JP2005275112A - Encryption/decryption system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enable a user to transmit secret data without the need of complicated operations. <P>SOLUTION: When a portable storage device wherein a password and an encryption/decryption program are recorded is loaded on a user computer 2, the encryption/decryption program is executed. In the program, the secret data are encrypted by using the password. The encrypted secret data are transmitted to a server computer 3. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an encryption / decryption system used when transmitting / receiving confidential data.

  Conventionally, when sending confidential data as an email attachment, the sender and receiver have the same file encryption / decryption software and a private key so that the contents of the file cannot be viewed by a third party. It is usually performed that a password to be transmitted is transmitted from the sender to the receiver by telephone, verbal or another e-mail, and the confidential data is encrypted / decrypted by using the password.

  However, in the conventional method described above, the password input operation for encryption / decryption is not only troublesome, but if a complicated password is set to increase security, an input error is invited or remembered. Sometimes you forget. Moreover, since it is necessary to install software, it takes time and there is a problem that such a method is difficult to spread.

  The present invention has been made in view of the above circumstances, and relates to an encryption / decryption system capable of transmitting confidential data without requiring a complicated operation by a user.

  To achieve the above object, according to a first aspect of the present invention, there is provided an encryption system comprising a user computer connected to a network and a server computer connected to the network, wherein the user computer is configured to identify a customer. Means for reading the customer identification data, password and encryption / decryption program from a portable storage device storing data, a password corresponding to the customer identification data, and an encryption / decryption program for encrypting the data And means for executing the read encryption / decryption program, and encrypting data to be transmitted by using the read password by the executed encryption / decryption program And the read customer identification by the executed encryption / decryption program And means for creating an e-mail with the encrypted data as an attached file, and means for transmitting the created e-mail by the executed encryption / decryption program The server computer includes means for receiving the transmitted email, a database associated with customer identification data, an email address, and a password corresponding to the customer identification data, and the received email Means for acquiring customer identification data, a source e-mail address and encrypted data, means for acquiring a password corresponding to the acquired customer identification data and e-mail address from the database, and the acquired Means for decrypting the acquired encrypted data using a password Encryption / decryption system according to claim Rukoto is.

  According to a second aspect of the present invention, in the first aspect, the portable storage device further stores data indicating a destination address, and the reading means is stored in the portable storage device. The data indicating the address of the transmission destination is further read, and the executed encryption / decryption program transmits the created electronic mail using the data indicating the address of the transmission destination. An encryption / decryption system characterized by the above.

  Further, according to a third aspect of the present invention, there is provided a database in which a user computer connected to a network, a customer identification data, an e-mail address, and a password corresponding to the customer identification data are associated with the network. In the encryption / decryption method in the encryption / decryption system comprising the server computer, the user computer uses the customer identification data, the password corresponding to the customer identification data, and the encryption for encrypting the data. Read out the customer identification data, password and encryption / decryption program from the portable storage device storing the encryption / decryption program, execute the read encryption / decryption program, and execute the encrypted The password read by the encryption / decryption program And using the encrypted / decrypted program executed to encrypt the data to be transmitted, including the read customer identification data, and using the encrypted data as an attached file Create and send the created email by the executed encryption / decryption program, receive the sent email at the server computer, and identify the customer included in the received email Get the data, the email address of the sender and the encrypted data, obtain the password corresponding to the acquired customer identification data and email address from the database, using the acquired password, An encryption / decryption method characterized by decrypting the acquired encrypted data.

  ADVANTAGE OF THE INVENTION According to this invention, the encryption / decryption system which can transmit confidential data, without requiring a complicated operation for a user can be provided.

  Hereinafter, an encryption / decryption system according to an embodiment of the present invention will be described with reference to the drawings.

  FIG. 1 is a diagram showing an overall configuration of an encryption / decryption system according to an embodiment of the present invention. As shown in the figure, a user computer 2 and a server computer 3 of a financial institution are connected to a network 1 such as the Internet.

