JP2002259849A - Server device of online contract system and program therefor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system and a program therefor, capable of achieving an online contract procedure with security by correctly verifying the electronic signatures of all contractors made on the same contract data. SOLUTION: The server device of the online contract system, which is connected to the client terminal of a contractor through a network, includes a database for saving contract information; a transmitting means for saving non- input contract data into the database while the contractor does not yet make inputs to the data, and for transmitting the data to the client terminal of the contractor; a receiving means for receiving from the client terminal the input contract data such that the contractor has input necessary items with the contractor's electronic signature attached; a comparison means for comparing the non-input contract data to the input contract data to detect conformity between the contract data; a verifying means for verifying the contractor's electronic signature; and an establishing means for establishing contracts for all the contractors if the comparison means has detected the conformity between the contract data and the verifying means has verified the electronic signatures.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a system for executing an online contract procedure using an electronic form and an electronic signature on the Internet.

[0002]

2. Description of the Related Art With the recent progress of electronic technology and network technology, an environment for performing various procedures conventionally performed on paper documents on the Internet is being prepared. For example,
It is becoming possible to perform procedures such as notification and application to government offices, and contract procedures such as insurance and leasing online using electronic documents and electronic signatures.

[0003]

In such an environment, when a plurality of persons make a certain type of contract online, all the contractors use a digital signature for the common contract contents. You will express your consent.

However, if a method is adopted in which a plurality of contractors simply give an electronic signature to the same contract document data in order, when performing verification for establishing a contract later, all the electronic signatures are obtained. There is a problem that verification cannot be performed correctly. For example, when a contract is made between the contractors A and B, if the contractor A fills in necessary information (name, address, etc. of the contractor A) and adds an electronic signature to the contract document data, The signature is created for the contract data after the contractor A has filled out. Next, the contractor A fills in the necessary items and then applies the electronic signature to the contract data to which the electronic signature has been added. As a result, the contract data exists after contractors A and B have filled in necessary information, and the electronic signature is
Will exist.

[0005] Here, the digital signature of the contractor B is the contractor A,
Since both B are prepared for the contract data after the necessary items have been entered, they can be verified correctly. However, since the contractor A's electronic signature is created for the contract data before the contractor B fills in the necessary items, as described above, the contract It cannot be verified correctly using data.

[0006] As described above, in order to realize an online contract between a plurality of contractors, when a plurality of persons fill in necessary items for the same contract data and attach an electronic signature,
There is a need for a system that can correctly verify the electronic signatures of all contractors.

The present invention has been made in view of the above points, and realizes a secure online contract procedure by correctly verifying the electronic signatures of all the contractors performed on the same contract data. It is an object of the present invention to provide a system capable of performing such operations and a program therefor.

[0008]

According to a first aspect of the present invention, there is provided a server device of an online contract system connected to a client terminal of a contractor through a network, wherein a database for storing contract information and contract document data are provided. Transmitting means for saving the pre-input contract data in a state where the contractor has not been input yet, transmitting the contract data to the contractor's client terminal while storing the data in the database;
The contractor inputs necessary items, and receives receiving contract data from the client terminal in a state where the contractor's electronic signature is attached, and compares the pre-input contract data with the post-input contract data. Comparing means for detecting the agreement of the contract data, verification means for verifying the electronic signature of the contractor, and for all the contractors, the comparing means detects the agreement of the contract data, and the verification means Means for establishing a contract if the electronic signature is successfully verified,
Is provided.

According to the invention configured as described above, first, the pre-input contract data is transmitted to the client terminal of the contractor. The contractor inputs necessary items, gives an electronic signature, and after inputting, sends the contract data to the server device. The server device receives this and compares it with the pre-input contract data. Next, the contractor's electronic signature is verified. If the contract data before input matches the contract data after input, it is known that the contract data has not been tampered with. If the electronic signature of the contractor is correctly verified, the input is performed by the contractor. Knowing that it was done, the contract is closed.

According to a second aspect of the present invention, in the server device according to the first aspect, the contract document data includes a contract content field and a plurality of contractor input fields, and the comparing means performs the pre-input contract. The contract contents field in the contract data is compared with the contract contents field in the contract data after the input. Thus, falsification of the contract content described in the contract content field can be detected.

[0011] The invention according to claim 3 is the invention according to claim 1 or 2.
The server device described in (1), further comprising: means for assigning an electronic signature of the server when saving the contract data in the database; and means for verifying the electronic signature of the server when extracting the contract data from the database. Thus, even if the contract data is falsified while being stored in the database, it can be detected.

