JP2004080611A - Long-term electronic data preserving system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a long-term electronic data preserving system which can securely preserve electronic data for a long term. <P>SOLUTION: This long-term electronic data preserving system has a storage center 10 which stores the electronic data for a long term and, at the same time, guarantees that the data are not altered illegally. The center 10 is provided with an electronic data registering means 11 which makes original data 21 of the electronic data by accepting the registration of the electronic data from a registrant 1, and, at the same time, preserves original electronic information 23 prepared by adding storage information 22 including the storage starting date to the original data 21 and the unidirectional functional value 24 of the information 23 in a prescribed recording medium 15. The center 10 is also provided with a circulating data issuing means 12 which issues a digital certificate 26 by adding time information to the unidirectional functional value 24 of the original electronic information 23 and affixing a digital signature to the certificate 26 as circulating data 27 together with the copy of the original data 21 in response to the request from the registrant 1. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a long-term electronic data storage system that can store electronic data for a long time without fear of tampering.
[0002]
[Prior art]
With the spread of the Internet, problems and crimes such as user spoofing, information alteration, transmission and refusal of information are increasing. As a system that responds to such problems, electronic authentication technology that guarantees the identity of the sender and the integrity of the electronic data by transmitting and receiving electronic data with a digital signature that makes it difficult to falsify information has been developed. It's being used.
[0003]
On the other hand, there is a demand for long-term storage of data that has been stored for a long time on paper media as electronic data. This is because there is an advantage that a large amount of data can be stored in a small space, and automatic processing and data retrieval are easy by computer processing. A digital signature may be applied to prevent tampering.
[0004]
[Problems to be solved by the invention]
However, in the case of such long-term storage of electronic data, there is a problem that the prevention of falsification by a digital signature cannot be guaranteed for a long period of time due to the progress of decryption technology. That is, for example, in the case of the DES common key encryption technology, in the case of a 56-bit length, it is decrypted in several days or hours, and the range of the validity period of the public key certificate, for example, the range of about 5 years in RSA1024 bits The above safe storage is difficult.
[0005]
In view of such circumstances, an object of the present invention is to provide an electronic data long-term storage system that realizes a secure long-term storage system for electronic data.
[0006]
[Means for Solving the Problems]
According to a first aspect of the present invention, there is provided an electronic long-term storage system having a storage center for long-term storage of electronic data and for ensuring that the electronic data has not been tampered with. Electronic data registration means for receiving registration of electronic data from the electronic data and storing the original electronic information in which storage information including a storage start date is added to the original data and the one-way function value thereof in a predetermined recording medium; and Distribution data issuing means for issuing a digital certificate digitally signed by adding time information to the one-way function value of the original electronic information in response to a request from the registrant as distribution data together with a copy of the original data. An electronic data long-term storage system characterized in that:
[0007]
A second aspect of the present invention is the electronic data long-term storage system according to the first aspect, wherein the electronic data registering unit issues a receipt certificate printed with the one-way function value of the original electronic information. It is in.
[0008]
A third aspect of the present invention is the electronic data long-term storage system according to the first or second aspect, wherein the distribution data issuing means issues the distribution data with an expiration date.
[0009]
According to a fourth aspect of the present invention, in any one of the first to third aspects, the storage center further includes a data verification unit that verifies the validity of the distribution data according to a request. Electronic data long-term preservation system.
[0010]
According to a fifth aspect of the present invention, in any one of the first to fourth aspects, the time stamp means for outputting the digital certificate periodically receives time calibration and receives the time calibration certificate, The time stamp means issues the digital certificate including the time calibration certificate in an electronic data long-term storage system.
[0011]
In the present invention, the original data of the electronic data is completely stored, the falsification of the original data is prevented by the receipt certificate, and a copy of the original data is distributed as distribution data, so that the electronic data is not falsified. It can be stored for a long time.
[0012]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, the present invention will be described in detail based on an embodiment.
