EP1631873A1

EP1631873A1 - Method for generating and verifying an originality characteristic of a document

Info

Publication number: EP1631873A1
Application number: EP04736368A
Authority: EP
Inventors: Walter Sieberer-Kefer
Original assignee: Trodat GmbH
Current assignee: xyzmo Software GmbH
Priority date: 2003-06-10
Filing date: 2004-06-09
Publication date: 2006-03-08
Also published as: WO2004109479A8; WO2004109479A1

Abstract

The invention relates to a method for the electronically controlled generation of a graphic signature (3) for a document (1, 2), and to a method for the electronically controlled verification of the originality of a document (1, 2) in a data processing system (5). A data record characteristic of an electronic document (1) stored in the memory (6) is determined from said document, and a graphic signature (3) associated with the document (1) is created on the basis of the characteristic data record. The invention also relates to a data processing system, and to a computer program for carrying out the method.

Description

Process for the generation and verification of an originality feature of a document

The invention relates to a method for electronically controlled generation of a graphic signature, and a method for electronically controlled verification of the originality of a document, as described in the preambles of claims 1 and 2, and a data processing system and a computer program according to the preambles of Claims 33 and 34.

With the increasing use of electronic data processing systems, e.g. Personal computers, for the processing of documents, it has become necessary that, in particular, confidential documents are secured against unauthorized manipulation or such manipulation can be clearly identified. To solve this problem, methods are already known in the prior art in which documents and files are encrypted and the coded data cannot be read by unauthorized persons who do not have a corresponding key for decoding the data. Manipulation of the document, for example through unauthorized use of the key and subsequent change in the document content, can no longer be clearly determined.

In the case of existing processes of this type, in addition to the original electronic document according to the "envelope" process (envelope process), additional data outside the

Document to ensure originality. Such an envelope can be an XML (Extensible Markup Language) file or the like, which contains the original document and this additional data. The disadvantage here is that special software means - not the original means with which the document was created - have to be used to open and read the original document.

Furthermore, it is not yet known to provide a document with a security feature that is media-independent, i.e. on documents in electronic or physical form, is verifiable.

It is the object of the invention to create a method with which an improved verifiability of manipulations or changes to documents is made possible. Furthermore, it is part of the object of the invention to provide a method with which the security of an ori- Ginality feature for a document is improved. Furthermore, it is part of the object of the invention to simplify the use or handling of documents with additional data for proof of authenticity.

The object of the invention is achieved by those stated in the characterizing part of claim 1

Features solved independently. The advantage here is that the graphic signature assigned to the document creates a data memory and an identification feature with which the content or the data integrity of the document can be verified at any time. By creating a graphic from the characteristic data record, it is furthermore advantageous that due to the encryption of the data record in a graphic signature, a targeted one

Manipulation of the information contained in the data set can be made difficult or almost impossible. Compared to existing methods, there is also the significant advantage that no additional software means have to be used to open or read the document, since the additional data to ensure the originality of the document in the form of the graphic signature are inseparable from the document - in contrast to "Envelope" process - are integrated and thus the use or handling of the document provided with the security feature in the form of the graphic signature is simplified.

The object of the invention is also achieved independently by the features in the characterizing part of claim 2. The resultant advantage is that the originality or authenticity of electronic or physical documents can be determined, whereby changes in one of the documents can be recognized by comparing the data record for the current document content and the data record stored in the signature for the original document content can and this detection can be done very reliably and tamper-proof.

A procedure in accordance with the features of claim 3 is advantageous since the characteristic data record only has to contain a parameter in the form of the unique value, but all the contents of the document are taken into account in this value. It is also advantageous that the data record has a very small data volume, as a result of which the value of the characteristic data record can be rendered on the document in a graphic signature with low resolution or with a small area requirement. The measures specified in claim 4 are advantageous because specific sections of originality can be created for different sections of a document, each of which contains only one characteristic value for the section. Particularly important document contents, such as monetary amounts, dates, periods, etc., can thus be specifically verified for their authenticity and the contents from which the graphic signature is to be created can be defined in advance.

Due to the procedure specified in claim 5, it is advantageous that only the characters contained in the document, in particular a text, are taken into account in the characteristic data record, which means that changes in the document are verified when the document is verified

Text or the characters in the document can be recognized, changes in the file, which may result, for example, from graphical redesign or change of a document after being saved again, but are not taken into account, so that only verification of the document content is made possible, the verification the document content, in particular the ASCII characters, according to the in at least one of the

Claims 7 or 8 specified, can be done advantageously.

The features according to claim 6 are advantageous because by means of optical character recognition or OCR, a text that is to be stored in the characteristic data record can be captured from a pixel image or from a physical document using an image scanner.

A procedure according to the features described in claim 9 is advantageous, since the use of a non-reversible function to calculate the data record does not allow the original data to be derived from the unique value generated by it, in particular a cryptographic checksum restore or even draw conclusions.

A procedure as described in claim 10 is advantageous, since any change in the file structure of the document, not just the document content, in the

Verification of the document can be recognized.

Due to the features specified in at least one of claims 11 or 12, the The advantage can be achieved that the generation or determination of the data records can be automated, can be carried out reproducibly and error-free by means of a program logic after a defined sequence.

The procedure set out in claim 13 is advantageous because an author or document author is unambiguous about the author's data of an issuer or author of the document, for example in the form of a digital certificate stored in a digital signature, issued by an official certification body or an individual key of a key pair and can be identified securely.

A method according to claim 14 is advantageous, since by storing further document-related parameters such as location and time-related data, IP address, etc., the originality can be clearly or legally proven in the characteristic data record if necessary.