The invention described in claim 4 is the first to third aspects of the present invention.
The server device according to any one of the above, further comprising a log recording unit that stores a log of a process performed by the transmission unit, the reception unit, the comparison unit, the verification unit, and the establishment unit in the database. As a result, it is possible to save a record of the processing at each stage until the contract is established.

According to a fifth aspect of the present invention, in a server device of an online contract system connected to a client terminal of a contractor through a network, a database for storing contract information, a contract content field and a plurality of contractor input fields are provided. For the contract data including the contract contents field, a digital signature of the server is created and attached to the contract data, and the contractor's client as pre-input contract data in a state where the contractor has not been input yet. Transmitting means for transmitting to the terminal, receiving means for receiving the contract data from the client terminal after the contractor inputs the necessary items and inputting the electronic signature of the contractor, and after inputting from all the contractors At the time of receiving the contract data, the fields that are subject to the electronic signature of the server and each contractor Comprising data extracted from the input after contract data, and verification means for verifying the electronic signature, and a hold means for establishing a contract when the verification means has correctly validate all electronic signatures.

According to the invention configured as described above, first, an electronic signature of the server is given to the contract data to create pre-input contract data, which is transmitted to the client terminal of the contractor. The contractor inputs necessary items, gives an electronic signature, and after inputting, sends the contract data to the server device. The server device receives this. When this process has been performed on all contractors, the data of the server and the fields to be digitally signed by each contractor are input and extracted from the contract data, and each digital signature is verified. If all the electronic signatures can be correctly verified, the contract data is not falsified, and it is known that the input has been performed by the contractor himself, and the contract is established.

According to a sixth aspect of the present invention, in the server device according to the fifth aspect, the transmitting means, the receiving means,
Log recording means for storing a log of the processing performed by the verification means and the establishment means in the database; As a result, it is possible to save a record of the processing at each stage until the contract is established.

[0016] The invention according to claim 7 is the invention according to claims 1 to 6.
In the server device according to any one of the above, the contract document data includes data of a corresponding electronic form. Thus, the contract data can be correctly displayed as an electronic document.

[0018] The invention described in claim 8 is the invention according to claims 1 to 6.
In the server device according to any one of the above, the contract document data includes identification information of a corresponding electronic form. As a result, the data amount of the contract data itself can be reduced while ensuring that the contract data is correctly displayed as an electronic document.

According to a ninth aspect of the present invention, there is provided a program executed on a server device of an online contract system connected to a client terminal of a contractor through a network, wherein the server device stores contract document data. Transmission means for saving the contract data before input in the state where the contractor has not yet been input to the database and transmitting it to the client terminal of the contractor, the contractor inputs the necessary items, and the contractor's electronic signature Receiving means for receiving the contract data after input from the client terminal in a state marked with a symbol, comparing means for comparing the contract data before input and the contract data after input to detect agreement of the contract data, the contractor Verification means for verifying the electronic signature of the contractor, for all contractors, the comparing means detects agreement of contract data, and If the stage was able to correctly verify the electronic signature, established means to establish a contract, to operate as.

According to the invention configured as described above, first, the contract data before input is transmitted to the client terminal of the contractor. The contractor inputs necessary items, gives an electronic signature, and after inputting, sends the contract data to the server device. The server device receives this and compares it with the pre-input contract data. Next, the contractor's electronic signature is verified. If the contract data before input matches the contract data after input, it is known that the contract data has not been tampered with. If the digital signature of the contractor is correctly verified, the input is performed by the contractor himself. Knowing that it was done, the contract is closed.

According to a tenth aspect of the present invention, there is provided a program executed by a server device of an online contract system connected to a client terminal of a contractor through a network, wherein the server device stores a contract content field and a plurality of contract contents. For the contract data including the contractor input field, an electronic signature of the server is created for the contract content field and attached to the contract data, and the contract before input in a state where the contractor has not been input yet Transmitting means for transmitting data to the client terminal of the contractor as data, receiving means for inputting necessary information by the contractor and receiving contract data from the client terminal after inputting with the electronic signature of the contractor, all contracts At the time when the contract data is received after input from the contractor, the server and each contractor are subject to electronic signature. The data fields are being extracted from the input after contract data, verification means for verifying the electronic signature, the verification means established means for establishing a contract when correctly validate all electronic signature, to operate as a.

