KR101737396B1 - An online system issuing a certificate file restricting its submission office - Google Patents

Abstract

The present invention relates to an online certificate file issuance system for issuing a certificate to a file on the internet, wherein the submitter is registered in the certificate file, and the issuance destination registration device registers a submittal destination entered in the submittal destination list. An issuance application processing unit for receiving items for issuing a certificate and transmitting the issued certificate file; A delivery destination input unit for receiving a delivery destination to which a certificate is to be submitted, the delivery destination being selected from the delivery destination list; And a document file generation unit for generating a certificate file into which the input destination is inserted.
According to the online certificate file issuing system and method of the present invention, it is possible to prevent abuse of a certificate even if a certificate is issued to a file, to prevent unauthorized use even if the certificate is leaked, By using various data as the identification data, it is possible to describe a trusted submittance that can prevent illegal use in any case, and it is possible to enhance the convenience of the user.

Description

[0001] The present invention relates to an online certificate file issuing system,

The present invention relates to a system for issuing an online certificate file in which a certificate is issued on-line as a file, but a certificate limiting the place of submission is issued to block the abuse of the certificate file.

Due to the recent developments of the Internet and computers, information such as various documents and data are digitized by a computer, and as the Internet, e-mail, and digital storage media are developed, various procedures, such as various document issuance procedures and processing, And more quickly and easily. In particular, it is becoming frequent to submit certificates such as administrative institution or school facilities to prove their identity. Since certificates are frequently used, certificates can be issued and submitted by digital means.

However, the digital document of such a certificate can provide high convenience to the user because it is easy to edit, store, and copy. On the other hand, digital documents can easily be copied without loss of information, which can easily be exposed to illegal activities such as unauthorized copying, illegal use, and illegal use. Therefore, a security system is required to protect digital documents from unlawful acts in order to ensure safe and reliable use of digital documents. In particular, it is even more so in the case of a certificate proving a person's identity. To this end, techniques for preventing forgery and falsification through watermarks or forgery verification codes have been proposed [Patent Literatures 1 and 2]

On the other hand, the conventional certificate issuing device allows a certificate to be issued from a user's device when a recipient pays a predetermined fee and performs a simple security-related authentication. However, as described above, in order to prevent unauthorized use of a certificate to be issued, the online issuance mode is very limited.

As an example, a user who receives a certificate can not output the certificate to a separate file in order to submit the received certificate to the recipient, and restricts the output of the certificate through a printer or the like. Therefore, there was a problem that the user had to print out the certificate and send it to the recipient or submit it by mail in order to submit the certificate issued to the recipient.

In addition, even if the certificate can be received in a file, it is necessary to install a dedicated viewer and restrict the viewability of the certificate only through a dedicated viewer. Therefore, when a user issues a certificate, there is an inconvenience that a viewer is not installed in the user device or can not be directly viewed from the user device unless the issued certificate is in a form suitable for the user device. For example, there is a problem that a document issued from a computer PC can not be viewed on a smart phone or the like.

In addition, a technique of issuing a certificate from the issuing server and transmitting the certificate to the receiving party is also proposed (Patent Documents 3 and 4). However, in this case, there is a problem that the personalization server and the server of the recipient organization must be built in cooperation with each other, and the case can not be applied.

Accordingly, while establishing the security-related process, the user can conveniently view and output the certificate by the process of issuing and managing the certificate conveniently, and can provide the certificate to the certificate receiving agency There is a need for a technology that can be conveniently submitted using wired or wireless communication.

[Patent Document 1] Korean Published Patent Application No. 2009-0054275 (published on May 29, 2009) [Patent Document 2] Korean Published Patent Application No. 2014-0059975 (published on May 19, 2014) [Patent Document 3] Korean Published Patent Application No. 2005-0075736 (published on Jun. 6, 2005)

SUMMARY OF THE INVENTION An object of the present invention is to provide a system for issuing an online certificate file, which is a method of issuing a certificate to a file on the online basis, and issuing the certificate in the certificate file.

