JP2001154577A - Device and method for electronically storing original document property and computer-readable recording medium with recorded program for the method to be executed by computer - Google Patents

Abstract

PROBLEM TO BE SOLVED: To efficiently prevent a large capacity storage medium from being illegally replaced as it is brought back into a past state. SOLUTION: When electronic data are stored, a medium authentication code list 34 consisting of a pair of a medium identification number and a list device signature 29 is pre-stored in an internal recording medium, and when the large capacity storage medium 13 is loaded on a device main body and mount- processed the validity of the large capacity storage medium 13 is verified by processing a stored file list by verification operation.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an originality assurance electronic storage device having at least a large-capacity storage medium for storing electronic data and an internal storage medium for storing an encryption key and the like, for guaranteeing the originality of the electronic data. In particular, the present invention relates to an originality assurance electronic preservation method and a recording medium, and more particularly to an originality assurance electronic preservation method capable of efficiently preventing unauthorized replacement of a mass storage medium such as returning a state of a mass storage medium to a past state. The present invention relates to an apparatus, an originality assurance electronic storage method, and a recording medium.

[0002]

2. Description of the Related Art With the progress of paperless technology accompanying the recent progress of computer technology, information stored as original documents by paper has been increasingly stored in the form of electronic data. Conventional techniques for guaranteeing originality are known.

[0003] For example, "Kanai et al .: Development of Electronic Assurance System for Originality -System Construction-, Medical Imaging"
Tecnology, Vol.16, No.4, Proceedings of JAMIT Annu
al Meeting'98 (1998) "and" Kokubu et al .: Development of an Electronic Preservation System for Originality Guarantee, Published by the Japan Information Processing Promotion Agency, Creative Software Development Business and Electronic Commerce Promotion Business Final Result Presentation Papers " An example of a system that guarantees the originality of electronic data is disclosed in "Creative Software Development Business Edition (1998)".

[0004] The use of such prior art makes it possible to guarantee the originality of electronic data, thereby saving original documents in the form of electronic data, thereby promoting a highly information-oriented society and improving the productivity of society as a whole. Can be contributed to.

[0005]

However, in these prior arts, the falsification of a file is detected by adding a message authenticator to the data of each file. There is a problem that it is not possible to cope with an illegal replacement of a large-capacity storage medium such as returning to a state.

[0006] In particular, for example, when a large-scale paperless operation is to be performed, a large number of large-capacity storage media must be used. And how to prevent unauthorized replacement of the large-capacity storage medium becomes a very important issue.

The present invention has been made in view of the above-mentioned problem (problem), and it is an object of the present invention to efficiently prevent unauthorized replacement of a large-capacity storage medium such as returning the state of a large-capacity storage medium to a past state. It is an object of the present invention to provide an originality assurance electronic storage device, an originality assurance electronic storage method, and a recording medium that can perform the following.

[0008]

To achieve the above object, an originality assurance electronic storage device according to the first aspect of the present invention comprises:
In an originality assurance electronic storage device which has at least a large-capacity storage medium for storing electronic data and an internal storage medium for storing an encryption key, etc., a file stored in the large-capacity storage medium And verifying the validity of the large-capacity storage medium based on the signature information obtained by encrypting the file list indicating the list and the medium identification information of the large-capacity storage medium.

According to the first aspect of the present invention, a large-capacity storage medium is created based on signature information obtained by encrypting a file list indicating a list of files to be stored in the large-capacity storage medium and medium identification information of the large-capacity storage medium. Therefore, it is possible to efficiently prevent unauthorized replacement of the large-capacity storage medium such as returning the state of the large-capacity storage medium to a past state.

[0010] The originality assurance electronic storage device according to the second aspect of the present invention includes the list signature obtained by encrypting a hash value of a file list indicating a list of storage files to be stored in the large-capacity storage medium; Medium authentication code list creating means for creating a medium authentication code list in association with the medium identification information of the storage medium; and a medium authentication code list created by the medium authentication code list creating means. And validity verification means for verifying validity.