According to the invention configured as described above, first, an electronic signature of the server is added to the contract data to create pre-input contract data, which is transmitted to the client terminal of the contractor. The contractor inputs necessary items, gives an electronic signature, and after inputting, sends the contract data to the server device. The server device receives this. When this process has been performed on all contractors, the data of the server and the fields to be digitally signed by each contractor are input and extracted from the contract data, and each digital signature is verified. If all the electronic signatures can be correctly verified, the contract data is not falsified, and it is known that the input has been performed by the contractor himself, and the contract is established.

According to an eleventh aspect of the present invention, there is provided a program executed on a client terminal of a contractor connected to a server device of an online contract system through a network, wherein the program includes a contract content field and a plurality of contractor input fields. Means for receiving and displaying contract data including the contract data from the server device, means for receiving input data of the contractor in the contractor input field, means for including the data in one of the contractor input fields, and instructing the contractor to give an electronic signature. Receiving means for deciding a signature target portion so as not to include an unfilled contractor input field among the fields included in the contract document data; and creating a contractor's electronic signature for the signature target portion. Means for applying to the contract data, the contract data with the electronic signature Means for transmitting to the over server device, said operating the client terminal as a.

According to the invention configured as described above, upon receiving the contract data from the server device, the contractor's client terminal displays the contract data and takes in the contractor's input data into the contract data. When the contractor instructs to give an electronic signature, a part to be signed is determined so as not to include a blank participant input field among the fields in the contract data, and the contractor's electronic A signature is created. The electronic signature is attached to the contract data and transmitted to the server device.

According to a twelfth aspect of the present invention, in the program according to the eleventh aspect, the deciding means sets the contractor input field and / or the contract content field corresponding to the input data received from the contractor to the signature. Determined as the target part. As a result, the portion to be signed is determined except for the unfilled contractor field.

According to a thirteenth aspect of the present invention, in the program according to any one of the ninth to twelfth aspects, the contract data includes data of a corresponding electronic form. Thus, the contract data can be correctly displayed as an electronic document.

According to a fourteenth aspect of the present invention, in the program according to any one of the ninth to twelfth aspects, the contract data includes identification information of a corresponding electronic form.
Thereby, the data amount of the contract data can be reduced while ensuring that the contract data is correctly displayed as an electronic document.

[0027]

Preferred embodiments of the present invention will be described below with reference to the accompanying drawings.

FIG. 1 shows an outline of an online contract procedure by the online contract system of the present invention. In the example of FIG. 1, a contract between the company B and the user A is made. The company B is, for example, an insurance company, a leasing company, or the like that makes a contract with a user. On the side of the company B, an individual, for example, a representative director, as a contractor, signs and signs the contract.

Company A is a company that enters between Company B and User A and executes an online contract procedure using the Internet.
And / or a predetermined service charge may be obtained from the user. The company A operates a contract agency server, and communicates with the client terminal of the party A and the party B via the Internet to execute processing necessary for the contract procedure.

FIG. 2 shows a schematic configuration of an online contract system including the server of the company A and the client terminal of the contractor. In FIG. 2, a server 10 of a company A and a client terminal 20 of a contractor (A, B) are communicably connected via the Internet 1. The server 10
Form DB11, master DB12, contract information DB1
3 is connected. The form DB 11 stores electronic forms used for contracts. The electronic form is a form in which a contract of a normal paper document or the like is converted into electronic data, and is data indicating a description of a contract, a frame or a field such as a column for entering a name of a contractor, and the like. When creating an electronic document using an electronic form, a contractor or the like creates input data describing the contents of the contract, inserts it into the corresponding field of the electronic form, and furthermore, the contractor enters necessary information such as name. The input data is entered in the corresponding fields, but these input data are managed as data different from the electronic form itself. That is, one electronic document is created by combining the electronic form with the input data for the electronic form.

In the case of the present invention, electronic forms corresponding to various contracts are stored in the form DB 11, and input data describing various contract contents are stored in the master DB 12. The server 10 creates an electronic document of the contract (hereinafter, referred to as “contract data”) by combining these, and provides it to the contractor.

Various data generated until the completion of the contract procedure is sequentially stored in the contract information DB 13 as the contract processing proceeds. Specifically, when one contract procedure is started at the request of the contractor, first, the contract I
D is generated and stored in the contract information DB 13. Next, various data generated with the subsequent contract processing are accumulated under this contract ID. The data stored in the contract information DB 13 includes, for example, target contract data, the electronic form itself or the electronic form ID used in the contract data, the contractor's electronic signature, data indicating the conclusion of the contract, the contract Log data of the procedures performed by the contractor and the server in the procedures are included.

