JP2003318885A - Electronic signature device, electronic signature checking device and methods for these devices - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an electronic signature device, an electronic signature checking device and their methods capable of utilizing digital signature also for a handwritten document and solving problems such as illegal sealing due to the copying of a seal impression, labor of checking operation of manual sealing and imprecision of manual sealing as compared with signature using seals. <P>SOLUTION: A signature data preparation part 504 inputs picture data from a data preparation part 501, prepares hash data and prepares signature data by encrypting the hash data by using prescribed key information. A signature file preparation part 510 prepares a signature file including the picture data and the signature data and a signature file management part 511 stores the prepared signature file in a prescribed file storage means to acquire signature file specification information. A merging part 506 prepares the picture data forming the signature file specification information. <P>COPYRIGHT: (C)2004,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic signature device, an electronic signature confirmation device, and methods for suitably implementing an electronic signature.

[0002]

2. Description of the Related Art Since April 2001, the electronic signature law has been implemented in Japan. Along with this, the contract by electronic signature was considered to be formal by law.

In general, a digital signature is created by creating hash data from digital data to be signed using a one-way hash function and encrypting the hash data using the "secret key" of the signer. (“Cryptography and Information Security”, Shigeo Tsujii, 1990, Shokoido, 127-1.
(See paragraph 47).

To confirm the electronic signature, hash data is created from the digital data to be signed using the same hash function, and this hash data and the created signature data are decrypted by the "public key" of the signer. It is confirmed by whether the data matches.

Although the digitization of documents has progressed in recent years,
The use of paper documents is still used together. Therefore,
For paper documents, it is more convenient to be able to digitally sign in addition to the conventional signatures and seals.

[0006]

However, the conventional digital signature is for digital data,
When the electronic signature target is analog information such as a paper document, there is a problem that the electronic signature cannot be made.

The present invention has been made in consideration of such a situation, and a digital signature can be used even for a handwritten document, and imitation of a seal stamp is compared with a signature using a seal stamp. It is an object of the present invention to provide an electronic signature device, an electronic signature confirmation device, and a method thereof that can solve the improperness of the marking due to, the labor and inaccuracy of the manual confirmation work of the marking.

[0008]

In order to solve the above problems, the present invention provides an image input means for inputting image data,
Signature data creating means for creating hash data from the input image data, and creating signature data by encrypting the hash data using predetermined key information,
It is characterized by comprising a signature file creating means for creating a signature file including the image data and the signature data.

According to the present invention, image data is input,
Hash data is created from the input image data, signature data is created by encrypting the hash data using predetermined key information, and a signature file including the image data and the signature data is created. Compared with a signature using a seal stamp, it is possible to solve improper stamping due to imitation of a seal stamp, labor and inaccuracy of manual confirmation work of the seal stamp, and the like.

Further, according to the present invention, the image input means for inputting the image data and the hash data are created from the input image data, and the hash data is encrypted by using the predetermined key information to obtain the signature data. Signature data creating means for creating, signature file creating means for creating a signature file containing the image data and the signature data, and a signature indicating the file storage location for storing the created signature file in a predetermined file storing means. A signature file management means for acquiring file designation information and an image forming means for creating image data in which the signature file designation information is formed on the image data are provided.

According to the present invention, image data is input,
Hash data is created from the input image data, signature data is created by encrypting the hash data using predetermined key information, and a signature file including the image data and the signature data is created and created. The generated signature file is stored in a predetermined file storage means, signature file designation information indicating the file storage position is acquired, and image data in which the signature file designation information is formed on the image data is created. Digital signatures can also be used for documents.

Further, the electronic signature device according to the present invention is characterized in that it can be connected to the file storage means via a network.

Furthermore, the electronic signature apparatus according to the present invention is characterized by further comprising recording means for recording the created signature file in a portable recording medium.

Furthermore, the electronic signature apparatus according to the present invention is characterized in that the image input means is an image reading means for reading an image formed on a medium and inputting image data.

Furthermore, in the electronic signature apparatus according to the present invention, the signature data creating means creates a plurality of signature data, and the signature file creating means creates a signature file including a plurality of signature data. Characterize.

Furthermore, the present invention is an electronic signature confirmation apparatus comprising file storage means for storing a signature file created by the electronic signature apparatus, wherein the input for inputting the signature file designation information and predetermined key information. Means, search means for searching the signature file from the file storage means based on the signature file designation information, hash data created from the image data included in the searched signature file, and the key information using the key data. And a determination unit that determines whether or not the signature data included in the signature file matches the decrypted data.

Furthermore, the electronic signature confirmation apparatus according to the present invention is characterized in that it can be connected to the electronic signature apparatus via a network.

