JP2005242530A - History recording system, history recording method, history recording program, and transferee terminal - Google Patents

Abstract

The present invention records a receipt / transfer history of electronic information or an object that is difficult to be tampered with or forged.
A history recording system for recording a history every time electronic information is received and transferred in order while a digital signature is attached by a plurality of transferers, and a plurality of transferee terminals that can be connected to each other And a database for storing history data, and each of the transferee terminals has a position data generation unit and the previous history data associated with the digital signature received from the previous transferee terminal. A digital signature generation unit that newly reads a digital signature based on the previous history data and position data that is read from the database, generates a hash value of the previous history data, and generates a hash value and a newly generated digital signature And a history data generation unit that newly generates history data and stores it in the database.
[Selection] Figure 1

Description

  The present invention relates to a history recording system, a history recording method, a history recording program, and a history recording system for recording a history of receiving and transferring electronic information or an object, and a transferee terminal used in the history recording system.

  In recent years, various activities peculiar to the digital society such as electronic commerce have been developed, and it is increasingly important to secure evidence concerning electronic data. In addition, there is an active discussion on electronic traceability of food distribution history regarding food traceability.

For example, a multiple signature method that uses an electronic signature to ensure the authenticity of the electronic information in order to secure evidence about the electronic information has been disclosed (see, for example, Patent Document 1). Also disclosed is a method for preventing falsification by an unauthorized person by generating a record relating to movement of electronic information, that is, a receipt / transfer history of the electronic information via an electronic signature (see, for example, Patent Document 2). .
JP 2001-331104 A JP 2002-259605 A

  By the way, the above-described Patent Document 1 discloses the basic principle of a chain structure of signature histories. In addition, there are some disclosures that follow the movement position information of the object after the fact, but the receipt transfer history is traced by checking the time-series position information while referring to the separate time information. Most of them were. For this reason, it is easy to change part of the position information without being noticed by others, and conversely, the position information may be falsified or counterfeited maliciously. Further, in the electronic information or object receipt / transfer history disclosed in Patent Document 2, the position information is recorded in the transfer history, and the authenticity of the history is guaranteed by applying an electronic signature to the record. Has been. However, the position information of the electronic information is unique information of the terminal that handles the receipt / transfer history.

  Therefore, the present invention has been made in view of the above problems, and a history recording system, a history recording method, a history recording program, and a history recording program for recording a receipt / transfer history that is difficult to falsify or forge with respect to electronic information or an object, and It is an object of the present invention to provide a transferee terminal for use in a history recording system.

  The present invention for solving the above-mentioned problems is a history recording system for recording a history of electronic information every time electronic information is received and transferred in order while being accompanied by a digital signature by a plurality of transferees. A plurality of transferee terminals that can be connected to each other through a communication network, and a database that stores at least history data relating to the history of the electronic information, each of the transferee terminals being for the transferee A location data generation unit that generates location data relating to the location of the terminal, and the history data that is associated with the digital signature received from the previous transferee terminal is read from the database, the history of the destination A digital signature generation unit for newly generating the digital signature based on the data and the position data, and the previous history data Generates a hash value, and having a a history data generating unit to be stored in said database newly generate the history data based on digital signatures and which is the newly generated with the hash value.

  The history recording system may further include a management terminal capable of connecting to the information communication network and tracking the history of the electronic information, and the digital signature generation unit of the transferee terminal may include a public key cryptosystem. The management terminal generates the digital signature by encrypting the history data and the location data with a secret key, and the management terminal decrypts the digital signature with a public key corresponding to the secret key. It is preferable to have a decoding unit that generates the position data.

  The portable storage medium is a history recording system that records the history of a portable storage medium each time it is received and transferred in order while a digital signature is stored by a plurality of transferees. A plurality of transferee terminals having access units for accessing the portable storage medium that can be connected to each other; and a database that stores at least history data relating to the history of the portable storage medium. Each of the transferor terminals is associated with a position data generation unit that generates position data relating to the position of the recipient transferee terminal, and the digital signature read from the portable storage medium through the access unit. The history data of the destination is read from the database, and based on the history data of the destination and the position data A digital signature is newly generated and stored in the portable storage medium through the access unit, a hash value of the previous history data is generated, and the hash value and the newly generated digital A history recording system comprising: a history data generating unit that newly generates the history data based on a signature and stores the history data in the database.