Further, the server 10 has a server application 14 (hereinafter referred to as a “server application”) for executing contract data processing and contract content verification processing, which will be described later.
Call. ) Has been introduced. The server application 14
Can be configured as a computer program.

On the other hand, the client terminal 20 is provided with a client module 22 for executing processes such as inputting necessary items as a contractor and adding an electronic signature. The client module can also be configured as a computer program. The client terminal 20 can input and output data to and from an IC card 21 possessed by a contractor by an IC card reader (not shown). The IC card 21 contains, for example, a secret key of a contractor's electronic signature. Therefore, the client module 22 creates an electronic signature using a secret key existing in the client terminal 20 or in the IC card 21 when the user gives the electronic signature.

Next, the flow of the online contract procedure will be outlined with reference to FIGS. In the example of FIG. 1, a contract is made between the individual contractor A and the contractor B belonging to the company B. The company A assists and acts on the contract procedure online using the server 10, and reports the completion of the contract to the company B.

First, when a proxy request is made to the company A with respect to the contract between the contractor A and the company B, the server 10 obtains the contract content data from the master DB of the company B and stores it in the master DB 12 of the company A. Save (step S0). Next, the server 10 acquires an electronic form corresponding to the contract content data from the form DB 11, creates contract data by combining both, and transmits the contract data to the client terminal 20 of the contractor A (step S1). Party A uses the client module 22 of the client terminal 20,
Necessary items (specifically, the name of Party A) are entered into the contract data, the party's electronic signature is given, and the agreement is returned to the server 10 (Step S2).

Next, the server 10 transmits the contract data with the electronic signature of the party A to the client terminal 20 of the customer (step S3). In response to this, the user enters necessary information, gives his / her electronic signature, and returns it to the server 10 (step SS4). The server 10 uses the contract data and the electronic signature received in this manner to inspect the contents of the contract for alteration and to verify the electronic signatures of the parties A and B (hereinafter also referred to as “contract information verification processing”). Call.) The present invention relates to this contract information verification processing, and details thereof will be described later. Then, as a result of the verification in the server 10, it is confirmed that there is no change in the contract contents and the electronic signatures of the first party and the second party are correct, and the server 10 transmits the contract data, the first party's electronic signature data, and the like to the contract information DB 13.
And sends it to the company B to report the conclusion of the contract (step S5). Company B stores the contracted data in the contract information DB of company B (step S
6). Thus, the online contract procedure is completed.

Note that the server 10 can obtain log data of the processing performed during the contract procedure and store the log data in the contract information DB 13. As a result, it is possible to save a history such as the date and time when data is transmitted and received between the server and the client terminal of the contractor, and refer to the history when a problem occurs later.

Next, a contract procedure performed between the server 10 and the client terminal 20 of the contractor will be described in detail. The contract procedure is performed by the server 10 providing the contractor with contract data, the contractor filling in necessary information such as a name, and giving an electronic signature. In a contract between two parties, one contractor fills in necessary items and attaches an electronic signature, and then another contractor enters necessary items and attaches an electronic signature. The server 10 verifies the contract data in which two contractors have input necessary items and the electronic signatures of the two contractors.

In the contract information verification processing executed by the server 10, verification is mainly performed on two items. One is “confirmation of originality of contract data”.
The contract data transmitted from the server 10 to the contractor first describes the contents of the contract. While the contract data is transmitted to the contractor and the contractor fills in the necessary items, returns an electronic signature to the server 10, the contract contents are falsified by the contractor, or It is necessary to check whether the data has been tampered with by a third party. Confirmation of the originality of the contract data is performed for this purpose. The other is “confirmation of contractor (entry)”. In other words, it is to check whether a person other than the person has falsely impersonated the contractor and has not made the contract. A method for performing these two verifications will be described below. [1] First Contract Information Verification Method A first contract information verification method will be described below. In the first method, the “confirmation of originality of contract data” is performed by comparing contract data before and after the contractor inputs necessary items. The “confirmation of the creator” is performed by decrypting and verifying the digital signature that has been given. In order to compare contract data, the company A
A contract information DB 13 having a history management function is used. Further, the comparison of the contract data is performed in units of a plurality of fields constituting the contract data. (1) Confirmation of Originality First, a method of confirming the originality of contract data will be described. When the server 10 creates contract data from the contract content data in the master DB 12 and the electronic form in the form DB 11, the server 10 stores a copy of the contract data in the contract information DB 13 and transmits the copy to the contractor A. Contractor A receives the contract data and confirms the contract contents.