[0018]

BEST MODE FOR CARRYING OUT THE INVENTION An electronic signature apparatus, an electronic signature confirmation apparatus, and their methods according to an embodiment of the present invention will be described below with reference to the drawings.

<First Embodiment> FIG. 1 shows a first embodiment of the present invention.
It is a block diagram for explaining the configuration of the electronic signature device according to the embodiment of. As shown in FIG. 1, the electronic signature device according to the first embodiment includes a data creation unit 102, a signature data creation unit 104, a signature file creation unit 110, a signature file storage unit 108, and an output unit 106. .

First, the data creating unit 102 is realized by using an image scanner which reads an input source 101 which is a paper document and converts it into data 103 which is digital image data. When the data 103 is input, the signature data creation unit 104 also receives the corresponding signature data 1
Create 05. The details will be described later.

Further, the signature file creation section 110 uses the data 103 and the signature data 105 to convert the signature file 109 into a signature file 109.
To create. The data 103, the signature data 105, and the signature file 109 are stored in the signature file storage unit 108. Further, the created signature file 109 is output from the output unit 106 as the medium 107. For example, when the medium 107 is an MO disc, the output unit 10
6 is realized by MO drive, and the signature file is M
Will be stored on the O disk.

FIG. 2 is a diagram for explaining the hardware configuration of the digital signature apparatus according to the first embodiment of the present invention. In FIG. 2, reference numeral 201 is a CPU for controlling each component shown below, reference numeral 202 is a ROM, reference numeral 2
03 is a RAM, reference numeral 204 is an I / O port, reference numeral 206
Is a SCSI controller, reference numeral 209 is an IDE controller, reference numeral 211 is a network adapter, reference numeral 213
Indicates a USB controller, which are connected to each other via a bus 212.

The I / O port 204 is connected to the printer 20.
5 is connected. In addition, the SCSI controller 206
An image scanner 207 is connected to the image scanner 207, and an MO drive 208 is further connected to the image scanner 207.

A hard disk 210 is connected to the IDE controller 209. On the other hand, the network adapter 211 is connected to a LAN or the Internet and can be connected to another device or the like via the network. In addition, the USB controller 213 has an IC
The card reader 214 is connected.

The hardware configuration diagram of the electronic signature device shown in FIG. 2 may be regarded as a hardware configuration diagram when the electronic signature device is implemented by a digital copying machine, or is implemented by a personal computer. It may be regarded as a hardware configuration diagram in the case of

FIG. 3 is a flow chart for explaining the operation procedure of the digital signature apparatus according to the first embodiment of the present invention. In this embodiment, assuming the digital copying machine shown in the hardware configuration diagram of FIG.
The operation procedure will be described. In FIG. 2, the description of the operation panel, switches and switch controller of the digital copying machine is omitted, and the operations of the mouse and keyboard of the personal computer are also omitted.

First, when the user presses the start button of the digital copying machine, the paper document is read by the image scanner 207 and converted into image data (step S301). The image data read in this way is temporarily stored in the RAM 203.

Next, when the user presses the signature button on the operation panel, signature data is created using the read image data (step S302). here,
The procedure for creating signature data will be described in detail.

First, when the user presses the signature button on the operation panel, a message prompting the insertion of the IC card is displayed in the message area of the operation panel. Here, it is assumed that the signer has an IC card in which the private key of the signer, the public key corresponding to the secret key, and the name of the signer are stored in advance. This IC card includes a CPU, a RAM, a ROM for storing programs, and an input / output port. When data is received through the input / output port, it is created by encrypting the data with a secret key in the IC card. It sends back encrypted data.

In response to the displayed message, the first signer inserts his / her IC card into the IC card reader 214. When the IC card is inserted into the IC card reader 214, hash data is generated from the image data converted in step 301 by the one-way hash function, and this hash data is sent to the IC card.

Then, in the IC card, the received hash data is encrypted with the private key in the IC card, and the encrypted data is USB together with the public key data and the name data.
It is transmitted to the digital copying machine side through the controller 213. In the digital copying machine, the CPU 201 stores, in the RAM 203, the first signature information including the received encrypted data, public key data and name data. In addition, when there are a plurality of signers (for example, n persons), the second to
The nth signer signs and R
Store in AM203.

Then, after all signatures are completed, RA
The image data and the signature data stored in M203 are combined to create a signature file, and the hard disk 210
(Step S303). FIG. 4 is a schematic diagram of the format of a signature file created by the electronic signature device according to the present embodiment.

