JP2005267022A - Document data management system, document data management method and document data management program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent the provision of falsified document data to safely manage the document data in a state that the document data allows the use of a third party. <P>SOLUTION: In a document data provision process, a data processing part confirms whether or not there is a risk that the document data are falsified on the basis of an electronic certificate and an electronic signature added with the document data designated by a user-authenticated acquisition user. When a hash value obtained by decrypting the electronic signature by a public key included in the electronic certificate accords with a hash value of the document data themselves, it is decided that the document data are not falsified. Next, the data processing part generates the document data incorporated with hidden character information embossed when performing printing, outputs them to a printer, and makes the printer print a document including the hidden character information. Accordingly, the hidden character information is printed on each page of the outputted document together with visible information. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a document data management system and the like that manages document data obtained by digitizing a document so that it can be provided to a user who wants to use it. In particular, the document data is stored and provided to a third party after taking copyright measures. The present invention relates to a document data management system, a document data management method, and a document data management program.

  Conventionally, document data obtained by digitizing a document such as a book has been accumulated, and a document based on the accumulated document data is provided by printing the document data in response to a request from the user. There has been proposed a system in which document data is provided by sending the document data through a communication network in response to the request (for example, Patent Documents 1-4).

  Japanese Patent Application Laid-Open No. H10-228667 describes that fingerprint verification is performed in the authentication of a user who is trying to acquire document data in order to improve security.

  Patent Document 2 describes that document data captured by a scanner is encrypted in order to improve security.

  Patent Document 3 describes that document data captured by a scanner is automatically transmitted to a user via a communication network.

  Patent Document 4 describes that document data is stored in association with specific information and searched using the specific information.

JP 2002-44329 A (paragraphs 0024 to 0026, FIG. 5) JP 2001-352452 A (paragraph 0009) JP 2001-298573 A JP 2000-172720 A (paragraph 0009)

  However, in Patent Document 1 described above, since no consideration is given to the copyright protection related to the accumulated document data, there is a possibility that the altered document data may be provided, and the provided document data is provided. There has been a problem that the stored document data cannot be properly managed as a copyrighted work.

  In the systems described in Patent Documents 2 to 4, the document data is used only by a specific user who has accumulated the document data. Cannot be applied to a system for widely providing copyrighted work as document data.

  Even if document data is concealed and access rights are managed, tampering prevention measures are effective as security measures because they must go through complicated procedures such as approval procedures for copyright holders related to document data. It cannot be said that it is taken in.

  The present invention solves the above-described problems, can prevent falsified document data from being provided, and can safely manage document data in a state where it can be used by a third party. The purpose is to do so.

  A document data management system according to the present invention is a document data management system (for example, the document data management system 100) that manages document data obtained by digitizing a document so that it can be provided to a user who wants to use the document data storage system. In response to the registration request received by the means (for example, the data storage unit 91), the registration request receiving means for receiving the registration request for the document data (for example, the part that executes step S401 in the authentication device 20), Document data registering means for associating document data with document data additional information (for example, electronic certificate, electronic signature) for confirming that the document data is authentic data and registering it in the document data storage means (For example, the part that executes step S404 in the data processing unit 10) and the capture of document data An acquisition request receiving unit that receives a request (for example, the part that executes step S501 in the authentication device 20) and a document data extracting unit that extracts document data from the document data storage unit in response to the acquisition request received by the acquisition request receiving unit (For example, a part for executing processing for extracting document data or the like after step S501 in the data processing unit 10), document data extracted by the document data extraction unit, and document data additional information associated with the document data Are used to confirm whether or not the document data is genuine data (for example, a part for executing steps S502 and S503 in the data processing unit 10) and the document data confirmation means. If it is confirmed that the data is authentic, the document data Document data output means for outputting to provide the person who wants to use (e.g., portions for performing the steps S509 in the printer 50, portions for performing the steps S512 in the data transfer unit 60), characterized in that a.

  By configuring as described above, document data can be provided to a user who wants to use it only when the document data is genuine data, and it is possible to prevent falsified document data from being provided. Therefore, the document data can be safely managed in a state where it can be used by a third party.

  An electronic signature in which document data to be registered is signed by a certificate acquisition means for acquiring an electronic certificate of a person who wants to register document data (for example, the part that executes step S401 in the authentication device 20) and a private key of the person who wants to register The document data registration unit associates an electronic certificate and an electronic signature with document data as additional document data information, for example, an electronic signature acquisition unit (for example, a part that executes step S403 in the data processing unit 10). (Eg, step S404), the document data confirmation unit is configured to confirm whether or not the document data is authentic data using an electronic certificate and an electronic signature (eg, steps S502 and S503). Also good.

  The document data registration unit registers copyright information of the document data in association with the document data as hidden print information (for example, hidden character information) (for example, step S401), and the document data output unit associates with the document data. The hidden print information may be incorporated into the document data and output (eg, step S509, step S512).

  With the above configuration, it becomes possible to provide document data in which copyright information is embedded or a document on which copyright information is printed, and the provided document data or document is altered and used. Can be prevented, and unauthorized use of the copyrighted work can be suppressed.