The procedure according to claim 15 is advantageous since the content of the original document can be restored via the original information stored in the characteristic data record, in particular an original text or original image data on the appearance of the document. There is thus the possibility of a content comparison between an up-to-date version of a document and the original version of the same document, changes in the document being thus specifically detectable and this being able to be brought to the attention of a user, for example by means of a specially marked display of the changed document contents on a screen.

With the measures set out in claim 16, an additional safeguarding of the originality of the data record to be stored in the graphic signature can be achieved via an encryption algorithm. Unauthorized manipulation of the graphic signature to change the data record stored in it can thus be detected.

In a procedure according to claim 17, it is advantageous that manipulation of the value stored in the graphic signature is made more difficult or prevented by deliberately changing it due to the encryption. Furthermore, there is a graphic representation of the coded on the document according to a variably programmable scheme or key possible, ie the coding can take place in such a way that the graphic signature has a definable appearance, for example a desired outline or spread.

A procedure according to the features described in claim 18 is advantageous because the

The document and the data record are clearly or inseparably linked to one another via an optical feature in the form of the graphic signature, as a result of which the document is also identified after a media break, i.e. after a physical document has been created from a printed copy, i.e. a media-independent verification of the document. Electronic and printed or physical documents can thus be undeniably verified using the graphic signature.

The measures specified in claim 19 describe particularly advantageous types of possible graphic signatures in connection with the method according to the invention.

The procedure described in claim 20 has the advantage that the value representative of the content of the original document or the data record characteristic of the original document content can be used as a reference value for the verification process, with manipulation of the graphic signature during decryption of the data record stored in the signature can be recognized.

A procedure according to at least one of claims 21 or 22 is advantageous since the result value is used to determine and store a parameter for evaluating the originality of the document, with which an evaluation means, in particular a program routine or an algorithm, for verifying the originality can make a reference.

The procedure according to the features cited in claim 23 is advantageous, since for different pages independent verification features can be created in the form of the graphic signatures, whereby verification of the originality of the individual documents is possible even if the document is divided into several individual documents. In contrast, it is also advantageous to provide only one side of the document with the graphic signature, which means that the document is only slightly affected visually. The measures specified in claim 24 are advantageous since documents can be provided with identifications in the form of fragments or initials that are decoupled from the document content. In addition to the verification feature, in particular the graphic signature, an additional, graphic feature, for example initials of a user editing the document, etc., can thus be applied to the document with a freely definable appearance, thereby additionally improving the verifiability of documents.

The method specified in at least one of claims 25 or 26 has the advantage that the visual appearance of the originality feature in the form of the graphic signature can be freely designed or graphics that have already been created, such as, for example, Letterheads, company logos, etc. can be used as the appearance to be calculated and the coding of the graphic signature is carried out accordingly. The shape, in particular the outline or spread, of the coding of the graphic signature can be determined in accordance with this desired appearance. Furthermore, it is possible to link an illustration or a graphic element shown or to be shown on the document with the graphic coding of the graphic signature. The visual appearance of documents is thus not or only slightly impaired, and areas to be printed can also be used as data storage by linking to the graphic signature.

The procedure specified in claim 27 has the advantage that the validity of electronic and physical documents can be checked by using physical manipulation-proof physical documents provided with the graphic signature to determine the reference value stored in the signature , It can thus be determined at any time whether the content of the printed, physical document matches the document stored in electronic form in the memory, which can be used, for example, to check whether changes or additions have been included in an electronic document, so that a user always has the topicality of his or her print - can check the version of the document.

Through the measures specified in claims 28 and 29, the procedures according to the invention can advantageously be carried out using known electronic systems for data Processing.

The measures set out in claims 30 and 31 are advantageous because an illegal manipulation of the software by another network participant can be excluded by executing the program code exclusively on the server side for carrying out the method according to the invention.

By using the procedure according to claim 32, it is possible due to the use of such network structures that either local user groups can access the data processing system provided as a server or that users, nationwide, can access the server, in particular the web server, via the Internet can. The web server preferably offers the application with which the method according to the invention can be carried out via the World Wide Web service, and user-friendly and simple navigation is possible via a web browser. There is also the possibility of a secure, encrypted connection between the web browser and the web server using a symmetrical, asymmetrical or hybrid encryption method known from the prior art, for example secure socket layer (SSL) or virtual private network (VPN) or the like, is set up to prevent unauthorized interception or modification of the document on the network route between the client and server.

Advantageous and independent solutions are given in the characterizing parts of claims 33 and 34, wherein the method according to one of claims 1 to 32 with the advantages described above can be carried out via the data processing system and / or the computer program.

The invention is explained in more detail below with reference to the exemplary embodiments shown schematically and in simplified form in the drawings.

Show it:

1 shows a flow diagram comprising the essential method steps for the electronically controlled generation of a graphic signature for documents; Fig. 2 shows an electronic data processing system for generating a graphic

Signature for documents;

3 shows a flowchart with the essential method steps for electronically controlled verification of the originality of documents;

4 shows a flowchart which shows a possible sequence of method steps for electronically controlled verification of the originality of documents;

Fig. 5 shows an electronic data processing system for electronically controlled verification of the originality of documents.

In the introduction, it should be noted that in the differently described embodiments, the same parts are provided with the same reference numerals or the same component names, and the disclosures contained in the entire description can be applied analogously to the same parts with the same reference numerals or the same component names. The location information selected in the description, e.g. above, below, laterally, etc. refer to the figure described and illustrated immediately and are to be transferred analogously to the new position in the event of a change in position. Furthermore, individual features or combinations of features from the different exemplary embodiments shown and described can also represent independent, inventive or inventive solutions.

1 and 2 show the sequence of the method according to the invention and the data processing system for carrying out the method according to the invention.

