JP2004310704A - Document management method and device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a document management method and device, safely and efficiently operating a document. <P>SOLUTION: Bar code information necessary for login to a server computer or a plurality of computer terminals is stored as a bar code aside from the document management device. The bar code information is read at the time of the login, and key information is produced from the bar code information and secret information inside the device, and is transmitted. After the login to the server computer or the plurality of computer terminals, a path (a route) to a storage place of an application file, a data file or a Web document is printed on a label or the document as the bar code. At the time of calling, the path is read, and the application file, the data file or the Web document is called onto the computer terminal from the path (the route) to the storage place. After logoff, the bar code information necessary for login to a plurality of key devices is stored as a bar code aside from the document management device, and the key information is produced and transmitted when storing the printed document into a library or the like. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to the creation, storage, and use of office documents. Improve the productivity and efficiency of field staff in office work flow, and realize safe and effective operation including ISO documents / records and general office documents.
[0002]
[Prior art]
Conventional computer terminals, server computers, and key information generation devices for lock devices include a keyboard, a card reading device, and a device in which key information is recorded in advance.
Non-Patent Document: Rainbow Technologies Two-Factor Authentication White Paper Rev: 1.22002 / 06/07
[0003]
It is difficult for a person to select key information that is difficult for others to understand, remember without leaving a record, change it frequently, and make it difficult to generate, store, and use key information quickly, accurately, and securely.
[0004]
With the keyboard, as the key information increases, the user forgets the key information, is exposed to an input error or “seeing” the key information at the time of input, and it is difficult to store and use the key information quickly, accurately, and safely.
[0005]
Card readers are exposed to "sniffing" by skimming devices.
[0006]
In a card reading device or a device in which key information is recorded in advance, there is a problem that the number of cards and devices possessed by an individual increases because of logging in to a computer terminal, a server computer, and a lock device. As cards and devices increase, it is difficult to store and use key information quickly, accurately, and securely.
[0007]
Cards and devices with pre-recorded key information may be used illegally due to "spoofing" due to "lost" or "stolen", and key information for computer terminals, server computers and lock devices Need to be replaced.
[0008]
A conventional document management method using a barcode generates a barcode from a document name, a creation date, a volume name, and the like of a created document, prints the barcode on the document, and requires the barcode information based on the barcode information. There is a way to call the document.
Patent document: Japanese Patent Application No. 06-155668
[0009]
In recent years, the necessity of managing web documents has been increasing. However, in a method of generating a barcode from a document name, a creation date, and a volume name of a document, an application file or data file of a computer terminal and a web document of a server computer are used. Cannot be called in one way.
[0010]
[Problems to be solved by the invention]
On a keyboard, the user forgets key information, is exposed to input mistakes, and is exposed to "seeing" key information at the time of input. Card readers are exposed to "sniffing" by skimming devices. In a card reading device or a device in which key information is built in advance, there is a problem that the number of cards and devices possessed by an individual increases. As cards and devices increase, it is difficult to store and use key information quickly, accurately, and securely. In a device in which a card or key information is recorded in advance, it is necessary to replace key information of a computer terminal, a server computer, or a lock device due to "spoofing" due to "lost" or "stolen".
[0011]
In a method of generating a barcode from a document name, a creation date, and a volume name of a document, an application file or data file of a computer terminal and a web document of a server computer cannot be called by one method.
[0012]
The present invention prevents "seeing" of key information, promptly, accurately, and safely inputs key information for each computer terminal, server computer, and lock device with one document management device. It is an object of the present invention to provide a device for preventing "spoofing" due to "lost" or "stolen".
[0013]
Further, the document management apparatus can generate, store, and use key information anytime and anywhere independent of an external device.
[0014]
Also, the present invention generates a path (path) to a storage location of an application file or data file of a computer terminal or a web document of a server computer as a barcode, prints it on a label or a document, and calls the document when calling. It is an object of the present invention to provide a method of reading a barcode and calling an application file or data file of a computer terminal and a web document of a server computer in a single method even when the storage location is unknown. .
[0015]
[Means for Solving the Problems]
[0016]
In order to solve the above problems, the invention according to claim 1 includes a bar code reading unit, an operation unit that decodes the bar code, a storage unit that stores the decoded bar code information, and the bar code information. A communication unit that transmits a bar code, the bar code reading unit of the bar code reading device reads a bar code, and the arithmetic unit of the bar code reading device decodes the read bar code. The decrypted barcode information is used as a parameter, or the decrypted barcode information and the secret information obtained from the barcode reader are used as parameters, input to a one-way summary function, and generate key information as a function value. The mode to log in and send to the communication unit of each computer terminal, server computer and lock device, and the decoded barcode Output remains distribution, with a mode to be transmitted to the communication unit of each computer terminal or server computer and lock device.