Next, when a message to the effect that a medium is inserted is displayed in the message area of the operation panel of the digital copying machine, the user inserts the MO medium into the MO drive 20.
Insert into 8. Then, the signature file created by the procedure described above is recorded on the MO media (step S30).
4). Incidentally, in the above embodiment, the data creation unit 102.
May be a digital camera instead of the image scanner 207. In this case, the image data taken by the digital camera is used as the data 103.

That is, the digital signature apparatus according to the present invention is
Image data is input from the data creation unit 102, hash data is created from the image data input in the signature data creation unit 104, and the hash data is encrypted using predetermined key information to create signature data. The signature file creating unit 110 creates a signature file including image data and signature data.

Further, the electronic signature apparatus according to the present invention is characterized in that the data creating section 102 is an image reading apparatus for reading an image formed on a medium and inputting image data.

Further, in the electronic signature device according to the present invention, the signature data creation unit 104 creates a plurality of signature data,
The signature file creation unit 110 is characterized by creating a signature file including a plurality of signature data.

<Second Embodiment> Next, an electronic signature apparatus according to a second embodiment of the present invention will be described. The system configuration of the electronic signature device according to the present embodiment is almost the same as the hardware configuration of the electronic signature device according to the first embodiment shown in FIG. 2, but the digital copying machine according to the second embodiment uses a network adapter. It is assumed that the server computer is connected to a server computer (not shown) via a LAN or the Internet via 211.

A signature file having the configuration shown in FIG. 4 is stored in the server computer, and when the signature file is designated, a Java (registered trademark) Servlet program for confirming the signature is arranged. ing.

FIG. 5 is a block diagram for explaining the configuration of the digital signature apparatus according to the second embodiment of the present invention.
As shown in FIG. 5, the digital signature device according to the second embodiment includes a data creation unit 502, a signature data creation unit 504, a signature file creation unit 510, a signature file storage unit 508,
It is composed of a signature file management unit 511 and a merge unit 506.

In the present embodiment, the data creation unit 5
02, signature data creation unit 504, signature file creation unit 5
10 and the signature file storage unit 508 are the data creation unit 102 and the signature data creation unit 10 shown in FIG. 1, respectively.
4, the same as the signature file creation unit 110 and the storage unit 108. In the present embodiment, the signature file creation unit 5
The signature file 509 created in 10 is input to the signature file management unit 511. The signature file management unit 511 transmits the created signature file 109 to the server computer through the network adapter 211, and receives, for example, a URL as the signature file designation information 512 from the server computer. Then, the merge unit 506 merges the data 503, which is image data, with the URL and outputs it as a print image 507.

FIG. 6 is a flow chart for explaining the operation procedure of the digital signature apparatus according to the second embodiment of the present invention. Hereinafter, a description will be given according to the flowchart shown in FIG. The processing of steps S601 to S603 is the first
3 described in the embodiment of FIG.
Since it is the same as the processing of S303, the description thereof will be omitted.

A signature file is created, and the signature file stored in the hard disk 210 is transmitted to the server computer via the network adapter 211. The server computer receives and stores the transmitted signature file. Then, the server computer displays the URL (Uniform Resour) that is the storage location information of the signature file.
ce locator) to a digital copying machine via a LAN or the like. As a result, the digital copying machine obtains the URL (signature file designation information) which is the storage location information of the signature file (step S604).

The merge section 50 of the digital copying machine
In step 6, the image data and the URL are merged to create new image data with signature file designation information (step S605). FIG. 7 is a schematic diagram for explaining the data before and after the processing in the merge unit 506. As shown in FIG. 7, in the merging unit 506, the data 503 that is image data and the signature file designation information 5 that is URL information.
12 and 12 are merged (merged), and an image in which URL data is merged under the image data is generated as indicated by reference numeral 701. The image data with the signature file designation information merged as described above is printed out by the printer 205.

That is, the digital signature apparatus according to the present invention is
Image data is input from the data creation unit 501, hash data is created from the image data input in the signature data creation unit 504, and the hash data is encrypted using predetermined key information to create signature data. The signature file creation unit 510 creates a signature file including image data and signature data, stores the signature file created by the signature file management unit 511 in a predetermined file storage means, and specifies a signature file indicating the file storage location. It is characterized in that the information is acquired and the merge unit 506 creates image data in which signature file designation information is formed on the image data.

The electronic signature device according to the present invention is characterized by recording the created signature file in a portable recording medium.

The document on which the image data with the signature file designation information is printed can be used as a contract, for example. The method for confirming the digital signature of this contract can be as follows.