According to the second aspect of the present invention, a list signature obtained by encrypting a hash value of a file list indicating a list of files to be stored in a large-capacity storage medium is associated with medium identification information of the large-capacity storage medium. Created a media authentication code list attached, and verified the validity of the mass storage medium based on the created media authentication code list.
Using the medium authentication code list, the validity of the large-capacity storage medium can be efficiently verified.

Further, the originality assurance electronic storage device according to the third aspect of the present invention stores the medium authentication code list created by the medium authentication code list creation means in the internal storage medium, and stores the large-capacity storage medium. When attached to the apparatus main body, the validity of the large-capacity storage medium is verified based on a medium authentication code list stored in the internal storage medium.

According to the third aspect of the present invention, a medium authentication code list stored in the internal storage medium is stored in the internal storage medium when the large-capacity storage medium is mounted on the apparatus main body. Since the validity of the large-capacity storage medium is verified based on the list, the validity of the large-capacity storage medium can be efficiently verified by effectively using the internal storage medium.

According to a fourth aspect of the present invention, there is provided an originality assurance electronic storage method for guaranteeing the originality of electronic data stored in a large-capacity storage medium using an internal storage medium for storing an encryption key or the like. In the electronic storage method, the validity of the large-capacity storage medium is verified based on signature information obtained by encrypting a file list indicating a list of files to be stored in the large-capacity storage medium and medium identification information of the large-capacity storage medium. It is characterized by the following.

According to the fourth aspect of the present invention, based on the signature information obtained by encrypting the file list indicating the list of files to be stored in the large-capacity storage medium and the medium identification information of the large-capacity storage medium, Therefore, it is possible to efficiently prevent unauthorized replacement of the large-capacity storage medium such as returning the state of the large-capacity storage medium to a past state.

According to a fifth aspect of the present invention, in the originality assurance electronic storage method, a list signature obtained by encrypting a hash value of a file list indicating a list of storage files to be stored in the large-capacity storage medium; A medium authentication code list creating step of creating a medium authentication code list in which the medium identification information of the storage medium is associated, and the large-capacity storage medium based on the medium authentication code list created by the medium authentication code list creation step. And a validity verification step of verifying validity.

According to the fifth aspect of the present invention, a list signature obtained by encrypting a hash value of a file list indicating a list of files to be stored in a large-capacity storage medium is associated with medium identification information of the large-capacity storage medium. Created a media authentication code list attached, and verified the validity of the mass storage medium based on the created media authentication code list.
Using the medium authentication code list, the validity of the large-capacity storage medium can be efficiently verified.

Further, in the originality assurance electronic storage method according to the invention of claim 6, the medium authentication code list created in the medium authentication code list creation step is stored in the internal storage medium, and the mass storage medium is stored in the internal storage medium. When attached to the apparatus main body, the authenticity of the large-capacity storage medium is verified based on a medium authentication code list stored in the internal storage medium.

According to the sixth aspect of the present invention, the medium authentication code list stored in the internal storage medium is stored in the internal storage medium when the large-capacity storage medium is mounted on the apparatus main body. Since the validity of the large-capacity storage medium is verified based on the list, the validity of the large-capacity storage medium can be efficiently verified by effectively using the internal storage medium.

Further, the recording medium according to the invention of claim 7 is:
By recording a program for causing a computer to execute the method according to any one of claims 3 to 6,
The program becomes machine-readable, whereby the operations of claims 3 to 6 can be realized by a computer.

[0021]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Preferred embodiments of an originality assurance electronic storage method according to the present invention and a computer-readable recording medium storing a program for causing a computer to execute the method will be described below with reference to the accompanying drawings. Will be described in detail.

FIG. 1 is a block diagram of an electronic storage device that executes the originality assurance electronic storage method according to the present embodiment. The user can execute a process of storing and reading electronic data from the host computer 2 to the electronic storage device 1 via a network (a simple communication path may be used).