Further, the object of the present invention is to limit the number of submission places for selecting the submission destination to be described in the certificate file from a list registered in advance, or inputting the type of institution and organization name, address, website address, A system for issuing an online certificate file.

In addition, the object of the present invention is to provide a method for directly inputting a name of a place where a presentation destination to be listed in a certificate file can not be selected from a pre-registered list, The issuer can set the banned words which can identify the specific company such as the name or the symbol of the issuer as the banned words and prohibit the inputting of the submitter by the name composed only of the banned words at the time of setting. .

In order to achieve the above object, the present invention relates to an online certificate file issuing system connected to a computer terminal via a network and receiving a certificate issuance request of the computer terminal and transmitting the issued certificate file, A register of the place of submission which registers the submission destination entered in the submission list; An issuance application processing unit for receiving items for issuing a certificate and transmitting the issued certificate file; A delivery destination input unit for receiving a delivery destination to which a certificate is to be submitted, the delivery destination being selected from the delivery destination list; And a document file generation unit for generating a certificate file into which the input destination is inserted.

Further, the present invention provides an online certificate file issuance system in which the present invention is applied to a system for issuing an online certificate file, wherein the submitter input unit receives direct input of a name of the submittal destination when the input destination is not in the list of the submittal place, .

Further, the present invention is a system for issuing an online certificate file of a limited-access method, wherein the banned word includes a distinguishing characteristic such as a common noun such as a university, a school, a corporation, an institution or an admissions office, or a name or a symbol of the issuer And the absence of the phrase.

In addition, the present invention provides an online certificate file issuance system in which the present invention is applied to an online certificate file issuance system in which, when the input destination is not in the list of the destination, the inputting unit receives input including the name of the destination and data for identifying the destination .

In addition, the present invention is characterized in that in the system for issuing an online certificate file, the data for identifying the destination includes at least one of an address, a telephone number, and a web site address.

According to another aspect of the present invention, there is provided a system for issuing an online certificate file, the system comprising: a forgery preventing unit for generating forgery prevention data that can prevent forgery and falsification of the certificate.

Further, the present invention is characterized in that, in the online certificate file issuing system of the present invention, the forgery inhibition data includes a time stamp or an electronic signature.

In addition, the present invention is characterized in that in the online certificate file issuing system of the present invention, the document file generating unit includes the use restriction information including the destination and the forgery preventing data in the certificate file.

In addition, the present invention is characterized in that, in the online certificate file issuing system of the present invention, when the certificate file is displayed by the viewer, the use restriction notice is displayed on the viewer.

Further, the present invention is characterized in that in the online certificate file issuing system of the present invention, the document file generating unit inserts the use restriction notifying message and the forgery preventing data in the certificate document.

As described above, according to the online certificate file issuing system according to the present invention, it is possible to prevent abuse of a certificate even if a certificate is issued to a file, and illegal leakage It is possible to prevent illegal use.

In addition, according to the online certificate file issuing system of the present invention, a variety of data that can identify a place to be submitted can be used as identification data, so that a trustworthy place where illegal use can be prevented can be described There is obtained an effect that the convenience of the user can be improved.

1 is a block diagram of a configuration of an overall system for implementing the present invention;
2 is a block diagram of a configuration of an online certificate file issuing system according to an embodiment of the present invention.
4 is a configuration diagram of a certificate file according to an embodiment of the present invention;
FIG. 5 illustrates use restriction statements in accordance with an embodiment of the present invention. FIG.
6 illustrates an example of a certificate document according to an embodiment of the present invention;

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the drawings.

In the description of the present invention, the same parts are denoted by the same reference numerals, and repetitive description thereof will be omitted.

First, an example of the overall system configuration for implementing the present invention will be described with reference to FIG.

As shown in Fig. 1, the overall system for implementing the present invention comprises a computer terminal 10 and an issuing server 30. The computer terminal 10 and the issuing server 30 are connected to each other via the network 20 such as the Internet and can perform data communication. In addition, the issuing server 30 may additionally comprise a database 40 for storing data.