  In the encryption / decryption system, the user computer 2 encrypts confidential data (for example, data for requesting a periodic financial transaction to a financial institution) based on the encryption processing according to the embodiment of the present invention. , Withholding slip, etc.) is transmitted to the server computer 3 of the financial institution.

  The server computer 3 decrypts the encrypted confidential data transmitted from the user computer 2 based on the decryption process according to the embodiment of the present invention to obtain the confidential data.

  FIG. 2 is a diagram showing the configuration of the user computer and the server computer according to the embodiment of the present invention. Although the configurations of the user computer 2 and the server computer 3 are shown here, the difference between the two is that the server computer 3 has the database 23, whereas the user computer 2 does not have the database 23. In the embodiment of the present invention, the confidential data 25 is obtained by inputting the confidential document from the input unit 18 in the user computer 2, but since the server computer 3 does not perform such processing, the confidential data 25 is It is not stored in the HDD 19.

  As shown in the figure, in the user computer 2 and the server computer 3, the bus 11 includes a CPU 12, a memory 13, a USB terminal 14, a display unit 16, a communication unit 17, an input unit 18 and an HDD (Hard Disk Drive) 19. It is connected.

  The CPU 12 controls the user computer 2 or the server computer 3 as a whole, and executes the encryption / decryption processing according to the embodiment of the present invention by executing the encryption / decryption program 22.

  The memory 13 is used as a work area or the like required when executing the encryption / decryption program 22.

  The USB terminal 14 is a terminal for attaching and detaching the USB memory 15, and is a terminal defined by the standard.

  The USB memory 15 is distributed from the financial institution to the user. As shown in FIG. 3, the USB memory 15 includes an encryption / decryption program 31, customer identification data (ID) 32, password data 33, and destination address data 34. Stored.

  The encryption / decryption program 31 performs encryption / decryption processing according to the embodiment of the present invention, and is downloaded from the USB memory 15 to the HDD 19 of the user computer 2 and automatically executed.

  Customer identification data (ID) 32 is user identification data (ID) in the USB memory 15 and is downloaded from the USB memory 15 to the HDD 19 of the user computer 2.

  The password data 33 is user password data specified by the customer identification data (ID) 32 and is downloaded from the USB memory 15 to the HDD 19 of the user computer 2.

  The transmission destination address data 34 is electronic mail address data indicating the transmission destination of confidential document data, and is data indicating the electronic mail address of the server computer 3 in the embodiment of the present invention. The destination address data 34 is downloaded from the USB memory 15 to the HDD 19 of the user computer 2 and is set to the destination of the e-mail program 24 by the encryption / decryption program 22.

  The display unit 16 is a display device such as a display, and the communication unit 17 controls communication with other computers via the Internet. The input unit 18 is an input device such as a keyboard or a scanner, and is used for inputting a confidential document.

  The HDD 19 stores an OS (Operating System) 21, an encryption / decryption program 22, a database 23, an e-mail program 24, confidential data 25 input from the input unit 18, and the like.

  The OS 21 is an operating system that manages basic operations of the user computer 2 or the server computer 3.

  The encryption / decryption program 22 is downloaded from the USB memory 15 in the user computer 2 and installed in the server computer 3.

  The database 23 is provided in the server computer 3 and stores customer identification data (ID) 41, a password 42, and transmission source e-mail address data 43 in association with each other as shown in FIG.

  The customer identification data (ID) 41 and password 42 correspond to the customer identification data 32 and password data 33 stored in the USB memory 15 distributed to the user, and the management of the USB memory 15 distributed by the database 23 is managed. Done.

  The e-mail program 24 is a program for sending and receiving e-mail. The confidential data 25 is fetched from the input unit 18 in the user computer 2 and stored in the HDD 19.

  FIG. 5 is a diagram showing a program structure in the user computer or the server computer. As shown in the figure, an OS 21 is provided on a basic input / output system (BIOS) 50, and an encryption / decryption program 22 and an e-mail program 24 are provided on the OS 21.