First, the confirmer who wants to confirm the signature of the contract accesses the server computer from the personal computer connected to the LAN or the Internet using the Web browser. As a result, the Java (registered trademark) servlet program of the server computer displays the screen as shown in FIG. 8 on the Web browser of the personal computer. FIG. 8 is a diagram showing an example of a screen displayed on the Web browser of the personal computer for confirming the signature.

Next, the confirmer confirms the signature file designation information (URL of the signature file) described at the bottom of the contract.
Is input to the input unit indicated by reference numeral 801. Also, the path name of the signer's public key file is input to the input unit indicated by reference numeral 802. The public key of the signer is a public key server (W having a database that stores the public keys of a plurality of people).
eb) or select the one that was obtained from the signer. Then, the confirmer sends the send button
Click 3.

As described above, the server computer executes the confirmation of the signature as follows based on the stored and managed signature file input from the input unit 801 and the public key file input from the input unit 802. To do.

First, the server computer creates hash data from the image data of the signature file having the configuration shown in FIG. 4 based on a predetermined one-way hash function. Next, the signature information matching the public key data in the public key file input from the input unit 802 is searched, and the data obtained by decrypting the signature data of the signature information with the public key is compared with the hash data. And check for a match.

As a result, if the two data match, it is confirmed (OK), and if they do not match, it is not confirmed (NG). Then, the HTM displaying the confirmation result
Create a screen in L format and use We of a personal computer.
b Display in browser.

That is, the present invention is an electronic signature confirmation apparatus provided with a file storage device for storing a signature file created by the above-mentioned electronic signature apparatus, in which signature file designation information and predetermined key information are input, The signature file is retrieved from the file storage device based on the signature file designation information, and the hash data created from the image data contained in the retrieved signature file and the key information are used to decrypt the signature data contained in the signature file. It is characterized in that it is determined whether or not the data matches the data. Further, the electronic signature confirmation apparatus according to the present invention is characterized in that it can be connected to the aforementioned electronic signature apparatus via a network.

The signature may be confirmed as follows. That is, after the server computer receives the URL information input from the input unit 801, the signature file designated by the URL is transmitted to the personal computer.
Then, the personal computer creates hash data from the image data in the signature file by a predetermined one-way hash function. Further, the personal computer obtains the signature information including the public key data input from the input unit 802 in the signature file. Furthermore, it is checked whether the hash data and the data obtained by decrypting the signature data in the signature information with the public key data in the public key file input from the input unit 802 match. As a result, if the two data match, the confirmation is confirmed (OK), and if they do not match, a message that the confirmation cannot be obtained (NG) is displayed.

Even when the present invention is applied to a system including a plurality of devices (for example, a host computer, an interface device, a reader, a printer, etc.), an apparatus including one device (for example, a copying machine, a facsimile). Device).

Further, an object of the present invention is to supply a recording medium (or storage medium) recording a program code of software for realizing the functions of the above-described embodiments to a system or apparatus, and to supply a computer of the system or apparatus ( Alternatively, the CPU or MPU) reads and executes the program code stored in the recording medium,
It goes without saying that it will be achieved. In this case, the program code itself read from the recording medium realizes the functions of the above-described embodiments, and the recording medium recording the program code constitutes the present invention.
Further, by executing the program code read by the computer, not only the functions of the above-described embodiments are realized, but also based on the instruction of the program code,
An operating system (OS) running on the computer does some or all of the actual processing,
It goes without saying that the processing includes the case where the functions of the above-described embodiments are realized.

Further, after the program code read from the recording medium is written in the memory provided in the function expansion card inserted in the computer or the function expansion unit connected to the computer, based on the instruction of the program code. , The CPU provided in the function expansion card or the function expansion unit performs some or all of the actual processing,
It goes without saying that the processing includes the case where the functions of the above-described embodiments are realized.

When the present invention is applied to the recording medium, the recording medium stores the program code corresponding to the above-mentioned flowchart.

[0058]

As described above, according to the present invention,
Digital signatures can be used even for handwritten documents, and compared with signatures using a seal stamp, improper stamp imitation of the seal stamp, and trouble and inaccuracies in the manual confirmation work of the seal stamp can be solved. be able to.

[Brief description of drawings]

FIG. 1 is a block diagram for explaining a configuration of an electronic signature device according to a first embodiment of the present invention.

FIG. 2 is a diagram for explaining the hardware configuration of the digital signature device according to the first embodiment of the present invention.

FIG. 3 is a flowchart illustrating an operation procedure of the digital signature device according to the first embodiment of the present invention.

FIG. 4 is a schematic diagram of a format of a signature file created by the electronic signature device according to the present embodiment.

FIG. 5 is a block diagram for explaining a configuration of an electronic signature device according to a second embodiment of the present invention.