The computer terminal 10 is a conventional computing terminal used by a user such as a PC, a notebook, a netbook, a PDA, a smart phone, a tablet PC, and a mobile. The user accesses the issuance server 30 through the computer terminal 10 to process a document issuance or a job related to certificate issuance. The input data for processing is input through the input device of the computer terminal 10, and the processing result is outputted through an output device such as a screen of the computer terminal 10. [ Hereinafter, a description of a user performing a task is an operation performed through the computer terminal 10.

The computer terminal 10 accesses the issuing server 30, inputs data for issuing a certificate, and requests issuance of a certificate. The computer terminal 10 may download a certificate file from the issuing server 30 and store a certificate file issued to its own storage medium such as a hard disk, an SSD disk, or a removable disk.

The certificate file is a document file that can be viewed, can not be edited, can be edited by time stamping and electronic signature at the time of editing, and is a file containing certificate contents. Preferably, the certificate file is a file that can be opened by a commercial document viewer program such as Adobe's PDF file or a dedicated viewer program. In the following, the certificate is used in combination with the issuing document.

The issuing server 30 is a server for issuing a document, and includes a server of a personalization agent or a server for relaying or acting on the server of the personalization agent. The issuing organization is a government office, a school, a general business entity, or the like, issuing certificates or other documents. For example, various documents such as certificate of employment, certificate of contract, and other documents such as certificate of enrollment, graduation certificate, diploma, etc. in the school, such as various copies of certificates issued by government offices, .

The issuing server 30 may have information for issuing a document such as a certificate as described above, or may be connected to a server of the issuing institution to fetch information for issuing a document. The issuing server 30 generates a document as a file by the issuance request and transmits the file to the issuing request server or the computer terminal 10.

On the other hand, the issuing server 30 may provide a web service for issuing to an online image such as the Internet, or may provide an application service that can be used in a dedicated application for mobile (or application, app) installed in a smart phone or the like. Alternatively, the issuing server 30 may provide a service for issuing an online issuance such as a dedicated line to an issuance-only terminal operated by an issuer responsible for the document issuance window, and an unattended issuing terminal such as a kiosk. In this case, the document file can be transferred to be stored on a removable disk such as a USB disk.

The database 40 includes a document information DB 41 for storing information for issuing a document such as a certificate, a submittal DB 42 for storing information about the submittal destination such as an identification code or name of the submittal destination, a document (or certificate) And an issuance document DB 43 for storing information on the issuance document DB 43. [ However, the configuration of the database 40 is only a preferred embodiment. In the development of a specific device, the database 40 may have a different structure in consideration of ease of access and retrieval, efficiency, and the like.

Next, an online certificate file issuing system according to an embodiment of the present invention will be described in more detail with reference to FIG.

2, the online certificate file issuing system 30 according to the present invention includes a submitter registration unit 31 for registering a submittal, an issuance application processing unit 32 for processing a document issuance request, A document file generation unit 34 for generating a certificate file (or a document file), and a code for preventing forgery and falsification that inserts code for preventing forgery and falsification of a certificate file into a document (35).

The online certificate file issuing system 30 can be implemented in the issuing server 30 described above. Hereinafter, the online certificate file issuing system 30 and the issuing server 30 are used in combination, and the same reference numerals are used for the same. In addition, the online certificate file issuing system 30 is also simply described in the issuance system 30 for convenience of explanation.

The submitter registration unit 31 registers the list of the submittal places to be inserted in the document (or the certificate) and the purpose. The submitter registration unit 31 registers the inputted submittal by the input of the manager or the like. The place of presentation refers to the company or institution to which the certificate is to be submitted. Manage the list of submissions to allow the user to select the submitting place from the list of submissions.

The data of the submitted submission includes the type and name of the submission. The type of submission is a category for submission, preferably including corporations, institutions, schools, and groups. However, the type of the submission site can be set variously by the administrator. The name of the submission is registered as the name of the submission.