  The history recording system may further include a management terminal that has an access unit for accessing the portable storage medium that can be connected to the information communication network and tracks the history of the portable storage medium. The digital signature generation unit of the transferee terminal generates the digital signature by encrypting the history data and the location data with a secret key based on a public key cryptosystem, and the management terminal It is preferable to have a decryption unit that decrypts the digital signature with a public key corresponding to, and generates the history data and the position data.

  In the history recording system, the portable storage medium is preferably an RFID tag or an IC card.

  In the history recording system, it is preferable that the position data generation unit includes a position measuring device that measures a physical position of the transferee terminal.

  In the history recording system, it is preferable that the position data generation unit acquires a logical position of the transferee terminal in the information communication network and generates the position data based on the logical position. .

  In the history recording system, it is preferable that the position data further includes incidental information other than the position of the transferee terminal.

  Further, in the history recording system, it is preferable that the history data includes information on the terminal for the transferee related to the transfer.

  Further, it is a transferee terminal for receiving and transferring electronic information with a digital signature attached thereto, and recording the history of the electronic information each time the transfer is received. Read the history data associated with the digital signature received from the location data generation unit to be generated and the previous transferee terminal from a database connectable through an information communication network, and the history of the destination A digital signature generation unit that newly generates the digital signature based on the data and the position data; a hash value of the previous history data is generated; and based on the hash value and the newly generated digital signature And a history data generation unit that newly generates the history data and stores it in the database. It applied to the terminal.

  In addition, each time the portable storage medium is received and transferred, the transferee terminal records the history of the portable storage medium while storing the digital signature in the portable storage medium, and stores the portable storage medium in the portable storage medium. An access unit for accessing, a position data generating unit for generating position data relating to the position of the transferee terminal, and the digital signature read from the portable storage medium through the access unit The history data of the destination is read from a database connectable through an information communication network, the digital signature is newly generated based on the history data of the destination and the position data, and the portable storage medium is passed through the access unit A digital signature generation unit for storing the hash value of the previous history data, and the hash value and the new On the basis of the generated digital signature according to the received assignment's terminal, characterized by having a history data generating unit to be stored in said database newly generates the history data.

  In addition, the electronic information is a history recording method for recording the history of electronic information each time the electronic information is sequentially received and transferred with a digital signature attached thereto by a plurality of transferees. A position data generation step for generating position data; and the previous history data associated with the digital signature received from the previous transferee terminal is read from the database; the previous history data and the position data A digital signature generating step for newly generating the digital signature based on the above, generating a hash value of the previous history data, and generating the history data based on the hash value and the newly generated digital signature A history data generation step characterized by comprising a history data generation step newly generated and stored in the database. That.

  In addition, the portable storage medium is a history recording method for recording the history of a portable storage medium each time a digital signature is stored and transferred in order by a plurality of transferees. A position data generation step for generating position data relating to the position of the terminal; and reading out the digital signature from the portable storage medium through the access unit; reading out the history data associated with the digital signature from the database; A new digital signature is generated based on the previous history data and the position data, and stored in the portable storage medium through the access unit, and a hash value of the previous history data is generated. The history data is newly generated based on the hash value and the newly generated digital signature. According to the history recording method characterized by comprising: a history data generating step to be stored in the database.

  In addition, a history recording program for causing a recipient transferer terminal to execute a history recording method for recording a history of electronic information each time electronic information is sequentially received and transferred by a plurality of transfer assignees accompanied by a digital signature. A position data generation step for generating position data relating to the position of the transferee terminal, and the history data associated with the digital signature received from the previous transferee terminal. A digital signature generating step of reading out from a database connectable through an information communication network and newly generating the digital signature based on the history data of the destination and the position data; and generating a hash value of the history data of the destination The history data is newly generated based on the hash value and the newly generated digital signature. Such a history data generating step to be stored in a database, further comprising a a history recording program characterized.

  In addition, each time a portable storage medium is received and transferred in sequence while a digital signature is stored by a plurality of transferees, a history recording method for recording the history of the portable storage medium is executed on the transferee terminal. A history recording program to be read from the portable storage medium through a position data generation step for generating position data relating to the position of the transferee terminal and an access unit for accessing the portable storage medium The historical data associated with the digital signature is read from a database connectable through an information communication network, and the digital signature is newly generated based on the historical data and the location data. Generating a digital signature to be stored in the portable storage medium through the access unit; Generating a hash value of the data and generating the history data based on the hash value and the newly generated digital signature and storing the history data in the database. It is applied to the history recording program.

