JP2003198538A - Verifying method for authentic fact - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a verifying method for an authentic fact in which validity of an electronic signature can be permanently verified on the side of a receiving means without restricted by the validity of an authentication certificate of a preparation means and the verification can be performed through a common processing procedure independent of the authentic fact. <P>SOLUTION: The authentic fact is verified by a step (1) for preparing a document A of an electronic document 3 with an electronic signature 31 including an authentication certificate 311 of preparer by a preparation means 1, a step (2) for requesting the authentication of the fact on the document A to an authentication station 5 by the preparation means 1, a step (3) for issuing a digital receipt 4 as an electronic document with an electronic signature 41 including an authentication certificate 411 of the authentication station 5 describing an authentic fact 42 from the authentication station 5 to the preparation means 1 and sending this receipt to the preparation means 1, a step (4) for preparing a document B adding and integrating the digital receipt 4 with the document A by the preparation means 1, a step (5) for sending the document B to a receiving means 2 by the preparation means 1, steps (6) and (7) for verifying the validity of the digital receipt 4 by the receiving means 2 while using a PKI 6 when it is within the validity of the authentication certificate 411 of the authentication station 5, and steps (8) and (9) for verifying the validity while using the authentication station 5 when it is out of the validity. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic document with a digital signature created by a creating means, in which the validity of the electronic signature cannot be confirmed after the expiration date of the authentication certificate of the creating means that has made the digital signature. The present invention relates to a method of verifying notarized facts recorded in an electronic signature that enables prevention and permanent verification.

[0002]

2. Description of the Related Art As a conventional technique, when the creating means creates an electronic document with an electronic signature, and the electronic signature and the authentication certificate used when the creating means makes the electronic signature are attached to the document, , The means of receiving electronic documents with electronic signature is
There is a method for verifying the validity of the electronic signature for each document and the authentication certificate used when the creating means makes the electronic signature.

[0003]

However, conventionally, even if the receiving means tries to verify the authentication certificate used for the signature for signature verification, only the information at the present time is not obtained and it is effective at the time of the signature. There is no way to know if there was. Therefore, there is a problem that the authentication certificate cannot be verified after the expiration date.

The present invention has been devised in view of the above-mentioned problems, and it is possible for the receiving means side to verify the fact of the signature without relying on the authentication certificate and issued by the notary office. It is not necessary to contact the Notarization Bureau to verify the notarized facts during the validity period of the certification certificate, and the notarized facts may be verified by contacting the Notarization Bureau if the certification certificate issued by the Notarization Bureau expires. The purpose is to provide a possible notarization method.

[0005]

In order to solve the above-mentioned problems, in the method of verifying notarized facts according to the invention of claim 1, the creation means 1 is an electronic device with an electronic signature 31 including an authentication certificate 311 of the creator. Step (1) of creating document A of document 3, creating means 1
Requesting the notarization of the facts concerning Document A from the notarization authority 5 (2), the notarization authority 5 is an electronic document with an electronic signature 41 including the authentication certificate 411 of the notarization authority 5 describing the notarization fact 42. Step (3) of issuing the digital receipt 4 to the creating means 1 and sending it to the creating means 1, creating means 1
The step (4) of adding the digital receipt 4 to the document A to create an integrated document B, the creating means 1 sending the document B to the receiving means 2 (5), and the receiving means 2 , If the validity of the digital receipt 4 is within the validity period of the certification certificate 411 of the notary authority 5, steps (6) (7) for verifying using the PKI (public key infrastructure) 6, For example, it is characterized in that the notarized fact is verified by the steps (8) and (9) of verifying using the notary authority 5.