  The document data acquisition request includes a partial use request for cutting out and using a part of the document data, and cutting out a part of the document data extracted by the document data extracting unit based on the partial use request. A partial extraction means (for example, a data cutout unit 70) for extracting the partial document data as a partial document data, and a partial document for proving that the partial document data is authentic data to the partial document data extracted by the partial extraction means. Partial document data additional information processing means for associating data additional information (for example, a part for executing step S512 after step S506 in the data processing unit 10), and the document data output means is extracted by the partial extraction means Output partial document data and partial document data additional information associated by the partial document data additional information processing means. (E.g., step S512) may be configured so.

  With the above configuration, even if partial document data that is a part of document data is provided, the provided partial document data and partial documents can be prevented from being altered and used. Unauthorized use of copyrighted works can be suppressed.

  Certificate generating means for generating an electronic certificate of partial document data (for example, the part for executing step S506 in the additional data generating unit 80) and electronic signature generating means for generating an electronic signature of the partial document data (for example, additional data generating unit) The partial document data additional information processing means includes the electronic certificate generated by the certificate generating means and the electronic signature generating means as the partial document data additional information. The electronic signature may be associated with the partial document data (for example, step S512 after step S506 in the data processing unit 10).

  The document data output means is configured to print out a document based on the document data (for example, step S509).

  In response to a registration request received by the registration request receiving means, a document data generating means (for example, the scanner 40) that takes in a document provided by a person who desires to register document data and generates document data may be provided.

  A document data management method according to the present invention is a document data management method for managing document data obtained by digitizing a document so that it can be provided to a user who wants to use the document data, and a step of receiving a document data registration request (for example, step S401) In response to the received registration request, the document data is associated with document data additional information (for example, an electronic certificate or an electronic signature) for confirming that the document data is authentic data. A step of registering in the storage means (eg, data storage unit 91) (eg, step S404), a step of receiving a document data acquisition request (eg, step S501), and the document data from the document data storage means in response to the received acquisition request (For example, a process of extracting document data after step S501), Using the document data and the document data additional information associated with the document data, a step (for example, steps S502 and S503) for confirming whether or not the document data is authentic data, and the document data When it is confirmed that the data is authentic, a step (for example, step S509, step S512) of outputting the document data to provide a user who desires use is executed.

  By configuring as described above, document data can be provided to a user who wants to use it only when the document data is genuine data, and it is possible to prevent falsified document data from being provided. Therefore, the document data can be safely managed in a state where it can be used by a third party.

  A step of obtaining an electronic certificate of a person who wants to register document data (for example, step S401) and a step of acquiring an electronic signature in which the document data to be registered is signed with the private key of the applicant for registration (for example, step S403). The electronic certificate and the electronic signature are associated with the document data as the document data additional information (for example, step S404), and whether or not the document data is genuine data is used using the electronic certificate and the electronic signature. (For example, steps S502 and S503).

  The copyright information of the document data is registered in association with the document data as hidden print information (for example, step S401), and the hidden print information associated with the document data is incorporated into the document data and output (for example, step S509). Step S512) may be configured.

  With the above configuration, it becomes possible to provide document data in which copyright information is embedded or a document on which copyright information is printed, and the provided document data or document is altered and used. Can be prevented, and unauthorized use of the copyrighted work can be suppressed.

  The document data acquisition request includes a partial use request for cutting out and using a part of the document data, and cutting out a part of the document data extracted by the document data extracting unit based on the partial use request. A step (eg, step S505) of extracting as partial document data, and a step of associating the extracted partial document data with partial document data additional information for proving that the partial document data is authentic data ( For example, step S512 after step S506) is executed, and the extracted partial document data and partial document data additional information associated with the partial document data are output (for example, step S512). May be.

  With the above configuration, even if partial document data that is a part of document data is provided, the provided partial document data and partial documents can be prevented from being altered and used. Unauthorized use of copyrighted works can be suppressed.

  A step of generating an electronic certificate of the partial document data (for example, step S506) and a step of generating an electronic signature of the partial document data (for example, step S506) are executed to generate the generated electronic certificate as the partial document data additional information. The document and the electronic signature may be associated with the partial document data (for example, step S512 after step S506).

  A document data management program according to the present invention is a document data management program for managing document data obtained by digitizing a document so that it can be provided to a user who wants to use the document data. A step of receiving a registration request (for example, step S401), and document data and document data additional information for confirming that the document data is genuine data (for example, an electronic certificate, A step (for example, step S404) for registering the electronic signature in association with the document data storage unit (for example, the data storage unit 91), a step for receiving a document data acquisition request (for example, step S501), and the received acquisition request. In accordance with the step of extracting document data from the document data storage means ( For example, using the extracted document data and the additional document data information associated with the document data using the process after step S501 to extract the document data or the like, whether the document data is authentic data. A step of confirming whether or not the document data is authentic data, and a step of outputting the document data to provide a user who wants to use the document data (for example, step S509). , Step S512).

  By configuring as described above, it is possible to allow a user who wants to provide document data only when the document data is genuine data, and to prevent falsified document data from being provided. Therefore, the document data can be safely managed in a state where it can be used by a third party.

