JP4693854B2 - Document data management system - Google Patents

Description

  The present invention relates to a document data management system that can verify the completeness of document data.

  In recent years, electronic signatures are used instead of seals in corporate workflows.

  By using an electronic signature, it is possible to verify whether the signature target has been created by the owner of the signature key (hereinafter also referred to as a private key) and whether the data has been tampered with since the creation of the electronic signature. Become. For this reason, using a digital signature makes it easy to verify the verifiability, order, etc. of a stored document, which is also useful from the viewpoint of system auditing.

There is also a method for improving the security of an electronic signature by creating history information of the electronic signature. For example, there is a method of making it possible to identify an electronic signature by impersonation of a third party by checking history information at the time of verifying the electronic signature (see, for example, Patent Document 1). For the purpose of food traceability, there is also a method of including position data at the time of multiple signatures by multiple persons and leaving it as a history (see, for example, Patent Document 2).
JP 2004-40830 A JP 2005-242530 A

  However, in the system audit, it is necessary to verify the completeness of the document as a premise for verifying the verifiability and order of the stored document.

  The present invention has been made in view of the above circumstances, and an object thereof is to provide a document data management system capable of verifying the completeness of document data.

  In order to solve the above-described problems, the present invention provides a document data management system including a terminal that creates document data and an IC card that manages an electronic signature corresponding to the document data. Data storage means for storing, hash value generation means for generating a hash value of document data and writing the data to the data storage means, and means for sending the hash value to the IC card together with an electronic signature generation request. Means for storing a signature key for generating a signature; means for storing an IC card identifier for uniquely identifying an IC card; and electronic signature history storage means for storing an electronic signature history as electronic signature history data When the hash value is received together with the electronic signature generation request from the terminal, there is a storage area for storing a new electronic signature in the electronic signature history storage means. A storage area determination means for determining whether or not a storage area exists, a serial number generation means for generating a new serial number, and a new serial number generated by the serial number generation means, An electronic signature generating means for generating an electronic signature for a new serial number, an IC card identifier and a hash value; and a history writing means for writing the electronic signature generated by the electronic signature generating means into the electronic signature history storage means. Provided document data management system.

  In the present invention, a collection of devices is expressed as a “system”. However, the present invention is not limited to this, and may be expressed as a “device” or a “program” for each device. It may be expressed as “method”. That is, the present invention can be expressed in any category.

<Action>
Therefore, when the present invention takes the above-described means, the terminal includes a hash value generation unit that generates a hash value of the document data, and the IC card receives the hash value together with the electronic signature generation request from the terminal. A storage area determination means for determining whether or not a storage area for storing a new electronic signature exists in the electronic signature history storage means; and a serial number for generating a new serial number when it is determined that a storage area exists. Generating means, and when a new serial number is generated, an electronic signature generating means for generating an electronic signature for the new serial number, the IC card identifier and the hash value, and the electronic signature in the electronic signature history storage means Since a history writing means for writing is provided, it is possible to provide a document data management system capable of verifying the completeness of document data by confirming missing serial numbers.

  According to the present invention, the completeness of document data can be verified.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

<First Embodiment>
(1-1. Configuration)
FIG. 1 is a schematic diagram showing a configuration of a document data management system 5 according to the first embodiment of the present invention.

  The document data management system 5 includes a terminal 10 that creates document data, and an IC card 20 that manages an electronic signature corresponding to the document data.

  The terminal 10 includes software incorporated in a general personal computer (PC), and includes a data storage unit 11, a data input unit 12, a hash value generation unit 13, a terminal communication unit 14, a data writing unit 15, and a storage. It has a function as a completion notification sending unit 16.

  As shown in FIG. 2, the data storage unit 11 is a storage device that stores “document data” together with a document identification number. The data storage unit 11 stores electronic signature history data for each document identification number.

  The data input unit 12 is configured by, for example, a general mouse or keyboard, and enables data input. The data input unit 12 has a function of creating document data. In addition, the data input unit 12 has a function of accepting an input of “electronic signature generation request” when an electronic signature is given to a created document. The electronic signature generation request is sent to the hash value generation unit 13 and the terminal communication unit 14.