FIG. 6 is a flowchart for explaining an operation procedure of the digital signature device according to the second embodiment of the present invention.

FIG. 7 is a schematic diagram for explaining data before and after processing in a merge unit 506.

FIG. 8 is a diagram showing an example of a screen displayed on a Web browser of a personal computer for confirming a signature.

[Explanation of symbols]

101,501 Input source 102, 502 Data creation unit 103,503 data 104, 504 Signature data creation unit 105,505 signature data 106 Output section 107 media 108, 508 Signature file storage unit 109,509 signature file 110,510 Signature file creation section 506 merge section 507 output media 511 Signature File Management Department 512 signature file specification information

Claims (17)

[Claims] 1. Image input means for inputting image data, and signature data for creating hash data by creating hash data from the input image data and encrypting the hash data using predetermined key information. An electronic signature apparatus comprising: a creating unit and a signature file creating unit that creates a signature file including the image data and the signature data. 2. Image input means for inputting image data, and signature data for creating hash data by creating hash data from the input image data and encrypting the hash data using predetermined key information. Creating means, signature file creating means for creating a signature file including the image data and the signature data, storing the created signature file in a predetermined file storage means, and providing signature file designation information indicating the file storage location. An electronic signature device comprising: a signature file management unit that acquires the image data; and an image forming unit that creates image data in which the signature file designation information is formed on the image data. 3. The electronic signature device according to claim 2, wherein the file storage means can be connected via a network. 4. The electronic signature device according to claim 1, further comprising a recording unit that records the created signature file in a portable recording medium. 5. The image reading unit according to claim 1, wherein the image input unit is an image reading unit that reads an image formed on a medium and inputs image data. Electronic signature device. 6. The signature data creating means creates a plurality of signature data, and the signature file creating means creates a signature file including a plurality of signature data. The electronic signature device according to any one of items. 7. An electronic signature confirmation apparatus comprising file storage means for storing a signature file created by the electronic signature apparatus according to claim 2, wherein the input means inputs the signature file designation information and predetermined key information. Search means for searching a signature file from the file storage means based on the signature file designation information; hash data created from image data included in the searched signature file; and the signature using the key information. An electronic signature confirmation apparatus comprising: a determination unit that determines whether or not the signature data included in the file matches the decrypted data. 8. The electronic signature verification apparatus according to claim 7, wherein the electronic signature verification apparatus is connectable to the electronic signature apparatus via a network. 9. An image input step of inputting image data, and signature data for creating signature data by creating hash data from the input image data and encrypting the hash data using predetermined key information. An electronic signature method comprising: a creating step; and a signature file creating step of creating a signature file including the image data and the signature data. 10. An image input step of inputting image data, and signature data for creating signature data by creating hash data from the input image data and encrypting the hash data using predetermined key information. Creating step, a signature file creating step of creating a signature file including the image data and the signature data, storing the created signature file in a predetermined file storage means, and providing signature file designation information indicating the file storage location. An electronic signature method, comprising: a signature file management step of acquiring; and an image forming step of creating image data in which the signature file designation information is formed on the image data. 11. The electronic signature method according to claim 9, further comprising a recording step of recording the created signature file in a portable recording medium. 12. The image inputting step is performed by using an image reading device for reading an image formed on a medium and inputting image data. The electronic signature method described in. 13. The signature data creating step creates a plurality of signature data, and the signature file creating step creates a signature file including a plurality of signature data. The electronic signature method according to any one of items. 14. A digital signature confirmation method in a digital signature confirmation apparatus comprising file storage means for storing a signature file created by the digital signature apparatus according to claim 2, wherein the signature file designation information and predetermined key information. An input step of inputting, a retrieval step of retrieving a signature file from the file storage means based on the signature file designation information, hash data created from image data included in the retrieved signature file, and the key information. And a determination step of determining whether or not the signature data included in the signature file matches the decrypted data by using. 15. A computer is made to generate hash data from input image data,
Executing a signature data creating step of creating signature data by encrypting the hash data using predetermined key information, and a signature file creating step of creating a signature file including the image data and the signature data A computer program characterized by. 16. A computer is made to generate hash data from input image data,
A signature data creating step of creating signature data by encrypting the hash data using predetermined key information; a signature file creating step of creating a signature file containing the image data and the signature data; A signature file management step of storing a signature file in a predetermined file storage means and acquiring signature file designation information indicating the file storage position; and an image for creating image data in which the signature file designation information is formed on the image data. A computer program characterized by executing a forming step. 17. A computer-readable recording medium, which stores the computer program according to claim 15 or 16.