In principle, the invention relates to the electronic processing of documents 1 by means of an electronic data processing system, by means of which documents 1, 2 are provided with an originality feature, in particular a graphic signature 3, or

Documents 1, 2 are verified on the basis of the originality features assigned to them, in particular the graphic signatures 3. In this case, documents 1, 2, for example documents, graphics, tables, forms, etc., of an electronic as well as physical nature can be used, the following being electronic documents 1, which are displayed, for example, on a display device 4, in particular a screen Documents are referred to which are assigned to the data processing system 5 as a file, in particular in an electronic one

Memory 6 are stored. In the following description, physical documents 2 refer to those documents which are stored on a material medium, e.g. Paper that are printed.

The invention is thus not limited to the processing of electronic documents 1, with the terms of the electronic document 1 and the physical document 2 basically the same documents, which e.g. have the same text, graphics, formatting etc., can be meant, but they are shown on different means or media. The aim of the present invention is now to enable an electronic document 1 to be verified on the basis of its originality feature, the originality feature of the electronic document 1 or of the document 2 in physical form being able to be used for this purpose, as a result of which the originality or authenticity of the electronic document 1 or manipulation of the originality feature of document 1; 2 are noticeable. Verifying the originality of document 1; 2 is therefore according to the invention the determination of authenticity and / or integrity and / or

Judgment on the evidential value of document 1; 2 understood.

The invention is not restricted to the processing of a special type of documents 1 or data types, i.e. all can be in electronic form, e.g. documents 1 available as text, graphic, etc. or mixed documents can be used. It is furthermore possible that the documents 1 are present in an encrypted form generated according to a cryptographic method known from the prior art and that the graphic signature 3 is subsequently created from the encrypted document 1 and / or after the graphic signature 3 has been created, the latter the document 1 is encrypted.

The present invention thus creates a digital, customizable marking which, in a manner similar to a physical marking means, a document 1; 2 can be permanently marked with a graphic representation, whereby the digital tale marking in the form of the graphic signature 3 at the same time a verifiable originality or security feature to determine the originality of the content of the document 1, which is available in electronic or physical form; 2 represents. In essence, two main functions, analogously "marking" and "verifying" a document 1; 2, are carried out.

2 shows a possible embodiment variant of the data processing system 5, which is connected via a data bus 7, for example, to the display device 4, an output device 8, in particular a printer 9, for data transmission. The data processing system 5 has hardware which can preferably be designed as a computer system, for example as a personal computer, etc. A possible construction of the data processing system 5, comprising a detection device 10, in particular a scanner 11, a processor 12 and a data carrier 13 as hardware, is shown in more detail in FIG. 5.

However, the data processing system 5 comprises at least the processor 12, the memory 6 and the data bus 7 and a control logic, the control logic preferably being stored in the form of software program logic in the memory 6, so that data loaded into the memory 6 can be processed by means of digital control commands. The generation of the graphical signature 3 for the document 1; 2 or verification of the originality of document 1; 2 is thus controlled via a computer program which, together with hardware components for executing the program code, forms the data processing system 5.

According to the invention, the tamper-evident feature, that is to say the graphical signature 3, for a document 1, 2, in particular via the means of a signature module 20, is generated by a for the electronic document 1 which has been loaded into the memory 6 of the data processing system 5 the electronic document 1 characteristic data record is determined and the graphic signature 3 is created from this data record.

The data record characteristic of the electronic document 1 according to method step 30 is determined by calculating a value that is unique for the content of the electronic document 1. It should be noted that the term "content" only the written and / or graphic content of document 1, 2, ie its characters, in particular ASCII or ANSI characters and / or pixel or vector representations, etc., that is to say the “printed” area of document 1, 2 is understood.

The data record characteristic of the document content is created, for example, in such a way that a value, in particular decimal or hexadecimal values of the ASCII characters or a binary value, is recorded for each of the characters or graphics contained in document 1, this being done by means of a , the readout module 21 assigned to the signature module 20. This can be done in such a way that all or part of the characters are extracted from the document 1, so that the extracted character set by the

Readout module 21 is used to calculate the characteristic data set. The value stored in the characteristic data record, in particular a hash code, is calculated from the recorded values using a mathematical algorithm of a program routine loaded into the memory 6 and the processor 12 in a calculation method.

The determination of the document content, in particular an original or input text of document 1; 2, can also take place via optical character recognition, in particular an OCR (Optical Character Recognition) software executed in the data processing system 5. The use of such an OCR recognition is particularly advantageous if the document 1 is only in a graphic format, i.e. as a pixel representation, since text stored as image information can be extracted into a text format containing characters via the OCR recognition. Thus, physical original documents 2 can also be provided with the graphic signature 3 by digitizing the physical document 2 via an optical scanner 11 and extracting the document content by means of OCR recognition, from which the characteristic data record is subsequently created.

The calculation of the characteristic data record by means of the mathematical algorithm loaded into the memory 6 or the program routine, which issues corresponding control commands to the processor 12 via the data bus 7, takes place, for example, in such a way that logical functions or links, in particular logical operators such as AND, for example, OR, NOT, NOT-AND, NOT-OR, EXCLUSIVE-OR, EXCLUSIVE-NOT-OR, etc., the values of the individual characters contained in the document lo- logically linked, so that the result is the cross-sum of all values, for example. The unambiguous value calculated therefrom, ie the characteristic data set or hash code, thus represents a unique identification feature for the content of the electronic document 1 with a very small data volume, for example an 8 or 16 bit printout. The characteristic data set is then stored in a suitable address area of the dynamic memory 6 and can be called up if necessary by referencing the address area used.

For the calculation of a hash value from document 1; 2 it should be noted that the hash function used for this calculates an arbitrarily long data record with a fixed length, in which it is practically impossible to infer the original input text from this hash value.

