TW201802701A - Local data sharing system and method in which a server device transmits encipher data and a key for deciphering the enciphered data to an electronic device separately - Google Patents

Abstract

Disclosed is a local data sharing system. A processing module of an electronic device generates a data request that inquires enciphered data and contains user identification information of the electronic device, and transmits the data request to a server device. When a processing unit of the server device determines the user identification information matches identification data of the user in a first authorization list, the processing unit transmits enciphered data to the electronic device. When the processing unit of the server device receives a key request from the electronic device, with the processing unit determining the electronic device is located in an authorization area according to the key request and the identification data, the processing unit transmits a key to the electronic device to allow the processing module of the electronic device to decipher the enciphered data.

Description

Regional data sharing system and method

The present invention relates to a data sharing system and method, and particularly to a regional data sharing system and method.

Existing data sharing systems store digital data in a server for users with authority to operate electronic devices to connect to the server, thereby accessing the digital data. If any user who owns the digital data distributes the digital data on the network, all users who do not have the permission can also obtain the digital data, causing distress to the user and the digital data provider.

The existing method of controlling digital data is to encrypt the digital data and provide the data decrypted by the electronic device only after the identity of the electronic device is authenticated, thereby controlling the digital data.

However, for a digital information provider who wishes to disclose the digital information only in a specific geographic field, the above method cannot meet its needs.

Therefore, one of the objectives of the present invention is to provide a regional data sharing system, which can regulate an electronic device to unlock an encrypted data provided by a server unit only in an authorized area.

Therefore, a regional data sharing system of the present invention includes a server device and at least one electronic device. The server device includes a storage unit and a processing unit electrically connected to the storage unit. The storage unit stores encrypted data, a key for decrypting the encrypted data, a first authorized list, and an authorized Area identification data, the first authorized list contains user identification information. The at least one electronic device includes a processing module. The processing module of the electronic device generates a data request for obtaining the encrypted data, and transmits the data request to the server device. The data request includes a user identification information. When the processing unit of the server device receives the data request, the processing unit determines whether the user identification information of the data request is the same as the user identification information of the first authorized list, and when the processing unit determines the data request If the user identification information is the same as the user identification information of the first authorized list, the processing unit transmits the encrypted data to the electronic device. When the processing unit of the server device receives a key request from the electronic device for obtaining the key, the processing unit determines whether the electronic device is located in the authorized area according to the key request and the identification data. When the processing unit determines that the electronic device is located in the authorized area according to the key request and the identification data, the processing unit transmits the key to the electronic device. The processing module of the electronic device uses the key to decrypt the encrypted data.

In some implementation forms, the first authorized list includes a plurality of user identification information, and the regional data sharing system includes a plurality of electronic devices. When the processing unit of the server device receives the data request from one of the electronic devices, the processing unit determines whether the user identification information of the data request is the same as one of the user identification information of the first authorized list. The unit determines that the user identification information of the data request is the same as one of the user identification information of the first authorized list, and the processing unit transmits the encrypted data to the one of the electronic devices. The key request includes user identification information. When the processing unit of the server device receives a key request from one of the electronic devices, and the processing unit determines the one of the electronic devices according to the key request and the identification data. Located in the authorized area, and the user identification information requested by the key has not been added to a attendance list, the processing unit adds the user identification information requested by the key to the attendance list, and judges the presence of Whether the number of user identification information reaches a predetermined attendance threshold, and when the processing unit judges that the number of user identification information in the attendance list reaches the predetermined attendance threshold, the processing unit transmits the key to the user identification information in the attendance list The corresponding electronic device is used by the electronic device corresponding to the user identification information in the attendance list to decrypt the encrypted data using the key.

In some implementation forms, the storage unit further stores a second authorization list, the second authorization list containing user identification information different from the user identification information of the first authorization list, and the regional data sharing system Contains multiple electronic devices. When the processing unit of the server device receives the data request from one of the electronic devices, the processing unit determines whether the user identification information of the data request is the same as the user identification information of the first authorized list or the second authorized list When the processing unit judges that the user identification information of the data request is the same as the user identification information of the first authorized list or the second authorized list, the processing unit transmits the encrypted data to one of the electronic devices. The key request includes user identification information. When the processing unit of the server device receives a key request from one of the electronic devices, and the processing unit determines the one of the electronic devices according to the key request and the identification data. Located in the authorized area, and the processing unit judges that the user identification information of the data request is the same as the user identification information of the first authorized list, the processing unit transmits the key to one of the electronic devices for The one of the electronic devices uses the key to decrypt the encrypted data. The processing module of one of the electronic devices transmits the key to another electronic device corresponding to the user identification information of the second authorized list for the other electronic device to decrypt the encrypted data using the key.

In some embodiments, the electronic device further includes a GPS module electrically connected to the processing module. The GPS module generates a GPS coordinate at a location of the electronic device. The key request further includes the GPS coordinate. The identification data stored by the server device includes a GPS coordinate range of the authorized area. When the processing unit determines that the GPS coordinate requested by the key falls within the GPS coordinate range of the discrimination data, the processing unit determines that the electronic device is located in the authorized area.

In some embodiments, an access point located in the authorized area is further included. When the electronic device is connected to a communication network through the access point, the electronic device receives a media access control bit from the access point. At least one of an IP address, a service setting identifier, and an IP address, and generates the key request including the media access control address, the service setting identifier, and at least one of the IP address. The identification data stored by the server device includes at least one of the media access control address, the service setting identifier, and the address. When the processing unit judges at least one of the media access control address requested by the key, the service setting identifier and the IP address, the media access control address of the identification data, and the service setting identifier It is the same as at least one of the IP address, and the processing unit determines that the electronic device is located in the authorized area.

In some embodiments, a communication device located in the authorized area is also included. The communication device uses an short-range communication technology to send an identification code. When the electronic device is located in the authorized area, the electronic device uses the The short-range communication technology receives the identification code and generates the key request including the identification code. The identification data stored by the server device includes the identification code. When the processing unit determines that the identification code requested by the key is the same as the identification code of the identification data, the processing unit determines that the electronic device is located in the authorized area.