In the example shown in the lower part of FIG. 5, the contract data includes a contract content field 24 (the “Contract” and “Appendix” columns of the contract data in FIG. 4A) and a first contractor field 25 ( A second contractor field 26 (name / address field of contractor 2) is included. Here, as shown on the left side of FIG. 4 (A), the customer inputs his / her information (name, address) in the first contractor field and attaches the customer's electronic signature. At this point, the second contractor field (the input field of the second party) is still blank. Party A uses client terminal 20 to return the entered contract data (with the party's electronic signature) to server 10.

The server 10 first stores the received contract data (with the digital signature of Party A) in the contract information DB 13.
Next, by executing the server application 14, the server 10 executes the server application 14 to store the contract information DB 13 in the contract data field in the contract data before the input of the first party and the contract received from the first party and after the first party input. With the contract content field in the certificate data. If the two match, it is determined that there is no falsification of the contract content in the input / signature processing of Party A, and the originality of the contract data has been secured.

Next, the server 10 transmits the contract data (the state on the left side of FIG. 4A) after the input of the instep to the client terminal 20 of the server B. You confirm the contract,
The name and address are entered in the second contractor field, the electronic signature of the second party is added, and the second party is returned to the server 10. The server 10 receives the contract data (with the electronic signature of the user) after the input and the signature of the user, and stores it in the contract information DB 13. Next, the server 10 executes the server application 14 to compare the contract content field in the contract data after the input of the first party stored previously with the contract content field in the contract data after the input of the second party. I do. If the two match, it is understood that the originality of the contract data was maintained during the input / signature processing of the second party.

As described above, in the first embodiment, the originality of the contract data is verified by comparing the contract contents fields in the contract data before and after each contractor inputs. (2) Verification of Filler Next, verification of the electronic signature in the first embodiment will be described. In the first embodiment, an electronic signature is basically given by the signature pattern 1 shown in FIG.

When the signature pattern 1 shown in FIG. 3A is applied, the electronic signatures of Party A and Party B are given to the entire contract data (that is, input data + electronic form).
Upon receiving the contract data and the electronic signature from the client terminal of the contractor, the server application 14 of the server 10 verifies only the latest electronic signature.

First, when contract data before the contractor's input is transmitted from the server 10 to the client terminal 20 of the contractor, the contractor inputs his / her own information and applies an electronic signature to the contract data after the input. A reply is sent to the server 10. At this time, the client module 22 of the client terminal 20 of the client prepares the electronic signature of the client for the entire contract data after the input of the client. The server 10 receives these, and the server application 14 verifies the digital signature of the party A using the received contract data (after the input of the party A). If the verification is successful, it is determined that the contract data has been input by the party.

Next, the server 10 transmits the contract data after the input of the first party to the client terminal 20 of the second party. In the same way, you enter your information, attach an electronic signature, and
Reply to At this time, the client module 22 of the client terminal 20 of the customer creates an electronic signature of the customer for the entire contract data after the input of the customer. Server 10
Verifies the digital signature of the user using the contract data after the input by the user, and determines that the input has been made by the user if the verification can be performed correctly. Thus, the electronic signature of the contractor is verified. (3) Processing Flow Next, with reference to FIG. 6, an outline of the flow of an online contract procedure according to the first contract information verification method will be outlined. First, server 1
The server application 14 creates contract data (original data) by combining the electronic form and the contract content data by the server application 14 (step S10), saves the contract data in the contract information DB 13 (step S12), and stores
(Step S14). Party A receives the contract data, inputs the name and address, gives an electronic signature (step S16), and returns it to the server 10. The server 10 stores the received contract data and the electronic signature of the contractor in the contract information DB1.
3 and the electronic signature of the instep A is verified by the server application 14 (step S18). Next, the server application 14
Confirms the originality by comparing the contract data before the input of the first party stored in the contract information DB 13 with the contract data after the input of the first party received from the client terminal 20 of the first party (step). S20). When the verification of the electronic signature of Party A and the confirmation of the originality of the contract data are completed successfully, the server 10
Saves the contract data and the electronic signature of the party after the input of the party A in the contract information DB 13.

Next, the server 10 transmits the contract data after the input and the signature of Party A to the client terminal 20 of Party B (Step S22). Receiving this, the customer inputs his / her name and address, attaches the digital signature of the user to the input data, and returns it to the server (step S24). In the server 10, the server application 14 verifies the signature of the second party (Step S).
26) Further, in step S20, the contract data before the input of the customer stored in the contract information DB 13 and the contract data after the input of the customer received from the client terminal 20 of the customer B are compared to confirm the originality. Perform (Step S28). When the originality is confirmed and the signature is verified, the server 10 stores the contract data and the electronic signature of the contractor in the contract information DB.
13 and the contract is concluded.