  With respect to electronic information or objects, it is possible to record a transfer history that is difficult to be tampered with or forged.

=== First Embodiment ===
<<< Configuration of History Recording System >>>
As shown in the block configuration example of FIG. 1, a route guarantee system (history recording system) 10 according to the present embodiment includes a history storage database (database) 30, an access terminal (management terminal) 50, and a plurality of Are connected to each other via a communication network (information communication network) 90 such as the Internet or an intranet. . Here, the position information processing terminal 701 represents a first terminal that secondly transfers an electronic document (electronic information), and the position information processing terminals 70i, 70j, and 70k respectively transfer the electronic document to the i th The position information processing terminal 70n represents the terminal that receives the electronic document at the nth (last) position. The relationship between 1, i, j, k, and n is, for example, 1 ≦ i, i = j−1, k = j + 1, and k ≦ n. The communication network 90 may be wireless.

  The position information processing terminals 701, 70i, 70j, 70k, and 70n are input devices 72 to which incidental information other than position information, which will be described later, is input by an input person (recipient assignee) 1, i, j, k, and n. (721, 72i, 72j, 72k, 72n) and the position information processing device 74 (741, 74i, 74j, 74k, 74n) are connected directly at the bases 1, i, j, k, n by a LAN or the like. It is the information processing apparatus comprised by this.

  As shown in the block configuration example of FIG. 2, the position information processing device 74 includes a processing device main body 7402 to which a physical position information receiving device (position data generation unit, position measuring device) 7401 is connected. Yes. The physical position information receiving device 7401 has a function of acquiring physical position data of the bases 1, i, j, k, and n using, for example, GPS, and transmitting the physical position data to the processing device main body 7402.

  As shown in the block configuration example of FIG. 2, the processing apparatus body 7402 generates a digital signature for the physical position data received from the physical position information receiving apparatus 7401 (digital signature generation section). 7403 is further provided. The physical position data may be accompanied by the above-described incidental information input by the input persons 1, i, j, k, and n through the input device 72. This incidental information is various states and remarks descriptions at each site 1, i, j, k, n, such as time, temperature, humidity, pressure, noise level, carbon dioxide concentration in the atmosphere, image information, and the like. .

  Further, as shown in the block configuration example of FIG. 2, the processing apparatus main body 7402 includes a logical position information acquisition unit that acquires logical position data for each of the position information processing terminals 701, 70 i, 70 j, 70 k, and 70 n. (Position data generation unit) 7404 is provided. Here, the logical location data refers to, for example, a computer including the communication network 90 such as the IP address or domain name of each location information processing terminal 701, 70i, 70j, 70k, 70n, URL, drive name, directory name, or the like. It specifies the location on the network.

  The access terminal 50 is an information processing apparatus for verifying a route of an electronic document to be described later based on a digital signature received from the position information processing terminal 70 and a public key to be described later appropriately input from the user. is there. Note that the position information processing terminal 70 in the bases 1 to n described above may also serve as the access terminal 50.

<<< History Recording Method >>>
In the present embodiment, a procedure of processing in the position information processing terminal 70j at the base j when recording the route of the electronic document transferred between the bases 1, i, j, k, and n in that order will be described. . It is assumed that the relationship of 1, i, j, k, and n in this embodiment is 1 ≦ i, i = j−1, k = j + 1, and k ≦ n. Further, the history recording method of the present embodiment and the history verification method described later can be applied to electronic commerce and the like.

  As shown in the flowchart of FIG. 3, the position information processing terminal 70j receives the electronic document M and the digital signature D [j-1] from the previous position information processing terminal 70i (S301). The position information processing terminal 70j accesses the history storage database 30, and acquires the previous signature history (history data) R [j-1] including the previous digital signature D [j-1] (S302). Here, as will be described later, the history storage database 30 stores a signature history R [j-1] including a digital signature D [j-1]. Further, the position information processing terminal 70j acquires physical position data P [j] corresponding to the base j by the physical position information receiving device 7401 (FIG. 2) (S303).