  Further, a step of acquiring an electronic certificate of a person who wants to register document data in the computer (for example, step S401), and a step of acquiring an electronic signature in which the document data to be registered is signed with the private key of the applicant for registration (for example, Step S403) is executed, and as the document data additional information, an electronic certificate and an electronic signature are associated with the document data (for example, Step S404), and whether or not the document data is authentic data is referred to as an electronic certificate. A process of confirming using an electronic signature (for example, steps S502 and S503) may be executed.

  Further, the copyright information of the document data is registered in the computer in association with the document data as hidden print information (eg, step S401), and the hidden print information associated with the document data is incorporated into the document data and output. (For example, step S509, step S512) The process may be executed.

  With the above configuration, it becomes possible to provide document data in which copyright information is embedded or a document on which copyright information is printed, and the provided document data or document is altered and used. Can be prevented, and unauthorized use of the copyrighted work can be suppressed.

  The document data acquisition request includes a partial use request for cutting out and using a part of the document data, and the document data extracted by the document data extracting unit based on the partial use request. Cutting out a part of the document data and extracting it as partial document data (for example, step S505), and adding the partial document data additional information for proving that the partial document data is genuine data to the extracted partial document data The step of associating (for example, step S512 after step S506) is executed, and the extracted partial document data and the partial document data additional information associated with the partial document data are output (for example, step S512). You may make it perform a process.

  With the above configuration, even if partial document data that is a part of document data is provided, the provided partial document data or partial document can be prevented from being altered and used. Unauthorized use of copyrighted works can be suppressed.

  The computer is further caused to execute a step of generating an electronic certificate of partial document data (for example, step S506) and a step of generating an electronic signature of partial document data (for example, step S506). You may make it perform the process which matches the produced | generated electronic certificate and electronic signature with partial document data (for example, step S512 after step S506).

  According to the present invention, it is possible to prevent falsified document data from being provided, and it is possible to safely manage document data in a state where the document data can be used by a third party.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing an example of the configuration of a document data management system 100 according to an embodiment of the present invention.

  As shown in FIG. 1, a document data management system 100 includes a data processing unit 10 that controls the entire system 100, an authentication device 20, an access monitoring unit 30, a scanner 40, a printer 50, and a data transfer unit. 60, a data cutout unit 70, an additional data generation unit 80, a work data storage unit 90, a data storage unit 91, and a transmission destination data storage unit 92.

  The document data management system 100 holds document data obtained by digitizing a document such as a book, and transmits document data via a communication network or a document based on the document data in response to a document data or document use request. It has a function of providing document data and documents by printing out.

  In this embodiment, for the sake of simplicity, a representative of an individual or organization who owns the copyright for a document provides the document to a third party (including sales). Description will be made assuming that data is registered in the system 100 as data. In other words, it is assumed that the copyright holder of the document performs a document data registration act (operation for registration). However, a person who has a legitimate title regarding the use of the copyrighted work may be registered by the person who is not the copyright holder himself.

  The authentication device 20 has a function of acquiring user information (for example, personal information registered in an IC card, fingerprint) from a user who uses the system 100 and performing user authentication. Specifically, the authentication device 20 is configured by, for example, an IC card reader or a fingerprint collation device.

  The authentication device 20 performs user authentication processing for authenticating a user who wants to use the document data stored in the data storage unit 91 (for example, an acquisition user Y described later) and the data storage unit 91. For executing user authentication processing for authenticating a user who wants to register the document data (for example, registered user X, which will be described later, which matches the copyright holder of the document to be registered in this example) Have

  The access monitoring unit 30 has a function of monitoring access to the data storage unit 91 in which document data is stored, and notifying the monitoring result to the data processing unit 10. The access monitoring unit 30 also monitors various types of processing necessary for generating access history information, such as processing related to provision of document data by the data processing unit 10.

  In response to the monitoring result from the access monitoring unit 30, the data processing unit 10 generates access history information indicating an access history and stores it in the system 100 (for example, the data storage unit 91).

  The access history information is information indicating the provision contents of the document data. Specifically, for example, the provided document data, the provision destination, the provision date and time, and the provision method (provide by printing or provision by data transmission). , Information indicating the scope of provision (either provision of the full text of the document or provision by cutting out a part of the document).

  The scanner 40 is an example of an input device for capturing a document that is non-electronic data into the system 100 as digitized document data. The printer 50 is an example of an output device that prints document data and outputs it as a document.

  The data transfer unit 60 has a function of executing processing for outputting document data and the like to the outside of the system 100 via a communication network.

  When providing the partial document data that is a part of the document data or the partial document that is a part of the document, the data cutout unit 70 performs a process of cutting out a part of the document data and generating the partial document data. Execute.

  The additional data generation unit 80 has a function of generating additional information (electronic signature, electronic certificate) to be added to the partial document data extracted by the data extraction unit 70.

  The copyright data storage unit 90 is a storage medium that stores copyright holder data and the like. The copyright holder data includes various types of information related to the copyright owner of the document data such as the name of the copyright owner and an e-mail address. Note that the copyright holder data includes information on the author of the document data (such as the author's name) and copyright information (the date, date of publication, date of publication, and unauthorized copying are prohibited). Notes) may be included.