As described above, according to the first contract information verification method, the contract information before the contractor is input is stored in the contract information DB 13 and the contract data is compared with the contract data after the input. The falsification of the data is detected to secure the originality of the contract data. In addition, the electronic signature of each contractor is verified based on the contract data after the contractor's input, and the contractor (filler) is verified. As a result, the originality of the contractor data and the confirmation of the entry person can be simultaneously performed.

When the contract data is stored in the contract information DB 13 for the purpose of detecting tampering of the contract data stored in the contract information DB 13 of the server 10, a digital signature on the server side is attached to the contract data. When extracting the contract data from the information DB 13, the server application 14 may be configured to perform verification using the electronic signature on the server side. This makes it possible to detect falsification of the contract data in the server 10. [2] Second Contract Information Verification Method Next, a second contract information verification method will be described. In the second method, the above “confirmation of the originality of contract data” and “verification of contractor (entry)” are both performed using an electronic signature. In this method, it is not necessary to save the contract data before the contractor's input in the contract information DB 13, so that the contract information DB 13 without a history management function can be used. (1) Confirmation of Originality and Verification of Electronic Signature In this method, signature pattern 2 shown in FIG. 3B is basically used. The signature pattern 2 is a server for a specific field and an electronic form in the contract content data,
This is a method by which the Party A and Party B give an electronic signature.

As shown in FIG. 4B, the server 10
A digital signature on the server side is attached to the original contract data and transmitted to the client terminal 20 of the customer. At this time, the electronic signature of the server is the contract content field. Next, Ko enters his information and gives an electronic signature. At this time, the client module 22 of the first client terminal 20 creates the first electronic signature for the first contractor field. Thereby, the contract data after the input of the first party, the electronic signature of the server and the first electronic signature of the first party are returned to the server 10 and further transmitted to the client terminal 20 of the second party. When the user makes an input and inputs an instruction to give an electronic signature to the client terminal 20, the client module 22 creates an electronic signature for the entire contract data. Therefore, at this point, the server,
Server 1 with three electronic signatures of Party A and Party B added
Sent to 0.

Now, the server application 14 of the server 10
First, the server signature is verified. Since the server signature is created only for the contract content field, it can be correctly decrypted even after the input by Party A and Party B if there is no tampering in the contract content field. That is, by verifying the server signature, it is possible to detect falsification of the contract contents.

If it is determined by the verification of the server signature that there is no falsification of the contract contents, the server application 14 verifies the electronic signature of the licensee. Since the electronic signature of Party A is created for the first contractor field, correct verification can be performed by extracting only the first contractor field from the contract data and verifying it even after inputting by the second party. it can. In this way, if the verification of the electronic signature of the party A succeeds, it can be confirmed that the person who filled out the first contractor field is indeed the party himself. Next, the server application 14 verifies the electronic signature of the second party. Since your electronic signature is created for the entire contract data, the server application 14 verifies your electronic signature using the contract data (after you and your input) received from your client terminal 20. . If the verification is successful,
It can be confirmed that the person who fills in the second contractor field is the second person. (2) Processing Flow Next, the flow of the second contract information verification processing will be described with reference to FIG. First, contract data (original data) is created in the server 10 based on the contract content data and the electronic form, a digital signature of the server is attached to the contract data (step S40), and the contract is stored in the contract information DB 13 (step S42). Next, the server 10 transmits the contract data to the client terminal 20 of the client A (step S4).
4). First party inputs his / her name and address, attaches an electronic signature to the contract data after input, and sends it to server 10 (step S46). At this time, when the customer instructs to give an electronic signature on the client terminal 20, the client module 22 creates a digital signature for the first contractor field (entry column of the customer) in the contract data. Server 1
No. 0 saves the contract data and the digital signature of the party received from the client terminal 20 of the party A in the contract information DB 13 (step S50).

Next, the server 10 transmits the contract data with the signature of the server and the instep A to the client terminal 20 of the customer.
(Step S52). The second party inputs his / her name and address in the second contractor field, and inputs an instruction to give an electronic signature. Thereby, the client module 2
2 creates an electronic signature for the contract data after the input of the second party (step S54), and returns it to the server 10. Upon receiving the data from the client terminal 20 of the server 10, the server 10 verifies the signature in the order of the electronic signature of the server, the electronic signature of the first party, and the electronic signature of the second party, as described above. Successful verification of all signatures indicates that the originality of the contract has been assured and that both Party A and Party B have entered the required information into the contract data. Therefore, the server application 14 stores the contract data and their electronic signatures in the contract information DB 13 (step S58).