  When the data input unit 12 receives an input of an electronic signature generation request, the hash value generation unit 13 generates a hash value of the document data, and associates the generated hash value with the document identification number in the data storage unit 11. Has a writing function.

  The terminal communication unit 14 communicates with the IC card 20 by wire or wirelessly, and sends a hash value to the IC card 20 together with an “electronic signature generation request”.

  When the data writing unit 15 receives “electronic signature history data” from the IC card 20, the data writing unit 15 writes the electronic signature history data into the data storage unit 11. Specifically, the data writing unit 15 uses the document identification number and writes the electronic signature history data in the data storage unit 11 in association with the document data.

  The storage completion notification sending unit 16 has a function of sending a “save completion notification” to the history deletion unit 29 of the IC card 20 when the data writing unit 15 writes the electronic signature history data into the data storage unit 11. Is.

  The IC card 20 includes a card information storage unit 21, an electronic signature history storage unit 22, a card communication unit 23, a storage area determination unit 24, a serial number generation unit 25, an electronic signature generation unit 26, a history writing unit 27, and a history extraction unit. 28. A history deletion unit 29 is provided.

  The card information storage unit 21 is a storage device that stores a “signature key” for generating an electronic signature and an “IC card identifier” for uniquely identifying the IC card 20. Since the IC card 20 has tamper resistance, the signature key never leaks.

  The electronic signature history storage unit 22 is a storage device that stores an electronic signature history as “electronic signature history data”. Specifically, the electronic signature history storage unit 22 stores the electronic signature, the generation date and time, and the document identification number in association with each other.

  The card communication unit 23 communicates with the terminal 10 by wire or wireless and receives an electronic signature generation request including a hash value.

  When the card communication unit 23 receives the hash value together with the electronic signature generation request from the terminal 10, the storage area determination unit 24 determines whether there is a storage area for storing a new electronic signature in the electronic signature history storage unit 22. To do. When the storage area determination unit 24 determines that a storage area exists, the storage area determination unit 24 sends a “serial number generation command” to the serial number generation unit 25. On the other hand, if the storage area determination unit 24 determines that there is no storage area, the storage area determination unit 24 sends a “history extraction command” to the history extraction unit 28.

  The sequence number generation unit 25 generates a new sequence number when a sequence number generation command is sent from the storage area determination unit 24. As a result, a series of numbers correspond to the electronic signatures. Therefore, in the list of electronic signature history data, if there is no missing serial number, all the signatures generated by the IC card 20 are comprehensively listed. You will be able to confirm.

  When a new sequence number is generated by the sequence number generation unit 25, the electronic signature generation unit 26 applies an electronic signature to the new sequence number, the IC card identifier, and the hash value as illustrated in FIG. Is to be generated.

  The history writing unit 27 writes the electronic signature generated by the electronic signature generation unit 26 and the serial number corresponding to the electronic signature in the electronic signature history storage unit 22.

  The history extraction unit 28 extracts the electronic signature history data stored in the electronic signature history storage unit 22 and sends it to the terminal 10 when a history extraction command is sent from the storage area determination unit 24 (when there is no empty area). To do.

  The history deletion unit 29 deletes the electronic signature history data stored in the electronic signature history storage unit 22 when a storage completion notification is received from the terminal 10.

(1-2. Operation)
Next, the operation of the document data management system 5 according to the present embodiment will be described with reference to the sequence diagram of FIG.

  First, when the user operates the data input unit 12, document data is created in the terminal 10 (step S1).

  Thereafter, when an electronic signature generation request is executed by a user operation, the hash value generation unit 13 generates a hash value of the created document data (step S2). Then, an “electronic signature generation request” including a hash value is sent to the IC card 20 via the terminal communication unit 14 (step S3).

  When the IC card 20 receives the electronic signature generation request, the storage area determination unit 24 determines whether or not a storage area for storing a new electronic signature exists in the electronic signature history storage unit 22 (steps S4 and S5). ). If the storage area determination unit 24 determines that a storage area exists, a “serial number generation command” is sent to the serial number generation unit 25 (steps S5—Yes, S15). If it is determined that the storage area does not exist, a “history extraction command” is sent to the history extraction unit 28. (Step S5-No).