In some embodiments, the electronic device further includes an image capturing module electrically connected to the processing module. The image capturing module is configured to capture an environment in which the electronic device is located to generate an image. The key request further includes the image capturing module. image. The identification data stored by the server device includes a reference image related to the authorized area. When the processing unit uses an image comparison technique to determine that the image requested by the key is similar to the reference image of the identification data, the processing unit determines that the electronic device is located in the authorized area.

Another object of the present invention is to provide a regional data sharing method, which can regulate an electronic device to unlock an encrypted data provided by a server unit only in an authorized area.

Therefore, a regional data sharing method of the present invention is jointly performed by a server device and at least one electronic device. The server device includes a storage unit and a processing unit electrically connected to the storage unit. The storage unit stores encrypted data. A key for decrypting the encrypted data, a first authorized list, and identification data related to an authorized area, the first authorized list contains user identification information, and the electronic device includes a processing module, The method includes the following steps: (A) the processing module of the electronic device generates a data request for obtaining the encrypted data, and transmits the data request to the server device, the data request including a user identification information; ( B) When the processing unit of the server device receives the data request, the processing unit determines whether the user identification information of the data request is the same as the user identification information of the first authorized list, and when the processing unit determines the data request The user identification information of is the same as the user identification information of the first authorized list, the processing unit encrypts the (C) when the processing unit of the server device receives a key request from the electronic device for obtaining the key, the processing unit judges based on the key request and the identification data Whether the electronic device is located in the authorized area, and when the processing unit determines that the electronic device is located in the authorized area according to the key request and the identification data, the processing unit transmits the key to the electronic device; and ( D) The processing module of the electronic device uses the key to decrypt the encrypted data.

In some embodiments, the method is performed by the server device and a plurality of electronic devices. The first authorized list includes a plurality of user identification information. In step (A), when the server device The processing unit receives the data request from one of the electronic devices, the processing unit determines whether the user identification information of the data request is the same as one of the user identification information of the first authorized list, and when the processing unit determines that the data request The user identification information is the same as one of the user authorization information of the first authorized list, and the processing unit transmits the encrypted data to one of the electronic devices; in step (C), the key request includes a user identification Information, when the processing unit of the server device receives a key request from one of the electronic devices, and the processing unit determines that one of the electronic devices is located in the authorized area according to the key request and the identification data, and The user identification information requested by the key has not been added to a attendance list, the processing unit requests the user identification requested by the key Information is added to the attendance list, and it is determined whether the number of user identification information in the attendance list reaches a predetermined attendance threshold. When the processing unit judges that the number of user identification information in the attendance list reaches the predetermined attendance threshold, the processing unit will The key is transmitted to the electronic device corresponding to the user identification information in the attendance list, and the electronic device corresponding to the user identification information in the attendance list uses the key to decrypt the encrypted data.

In some embodiments, the method is performed by the server device and a plurality of electronic devices. The storage unit further stores a second authorization list, and the second authorization list includes a user different from the first authorization list. The user identification information of the identification information, after step (D), further includes: the processing module of one of the electronic devices described in (E) transmits the key to another user identification corresponding to the second authorized list An electronic device of information for the other electronic device to decrypt the encrypted data using the key; wherein, in step (A), when the processing unit of the server device receives the data from one of the electronic devices Request, the processing unit determines whether the user identification information of the data request is the same as the user identification information of the first authorized list or the second authorized list, and when the processing unit determines that the user identification information of the data request is identical to the first The user identification information of the authorized list or the second authorized list is the same, and the processing unit transmits the encrypted data to one of the electronic devices. In step (C), the The key request includes user identification information. When the processing unit of the server device receives a key request from one of the electronic devices, and the processing unit determines that one of the electronic devices is located on the basis of the key request and the identification data. Within the authorized area, and the processing unit determines that the user identification information of the data request is the same as the user identification information of the first authorized list, the processing unit transmits the key to one of the electronic devices for the One of the electronic devices uses the key to decrypt the encrypted data.

In some embodiments, the electronic device of the method further includes a GPS module electrically connected to the processing module, wherein before step (C), it further includes: (F) the GPS module generates an electronic The GPS coordinates of the device location, the key request also includes the GPS coordinates, and the identification data stored by the server device includes a GPS coordinate range of the authorized area; wherein, in step (C), when the The processing unit determines that the GPS coordinate requested by the key falls within the GPS coordinate range of the identification data, and the processing unit determines that the electronic device is located in the authorized area.

In some implementations, the method is also performed jointly by an access point located in the authorized area. The identification data stored by the server device includes the media access control address, the service setting identifier, and At least one of the addresses, wherein, before step (C), the method further includes: (G) when the electronic device is connected to a communication network via the access point, the electronic device receives a media access from the access point Controlling at least one of the address, a service setting identifier, and an IP address, and generating the key request including the media access control address, the service setting identifier, and at least one of the IP address; Wherein, in the step (C), when the processing unit judges that at least one of the media access control address, the service setting identifier, and the IP address requested by the key is stored with the media of the identification data. Taking at least one of the control address, the service setting identifier and the IP address is the same, the processing unit determines that the electronic device is located in the authorized area.

In some implementation aspects, the method is also jointly performed by a communication device located in the authorized area, and the identification data stored by the server device includes the identification code, and before step (C), the method further includes: : (H) The communication device uses a short-range communication technology to send an identification code. When the electronic device is located in the authorized area, the electronic device uses the short-range communication technology to receive the identification code and generate an identification code containing the identification code. The key request; wherein, in step (C), when the processing unit determines that the identification code of the key request is the same as the identification code of the identification data, the processing unit determines that the electronic device is located in the authorized area Inside.

