KR100776692B1 - Method for updating Data Validation Certificate in Data Validation and Certification Server and Method for verification of the updated Data Validation Certificate - Google Patents

Abstract

In the present invention, when issuing a content certificate using an electronic signature, the content of the electronic document content verification system enables to extend the validity period and to verify the validity of the extended content certificate through the automated update of the issued content certificate. It relates to a certificate renewal method and a verification method of the updated content certificate.

The method of updating the content certificate of the electronic document content verification system of the present invention for realizing this includes the steps of: verifying the validity period of the signing certificate in the DVCS in the content verification system using the DVCS system; If the DVCS signing certificate is renewed in the step, retrieving the DVC issued as the DVCS signing certificate, determining whether to renew the DVC by checking the contents of the policy and the initial issue date of the DVC. Requesting issuance of a DVC using on DVC, and storing the updated DVC in an internal database and delivering it to a document repository and related parties. It is an invention that can extend the validity of documents.

Electronic document, digital signature, expiration date, renewal, contents proof, DVC, DVCS

Description

Method for updating Data Validation Certificate in Data Validation and Certification Server and Method for verification of the updated Data Validation Certificate}

1 is a schematic configuration diagram of a DVCS according to the present invention

2 is a flowchart illustrating a method of updating a content certificate according to the present invention;

3 is a diagram illustrating a verification method of a DVC issued according to the present invention.

<Description of the symbols for the main parts of the drawings>

10-Content Proof System, 11-DVCS Core,

12-DVC update processing unit, 13-Internal database,

20-document storage.

The present invention relates to an electronic document content verification system using a Data Validation and Certification Server protocol (DVCS), and more particularly, to extend the validity of Data Validation Certificates (DVC) that provide a content verification function. A method of updating a content certificate of an electronic document content verification system for updating a DVC) and a method of verifying the updated content certificate.

Recently, due to the development of information and communication technologies such as the Internet, many researches have been conducted on the distribution method of electronic documents. Electronic document distribution is a method of transferring a document created by using a computer to another system through an internal or external line, or by connecting to another system and creating a document using a document creation function provided by the other system. In other words, the electronic document can only reduce the time required for the distribution of the document because it only needs to create or exchange documents through the communication line, and can save a lot of paper, above all, the cost and storage place of the paper purchase. The same facility costs can be greatly reduced.

However, since the electronic document can be easily changed during the distribution process, a data validation and certification server (DVCS) service, which is a server that performs data validation, is used as a method for verifying this.

DVCS is a system that receives a request for a specific service from a client requesting data validation, and then generates a Data Validation Certificate (DVC) for a response to the corresponding service. CPD service that certifies that the user was doing so, a CCPD service that certifies that the requester owned the data at a specified time, a VSD service that provides verification of digitally signed documents, and the validation and validation of public key certificates. Perform VPKC service to generate data verification certificate.

It is common to use a timestamp server or DVCS to provide this generic proof of content function, which provides proof of the existence of a document at a particular time.

In particular, the timestamp server or DVCS system has a feature of providing a service using a public key-based certificate. Generally, a certificate that is generally used is applied with a validity period of about one year. The validity period of a certificate is a period defined to consider security depending on the key length of the public key used.

The Content Certificate (DVC) issued by DVCS for proof of content is a digitally signed certificate that has a validity period. If the signed certificate expires, the digital signature verification fails.

Currently, the content verification system using DVCS has no way of extending the validity of DVC, and the document that has expired the certificate has a problem of being invalid.

The present invention has been invented to improve the above-mentioned problems, and when the validity period of the content certificate issued by the DVCS service has elapsed, if the document is within the retention period, such as the document retention period, it is automatically updated. The purpose of the present invention is to provide a method of updating the content certificate of the electronic document content verification system and a method of verifying the updated content certificate through which the validity period can be extended.

The present invention for achieving the above object is, in the content verification system using the DVCS system, in the DVCS, the step of confirming the validity period of the signing certificate, the step of confirming the renewal of the DVCS signing certificate, DVCS signing in the step If the certificate is renewed, the step of retrieving the DVC issued by the DVCS signing certificate, the contents of the policy and the initial issue date of the DVC to determine whether to renew the DVC, DVC issuance request using the imported DVC And the step of storing the updated DVC in an internal database and delivering it to a document repository and related parties.

Also, in the above, the step of issuing a new DVC using the imported DVC for updating, further comprising the step of generating a DVCS request message using the imported DVC and generating and applying a new DVC policy. It is characterized by.

In addition, in the above, the step of issuing a new DVC using the DVC loaded for updating, characterized in that it further comprises the step of generating the existing DVC search information.

On the other hand, the updated content certificate verification method of the electronic document content verification system according to the present invention, the step of loading all the DVC connected to the document to be verified stored in the internal database by the DVC update processing unit in the content verification system, the final DVCS certificate (nth) verifying the DVC, verifying the n-1th DVC using the current nth DVC, and updating the electronic document contents verification system to determine the validity of the DVC by validating the document using the last DVC. Method of verifying completed content certificate.

Hereinafter, the configuration and operation of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

1 shows a schematic diagram of a DVCS according to the present invention.

As shown in the accompanying drawings, the content verification system 10 includes a DVCS core 11 for issuing a DVC, a DVC update processing unit 12, and an internal database 13.

The DVC update processing unit 12 performs an update process on the DVC in which DVC issuance is determined. At this time, the DVC update processing unit 12 performs an update request to the DVCS core 11 by using an update request (DVCSRequest).