  Next, the input person j appropriately inputs to the position information processing terminal 70j that the digital signature is generated by using the secret key Pr [j] appropriately distributed in advance from the path guarantee system 10 (S304). The position information processing terminal 70j appropriately generates a hash value H (R [j-1]) of the previous signature history R [j-1], and generates the secret key Pr [j] based on the public key cryptosystem. The digital signature D [j] is newly generated from the hash value H (R [j-1]), the electronic document M, and the physical position data P [j] (S305).

  Next, the location information processing terminal 70j receives the date / time data T [j] timed by an appropriate timer, the above-mentioned incidental information X [j] appropriately input by the input person j, and the previous signature history R [ j−1] hash value H (R [j−1]), the hash value H (M) of the electronic document M obtained by appropriately hashing the electronic document M, and the newly generated digital signature A signature history R [j] (see FIG. 4) that includes D [j] and the above-described physical position data P [j] and is associated with an appropriate ID N [j] is newly created. And stored in the history storage database 30 (S306). The position information processing terminal 70j transmits the electronic information M and the newly generated digital signature D [j] to the next position information processing terminal 70k (S307).

  By repeating the procedure of such processing for j = 2 to j = n−1, the electronic document M is received and transferred in order from the input person 1 to the input person n, and is stored in the history storage database 30. The signature histories R [1] to R [n] are stored.

  Step S303 described above corresponds to a position data generation step, step S305 corresponds to a digital signature generation step, and step S306 corresponds to a history data generation step. Further, the physical position information receiving device 7401 (FIG. 2) described above executes the operation of step S303, and the signature generation unit 7403 (FIG. 2) described above executes the operation of step S305. Further, an appropriate CPU provided in the processing apparatus main body 7402 (FIG. 2) of the position information processing terminal 70j and an appropriate program for causing the CPU to execute the operation of step S306 correspond to the history data generation unit. The operation of step S303 may be executed by the appropriate CPU described above using an appropriate program, or the operation of step S305 may be executed by the appropriate CPU described above using an appropriate program.

<<< History verification method >>>
In the present embodiment, the procedure of processing in the access terminal 50 when verifying the route of the electronic document received and transferred between the sites 1, i, j, k, and n in this order will be described.

  As shown in the flowchart of FIG. 5, the access terminal 50 receives, for example, the electronic document M and the digital signature D [n] from the position information processing terminal 70n (S501). The access terminal 50 decrypts the digital signature D [n] using the public key Pu [n] appropriately acquired in advance based on the public key cryptosystem described above, and the hash value H (M ′) of the electronic document Then, the hash value H (R ′ [n−1]) of the signature history R [n−1] and the physical position data P ′ [n] are obtained (S502).

  Next, the access terminal 50 accesses the history storage database 30 and acquires the signature history R [n] including the digital signature D [n]. The access terminal 50 compares H (M ′) obtained in step S502 with H (M) of R [n] received from the history storage database 30, and H (R ′ [ n−1]) and H of R [n] received from the history storage database 30 (R [n−1]), P ′ (n) obtained in step S502, and the history storage database The P [n] of R [n] received from 30 is compared (S503). If it is determined that at least one of the above three sets is not the same (S503: N), the access terminal 50 displays a message such as “no authentication” on an appropriate display provided in the access terminal 50. The display is completed and the process is terminated (S507).

  If it is determined that all of the above three sets are the same (S503: Y), when n is reduced by 1 (S504), if n = 0 is not satisfied (S505: N), the access terminal 50 The operations in steps S502 and S503 described above are executed for n reduced by one. When the operations of steps S502 to S505: N are repeated and n = 0 in step S505 (S505: Y), the access terminal 50 uses P [1] to P [n corresponding to the path of the electronic document M. Are sequentially output (S506). This output may be obtained by appropriately mapping the obtained P [1] to P [n] number and symbol information to map information or address information. In this way, it is possible to easily grasp the actual physical path.

  In the present embodiment, an appropriate CPU provided in the access terminal 50 and an appropriate program for causing the CPU to execute the operation in step S502 correspond to the decryption unit. In the present embodiment, R [0] is appropriate information as an initial value of the signature history.