In some implementation aspects, the electronic device of the method further includes an image capturing module electrically connected to the processing module, and the identification data stored by the server device includes a reference image related to the authorized area, Wherein, before step (C), the method further includes: (I) the image capturing module captures an environment where the electronic device is located to generate an image; wherein, in step (C), the key request further includes the image and When the processing unit uses an image comparison technique to determine that the image requested by the key is similar to the reference image of the identification data, the processing unit determines that the electronic device is located in the authorized area.

The present invention has at least the following effects: In the regional data sharing system and the regional data sharing method of the present invention, after the processing unit of the server device judges that the electronic device is the same as the user identification information of the first authorized list, it encrypts the The data is transmitted to the electronic device belonging to the first authorized list, thereby ensuring that the encrypted data is transmitted to the electronic device included in the first authorized list in advance, and then the processing unit of the server device judges in different ways The area where the electronic device is located is in the authorized area, and then the key is transmitted to the electronic device located in the authorized area for the processing module of the electronic device to decrypt the encrypted data, thereby ensuring that the Encrypted data is only used in this authorized area.

Before the present invention is described in detail, it should be noted that in the following description, similar elements are represented by the same numbers.

Please refer to FIG. 1, a first embodiment of a regional data sharing system 100 according to the present invention includes a server unit 1 and an electronic device 2.

The server unit 1 includes a storage unit 11, a communication unit 12, and a processing unit 13 electrically connecting the storage unit 11 and the communication unit 12. The storage unit 11 stores encrypted data, a key for decrypting the encrypted data, a first authorized list, and identification data related to an authorized area 301. In this embodiment, the first authorized list includes user identification information, and the user identification information is, for example, an International Mobile Equipment Identity (IMEI) corresponding to the authorized electronic device, but not the same. For limitation, in other embodiments, the user identification information may also be, for example, an authorized user account.

In this embodiment, the authorized area 301 is, for example, a GPS coordinate range, and may also be a specific location such as a conference room or classroom, but is not limited thereto.

The processing unit 13 of the server unit 1 uses the communication unit 12 to connect to a communication network 201 in a wired or wireless manner.

The electronic device 2 includes a storage module 21, a communication module 22, a GPS module 24, and a processing module 25 electrically connected to the storage module 21, the communication module 22, and the GPS module 24. In this embodiment, the processing module 25 of the electronic device 2 may be connected to the communication network 201 through the communication module 22 and perform wired or wireless communication with the processing unit 13 through the communication unit 12 of the server unit 1. In this embodiment, the electronic device 2 may be a tablet computer, a smart phone, or a notebook computer.

Please refer to FIG. 1 and FIG. 2. The first embodiment of the regional data sharing system 100 is, for example, a first embodiment for performing the regional data sharing method of the present invention. The embodiment includes the following steps.

In step S21, the processing module 25 of the electronic device 2 generates a data request for obtaining the encrypted data, and transmits the data request to the processing unit 13 of the server unit 1. The data request includes user identification information of the electronic device 2. The user identification information is, for example, the International Mobile Equipment Identity (IMEI) of the electronic device 2, but is not limited thereto. In other implementations, the user identification information may also be, for example, an operation of the device. A user account of a user of the electronic device 2.

In step S22, when the processing unit 13 of the server unit 1 receives the data request from the electronic device 2, the processing unit 13 determines the user identification information of the data request and the user identification information of the first authorized list. If they are the same, if the result is yes, go to step S23. In this embodiment, if the result is no, the process proceeds to step S29 to end the method, but is not limited thereto.

In step S23, the processing unit 13 of the server unit 1 transmits the encrypted data to the electronic device 2.

It can be known from the above that by performing steps S21 to S23 in the first embodiment of the regional data system 100, it is ensured that only the electronic device 2 having the same user identification information as the first authorized list can obtain the encrypted data, and In other words, the provider of encrypted data can set the first authorized list to regulate the permissions of users who can obtain the encrypted data.

In step S24, the GPS module 24 of the electronic device 2 generates a GPS coordinate of the location of the electronic device 2.

In step S25, the processing module 25 of the electronic device 2 generates a key request for obtaining the key. The key request includes the GPS coordinates of the electronic device 2. The electronic device 2 receives the key. The request is transmitted to the server unit 1.

In step S26, when the processing unit 13 of the server unit 1 receives the key request from the electronic device 2, the processing unit 13 judges the key according to the GPS coordinates in the key request and the GPS coordinate range in the discrimination data. Whether the electronic device 2 is located in the authorized area 301, and if the result is yes, the process proceeds to step S27.

In step S27, the processing unit 13 transmits the key to the electronic device 2.

In step S28, the electronic device 2 uses the key to decrypt the encrypted data.

It can be known from the above that by performing steps S24 to S28 through the first embodiment of the regional data system 100, it can be ensured that only the electronic device 2 located within the GPS coordinate range can obtain the key, thereby regulating users who obtain the encrypted data. Uses the data only within the GPS coordinate range, thereby satisfying the requirement that the encrypted data provider wants the encrypted data to be disclosed only within the GPS coordinate range.

It is added that, in step S26 in this embodiment, the server unit 1 only determines whether the electronic device 2 is located in the authorized area 301, but is not limited thereto. In other embodiments, the key request generated by the processing module 25 of the electronic device 2 in step S25 may further include user identification information of the electronic device 2, and the processing of the server unit 1 in step S26 The unit 13 also judges whether the user identification data and the user identification data of the first authorized list are the same, and if the result is also yes, it proceeds to step S27. In this way, it can be ensured that the electronic device 2 receiving the key request is located in the authorized area and belongs to the first authorized list. Furthermore, in this embodiment, an electronic device 2 is used as an example, but it is not limited thereto. In other implementations, this embodiment may be implemented by using multiple electronic devices 2 as long as multiple electronic devices are established. The user identification information of 2 can be in the first authorized list.

In addition, in steps S24 to S26 of this embodiment, the processing unit 13 determines whether the electronic device 2 is located in the authorized area by comparing whether the GPS coordinates requested for the key fall within the GPS coordinates range of the discrimination data. The area 301 is not limited to this. In the second to fourth embodiments of the regional data sharing method of the present invention, three other implementation manners for determining whether the electronic device 2 is located in the authorized area 301 will be described respectively.