  In step S5, when a history extraction command is sent to the history extraction unit 28, electronic signature history data stored in the electronic signature history storage unit 22 is extracted (step S6). Then, the extracted electronic signature history data is sent to the terminal 10 (step S7).

  Subsequently, when the terminal 10 receives the electronic signature history data, the data writing unit 15 writes the electronic signature history data in the data storage unit 11 (steps S8 and S9). However, if writing could not be performed, a writing error signal is output to a display or the like, and the process is terminated (step S10-No, s11).

  When the writing of the electronic signature history data is completed normally, a “save completion notification” is output to the IC card 20 (steps S10-Yes, S12).

  When the IC card 20 receives the saving completion notification, the IC card 20 deletes the electronic signature history data stored in the electronic signature history storage unit 22 (steps S13 and S14). Then, the process proceeds to step S15.

  In step S15, a new serial number is generated by the serial number generation unit 25. That is, a new serial number is generated when a sequence number generation command is sent in step S5 or when electronic signature history data is deleted in step S14.

  When a new serial number is generated by the serial number generation unit 25, an electronic signature for the new serial number, IC card identifier, and hash value is generated by the electronic signature generation unit 26 (step S16). When the electronic signature is generated, the electronic signature generated by the electronic signature generation unit 26 is written into the electronic signature history storage unit 22 by the history writing unit 27 (step S17). As a result, the electronic signature history data is stored in the IC card 20.

(1-3. Effect)
As described above, according to the document data management system 5 according to the present embodiment, the terminal 10 includes the hash value generation unit 13 that generates the hash value of the document data, and the IC card 20 receives the electronic signature from the terminal 10. When a hash value is received together with the generation request, a storage area determination unit 24 that determines whether or not a storage area for storing a new electronic signature exists in the electronic signature history storage unit 22 and a determination that the storage area exists A serial number generation unit 25 that generates a new serial number, and an electronic signature generation unit 26 that generates an electronic signature for the new serial number, the IC card identifier, and the hash value when a new serial number is generated. And a history writing unit 27 for writing the electronic signature to the electronic signature history storage unit 22, the completeness of the document data can be verified by checking the missing serial number. .

  For example, according to such a document data management system 5, the system auditor reads the electronic signature history data of the IC card 20 and confirms that there is no serial number missing, so that the IC card 20 gives it. It becomes possible to confirm the completeness of the electronic signature history data. Therefore, the document data management system 5 can supply a highly reliable audit trail.

  In the document data management system 5 according to the present embodiment, since serial numbers are generated inside the IC card 20, it is possible to prevent falsification of the electronic signature history data. This is because the IC card has tamper resistance and physical measures are taken against falsification of the internal information.

  In the present embodiment, since the IC card identifier is used when generating the electronic signature, it is possible to confirm which IC card is the IC card that generated the electronic signature history data.

  Furthermore, according to the document data management system 5 according to the present embodiment, when there is no empty area in the electronic signature history storage unit 22 of the IC card 20, the electronic signature history data up to that point is stored in the terminal 10, and the IC The electronic signature history data stored in the card 20 is deleted. Therefore, new electronic signature history data can be stored in the IC card 20 regardless of the storage capacity of the IC card 20.

  The case where the IC card 20 cannot store new electronic signature history data is a case where the previous electronic signature history data has not been taken out. In this case, a write error signal is output. On the contrary, when the write error signal is not output, the electronic signature history data is surely stored in the IC card 20.

<Second Embodiment>
FIG. 5 is a schematic diagram showing the configuration of a document data management system 5T according to the second embodiment of the present invention. Note that substantially the same parts as those already described are denoted by the same reference numerals, and repeated description is omitted unless otherwise specified. In addition, the following description is also omitted in the following embodiments.

  The document data management system 5T according to the present embodiment verifies the completeness of the document data using the electronic signature history data.

  In the terminal 10T, the terminal 10 according to the first embodiment further includes an extraction command sending unit 41, a decoding unit 42, and a verification unit 43.

  The take-out command sending unit 41 sends a “take-out command” of electronic signature history data to the IC card 20T. Supplementally, since the old electronic signature history data stored in the electronic signature history storage unit 22 of the IC card 20T is extracted to the terminal 10T by the extraction command, the latest electronic signature information is stored in the IC card 20T. Will be.

