JP2005303657A - Electronic signature system and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an electronic signature system and program capable of improving convenience in a user and security. <P>SOLUTION: This electronic signature system is provided with a memory 11 for managing and storing information with files and folders, a display part 13 for displaying icons of the folders stored by the memory 11, a mouse 14 for selecting any folder among the folders displayed by the display part 13 according to an instruction of the user, a PC 10 having an operating part 123 for generating the summary of files included in the folder selected by the mouse 14, and an IC card 20 for encrypting the summary generated by the operating part 123 with the user's secret key and generating electronic signature data, and performs the user's electronic signature. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an electronic signature system and program for performing an electronic signature.

Conventionally, seals have been used as marks that have been approved for documents such as documents and marks that indicate who created the documents. In order to add these marks to an electronic document stored in an information processing apparatus such as a computer, there is a mouse electronic seal stamp having a mouse function for marking a stored impression at an indicated position (see, for example, Patent Document 1). .)
However, the mouse electronic seal stamp simply displays the stored impression at the stamping instruction position when the stamping is performed. Therefore, it is unclear how the stamped document will be stored, and even if the stamped document is modified, the impression remains as it is and if the document contents are tampered with There is no possibility. In addition, impersonation may be performed in which a third party other than the stamper copies the imprint image data stamped on the electronic document, and the third party impersonates the legitimate stamper. is there. Therefore, it cannot be said that the imprint image data stamped on the electronic document completely fulfills the roles of identity verification and document authentication. In order to solve this problem, there is an electronic signature system using a public key cryptosystem (see, for example, Patent Document 2).
The public key cryptosystem uses an asymmetric encryption key pair of a public key and a secret key, makes the public key usable by an unspecified person, and the specified person keeps the secret key secret. If the information is encrypted with the public key, only those who can hold the private key can be decrypted. If the information is encrypted with the private key, the person with the public key can decrypt it with the public key. By doing so, it is possible to recognize (identification) that the person who performed the encryption has a private key, and to confirm (document authentication) that the content has not been altered. Also, a person who has a secret key cannot deny that encryption has been performed with the secret key.
JP 2002-229733 A JP 2002-40936 A

  However, this electronic signature system has not been touched on user usage such as operability, and there is a risk of lack of convenience.

  The subject of this invention is providing the electronic signature system and program which can aim at the improvement of a user's convenience, and the improvement of security.

  The present invention solves the above problems by the following means. In addition, in order to make an understanding easy, although the code | symbol corresponding to the Example of this invention is attached | subjected and demonstrated, it is not limited to this. That is, the invention of claim 1 is a storage means (11) for managing and storing information in files and folders, and the contents (131d, 131h) of the files and / or folders stored in the storage means and / or In accordance with the display means (13) for displaying the icons (131c, 131e) and the user's instruction, one or more files or folders selected from the files and / or folders displayed by the display means are selected. A selection unit (14, S130, 15, S130) and a signature unit (20, S130) that performs an electronic signature of the user on a file selected by the selection unit or a file included in a folder selected by the selection unit 123) and an electronic signature system (1).

  According to a second aspect of the present invention, in the electronic signature system according to the first aspect, the display means uses the contents and / or icons of a file or folder that has been digitally signed by the signature means, and the use by the signature means. The electronic signature system (1) is characterized in that it is displayed in association with signed information (131f) indicating that the electronic signature of the person has been signed.

  According to a third aspect of the present invention, in the electronic signature system according to the first or second aspect, the signing means encrypts the file to be digitally signed or a summary thereof with the user's private key (21). The digital signature system (1) is characterized by having signature information generation means (20, S320) for generating signature information.

  According to a fourth aspect of the present invention, in the electronic signature system according to the third aspect, the signature information generating means is provided in a portable information storage medium (20) in which a secret key of the user is stored, and the use This is an electronic signature system (1) characterized in that encryption is performed with the private key of the person.

  According to a fifth aspect of the present invention, in the electronic signature system according to the third or fourth aspect, the storage means includes signature information generated by the signature information generation means and a file based on the signature information. And whether or not the contents of the file have been changed after the electronic signature is performed by the signature unit based on the signature information and the file stored in association by the storage unit Determination means (121, S440), and the display means includes change information (131g) indicating that the change has occurred and the file or the file when the determination means determines affirmative. An electronic signature system (1) characterized by displaying the contents of a folder and / or icons in association with each other.

  The invention of claim 6 is the electronic signature system according to any one of claims 1 to 5, further comprising an input mode switching means (124) for switching an input mode in accordance with a user instruction, The electronic signature system (1) is characterized in that when the input mode is switched to the stamping mode by the input mode switching means, the electronic signature of the user is given.