Referring to FIG. 3, a second embodiment of a regional data sharing system 100 of the present invention includes a server unit 1, an electronic device 2, and an access point 3 located in the authorized area 31. In this embodiment, the server unit 1 is substantially the same as the first embodiment. The difference is that the identification data in this embodiment is, for example, a media access control address including the access point 3, and a service setting identifier. And at least one of an IP address, but not limited to this. In this embodiment, the electronic device 2 is substantially the same as the first embodiment, except that the electronic device 2 in this embodiment further includes a short-range communication module 23. In this embodiment, the short message communication module 23 supports, for example, at least one of WiFi technology, Bluetooth technology and NFC (Near Field Communication) technology.

The access point 3 has a communicator 31, a short-range communicator 32, and a controller 33 electrically connected to the communicator 31 and the short-range communicator 32. In this embodiment, the access point 3 has at least one of a media access control address, a service setting identifier, and an IP address. In this embodiment, the controller 33 of the access point 3 uses the communicator 31 to connect to the communication network 201 and performs wired or wireless communication with the processing unit 13 through the communication unit 12 of the server unit 1. In this embodiment, the short-range communicator 32 supports at least one of, for example, WiFi technology, Blue tooth technology, and NFC (Near Field Communication) technology. The controller 33 of the access point 3 uses the short-range The communicator 32 performs short-range wireless communication with the processing module 25 via the short-range communication module 23 of the electronic device 2. In this way, the electronic device 2 can perform two-way data transmission with the server unit 1 through the access point 3.

Please refer to FIG. 3 and FIG. 4. The second embodiment of the regional data sharing system 100 is, for example, a second embodiment for implementing the regional data sharing method of the present invention. In this embodiment, steps S41 to S43 and the first Steps S21 to S23 of one embodiment are the same, and steps S47 to S49 are the same as steps S27 to S29 of the first embodiment. The main difference lies in steps S44 to S46 for determining whether the electronic device 2 is located in the authorized area 301, as described below.

In step S44, the electronic device 2 receives at least one of a media access control address, a service setting identifier, and an IP address from the access point 3.

In step S45, the processing module 25 of the electronic device 2 generates a key request for obtaining the key. The key request includes the media access control address, the service setting identifier, and the IP address. At least one of them, and sends the key request to the server unit 1.

In step S46, the processing unit 13 of the server unit 1 judges the media access control address of the key request, the service setting identifier, and the IP address of at least one of the media access and the identification data. At least one of the control address, the service setting identifier, and the IP address is the same, the processing unit 13 determines that the electronic device 2 is located in the authorized area 301, and proceeds to step S47. If the result is no, the process proceeds to step S49 to end the embodiment, but is not limited thereto.

By performing the steps S44 to S48 in the second embodiment of the regional data system 100, it can be ensured that the electronic device 2 that uses the key to open the encrypted data is located within the effective communication range of the access point 3, thereby obtaining the encryption in a standardized manner. The user of the data uses the encrypted data only within the effective communication range of the access point 3, thereby satisfying the requirement that the encrypted data provider wants the encrypted data to be disclosed only within the effective communication range of the access point 3. In this embodiment, the effective communication range of the access point 3 defines the authorized area 301. Therefore, by setting the access point 3 in a specific place such as a conference room or classroom, users can be regulated in the area. Specific locations can use this encrypted data.

Referring to FIG. 5, a third embodiment of a regional data sharing system 100 according to the present invention includes a server unit 1, an electronic device 2, and a communication device 4 located in the authorized area 31. In this embodiment, the server unit 1 and the electronic device 2 are substantially the same as the second embodiment of the system. The main difference is that the identification data includes the identification code of the communication device 4.

In this embodiment, the communication device 4 includes a short-range communication unit 41 and a control unit 42 electrically connected to the short-range communication unit 41. In this embodiment, the communication device 4 uses the short-range communication unit 42 to send an identification code to the short-range communication module 23 of the electronic device 2 using a short-range communication technology. Specifically, the short-range communication technology is, for example, Support at least one of WiFi technology, Blue tooth technology and NFC (Near Field Communication) technology. In this embodiment, the communication device 4 is, for example, a beacon device, and sends a Bluetooth signal including the identification code in a unidirectional broadcast (Unidirectional Broadcasr) manner, but is not limited thereto. .

Please refer to FIG. 5 and FIG. 6. The third embodiment of the regional data sharing system 100 is, for example, a third embodiment for implementing the regional data sharing method of the present invention. In this embodiment, steps S61 to S63 and the first Steps S21 to S23 of one embodiment are the same, and steps S67 to S69 are the same as steps S27 to S29 of the first embodiment. The main difference lies in steps S64 to S66 of judging whether the electronic device 2 is located in the authorized area 301, as described below.

In step S64, the electronic device 2 receives the identification code from the communication device 4.

In step S65, the processing module 25 of the electronic device 2 generates a key request for obtaining the key, the key request includes the identification code, and transmits the key request to the server unit 1.

In step S66, the processing unit 13 of the server unit 1 determines whether the identification code of the key request and the identification code of the identification data are the same. If the result is yes, the processing unit 13 determines that the electronic device 2 is located in the In the authorized area 301, the process proceeds to step S67. If the result is no, the process proceeds to step S69 to end the embodiment, but is not limited thereto.

The regional data system 100 executes steps S64 to S68 of this embodiment to ensure that the electronic device 2 that can use the key to open the encrypted data is within the effective communication range of the communication device 4, thereby regulating the acquisition of the encrypted data. The user uses the data only within the effective communication range of the communication device 4, thereby satisfying the requirement that the encrypted data provider wants the encrypted data to be disclosed only within the effective communication range of the communication device 4. In this embodiment, the effective communication range of the communication device 4 defines the authorized area 301. Therefore, by setting the communication device 4 in a specific place such as a conference room or classroom, users can be regulated in the specific place To use the encrypted data.

