TWI559163B - Time stamped digital content protection methods and systems - Google Patents

Description

Digital content protection method and system for time stamp

The present invention relates to digital content protection and methods, and more particularly to a digital content protection method and system for time stamps.

A known shortcoming of the existing technology for stamping digital time stamps on electronic documents is the need for trusted third-party electronic verification authorities to provide reliable time and to provide processing for stamping time stamps, as well as for third-party electronics. Verification agencies provide specific hash processing and verification processing (eg, Public Key Infrastructure, abbreviated as PKI), making the technique of stamping digital time stamps on electronic files complex. Furthermore, if a third-party electronic verification agency loses its confidentiality function (such as being attacked by a hacker or stealing data from a backdoor program), its confidentiality and verification functions are lost, which leads to trust problems and reliability of the entire verification mechanism. problem.

Therefore, the applicant is proposing a Taiwan invention patent application No. 104102186, "A verification system and method for issuing an instant synchronization timestamp by a digital time stamp device", which provides an instant machine time by a digital time stamp device, and then The providing end uses a digital time stamp device to cover a digital content with an instant digital time stamp, and at the same time, the providing end records the real-time digital time stamp to cover the location of the digital content as a stamping position and network location information, and the digital content The combination of real-time digital time stamp, stamping position and network location information is stored as a trusted digital content, and the receiving end can be taken from any party The trusted content can be trusted and can be connected to the provider to confirm whether the trusted digital content has the same real-time digit timestamp and stamping location, and confirm the authenticity of the received trusted digital content.

Usually the above-mentioned trusted digital content is stored in various computers or mobile communication devices (such as mobile phones, tablets, etc.), but attacks such as commercial espionage and hacking are constantly emerging, and the above-mentioned trusted digital devices are available. Content poses a serious threat.

In general, hackers can use the security holes of the user's electronic devices to sneak into the poorly-preserved electronic devices by means of implanting Trojans, copy the files stored in them, and steal the company's trade secret information. It is difficult to estimate the loss. The prior art protects important trusted digital content. Generally, the trusted digital content is encrypted as described above, and for the hacker, the encryption method of the PKI may still be cracked, which is easy to cause trust. Leakage of digital content. Therefore, if the provider in the aforementioned Taiwan invention patent application does not provide appropriate security protection, the provider will be invaded by the hacker, allowing the hacker to have the opportunity to modify the authentic digital content stored on the provider. Data such as digital time stamps, stamping locations, and network location information can cause tampering with trusted digital content and cause serious damage. Therefore, it is necessary to improve this problem.

In view of the problems of the prior art, in order to solve the deficiencies of the prior art, an object of the present invention is to provide a method and system for verifying trusted digital content to solve the problem that the trusted digital content is subject to tampering and causing serious loss. This in turn enhances the security of trusted digital content.

[Item 1] According to one aspect of the present invention, there is provided a time-stamped digital content protection system comprising a providing end and an independent timing device, wherein the providing end is provided with a digital time stamp unit, the digital time The interstitial unit provides an instant machine time and uses the digit timestamp unit to cover the current instant machine time of the digit content provided by the provider, as an instant digital timestamp, and combines the digital content and the instant digital timestamp. For trusted digital content. The independent timing device is provided on the providing end and provides independent timing time independently of the operating system of the providing end. The independent timing device is further provided with an independent verification unit. The independent verification unit records the instant digital timestamp. Furthermore, the independent verification unit compares the real-time digital timestamp of the trusted digital content and the real-time digital timestamp recorded by the independent timing device. When the two are the same, the trusted digital content is verified, otherwise the trusted digital content is It is considered to have been tampered with.

In accordance with the purpose of the present invention, a time-stamped digital content protection method is provided for use between a provider and an independent timing device, wherein the provider provides instant machine time and is provided with a digital timestamp unit. The independent timing device is provided on the providing end and provides independent timing time independently of the operating system of the providing end, and is provided with an independent verification unit. The method performs the following steps, the digit timestamp unit uses the digit timestamp unit to cover the current instant machine time as the real-time digit timestamp, the digit timestamp unit records the real-time digit time, the digit timestamp unit digitizes the content, The real-time digital timestamp is combined into a trusted digital content, and the independent verification unit records the real-time digital timestamp, the independent verification unit compares the real-time digital timestamp of the trusted digital content, and the instantaneous digital timestamp recorded by the independent timing device. When the two are the same, the trusted digital content is verified. When the two are different, the trusted digital content is deemed to have been tampered with.