It should be noted that font tables, such as the ASCII or ANSI table, etc., which are known to the person skilled in the field of electronic data processing, and the determination of the values for the individual characters or the amount of the values of the individual characters is therefore not given here , Program code is also omitted, since the person skilled in the art would be able, on the basis of the technical processes described, to convert it into corresponding program routines using a programming language known to him.

It should also be noted that the characteristic data record is not determined from the document content but from the file or file structure of the electronic document 1 or from parts thereof or from one or more document properties. The file stored on a data carrier of the data processing system 5 is subjected to a test procedure by a test device, which is loaded in the form of a program routine or an algorithm in the memory 6, for example, so that a checksum or the like for the current state of the File representative value is determined and this checksum is stored in the form of the characteristic data set in memory 6.

In general, it should be noted with regard to the characteristic data record that this is an identification feature for the content or the file structure of the electronic document 1 at the time. represents the point of determination of the same, so that the characteristic data set can be used at any time later as a reference value for the originality or integrity of the original version of document 1.

Furthermore, there is the possibility that in the characteristic data record that results from the electronic or physical document 1; 2 was determined, in addition to or instead of an inhalation-characteristic hash value, different types of information, possibly independent of the document content, such as author data of an issuer or author of document 1; 2 and / or document-related parameters of document 1; 2, be deposited. Such copyright data can be used, for example, as a digital signature that has at least one digital certificate of the

Issuer or key parts of a symmetrical or asymmetrical key pair includes, be stored in the data set. A public key and thus the identity of an owner of this key can be authenticated via digital certificates, for example in the X.509 format, which are issued by an official certification center, the so-called trust center, for clear and falsification-proof personal identification.

Furthermore, for authorization control, the keys required for encryption or decryption can be stored on storage media such as a smart card, a USB token, etc. and can be read out via corresponding readers of the data processing system 5. Document-related parameters can be, for example, a time or date, a location, an IP address, etc., so that any circumstances during document creation can be stored in the characteristic data record. By taking this copyright data of an exhibitor or author of document 1; 2 and / or document-related parameters of document 1; 2 is clear evidence of the originality of document 1; 2 or the authenticity of the author.

For this purpose, a further possible procedure for ensuring integrity is to be noted, in which the characteristic data record is encrypted using an encryption method prior to the conversion or encoding into the graphic signature 3, whereby symmetrical, asymmetrical or hybrid encryption methods known from the prior art can be used for this purpose. A further conversion or coding of the characteristic data record into the graphic signature 3 can then take place.

For example, a key of a cryptographic key pair in the characteristic the data record or the graphical signature 3 calculated from this, so that the actual content of the characteristic data record can only be read from the graphical signature 3 with the further, corresponding key. This can be done according to one of the known algorithms of cryptography, the characteristic data record being encrypted with a first key from the issuer or author, and the characteristic data record being decrypted or decrypted only with a further key matching this. The characteristic data record is stored in encrypted form in the graphical signature that serves as the data store, which must first be read out in order to receive the data in digital form. Such encryption of the characteristic data record, which is stored in the graphical signature, is advantageous because of the integrity of the data record, since manipulation of the encrypted, characteristic data record would be recognized by the encryption algorithm.

The graphic signature 3 is generated by the means of the signature module

20 associated render module 23, which is preferably loaded as program logic in the memory 6 of the data processing system 5. It should be noted at this point that the memory 6 represents the dynamic working memory of the data processing system 5, that is to say it is formed as a RAM or other dynamic memory element for the temporary processing of data. At least the data of the electronic document 1 and the program code of the signature module 20 or the modules 21 to 23 assigned to it can be stored in the memory 6, the processor 12 preferably having a command memory for the instructions issued by the signature module 20.

In the possible embodiment variant shown, the signature module 20 has the means of a read-out module 21, an encoding / decoding module 22 and a render module 23. Regarding the modules 21 to 23, it should be noted that these represent a division of the signing module 20 into individual functional sequences, but do not have to be formed as independent, mutually independent means or program logics. These functions of the modules 21 to 23 are preferably fulfilled in that program routines of the signature module 20 which can be called in the memory 6 correspondingly control the data processing system 5.

In method step 30, the read-out module 21, as already described above, ben, a characteristic data record is determined or calculated from the electronic document 1. The encoding / decoding module 22 is used to encode or encode the characteristic data record, in particular hash codes, into the graphic signature 3, which is done in method step 31. In method step 32, the rendering of the graphical signature 3, calculated via the encoding / decoding module 22, takes place on the document 1.

When the value of the data record stored in the memory 6 is encoded in method step 31, the determined value or data record, which is, for example, a key is defined in the encoding / decoding module 22. is in binary form, depending on its amount or the individual digits of the binary expression, graphical symbols or representations assigned, as a result of which the graphical signature 3 is formed. The graphic signature 3 is thus formed as a data memory, which preferably contains in encrypted form the characteristic data record specific for a document 1.

The graphic signature 3 is calculated as a function of the value of the characteristic data set. The data of the calculated graphic signature 3 are stored in the memory 6 e.g. assigned to a different memory area, in particular address area, than the characteristic data record, these data of the graphic signature 3 now not containing an amount or value, but rather information, in particular graphic data, about the graphic appearance of the graphic signature 3.

Of course, it is also possible to directly, i.e. e.g. as an unencrypted, multi-digit number representation on the document 1, so that the encoding / decoding module 22 only graphically implements the characteristic data set.

