JP4072376B2 - Electronic signature apparatus, server, electronic signature method, electronic signature confirmation method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an electronic signature apparatus, an electronic signature confirmation apparatus, and methods for appropriately implementing an electronic signature.
[0002]
[Prior art]
In April 2001, the Electronic Signature Law was enforced in Japan. Along with this, contracts with electronic signatures were considered official by law.
[0003]
In general, an electronic signature creates signature data by creating hash data from digital data to be signed using a one-way hash function and encrypting the hash data using a “secret key” of the signer. ("Cryptography and information security", written by Shigeo Sakurai, 1990, Shoshodo, paragraphs 127-147).
[0004]
The electronic signature is confirmed by creating hash data from the digital data to be signed using the same hash function, and decrypting the hash data and the created signature data with the “public key” of the signer. It is confirmed whether it matches.
[0005]
In recent years, the digitization of documents has progressed, but the use of paper documents is still being used. Therefore, it is more convenient to enable electronic signatures for paper documents in addition to the conventional signatures and seals.
[0006]
[Problems to be solved by the invention]
However, the conventional electronic signature is applied to digital data, and there is a problem that the electronic signature cannot be made when the electronic signature target is analog form information such as a paper document.
[0007]
The present invention has been made in consideration of such circumstances, and a digital signature can be used for a handwritten document. Compared with a signature using a seal, the imitation of a seal can be performed. It is an object of the present invention to provide an electronic signature device, an electronic signature confirmation device, and a method thereof that can solve the inconvenience, labor, inaccuracy, and the like of the confirmation work of a manual seal.
[0008]
[Means for Solving the Problems]
[0010]
In order to solve the above problems, the present invention includes an image reading means for inputting image data by reading an image, to create a hash data from said input image data, the hash data by using predetermined key information a signature data generating means for generating signature data by encrypting the signature file creation means for creating a signature file including the signature data and the image data, the created signature file transmitted to the server, the server And transmitting / receiving means for receiving URL information indicating the storage location of the signature file ; and printing means for generating image data including the image data and the URL information and printing the generated image data. It is characterized by that.
[0011]
According to the present invention receives image data by reading an image, to create a hash data from said input image data, the hash data by using predetermined key information to create the signature data by encrypting , to create a signature file including the signature data and the image data, and sends the created signature file to the server, from the server, it receives the URL information indicating the storage location of the signature file, and the image data Since image data including the URL information is generated and the generated image data is printed, a digital signature can be used for a handwritten document.
[0015]
Furthermore, in the electronic signature device according to the present invention, the signature data creation unit creates a plurality of signature data, and the signature file creation unit creates a signature file including a plurality of signature data. .
[0016]
Furthermore, the present invention is a server comprising a file storage means for storing a signature file created by the electronic signature device, an input means for inputting the URL information and predetermined key information, and based on the URL information. Search means for searching the signature file from the file storage means, hash data created from the image data included in the searched signature file, and decrypting the signature data included in the signature file using the key information Determining means for determining whether or not the received data matches.
[0018]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, an electronic signature device, an electronic signature confirmation device, and a method thereof according to an embodiment of the present invention will be described with reference to the drawings.
[0019]
<First Embodiment>
FIG. 1 is a block diagram for explaining the configuration of the electronic signature device according to the first embodiment of the present invention. As shown in FIG. 1, the electronic signature device according to the first embodiment includes a data creation unit 102, a signature data creation unit 104, a signature file creation unit 110, a signature file storage unit 108, and an output unit 106. .
[0020]
First, the data creation unit 102 is realized by using an image scanner that reads an input source 101 that is a paper document and converts it into data 103 that is digital image data. In addition, when the data 103 is input, the signature data creation unit 104 creates the signature data 105 corresponding thereto. Details of this will be described later.
[0021]
The signature file creation unit 110 creates a signature file 109 from the data 103 and the signature data 105. The data 103, signature data 105, and signature file 109 are stored in the signature file storage unit. Further, the created signature file 109 is output as a medium 107 from the output unit 106. For example, when the medium 107 is an MO disk, the output unit 106 is realized by an MO drive, and the signature file is stored in the MO disk.