In the above example, the subject of the electronic signature of the server is the contract content field, and the subject of the electronic signature of the first party is the first.
Although the contractor field and the target of the electronic signature of the customer are the entire contract data, in the second contract information verification method, if the target of the electronic signature of the party does not include the input field of the customer, However, other embodiments may be used. By doing so, the portion to be subjected to the electronic signature of the licensee is not changed by the input of the licensee, so that the digital signature of the licensee can be correctly verified. Therefore, for example, the target of the electronic signature of Party A can be the contract content field + the first contractor field. Further, the subject of the electronic signature of the second party may be only the second contractor field, the second contractor field + the contract content field, or the second contractor field + the first contractor field.

The same processing can be applied to a case where there are three or more contractors. That is, if it is ensured that an electronic signature of a certain contractor is created for a signature target portion that does not include a contractor field for a contractor who fills in and signs after the contractor, the electronic signature of each contractor can be obtained. The signature can be verified correctly.

As in the case of the first contract information verification method, when the contract data is stored in the contract information DB 13, a digital signature is attached on the server side to falsify the contract data in the server. Can be detected. In this case, the electronic signature may use the secret key used in step S40 or a different secret key. (3) Modification Next, a case where another signature pattern is used in the second contract information verification method will be described. In the above example, an electronic signature including the electronic form itself is given as the signature pattern 2 shown in FIG. However, the same electronic form is often used for the same type of contract, and the electronic form itself is included in the contract data and the contract information DB 1
3, the amount of contract data to be stored becomes large. 3 (C) and FIG.
As shown in (C), instead of the electronic form itself, link information for specifying the electronic form (for example, the ID of the electronic form) is included in the contract data. That is, instead of the contract content data and the electronic form of the signature pattern 2,
An electronic signature is created using the contract content data and the corresponding electronic form linking information. As a result, each contract data does not include the electronic form itself, so that the capacity of each contract data can be reduced, and the capacity of the contract information DB 13 can be used efficiently. Specifically, when the client module of the client terminal 20 applies the electronic signature, the electronic module may be configured to use the linking information of the electronic form instead of the electronic form itself as the target of the electronic signature.

When the signature pattern 3 is used,
If the subject of the electronic signature of Party A does not include the input range of Party B, the subject of the electronic signature of Party A and Party B can be determined in various forms.

In the above example, signature pattern 1 is used in the first contract information verification method, and signature pattern 2 or 3 is used in the second contract information verification method. It is also possible to use signature patterns 2 and 3 in the verification method.

Further, when the client terminal receives the contract data from the server, it is also possible to first verify the electronic signature attached to the contract data at that time. This ensures that the contractor inputs and signs the correct contract content data. This can be realized by including an electronic signature verification function in the client module 22. Specifically, the electronic signature of the server can be verified by the client terminal of the licensee, and the electronic signatures of the server and the licensee can be verified by the client terminal of the licensee.

In the above example, a case of a contract between two parties is described for convenience of explanation, but a contract procedure between three or more parties can be performed by similar processing.

[0062]

As described above, according to the present invention,
By securing the originality of the contract contents and authenticating the contractor by electronic signature, the online contract procedure can be executed safely.

[Brief description of the drawings]

FIG. 1 shows an outline of an online contract process by the system of the present invention.

FIG. 2 is a schematic configuration diagram of an online contract system of the present invention.

FIG. 3 shows a signature pattern that can be used in the online contract procedure of the present invention.

FIG. 4 shows a method of digital signature in signature patterns 1 and 2.

FIG. 5 shows an electronic signature method in signature pattern 3.

FIG. 6 is a flowchart showing a first contract information verification process.

FIG. 7 is a flowchart showing a second contract information verification process.