In the electronic storage device 1 shown in FIG.
Indicates a processor, and 12 indicates a computer 2 via a network.
A communication port for communicating with the computer, 13 a large-capacity storage medium such as a hard disk or a CD-R for storing electronic data, 14 a main control program, a hash program, a key generation program, an encryption program, a decryption program, etc. 15 is a program storage medium including an EEPROM, a ROM and the like in which a program for realizing the originality assurance electronic storage method is stored. 15 is an apparatus private key, an apparatus public key certificate, a latest file identification number, a medium authentication code. 16 is an IC card reader / writer into which the IC card 3 is inserted;
Indicates a timer.

As the large-capacity storage medium 13 shown in FIG.
Although it can be removed from the electronic storage device 1 like a magneto-optical disk or a CD-R, the other blocks are physically integrated as the electronic storage device 1 and have a communication port 12.
It is configured so that it cannot be accessed from the outside except through. That is, the electronic storage device 1 shown in FIG. 1 is a device having tamper resistance without a method of directly accessing each block.

As a level for securing tamper resistance,
Although it is possible to consider a case where a sticker is attached so that the housing of the electronic storage device 1 cannot be opened, or a case where the device does not operate when the housing is opened, the tamper resistance may be reduced. Any type can be used as long as it can be provided.

The electronic storage device 1 shown in FIG. 1 records data requested to be stored by a user in a large-capacity storage medium 13. At that time, a message authenticator is added to the data to be stored by using the encryption key of the electronic storage device 1 in order to detect data tampering later.

Further, the electronic storage device 1 performs a process of creating a list of files recorded on the large-capacity storage medium 13 and recording the list on the large-capacity storage medium 13. A message authenticator is similarly added to this list.

Further, in order to detect unauthorized replacement of the large-capacity recording medium 13, the storage file list recorded on the large-capacity storage medium 13 and the message authenticator added thereto are detected to authenticate the medium. I do. In addition, the current time is acquired from the timer 17 built in the electronic storage device 1 and managed as the attribute information of the file so that the creation date of the file or the like cannot be changed.

Further, in the electronic storage device 1, each file is managed by assigning attributes such as "temporary original", "original", and "transcript" so that the original and the copy can be distinguished. Files without attributes are referred to as "general" files. When a request is made from outside to create a copy of a file to which the attribute of “original” is assigned and managed, the attribute of “copied copy” is assigned to the copied file.

This attribute code is recorded on the large-capacity storage medium 13 together with other file attribute information as a file attribute information file associated with the data file. Like the data file, the attribute code is externally changed by adding a message authenticator. It is managed so that it cannot be done.

In the case where the mass storage medium 13 has been removed and its attributes have been tampered with externally, the tampering is detected when the message authenticator assigned to the file attribute information file is verified.

A medium authentication code list including a pair of a medium identification number of the large-capacity storage medium 13 and a list device signature is stored in the internal storage medium 15, and medium authentication using the medium authentication code list is performed. Thus, the illegal replacement of the mass storage medium 13 such as returning the state of the mass storage medium 13 to the past state is detected.

Next, regarding the originality assurance electronic storage method executed by using the electronic storage device 1 having the above-described configuration, (1) electronic data storage processing, and (2) storage file list verification processing are performed in this order. This will be specifically described.

(1) Electronic Data Storage Processing First, electronic data storage processing by the electronic storage device 1 shown in FIG. 1 will be described with reference to FIGS.
FIG. 2 is an explanatory diagram for explaining the concept of electronic data storage processing by the electronic storage device 1 shown in FIG.
FIG. 4 is a flowchart showing a procedure for processing for storing electronic data by the electronic storage device 1.

Hereinafter, the electronic data storage processing shown in the flowcharts of FIGS. 3 and 4 will be specifically described with reference to FIG. 2. However, for the sake of convenience, the large-capacity storage at the time of storing the electronic data will be described. It is assumed that the medium 13 is valid.

When receiving a request to save electronic data from the computer 2 via the communication port 12, the processor 11 of the electronic storage device 1 determines whether or not the mass storage medium 13 is mounted (step S301). . Here, when it is determined that the mass storage medium 13 is not mounted (No at Step S301), the processor 11
The electronic data storage processing ends due to an error.

On the other hand, when it is determined that the mass storage medium 13 is mounted (Yes at step S301),
The data 21 and the file attribute code 22 shown in FIG. 2 are received from the user (computer 2) via the communication port 12 (step S302).