Encryption of the characteristic data record by the encoding / decoding module 22 is advantageous, however, since additional protection against manipulation of the graphic signature 3 can be achieved and the visual appearance of the graphic signature 3 is variable due to variable symbolism or surface shape Document 1, 2 can be checked. Thus, the encoding / decoding module 22 converts or encodes the characteristic data record into a graphic signature 3 formed, for example, as a 1-D or 2-D barcode, which is subsequently transmitted at any point by the render module 23 Document 1 is shown. The render module 23 preferably carries out a pixel-precise, graphic conversion of the graphic signature 3, calculated via the encoding / decoding module 22 and stored in the memory 6, so that a link is made between the document 1 and the graphic signature 3. Document 1 is thus provided with an optically and digitally identifiable feature which has a high level of security against manipulation of the data stored in it, since decoding and deliberate modification of the graphic signature 3 represented as graphics, in particular pixel graphics, is very difficult or difficult is not specifically possible. This provides an essentially unchangeable, permanent and inseparable link between the document 1 and the data record characteristic of this.

The key for encoding the data record on which the encoding / decoding module 22 is based is used to create a machine-readable, graphic coding, for example the 1-D or 2-D barcode mentioned, the graphic signature 3 also being used, for example, as a numerical or alphanumeric representation, digital watermark, glyph code, etc. can be calculated by the encoding / decoding module 22. Because of the key used in the encoding / decoding module 22 to encode the data record, it is subsequently possible by optical reading in or digital evaluation of the appearance of the graphic signature 3 to read out the unique value or characteristic data record stored therein, such as this will be described in more detail later (see FIGS. 3 and 4).

The method according to method steps 30 to 32 therefore makes it possible to create a security feature or identification feature in the form of the graphic signature 3 on an electronic document 1, in which clear information about the content of the document 1 is stored in its original state. Because the graphic signature 3 is linked to the document 1 by representation on it, that is to say in

If an electronic stamp is applied to document 1, the original state of document 1 can be assessed at any time by identifying signature 3. This also has the advantage that the graphically represented signature 3 this identification feature is also present and verifiable after a media break, ie after creating a physical document 2 by generating a printout on a physical medium, such as paper.

A further possibility for creating an additional identification or verification feature for document 1, 2 should be noted, in which several pages of a multi-page document 1, 2 are graphically identified in the manner of initialing. A fragment of the graphic signature 3 or a specially created or calculated representation can be used as the graphic identification. The display can serve as an identification feature that provides information about the data immediately and without encryption

Document-relevant information gives, for example, about the last processing date, the last processor, whether and by whom individual pages of the document were viewed, etc.

3 to 5, the method for electronically controlled verification of the originality of a document 1, 2 and the data processing system for performing this method is shown.

As can be seen from FIG. 3 and FIG. 4, the data record stored in the signature 3 of the electronic or physical document 1, 2 and characteristic of the original document content is read in and / or decoded in method step 33. The reading can take place via the optical detection means 10, in particular the scanner 11, wherein devices 11 for direct decoding of the value or data set encoded in the signature 3 can be used as scanners 11, such as barcode scanners, or devices 11 can be used as scanners Reading the graphic signature 3 can be used as pixel graphics, for example digital image data scanners, digital cameras or camcorders, with the encoding / decoding module 22 converting the graphic data into the characteristic data set.

In method step 34, the characteristic data record is determined from the electronic document 1 by means of the read-out module 21, which is assigned to a verification module 24 in addition to the encoding / decoding module 22 (see FIG. 5). The determination of the characteristic data set from the electronic document 1 by means of the Readout module 21 can take place, as already described above in the course of FIGS. 1 and 2.

The verification module 24 also has a comparison module 25 which essentially serves to compare the data record determined from the electronic document 1 and the data record determined from the signature of the document 1, 2. Regarding the verification module 24 or comparison module 25, it should be noted that these are preferably in turn formed as software means that can be stored in the memory 6 of the data processing system 5 in order to determine the originality of documents 1, 2 by controlling the hardware, as already done has been described for the signature module 20. The signature module 20 and verification module 24 can of course be formed as the only program logic and can be used in a common procedure.

By determining a result value in method step 35 by comparing the data records determined from signature 3 and document 1 and evaluating the result value in method step 36, it can be determined whether the content of electronic document 1 has been changed and / or whether file parameters have been changed or whether the graphical signature 3 has been manipulated, since this can be determined in a simple manner by means of a logical comparison operation due to the equality or inequality of the data records to be compared.

The two values stored in the characteristic data records can be compared, for example, by calling them from the memory 6 to carry out the comparison operation, then calculating the result value using one or more logical links, this result value providing the unambiguous information, in particular true / false - Information, contains whether the compared data sets are identical. Depending on this result value, further, programmed or programmable control commands can then be output to the processor 12, so that an electronic machine control is created which operates depending on the originality of a document 1, 2.

If the compared values or data records match, an authenticity or originality of the document 1, 2 can thus be established and, in the opposite case, that is, in the case of different comparison values, a change or manipulation carried out on the electronic document 1 or the signature 3 is determined.

By issuing further control commands in a further method step 37, it is e.g. it is possible to visualize a display on the display device 4, in particular a screen, which, depending on the result of the comparison operation mentioned, contains messages in the sense of "document is in its original state" or "document has been changed". It is also possible, as shown in Fig. 4, that decisions, e.g. whether the process is to be repeated or terminated are processed as method steps 38, 39. Furthermore, it is possible, depending on the calculated result value, in a further method step 40 to start or carry out automated and programmable software-programmable processes for controlling one or more components connected to the data bus 7 of the data processing device 5.

Another possibility is that not only a hash value and / or data relating to the authorship of the document, from which the original text can no longer be deduced, is stored in the graphic signature 3, but further information is stored in the characteristic electronic data record be deposited, which a conclusion on the contents of the original document 1; Allow 2. For example, parts or all of the graphically represented document contents can be characteristic

Record are assigned and then converted into the graphic signature according to one of the methods described above and displayed on document 1. The real text does not have to be stored in the characteristic data record, but the document content can be changed with any encryption or compression algorithm to reduce the amount of data.