  In the copyright data storage section 90, for example, as shown in FIG. 2, copyright holder data, a proxy work secret key described later, a proxy work public key described later, and a copyright owner ID are associated with each other. Stored.

  Note that the copyright holder data includes hidden character data described later. The hidden character information in the copyright holder data is stored so as to be distinguishable from other information.

  The data storage unit 91 is a storage medium that stores document data provided by a document provider.

  For example, as shown in FIG. 3, the data storage unit 91 stores document data, an electronic certificate, an electronic signature, and a copyright holder ID in association with each other.

  The transmission destination data storage unit 92 is a storage medium that stores an e-mail address indicating a transmission destination of document data.

  The transmission destination data storage unit 92 stores a user's public key registered in advance as a transmission destination selection candidate and the user's e-mail address in association with each other.

Next, the operation of the document data management system 100 will be described in detail.
Here, a case where a security infrastructure (PKI: Public-Key Infrastructure) using public key cryptography is used will be described as an example. Here, an IC card reader is used as the authentication device 20.

  FIG. 4 is a flowchart illustrating an example of document data registration processing executed by the document data management system 100. In this example, a registered user X who wishes to register document data in the system 100 is authenticated by an IC card given in advance by an administrator of the system 100, and owns the copyright. A case where a registered document is registered as document data will be described as an example.

  In the document data providing process, the authentication device 20 first performs a user authentication process based on the card registration information registered in the IC card presented by the registered user X (step S401).

  Specifically, in step S401, the authentication device 20 acquires the electronic certificate of the registered user X included in the card registration information, and uses the public key of the registered user X included in the electronic certificate. Then, arbitrary data is encrypted and transmitted to the IC card. Then, the IC card decrypts the received encrypted data using the secret key of the registered user X, and transmits the decrypted data to the authentication device 20. In step S401, the authentication device 20 determines whether or not to authenticate the registered user X by confirming whether or not the decrypted data returned from the IC card matches arbitrary data.

  The IC card used by the registered user X includes a microcomputer that performs various types of arithmetic processing and a memory that stores various types of information. In the memory of this IC card, for example, card registration information including an electronic certificate of the registered user X and a secret key of the registered user X is stored.

  Note that the card registration information may not include an electronic certificate, and may instead include information indicating a storage location in the system 100 in which the electronic certificate is stored in advance. In this case, the authentication device 20 performs processing for acquiring the electronic certificate of the registered user X from the storage location in the system 100 specified by the card registration information. In the above case, it is necessary to register the electronic certificate of the registered user X in the system 100 in advance.

  In addition, the electronic certificate of the registered user X includes, for example, copyright holder data including the name and e-mail address of the registered user X who is the copyright owner, and various types of information such as the public key of the registered user X. It is.

  When the registered user X is authenticated, the data processing unit 10 includes the copyright data storage unit 90 so that the copyrighted character data included in the digital certificate of the registered user X can be identified. Save to. At this time, the copyright holder data and the document data are associated with each other by the copyright holder ID.

  That is, in this example, in the document data registration process, after performing user authentication in step S401, the data processing unit 10 assigns a copyright holder ID and relates to the document data registered by the registered user X. The copyright included in the electronic certificate stored in the memory in the IC card presented by the registered user X, which is issued by the public key for proxy work and the secret key for proxy work to perform the processing on behalf The person data is associated with the copyright holder ID, the proxy work public key, and the proxy work secret key and stored in the work data storage unit 90 (see FIG. 2).

  Since the copyright holder data includes hidden character information, which will be described later, it is desirable that the copyright holder data be signed with the secret key of the entire system 100 and encrypted with the proxy work public key for the registered user X. If comprised as mentioned above, even if copyright holder data is stolen, it can be made impossible to use, and forgery can also be prevented.

  Further, when the registered user X is authenticated, the data processing unit 10, for example, prompts the registered user X to set a document on the scanner 40 (for example, “Set the document to be registered”). Or display on a display device (not shown) included in the system 100.

  When a document is set by the registered user X, the scanner 40 scans the set document and captures it as digitized data, thereby generating document data obtained by digitizing the document (step S402). This document data is, for example, image image data.

  When the document data is generated by the scanner 40, the data processing unit 10 obtains an electronic signature of the document data in the scanning unit (document data obtained by a series of scanning performed on all the documents) from the IC card. (Step S403).

  Specifically, in step S403, the data processing unit 10 generates a hash value from the document data using a hash function, transmits the hash value to the IC card, and uses the microcomputer included in the IC card to obtain the secret key of the registered user X. The electronic signature signed (encrypted) using the IC card is acquired.

  When the electronic signature of the document data is acquired, the data processing unit 10 adds the electronic signature acquired in step S403 and the electronic certificate acquired in the user authentication in step S401 to the document data generated in step S402. Are stored in the data storage unit 91 in association with each other (step S404).

  In step S404, the data processing unit 10 encrypts the document data with the proxy work public key issued when the user is authenticated to perform data processing with the registered user X. The data may be stored in the data storage unit 91.