[0022]
FIG. 2 is a diagram for explaining the hardware configuration of the electronic signature device according to the first embodiment of the present invention. In FIG. 2, reference numeral 201 is a CPU for controlling each component shown below, reference numeral 202 is ROM, reference numeral 203 is RAM, reference numeral 204 is an I / O port, reference numeral 206 is a SCSI controller, reference numeral 209 is an IDE controller, Reference numeral 211 denotes a network adapter, and reference numeral 213 denotes a USB controller, which are connected to each other via a bus 212.
[0023]
A printer 205 is connected to the I / O port 204. An image scanner 207 is connected to the SCSI controller 206, and an MO drive 208 is further connected to the image scanner 207.
[0024]
A hard disk 210 is connected to the IDE controller 209. On the other hand, the network adapter 211 is connected to a LAN or the Internet, and can be connected to another device or the like via a network. An IC card reader 214 is connected to the USB controller 213.
[0025]
The hardware configuration diagram of the electronic signature device shown in FIG. 2 may be regarded as a hardware configuration diagram when the electronic signature device is realized by a digital copying machine, or when it is realized by a personal computer. It may be regarded as a hardware configuration diagram.
[0026]
FIG. 3 is a flowchart for explaining an operation procedure of the digital signature apparatus according to the first embodiment of the present invention. In the present embodiment, the operation procedure will be described assuming the digital copying machine shown by the hardware configuration diagram shown in FIG. In FIG. 2, descriptions of the operation panel, switches, and switch controller of the digital copying machine are omitted, and operations related to the mouse and keyboard of the personal computer are also omitted.
[0027]
First, when the user presses the start button of the digital copying machine, a paper document is read by the image scanner 207 and converted into image data (step S301). The image data read in this way is temporarily stored in the RAM 203.
[0028]
Next, when the user presses the signature button on the operation panel, signature data is created using the read image data (step S302). Here, the signature data creation procedure will be described in detail.
[0029]
First, when the user presses the signature button on the operation panel, a message prompting insertion of the IC card is displayed in the message area of the operation panel. Here, it is assumed that the signer owns an IC card in which his / her private key, the corresponding public key and the name of the signer are stored in advance. This IC card includes a CPU, RAM, ROM for storing programs, and an input / output port. When data is received through the input / output port, it is created by encrypting the data with a secret key in the IC card. The encrypted data to be sent is returned.
[0030]
In response to the displayed message, the first signer inserts his IC card into the IC card reader 214. When the IC card is inserted into the IC card reader 214, hash data is generated from the image data converted in step 301 by a one-way hash function, and this hash data is sent to the IC card.
[0031]
In the IC card, the received hash data is encrypted with the secret key in the IC card, and the encrypted data is transmitted to the digital copying machine side through the USB controller 213 together with the public key data and the name data. In the digital copying machine, the CPU 201 stores the first signature information including the received encrypted data, public key data, and name data in the RAM 203. When there are a plurality of signers (for example, n persons), the second to nth signers perform the signature in the same manner, and the second to nth signature information is stored in the RAM 203.
[0032]
After all the signatures are completed, the signature data is created by combining the image data and signature data stored in the RAM 203 and stored in the hard disk 210 (step S303). FIG. 4 is a schematic diagram of a format of a signature file created by the electronic signature device according to the present embodiment.
[0033]
Next, when a message to insert media is displayed in the message area of the operation panel of the digital copying machine, the user inserts the MO media into the MO drive 208. Then, the signature file created by the above-described procedure is recorded on the MO media (step S304). In the above embodiment, the data creation unit 102 may be a digital camera instead of the image scanner 207. In this case, image data taken with a digital camera is used as the data 103.
[0034]
That is, the electronic signature device according to the present invention inputs image data from the data creation unit 102, creates hash data from the image data inputted in the signature data creation unit 104, and uses the hash data using predetermined key information. The signature data is created by encryption, and the signature file creation unit 110 creates a signature file including image data and signature data.