=== Second Embodiment ===
<<< Configuration of History Recording System >>>
The configuration of the route guarantee system (history recording system) 10 using the portable storage media 206 and 207 is the same as the configuration illustrated in FIG. Here, what the input persons 1, i, j, k, and n receive and transfer are objects to which portable storage media 206 and 207 are appropriately attached. The portable storage media 206 and 207 are, for example, an RFID tag 206, an IC card 207, and the like.
However, as shown in the block configuration example of FIG. 6, in addition to the configuration of the first embodiment, an input / output interface (access unit) 7405 for accessing the RFID tag 206 or the IC card 207 is provided in the processing apparatus main body. 7402 is connected to constitute a position information processing device 74.

<<< History Recording Method >>>
In the present embodiment, when recording the route of the object with the RFID tag 206 or the IC card 207 attached and transferred between the sites 1, i, j, k, and n in that order, the location information of the site j A procedure of processing in the processing terminal 70j will be described. It is assumed that the relationship of 1, i, j, k, and n in this embodiment is 1 ≦ i, i = j−1, k = j + 1, and k ≦ n. In addition, the history recording method of the present embodiment and the history verification method described later can be applied to food traceability and the like.

  As shown in the flowchart of FIG. 7, the input person j receives an object to which the RFID tag 206 or the IC card 207 is attached from the input person i. The position information processing terminal 70j reads the digital signature D [j-1] from the RFID tag 206 or the IC card 207 through the input / output interface 7405 by an appropriate operation of the input person j (S701). The position information processing terminal 70j accesses the history storage database 30, and acquires the previous signature history (history data) R [j-1] including the previous digital signature D [j-1] (S702). Here, as will be described later, the history storage database 30 stores a signature history R [j-1] including a digital signature D [j-1]. Further, the position information processing terminal 70j acquires physical position data P [j] corresponding to the base j by the physical position information receiving device 7401 (S703).

  Next, the input person j appropriately inputs to the position information processing terminal 70j that the digital signature is generated using the secret key Pr [j] appropriately distributed in advance from the path guarantee system 10 (S704). The position information processing terminal 70j appropriately generates a hash value H (R [j-1]) of the previous signature history R [j-1], and generates the secret key Pr [j] based on the public key cryptosystem. The digital signature D [j] is newly generated from the hash value H (R [j-1]) and the physical position data P [j] (S705).

  Next, the position information processing terminal 70j stores the newly generated digital signature D [j] in the RFID tag 206 or the IC card 207 through the input / output interface 7405 by an appropriate operation of the input person j (S706). ). Further, the position information processing terminal 70j includes date / time data T [j] timed by an appropriate timer, the above-mentioned incidental information X [j] appropriately input by the input person j, and the previous signature history R [j -1] hash value H (R [j-1]), the newly generated digital signature D [j], and the physical location data P [j] described above, with an appropriate ID. A signature history R [j] (see FIG. 8) configured by associating a certain N [j] is newly generated and stored in the history storage database 30 (S707). In addition, the input person j transfers the object to which the RFID tag 206 or the IC card 207 is attached to the next input person k.

  By repeating this procedure for j = 2 to j = n−1, the object to which the RFID tag 206 or the IC card 207 is attached is received and transferred in order from the input person 1 to the input person n. In addition, signature history R [1] to R [n] are stored in the history storage database 30.

  Step S703 described above corresponds to a position data generation step, step S705 corresponds to a digital signature generation step, and step S707 corresponds to a history data generation step. Further, the physical position information receiving device 7401 (FIG. 6) described above executes the operation of Step S703, and the signature generation unit 7403 (FIG. 6) described above executes the operation of Step S705. Further, an appropriate CPU provided in the processing apparatus main body 7402 (FIG. 6) of the position information processing terminal 70j and an appropriate program for causing the CPU to execute the operation of step S707 correspond to the history data generation unit. The operation of step S703 may be executed by the appropriate CPU described above using an appropriate program, or the operation of step S705 may be executed by the appropriate CPU described above using an appropriate program.

<<< History verification method >>>
In the present embodiment, when verifying the path of the object to which the RFID tag 206 or the IC card 207 is attached that has been received and transferred between the sites 1, i, j, k, and n in this order, the access terminal 50 A processing procedure will be described.

  As shown in the flowchart of FIG. 9, the access terminal 50 is appropriately operated by a user who has received an object to which an RFID tag 206 or an IC card 207 is attached, for example, from an input person n. The digital signature D [n] is read from the RFID tag 206 or the IC card 207 through the access unit) (S901). The access terminal 50 decrypts the digital signature D [n] using the public key Pu [n] appropriately acquired in advance based on the public key cryptosystem described above, and hashes the signature history R [n−1]. A value H (R ′ [n−1]) and physical position data P ′ [n] are obtained (S902).