  After the user authentication of the registered user X as described above, the copyright holder data including the hidden character information is stored in the copyright data storage unit 90, and the electronic signature and the electronic certificate correspond to the document data. In addition, processing for accumulating in the data accumulating unit 91 is performed.

  FIG. 5 is a flowchart illustrating an example of document data provision processing executed by the document data management system 100. In this example, a case where an acquisition user Y who desires acquisition of document data registered in the system 100 acquires document data will be described as an example.

  In the document data providing process, first, the authentication device 20 performs a user authentication process based on the card registration information registered in the IC card presented by the acquisition user Y (step S501). The user authentication process is performed in the same manner as in step S401 described above.

  When the user is authenticated, the acquisition user Y selects the document data desired to be acquired, the selection of the acquisition range between “acquisition of the entire document” and “acquisition of part of the document”, When the acquisition range is "Acquire part of document", specify the part you want to acquire, and select and acquire the acquisition method of "Acquire by document" or "Acquire by electronic data" When the method is “acquisition by electronic data”, designation of the output destination of the document data is performed using a user interface provided in the system 100, for example.

  When the document data desired to be acquired is designated by the obtaining user Y, the data processing unit 10 extracts the document data stored in the designated data storage unit 91 and its additional information, and uses it as additional information of the document data. It is checked whether an electronic signature and an electronic certificate are included (step S502).

  If an electronic signature or certificate is not added to the document data, the document data may not be properly registered, and no action can be taken to prevent unauthorized use of the document data. The process is terminated without providing.

  In step S502, the data processing unit 10 also confirms the validity of the electronic certificate (for example, confirms that necessary items are described and the expiration date has not expired). If the electronic certificate is not valid, the processing is terminated without providing the document data because it is impossible to take a measure for suppressing unauthorized use of the document data.

  If an electronic signature and a valid electronic certificate are added to the document data, the data processing unit 10 checks whether there is a possibility that the document data to be provided has been tampered with (step S503).

  Specifically, in step S503, the data processing unit 10 uses the public key included in the electronic certificate (the public key of the registrant of the corresponding document data) to decrypt the electronic signature, the document Check whether the hash value of the data itself matches. If they do not match, the data processing unit 10 determines that the document data may be falsified.

  If it is determined that the document data has been tampered with, the process ends without providing the document data in order to protect copyright.

  Next, the data processing unit 10 confirms whether the acquisition range designated by the acquisition user Y is “acquisition of the entire document” or “acquisition of a part of the document” (step S504).

  When the acquisition range is “acquisition of a part of the document”, the data cutout unit 70 cuts out the portion specified by the acquisition user Y from the document data in accordance with the instruction of the data processing unit 10 and reads the partial document data. Is generated (step S505).

  The partial document data is, for example, a part of the document data (for example, pages 10 to 20) or a part of the page constituting the document data (for example, the first to third lines, a table described in the page). Or graph).

  When the partial document data is generated, the additional data generation unit 80 generates a proxy work secret key (see FIG. 2) for performing the proxy work of the copyright holder related to the document data to be acquired in accordance with the instruction of the data processing unit 10. Using this, an electronic signature of the partial document data to be provided is generated and an electronic certificate of the system 100 is created (step 506).

  That is, in step 506, the additional data generation unit 80 substitutes the partial document data generated by the data cutout unit 70 for the registrant who registered the document data that is the source of the partial document data. An electronic signature signed with the work private key is generated.

  Further, in step 506, the additional data generation unit 80 is an electronic certificate for certifying that the system 100 has signed the document data on behalf of the registrant who registered the document data that is the source of the partial document data to be provided. Create a certificate.

  Next, the data processing unit 10 checks whether the acquisition method designated by the acquisition user Y is “acquisition by document” or “acquisition by electronic data” (step S507).

  If the acquisition method is “acquisition by document”, the data processing unit 10 selects a hidden character information file in which the hidden character information that stands out when printed is stored (step S508).

  For example, in step S508, a file that stores a part or all of the copyright holder data included in the electronic certificate associated with the document data to be acquired is selected as the hidden character information file. The The hidden character information file may be selected based on the copyright holder data stored in the copyright data storage unit 90. Further, as described above, data used as hidden character information is encrypted when stored in the work data storage unit 90 or the data storage unit to prevent falsification, and decrypted when used during printing. It is desirable to do.

  When the hidden character file is selected, the data processing unit 10 generates document data or partial document data in which the hidden character information is embedded, outputs the data to the printer 50, and prints the document or partial document including the hidden character information on the printer 50. (Step 509).

  Accordingly, each page of the output document includes visible information (information displayed when the document based on the document data is displayed on the screen) and hidden character information (in this example, part of the copyright holder data or Information indicating all) is printed.

  The “hidden character information” means information that is not displayed when a document based on document data is displayed on the screen, but is displayed on a document printed based on the document data.

  Techniques for applying hidden character information to the surface during printing (specifically, techniques for generating document data or partial document data incorporating hidden character information) include, for example, “TrustMarking” (Fuji Xerox) Any of various types of software that has been put into practical use may be used.