[0013]
FIG. 1 conceptually shows a configuration of an electronic data long-term storage system according to an embodiment. As shown in FIG. 1, the storage center 10 for long-term storage of electronic data has no interest in the registrant 1 who registers the original data 21 of the electronic data and the users 2A and 2B who use the registered electronic data. Operated by a third party.
[0014]
The storage center 10 includes at least an application server 13 functioning as an electronic data registration unit 11 and a distribution data issuing unit 12, a time stamp unit 14, and a storage unit 15.
[0015]
When the registrant 1 registers electronic data, the electronic data registration means 11 receives the original data 21. The original data 21 may be received via a predetermined recording medium or may be received online. The electronic data registration unit 11 adds storage information 22 including at least a storage start date to the original data 21 to obtain the original electronic information 23, creates a one-way function value 24 thereof, and stores these in the storage unit 15. . The storage unit 15 is not particularly limited as long as it can store electronic information, but a recording unit that cannot alter recorded data is preferable.
[0016]
Here, the storage information added to the original data 21 preferably includes bibliographic items about the registrant 1 and the storage center 10 in addition to the storage start date. Further, since the storage start date is important to prove that the original data 21 has existed from this date, the time stamp information from the time stamp unit 14 having the time gazette whose time has been time-corrected as described later is used. It may be added.
[0017]
The one-way function value 24 is also called, for example, a hash (HASH) value or a message digest, and is, for example, a fixed-length pseudo-random number generated by an irreversible one-way function such as a hash function. Although the same one-way function value 24 can be obtained from the same data, the original data cannot be reproduced from the one-way function value 24. Therefore, the electronic data registration unit 11 issues a receipt certificate 25 on which the one-way function value 24 is printed to the registrant 1. As a result, falsification of the original data 21 by the storage center 10 is prevented.
[0018]
Further, the electronic data registration means 11 passes the one-way function value 24 of the original electronic information to the time stamp means 14, and the time stamp means 14 adds the time stamp information to the one-way function value 24 and digitally signs the digital certificate. The distribution data issuance unit 12 issues the distribution certificate 27 to the distribution data issuing unit 12, and the distribution data issuing unit 12 issues the distribution data 27 in which the original data 21 is attached to the digital certificate 26. Then, the registrant 1 can use the distribution data 27 for use by the users 2A and 2B.
[0019]
The distribution data 27 has an expiration date set to, for example, three months, six months, or the like. If the expiration date is within the expiration date, the distribution data 27 itself is used using the public key certificate attached to the digital certificate. Self-verification of the unauthorized alteration of the Internet. Further, since the original data 21 is registered in the storage center 10, the fact that the data has been tampered can be easily proved on the center side.
[0020]
Here, the registrant 1 can perform the reissue procedure of the distribution data 27 at any time. That is, as shown in FIG. 2, for example, when the expired digital certificate 28 is submitted to the storage center 10 and a reissue request is made, the distribution data issuing unit 12 searches the storage unit 15 and responds. The original electronic information 23 and its one-way function value 24 are obtained, and the one-way function value 24 is passed to the time stamp means 14 to obtain a digital certificate 26 and issue new distribution data 27.
[0021]
Here, an example of the time stamp means 14 and an example of the time calibration center 50 for performing time calibration of the time stamp means 14 are shown in FIG. As shown in FIG. 3, the time stamp means 14 has a clock 41 and has a built-in unique ID 42 managed by a time calibration center 50. Further, the digital certificate 26 includes a secret key 43 used for encryption when creating the digital certificate 26 and a public key certificate 44 of a public key paired with the secret key 43. As described above, the clock 41 of the time stamp unit 14 is periodically calibrated by the time calibration unit 60 of the time calibration center 50 at a predetermined timing. In addition, as described later, it has a time calibration certificate 45 received from the time calibration center 50.