  The invention of claim 7 is a program to be executed by the computer (10) for digital signature, and the contents (131d, 131h) and / or icons (131c, 131e) of the stored files and / or folders A display procedure (S120) for displaying, a selection procedure (S130) for selecting any one or more of the files and / or folders displayed in the display procedure in accordance with a user instruction, A signature procedure (S140, S150, S160, S310, S320, S330) for performing an electronic signature of the user on the file selected in the selection procedure or the file included in the folder selected in the selection procedure. It is a featured program.

  According to an eighth aspect of the present invention, in the program according to the seventh aspect, the display procedure includes the contents and / or icons of the file or folder that has been digitally signed in the signature procedure, and the electronic document of the user in the signature procedure. The program is characterized by displaying in association with signed information (131f) indicating that the signature has been performed.

  According to a ninth aspect of the present invention, in the program according to the seventh or eighth aspect, the signature procedure includes encrypting the file to be digitally signed or a summary thereof with the user's private key (21). And a signature information generation procedure (S320) for generating signature information.

  According to a tenth aspect of the present invention, in the program according to the ninth aspect, the signature information generating procedure is performed by using the signature information for an external portable information storage medium (20) storing the user's private key. Signature information generation instruction procedure (S150) for instructing generation of signature information and signature information reception procedure (S160) for receiving signature information from the portable information storage medium as a response to the instruction executed in the signature information generation instruction procedure This is a program characterized by that.

  The invention according to claim 11 is a storage procedure for storing the signature information generated in the signature information generation procedure in association with the file that is the basis of the signature information in the program according to claim 9 or claim 10 (S165) and a determination procedure for determining whether or not the contents of the file have changed after the digital signature is performed in the signature procedure based on the signature information and the file stored in association with each other in the storage procedure (S440) And the display procedure includes change information (131g) indicating that the change has been made, and the contents of the file or the folder including the file and / or an icon when it is determined to be positive in the determination procedure. Are displayed in association with each other.

  The invention according to claim 12 is the program according to any one of claims 7 to 11, further comprising an input mode switching procedure (S110) for switching the input mode in accordance with a user instruction, When the input mode is switched to the seal mode in the input mode switching procedure, the electronic signature of the user is performed.

As described above, the present invention has the following effects.
(1) When a user selects a folder and gives an electronic signature, the user's operability is improved by collectively performing an electronic signature on all files in the folder.
(2) By displaying a file icon, a folder icon, a folder window indicating the contents of the folder, and information indicating that the electronic signature has been performed in association with each other, the user can see the electronic signature at first glance. It is possible to determine whether or not the user is present and improve the visibility of the user.
(3) By generating signature information in the portable information storage medium, the user's private key stored in the portable information storage medium is not leaked out of the portable information storage medium, and an electronic signature is performed. The file summary can be encrypted to improve security.
(4) It is determined whether or not the content of the file for which the electronic signature has been changed has been changed. If it is determined that the file has been changed, information indicating the file and folder and the fact that the file has been changed are indicated. By displaying the information in association with each other, the user can confirm (document authentication) whether or not the content of the file has been changed at a glance, thereby improving visibility and security.
(5) When the input mode is switched to the seal mode in accordance with the user's instruction, all the information that can be input in the seal mode can be assigned to the information related to the electronic signature by performing the electronic signature. To improve.
(6) A file icon or the like conventionally used and information indicating that an electronic signature has been performed or information indicating that the contents have been changed are displayed in association with each other, thereby displaying the file type. Improve versatility and convenience without dependence.

  The present invention aims to improve security and user convenience, a storage unit for managing and storing information in files and folders, a display unit for displaying folder icons stored in the storage unit, and use A selection unit that selects any one of the folders displayed by the display unit according to an instruction of the user, and a summary generation unit that generates a summary of the files included in the folder selected by the selection unit An information processing apparatus and a portable information storage medium having a signature information generation unit that encrypts a summary generated by the summary generation unit with a user's private key and generates signature information, and performs an electronic signature of the user Realized by an electronic signature system.

Hereinafter, the present invention will be described in more detail with reference to the drawings.
FIG. 1 is a block diagram showing an embodiment of an electronic signature system according to the present invention.
As shown in FIG. 1, the electronic signature system 1 includes a PC 10 and an IC card 20. The IC card 20 is inserted and connected to the R / W 16 of the PC 10, and the PC 10 and the IC card 20 are in a state where they can communicate with each other. The electronic signature system 1 uses the IC card 20 to perform an electronic signature of a user of the IC card 20 (referred to as “Mr. Yamada” in the present embodiment) to a file or folder in the PC 10 and manage it. It is a system to do.

  The PC 10 is a personal computer, and includes a memory 11, a CPU 12, a display unit 13, a mouse 14, a keyboard 15, an R / W 16, and the like. The CPU 12 is connected to the memory 11, the display unit 13, the mouse 14, the keyboard 15, the R / W 16, and the like.