[0017]
In order to solve the above problems, the invention according to claim 2 includes a bar code, a computer terminal or a server computer, a printing device, and a document management device according to claim 1, wherein the application file and the data file of the computer terminal are 2. The method according to claim 1, wherein a path (path) to a storage location of the web document of the server computer is generated as a barcode, printed on a label or a document by a printing device, and when the application file, the data file, and the web document are called. The document management device described above reads the label or the barcode on the document, the document management device transmits a path to the storage location to the computer terminal, and the application file, the data file, and the web document are transmitted to the computer terminal. Call on computer terminal.
[0018]
BEST MODE FOR CARRYING OUT THE INVENTION
The configuration of the embodiment will be described below. As shown in FIG. 2, the document management method and apparatus according to the present invention includes a bar code [A], a computer terminal, a server computer, a lock device [B], a document management device [C], and a printing device [D]. ].
[0019]
A bar code [A] for storing bar code information outside the document management device is a bar code used in an automatic input system (automatic recognition technology) of a computer, affixed to a product as a JAN code or the like, and combined with a POS system. This is a one-dimensional or two-dimensional barcode used for distribution management and sales management.
[0020]
If the barcode [A] is printed on a card or the like using an invisible infrared absorbing ink, the barcode [A] can be enhanced without being copied.
[0021]
The reading button [C1] of the document management device [C] of FIG. 1 is pressed, and the bar code [A] is scanned by the visible light LED & photodiode pen type scanning of the reading unit [C5] of the document management device [C]. read. The reading unit [C5] may be a CCD touch scan or a laser scan system.
[0022]
The storage unit of the document management device [C] has a ROM and a RAM, and stores the decrypted barcode information, the secret information, and the device identification number.
[0023]
The storage unit of the document management device [C] may employ a volatile memory in which the recorded contents disappear when exposed to air in order to resist probe analysis or the like for acquiring secret information.
[0024]
The document management device [C] includes a plaintext button [C3] for outputting the decrypted barcode information as it is, and a key generation button [C2] for generating key information as a function value.
[0025]
The infrared communication unit [C4] of the document management apparatus [C] presses the plaintext button [C3] or the key generation button [C2], and transmits barcode information or key information by infrared communication.
[0026]
The document management device [C] is supplied with power using a battery.
[0027]
Note that the document management device [C] may be a mobile phone or a portable information terminal having a barcode reading unit and a short-range wireless standard.
[0028]
The infrared communication unit [B1] of the computer terminal, the server computer, and the lock device [B] is a short distance using invisible light of 0.72 to 100 μm having a longer wavelength than visible light obtained by an infrared light emitting diode or an infrared laser. The barcode information or the key information is received from the infrared communication unit [C4] of the document management apparatus [C] by the infrared communication (at a maximum of about 10 m). Communication between the communication unit [B1] of the computer terminal, the server computer, and the lock device [B] and the communication unit [C4] of the document management device [C] uses other short-range wireless standards (Philips, NFC, etc.). You may.
[0029]
The effect of infrared communication on the human body does not matter.
[0030]
A hash function having the following characteristics is used as the one-way summarization function.
The hash function: 1) The input can be of any length. 2) The length of the output is fixed. 3) Computing H (x) is relatively fast. 4) H (x) unidirectional. 5) H (x) is anti-collision property.
If a sufficiently long hash length is adopted, there is no possibility of collision, the uniqueness of H (x) can be ensured, and the source of data generation is specified (the key information is generated from the same barcode information and secret information. Authentication). The parameter (x) is bar code information and secret information in the document management device. The barcode information and the secret information may be a coded character set (characters and control codes) standardized by JIS or the like.
[0031]
The computing unit [B2] of the computer terminal, the server computer, and the lock device [B] has a CPU, and the storage unit [B3] has a user authority information table in which user authority information is recorded in advance.
[0032]
The path (path) to the storage location of the application file or data file of the computer terminal and the web document of the server computer can be acquired as a file property or URL. The acquired path is printed on a label or a document by the barcode printing software of the computer terminal and the printing device [D].
[0033]
As described above, in the work flow of creating, storing, and using office documents, the productivity and efficiency of field staff are improved, and secure and effective, including ISO documents and records, and general office documents. Realization of effective operation. Hereinafter, an embodiment is shown by (FIG. 1), (FIG. 2), (FIG. 3), and (FIG. 4).
[0034]
To log in to the document management device [C], the power switch of the document management device [C] is turned on.
[0035]
The bar code [A] is read by the document management device [C].
[0036]
The barcode [A] read by the document management device [C] is decoded into a coded character set (characters and control codes) standardized by JIS or the like in the arithmetic unit.