According to the above, the trusted digital content provided by the providing end is verified by the independent timing device. Since the independent timing device is independent of the operating system of the providing end, the hacker attacks the providing terminal and cannot immediately attack the independent device. Timing device. So when the independent verification unit judges When the time difference between the machine time and the real-time digital timestamp is different from the time difference of the independent timing time, the trusted digital content can be identified to achieve the purpose of improving the security of the trusted digital content.

1‧‧‧providing

10‧‧‧digit timestamp unit

100‧‧‧Instant Digital Time Stamp

12‧‧‧Trustable digital content

2‧‧‧Independent timing device

3‧‧‧External timing unit

30‧‧‧External verification unit

4‧‧‧ Remote electronic timing terminal

S501~S508‧‧‧ Process steps

S601~S505‧‧‧ Process steps

Figure 1 is a schematic representation of the system of the present invention.

Figure 2 is a block diagram of the system of the present invention.

Figure 3 is a schematic illustration of one of the trusted digital content of the present invention.

Figure 4 is another schematic diagram of the trusted digital content of the present invention.

Figure 5 is a flow chart of the method of the present invention.

Figure 6 is a flow chart for verification of the external timing unit of the present invention.

The invention will be described with reference to the accompanying drawings, and the embodiments of the present invention are described in detail below, and the drawings used in the text are used to describe the features, the contents and the advantages of the invention. The subject matter is only for the purpose of illustration and supplementary description, and is not necessarily the true proportion and precise formula dosage after the implementation of the present invention. Therefore, the relationship between the attached process and the dosage of the formula should not be limited, and the patent scope of the present invention in practical implementation is limited. And in the previous description.

Referring to FIG. 1 to FIG. 2, a time-stamped digital content protection system of the present invention includes a providing end 1 and an independent timing device 2, wherein the providing end 1 is provided with a digital time stamp unit 10, and the digital time stamp unit 10 provides An instant machine time, and using the digit timestamp unit 10 to cover the current instant machine time of the digital content provided by the provider, as an instant digital timestamp 100, and within the digit The capacity, instant digital time stamp 100 is combined into a trusted digital content 12. The independent timing device 2 is provided on the providing end 1 and provides independent timing time independently of the operating system of the providing end 1, and the independent timing device 2 is further provided with an independent verifying unit 20. The independent verification unit 20 records the instant digital time stamp. Moreover, the independent verification unit 20 compares the real-time digital timestamp of the trusted digital content 12 with the instantaneous digital timestamp recorded by the independent timing device. When the real-time digital timestamp of the trusted digital content 12 and the instantaneous digital time recorded by the independent timing device are the same (as shown in FIG. 3), the trusted digital content 12 is verified, otherwise the trusted digital content 12 is deemed to have been Tampered (as shown in Figure 4).

In the present invention, the digital time stamp unit 10 further records the real-time digital time stamp to cover the location of the digital content as a stamping position and/or network location information, and adds the stamping position and/or the network location information. The trusted digital content 12 is used to enhance the security and trustworthiness of the trusted digital content 12.

In the present invention, the independent verification unit 20 periodically verifies the real-time digital timestamp of the trusted digital content 12, and whether the instantaneous digital timestamp recorded by the independent timing device is the same, for periodically checking the real-time digital timestamp of the trusted digital content 12. To confirm that the trusted digital content 12 has not been altered.