  If the acquisition method is “acquisition by electronic data”, the data processing unit 10 stores hidden character information for raising the electronic data acquired by the acquisition user Y in the same manner as in step 508. A hidden character information file is selected (step S510). When the hidden character file is selected, the data processing unit 10 generates document data or partial document data in which hidden character information is incorporated.

  When the document data or partial document data in which the hidden character information is incorporated is generated, the data processing unit 10 determines that the transmission destination designated by the acquisition user Y is stored in the transmission destination data storage unit 92. The document data or the partial document data is encrypted with the public key of the transmission destination user stored in correspondence (step 511).

  For example, if the acquisition user Y designates himself as a transmission destination, and the acquisition user Y's own destination (for example, an e-mail address) and a public key are registered in advance in the transmission destination data storage unit 92, in step S511 The document data or partial document data to be provided is encrypted with the public key of the acquisition user Y. If the transmission destination and public key designated by the acquisition user Y are not stored in the transmission destination data storage unit 92, encryption is not performed.

  Then, the data transfer unit 60 transmits the document data to be provided or the partial document data in which the hidden character information is embedded to the transmission destination designated by the acquisition user Y via the communication network (step 512). When transmitting the partial document data, the electronic signature and electronic certificate generated in step 506 are attached and transmitted. When transmitting the document data, the electronic signature and electronic certificate confirmed to be added in step S502 are attached and transmitted.

  When the provision of the document data or the partial document data is finished, the data processing unit 10 provides the provided document data, the providing method, the providing requester, the providing destination, the providing date and time, etc. based on the monitoring result from the access monitoring unit. The provision history information (access history information) indicating the history of the information is accumulated (step 513). The provision history information is used when calculating the number of sales of document data, the sales amount, and the like.

  As described above, in one embodiment of the present invention, there is a configuration in which an electronic certificate or electronic signature for confirming whether or not falsification has been performed is registered as a set together with document data, and a document data acquisition request has been made. In this case, since it is configured to check whether or not the document data has been tampered with, it is possible to prevent the document data that may have been tampered with from being provided to a third party. Therefore, when the document data is a copyrighted work, the copyright can be appropriately protected.

  Also, as described above, when providing document data based on stored document data or document data, it is provided with security measures such as printing copyright information on the document or attaching an electronic signature to the document data. Therefore, the provided document data or document can be prevented from being altered and used, and unauthorized use of the copyrighted work can be suppressed. In addition, the reliability when the provided document or document data is used can be improved, and the user of the document or document data can confirm the reliability or confirm the copyright holder. Work can be reduced.

  As described above, all security measures such as electronic signatures are automatically performed in the system 100, so that document data registered in the system 100 can be appropriately managed as a copyrighted work, and provided from the system 100. It is possible to appropriately manage the document and the document data as a copyrighted work. As a result, the copyright can be protected and the responsibility for the original work can be clarified. Therefore, document data storage and version number management functions can be improved.

  Further, since all security measures such as electronic signature are automatically performed inside the system 100, processing for registering and providing document data can be performed at high speed.

  In the above-described embodiment, when providing a part of the accumulated document data or a part of the document based on the document data, not only the relevant part is cut out from the document data but also the cut out partial document. Since the data is provided with security measures, it is possible to improve the reliability when the provided partial documents and partial document data are used, and the users of the partial documents and partial document data are trusted. It is possible to reduce the troublesome work of confirming the property or confirming the copyright holder or the like.

  In other words, as a security measure for the extracted partial document data, an electronic signature signed with the proxy work secret key issued for the registrant who registered the document data that is the original of the partial document data extracted from the document data is generated. At the same time, an electronic certificate for certifying that the system 100 has signed the document or the like is created on behalf of the registrant who registered the original document data of the partial document data and added to the partial document data. Therefore, when a part of the document data is provided, the authenticity of the partial document data can be newly obtained.

  Note that the electronic signature signed with the proxy work private key also guarantees the authenticity of the data included in the electronic signature (for example, the e-mail address of the signer), so the security of the system itself Certainty can be improved.

  In addition, as a security measure for the extracted partial document data, the copyright owner data is incorporated as the hidden character data in the partial document data. Therefore, when the partial document on which the partial document data is printed is used, tampering is performed. You can keep it from breaking.

  In addition, as a form in the case of using a part of a document, for example, in order to create a document in which a part of the document is cited, a part of the document may be inserted into another document and used. . Even if it is used in this way, some documents obtained for citation are printed with hidden characters, so the partial document used for citation is related to the copyright of the partial document. Information can be included.

  In the above-described embodiment, since the access history information is automatically accumulated, it is possible to manage the number of usages of document data and to easily derive the billing amount to the user of the document data. can do. Information such as the sales amount of each document data (including the case where it is acquired as partial document data) is registered in the system 100 in advance, and the charge amount for each user and the amount for each registrant are registered in the access history information. The sales amount may be included. With this configuration, various amounts exchanged for providing document data can be automatically calculated. Furthermore, the system 100 may also perform billing processing for each user.