[Explanation of symbols]

 1 Internet 10 Server 11 Form DB 12 Master DB 13 Contract Information DB 20 Client Terminal

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification FI FI Theme Court ゛ (Reference) H04L 9/32 H04L 9/00 673Z (72) Inventor Sanae Sakamoto 1-1-1, Ichigaya-Kagacho, Shinjuku-ku, Tokyo No. 1 F-term in Dai Nippon Printing Co., Ltd. (reference) 5J104 AA09 LA06 PA07

Claims (14)

[Claims] Claims: 1. A server device of an online contract system connected to a client terminal of a contractor through a network, wherein a database for storing contract information and contract data, wherein the contractor has not yet been input. Transmitting means for storing the contract data before input in the database and transmitting the contract data to the client terminal of the contractor; and the contract data after the contractor inputs the necessary items and attaches the electronic signature of the contractor. Receiving means for receiving from the client terminal, comparing means for comparing agreement data before input and agreement data after input to detect agreement of agreement data, and verification means for verifying the electronic signature of the contractor For all contractors, the comparing means detects agreement of the contract data, and the verifying means correctly detects the electronic signature. And a means for establishing a contract when the certificate is proved. 2. The contract data includes a contract content field and a plurality of contractor input fields, and the comparing means includes a contract content field in the pre-input contract data and a contract content in the post-input contract data. The server device according to claim 1, wherein the content field is compared. 3. The server according to claim 1, further comprising: means for giving an electronic signature of a server when contract data is stored in a database; and means for verifying the electronic signature of said server when extracting contract data from the database. A server device according to item 1. 4. The apparatus according to claim 1, further comprising a log recording unit configured to store a log of a process performed by the transmission unit, the reception unit, the comparison unit, the verification unit, and the establishment unit in the database. The server device according to the above. 5. An on-line contract system server device connected to a client terminal of a contractor through a network, wherein: a database for storing contract information; and contract data including a contract content field and a plurality of contractor input fields. Transmitting means for creating a digital signature of the server for the contract content field, adding the digital signature to the contract data, and transmitting the contract data to the contractor's client terminal as pre-input contract data in a state where the contractor has not been input yet; Receiving means for receiving the contract data from the client terminal after input by the contractor by inputting the necessary information and attaching the contractor's electronic signature; and upon receiving the contract data after input from all the contractors After inputting the data of the fields subject to the electronic signature of the server and each contractor, Extracted from the writing data, the server device comprising: a verification means for verifying the electronic signature, and a hold means for establishing a contract when the verification means has correctly validate all electronic signatures. 6. The server device according to claim 5, further comprising a log recording unit that stores a log of a process performed by the transmission unit, the reception unit, the verification unit, and the establishment unit in the database. 7. The server device according to claim 1, wherein said contract data includes data of a corresponding electronic form. 8. The server device according to claim 1, wherein said contract data includes identification information of a corresponding electronic form. 9. A program executed in a server device of an online contract system connected to a client terminal of a contractor through a network, the program being executed by the server device, wherein contract data is input and the contractor's input is not yet executed. Transmission means for saving the contract data before input in the database and sending it to the client terminal of the contractor, entering the necessary items and signing the contract with the electronic signature of the contractor after entering the contract Receiving means for receiving agreement data from the client terminal; comparing means for comparing agreement data before input with agreement data after input to detect agreement of agreement data; verification means for verifying the electronic signature of the contractor For all contractors, the comparing means detects agreement of the contract data, and the verifying means correctly detects the electronic signature. If made, establishment means that establishes a contract with the program for operation as a. 10. A program executed in a server device of an online contract system connected to a client terminal of a contractor through a network, the program comprising: a contract document including a contract content field and a plurality of contractor input fields. For the data, an electronic signature of the server is created for the contract content field, attached to the contract data, and transmitted to the contractor's client terminal as pre-input contract data in a state where the contractor has not been input yet. Receiving means for receiving the contract data from the client terminal after the contractor inputs the necessary items and inputs the contractor's electronic signature, and receives the contract data after inputting from all the contractors At that point, the server and the data of the fields subject to the electronic signature of each contractor are A program that operates as verification means that extracts from the contract data after input and verifies each electronic signature, and verification means that establishes a contract when the verification means successfully verifies all electronic signatures. 11. A program executed on a client terminal of a contractor connected to a server device of an online contract system through a network, wherein the contract data including a contract content field and a plurality of contractor input fields is stored in the server. Means for receiving and displaying from the device; means for receiving contractor input data for the contractor input field; means for including the data in one of the contractor input fields; receiving an instruction for giving an electronic signature from the contractor; Determining means for determining a part to be signed so as not to include an unfilled participant input field among the fields included in the above, a digital signature of the contractor is created for the part to be signed, and attached to the contract data Transmitting the contract data to which the electronic signature has been added to the server device. Stage, a program for operating the client terminal. 12. The program according to claim 11, wherein the determination unit determines a contractor input field and / or a contract content field corresponding to input data received from the contractor as the signature target part. 13. The program according to claim 9, wherein the contract data includes data of a corresponding electronic form. 14. The program according to claim 9, wherein the contract data includes identification information of a corresponding electronic form.