  The encryption / decryption program 22 and the e-mail program 24 interact with each other via the OS 21 or directly operate to realize the encryption / decryption processing according to the embodiment of the present invention.

  Next, the operation of the encryption / decryption system according to the embodiment of the present invention will be described with reference to the flowcharts of FIGS.

  First, in the user computer 2, a confidential document to be transmitted is captured using the input unit 18 such as a scanner (S1). The captured confidential document is stored in the HDD 19 as confidential data 25.

  Next, it is determined whether or not the USB memory 15 is attached to the USB terminal 14 (S2). If it is determined in step 2 that the USB memory 15 is attached, the encryption / decryption program 31, customer identification data (ID) 32, password data 33, and destination address data stored in the USB memory 15 are stored. 34 is read (S 3) and stored in the HDD 19.

  Then, the read encryption / decryption program 31 is executed (S4), and the confidential data 25 captured in S1 is encrypted using the password data 33 read from the USB memory (S5).

The encrypted confidential data 25 is processed into an attached file format and then attached to the e-mail. Further, an e-mail including the customer identification data 32 read in S3 is created (S6).
Then, the encrypted confidential data 25 is attached, and an electronic mail including the customer identification data 32 is transmitted to the server computer 3 of the financial institution using the transmission destination address data 34 read in S3 (S7). .

  Next, processing in the server computer 3 will be described with reference to the flowchart of FIG.

  When the confidential data 25 encrypted from the user computer 2 is attached and an electronic mail including customer identification data (ID) 32 is received (S11), the confidential data 25 encrypted from the received mail, customer identification data (ID) ) 32 and the source e-mail address data (e-mail address data of the user computer 2) are acquired (S12).

  Next, the customer identification data (ID) 32 and the transmission source e-mail address data acquired in S12 are used to search the database 23, and the acquired customer identification data (ID) 32 and the transmission source e-mail are searched. The customer identification data (ID) 41 that matches the address data and the password 42 associated with the sender's e-mail address data 43 are acquired (S13).

  Here, a case has been described in which a password is obtained when the customer identification data (ID) 41 and the e-mail address data 43 of the transmission source match, but the determination may be made based on the customer identification data (ID) 41 alone. .

  Thereafter, by using the password acquired in S13, the encrypted confidential data is decrypted, so that the confidential data can be obtained in the server computer 3 (S14).

  Therefore, according to the encryption / decryption system according to the embodiment of the present invention, confidential data can be encrypted and sent to the server computer 3 without inputting a password or the like.

  In the server computer 3, a password is acquired using the customer identification data and the transmission source address data included in the e-mail transmitted from the user computer 2, and the confidential data is acquired using the acquired password. Decoding can be performed.

  In the above-described embodiment, the case where the e-mail address data of the transmission destination is stored in the USB memory 15 and set in the e-mail program has been described. However, the e-mail in which the e-mail address data of the server computer is registered in advance is described. The program may be stored in the USB memory 15 and linked with the encryption / decryption program 31.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. In addition, various inventions can be formed by appropriately combining a plurality of components disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, constituent elements over different embodiments may be appropriately combined.

It is a figure which shows the whole structure of the encryption / decryption system which concerns on embodiment of this invention. It is a figure which shows the structure of the user computer and server computer which concern on embodiment of this invention. It is a figure which shows the data etc. which are stored in USB memory. It is a figure which shows the structure of the database in a server computer. It is a figure which shows the structure of the program in a user computer or a server computer. It is a flowchart for demonstrating operation | movement of the encryption / decryption system which concerns on embodiment of this invention. It is a flowchart for demonstrating operation | movement of the encryption / decryption system which concerns on embodiment of this invention.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Network, 2 ... User computer, 3 ... Server computer, 11 ... Bus, 12 ... CPU, 13 ... Memory, 14 ... USB terminal, 15 ... USB memory, 16 ... Display part, 17 ... Communication part, 18 ... Input part 19 ... HDD, 21 ... OS, 22 ... encryption / decryption program, 23 ... database, 24 ... e-mail program, 25 ... confidential data.