[0037]
In order to enhance security, when logging in to the document management device [C], a card having a personal identification number (ID) described as a bar code [A] is held (FIG. 3), and the calculation unit of the document management device [C] uses the card. Then, the apparatus identification number recorded in the storage unit in advance is compared with the personal identification number (ID) included in the card, and if they match, login to the document management apparatus [C] is permitted. (FIG. 4-1) If the number of trials recorded in advance exceeds the number of attempts and the authentication fails, the document management apparatus [C] is locked.
[0038]
If login to the document management device [C] is permitted, a buzzer sounds.
[0039]
Since the document management device [C] is stored separately from the card, the document management device [C] is not illegally used due to “lost” or “stolen”.
[0040]
After logging in to the document management device [C], the login dialog of the computer terminal is opened to log in to the computer terminal.
[0041]
The plaintext button [C3] of the document management apparatus [C] is pressed, and the decrypted barcode information is directly used as a character string (the ID read by logging in to the document management apparatus [C] is stored). The barcode information (ID) is transmitted from the infrared communication unit [C4] of the document management device [C] to the communication unit [B1] of the computer terminal. (Fig. 4-2)
[0042]
The transmitted barcode information is input to the ID field of the login dialog.
[0043]
Next, a key generation button [C2] is pressed, and the decrypted barcode information and the secret information in the document management device [C] are input to the one-way summary function as parameters, and the key information (key The information becomes a password.) (Fig. 4-2)
[0044]
The generated key information secures uniqueness from the characteristics of the hash function, and can identify a data generation source.
[0045]
The document management device [C] is generated by reading a barcode or by communication between the communication unit [B1] of the computer terminal, the server computer, and the lock device [B] and the communication unit [C4] of the document management device [C]. The character type and character string length of the key information may be set.
[0046]
The generated key information is transmitted from the infrared communication unit [C4] of the document management device [C] to the communication unit [B1] of the computer terminal.
[0047]
The transmitted key information is entered in the password field of the login dialog.
[0048]
The user logs in to the computer terminal using the transmitted ID and password.
[0049]
When logging in to the server computer after logging in to the computer terminal, the computer terminal similarly transmits barcode information (ID) and key information (password).
[0050]
After logging in to a plurality of computer terminals or server computers, a path (path) to a storage location of an application file, a data file, or a web document is generated as a barcode [A], and a label or document is generated by a printing device [D]. At the time of printing and calling, the bar code on the label or the document is read by the document management device [C], the plain text button [C3] is pressed, and the bar code information is transmitted to the communication unit [B1] of the computer terminal [B]. And call application files, data files and web documents from the path to the storage location. (Fig. 4-3)
[0051]
After the logoff, when the printed document is stored in a library or the like, the power switch of the document management device [C] is turned on to log in to the document management device [C] again.
[0052]
In order to enhance security, when logging in to the document management apparatus [C], a card with a personal identification number (ID) described as a bar code [A] is provided. Is compared with the personal identification number (ID) included in the card, and if they match, login to the document management device [C] is permitted. (FIG. 4-1) If the number of trials recorded in advance exceeds the number of attempts and the authentication fails, the document management apparatus [C] is locked.
[0053]
If the login to the document management device [C] is successful, the buzzer sounds.
[0054]
The document management device is a barcode reading device, reads a barcode, presses a key generation button [C2], and uses the decrypted barcode information and secret information in the document management device [C] as one-way summarization as parameters. Input to the function and generate key information (the key information becomes a password) as a function value. (Fig. 4-2)
[0055]
The infrared communication unit [C4] of the document management device [C] transmits the generated key information to the communication unit [B1] of the lock device [B].
[0056]
The lock device of the library is locked and unlocked by the transmitted key information.
[0057]
On the Internet, there is a risk that data may be changed (“falsification”) or a communication act may be denied (“denial”). Although PKI is a security infrastructure for avoiding this risk and performing secure communication on the Internet, PKI tokens (public key / private key / digital key used in public key cryptosystem) It is a device that can store certificates and user attributes), and stores public keys, private keys, digital certificates, and user attributes, and can check signatures, encryption, and non-tampering properties of documents. It is necessary to keep the conventional USB connection PKI token in the computer terminal, so that one USB port is reduced.
[0058]
【Example】
A document management device [C] for logging in to a computer terminal or a plurality of server computers, and a parameter for generating an ID and a password (the ID may be used as a parameter for generating a password, or the password is generated from a parameter different from the ID. (It may be generated.) And a label printed with a barcode [A] (may be attached to a display device or the like like post-it) (FIG. 4-2).
[0059]
The bar code [A] printed on the label or the like is read by the document management device [C].
[0060]
The barcode [A] read by the document management device [C] is decoded into a coded character set (characters and control codes) standardized by JIS or the like in the arithmetic unit.