  Next, the access terminal 50 accesses the history storage database 30 and acquires the signature history R [n] including the digital signature D [n]. The access terminal 50 compares H (R ′ [n−1]) obtained in step S902 with H (R [n−1]) of R [n] received from the history storage database 30. P ′ (n) obtained in step S902 is compared with P (n) of R [n] received from the history storage database 30 (S903). If it is determined that at least one of the two sets is not the same (S903: N), the access terminal 50 displays a message such as “no authentication” on an appropriate display provided in the access terminal 50. The process is terminated (S907).

  If it is determined that all of the above two sets are the same (S903: Y), when n is reduced by 1 (S904), if n is not 0 (S905: N), the access terminal 50 The operations in steps S902 and S903 described above are executed for n which is reduced by one. When the operations of Steps S902 to S905: N are repeated and n = 0 in Step S905 (S505: Y), the access terminal 50 changes P [1] to P [n] corresponding to the object path. The data are output in order (S906). This output may be obtained by appropriately mapping the obtained P [1] to P [n] number and symbol information to map information or address information. In this way, it is possible to easily grasp the actual physical path.

  In the present embodiment, an appropriate CPU provided in the access terminal 50 and an appropriate program for causing the CPU to execute the operation of step S902 correspond to the decryption unit. In the present embodiment, R [0] is appropriate information as an initial value of the signature history.

=== Chain structure of digital signature ===
According to the path guarantee system 10 of the present embodiment, the digital signature D [j] is generated based on the position data P [j] and the previous signature history R [j-1] for each receipt / transfer. Is done. The history data R [j] is generated based on the hash value H (R [j-1]) of the previous signature history R [j-1] and the digital signature D [j]. The storage database 30 stores it. Therefore, the digital signature D [j] includes not only the position information of the base j but also the position information of the base 1 to the base j-1. Therefore, the route guarantee system 10 can guarantee the route that the electronic information or the object has followed, for example, to the user. In addition, the digital signature D [j] has such a logical chain structure, and the signature history R [j] having a similar chain structure is stored in the history management database 30. The history management database 30 is managed by, for example, an administrator who is neutral to the input users 1 to n and users. For example, when the input person j tries to tamper or forge the digital signature D [j], not only the other digital signatures D [1] to D [j-1] included in the digital signature D [j] The history management database 30 must be accessed and the same falsification or forgery must be performed. Such tampering or counterfeiting is extremely difficult. Therefore, the route guarantee system 10 according to the present embodiment can record a receipt / transfer history that is difficult to be tampered with or forged with respect to electronic information or objects.

  Further, according to the path guarantee system 10 of the present embodiment, based on the public key cryptosystem, the input person j generates the digital signature D [j] with the private key Pr [j], and the user uses the public key Pu [ j] to decrypt the digital signature D [j]. As a result, it becomes more difficult to falsify or forge the digital signature D [j], and thus the path guarantee system 10 of the present embodiment can record a receipt / transfer history that is difficult to falsify or forge regarding electronic information or objects.

  Further, according to the route guarantee system 10 of the present embodiment, as shown in FIGS. 4 and 8, the signature history R [j] includes the incidental information X [j] in addition to the position data P [j]. . As a result, electronic information can be obtained with various states and remarks at each site 1, i, j, k, n, such as the time, temperature, humidity, pressure, noise level, carbon dioxide concentration in the atmosphere, image information, etc. Alternatively, the path of the object can be specified, and the reliability of the path is improved. Note that the position data P [j] and the incidental information X [j] are not separate, and the position data P [j] can be regarded as including the incidental information X [j].

=== Other Embodiments ===
The above-described embodiments of the present invention are intended to facilitate understanding of the present invention, and are not intended to limit the present invention. The present invention can be changed and improved without departing from the gist thereof, and equivalents thereof are also included in the present invention.

  In the above-described embodiment, the physical position data is the position of each base 1, i, j, k, n based on the GPS signal, but is not limited to the GPS signal. For example, in addition to GPS signals, FM broadcast small area base station signals and mobile telephone small area base station signals may be used.