For this purpose, useful additional information of any type can be stored in the characteristic data set, for example identifiers or reference values, horizontal or vertical coordinates or start or end pointers for certain document areas of the document contents integrated in the data set, such as a display area of document 1; 2, fields of a form, tables, columns, text fields, figures, etc. must be stored. Individual areas defined in the characteristic data record, which must absolutely preserve their integrity in the document, can thus be checked for their data integrity or integrity is checked. Document 1 is an example for clarification; 2 called, in which, in addition to any text in a certain area or window, an essential piece of information, for example an amount of money or the like, is shown. There is now the possibility that only the information in this defined area or window is stored in the characteristic data record, including a clear position specification or identifier of the corresponding area. The relevant area in document 1; 2 are clearly identified and the defined area is verified by comparing the determined data records.

Another possibility is that the one stored in the characteristic data record

Information is not calculated exclusively from a text, but from the pixels or pixels depicted on document 1 and is depicted as a graphical signature on document 1 in the manner described above, or to verify the integrity of document 1, the comparison of two from the pixels of the document 1 determined hash values is carried out.

When storing document contents in the data record, there is the possibility that by drawing conclusions about the original document content by reading out the graphical signature or the characteristic data record, a direct comparison of the original content with the current document content is possible and a statement is subsequently made can be what areas or data of document 1; 2 have been changed concretely. The changed areas can be determined, for example, by means of a pixel comparison, with deviations in any form being brought to the attention of a user. For example, in a virtual text or image processing program, the changed contents can be displayed to the user in a specially marked manner on an output device. It is possible that there is a direct interaction with a user via virtual confirmation or input fields and that the change (s) in document 1; 2 must be actively confirmed by the user via the input interface. For example, virtual queries in the sense of "Allow change yes / no" or the like are possible, so that the user can determine whether it is a permitted change or an irrelevant change in the document content, or an inadmissible and unacceptable change in the The interaction of a user with virtual data processing program noted that this is preferably done via a graphical user interface or software for interactive document processing.

FIG. 5 shows a possible embodiment of a data processing system 5 that is used to carry out the control method according to the invention

5 can in principle correspond to the data processing system 5 shown symbolically in FIG. 2.

The hardware for operating the above-mentioned software means or program logic for forming the data processing system 5 corresponds, for example, to a commonly used computer system which has the processor 12, in particular a microprocessor, the data bus 7 and the memory 6. In addition, the data processing system 5 can be connected via the data bus 7 to the data carrier 13, the optical detection device 10, in particular the scanner 11, the output device 8, in particular the printer 9, the display device 4 and other components for data transmission.

The software means for carrying out the method according to the invention are stored, for example, in the data carrier 13 and individual or all modules 20 to 25 can be loaded into the memory 6 as required, so that the specific control commands can be processed by the processor 12.

For example, the data of the electronic document 1 located in the memory 6 are changed by control commands from the signature module 20, so that the document 1 is linked to the graphic signature 3, or the originality of the documents 1 is checked by the control commands from the comparison module 25, 2 verified. Furthermore, the graphic signature 3 of a physical document 2 can be recorded in electronic form via the scanner 11 or the printer 9 or an electronic document 1 with the graphic signature 3 in the form of a physical document 2 can be output, the activation of the scanner 11 or printer 9 is known from the prior art.

Regarding the individual components of the data processing system 5, it should be noted that the

Data carrier 13, for example, as a magnetic storage medium, such as a floppy disk, hard disk, magnetic tape, an optical medium, such as a CD-Rom or a DVD-Rom, punch card systems, electronic memory chips, such as RAM, ROM, EP-ROM or Semiconductor memory, can be used. The memory 6 is designed as a preferably dynamic memory, for example as a random access memory (RAM) etc. The processor 12 is preferably formed as a microprocessor with a command memory and the data bus 7 is preferably formed as a data bus system which is customary in personal computers. Due to the fact that such computer systems are well known in the prior art, the functioning of the data transmission or control of the individual components is not discussed in detail, since these processes are known to the person skilled in the art anyway.

Of course, the data processing system 5 can also be formed by a so-called stand-alone end device of print management, for example a printer, scanner, fax machine or the like, which is equipped with an expanded range of functions, so that a program for controlling process sequences according to the invention can be executed on this device are. A program code for controlling the method according to the invention can be adapted to the corresponding hardware or can be created with specific development environments, the multifunctional system platform CANON® MEAP (multifunctional embedded application platform) being mentioned as an example as a possible application platform.

The functions (copying, printing, faxing, etc.) that can be carried out by such a stand-alone terminal of the print management for document processing can be carried out, for example, by means of the graphic signature of document 1; 2 determined, characteristic data set can be controlled, i.e. e.g. allowed or not allowed. Furthermore, the graphic signature or the characteristic data record when processing document 1; 2 changed if necessary, e.g. be supplemented with additional information regarding the type of processing carried out or a new graphic signature on document 1; 2 are shown.

It should also be noted that the data processing system 5 is integrated in a preferred embodiment in a network structure known from the prior art, for example Internet, Ethernet, etc., so that a verification of documents 1 or generation of graphic signatures 3 via a network, for example via special websites on the Internet. The data processing system 5 has an interface 14 for data transmission, for example a network adapter, a modem, etc., so that one Communication with other computer systems in the network is possible. The data processing system 5 assumes, for example, the function of a server which offers the clients in the network the service of verifying documents 1 or the creation of graphic signatures 3 for documents 1. The signature module 20 or the verification module 24 can thus only be called up centrally via the server, so that manipulation of these modules 20, 24 by network participants can be prevented.

The data processing system 5, which e.g. operated by an Internet Service Provider (ISP), can be done using a common data protocol over a physical network structure, e.g. The Internet, in particular when connected to a special IP address, receives documents 1 from other network participants or clients, which are then processed by the data processing system 5 in accordance with the method according to the invention and are transmitted back to the client with the corresponding information determined. The data processing system 5 is thus largely secured against unauthorized manipulation of network participants.