  When the electronic signature history data is acquired in response to the extraction command, the decrypting unit 42 decrypts the electronic signature included in the electronic signature history data with the public key. Thereby, a serial number, an IC card identifier, and a hash value can be acquired for each document identification number.

  The verification unit 43 has a function of verifying whether there is a missing number in the serial number acquired by the decoding unit 42. If there is a missing number, the verification unit 43 outputs a “verification error signal” to a display or the like. The verification unit 43 has a function of comparing the hash value stored in the data storage unit 11 with the hash value acquired by the decryption unit 42. If the two hash values do not match, the verification unit 43 outputs a “verification error signal” to the display or the like.

  The IC card 20T includes a history sending unit 51. When receiving an electronic signature history data extraction command from the terminal 10T, the history transmission unit 51 reads out the electronic signature history data corresponding to the extraction command from the electronic signature history storage unit 22, and transmits the electronic signature history data to the terminal 10T. is there.

  Next, the operation of the document data management system 5T according to the present embodiment will be described with reference to the sequence diagram of FIG.

  First, when the user operates the terminal 10T, an electronic signature history data extraction command is sent to the IC card 20T (step T1).

  When the IC card 20T receives an extraction command from the terminal 10T, the history sending unit 51 reads out the electronic signature history data corresponding to the extraction command from the electronic signature history storage unit 22 (steps T2 and T3). Subsequently, the history transmission unit 51 sends the read electronic signature history data to the terminal 10T (step T4).

  When the terminal 10T receives the electronic signature history data corresponding to the extraction command from the IC card 20T, the electronic signature history data is decrypted by the decryption unit 42 (steps T5 and T6). Thereby, in the terminal 10T, a serial number, an IC card identifier, and a hash value are obtained.

  Next, the verification unit 43 determines whether or not there is a missing number in the serial numbers decoded by the decoding unit 41 (step T7). If there is a missing number, a verification error signal is output to the display or the like (steps T7-No, T9).

  Further, the verification unit 43 verifies whether or not the hash value stored in the data storage unit 11 matches the hash value acquired by the decryption unit 42 (step T8). If the two hash values do not match, a verification error signal is output to the display or the like (steps T7-No, T9).

  As described above, when the terminal 10T acquires the electronic signature history data from the IC card 20T, the document data management system 5T according to the present embodiment decrypts the electronic signature included in the electronic signature history data with the public key. Then, since it is verified whether or not there is a missing number in the serial number acquired by decryption, the completeness of the document data can be verified.

  That is, according to the document data management system 5T, it is possible to confirm the completeness of the document when judging the existence and validity of the control by the document review and the text matching method in the system audit.

  Further, in the terminal 10T according to the present embodiment, since the hash value stored in the data storage unit 11 and the hash value acquired by the decryption unit 42 are compared, the document data is not falsified, It can be confirmed that the electronic signature is generated by the IC card 20T.

<Third Embodiment>
FIG. 7 is a schematic diagram showing the configuration of a document data management system 5U according to the third embodiment of the present invention.

  The document data management system 5U according to the present embodiment further includes a history central management server 30 in the document data management system 5T according to the second embodiment.

  The history central management server 30 includes a document database 31 and a history database 32. Document data is stored in the document database 31 in association with the document identification number, and electronic signature history data is stored in the history database 32 in association with the document identification number.

  The terminal communication unit 14 of the terminal 10T also communicates with the history central management server 30 to store and acquire the history / document. That is, when there is no empty area in the electronic signature history storage unit 22 of the IC card 20T, the electronic signature history data is transmitted to the history central management server 30 via the terminal 10T.

  FIG. 8 is a sequence diagram showing processing at the time of document data creation of the document data management system 5U according to the present embodiment.

  First, document data is created in the terminal 10T by a user operation (step U1). Further, a hash value of the document data is generated at the terminal 10T. Then, an electronic signature generation request is sent from the terminal 10T to the IC card 20T (step U2).

  Next, in the IC card 20T, the storage area is confirmed, and it is determined whether or not the electronic signature can be stored (step U3). If there is no free space, the electronic signature history data already stored is sent to the terminal 10T (step U4).