  The memory 11 is a storage device such as a CD-ROM, a hard disk, a ROM, or a RAM that stores programs, data necessary for program processing, etc., and manages and stores information in a hierarchical structure of files and folders. Yes. The memory 11 stores the file and the signature file linked (associated) with each other. The signature file uses a hash function such as MD5 to generate a summary (digest) by irreversibly converting the file to be digitally signed into a hash value that is small data of a certain size, according to the public key cryptosystem. The digital signature data generated by encrypting this summary with the private key is generated as a file. The electronic signature refers to the entire signing act by electronically expressing a mark or the like on a digital document, and refers to an electronic means replacing the signature performed in the real world. In particular, in this embodiment, the electronic signature system 1 performs a digital signature that is a kind of electronic signature. A digital signature is a digital key encryption method in which a private key cannot be used by anyone other than its owner, and the data generated by encrypting with the private key is decrypted with the public key corresponding to the private key. An electronic signature that confirms that the person who has signed the certificate has a private key. The memory 11 stores a public key corresponding to the user's private key 21 in the public key cryptosystem.

  When a user's instruction is input by operating the mouse 14 or the keyboard 15 by the user, the CPU 12 executes various calculations by executing a program stored in the memory 11 in accordance with the instruction. And control the PC 10 to realize the determination unit 121, the signature file generation unit 122, the calculation unit 123, the control unit 124, and the like. Details of each part will be described later with reference to FIGS.

The display unit 13 includes a file window 131h indicating the contents of the file and folder stored in the memory 11, a folder window 131d, a file icon 131e symbolizing the file and folder, a folder icon 131c, and an arrow indicating the pointing position of the mouse 14. Display device such as a liquid crystal display for displaying a pointer or the like.
The mouse 14 and the keyboard 15 are input devices for inputting user instructions and the like in accordance with user operations. The R / W 16 is a contact reader / writer that mediates communication between the CPU 12 of the PC 10 and the inserted IC card 20.

  The IC card 20 is a portable information storage medium that stores a user's private key 21 and the like, and in accordance with a predetermined command from the PC 10, summarizes the file according to a public key cryptosystem and uses the user's private key 21. Encrypt with A portable information storage medium is a hardware token such as an IC card, and includes an IC and an interface that mediates communication between the external device and the IC. This is a highly confidential portable information processing apparatus that requires predetermined processing by an external CPU such as transmission of a command (processing instruction) by the CPU.

FIG. 2 is a flowchart showing an embodiment of the operation and program of the electronic signature system according to the present invention, and shows an electronic signature process for applying an electronic signature to a file stored in the PC 10. FIG. 3 is a diagram showing a display screen 131 displaying a folder icon 131c, a folder window 131d, and the like. Hereinafter, the processing of the CPU 12 of the PC 10 and the CPU of the IC card 20 will be mainly described.
As shown in FIG. 2, in step 100 (hereinafter, “step” is referred to as “S”) and S300, the IC card 20 is inserted and connected to the R / W 16 of the PC 10 to receive power supply and communicate. It is in a state (see FIG. 1).

  In S110, the PC 10 inputs a user instruction to switch the input mode from the normal mode to the stamping mode from the mouse 14 or the keyboard 15, and the control unit 124 switches the input mode in accordance with this instruction. As shown in FIG. 3, the PC 10 displays the display screen 131 in the marking mode on the display unit 13 (S120). Here, the input mode is a setting for the type of information input from the mouse 14 or the keyboard 15 by the user's operation by the PC 10, and the marking mode is the mouse 14 by the user's operation. In this mode, information relating to an electronic signature such as an instruction relating to the electronic signature is input from the keyboard 15. As shown in FIG. 3A, the display screen 131 in the seal mode switches the arrow-shaped pointer to the seal-shaped mouse cursor 131a and displays it, and the input mode is the seal mode by the mode icon 131b on the task tray. Is shown.

In S <b> 130, the user places the mouse cursor 131 a on the folder icon 131 c on the display screen 131 and clicks the mouse 14, and the PC 10 inputs selection information of a folder to be a digital signature.
In S140, the calculation unit 123 of the PC 10 generates a summary of the files (“kayak 1.doc”, “kayak 2.doc”, “kayak 3.doc”) included in the folder selected in S130 according to the hash function. . In S150, the PC 10 transmits a predetermined command including the summary generated by the calculation unit 123 from the R / W 16 to the IC card 20, and instructs the encryption of the summary.

  In S310, the IC card 20 receives this command, encrypts the received summary with the stored user private key 21 in accordance with the received command, and generates electronic signature data (S320). In S330, the IC card 20 transmits the generated electronic signature data to the PC 10, and ends the electronic signature process (S340).