Further, in the method of verifying notarized facts according to the invention of claim 2, the creating means 1 creates the document A of the electronic document 3 with the electronic signature 31 including the authentication certificate 311 of the creator.
(1), the creating means 1 requests the notarization of the facts concerning the document A from the notarization authority 5 (2), the notarization authority 5 activates the notarization fact 4
An electronic signature 41 including the certification certificate 411 of the notary authority 5 describing 2
A step of issuing a digital receipt 4 which is an attached electronic document to the creating means 1 and sending it to the creating means 1
(3) The recording means 7 in which the preparation means 1 can refer to the digital receipt 4 issued by the notary authority 5 by the reception means 2.
Step (4), the recording means 7 notifies the creating means of the URL 32 by which the stored digital receipt 4 can be specified, and the creating means 1 adds this URL 32 to the document A and integrates it. Step (6) of creating the document C, the creating means 1 sends the document C to the receiving means 2 (7), the receiving means 2 is included in the document C, and the creating means 1 is included in the document A. In step (8) of sending the URL 32 added to the recording means 7, the receiving means 2
Step 9 of taking out the digital receipt 4 indicated by the URL 32 from the recording means 7 (9). If the receiving means 2 has the validity of the digital receipt 4 within the validity period of the certification certificate 411 of the notary authority 5, PKI ( Public key infrastructure 6 is used to verify (10) (11), and if it is outside the valid period, it is verified using the notary authority 5 (12) (13). It has a feature.

Further, in the method of verifying notarized facts according to the invention of claim 3, the creating means 1 creates the document A of the electronic document 3 with the electronic signature 31 including the authentication certificate 311 of the creator.
(1), the preparation means 1 requests the notarization of the facts concerning the document A from the notarization office 5 (2), the notarization office 5 makes the notarized facts
Electronic signature 4 including the certification certificate 411 of the notary authority 5 that describes 42
Step (3) of issuing a digital receipt 4 which is an electronic document with 1 and recording it in the recording means 7 which can be referred to by the receiving means 2, the recording means 7 can specify the digital receipt 4 in the notary bureau 5. Step of notifying URL 32 (4)
A step (5) in which the notary authority 5 notifies the creating means 1 of the URL 32 that can identify the stored digital receipt 4.
The creating means 1 adds the URL 32 to the document A to create an integrated document C (6), creating means 1
Sending the document C to the receiving means 2 (7),
Receiving means 2 is included in document C, creating means 1 is in document A
Step (8) for sending the URL 32 added to the recording means 7 to the receiving means 2 from the recording means 7
Step of taking out the digital receipt 4 indicated by 32
(9) Steps (10) and (11) in which the receiving means 2 verifies the validity of the digital receipt 4 using PKI (public key infrastructure) 6 if it is within the validity period of the certification certificate of the notary authority. If it is outside the valid period, the step of verifying using the notary authority 5 (12) (1
The feature is that the notarized fact is verified by 3) and.