[0035]
In addition, the electronic signature device according to the present invention is characterized in that the data creating unit 102 is an image reading device that reads an image formed on a medium and inputs image data.
[0036]
Furthermore, the electronic signature device according to the present invention is characterized in that the signature data creation unit 104 creates a plurality of signature data, and the signature file creation unit 110 creates a signature file including the plurality of signature data.
[0037]
<Second Embodiment>
Next, an electronic signature device according to a second embodiment of the present invention will be described. The system configuration of the electronic signature apparatus according to this embodiment is almost the same as the hardware configuration of the electronic signature apparatus according to the first embodiment shown in FIG. 2, but the digital copying machine according to the second embodiment uses a network adapter. It is assumed that a server computer (not shown) is connected to the server computer via the LAN 211 or the Internet via the 211.
[0038]
A signature file having the configuration shown in FIG. 4 is stored in the server computer. A Java (registered trademark) servlet (Servlet) program for confirming the signature when the signature file is designated is arranged.
[0039]
FIG. 5 is a block diagram for explaining the configuration of the electronic signature device according to the second embodiment of the present invention. As shown in FIG. 5, the electronic signature apparatus according to the second embodiment includes a data creation unit 502, a signature data creation unit 504, a signature file creation unit 510, a signature file storage unit 508, a signature file management unit 511, and a merge unit. 506.
[0040]
In the present embodiment, the data creation unit 502, the signature data creation unit 504, the signature file creation unit 510, and the signature file storage unit 508 are respectively the data creation unit 102, the signature data creation unit 104, and the signature shown in FIG. The file creation unit 110 and the storage unit 108 are the same. In the present embodiment, the signature file 509 created by the signature file creation unit 510 is input to the signature file management unit 511. The signature file management unit 511 transmits the created signature file 109 to the server computer through the network adapter 211, and receives, for example, a URL as the signature file designation information 512 from the server computer. The merge unit 506 merges the image data 503 and the URL, and outputs the merged image 507 as a print image 507.
[0041]
FIG. 6 is a flowchart for explaining the operation procedure of the digital signature apparatus according to the second embodiment of the present invention. Hereinafter, description will be given according to the flowchart shown in FIG. Note that the processing in steps S601 to S603 is the same as the processing in steps S301 to S303 in FIG.
[0042]
A signature file is created, and the signature file stored in the hard disk 210 is transmitted to the server computer via the network adapter 211. The server computer receives and stores the transmitted signature file. Then, the server computer transmits a URL (Uniform Resource Locator), which is signature file storage location information, to the digital copying machine via a LAN or the like. As a result, the digital copying machine obtains a URL (signature file designation information) which is signature file storage location information (step S604).
[0043]
Then, the merge unit 506 of the digital copying machine merges the image data and the URL to create new image data with signature file designation information (step S605). FIG. 7 is a schematic diagram for explaining data before and after processing in the merge unit 506. As shown in FIG. 7, in the merge unit 506, data 503 that is image data and signature file designation information 512 that is URL information are merged (merged), and a URL 701 is displayed below the image data as indicated by reference numeral 701. An image with the merged data is generated. Note that the image data with signature file designation information merged as described above is printed out by the printer 205.
[0044]
That is, the electronic signature device according to the present invention inputs image data from the data creation unit 501, creates hash data from the image data input in the signature data creation unit 504, and uses the hash data using predetermined key information. The signature file is created by encryption, the signature file creation unit 510 creates a signature file including the image data and the signature data, and the signature file created by the signature file management unit 511 is stored in a predetermined file storage unit. The signature file designation information indicating the file storage location is acquired, and the merge unit 506 creates image data in which the signature file designation information is formed on the image data.
[0045]
The electronic signature device according to the present invention records the created signature file on a portable recording medium.
[0046]
A document printed with image data with signature file designation information can be used as, for example, a contract. The method for confirming the digital signature of the contract can be as follows.