  In the above-described embodiment, only the physical position data is the position data P [j]. However, the present invention is not limited to this, and the logical position data or the physical position data and the logical position data are not limited thereto. Data obtained by combining position data may be used as position data. This further improves the reliability of the electronic information or the object path.

  In the above-described embodiment, the signature history R [j] includes the position data P [j] and the accompanying information X [j] attached to the position data P [j]. It is not limited to this. For example, the signature history R [j] further stores various information related to the position information processing terminals 701, 70i, 70j, 70k, and 70n, which are electronic information or object transit bases 1, i, j, k, and n. May have a detailed information area. This further improves the reliability of the electronic information or the object path.

  In the above-described embodiment, the case where the electronic document M and the digital signature are simultaneously transferred as different data has been described. However, the present invention is not limited to this. When the electronic document M is structured, the electronic document M and the digital signature are integrated by embedding the digital signature in the electronic document M by an appropriate operation of an appropriate program included in the position information processing terminal 70. You may transfer it.

It is a block diagram which shows the structural example of the path | route guarantee system of 1st and 2nd embodiment. It is a block diagram which shows the structural example of the position information processing apparatus of 1st Embodiment. It is a flowchart which shows the procedure of the process of the path | route recording method of 1st Embodiment. It is a schematic diagram which shows an example of the signature log | history of 1st Embodiment. It is a flowchart which shows the procedure of the process of the path | route verification method of 1st Embodiment. It is a block diagram which shows the structural example of the position information processing apparatus of 2nd Embodiment. It is a flowchart which shows the procedure of the process of the path | route recording method of 2nd Embodiment. It is a schematic diagram which shows an example of the signature log | history of 2nd Embodiment. It is a flowchart which shows the procedure of the process of the path | route verification method of 2nd Embodiment.

Explanation of symbols

10 route guarantee system 30 history management database 50 access terminals 70, 701, 70i, 70j, 70k, 70n position information processing terminals 72, 721, 72i, 72j, 72k, 72n input devices 74, 741, 74i, 74j, 74k, 74n Location information processing device 206 RFID tag 207 IC card 7401 Physical location information receiving device 7402 Processing device body 7403 Signature generation unit 7404 Logical location information acquisition unit 7405 I / O interface

Claims (15)