[0008]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS A first embodiment of a notarized fact verification method according to the present invention will be described with reference to FIG. The verification of the notarized fact of the first embodiment is performed by the procedure (step) written in parentheses. (1) is a step in which the creating means 1 creates the document A of the electronic document 3 with the electronic signature 31 including the authentication certificate 311 of the creator who is going to send to the receiving means 2. The creation means 1
Indicates the receiving side, and the receiving means 2 indicates the receiving side, for example. In (2), the creating means 1 sends the document A to the notary bureau 5
Is a step of requesting the date and time when the signed document, which is the notarization of the fact, has been created. In (3), the notarization office 5 certifies the notarization fact requested by the preparation means 1, and the electronic signature 41 is issued by the notarization authority 5 and includes the authentication certificate 411 of the notarization authority 5 in which notarization fact 42 is described Issue a digital receipt 4 which is an electronic document to the creating means 1,
This is the step of sending this to the creating means 1. (4) is
The digital receipt 4 issued by the notary authority 5 to the document A of the electronic document 3 with the electronic signature 31 created by the creating means 1
Is a step of creating a document B in which this is integrated by adding. In (5), the creating unit 1 receives the document B by the receiving unit 2
It is a step to send to. (6) (7), the receiving means 2,
If it is within the valid period of the certification certificate 411 of the notary authority 5, the digital signature of the digital receipt 4 included in the document B is
The verification is performed using the KI (public key infrastructure) 6, and only the verification result by the PKI 6 is the verification of the notarized fact. (8) (9)
If the authentication certificate 411 of the notary authority 5 is out of the valid period, inquire at the notary authority 5 to verify the validity of the digital receipt 4 included in the document B. is there. In the authentication certificate 311 of the creator and the authentication certificate 411 of the notary authority 5 according to the present invention, an expiration date including a start date and an end date is set. Since the validity of each authentication certificate 311, 411 is guaranteed only within this expiration date, confirmation of matters related to certificates such as electronic signatures is performed differently within the expiration date and after the end date and time. Be seen. If the certification certificate 411 of the notary authority 5 is within the valid period, the verification is completed in steps (6) and (7). On the other hand, Notary Bureau 5
If the authentication certificate 411 is outside the valid period, the steps (6) and (7) are not verified, but the steps (8) and (9) are performed.
Therefore, one of the steps (6) (7) and (8) (9) is automatically selected and operated to perform verification. The verification step in the case of being within the valid period and the verification step in the case of being outside the valid period are described in Examples 2 and 3 described later.
The same is true for. The electronic document 3 is a document recorded as digital information on an electronic recording medium. The electronic signature 31 is data added to guarantee the validity of electronic information such as messages and documents,
This is a technology that guarantees the integrity of electronic documents (messages) by using the private key of the public key cryptosystem, and the electronic document is signed with the private key and the signature result is attached. The person who receives the electronic document can check whether the electronic document has been tampered with by using the public key paired with the private key to return the signature data to the electronic document. The notary authority 5 is of course not limited to an institution that aims to perform notarization that performs the same function as the notary system, but is not necessarily limited to this, and is not directly regulated by the law. , Institutions that perform notarization by specific organizations or groups are also included. Further, the digital receipt 4
Is a digital document that describes the facts certified by the notary authority 5 and is digitally signed by the notary authority.
Issue an electronic document that states the facts to prove,
In addition, it uses a private key of Notary Office 5 to make an electronic signature,
This is a general work of creating an electronic document with an electronic signature. Further, the description items of the fact to be proved, which are the electronic documents to be signed, vary depending on the contents of the fact to be confirmed and the proof means.
In addition, the PKI (Public Key Infrastructure, Public Key Infrastmc
ture) 6 is an authentication system that uses a digital signature based on public key cryptography. The PKI 6 is a broad concept that refers to the overall infrastructure required to realize an application using the public key cryptosystem. In addition, signature verification is performed from the PKI (public key infrastructure) 6 by the signer, for example,
The public key of the notary authority 5 is acquired, and the receiving means uses the public key to verify the signature, and the PKI 6 does not perform all the actions necessary for verifying the certificate.

Next, a second embodiment of the method of verifying notarized facts according to the present invention will be described with reference to FIG. The second embodiment is a procedure of adding only the URL 32 of the digital receipt 4, and the disclosure of the digital receipt 4 is made by the creating means 1. Instead of sending the digital receipt 4 itself directly, it can be referred to a place where it can be referred to. This is a method of verifying notarized facts, which is stored and notified of only the URL 32. In the second embodiment, the steps (1) to (3) have the same configuration as the first embodiment, so the description thereof will be omitted, but the above (1) to (3)
And the steps (4) to (13) below. (4) is a step in which the creating means 1 records the digital receipt 4 issued by the notary authority 5 in the recording means 7 of another server which the receiving means 2 can refer to. Further, (5) is a step of notifying the creating means of the URL 32 that can specify the digital receipt 4 stored in the recording means 7. Step (6) is a step in which the creating unit 1 adds the URL 32 to the document A to create an integrated document C. Further, (7) is a step in which the creating means 1 sends the document C to the receiving means 2. (8)
Is a step in which the receiving means 2 sends the URL 32 included in the document C and added to the document A by the creating means 1 to the recording means 7. This is a step of taking out the digital receipt 4 indicated by the URL 32. (10) (11) means that if the receiving means 2 is within the valid period of the certification certificate of the notary authority 5, the document B
The digital signature of the digital receipt 4 included in
This is a step of verifying using (public key infrastructure) 6 and verifying notarized facts only by the result of verification by PKI6. (12) (13) verifies the notarized fact by inquiring the notary authority about the validity of the digital receipt 4 included in the document B and verifying it if it is outside the valid period of the certification certificate of the notary authority. It is a step to do. The notarized facts are verified through the above steps. The URL (Uniform Resource)
Identifiers) is a type of addressing method for identifying an object on the Internet, and includes URL etc. used for identifying a resource on the Web.
This URL generally has a much smaller amount of data than the digital receipt 4 itself. As described above, in the second embodiment, the creating means 1 stores the digital receipt 4 in the recording means 7.