In the present invention, an external timing unit 3 is further included, and the external timing unit 3 is communicably connected to the providing terminal 1 and provides an external timing time, and is provided with an external verification unit 30, and the external verification unit 30 is provided from the independent timing device 1. Obtaining an instant digital timestamp, and the external verification unit 30 compares the real-time digital timestamp 100 of the trusted digital content 12 and the instantaneous digital timestamp recorded by the independent timing device 2, and when the two are the same, the trusted digital content 12 is By verifying, otherwise the trusted digital content 12 is deemed to have been tampered with. In this way, in addition to verifying the trusted digital content 12 by the independent timing device 3, the trusted digital content 12 can be further checked by the external timing unit 3, thereby improving the trusted digital number. The security and credibility of Content 12. The provider 1 can be made to verify whether the trusted digital content 12 has been subjected to a hacker attack or an illegal modification after verification.

In addition, in order to avoid the situation in which the terminal 1, the independent timing device 2, and the external timing unit 3 are misjudged due to temporal differences between each other, in the present invention, the terminal 1, the independent timing device 2, and the outside are further provided. The timing unit 3 is connected to a remote electronic timing terminal 4 for calibration time.

Referring to FIGS. 1 and 5, a time-stamped digital content protection method of the present invention is applied between a providing end and an independent timing device, and the independent timing device is disposed on the providing end and independent of the providing end. An independent timing time is provided outside the system, and the following steps are performed: (S501) the providing end provides instant machine time and digital content; (S502) using the digitizing time stamp unit of the providing end to cover the current instant machine time with the digital content, and (S503) the digital timestamp unit records the real-time digital timestamp; (S504) the digital timestamp unit combines the digital content and the real-time digital timestamp into a trusted digital content; (S505) the independent timing device One of the independent verification units is provided to record the real-time digital timestamp; (S506) the independent verification unit compares the real-time digital timestamp of the trusted digital content and the instantaneous digital timestamp recorded by the independent timing device, if the comparison is the same Going to step (S507), otherwise performing step (S508); (S507) when the independent verification unit determines the instant machine time and the instant digit The time difference of the stamp is the same as the time difference of the independent timing time, and the trusted digital content is verified; (S508) when the independent verification unit determines the time difference between the instant machine time and the real-time digit time stamp, and the time difference between the independent timing time is different, then Trusted digital content is considered to have been tampered with.

In the present invention, when the trusted digital content is determined to have been tampered with, the provider sends a warning message, and when the trusted digital content is determined to have been tampered with, the provider also closes the trusted digital content.

Referring to FIG. 6 , in the present invention, after the providing end completes the digital content and the real-time digit time stamp as the trusted digital content, the following verification step may also be performed with an external timing unit: (S601) external timing unit The communication unit is communicably connected to the providing end and provides an external timing time; (S602) the external timing unit obtains an instant digital time stamp from the independent timing device using one of the external verification units provided; (S603) the external verification unit pairs the trusted digit The real-time digital timestamp of the content, and the real-time digital timestamp recorded by the independent timing device, are compared, if the comparison is the same, the step is performed (S604), otherwise the step is performed (S605); (S604) when the trusted digital content is instant The digital timestamp, and the instant digital timestamp recorded by the independent timing device are the same, the trusted digital content is verified; and (S605) the instant digital timestamp when the trusted digital content is recorded, and the instant digital timestamp recorded by the independent timing device is not If the same, the trusted digital content is deemed to have been tampered with.

Referring to Figure 3, the real-time digit timestamp of the trusted digits for the trusted digits is the real-time digit timestamp of 13:01:56........., which can be the longest measurable length of the operating system. The real-time digital timestamp recorded by the independent timing device is also 13:01:56......... The real-time digital timestamp of the trusted digital content is the same as the real-time digital timestamp of the independent timing device, and the trusted digital content is verified.

Referring to Figure 4, the real-time digit timestamp of the trusted digits for the trusted digits is the real-time digit timestamp of 15:01:30........., which is also the longest count of the operating system. Within the length of time, the time-stamped timestamp recorded by the independent timing device is 13:01:56........., where the instant digital timestamp recorded by the independent timing device is inconsistent with the real-time digital timestamp of the trusted digital content, then it is determined Trusted digital content has been tampered with.

The above description is only intended to describe the preferred embodiments or embodiments of the present invention, which are not intended to limit the scope of the invention. That is, the equivalent changes and modifications made in accordance with the scope of the patent application of the present invention or the scope of the invention are covered by the scope of the invention.