  In the above-described embodiment, as a security measure for the extracted partial document data, the proxy work secret key issued for the registrant who registered the document data that is the source of the partial document data extracted from the document data is used. The signed electronic signature is generated and added to the partial document data. However, the registrant's private key is stored in the system 100, and the original document data extracted from the document data is registered. An electronic signature may be generated by signing the partial document data with the secret key of the registered user and added to the partial document data. In this case, the electronic certificate of the registrant who registered the document data that is the basis of the cut out partial document data (the electronic certificate acquired when registering the document data) may be added to the partial document data.

  Although not specifically mentioned in the above-described embodiment, it is preferable that a common key used temporarily is exchanged between the system 100 and the IC card in the course of user authentication processing. . This common key is used to reduce the load of encryption processing. Specifically, the transmission side encrypts the target data to be communicated with the common key, encrypts the common key with the reception side public key, and transmits the two data. Then, the receiving side decrypts the common key with its own secret key, and decrypts the target data encrypted with the decrypted common key. In this way, if the target data with a large amount of data is encrypted with a common key with a high processing speed and the common key with a small amount of data is encrypted with a public key, the public key with a slow processing speed has a large amount of data. Compared with the case where target data is encrypted, the processing load is reduced, and the overall processing speed can be increased.

  Further, although not particularly mentioned in the above-described embodiment, “document data” is not limited to data obtained by digitizing a book, and various documents described on paper media such as characters and figures are digitized. Means generated data.

  Further, among the data stored in the system 100, for data that is highly necessary to ensure security, data that is not particularly mentioned in the above-described embodiment is also encrypted with the secret key of the system 100 or the like. It is desirable to keep it.

  In addition, although not particularly mentioned in the above-described embodiment, any part of each unit included in the above-described document data management system 100 may be connected via a communication network such as the Internet. For example, the printer 50 may be provided outside the system 100. In this case, the printer may be configured to perform processing only in accordance with an instruction from the system 100 functioning as a printer server, and reject a print instruction from other than the system 100.

  In the above-described embodiment, the document data registration applicant, the acquisition applicant, and the transmission destination user are mainly described as individuals. However, the registration applicant, the acquisition applicant, and a part of the transmission destination user or The whole may be an organization such as a company. For example, a publishing company can be considered as a registration applicant, a book sales company as an acquisition candidate, and a library as a destination user.

  Although not specifically mentioned in the above-described embodiment, each process executed in the system 100 is executed according to a control program (document data management program) installed in the system 100. This control program is a document data management program for managing document data obtained by digitizing a document so that it can be provided to a user who wants to use it. Specifically, the control program requests the document data management system 100 to register document data. In response to the received step (for example, step S401) and the received registration request, the document data and document data additional information for confirming that the document data is authentic data (for example, an electronic certificate, an electronic signature) Are registered in the document data storage means (for example, the data storage unit 91) (for example, step S404), the step for receiving the document data acquisition request (for example, step S501), and the received acquisition request The step of extracting document data from the document data storage means (for example, after step S501) Using the extracted document data and the document data additional information associated with the document data, it is confirmed whether or not the document data is authentic data. Steps (for example, steps S502 and S503), and steps for outputting the document data to provide a user who wants to use the document data when the document data is confirmed to be authentic (for example, steps S509 and S512). Is a program for executing

  In addition, the control program further obtains an electronic certificate of a person who wants to register document data in the document data management system 100 (for example, step S401), and the document data to be registered using the secret key of the person who wants to register. Is acquired (eg, step S403), the electronic certificate and the electronic signature are associated with the document data as the document data additional information (eg, step S404), and the document data is authentic. This is a program for executing processing for confirming whether or not the data is electronic data using an electronic certificate and an electronic signature (for example, steps S502 and S503).

It is a block diagram which shows the example of a structure of the document data management system in one embodiment of this invention. It is explanatory drawing which shows the example of the storage data of a work data storage part. It is explanatory drawing which shows the example of the storage data of a data storage part. It is a flowchart which shows the example of the document data registration process in one embodiment of this invention. It is a flowchart which shows the example of the document data provision process in one embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Data processing part 20 Authentication device 30 Access monitoring part 40 Scanner 50 Printer 60 Data transfer part 70 Data extraction part 80 Additional data generation part 90 Work data storage part 91 Data storage part 92 Transmission destination data storage part 100 Document data management system

Claims (17)