The data network, in which the data processing system 5 is integrated, can be formed by any network structure with several communication entities involved, in particular distributed network systems or computer systems, e.g. supra-regional systems such as the Internet or local or regional systems such as the Local Area Network (LAN) or intranet. The data transmission between a first and a further network participant can take place by means of a transmission protocol known per se, wherein only one of the network participants is formed by the data processing system 5 and the program logic of the signature module 20 and / or the verification module 24 is exclusively on the Hardware of the data processing system 5 are executed. In the case of a network with a client-server structure, the data processing system 5 is therefore preferably provided as a higher-level server, in particular a web server.

In order to generate the graphic signature 3 or to verify the originality of the document 1, 2, one of the network participants, in particular a client, transmits the electronic document 1 to the further network participant in the form of the data processing system 5, in particular a server, whereupon by the data processing system 5 from the electronic document 1 which determines the characteristic data record for this telt, the graphic signature 3 is created and this is assigned to the document 1 and then the document 1 modified accordingly with the graphic signature 3 is sent back to the first network participant via the network structure. The connection between the data processing system 5 and another network participant communicating with it can be encrypted using a cryptographic method, known encryption algorithms, for example SSL or VPN, being able to be used for this purpose.

A possible embodiment variant is that the data processing system 5 is used as an application for carrying out the method according to the invention within the world

Wide Web service is provided on the Internet. In this case, the data processing system 5 is linked to the network as a web server and can communicate with any web clients via an interface. Any participant of the computer network can thus exchange data with other network participants via the network structure by means of a transmission protocol, using a corresponding interaction means, in particular a web browser or the like, the transmission protocol in particular using the TCP / IP protocol.

In the case of a web-based application of the data processing system 5, these program logics can only be executed as an application on the server, the corresponding web technologies being used for executing the program logic exclusively on the server side, i.e. no program code is transmitted to the first network subscriber or client, which are known to the person skilled in the art from the prior art.

In the possible application of the method according to the invention in the World Wide Web via

Internet, different parameter settings can be made via the web browser with regard to the creation of the graphic signature, the type of data stored in this in the form of the characteristic data record, the exact graphic appearance of the graphic signature, the areas to be printed on the document with the graphic signature, etc. , be adjustable.

The object of the invention is also each independently achieved by a data processing system 5 and a computer program, each for controlling the generation of a graphic signature 3 from a document 1 and for mapping this graphic signature 3 on document 1 and / or for controlling the verification of the integrity of a document 1; 2 are formed.

The exemplary embodiments show possible embodiment variants of the invention

Method, it should be noted at this point that the invention is not limited to the specifically shown embodiment variants of the same, but rather also various combinations of the individual embodiment variants with one another are possible and this variation possibility on the basis of the teaching of technical action by means of the present invention in the ability to do so technical field of professional. The scope of protection also includes all conceivable design variants which are possible by combining individual details of the embodiment variant shown and described.

For the sake of order, it should finally be pointed out that for a better understanding of the

Construction of the data processing system 5 and the computer program of this or its components were sometimes shown to scale and / or enlarged and / or reduced and / or shown schematically.

The object on which the independent inventive solutions are based can be found in the description.

Above all, the individual in FIGS. 1, 2; 3, 4, 5 shown form the subject of independent, inventive solutions. The relevant tasks and solutions according to the invention can be found in the detailed descriptions of these figures. Regarding constellation

electronic document physical document graphic signature display device data processing system memory data bus output device printer acquisition device scanner processor data carrier interface signing module readout module encoding / decoding module render module verification module comparison module Step Step Step Step Step Step Step Step Step Step Step

Claims

Patent claims

1. A method for the electronically controlled generation of a graphic signature (3) for a document (1, 2) in a data processing system (5), which has at least one processor (12), a memory (6), a data bus (7) and a Storage (6) includes a signature module (20), characterized in that an electronic document (1) stored in the memory (6) is used to determine at least one data record that is characteristic of this and at least one graphic signature (3 ) is created, which is assigned to the document (1).

2. Method for electronically controlled verification of the originality of a document (1, 2) in a data processing system (5), which has at least one processor (12), one memory (6), one data bus (7) and one that can be stored in the memory (6) Verification module (24), characterized in that from an electronic document (1) stored in the memory (6) or a physical document (2) at least one data set characteristic of this is determined and this in a comparison operation with another data set is compared, the further data record being determined from a graphic signature (3) of the electronic document (1) or of the physical document (2).

3. The method according to any one of the preceding claims, characterized in that in the characteristic data set at least one for the content or parts of the content of the document (1, 2), in particular characters, graphics, etc., or the file structure of the document (1) more clearly or irreversible value is stored.

4. The method according to any one of the preceding claims, characterized in that the characteristic data set from the content of the entire document (1), in each case from the content of individual pages of the document (1), from parts of the content of the document (1), for example individual Passages or elements, such as Form, graphic, table fields, etc., determined from definable content or characters, etc.

5. The method according to any one of the preceding claims, characterized in that the characteristic data set from the values of at least some of the characters contained in the electronic document (1), in particular ASCII or ANSI characters, and / or pixel or vector graphics is determined.

6. The method according to any one of the preceding claims, characterized in that a current content, in particular text, or at least parts of the current content of the electronic or physical document (1; 2) via optical character recognition or

OCR (Optical Character Recognition) is recorded and the characteristic data set is created from this content.

7. The method according to any one of the preceding claims, characterized in that the characters are extracted from the electronic document (1) or recorded in digital form from the physical document (2) and the characteristic data record from the extracted or recorded character set, in particular a hash code is calculated.