1‧‧‧providing

2‧‧‧Independent timing device

3‧‧‧External timing unit

4‧‧‧ Remote electronic timing terminal

Claims (9)

A time-stamped digital content protection method is applied between a provider and an independent timing device, the independent timing device is disposed on the providing end, and provides an independent of the operating system independent of the providing end. Timing time, and performing the following steps: the provider provides an instant machine time and a bit of content; using the digit timestamp unit of the provider to stamp the digital content with the current instant machine time and as an instant digital timestamp The digit timestamp unit records the real-time digit timestamp; the digit timestamp unit combines the digit content and the real-time digit timestamp into a trusted digit content; the independent timing device records with one of the independent verification units The real-time digit timestamp; the independent verification unit compares the real-time digit timestamp of the trusted digit content, and the real-time digit timestamp recorded by the independent timing device; when the independent verification unit determines the trusted digit The instant digit timestamp of the content, the instant digit timestamp of the independent verification unit Similarly, the trusted digital content is verified; when the independent verification unit determines that the real-time digital timestamp of the trusted digital content is different from the real-time digital timestamp of the independent verification unit, the trusted digital content is It is considered to have been tampered with. The digital content protection method of the time stamp according to claim 1, wherein the provider sends a warning message when the trusted digital content is determined to have been tampered with. The digital content protection method of the time stamp according to claim 1, wherein when the trusted digital content is determined to have been tampered with, the provider closes the trusted digital content. The digital content protection method of the time stamp according to claim 1, wherein when the providing end completes combining the digital content, the real digital time stamp, the stamping location, and the network location information of the provider into the trusted digit After the content, the following verification step may also be performed with an external timing unit: the external timing unit is communicably connected to the providing end and provides an external timing time; the external timing unit uses one of the external verification units provided therefrom The independent timing device obtains the real-time digital timestamp; the external verification unit compares the real-time digital timestamp of the trusted digital content, and the real-time digital timestamp recorded by the independent timing device; when the external verification unit determines The real-time digit timestamp of the trusted digital content is the same as the real-time digit timestamp of the external verification unit, the trusted digital content is verified; when the external verification unit determines the real-time digit of the trusted digital content The timestamp, which is different from the instant digit timestamp of the external verification unit, the trusted number The content is considered to have been tampered with. A time-stamped digital content protection system comprising: a provider having a digit timestamp unit that provides an instant machine time and uses the digit timestamp unit to stamp a digital content with the current instant machine time as an instant digital timestamp and The digital content, the real-time digital timestamp is combined into a trusted digital content; an independent timing device is disposed on the providing end and is independent of the operating system of the providing end to provide an independent timing time, and Having an independent verification unit, the independent verification unit records the real-time digital timestamp, and the independent verification unit compares the real-time digital timestamp of the trusted digital content and the real-time digital timestamp recorded by the independent timing device Wherein the independent verification unit determines that the real-time digit timestamp of the trusted digital content is the same as the instant digital timestamp of the independent verification unit, the trusted digital content is verified, otherwise the trusted digital content is determined Has been tampered with. The digital content protection system of the time stamp according to claim 6, wherein the digit time stamp unit further records that the real-time digit time stamp covers a location of the digital content and adds the stamping position to the stamping position. Trusted in digital content. The digital content protection system of the time stamp according to claim 6, wherein the digital time stamp unit further records network location information of the provider and adds the stamp location to the trusted digital content. The digital content protection system of the time stamp of claim 6, wherein the independent verification unit periodically verifies the time difference between the instant machine time and the instant digital time stamp, and whether the time difference from the independent timing time is the same. The digital content protection system of the time stamp according to claim 6, further comprising an external timing unit, wherein the external timing unit is communicably connected to the providing end, and provides an external timing time, and is provided with an external verification unit. The external verification unit obtains the real-time digital timestamp from the independent timing device, and the external verification unit compares the real-time digital timestamp of the trusted digital content with the real-time digital timestamp recorded by the independent timing device. If the two are the same, the trusted digital content is verified, otherwise the trusted digital content is deemed to have been tampered with.