16 adds the composite signature area 102 to the electronic document as one area according to the specification of the format. The relationship between the time 203 and the signature time 204 is further strengthened, and the authenticity of when and who approved the electronic document can be further ensured.

  Further, the attribute area 200 includes a signature image 202 representing an imprint indicating a signer, and when the system control unit 16 executes a predetermined application and displays the electronic document on the screen, the electronic document Since the seal impression is displayed in a superimposed manner, the user can easily recognize that the composite electronic signature has been applied to the electronic document and the person who has executed the composite electronic signature.

  The composite signature area 102 is provided with a division management area 300 for dividing and managing a plurality of pieces of electronic signature information set in the signature storage area 400. The division management area 300 includes each piece of electronic signature information. Since the type and the start position and size of each electronic signature area are set, each electronic signature information can be specified reliably, and the electronic signature used for the composite electronic signature can be flexibly changed or expanded. be able to.

  In the embodiment described above, the electronic signature information is created first and the time stamp token is created later, but this order may be changed. In this case, when creating a time stamp token, the electronic signature area 401 and the time stamp area 402 are excluded from the digest creation target, and when creating the electronic signature information, the electronic signature area 401 is excluded from the digest creation target. Just do it. That is, an electronic signature area for which electronic signature information has not yet been set may be excluded from the digest creation target.

  Also, the types of electronic signatures to be used are not limited to electronic signatures and time stamps that secure the identity, but other types of electronic signatures may be used. For example, using an electronic signature that ensures identity and an electronic signature that can obtain an accurate signature location by GPS (Global Positioning System) and the like and that can ensure the authenticity of the signature location, You may make it produce the composite electronic signature information for ensuring that "who approved." In this case, when each digital signature is created, a portion where the signature location 206 of the attribute area 200 is set may be excluded from the digest creation target.

  Further, the number of electronic signatures to be used may be three or more. For example, composite electronic signature information for ascertaining “when and where who approved” may be created. In such a case, the size of the division management area 300 and the signature storage area 400 may be set to an appropriate size, and an appropriate number may be set as the area division number 301.

  Further, if the number and type of electronic signatures to be used are fixed, the division management area 300 may not be provided in the composite signature area 102.

  In addition, the electronic signature method, the encryption method, the device for generating the electronic signature information, and the like are not limited to the example described in the above embodiment, and can be appropriately changed and applied.

  Further, the image displayed together with the electronic document as the image indicating the signer is not limited to the imprint image, but may be an image representing the signer's signature or a facial photograph, for example.

  Further, data to be signed is not limited to an electronic document, and may be image data, audio data, or the like, for example.

It is a figure which shows an example of the structure of the electronic document 100 with a composite signature which concerns on this embodiment. It is a figure which shows an example of schematic structure of the electronic document creation apparatus with a signature 1 concerning this embodiment. It is a figure which shows an example of the display screen of an electronic document with a composite signature. It is a figure which shows the process example in the case of implementing the composite electronic signature of the system control part 16 of the electronic document production apparatus 1 with a signature which concerns on this embodiment. (A) is a figure which shows an example of an electronic signature information display screen, (b) is a figure which shows an example of a time stamp information display screen. It is a figure which shows the process example in the case of verifying the electronic document with a composite signature by the composite electronic signature of the system control part 16 of the electronic document creation apparatus with a signature which concerns on this embodiment.

Explanation of symbols

1, 1a, 1b Signed electronic document creation device 2 Time stamp server 11 Communication unit 12 Display unit 13 Operation unit 14 Timekeeping unit 15 Storage unit 16 System control unit 17 System bus NW network

Claims (7)