Then, the processor 11 determines whether or not the received file attribute code 22 is "original" or "temporary original" (step S303). Here, when it is determined that the file attribute code 22 is not “original” or “temporary original” (No at Step S303), the processor 11 ends the electronic data storage processing due to an error.

On the other hand, if the file attribute code 22 is "original"
Alternatively, if it is determined to be a “temporary original” (Yes at step S303), the current time is obtained from the timer 17 (step S304), and the device private key 31, the device public key certificate 32, The identification number of the latest file is obtained (step S30).
5) The latest file identification number is incremented and recorded on the internal storage medium 15 (step S306).

The current time and the timer I are stored in the electronic data.
D, the latest file identification number and the file attribute code are added to the storage information 22 shown in FIG. 2 (step S30).
7), calculate the hash value 23 of the storage information 22 (step S308), encrypt the calculated hash value 23 with the device private key to obtain the device signature 24 (step S309).

The device signature 24 and the device public key certificate obtained in this way are added to the storage information 22 to obtain device-signed storage information 25 (step S310), and the device-signed storage information 25 is used as a storage file. The data is stored in the capacity storage medium 13 (step S311).

Then, the storage file list 30 is obtained from the large-capacity storage medium 13 (step S312), and the validity of the storage file list 30 is verified (steps S313 to S314). As a result, if the saved file list 30 is not valid (No at Step S314), error processing is performed, and if the stored file list 30 is valid (Step S314).
(Affirmative), it is further checked whether or not writing is prohibited (step S315).

If the writing is prohibited (Yes at Step S315), an error process is performed. If the writing is not prohibited (No at Step S315), the file list is acquired from the saved file list 30 and the previous saved file 26 is saved. An entry is added (step S316), and a hash value is calculated for the file list (step S317).

Then, this hash value is encrypted with the device private key and used as a list device signature (step S318). The list device signature and the device public key certificate are added to a file list to form a new saved file list 30. (Step S319), the storage file list 30 is recorded on the large-capacity storage medium 13 (Step S320).

Thereafter, a medium identification number is obtained from the large-capacity storage medium 13 (step S321), and a pair of the medium identification number and the list device signature 29 is recorded in the medium authentication code list 34 of the internal storage medium 15 (step S321). S322).
The reason for recording the medium authentication code list 34 on the internal storage medium 15 is that the medium authentication code list 3
4 to perform medium authentication of the mass storage medium 13.

By performing the above series of processing, when the electronic data is stored in the large-capacity storage medium 13, the medium authentication code list including the medium identification number and the list device signature 29 can be stored in the internal storage medium 15. it can.

Even if the signature of the storage file list 30 is correct, if the attached large-capacity storage medium 13 is not initialized in a predetermined format, or if the storage file list 30 in the large-capacity storage medium 13 is In the state other than the above, writing cannot be performed, but even in such a case, reading from the mass storage medium 13 can be performed.

(2) Storage File List Verification Processing In the above series of processing, it is assumed that the mass storage medium 13 is valid, but the state of the mass storage medium 13 is changed to the past state. There is a possibility that the mass storage medium 13 will be illegally replaced, such as returning. Therefore, in the present embodiment, the large-capacity storage medium 13
When mounting on the device body and performing the mounting process, verify the saved file list shown below,
Verify the validity of the media.

FIG. 5 is a flowchart showing a procedure for verifying a stored file list performed by the electronic storage device 1 shown in FIG. As shown in the figure, when performing the verification processing of the storage file list, first, the storage file list 30 is acquired from the large-capacity storage medium 13 (step S501), and the file list of the storage file list 30 is checked. To calculate a hash value (step S502),
A public key is obtained from the device public key certificate in the save file list 30 (step S503).

Then, the list device signature of the saved file list 30 is obtained (step S504), and the obtained list device signature is decrypted with the public key (step S50).
5) It is checked whether or not the decrypted one matches the hash value (step S506).