Claims (8)

A user computer connected to the network;
In an encryption system comprising a server computer connected to the network,
The user computer is
The customer identification data, password and encryption / decryption program are stored in a portable storage device storing customer identification data, a password corresponding to the customer identification data, and an encryption / decryption program for encrypting the data. Means for reading;
Means for executing the read encryption / decryption program;
Means for encrypting data to be transmitted using the read password by the executed encryption / decryption program;
Means for creating an e-mail including the read customer identification data and using the encrypted data as an attached file by the executed encryption / decryption program;
Means for transmitting the created e-mail by the executed encryption / decryption program,
The server computer
Means for receiving the transmitted email;
A database associated with customer identification data, an email address, and a password corresponding to the customer identification data;
Means for obtaining customer identification data, source email address and encrypted data contained in the received email;
Means for obtaining a password corresponding to the obtained customer identification data and email address from the database;
An encryption / decryption system, comprising: means for decrypting the acquired encrypted data using the acquired password. The portable storage device further stores data indicating a destination address,
The reading means further reads data indicating a destination address stored in the portable storage device,
2. The encryption according to claim 1, wherein the executed encryption / decryption program transmits the created e-mail using data indicating the read destination address. / Decoding system.   The encryption / decryption system according to claim 1, wherein the portable storage device is a USB memory. A user computer connected to the network;
Encryption / decryption in an encryption / decryption system connected to the network and comprising a server computer comprising a database associated with customer identification data, an e-mail address, and a password corresponding to the customer identification data In the method
In the user computer,
The customer identification data, password and encryption / decryption program are stored in a portable storage device storing customer identification data, a password corresponding to the customer identification data, and an encryption / decryption program for encrypting the data. reading,
Executing the read encryption / decryption program;
The executed encryption / decryption program encrypts data to be transmitted using the read password,
By the executed encryption / decryption program, create an e-mail including the read customer identification data and using the encrypted data as an attached file;
The created email is transmitted by the executed encryption / decryption program,
In the server computer,
Receiving the sent email,
Obtaining customer identification data, source email address and encrypted data contained in the received email;
Obtaining a password corresponding to the acquired customer identification data and email address from the database;
An encryption / decryption method, wherein the acquired encrypted data is decrypted using the acquired password. The customer identification data, password and encryption / decryption program are stored in a portable storage device storing customer identification data, a password corresponding to the customer identification data, and an encryption / decryption program for encrypting the data. Means for reading;
Means for executing the read encryption / decryption program;
Means for encrypting data to be transmitted using the read password by the executed encryption / decryption program;
Means for creating an e-mail including the read customer identification data and using the encrypted data as an attached file by the executed encryption / decryption program;
An encryption apparatus comprising: means for transmitting the created electronic mail by the executed encryption / decryption program. Means for receiving an email containing customer identification data and encrypted data as an attachment;
A database associated with customer identification data, an email address, and a password corresponding to the customer identification data;
Means for obtaining customer identification data, source email address and encrypted data contained in the received email;
Means for obtaining a password corresponding to the obtained customer identification data and email address from the database;
Means for decrypting the obtained encrypted data by using the obtained password. The customer identification data, password and encryption / decryption program are stored in a portable storage device storing customer identification data, a password corresponding to the customer identification data, and an encryption / decryption program for encrypting the data. reading,
Executing the read encryption / decryption program;
The executed encryption / decryption program encrypts data to be transmitted using the read password,
The executed encryption / decryption program creates an email including the read customer identification data and using the encrypted data as an attached file,
An encryption method, wherein the created electronic mail is transmitted by the executed encryption / decryption program. In a decryption method in a decryption apparatus comprising a database in which customer identification data, an email address, and a password corresponding to customer identification data are associated with each other,
Receive email with customer identification data and encrypted data as attachments,
Obtaining customer identification data, source email address and encrypted data contained in the received email;
Obtaining a password corresponding to the acquired customer identification data and email address from the database;
A decryption method, wherein the obtained encrypted data is decrypted using the obtained password.

Images