[0047]
First, a confirmer who wants to confirm a signature of a contract accesses a server computer using a Web browser from a personal computer connected to a LAN or the Internet. As a result, the Java (registered trademark) servlet program of the server computer displays a screen as shown in FIG. 8 on the Web browser of the personal computer. FIG. 8 is a diagram showing an example of a screen displayed on the Web browser of the personal computer for confirming the signature.
[0048]
Next, the confirmer inputs the signature file designation information (signature file URL) described in the lower part of the contract to the input unit indicated by reference numeral 801. In addition, the path name of the signer's public key file is input to the input unit denoted by reference numeral 802. The signer's public key is acquired from a public key server (Web having a database for storing a plurality of people's public keys), or one obtained from the signer is selected. Then, the confirmer clicks the send button 803.
[0049]
As described above, the server computer executes signature verification as follows using the signature file managed and stored input from the input unit 801 and the public key file input from the input unit 802.
[0050]
First, the server computer creates hash data based on a predetermined one-way hash function from the image data of the signature file having the configuration shown in FIG. Next, the signature information matching the public key data in the public key file input from the input unit 802 is searched, and the data obtained by decrypting the signature data of the signature information with the public key is compared with the hash data. To see if they match.
[0051]
As a result, if both data match, it is determined that the confirmation has been made (OK), and if they do not match, the confirmation cannot be made (NG). Then, an HTML format screen displaying the confirmation result is created and displayed on the Web browser of the personal computer.
[0052]
That is, the present invention is an electronic signature verification device comprising a file storage device for storing a signature file created by the above-described electronic signature device, wherein the signature file designation information and the predetermined key information are input, and the signature file designation Based on the information, the signature file is retrieved from the file storage device, hash data created from the image data included in the retrieved signature file, and data obtained by decrypting the signature data included in the signature file using the key information, It is characterized by determining whether or not. The electronic signature verification apparatus according to the present invention is connectable to the above-described electronic signature apparatus via a network.
[0053]
The signature may be confirmed as follows. That is, after the server computer receives the URL information input from the input unit 801, the signature file specified by the URL is transmitted to the personal computer. Then, the personal computer creates hash data from the image data in the signature file by a predetermined one-way hash function. Further, the personal computer obtains signature information including the public key data input from the input unit 802 in the signature file. Further, it is checked whether the signature data in the signature information is decrypted with the public key data in the public key file input from the input unit 802 and the hash data matches. As a result, if both data match, it is determined that the confirmation has been made (OK), and if they do not match, a message that the confirmation cannot be made (NG) is displayed.
[0054]
Note that the present invention can be applied to a system composed of a plurality of devices (for example, a host computer, an interface device, a reader, a printer, etc.), but a device (for example, a copier, a facsimile machine, etc.) composed of a single device. You may apply to.
[0055]
Also, an object of the present invention is to supply a recording medium (or storage medium) in which a program code of software that realizes the functions of the above-described embodiments is recorded to a system or apparatus, and a computer (or CPU or CPU) of the system or apparatus. Needless to say, this can also be achieved when the MPU) reads and executes the program code stored in the recording medium. In this case, the program code itself read from the recording medium realizes the functions of the above-described embodiment, and the recording medium on which the program code is recorded constitutes the present invention. Further, by executing the program code read by the computer, not only the functions of the above-described embodiments are realized, but also an operating system (OS) running on the computer based on the instruction of the program code. It goes without saying that a case where the function of the above-described embodiment is realized by performing part or all of the actual processing and the processing is included.
[0056]
Furthermore, after the program code read from the recording medium is written into a memory provided in a function expansion card inserted into the computer or a function expansion unit connected to the computer, the function is based on the instruction of the program code. It goes without saying that the CPU or the like provided in the expansion card or the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.
[0057]
When the present invention is applied to the recording medium, program code corresponding to the flowchart described above is stored in the recording medium.
[0058]
【The invention's effect】
As described above, according to the present invention, a digital signature can be used even for a handwritten document. Compared with a signature using a seal, improper stamping by imitation of a seal, The trouble and inaccuracy of the confirmation work can be solved.