The DVCS core 11 issues a new DVC according to an update request of the DVC update processor 12, and the newly updated and issued DVC is stored in the internal database 13.

Wherein the content authentication system 10, that is, DVCS is a server that performs the operation of issuing the content certificate when a user who is granted access permission from outside to log in to create a document and request issuance of content certificate for the generated document it means. The content verification system 10 receives a DVCSRequest defined in RFC 3029 as a content certificate issue request command, and also generates a DVC as a result. In addition to the issuance of the content certificate (DVC), the content proof system 10 performs an update operation of the DVC, and is also configured to store it in a suitable place such as the document storage 20.

The content attestation system 10 issues a content attestation based on a content attestation system (DVCS) certificate. The content attestation system (DVCS) certificate is a certificate in X.509 V3 format issued by a certificate authority. It is to issue to the content proof system 10 so that the proof system 10 can issue a content proof (DVC). As described above, since the content certification system (DVCS) certificate is an X.509 certificate, it must be renewed with a new certificate after the expiration date has expired.

The structure of the content certificate (DVC) issued by the content attestation system 10 is defined in RFC3029, which is a definition of the content of the DVC, and in order to use it, the DVC is issued using something like PKCS # 7 SignedData. do. A newly updated DVC issued in the form of SignedData contains information about the previous DVC such as serial number and DVC issuer name. Thus, the DVC chain is created using the information on the previous DVC, and the generated chain is used for validation.

2 is a flowchart illustrating a method of updating a content certificate according to the present invention.

As shown, the content certification certificate updating system according to the present invention operates by an internal process of the DVCS update processing unit 12 inside the DVCS. That is, first, the DVC update processor 12 checks the validity period of the DVCS certificate for issuing the DVC stored in the internal database 13.

In addition, it is checked whether the renewed or reissued DVCS certificate of the DVCS certificate for issuing the DVC is registered. If the DVCS certificate for the DVC is renewed or renewed, the new DVCS certificate for each existing DVC is issued. Perform the following procedure using.

In order to update the validity period of the DVC, the DVC update processing unit 12 first checks the policy by reading the DVC stored in the internal database 13, and the issuing period of the new DVC is determined according to the policy of the DVC. . The DVC update processing unit 12 checks the DVC issuance period and the original issuance date and determines whether to issue the DVC.

Here, 'DVC Policy Check' means that the DVCS sets a policy for the DVC that is issued, which may mean the purpose, use, and use of the DVC, and the DVC should be used accordingly. Of course, the DVC policy item may indicate whether the DVC should be updated.

Subsequently, if it is determined to be issued, a generation process for generating a new DVC is started, which is performed internally by the DVC update processor 12 making an update request (DVCSRequest) to the DVCS core 11. In this case, the data used for the update request (DVCSRequest) becomes the DVC itself to be updated.

In addition, additional information is required to generate a DVC, which includes a policy for an extended DVC or information of a DVC used in a DVCSRequest. You can use this to find the DVC before updating.

As a result, a new DVC is issued using the additional information and the update request (DVCSRequest).

In addition, the newly issued DVC (New DVC) should be stored for later use, and the stored DVC must be started for service. The disclosed DVC makes it available to users.

In addition, the DVCS system stores the issued DVC in the internal database 13 in case the DVC is updated again. The DVC stored in the internal database 13 is used for the next update.

In addition, the updated DVC may be delivered to the document storage 20 according to the policy.

3 is a diagram illustrating a verification method of a DVC issued according to the present invention.

DVC issued according to the present invention can be DVC verification by the DVC verification method. That is, the verification of the DVC is performed at the moment of validating the document. As shown in FIG. 3, the verification of the n-th DVC using the DVCS certificate and the verification of the n-1 DVC using the n-th DVC are performed. Finally, this is performed by performing verification of an electronic document (DOC) using the last DVC.

As described above, the present invention can extend the content verification period by updating the DVC that the DVC issued for content verification has an expiration date and thus could not be proved for a long time. It can satisfy the retention period of digitally signed electronic documents required by the legal system, and can spread the use of electronic documents.

Claims (4)

In a content verification system using a DVCS system, in the DVCS, a step of confirming the validity period of a signing certificate, confirming the renewal of the DVCS signing certificate, and if the DVCS signing certificate is renewed in the step, the DVCS signing certificate Calling the issued DVC, determining whether to update the DVC by checking the policy and the initial issue date of the DVC, making a request for issuing a DVC using the loaded DVC, and updating the updated DVC to an internal database. A method of updating a content certificate of an electronic document content identification system, comprising the steps of storing and forwarding it to a document repository and related parties. The method of claim 1, further comprising: issuing a new DVC using the loaded DVC for updating, generating a DVCS request message using the loaded DVC, and generating and applying a new DVC policy. How to update the content certificate of the electronic document content identification system, characterized in that it comprises a. The content certificate of an electronic document contents verification system according to claim 1, further comprising the step of issuing a new DVC using a DVC loaded for updating, generating an existing DVC search information. Update method. A method of verifying an updated content certificate of an electronic document content verification system, comprising: retrieving all DVCs connected to a document to be verified stored in an internal database by the DVC update processing unit in the content verification system; the final (nth) as the current DVCS certificate Verifying the DVC, using the current n th DVC to verify the n-1 th DVC, and validating the updated content certificate of the electronic document contents verification system to verify the validity of the DVC by validating the document using the last DVC. Way.

Images