On the other hand, the submitter registration unit 31 receives a preliminary submittal request for registration from the user and stores it. That is, if a user who wants to receive a certificate does not have a desired destination in the list of registered submissions, he may want to register the submission as a list of submissions. At this time, the user inputs the desired place of registration as a preliminary submittal place. In the future, the administrator can register the preliminarily submitted place as the official place of presentation by confirming the applied preliminarily submitted place of presentation.

In addition, the submitter registration unit 31 automatically rejects the preliminary submittal destination when the preliminary submittal destination is composed only of a biblical word. In other words, a submittal consisting of only banned words is not accepted as a preliminary submittal. The biblical terms are described below.

The submitter registration unit 31 collects the submittal destinations directly input by the user, and registers the submittal destinations permitted by the administrator in the submittal destination list. The administrator checks the submission places directly input by the user, confirms whether the submission destination exists, and registers the submission destination in the submission destination list.

The issuance application processing unit 32 processes an application for issuing a document such as a certificate from the computer terminal 10. In particular, various data for document issuance are input. For example, personal information such as the name of the issuer, the type of certificate to be applied, and the items required for the certificate are input. If necessary, authentication of the issuer is performed through an ID and password, a public certificate, and the like.

In addition, the issuance application processing unit 32 receives a presentation destination through which a certificate is to be submitted through the presentation unit 33.

In addition, the issuance application processing unit 32 can receive the input of the use of the certificate. Usage purpose can be divided into employment submission, certification issuance, identification, and other document submission. Preferably, the list of usage purposes is set in advance and selected from the list by the user or computer terminal 10.

On the other hand, the issuance application processing unit 32 transmits the certificate file or the document file generated by the issuance request to the computer terminal 10 in the form of a file.

The submittal destination input unit 33 receives a certificate or a destination of the document to be submitted. The submittal destination input unit 33 can receive a submittal destination selected from among the submittal destination lists previously registered in the submittal destination registering unit 31 as a submittal destination.

Preferably, the submittal destination input unit 33 provides a search function for the previously submitted submittal destination list. The search includes a search by a keyword or a search by a category.

In addition, if the submitter to be listed in the certificate file can not be selected from the previously registered list, the submitter should be able to directly input the name of the submitter, but he / she will not be able to input the name of the submitter. Banned words are non-discriminatory phrases that can identify a specific business, such as a name, a symbol, or a general noun, such as a university, a school, a company, an institution, an admissions office, or an issuer. The submitter location input unit 33 registers the general phrases without discrimination in advance as a breeze word, and if the inputted submittal place name consists only of a banned word, it is not accepted as the name of the submittal place.

On the other hand, the submission destination directly input by the user can be registered in the submission destination list by the submission destination registration unit 31. [ That is, the administrator checks the submission places directly input by the user, confirms whether the submission destination exists, and registers the submission destination in the submission destination list.

In another embodiment, the submittal destination input unit 33 receives data that can identify the submittal destination when the submittal destination is not selected from the registered submittal destination list. This data will be referred to as presentation data. Preferably, the submission destination identification data includes an address, a website address, and a telephone number.

The identification data of the place of submission shall be such information as to identify the place of submission and shall have such a degree of discrimination as to confirm that the person in charge of the submission where the certificate is submitted is the document issued to the place of submission. Also, it should be possible to prevent the presentation-destination identification data from being a plurality of presentation places. Addresses, website addresses, and telephone numbers are data that can identify the destination.

The submittion destination input unit 33 verifies whether the input submitted place identification data is information that is actually present and verifies it. That is, the addressee confirms whether it is actually pointing to a specific location. For example, only "Seoul City" and "Seoul Gangnam-gu" are listed on the address, and it is judged whether it is incompletely written. At this time, it is possible to judge whether or not it exists by referring to the map data. In addition, the web site address can determine whether or not the web site is actually existed by checking whether the actual web site is accessed. Further, the telephone number can be judged as to whether or not the telephone number format is complete.