Referring to FIG. 7, a fourth embodiment of a regional data sharing system 100 according to the present invention includes a server unit 1 and an electronic device 2. In this embodiment, the server unit 1 is substantially the same as the first embodiment. The difference is that the identification data of this embodiment includes, for example, a reference image related to the authorized area 301. In this embodiment, the electronic device 2 is substantially the same as the first embodiment, except that the electronic device 2 in this embodiment further includes an image capturing module 26 electrically connected to the processing module. The image capturing module 26 It is used for shooting the environment where the electronic device 2 is located to generate an image.

Please refer to FIG. 7 and FIG. 8. The fourth embodiment of the regional data sharing system 100 is, for example, a fourth embodiment for implementing the regional data sharing method of the present invention. In this embodiment, steps S81 to S83 and the first Steps S21 to S23 of one embodiment are the same, and steps S87 to S89 are the same as steps S27 to S29 of the first embodiment. The main difference lies in steps S84 to S86 of determining whether the electronic device 2 is located in the authorized area 301, as described below.

In step S84, the image capturing module 26 of the electronic device 2 captures the environment in which the electronic device 2 is located to generate an image.

In step S85, the processing module 25 of the electronic device 2 generates a key request for obtaining the key, the key request includes the image, and transmits the key request to the server unit 1.

In step S86, the processing unit 13 of the server unit 1 uses an image comparison technique to determine that the image requested by the key is similar to the reference image of the identification data. If the result is yes, the processing unit 13 determines the electronic device 2 is located in the authorized area 301, and it proceeds to step S87. If the result is no, the process proceeds to step S89 to end the embodiment, but is not limited thereto.

Please refer to FIG. 9. A fifth embodiment of a regional data sharing system 100 according to the present invention is substantially the same as the first embodiment, except that this embodiment further includes a plurality of electronic devices 2. In this embodiment, the server The structures and functions of the unit 1 and each electronic device 2 are substantially the same as those of the first embodiment, and details are not described herein again.

Please refer to FIG. 9 and FIG. 10. The fifth embodiment of the regional data sharing system 100 is, for example, a fifth embodiment for executing the regional data sharing method of the present invention. The embodiment includes the following steps.

In step S101, a processing module 25 of one of the electronic devices 2 generates a data request for obtaining the encrypted data, and transmits the data request to the server unit 1. The data request includes user identification information of one of the electronic devices 2.

In step S102, when the processing unit 13 of the server unit 1 receives a data request from one of the electronic devices 2, the processing form 13 judges the user identification information of the data request and the user identification of the first authorized list. If the information is the same, if the result is yes, go to step S103. If the result is no, proceed to step S110 to end the embodiment, but not limited to this.

In step S103, the processing unit 13 transmits the encrypted data to one of the electronic devices 2.

In step S104, the GPS module 24 of one of the electronic devices 2 generates a GPS coordinate of the location of one of the electronic devices 2.

In step S105, one of the electronic devices 2 generates a key request for obtaining the key, and the key request includes user identification information of the one electronic device 2 and the GPS coordinates, and wherein An electronic device 2 transmits the key request to the server unit 1.

In step S106, when the processing unit 13 of the server unit 1 receives a key request from one of the electronic devices 2, the processing unit 13 according to the GPS coordinates requested by the key and the GPS coordinate range of the identification data. It is determined whether the one electronic device 2 is located in the authorized area 301 and whether the user identification information of the one electronic device 2 has not been added to a attendance list. If the results are all yes, the process proceeds to step S107. If the result is no, proceed to step S110 to end the embodiment, but not limited to this. It is added that the manner of determining whether one of the electronic devices 2 is located in the authorized area 301 is not limited to this. In other implementations, it can also be disclosed through, for example, the second to fourth embodiments. The method is implemented in accordance with the implementation of the corresponding system embodiment. In other words, the authorized area 301 may also be a specific place such as a conference room or a classroom.

In step S107, the processing unit 13 adds the user identification information requested by the key to the attendance list, and determines whether the number of user identification information in the attendance list reaches a predetermined attendance threshold. When the processing unit 13 judges the attendance If the number of user identification information in the list reaches the predetermined attendance threshold, the process proceeds to step S108. If the result is no, proceed to step S110 to end the embodiment, but not limited to this. In this embodiment, the predetermined attendance threshold refers to a preset number of electronic devices 2. Therefore, if each electronic device 2 is operated by a user, the predetermined attendance threshold represents a person located in the authorized area. The number of attendees of the user must reach the threshold before proceeding to step S108.

In step S108, the processing unit 13 transmits the key to the electronic device 2 corresponding to the user identification information in the attendance list.

In step S109, the electronic device 2 corresponding to the user identification information in the attendance list uses the key to decrypt the encrypted data.

As can be seen from the above, by performing steps S106 to S109 with the fifth embodiment of the regional data sharing system 100, not only can it be ensured that only the GPS coordinate range (that is, the authorized area 301, but also a conference room or classroom) is located. Only the electronic device 2 can use the key to open the encrypted data, and can also ensure that when the electronic device 2 uses the key to open the encrypted data, the number of electronic devices 2 located within the GPS coordinate range has reached a predetermined threshold for attendance . In other words, the provider of encrypted data can set the predetermined attendance threshold, and then control that each user using the encrypted data must be located within the GPS coordinate range and the number of users within the GPS coordinate range reaches a certain number. Quantity to get the key.

Referring back to FIG. 9, a sixth embodiment of a regional data sharing system 100 according to the present invention is substantially the same as the fifth embodiment. The main difference is that the storage unit 11 of the server unit 1 also stores a second authorized list. The authorized list includes user identification information different from the user identification information of the first authorized list.

Please refer to FIG. 9 and FIG. 11. The sixth embodiment of the regional data sharing system 100 is, for example, a sixth embodiment of the regional data sharing method of the present invention. The embodiment includes the following steps.