If they do not match (No at Step S506), error processing is performed. If they match (Yes at Step S506), a medium identification number is obtained from the mass storage medium 13 (Step S506). (Step S507), the medium authentication code list 34 is acquired from the internal storage medium 15 (Step S508).

Then, it is checked whether or not the medium authentication code list 34 matches the medium identification number (step S509). If there is a match (step S509: Yes), the medium authentication code list 34 is checked. Then, it is checked whether or not the corresponding list device signature in the above matches the previous list device signature (step S510). As a result, if the two list signatures match (Yes at step S510), the storage list file is regarded as valid (step S511).

If there is no match in the medium authentication code list 34 with the medium identification number (No at Step S509) or if both list signatures do not match (No at Step S510), the storage list file is determined to be invalid. Considering that the write-inhibited state is maintained, the process ends.

By performing the above series of processes, when the mass storage medium 13 is mounted on the main body of the apparatus and the mounting process is performed, the storage file list is verified to verify the validity of the medium. it can.

As described above, in the present embodiment,
When storing electronic data, a medium authentication code list 34 composed of a pair of a medium identification number and a list device signature 29 is stored in the internal recording medium 15, and the mass storage medium 13 is mounted on the apparatus main body and mounted. When processing is performed, the storage file list is verified and the validity of the medium is verified.Therefore, the mass storage medium can be returned to a past state. Replacement can be efficiently prevented.

By the way, in a contract or the like, since both parties to the contract often hold the same original, it is necessary to create a plurality of original data when performing the above-mentioned electronic data storage processing and file attribute code change processing. Can also. For example, if three originals are requested, 0000
If you add a number to the end, such as 123-01, 0000123-02, and 0000123-03, and add them to each "original" file, you can check only the beginning of the file identification number to get the same It can be confirmed that the data is electronic data.

[0057]

As described above, according to the present invention, signature information obtained by encrypting a file list indicating a list of files to be stored in a large-capacity storage medium and medium identification information of the large-capacity storage medium Is configured to verify the validity of the large-capacity storage medium on the basis of the original data, which can efficiently prevent unauthorized replacement of the large-capacity storage medium such as returning the state of the large-capacity storage medium to a past state. There is an effect that an electronic storage device for assuring performance can be obtained.

According to the second aspect of the present invention, a list signature obtained by encrypting a hash value of a file list indicating a list of files to be stored in a large-capacity storage medium and the medium identification information of the large-capacity storage medium are used. Since the medium authentication code list associated with the medium authentication code list was created and the validity of the mass storage medium was verified based on the created medium authentication code list, the validity of the mass storage medium was verified using this medium authentication code list. Is obtained, an originality assurance electronic storage device capable of efficiently verifying the originality is obtained.

According to the third aspect of the present invention, the medium authentication code list is stored in the internal storage medium, and when the large-capacity storage medium is mounted on the apparatus main body, the medium authentication code stored in the internal storage medium is stored. An originality assurance electronic storage device that is configured to verify the validity of a large-capacity storage medium based on a code list so that the validity of a large-capacity storage medium can be efficiently verified by effectively using an internal storage medium. Is obtained.

According to the fourth aspect of the present invention, a large-capacity storage is performed based on signature information obtained by encrypting a file list indicating a list of files to be stored in a large-capacity storage medium and medium identification information of the large-capacity storage medium. Since it is configured to verify the validity of the medium, an originality assurance electronic preservation method that can efficiently prevent unauthorized replacement of the mass storage medium, such as returning the state of the mass storage medium to the past state, is provided. The effect is obtained.

According to the fifth aspect of the present invention, a list signature obtained by encrypting a hash value of a file list indicating a list of files to be stored in a large-capacity storage medium and the medium identification information of the large-capacity storage medium are used. Since the medium authentication code list associated with the medium authentication code list was created and the validity of the mass storage medium was verified based on the created medium authentication code list, the validity of the mass storage medium was verified using this medium authentication code list. Is obtained, an originality assurance electronic preservation method capable of efficiently verifying is obtained.