[0061]
In the case of a company requiring security, in order to enhance security, a card in which the personal identification number (ID) of each employee is described in advance as a bar code [A] is read by a document management device [C], and the document management device [C] is read. The personal identification number (ID) and the device identification number recorded in the file are compared, and if they match, the login to the document management device [C] is permitted. If the authentication fails after exceeding a predetermined number of trials, the document management device [C] is locked.
[0062]
If login to the document management device [C] is permitted, a buzzer sounds.
[0063]
After logging in to the document management device [C], a login dialog is opened to log in to the computer terminal.
[0064]
The plaintext button [C3] of the document management apparatus [C] is pressed, and the decrypted barcode information is directly used as a character string (the ID read by logging in to the document management apparatus [C] is stored). The barcode information (ID) is transmitted from the infrared communication unit [C4] of the document management device [C] to the communication unit [B1] of the computer terminal.
[0065]
The transmitted barcode information is input to the ID field of the login dialog.
[0066]
Next, a key generation button [C2] is pressed, and the decrypted barcode information and the secret information in the document management device [C] are input to the one-way summary function as parameters, and the key information (key The information becomes a password.)
[0067]
The generated key information is transmitted from the infrared communication unit [C4] of the document management device [C] to the communication unit [B1] of the computer terminal.
[0068]
The transmitted key information is entered in the password field of the login dialog.
[0069]
The user logs in to the computer terminal using the transmitted ID and password.
[0070]
When logging in to the server computer after logging in to the computer terminal, the computer terminal similarly transmits barcode information (ID) and key information (password).
[0071]
After logging in to a plurality of computer terminals or server computers, a path (path) to a storage location of an application file, a data file, or a web document is generated as a barcode [A], and a label or document is generated by a printing device [D]. At the time of printing and calling, the bar code on the label or the document is read by the document management device [C], the plain text button [C3] is pressed, and the bar code information is transmitted to the communication unit [B1] of the computer terminal [B]. And call application files, data files and web documents from the path to the storage location.
[0072]
After the logoff, when the printed document is stored in a library or the like, the power switch of the document management device [C] is turned on to log in to the document management device [C] again.
[0073]
In order to enhance security, when logging in to the document management apparatus [C], a card with a personal identification number (ID) described as a bar code [A] is provided. Is compared with the personal identification number (ID) included in the card, and if they match, login to the document management device [C] is permitted. If the number of attempts recorded in advance exceeds the number of attempts and the authentication fails, the document management apparatus [C] is locked.
[0074]
If the login to the document management device [C] is successful, the buzzer sounds.
[0075]
The document management device is a barcode reading device, reads a barcode, presses a key generation button [C2], and uses the decrypted barcode information and secret information in the document management device [C] as a parameter to summarize in one direction. Input to a function and generate key information as a function value.
[0076]
The infrared communication unit [C4] of the document management device [C] transmits the generated key information to the communication unit [B1] of the lock device [B].
[0077]
The lock device of the library is locked and unlocked by the transmitted key information.
[0078]
【The invention's effect】
As described above, according to the present invention, in the work flow of creating, storing, and using office documents, the productivity and efficiency of field personnel are improved, and ISO documents / records and general office documents are improved. And secure and effective operation can be realized.
[Brief description of the drawings]
FIG. 1 is a document management device. FIG. 2 is an overall configuration diagram of a system. FIG. 3 is a block configuration diagram. FIG. 4 is a block diagram.
A Bar code B Computer terminal, server computer, lock device B1 Communication unit B2 Operation unit B3 Storage unit C Document management device C1 Read button C2 Key generation button C3 Plain text button C4 Communication unit C5 Reading unit

Claims (2)

In a barcode reading device, a barcode reading unit, an operation unit that decodes the barcode, a storage unit that stores the decoded barcode information, and a communication unit that transmits the barcode information,
In the barcode reading unit of the barcode reading device, read a barcode, in the arithmetic unit of the barcode reading device, decode the read barcode, the decoded barcode information as a parameter,
Or the decrypted bar code information and secret information obtained from the bar code reading device as a parameter,
A mode for inputting to the one-way summary function, generating key information as a function value, transmitting the key information to the communication unit of each computer terminal, server computer, or lock device, and logging in;
A mode in which the decrypted barcode information is output as it is and transmitted to the communication unit of each computer terminal, server computer, or lock device,
A document management device characterized by having. A barcode,
Computer terminals and server computers,
A printing device;
A document management device according to claim 1,
In, a path (path) to the storage location of the application file or data file of the computer terminal and the web document of the server computer is generated as a barcode,
Printing on labels or documents by a printing device,
2. The document management apparatus according to claim 1, wherein the label or the barcode on the document is read when the application file, the data file, or the web document is called, and the computer determines a path to the storage location by the document management apparatus. A document management method, wherein the document is transmitted to a terminal, and the application file, the data file, and the web document are called on the computer terminal.

Images