In step S111, one of the processing modules 25 of the electronic device 2 generates a data request for obtaining the encrypted data, and transmits the data request to the server unit 1. The data request includes user identification information of one of the electronic devices 2.

In step S112, when the processing unit 13 of the server unit 1 receives a data request from one of the electronic devices 2, the processing unit 13 determines the user identification information of the data request and the first authorized list or the first If the user identification information of the two authorized lists is the same, when the processing unit 13 judges that the user identification information of the data request is the same as the user identification information of the first authorized list or the second authorized list, it proceeds to step S113. If the user identification information requested by the data is different from the user identification information of the first authorized list or the second authorized list, the process proceeds to step S120 to end the embodiment, but is not limited thereto.

In step S113, the processing unit 13 transmits the encrypted data to one of the electronic devices 2.

In step S114, the GPS module 24 generates a GPS coordinate of a location where one of the electronic devices 2 is located.

In step S115, the one of the electronic devices 2 generates a key request for obtaining the key, and the key request includes the user identification information of the one of the electronic devices 2 and the GPS coordinates, and An electronic device 2 transmits the key request to the server unit 1.

In step S116, when the processing unit 13 of the server unit 1 receives a key request from one of the electronic devices 2, the processing unit 13 according to the GPS coordinates requested by the key and the GPS coordinate range of the identification data. Determine whether one of the electronic devices 2 is located in the GPS coordinate range (that is, the authorized area 301 or a conference room or classroom) and the user identification information requested by the data and the user identification information of the first authorized list If they are the same, if all the answers are yes, go to step S117. If one of the results is no, proceed to step S120 to end the embodiment, but not limited to this. It is added that the manner of determining whether one of the electronic devices 2 is located in the authorized area 301 is not limited to this. In other implementations, it can also be disclosed through, for example, the second to fourth embodiments. The method is implemented in accordance with the implementation of the corresponding system embodiment. In other words, the authorized area 301 may also be a specific place such as a conference room or a classroom.

In step S117, the processing unit 13 transmits the key to one of the electronic devices 2.

In step S118, one of the electronic devices 2 uses the key to decrypt the encrypted data.

In step S119, the processing module 25 of one of the electronic devices 2 transmits the key to another electronic device 2 corresponding to the user identification information of the second authorized list for use by the other electronic device 2. The key decrypts the encrypted data.

It can be known from the above that by performing steps S116 to S119 with the sixth embodiment of the regional data sharing system 100, when a holder of an electronic device 2 (for example, a In the authorized area 31, other users (such as participants) of the electronic device 2 holding the user identification information corresponding to the second authorized list can obtain the key and use the encrypted data.

In summary, in the first to fourth embodiments of the regional data sharing system 100 and the regional data sharing method of the present invention, the processing unit 13 of the server unit 1 determines the electronic device 2 and the first authorized list. After the identification information of the users is the same, the encrypted data is transmitted to the electronic device 2 belonging to the first authorized list, thereby ensuring that the encrypted data is transmitted to the electronic device 2 in the first authorized list in advance. , In different ways, determine whether the area of the electronic device 2 is located in the authorized area 301, and then transmit the key to the electronic device 2 located in the authorized area 301 for the processing module of the electronic device 2 25 decrypt the encrypted data, thereby ensuring that the encrypted data is only used within the authorized area 301. In the fifth embodiment, the processing unit 13 further needs to determine whether the number of user identification information in the attendance list reaches a predetermined attendance threshold before transmitting the key to the electronic device corresponding to the user identification information in the attendance list. In other words, the provider of the encrypted data can set the predetermined attendance threshold to ensure that the number of users of the electronic device 2 located in the authorized area 31 reaches a predetermined number before allowing each user to unlock the encryption using the key. data. In the sixth embodiment, the processing unit 13 further needs to determine that the user identification information of one of the electronic devices 2 is the same as the user identification information of the first authorized list and is located in the authorized area 301. One of the electronic devices 2 is Will receive the key and send it to another electronic device 2 corresponding to the user identification information of the second authorized list, in other words, when holding a user identification that is the same as the first authorized list The holder of the electronic device 2 (such as the chairman of a conference) in the authorized area 31, other users (such as the participants) of the electronic device 2 holding the user identification information corresponding to the second authorized list Obtain the key and use the encrypted data. Therefore, it can indeed achieve the purpose of the invention.

However, the above are only examples of the present invention. When the scope of implementation of the present invention cannot be limited in this way, any simple equivalent changes and modifications made in accordance with the scope of the patent application and the content of the patent specification of the present invention are still Within the scope of the invention patent.

100‧‧‧ regional data sharing system
1‧‧‧Server Unit
11‧‧‧Storage Unit
12‧‧‧ communication unit
13‧‧‧processing unit
2‧‧‧ electronic device
21‧‧‧Storage Module
22‧‧‧Communication Module
23‧‧‧Short Range Communication Module
24‧‧‧GPS Module
25‧‧‧Processing Module
26‧‧‧Image capture module
3‧‧‧Access Point
31‧‧‧Communicator
32‧‧‧Short Range Communicator
33‧‧‧Controller
4‧‧‧ communication device
41‧‧‧Short-range communication unit
42‧‧‧control unit
201‧‧‧Communication Network
301‧‧‧authorized area
S21 ~ S29‧‧‧step
S41 ~ S49‧‧‧step
S61 ~ S69‧‧‧step
S81 ~ S89‧‧‧step
S101 ~ S110‧‧‧step
S111 ~ S120‧‧‧step

Other features and effects of the present invention will be clearly presented in the embodiment with reference to the drawings, wherein: FIG. 1 is a block diagram of a first embodiment of the regional data sharing system of the present invention; FIG. 2 is the present invention A flowchart of a first embodiment of a regional data sharing method; FIG. 3 is a block diagram of a second embodiment of a regional data sharing system according to the present invention; FIG. 4 is a first embodiment of a regional data sharing method according to the present invention; A flowchart of two embodiments; FIG. 5 is a block diagram of a third embodiment of a regional data sharing system of the present invention; FIG. 6 is a flowchart of a third embodiment of a regional data sharing method of the present invention; 7 is a block diagram of a fourth embodiment of the regional data sharing system of the present invention; FIG. 8 is a flowchart of a fourth embodiment of the regional data sharing method of the present invention; FIG. 9 is a regional data of the present invention A block diagram of a fifth embodiment of the sharing system; FIG. 10 is a flowchart of a fifth embodiment of the regional data sharing method of the present invention; and FIG. 11 is a sixth implementation of the regional data sharing method of the present invention A flowchart.