A third embodiment of the notarization fact verification method according to the present invention will be described with reference to FIG. In the third embodiment, only the URL 32 of the digital receipt 4 is added, and the digital receipt 4 is disclosed by the notary authority 5. In the second embodiment, the creating means stores the digital receipt 4 in the recording means.
On the other hand, in the third embodiment, the notary bureau 5 itself stores the storage and reference information (U
RL32) providing means. In the third embodiment, the procedure (steps) (1) to (2) has the same configuration as that of the first embodiment, so the description thereof will be omitted, but the procedure (steps) (1) to (2) , Steps (3) to (13) below
It is composed of. In (3), the notary authority 5 issues the digital receipt 4 which is the electronic document with the electronic signature 41 including the authentication certificate 411 of the notary authority 5 in which the notarized fact 42 is described, and the receiving means 2 can refer to this. This is a step of recording in the recording means 7. (4) is a step in which the recording means 7 notifies the notary authority 5 of the URL 32 that can identify the digital receipt 4. Step (5) is a step in which the notary authority 5 notifies the creating means 1 of the URL 32 that can specify the stored digital receipt 4. (6) is a step in which the creating means 1 adds the URL 32 to the document A to create an integrated document C. Further, (7) is a step in which the creating means 1 sends the document C to the receiving means 2. (8) is a step in which the receiving means 2 sends the URL 32 included in the document C and added by the creating means 1 to the document A to the recording means 7. Further, (9) is a step in which the receiving means 2 takes out the digital receipt 4 indicated by the URL 32 from the recording means 7. (10) and (11) are steps in which the receiving means 2 verifies the validity of the digital receipt 4 using PKI (public key infrastructure) 6 if it is within the validity period of the certification certificate of the notary authority. Further, (12) and (13) are steps in which the receiving means 2 verifies the validity of the digital receipt 4 by using the notary certification authority 5 if it is outside the validity period of the certification certificate of the notary certification authority. Then, the notarized facts are verified through the above steps.

[0011]

As described above, the present invention has the following effects. (1) According to the invention of claim 1, the creating means adds a digital receipt to the electronic document with the electronic signature to create an integrated document, and sends this document to the receiving means. The receiving means is configured to verify the digital signature of the digital receipt using PKI (Public Key Infrastructure) or a public authority regardless of the expiration date of the authentication certificate of the creating means that has performed the electronic signature. When the means verifies the electronic signature, the expiration date of the authentication certificate of the creating means can be ignored and the permanent verification can be performed. In addition, the verification process can be performed by a common processing procedure that does not depend on the type of notarized fact. Further, it is possible to reduce the processing amount required for verification of the electronic document with the electronic signature in the receiving means. Further, it is possible to realize verification of notarized facts of different types by a unified procedure.

(2) According to the invention of claim 2, the digital receipt itself is not sent directly, but the digital receipt is stored in a referable place and only the URL is notified. In general, since the URL has a much smaller data amount than the digital receipt itself, the receiving means U
Electronic document with RL added (see Document C in Figure 2)
The cost of receiving and storing the electronic document is the electronic document with a digital signature (see Document A in FIG. 1) in the invention of claim 1 and a digital receipt (see Document B in FIG. 1). It can be reduced compared to the processing procedure to be handled.