  When the electronic signature history data is sent to the terminal 10T, an instruction to save the document data and the electronic signature history data is transmitted to the history central management server 30 (step U5).

  Then, in the history central management server 30, the document data and the electronic signature history data are stored in the document database 31 and the history database 32 (step U6).

  Next, the history central management server 30 transmits a “save result notification” indicating whether or not the document data and the electronic signature history data have been successfully saved to the terminal 10T (step U7).

  When the terminal 10T receives the storage result notification from the history central management server 30, it is determined whether or not the data storage is successful in the terminal 10T. If the storage is successful, a storage completion notification is sent from the terminal 10T to the IC card 20 (step U8).

  When the IC card 20T receives the storage completion notification, the electronic signature history data stored in the IC card 20T is deleted. Thereby, in the IC card 20T, an electronic signature is generated after securing an empty area (step U9).

  If necessary, an electronic signature is sent from the IC card 20T to the terminal 10T (step U10). In this case, in the terminal 10T, the electronic signature is concatenated with the document data and stored as a signed document.

  FIG. 9 is a sequence diagram showing processing during document data auditing of the document data management system 5U according to the present embodiment.

  First, a data transmission request is transmitted from the terminal 10T to the history central management server 30, and document data and electronic signature history data regarding the IC card 20T are extracted from the history central management server 30 (steps V1 and V2).

  Next, an extraction request for electronic signature history data generated most recently is sent from the terminal 10T to the IC card 20T (step V3).

  In response to this, the most recently generated electronic signature history data is returned from the IC card 20T to the terminal 10T (step V4).

  Then, the terminal 10T obtains serial number information from the electronic signature history data, and the completeness of the document is confirmed by this serial number. That is, it is confirmed that the electronic signature is decrypted with the public key of the IC card 20T, the history of the document data is not falsified, and the electronic signature is generated by the IC card 20T. Note that the history of document data is confirmed by checking whether or not the hash value of the document data is equal to the hash value extracted from the corresponding electronic signature history data. Further, the completeness of the document data can be confirmed by whether there is a missing number in the serial number.

  As described above, according to the document data management system 5U according to the present embodiment, the electronic signature history data of the IC card 20T is read, and it is confirmed that there is no serial number missing. It becomes possible to confirm the completeness of the electronic signature history data.

  In the document data management system 5U according to the present embodiment, document data and electronic signature history data are managed by the history central management server 30. Therefore, document data generated in EC (electronic commerce) or EDI (electronic data interchange). Also suitable for audits.

<Others>
Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. In addition, various inventions can be formed by appropriately combining a plurality of components disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine a component suitably in different embodiment.

  Note that the method described in the above embodiment includes a magnetic disk (floppy (registered trademark) disk, hard disk, etc.), an optical disk (CD-ROM, DVD, etc.), a magneto-optical disk (MO) as programs that can be executed by a computer. ), And can be distributed in a storage medium such as a semiconductor memory.

  In addition, as long as the storage medium can store a program and can be read by a computer, the storage format may be any form.

  In addition, an OS (operating system) running on a computer based on an instruction of a program installed in the computer from a storage medium, MW (middleware) such as database management software, network software, and the like realize the above-described embodiment. A part of each process may be executed.

  Further, the storage medium in the present invention is not limited to a medium independent of a computer, but also includes a storage medium in which a program transmitted via a LAN, the Internet, or the like is downloaded and stored or temporarily stored.

  Further, the number of storage media is not limited to one, and the case where the processing in the above embodiment is executed from a plurality of media is also included in the storage media in the present invention, and the media configuration may be any configuration.

  The computer according to the present invention executes each process in the above-described embodiment based on a program stored in a storage medium, and is a single device such as a personal computer or a system in which a plurality of devices are connected to a network. Any configuration may be used.

  In addition, the computer in the present invention is not limited to a personal computer, but includes an arithmetic processing device, a microcomputer, and the like included in an information processing device, and is a generic term for devices and devices that can realize the functions of the present invention by a program. .