100‧‧‧ regional data sharing system

1‧‧‧Server Unit

11‧‧‧Storage Unit

12‧‧‧ communication unit

13‧‧‧processing unit

2‧‧‧ electronic device

21‧‧‧Storage Module

22‧‧‧Communication Module

24‧‧‧GPS Module

25‧‧‧Processing Module

Claims (14)

A regional data sharing system includes: a server unit including a storage unit and a processing unit electrically connected to the storage unit, the storage unit storing encrypted data, a key for decrypting the encrypted data, a first An authorized list and identification information related to an authorized area, the first authorized list includes user identification information; and at least one electronic device, including a processing module; the processing module of the electronic device generates a request for obtaining The data request of the encrypted data is transmitted to the server device, and the data request includes user identification information; when the processing unit of the server device receives the data request, the processing unit judges the data request Whether the user identification information is the same as the user identification information of the first authorized list, and when the processing unit determines that the user identification information of the data request is the same as the user identification information of the first authorized list, the processing unit The encrypted data is transmitted to the electronic device; when the processing unit of the server device receives a An electronic device and a key request for obtaining the key, the processing unit determines whether the electronic device is located in the authorized area according to the key request and the identification information, and when the processing unit according to the key request and the identification The data determines that the electronic device is located in the authorized area, and the processing unit transmits the key to the electronic device; the processing module of the electronic device uses the key to decrypt the encrypted data. The regional data sharing system according to claim 1, wherein the first authorized list includes a plurality of user identification information, and the regional data sharing system includes a plurality of electronic devices; when the processing unit of the server device receives To the data request from one of the electronic devices, the processing unit determines whether the user identification information of the data request is the same as one of the user identification information of the first authorized list, and when the processing unit determines the user identification of the data request The information is the same as one of the user identification information of the first authorized list, the processing unit transmits the encrypted data to one of the electronic devices; the key request includes a user identification information, and when the processing unit of the server device receives To the key request from one of the electronic devices, and the processing unit judges that one of the electronic devices is located in the authorized area according to the key request and the identification data, and the user identification information requested by the key has not been Adding a attendance list, the processing unit adds the user identification information requested by the key to the The attendance list and determine whether the number of user identification information in the attendance list reaches a predetermined attendance threshold. When the processing unit determines that the number of user identification information in the attendance list reaches the predetermined attendance threshold, the processing unit uses the key The electronic device corresponding to the user identification information in the attendance list is used by the electronic device corresponding to the user identification information in the attendance list to decrypt the encrypted data using the key. The regional data sharing system according to claim 1, wherein the storage unit further stores a second authorization list, and the second authorization list includes user identification information different from the user identification information of the first authorization list, The regional data sharing system includes multiple electronic devices. When the processing unit of the server device receives the data request from one of the electronic devices, the processing unit determines the user identification information and the first of the data request. Whether the user identification information of the authorized list or the second authorized list is the same. When the processing unit determines that the user identification information of the data request is the same as the user identification information of the first authorized list or the second authorized list, the processing unit will The encrypted data is transmitted to one of the electronic devices; the key request includes user identification information, when the processing unit of the server device receives a key request from one of the electronic devices, and the processing unit is based on the key The request and the identification information determine that one of the electronic devices is located in the authorized area, and the processing If the user identification information of the data request is the same as the user identification information of the first authorized list, the processing unit sends the key to the one of the electronic devices for the one of the electronic devices to use the key Decrypt the encrypted data; the processing module of one of the electronic devices transmits the key to another electronic device corresponding to the user identification information of the second authorized list for the other electronic device to use the key Decrypt the encrypted material. The regional data sharing system according to any one of claims 1 to 3, wherein the electronic device further includes a GPS module electrically connected to the processing module, and the GPS module generates a location of the electronic device. GPS coordinates, the key request also includes the GPS coordinates, and the identification data stored by the server device includes a GPS coordinate range of the authorized area; when the processing unit determines that the GPS coordinates requested by the key fall on the identification Within the GPS coordinate range of the data, the processing unit determines that the electronic device is located in the authorized area. The regional data sharing system according to any one of claims 1 to 3, further comprising an access point located in the authorized area. When the electronic device is connected to a communication network via the access point, the electronic device Receiving, by the access point, at least one of a media access control address, a service setting identifier, and an IP address, and generating the media access control address, the service setting identifier, and the IP address Among them, the key request of at least one of them; the identification data stored by the server device includes at least one of the media access control address, the service setting identifier, and the address; when the processing unit judges the gold At least one of the media access control address, the service setting identifier, and the IP address requested by the key, and the media access control address, the service setting identifier, and the IP address of the identification data The same is true, the processing unit determines that the electronic device is located in the authorized area. The regional data sharing system according to any one of claims 1 to 3, further comprising a communication device located in the authorized area. The communication device uses a short-range communication technology to send an identification code. When the electronic device Located within the authorized area, the electronic device uses the short-range communication technology to receive the identification code and generates the key request containing the identification code; the identification data stored by the server device includes the identification code; when the The processing unit determines that the identification code requested by the key is the same as the identification code of the identification data, and the processing unit determines that the electronic device is located in the authorized area. According to the regional data sharing system according to any one of claims 1 to 3, the electronic device further includes an image capturing module electrically connected to the processing module, and the image capturing module is used to capture the environment where the electronic device is located. To generate an image, the key request also includes the image; the identification data stored by the server device includes a reference image related to the authorized area; when the processing unit uses an image comparison technique to determine the key The requested image is similar to the reference image of the identification data, and the processing unit determines that the electronic device is located in the authorized area. A regional data sharing method is jointly performed by a server device and at least one electronic device. The server device includes a storage unit and a processing unit electrically connected