8. The method according to any one of the preceding claims, characterized in that 'the calculation of the data set by means of a logical operation including the values of the characters, e.g. by forming a checksum.

9. The method according to any one of the preceding claims, characterized in that a non-reversible function, in particular a one-way function or hash function, is used as the algorithm for calculating the data set.

10. The method according to any one of the preceding claims, characterized in that the characteristic data record at least from parts of the file structure, for example an XML file, of an electronic document (1), in particular by determining a

Check value or a checksum.

11. The method according to any one of the preceding claims, characterized in that the generation or verification of the characteristic data set in software by a PiOgrammroutine, in particular a signature module (20) or verification

Module (24).

12. The method according to any one of the preceding claims, characterized in that that the graphic signature (3) is calculated from the data record or the data record is determined from the graphic signature (3) via an encoding / decoding module (22) that can be called into the memory (6).

13. The method according to any one of the preceding claims, characterized in that in the characteristic electronic data record, author data of an issuer or author of the document (1; 2), for example cryptographic data such as a digital signature, key parts of a symmetrical or asymmetrical key pair, etc., be deposited.

14. The method according to any one of the preceding claims, characterized in that further document-related parameters, for example location and time-related data, IP address, etc., are stored in the characteristic electronic data record.

15. The method according to any one of the preceding claims, characterized in that graphically represented contents of the document (1; 2), for example one or more characters, graphics, tables or the like, are stored in the characteristic electronic data record or in the characteristic electronic data record Information that allows conclusions to be drawn about this content of the document is stored.

16. The method according to any one of the preceding claims, characterized in that the characteristic electronic data record is encrypted using an encryption algorithm, in particular a symmetrical, asymmetrical or hybrid cryptographic algorithm.

17. The method according to any one of the preceding claims, characterized in that the characteristic electronic data record is encoded in the graphic signature (3).

18. The method according to any one of the preceding claims, characterized in that the graphic signature (3) on the document (1) is mapped as a graphic representation or is rendered on this.

19. The method according to any one of the preceding claims, characterized in that a machine-readable coding such as a 1D or 2D barcode, a numerical or alphanumeric representation, a digital watermark, a glyph code, etc. is used as the graphic signature (3).

20. The method according to any one of the preceding claims, characterized in that the further data record is determined by identifying the graphic signature (3), in particular by deciphering the data record coded therein and characteristic of the original document (1, 2).

21. The method according to one or more of the preceding claims, characterized in that a result value, which for example contains a true / false statement, is calculated from the comparison operation of the two data records and is stored in the memory (6).

22. The method according to one or more of the preceding claims, characterized in that an authenticity or originality or, on the contrary, the invalidity of the document (1, 2) is determined by evaluating the result value.

23. The method according to one or more of the preceding claims, characterized in that, in the case of multi-page electronic documents (1), a characteristic data record is calculated for each or at least some pages and, if appropriate, this as a graphic signature (3) on the associated page. is mapped, or a characteristic data record is calculated for all pages of the document (1) and this is mapped on at least one page of the document (1).

24. The method according to one or more of the preceding claims, characterized in that signatures or initials are mapped controlled by the render module (18) on individual pages of multi-page documents (1), which, for example, as fragments of the graphic signature (3) or as visual displays that are freely programmable and independent of the document content.

25. The method according to one or more of the preceding claims, characterized in that an individual, optical appearance for the graphic signature (3) is determined or a predetermined appearance is loaded into the memory (6) and the coding of the graphic signature (3) takes place in accordance with this appearance.

26. The method according to one or more of the preceding claims, characterized in that the graphic signature (3) with a representation to be depicted on the document (1), e.g. a graphic, a logo, a text, etc., is graphically linked or embedded in it.

27. The method according to one or more of the preceding claims, characterized in that at least the graphic signature (3) of a physical document (2) via an optical detection device (10), in particular a scanner (11), a digital camera, etc., in is read in electronic form and is decrypted if necessary.

28. The method according to one or more of the preceding claims, characterized in that the electronic document (1) or the program routines, in particular the signature module (20) or verification module (24), in the dynamic memory (6) can be called up and preferably in a fixed data carrier (13) belonging to the data processing system (5), for example a magnetic, optical or digital storage medium.

29. The method according to one or more of the preceding claims, characterized in that, as hardware for the data processing system (5), a computer system such as a personal computer, which may be integrated into a network structure, is used.

30. The method according to any one of the preceding claims, characterized in that the file containing the electronic document (1) via a computer network structure by means of a transmission protocol, in particular the TCP / IP protocol, from a first network participant, in particular a client, is transmitted to a further network participant, in particular a server, which is formed by the data processing system (5), the program logic of the signature module (20) and / or the verification module (24) being connected exclusively to the hardware of the further network participant to be executed.

31. The method according to claim 30, characterized in that the further network participant determines from the electronic document (1) the data record which is characteristic of this, creates the graphic signature (3) and assigns it to the document (1) and subsequently does so accordingly the graphic signature (3) modified document (1) is sent back to the first network participant via the network structure.

32. The method according to claim 30 or 31, characterized in that a distributed computer system, in particular a national system such as the Internet or a local or regional system such as the Local Area Network (LAN) or intranet, is used as the network structure, wherein the further network participant is formed by a server that is superior to the first network participant, in particular a web server.

33. Data processing system (5), which is designed to control the generation of a graphic signature (3) from a document (1) and to image this graphic signature (3) on the document (1) and / or to control the verification of originality of a document (1; 2) and which is designed to carry out the method according to one of claims 1 to 32.

34. Computer program in a data processing system (5), which is provided for controlling the generation of a graphic signature (3) from a document (1) and for imaging this graphic signature (3) on the document (1) and / or for controlling the Verification of the originality of a document (1; 2) is provided and is provided for carrying out the method according to one of claims 1 to 32.