[Brief description of the drawings]
FIG. 1 is a block diagram for explaining a configuration of an electronic signature device according to a first embodiment of the present invention.
FIG. 2 is a diagram for explaining a hardware configuration of the electronic signature device according to the first embodiment of the present invention.
FIG. 3 is a flowchart for explaining an operation procedure of the digital signature device according to the first embodiment of the present invention.
FIG. 4 is a schematic diagram of a format of a signature file created by the electronic signature device according to the present embodiment.
FIG. 5 is a block diagram for explaining a configuration of an electronic signature device according to a second embodiment of the present invention.
FIG. 6 is a flowchart for explaining an operation procedure of the digital signature apparatus according to the second embodiment of the present invention.
FIG. 7 is a schematic diagram for explaining data before and after processing in a merge unit 506;
FIG. 8 is a diagram showing an example of a screen displayed on a Web browser of a personal computer for confirming a signature.
[Explanation of symbols]
101, 501 Input source 102, 502 Data creation unit 103, 503 Data 104, 504 Signature data creation unit 105, 505 Signature data 106 Output unit 107 Media 108, 508 Signature file storage unit 109, 509 Signature file 110, 510 Signature file creation Unit 506 merge unit 507 output medium 511 signature file management unit 512 signature file designation information

Claims (8)

Image reading means for reading an image and inputting image data;
A signature data generating means for generating signature data by said created hash data from input image data, is encrypted by using predetermined key information the hash data,
Signature file creating means for creating a signature file including the image data and the signature data;
And receiving means for transmitting the created signature file to the server, from the server, it receives the URL information indicating the storage location of the signature file,
Printing means for generating image data including the image data and the URL information, and printing the generated image data ;
An electronic signature device comprising: The signature data creation means creates a plurality of signature data,
The electronic signature device according to claim 1 , wherein the signature file creation unit creates a signature file including a plurality of signature data. A server comprising file storage means for storing a signature file created by the electronic signature device according to claim 1 ,
Input means for inputting the URL information and predetermined key information;
Search means for searching for a signature file from the file storage means based on the URL information;
Determining means for determining whether or not hash data created from image data included in the searched signature file matches data obtained by decrypting signature data included in the signature file using the key information; A server characterized by comprising. An electronic signature method in an electronic signature device, comprising: an image reading step of reading an image and inputting image data;
Create a hash data from said input image data, and the signature data generation step of generating a signature data by encrypting by using predetermined key information the hash data,
A signature file creating step of creating a signature file including the image data and the signature data;
A transceiver step of transmitting the created signature file to the server, from the server, receives the URL information indicating the storage location of the signature file,
A printing step of generating image data including the image data and the URL information, and printing the generated image data ;
An electronic signature method comprising: An electronic signature verification method in a server comprising file storage means for storing a signature file created by the electronic signature device according to claim 1 ,
An input step of inputting the URL information and predetermined key information;
A search step of searching for a signature file from the file storage means based on the URL information;
A determination step of determining whether hash data created from image data included in the retrieved signature file and data obtained by decrypting the signature data included in the signature file using the key information match. An electronic signature verification method comprising: On the computer,
An image reading process of reading an image and inputting image data;
Create a hash data from said input image data, and the signature data creation step to create a signature data by encrypting by using predetermined key information the hash data,
And the signature file creation step to create a signature file including the signature data and the image data,
A transceiver step of transmitting the created signature file to the server, from the server, receives the URL information indicating the storage location of the signature file,
A printing step of generating image data including the image data and the URL information, and printing the generated image data ;
A computer program for executing   A computer comprising file storage means for storing a signature file created by the electronic signature device according to claim 1,
  An input step for inputting the URL information and predetermined key information;
  A search step of searching for a signature file from the file storage means based on the URL information;
  A determination step of determining whether hash data created from image data included in the retrieved signature file matches data obtained by decrypting the signature data included in the signature file using the key information;
  A computer program for executing A computer-readable recording medium characterized by storing a computer program according to claim 6 or 7.

Images