A computer that generates content data to which a plurality of pieces of authenticity ensuring information for ensuring the authenticity of content data is added together with a plurality of attribute information indicating attributes for which the authenticity is respectively secured by the plurality of authenticity securing information,
Setting area addition for adding one setting area including the attribute information setting area in which the plurality of attribute information is set and the plurality of authenticity securing information setting areas in which the plurality of authenticity securing information is set to the content data means,
Attribute information setting means for setting at least approver information indicating an approver of the content data in the attribute information setting area as the attribute information;
The plurality of authenticity securing information functions as authenticity securing information setting means for setting each of the authenticity securing information setting areas,
The authenticity securing information setting means includes:
Of the content data to which the setting area has been added, a part in which the attribute information whose authenticity is ensured by the plurality of authenticity securing information except the approver information is set in the attribute information setting area, and the authenticity Each genuine securement information is generated by a predetermined generation means for a portion excluding the authentic securement information setting area in which securement information is not set, and each of the generated authentic securement information is ensured by the securement Set in the information setting area,
When setting the authenticity securing information excluding the authenticity securing information that secures the authenticity of the approver information, it is generated by the generating means including the attribute information whose authenticity is ensured by the authenticity securing information. An information generation processing program characterized in that the attribute information is acquired from the authenticity securing information, and the acquired attribute information is set in the attribute information setting area. In the information generation processing program according to claim 1,
The attribute information includes approval date and time information indicating the date and time when the content data is approved,
The authenticity securing information setting means includes date and time information indicating a current date and time when authenticity is ensured by the authenticity ensuring information when setting the authenticity ensuring information for ensuring authenticity of the approval date and time of the content data. An information generation processing program characterized in that the date and time information is acquired from the authenticity securing information generated by the generating means, and the acquired date and time information is set as the approval date and time information in the attribute information setting area. In the information generation processing program according to claim 1 or 2,
The content data is data generated in a predetermined format,
The setting area adding means adds the setting area as one area in accordance with the format specification. In the information generation processing program of any one of Claims 1 thru | or 3,
The content data is an electronic document including at least character information,
The approver information is image information that is displayed together with the electronic document when the electronic document is displayed by the computer executing a predetermined application program, and is image information that represents an imprint indicating the approver. An information generation processing program comprising: In the information generation processing program according to any one of claims 1 to 4,
The setting area adding means adds the setting area including a specific information setting area in which specific information for specifying each of the plurality of authenticity securing information set in the setting area is set,
For each authenticity securing information, the computer further functions as specific information setting means for setting information indicating the type and information indicating the range of the authenticity ensuring information setting area in the specific information setting area as the specific information. An information generation processing program characterized in that In an information generating apparatus for generating content data in which a plurality of pieces of authenticity ensuring information for ensuring the authenticity of content data are added together with a plurality of attribute information indicating attributes for which the authenticity is respectively secured by the plurality of authenticity securing information,
Setting area addition for adding one setting area including the attribute information setting area in which the plurality of attribute information is set and the plurality of authenticity securing information setting areas in which the plurality of authenticity securing information is set to the content data Means,
Attribute information setting means for setting at least the approver information indicating the approver of the content data in the attribute information setting area as the attribute information;
Authenticity securing information setting means for setting each of the plurality of authenticity securing information in the authenticity securing information setting area,
The authenticity securing information setting means includes:
Of the content data to which the setting area has been added, a part in which the attribute information whose authenticity is ensured by the plurality of authenticity securing information except the approver information is set in the attribute information setting area, and the authenticity Each genuine securement information is generated by a predetermined generation means for a portion excluding the authentic securement information setting area in which securement information is not set, and each of the generated authentic securement information is ensured by the securement Set in the information setting area,
When setting the authenticity securing information excluding the authenticity securing information that secures the authenticity of the approver information, it is generated by the generating means including the attribute information whose authenticity is ensured by the authenticity securing information. An information generation apparatus characterized by acquiring the attribute information from the authenticity securing information and setting the acquired attribute information in the attribute information setting area. In an information generation method for generating content data in which a plurality of pieces of authenticity ensuring information for ensuring the authenticity of content data is added together with a plurality of pieces of attribute information indicating attributes for which the authenticity is respectively secured by the plurality of authenticity securing information,
Setting area addition for adding one setting area including the attribute information setting area in which the plurality of attribute information is set and the plurality of authenticity securing information setting areas in which the plurality of authenticity securing information is set to the content data Process,
An attribute information setting step for setting, in the attribute information setting area, approver information indicating at least an approver of the content data as the attribute information;
Authenticity securing information setting step for setting the plurality of authenticity securing information in the authenticity securing information setting area respectively,
In the authenticity securing information setting step,
Of the content data to which the setting area has been added, a part in which the attribute information whose authenticity is ensured by the plurality of authenticity securing information except the approver information is set in the attribute information setting area, and the authenticity Each genuine securement information is generated by a predetermined generation means for a portion excluding the authentic securement information setting area in which securement information is not set, and each of the generated authentic securement information is ensured by the securement Set in the information setting area,
When setting the authenticity securing information excluding the authenticity securing information that secures the authenticity of the approver information, it is generated by the generating means including the attribute information whose authenticity is ensured by the authenticity securing information. An information generation method characterized by acquiring the attribute information from the authenticity securing information and setting the acquired attribute information in the attribute information setting area.

Images