A history recording system for recording a history of electronic information each time electronic information is received and transferred in turn with a digital signature attached by a plurality of transferees,
A plurality of transferee terminals that can be connected to each other through an information communication network, and a database that stores at least history data relating to the history of the electronic information,
Each of the transferee terminals is:
A position data generation unit that generates position data related to the position of the transferee terminal;
Read the previous history data associated with the digital signature received from the previous transferee terminal from the database, and newly add the digital signature based on the previous history data and the location data A digital signature generator to generate;
A history data generating unit that generates a hash value of the previous history data, newly generates the history data based on the hash value and the newly generated digital signature, and stores the history data in the database;
A history recording system comprising: A management terminal that can be connected to the information communication network and tracks the history of the electronic information;
The digital signature generation unit of the transferee terminal generates a digital signature by encrypting the history data and the location data with a secret key based on a public key cryptosystem,
The management terminal includes a decryption unit that decrypts the digital signature with a public key corresponding to the secret key to generate the history data and the position data.
The history recording system according to claim 1. A portable storage medium is a history recording system that records the history of a portable storage medium each time it is received and transferred in order while a digital signature is stored by a plurality of transferees.
A plurality of transferee terminals having an access unit for accessing the portable storage medium that can be connected to each other through an information communication network, and a database that stores at least history data relating to the history of the portable storage medium; Prepared,
Each of the transferee terminals is:
A position data generation unit that generates position data related to the position of the transferee terminal;
The previous history data associated with the digital signature read from the portable storage medium through the access unit is read from the database, and the digital signature is based on the previous history data and the position data. A digital signature generation unit that newly generates and stores it in the portable storage medium through the access unit;
A history data generating unit that generates a hash value of the previous history data, newly generates the history data based on the hash value and the newly generated digital signature, and stores the history data in the database;
A history recording system comprising: A management terminal that can be connected to the information communication network and that has an access unit for accessing the portable storage medium and tracks the history of the portable storage medium;
The digital signature generation unit of the transferee terminal generates a digital signature by encrypting the history data and the location data with a secret key based on a public key cryptosystem,
The management terminal includes a decryption unit that decrypts the digital signature with a public key corresponding to the secret key to generate the history data and the position data.
The history recording system according to claim 3.   The history recording system according to claim 3, wherein the portable storage medium is an RFID tag or an IC card.   6. The history recording system according to claim 1, wherein the position data generation unit includes a position measuring device that measures a physical position of the transferee terminal.   The position data generation unit acquires a logical position in the information communication network of the terminal for transferee and generates the position data based on the logical position. The history recording system according to any one of the above.   6. The history recording system according to claim 1, wherein the position data further includes incidental information other than the position of the transferee terminal.   6. The history recording system according to claim 1, wherein the history data includes information on the terminal for the transferee related to the transfer of transfer. A transferor terminal for receiving and transferring electronic information accompanied by a digital signature, and recording the history of the electronic information each time the transfer is received and transferred;
A position data generation unit that generates position data related to the position of the transferee terminal;
The previous history data associated with the digital signature received from the previous transferee terminal is read from a database connectable through an information communication network, and based on the previous history data and the location data A digital signature generation unit for newly generating the digital signature;
A history data generating unit that generates a hash value of the previous history data, newly generates the history data based on the hash value and the newly generated digital signature, and stores the history data in the database;
A terminal for transferee, characterized by comprising: Each time a portable storage medium is received and transferred, the transferee terminal records the history of the portable storage medium while storing a digital signature in the portable storage medium,
An access unit for accessing the portable storage medium;
A position data generation unit that generates position data related to the position of the transferee terminal;
The previous history data associated with the digital signature read from the portable storage medium through the access unit is read from a database connectable through an information communication network, and the previous history data and the position data are read A digital signature generation unit that newly generates the digital signature on the basis of and stores the digital signature in the portable storage medium through the access unit;
A history data generating unit that generates a hash value of the previous history data, newly generates the history data based on the hash value and the newly generated digital signature, and stores the history data in the database;
A terminal for transferee, characterized by comprising: A history recording method for recording a history of electronic information each time electronic information is received and transferred in order with a digital signature attached by a plurality of transferees,
A position data generation step for generating position data relating to the position of the terminal for the transferee;
Read the previous history data associated with the digital signature received from the previous transferee terminal from the database, and newly generate the digital signature based on the previous history data and the location data Generating a digital signature;
A history data generation step of generating a hash value of the previous history data, newly generating the history data based on the hash value and the newly generated digital signature, and storing the history data in the database;
A history recording method comprising: A history recording method for recording a history of a portable storage medium each time a portable storage medium is received and transferred in order while a digital signature is stored by a plurality of transferees,
A position data generation step for generating position data relating to the position of the terminal for the transferee;
The digital signature is read from the portable storage medium through the access unit, the previous history data associated with the digital signature is read from the database, and the digital signature is based on the previous history data and the position data. Generating a new signature and storing it in the portable storage medium through the access unit; and
A history data generation step of generating a hash value of the previous history data, newly generating the history data based on the hash value and the newly generated digital signature, and storing the history data in the database;
A history recording method comprising: A history recording program for causing a recipient transferer terminal to execute a history recording method for recording a history of electronic information every time electronic information is received and transferred in sequence with a digital signature attached by a plurality of transferees. And
A position data generation step for generating position data related to the position of the terminal for the transferee;
The previous history data associated with the digital signature received from the previous transferee terminal is read from a database connectable through an information communication network, and based on the previous history data and the location data A digital signature generating step for newly generating the digital signature;
A history data generation step of generating a hash value of the previous history data, newly generating the history data based on the hash value and the newly generated digital signature, and storing the history data in the database;
A history recording program characterized by comprising: History that causes the transferee's terminal to execute a history recording method for recording the history of the portable storage medium each time a portable storage medium is received and transferred in order while a digital signature is stored by a plurality of transferees A recording program,
A position data generation step for generating position data related to the position of the terminal for the transferee;
Read the history data associated with the digital signature read from the portable storage medium through an access unit for accessing the portable storage medium from a database connectable through an information communication network; A digital signature generation step of newly generating the digital signature based on the previous history data and the position data, and storing the digital signature in the portable storage medium through the access unit;
A history data generation step of generating a hash value of the previous history data, newly generating the history data based on the hash value and the newly generated digital signature, and storing the history data in the database;
A history recording program characterized by comprising:

Images