to the storage unit. The storage unit stores encrypted data, and is used for A key for decrypting the encrypted data, a first authorized list, and identification data related to an authorized area. The first authorized list includes user identification information, and the electronic device includes a processing module. The method includes the following: Steps: (A) the processing module of the electronic device generates a data request for obtaining the encrypted data, and transmits the data request to the server device, the data request includes a user identification information; (B) when the The processing unit of the server device receives the data request, the processing unit determines whether the user identification information of the data request is the same as the user identification information of the first authorized list, and when the processing unit determines the user identification of the data request If the information is the same as the user identification information of the first authorized list, the processing unit transmits the encrypted data to Electronic device; (C) when the processing unit of the server device receives a key request from the electronic device and used to obtain the key, the processing unit determines whether the electronic device is based on the key request and the identification data Located in the authorized area, when the processing unit determines that the electronic device is located in the authorized area based on the key request and the identification data, the processing unit transmits the key to the electronic device; and (D) the electronic device The processing module of the device uses the key to decrypt the encrypted data. The regional data sharing method according to claim 8 is executed by the server device and multiple electronic devices, and the first authorized list includes multiple user identification information. In the step (A), when the The processing unit of the server device receives the data request from one of the electronic devices, the processing unit determines whether the user identification information of the data request is the same as one of the user identification information of the first authorized list, and when the processing unit judges The user identification information of the data request is the same as one of the user authorization information of the first authorized list, and the processing unit transmits the encrypted data to one of the electronic devices; in step (C), the key request Containing user identification information, when the processing unit of the server device receives a key request from one of the electronic devices, and the processing unit determines that one of the electronic devices is located in the authorized device according to the key request and the identification data Within the area and the user identification information requested by the key has not been added to a attendance list, the processing unit requests the key The user identification information of the attendance list is added to the attendance list, and it is determined whether the number of user identification information in the attendance list reaches a predetermined attendance threshold. When the processing unit judges that the number of user identification information in the attendance list reaches the predetermined attendance threshold, The processing unit transmits the key to the electronic device corresponding to the user identification information in the attendance list, and the electronic device corresponding to the user identification information in the attendance list uses the key to decrypt the encrypted data. The regional data sharing method according to claim 8, is performed by the server device and a plurality of electronic devices, and the storage unit further stores a second authorization list. The second authorization list includes a second authorization list that is different from the first authorization list. The user identification information of the user identification information of the authorized list, wherein after step (D), it further includes: (E) the processing module of one of the electronic devices transmits the key to another corresponding to the second authorization The electronic device of the user identification information of the list is used by the other electronic device to decrypt the encrypted data using the key; wherein, in step (A), when the processing unit of the server device receives the information from one of the electronic devices, For the data request of the device, the processing unit determines whether the user identification information of the data request is the same as the user identification information of the first authorized list or the second authorized list. When the processing unit determines the user identification information of the data request Same as the user identification information of the first authorized list or the second authorized list, the processing unit transmits the encrypted data to one of the electronic devices; In step (C), the key request includes user identification information. When the processing unit of the server device receives a key request from one of the electronic devices, and the processing unit judges based on the key request and the identification data If one of the electronic devices is located in the authorized area, and the processing unit determines that the user identification information of the data request is the same as the user identification information of the first authorized list, the processing unit transmits the key to the One of the electronic devices is used by one of the electronic devices to decrypt the encrypted data using the key. According to the regional data sharing method according to any one of claims 8 to 10, the electronic device further includes a GPS module electrically connected to the processing module, and before step (C), the method further includes: (F) The GPS module generates a GPS coordinate of the location of the electronic device, the key request also includes the GPS coordinate, and the identification data stored by the server device includes a GPS coordinate range of the authorized area; In step (C), when the processing unit determines that the GPS coordinate requested by the key falls within the GPS coordinate range of the discrimination data, the processing unit determines that the electronic device is located in the authorized area. The regional data sharing method according to any one of claims 8 to 10 is also performed jointly by an access point located in the authorized area, and the identification data stored by the server device includes the media access control At least one of an address, the service setting identifier, and the address, wherein, before step (C), further comprising: (G) when the electronic device is connected to a communication network via the access point, the electronic device is The access point receives at least one of a media access control address, a service setting identifier, and an IP address, and generates a media access control address, the service setting identifier, and the IP address. At least the key request of the person; wherein in the step (C), when the processing unit judges the media access control address, the service setting identifier and the IP address requested by the key, at least one of the The media access control address, the service setting identifier, and the IP address of the identification data are at least the same, and the processing unit determines that the electronic device is located in the authorized area. According to the regional data sharing method described in any one of claims 8 to 10, a communication device located in the authorized area is also jointly executed, and the identification data stored in the server device includes the identification code, wherein, Before step (C), the method further includes: (H) The communication device sends an identification code using a short-range communication technology. When the electronic device is located in the authorized area, the electronic device receives the identification using the short-range communication technology. And the key request including the identification code is generated; wherein, in step (C), when the processing unit judges that the identification code requested by the key is the same as the identification code of the identification data, the processing unit It is determined that the electronic device is located in the authorized area. According to the regional data sharing method according to any one of claims 8 to 10, the electronic device further includes an image capturing module electrically connected to the processing module, and the identification data stored by the server device includes a correlation The reference image in the authorized area, before step (C), further includes: (I) the image capturing module captures an environment in which the electronic device is located to generate an image; wherein, in step (C), The key request further includes the image, and when the processing unit judges that the image requested by the key is similar to the reference image of the identification data using an image matching technology, the processing unit determines that the electronic device is located in the authorized area .