A document data management system for managing document data obtained by digitizing a document so that it can be provided to a user who wants to use it.
Document data storage means for storing document data;
A registration request receiving means for receiving a document data registration request;
In response to the registration request received by the registration request receiving unit, the document data and the document data additional information for confirming that the document data is authentic data are associated with each other in the document data storage unit. Document data registration means to be registered;
An acquisition request receiving means for receiving a document data acquisition request;
Document data extraction means for extracting document data from the document data storage means in response to the acquisition request received by the acquisition request reception means;
Document data confirmation means for confirming whether or not the document data is authentic data using the document data extracted by the document data extraction means and the document data additional information associated with the document data When,
Document data output means for outputting the document data to provide a user who wants to use the document data when the document data confirmation means confirms that the document data is authentic data. Management system. A certificate acquisition means for acquiring an electronic certificate of a person who wants to register document data;
An electronic signature acquisition means for acquiring an electronic signature in which document data to be registered is signed by the secret key of the registration applicant,
The document data registration means associates the electronic certificate and the electronic signature with the document data as document data additional information,
The document data management system according to claim 1, wherein the document data confirmation unit confirms whether or not the document data is genuine data using the electronic certificate and the electronic signature. Document data registration means registers the copyright information of the document data in association with the document data as hidden print information,
The document data management system according to claim 1, wherein the document data output unit outputs the hidden print information associated with the document data by being incorporated in the document data. The document data acquisition request includes a partial use request for extracting and using a part of the document data,
Partial extraction means for extracting a part of document data extracted by the document data extraction means as partial document data based on the partial use request;
Partial document data additional information processing means for associating the partial document data extracted by the partial extraction means with partial document data additional information for proving that the partial document data is authentic data,
The document data output means outputs the partial document data extracted by the partial extraction means and the partial document data additional information associated with the partial document data additional information processing means. The document data management system according to any one of the above. Certificate generating means for generating an electronic certificate of partial document data;
Electronic signature generation means for generating an electronic signature of the partial document data,
The partial document data addition information processing means associates the electronic certificate generated by the certificate generation means and the electronic signature generated by the electronic signature generation means with the partial document data as partial document data additional information. The document data management system according to claim 4. The document data management system according to any one of claims 1 to 5, wherein the document data output means prints out a document based on the document data. 7. A document data generating unit that takes in a document provided by a person who desires to register document data and generates document data in response to a registration request received by the registration request receiving unit. 2. The document data management system according to item 1. A document data management method for managing document data obtained by digitizing a document so that it can be provided to a user who wants to use it.
Receiving a document data registration request;
Registering the document data with the document data additional information for confirming that the document data is authentic data in association with the received registration request in the document data storage means;
Receiving a document data acquisition request;
In response to the received acquisition request, extracting document data from the document data storage means;
Using the extracted document data and the document data additional information associated with the document data to confirm whether the document data is authentic data;
And a step of outputting the document data in order to provide it to a user who wants to use the document data when the document data is confirmed to be authentic data. Obtaining an electronic certificate of a person who wants to register document data;
Obtaining an electronic signature in which document data to be registered is signed by the secret key of the applicant for registration,
As the document data additional information, the electronic certificate and the electronic signature are associated with the document data,
The document data management method according to claim 8, wherein whether or not the document data is genuine data is confirmed using the electronic certificate and the electronic signature. The copyright information of the document data is registered in association with the document data as hidden print information,
The document data management method according to claim 8 or 9, wherein the hidden print information associated with the document data is output by being incorporated into the document data. The document data acquisition request includes a partial use request for extracting and using a part of the document data,
Cutting out a part of the document data extracted by the document data extraction means based on the partial use request and extracting it as partial document data;
Associating the extracted partial document data with partial document data additional information for proving that the partial document data is authentic data,
The document data management method according to any one of claims 8 to 10, wherein the extracted partial document data and partial document data additional information associated with the partial document data are output. Generating an electronic certificate of partial document data;
Generating an electronic signature of the partial document data,
The document data management method according to claim 11, wherein as the partial document data additional information, the generated electronic certificate and electronic signature are associated with the partial document data. A document data management program for managing document data obtained by digitizing a document so that it can be provided to a user who wants to use it.
On the computer,
Receiving a document data registration request;
Registering the document data with the document data additional information for confirming that the document data is authentic data in association with the received registration request in the document data storage means;
Receiving a document data acquisition request;
In response to the received acquisition request, extracting document data from the document data storage means;
Using the extracted document data and the document data additional information associated with the document data to confirm whether the document data is authentic data;
A document data management program for executing, when it is confirmed that the document data is genuine data, a step of outputting the document data to provide a user who wants to use the document data. On the computer,
And obtaining an electronic certificate of a person who wishes to register document data;
Obtaining an electronic signature in which document data to be registered is signed by the secret key of the applicant for registration,
As the document data additional information, the electronic certificate and the electronic signature are associated with the document data,
14. The document data management program according to claim 13, for executing a process of confirming whether or not the document data is genuine data using the electronic certificate and the electronic signature. On the computer,
Furthermore, the copyright information of the document data is registered in association with the document data as hidden print information,
The document data management program according to claim 13 or 14, for executing a process of embedding and outputting hidden print information associated with document data in the document data. The document data acquisition request includes a partial use request for extracting and using a part of the document data,
On the computer,
A step of cutting out a part of the document data extracted by the document data extraction means based on the partial use request and extracting it as partial document data;
Associating the extracted partial document data with partial document data additional information for proving that the partial document data is authentic data,
The document according to any one of claims 13 to 15, for executing a process of outputting the extracted partial document data and partial document data additional information associated with the partial document data. Data management program. On the computer,
And generating an electronic certificate of the partial document data;
Generating an electronic signature of the partial document data,
The document data management program according to claim 16, for executing a process of associating the generated electronic certificate and electronic signature with the partial document data as partial document data additional information.

Images