[0022]
The time stamp unit 14 may include the time calibration certificate 45 in the digital certificate 26 to be issued.
[0023]
The time calibration center 50 for performing the time calibration of the time stamp means 14 includes a time calibration means 60. The time calibration means 60 is, for example, a cesium atomic clock 61 cooperating with Coordinated Universal Time, and a time source from the cesium atomic clock 61. The system includes a master clock 62 supplied and a time distribution server 63 that distributes time from the master clock 62. The time distribution server 63 periodically calibrates the clock 41 of the time stamp unit 14.
[0024]
Here, the time calibration center 50 periodically accesses the time stamp means 14 to calibrate the built-in clock 41, and also obtains the unique ID 42 of the time stamp means 14 and the public key used by the time stamp means 14. The public key certificate 44 is obtained, and a time calibration certificate 45 including a hash value that is a one-way function value of the public key certificate 44 is issued.
[0025]
As described above, according to the long-term electronic data storage system of the present invention, the original data and the distribution data are separated and stored, so that both the convenience of the electronic data and the security applicable to long-term storage can be achieved. It can be applied to various businesses. For example, it is possible to digitize medical records of medical records and radiographs of a hospital, register them in the storage center 10, and use digitally signed distribution data. In addition, long-term storage can be handled by registering information such as various contracts, drawings, photographs, and design documents as electronic data in the storage center 10 and using distribution data as necessary.
[0026]
【The invention's effect】
As described above, the electronic long-term storage system of the present invention accepts registration of electronic data from a registrant, converts the electronic data into original data, and adds storage information including a storage start date to the original data, and one of the electronic information. Electronic data registration means for storing a directional function value on a predetermined recording medium; and a digital certificate digitally signed by adding time information to the one-way function value of the original electronic information in response to a request from the registrant. A storage center equipped with a distribution data issuing means that issues a copy of the data along with the distribution data is operated by a third-party organization that has no interest in the registrant and the user. By distributing distribution data that is proved to be the same, it is possible to realize a secure long-term storage system for electronic data. Unlikely to.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating a schematic configuration example of an electronic data long-term storage system according to an embodiment of the present invention.
FIG. 2 is a diagram illustrating a schematic configuration example of an electronic data long-term storage system according to an embodiment of the present invention.
FIG. 3 is a diagram illustrating an example of a time stamp unit and a time calibration center of the electronic data long-term storage system according to an embodiment of the present invention.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 10 Storage center 11 Electronic data registration means 12 Distribution data issuing means 14 Time stamp means 15 Storage means 21 Original data 22 Storage information 23 Original electronic information 24 One-way function value 25 Receipt certificate 26 Digital certificate 27 Distribution data

Claims (5)

An electronic long-term storage system having a storage center for long-term storage of electronic data and ensuring that it has not been tampered with,
The storage center receives the registration of the electronic data from the registrant, saves the original electronic information obtained by adding the storage information including the storage start date to the original data and the one-way function value thereof on a predetermined recording medium. Electronic data registering means, and a digital certificate digitally signed by adding time information to the one-way function value of the original electronic information in response to a request from the registrant as a distribution data together with a copy of the original data. An electronic data long-term storage system comprising a data issuing unit. 2. The electronic data long-term storage system according to claim 1, wherein the electronic data registration unit issues a receipt certificate printed with a one-way function value of the original electronic information. 3. The electronic data long-term storage system according to claim 1, wherein the distribution data issuing means issues the distribution data with an expiration date. 4. The electronic data long-term storage system according to claim 1, wherein the storage center further includes a data verification unit that verifies validity of the distribution data according to a request. 5. Long-term storage system. 5. The electronic data long-term storage system according to claim 1, wherein the time stamp unit that outputs the digital certificate receives a time calibration certificate by periodically performing time calibration, and the time stamp includes Means for issuing the digital certificate including the time calibration certificate, the electronic data long-term storage system.

Images