(3) According to the invention of claim 3, since the notary office itself directly records the digital receipt in the recording means, and the receiving means directly refers to the recording means, the creating means has the electronic signature. When creating and sending an electronic document (see Document C in Figure 3) by adding a URL to the electronic document,
Only the electronic document with a digital signature (see Document A in FIG. 2) and the URL need be handled, and the cost of the corresponding processing in the creating means is the processing procedure for handling the digital receipt itself in the invention of claim 1 and the invention of claim 2. Can be reduced compared to.

[Brief description of drawings]

FIG. 1 is a schematic diagram of a first embodiment of the present invention.

FIG. 2 is a schematic diagram of a second embodiment of the present invention.

FIG. 3 is a schematic diagram of a third embodiment of the present invention.

[Explanation of symbols]

1 making means 2 Receiving means 3 electronic documents 31 Digital signature of creator 32 URL 311 Author's authentication certificate 4 Digital receipt 41 Electronic signature of notary office 42 Notarized facts 411 Certificate of Certification of Notary Office 5 Notary Office 6 PKI (Public Key Infrastructure) 7 Recording means A, B, C documents

Claims (3)

[Claims] 1. A step (1) in which the creating means creates a document of an electronic document with an electronic signature including an authentication certificate of the creator, and a step in which the creating means requests notarization of facts regarding the document from a notary office ( 2), a step in which the notary authority issues a digital receipt, which is an electronic document with an electronic signature including the certification certificate of the notary authority stating the notarized facts, to the creating means, and sends it to the creating means (3), Step (4) in which the creating unit adds a digital receipt to the document A to create an integrated document, and Step in which the creating unit sends the document to the receiving unit
(5), Step of verifying validity of digital receipt by PKI (Public Key Infrastructure) if the validity of digital receipt is within the validity period of the certification authority certificate (6) (7), outside the validity period If not, the notarization fact verification method is characterized in that the notarization fact is verified by the steps (8) and (9) of verifying using the notary authority. 2. A step (1) in which the creating means creates a document of an electronic document with an electronic signature including the creator's authentication certificate.
A step of requesting notarization of facts relating to the document from the notifying authority by the preparing means (2), the notarization authority issuing a digital receipt which is an electronic document with an electronic signature including an authentication certificate of the notarization authority stating the notarization facts To the creating means, and sending it to the creating means (3); the creating means records the digital receipt issued by the notary bureau in a recording means that can be referred to by the receiving means (4), The recording means notifies the creating means of a URL for identifying the stored digital receipt (5), the creating means adds the URL to the document to create an integrated document (6), The means sends the document to the receiving means (7)
The receiving means sends the URL included in the document and added by the creating means to the document to the recording means (8), the receiving means takes out the digital receipt indicated by the URL from the recording means. (9), The receiving means verifies the validity of the digital receipt using PKI (Public Key Infrastructure) if it is within the validity period of the certification certificate of the Notary Authority (10) (11), outside the validity period If not, the notarization fact verification method is characterized in that the notarization fact is verified by the steps (12) and (13) of verifying using the notarization office. 3. A step (1) in which the creating means creates a document of an electronic document with a digital signature including an authentication certificate of the creator.
A step in which the preparing means requests the notarization of the facts relating to the document from the notary office (2), the notary authority issues a digital receipt which is an electronic document with an electronic signature including the notarization certificate of the notary authority. Then, a step (3) of recording this in a recording means that can be referred to by the receiving means, a step (4) in which the recording means notifies the notary authority of the URL that can specify the digital receipt, and a digital certificate stored by the notary authority is stored. UR that can specify receipt
Step (5) of notifying L to the creating means, Step of creating the document by adding the URL to the document (6), Step of sending the document to the receiving means (7)
The receiving means sends the URL included in the document added by the creating means to the document to the recording means (8), the receiving means extracts the digital receipt indicated by the URL from the recording means. (9), The receiving means verifies the validity of the digital receipt using PKI (Public Key Infrastructure) if it is within the validity period of the certification certificate of the Notary Authority (10) (11), outside the validity period If not, the notarization fact verification method is characterized in that the notarization fact is verified by the steps (12) and (13) of verifying using the notarization office.