When the certificate file is created, the input data or the identification data of the submitted data is inserted into the certificate file. If the data is not correct, the certificate indicates that the certificate is invalid. In this case, the person in charge of reception of the presentation can confirm whether or not the document is issued to the corresponding presentation place only by the presentation identification data.

Preferably, the submittion destination input unit 33 receives the submittance destination name together with the submittance destination identification data. Since the name of the submission in the registered submission list is the name for which the submission has been confirmed, the submission can be identified without the submission identification data. However, if the name of the place of submission is not in the list of submitted submission, it shall have the identifying power of the place of submission together with the place identification data.

For example, if the name of the submission is "Hyundai," all agencies or companies including "Hyundai" are possible. Also, if you say "business", you are likely to submit a certificate to all companies. Therefore, in order to prevent this, if it is inputted together with the address having the discriminating power, the address of the website, the telephone number, etc., the discrimination power of the certifying file can be prevented.

The document file generation unit 34 generates a certificate file requested by the user or the computer terminal 10. [ The certificate file is inserted or included in the content of the certificate, such as the use restriction information (use restriction information). Preferably, the document file generation unit 34 inserts or includes forgery prevention data for preventing forgery or falsification in the certificate file. The forgery preventing data is data generated by the forgery preventing section 35, and includes a time stamp, electronic signature data, and the like. The forgery inhibition data may be embedded as a data in a document file, or may be inserted into a two-dimensional code so as to be displayed in an output state of the document file.

An example of a certificate file is shown in Fig. As shown in FIG. 3, the certificate file is composed of a certificate document 93, a use restriction notifying statement 91, and forgery preventing data 92.

For example, in the case of the various certificates and the kind of document to be submitted, the contents of the certificate such as the "graduation certificate", the name, the resident registration number, the department, the degree name, and the date of graduation are output in the certificate document 93.

In the certificate file, a usage restricting instruction 91, which is a content for restricting use, is included. The use restriction notifying letter 91 includes a use purpose, a place of presentation, an expiration date, and the like. The purpose of use is the selected content from the list of pre-set uses as the purpose. As stated above, the place of submission is to specify the institution that submitted the certificate. The validity period refers to the validity period of validity of the certificate. An example of Fig. 3 is a preferred embodiment, and its use or validity period may be excluded.

It is also possible to specify that the certificate is valid only within the use limit, such as the phrase described at the bottom of the use restriction notifying statement 91 in Fig. 3, that is, " desirable. This makes it possible to prevent unauthorized use even when a document file is leaked, and abuse can be prevented even without restriction of copying.

In addition, FIG. 4 shows an example in which the use restriction notifying statement 91 is a correct example and the case where it is not. That is, Fig. 4 (a) is a correct example as a use restriction statement, and Fig. 4 (b), (c) and (d) are bad examples. As shown in Fig. 4 (a), it is a correct example that the place of presentation is specified with distinctiveness. As shown in Fig. 4 (b), if the destination is not specified and can not be identified, this is a bad example. Also, as shown in Fig. 4 (c), a name that can not identify a specific destination is a bad example. In addition, as shown in Fig. 4 (d), it is also a bad example that the name of the person in charge of the company to be submitted is described instead of the name of the destination. Therefore, it is preferable that the name of the place of submission is prohibited from being described as such a bad example.

Further, the forgery-and-falsification preventing data 92 is inserted in the certificate file. The forgery inhibition data 92 is composed of a time stamp or an electronic signature. The time stamp records the time at which the certificate file was generated, and the digital signature is data that can be verified as authenticity of the certificate since it is signed with a certificate etc. together with the contents of the document (hashed contents). A method of generating forgery prevention data such as a time stamp or an electronic signature is a well-known technology, and a detailed description thereof will be omitted.

Also, the forgery inhibition data 92 can be generated including the content of the presentation destination. Therefore, it is possible to prevent forgery and falsification of the place where the certificate is submitted.