According to the invention of claim 6, the medium authentication code list is stored in the internal storage medium, and when the large-capacity storage medium is mounted on the apparatus main body, the medium authentication code stored in the internal storage medium is stored. Originality assurance electronic preservation method that is configured to verify the validity of a large-capacity storage medium based on a code list so that the validity of a large-capacity storage medium can be efficiently verified by effectively using an internal storage medium Is obtained.

The recording medium according to the invention of claim 7 is:
By recording a program for causing a computer to execute the method according to any one of claims 3 to 6,
The program becomes machine-readable, whereby the operations of claims 3 to 6 can be realized by a computer.

[Brief description of the drawings]

FIG. 1 is a block diagram of an electronic storage device that executes an originality assurance electronic storage method according to an embodiment.

FIG. 2 is an explanatory diagram for explaining the concept of electronic data storage processing by the electronic storage device shown in FIG. 1;

FIG. 3 is a flowchart showing a procedure for processing for storing electronic data by the electronic storage device shown in FIG. 1;

FIG. 4 is a flowchart showing a procedure of processing for storing electronic data by the electronic storage device shown in FIG. 1;

FIG. 5 is a flowchart illustrating a procedure of a storage file list verification process performed by the electronic storage device 1 illustrated in FIG. 1;

[Explanation of symbols]

 Reference Signs List 1 electronic storage device 2 computer 3 IC card 11 processor 12 communication port 13 large-capacity storage medium 14 program storage medium 15 internal recording medium 16 IC card reader / writer 17 timer 21 data 22 storage information 23 hash value 24 device signature 25 device signature Save information 26 Save file 27 File list 28 List hash value 29 List device signature 30 Save file list 31 Device private key 32 Device public key certificate 33 Latest file identification number 34 Media authentication code list

Continuation of the front page F term (reference) 5B065 CC08 PA04 PA14 PA16 ZA04 ZA15 5J104 AA09 LA03 LA06 NA12 NA27 PA07 PA14 9A001 DD09 EE03 JJ07 LL03

Claims (7)

[Claims] 1. An originality assurance electronic storage device that has at least a large-capacity storage medium for storing electronic data and an internal storage medium for storing an encryption key and the like, and guarantees the originality of the electronic data. An originality assurance electronic device that verifies the validity of the large-capacity storage medium based on signature information obtained by encrypting a file list indicating a list of files to be stored in the medium and medium identification information of the large-capacity storage medium. Storage device. 2. A medium authentication code list in which a list signature obtained by encrypting a hash value of a file list indicating a list of files to be stored in the large-capacity storage medium is associated with medium identification information of the large-capacity storage medium. And a validity verification unit for verifying the validity of the mass storage medium based on the medium authentication code list generated by the medium authentication code list generation unit. The originality assurance electronic storage device according to claim 1, wherein: 3. The medium authentication code list created by the medium authentication code list creation means is stored in the internal storage medium, and is stored in the internal storage medium when the large-capacity storage medium is mounted on the apparatus main body. 3. The originality assurance electronic storage device according to claim 2, wherein the authenticity of the mass storage medium is verified based on the medium authentication code list. 4. An originality assurance electronic storage method for assuring the originality of electronic data stored in a large-capacity storage medium by using an internal storage medium for storing an encryption key or the like, comprising: An originality assurance electronic storage method, comprising verifying the validity of the mass storage medium based on signature information obtained by encrypting a file list indicating the list and medium identification information of the mass storage medium. 5. A medium authentication code list in which a list signature obtained by encrypting a hash value of a file list indicating a list of files to be stored in the large-capacity storage medium is associated with medium identification information of the large-capacity storage medium. And a validity verification step of verifying the validity of the mass storage medium based on the medium authentication code list created by the medium authentication code list creation step. The originality assurance electronic preservation method according to claim 4, characterized in that: 6. The medium authentication code list created in the medium authentication code list creation step is stored in the internal storage medium, and is stored in the internal storage medium when the large-capacity storage medium is mounted on the apparatus main body. 6. The originality assurance electronic storage method according to claim 5, wherein the validity of the mass storage medium is verified based on the medium authentication code list. 7. A computer-readable recording medium on which a program for causing a computer to execute the method according to claim 3 is recorded.