It is a schematic diagram which shows the structure of the document data management system 5 which concerns on the 1st Embodiment of this invention. It is a schematic diagram which shows the structure of the data storage part 11 which concerns on the same embodiment. It is a schematic diagram which shows the concept of the electronic signature which concerns on the embodiment. It is a sequence diagram for demonstrating operation | movement of the document data management system 5 which concerns on the embodiment. It is a schematic diagram which shows the structure of the document data management system 5T which concerns on the 2nd Embodiment of this invention. It is a sequence diagram for demonstrating operation | movement of the document data management system 5T which concerns on the embodiment. It is a schematic diagram which shows the structure of the document data management system 5U which concerns on the 3rd Embodiment of this invention. It is a sequence diagram showing processing at the time of document data creation of the document data management system 5U according to the embodiment. It is a sequence diagram showing processing at the time of document data auditing of the document data management system 5U according to the embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 5 ... Document data management system, 10 ... Terminal, 11 ... Data storage part, 12 ... Data input part, 13 ... Hash value generation part, 14 ... Terminal communication part, 15 ... Data book Insertion unit, 16 ... Save completion notification sending unit, 20 ... IC card, 21 ... Card information storage unit, 22 ... Electronic signature history storage unit, 23 ... Card communication unit, 24 ... Storage area determination unit, 25 ... serial number generation unit, 26 ... digital signature generation unit, 27 ... history writing unit, 28 ... history extraction unit, 29 ... history deletion unit, 30 ... History central management server, 31 ... Document database, 32 ... History database, 41 ... Extraction command sending unit, 42 ... Decoding unit, 43 ... Verification unit, 51 ... History Sending part.

Claims (5)

A document data management system comprising a terminal for creating document data and an IC card for managing an electronic signature corresponding to the document data,
The terminal
Data storage means for storing the document data;
A hash value generation unit that generates a hash value of the document data and writes the hash value in the data storage unit;
Means for sending the hash value together with an electronic signature generation request to the IC card;
With
The IC card is
Means for storing a signature key for generating the electronic signature;
Means for storing an IC card identifier for uniquely identifying the IC card;
Electronic signature history storage means for storing the history of the electronic signature as electronic signature history data;
Storage area determination means for determining whether or not a storage area for storing a new electronic signature exists in the electronic signature history storage means upon receiving the hash value together with the electronic signature generation request from the terminal;
If it is determined that the storage area exists, serial number generating means for generating a new serial number;
An electronic signature generating means for generating an electronic signature for the new serial number, the IC card identifier and the hash value when a new serial number is generated by the serial number generating means;
History writing means for writing the electronic signature generated by the electronic signature generating means into the electronic signature history storage means;
A document data management system comprising: The document data management system according to claim 1,
The terminal
Means for storing the electronic signature history data when the electronic signature history data is transmitted from the IC card;
Means for sending a storage completion notification to the IC card when the electronic signature history data is stored;
With
The IC card is
If the storage area determining means determines that there is no storage area, the electronic signature history data stored in the electronic signature history storage means is extracted and sent to the terminal;
Means for deleting electronic signature history data stored in the electronic signature history storage means when receiving a storage completion notification from the terminal;
A document data management system comprising: In the document data management system according to claim 1 or 2,
The terminal
Means for sending an electronic signature history data extraction command to the IC card;
Decrypting means for decrypting an electronic signature included in the electronic signature history data with a public key and obtaining a serial number, an IC card identifier, and a hash value when the electronic signature history data is acquired according to the extraction command;
Verifying whether there is a missing number in the serial number obtained by the decoding means, and comprising means for outputting a verification error signal if there is a missing number,
The IC card is
When receiving an electronic signature history data extraction command from the terminal, the electronic signature history data corresponding to the extraction command is read from the electronic signature history storage unit and sent to the terminal. Document data management system. In the document data management system according to claim 3,
The terminal
Means for comparing the hash value stored in the data storage unit with the hash value acquired by the decryption means;
And a means for outputting a verification error signal when the two hash values do not match as a result of the comparison. The document data management system according to any one of claims 2 to 4, further comprising a history central management server that stores the electronic signature history data.
When the electronic signature history data is received from the IC card, the terminal transmits the electronic signature history data to the history central management server.

Images