On the other hand, the certificate file is a document file that can be viewed, can not be edited, or can indicate that the file has been tampered with, for example, a time stamp and an electronic signature at the time of editing. Preferably, the certificate file is a file that can be opened by a commercial document viewer program such as Adobe's PDF file or a dedicated viewer program. Also, a document file can be output by the printer function of the viewer.

When the certificate file is opened with a viewer (or a dedicated viewer), it can be displayed in the viewer as shown in FIG. In other words, the use restriction notifying statement 91 and the certificate document content 93 can be displayed on the screen. 6, the forgery preventing data 92 can be displayed on the screen in the form of a two-dimensional code together with the use restriction notifying statement 91 and the document contents 93. [ Further, as another example, either the usage restriction notifying statement 91 or the forgery preventing data 92 can be displayed together with the document content 93 in the viewer.

As another embodiment, as shown in Fig. 6, the use restriction information 91 included in the certificate file or the forgery preventing data 92 may be included in the certificate document 93. [ In particular, the forgery inhibition data 92 can be converted into a two-dimensional code form and inserted into the document.

On the other hand, the generated certificate file or document file is transmitted to the computer terminal 10 by the issuance application processing unit 32. [

The forgery preventing unit 35 is data for preventing the forgery and alteration of the contents of the issuing document such as a certificate, and is generated with a time stamp or an electronic signature. The generated forgery preventing data is included in the certificate file. The forgery inhibition data is generated as hashed data by encrypting the contents of the certificate including the destination. Therefore, it is possible to prevent forgery and falsification of the presentation place.

The invention made by the present inventors has been described concretely with reference to the embodiments. However, it is needless to say that the present invention is not limited to the embodiments, and that various changes can be made without departing from the gist of the present invention.

10: computer terminal 20: network
30: issuing server, issuing system 40: database

Claims (10)

An online certificate file issuing system connected to a computer terminal through a network and receiving a certificate issuance request of the computer terminal and transmitting the issued certificate file,
A submitter registering the submittal place and registering the submittal place entered in the submittal place list;
An issuance application processing unit for receiving items for issuing a certificate and transmitting the issued certificate file;
A delivery destination input unit for receiving a delivery destination to which a certificate is to be submitted, the delivery destination being selected from the delivery destination list; And
And a document file generation unit for generating a certificate file into which the input destination is inserted,
If the input destination is not in the list of the destination, the input unit receives the input including the name of the destination and data for identifying the destination, verifies whether the input data is actually present,
The data that can identify the submittion includes at least one of an address, a telephone number, and a website address,
Wherein the document file generation unit includes a use restriction notifying statement in the certificate file that the content is valid only when the certificate file is submitted to the place where the certificate is inserted into the certificate,
The certificate file is a file for a certificate that can be submitted to a plurality of places where the use of the place of use is not restricted,
If the input destination is not in the destination list, the destination input unit receives the destination name directly and automatically rejects the input if the input destination is not the destination,
The banned words include any one or more of common nouns such as universities, schools, companies, institutions, admissions offices, or any other non-discriminatory phrases that can identify a specific business, such as the name or symbol of the issuer,
Wherein the system further comprises a forgery preventing section for generating forgery prevention data capable of preventing forgery and falsification of the certificate,
Wherein the forgery prevention data includes a time stamp or an electronic signature.
delete delete delete delete delete delete The method according to claim 1,
Wherein the document file generation unit includes the forgery preventing data in the certificate file.
9. The method of claim 8,
Wherein the forgery prevention data is inserted into a certificate document displayed when the forgery-fugure prevention data is displayed on the viewer or when the certificate file is outputted when the certificate file is displayed by the viewer, Issuing system.
The method according to claim 1,
Wherein the use restriction notifying statement is displayed on a viewer when the certificate file is displayed by a viewer or the use restriction notifying statement is inserted into a certificate document outputted when the certificate file is outputted. Issuing system.

Images