  In S160, the PC 10 receives the electronic signature data as a response to the command transmitted in S150. The signature file generation unit 122 generates a signature file by converting the electronic signature data into a file, and stores the signature file in the memory 11 by linking it with the file that is the source of the electronic signature data (the file selected in S130) (S165). . The processes from S150, S160, S165, S310 to S330 are repeated for each summary generated in S140. In S170, the PC 10 superimposes the file icon 131e and the folder icon 131c of the file and folder that are the basis of the electronic signature and the signed information display icon 131f indicating that the user's electronic signature has been performed. And displayed on the display unit 13 in association with each other (FIG. 3B).

  In S180, the PC 10 inputs a user instruction to switch the input mode from the stamping mode to the normal mode from the mouse 14 or the keyboard 15, and the control unit 124 switches the input mode in accordance with this instruction. The PC 10 displays the display screen in the normal mode on the display unit 13 and ends the electronic signature process (S200).

  FIG. 4 is a flowchart showing an example of the operation and program of the electronic signature system according to the present invention, and FIG. 5 is a diagram showing the display screen 131 of the display unit 13. FIG. 4 shows determination processing for determining whether or not the contents of a file that has been subjected to an electronic signature have been changed after the electronic signature has been performed. Hereinafter, the processing of the CPU 12 of the PC 10 will be mainly described.

  As shown in FIG. 4, in S410, the user clicks the file icon 131e (see FIG. 3B) of the file with the electronic signature displayed on the display unit 13 with the mouse 14 or the like. The PC 10 inputs a disclosure instruction for this file. In S420, the calculation unit 123 generates a summary of the file selected in S410. In S430, the calculation unit 123 generates a summary by decrypting the signature file stored in the memory 11 by linking with the file selected in S410 using the public key stored in the memory 11.

  In S440, based on the summary generated in S420 and the summary generated in S430, the determination unit 121 determines whether or not the file for which the user issued a disclosure command in S410 has been changed after the electronic signature is performed. Determine. If these summaries match, it is determined that there is no change, and the PC 10 superimposes the file window 131h and the signed information display icon 131f and displays them on the display unit 13 (S450, FIG. 5A). The determination process ends (S470). If it is determined that there is a change without matching (S440), the PC 10 displays the file window 131h and the change information display icon 131g in an overlapping manner on the display unit 13 (S460, FIG. 5B). The determination process ends (S470). Note that a change information display icon 131g is superimposed on the file icon 131e of the file determined to have been changed in this determination process (FIG. 5C). The change information display icon 131g is change information indicating that the file information stored in the memory 11 has been changed after the electronic signature is performed.

As described above, according to the embodiment, when the user selects a folder and instructs the electronic signature, the electronic signature system 1 collectively performs an electronic signature on all the files in the folder. Therefore, it becomes possible to improve the operability for the user.
Further, since the electronic signature system 1 switches the input mode in accordance with a user instruction, all information that can be input from the mouse 14 or the keyboard 15 can be assigned to information related to the electronic signature. For example, the left click of the mouse 14 is used. It is possible to improve the operability of the user by using an electronic signature with a person name, right-clicking with an electronic signature with a job title, clicking with the mouse 14 successively, and performing an electronic signature one after another. It was.

Further, the electronic signature system 1 displays the file window 131h, the folder window 131d, the file icon 131e, the folder icon 131c, and the signed information display icon 131f indicating that the electronic signature has been performed on the display unit 13 in an overlapping manner. Therefore, the user can determine at a glance whether or not an electronic signature is applied to the file, and the visibility of the user can be improved.
Similarly, the PC 10 determines whether or not the content of the file for which the electronic signature has been made has been changed. If it is determined that the file has been changed, it is changed to the file window 131h or the file icon 131e. Since the change information display icon 131g indicating that the file is present is displayed on the display unit 13, the user can confirm (document authentication) whether or not the content of the file has been changed at a glance. And security can be improved.

Furthermore, the electronic signature system 1 displays the signed information display icon 131f and the like on the file icon 131e and the file window 131h that have been used in the past, so that the versatility does not depend on the file type. And it became possible to improve convenience.
In addition, since the electronic signature system 1 generates electronic signature data in the IC card 20, the user's private key 21 stored in the IC card 20 is not leaked outside the IC card 20, and the summary encryption is performed. It is possible to improve security.

(Modification)
The present invention is not limited to the embodiments described above, and various modifications and changes are possible, and these are also within the equivalent scope of the present invention. For example, although the IC card 20 is exemplified as the portable information storage medium, the portable information storage medium is not limited to this, and other portable information storage such as a device such as a SIM card, UIM card, or hardware key. It may be a medium.

  In the electronic signature system 1, the summary is generated by the calculation unit 123, but may be performed by the IC card 20.

  In the electronic signature system 1, the summary encryption is performed by the IC card 20, but the secret key 21 may be stored in the PC 10 and the summary encryption may be performed in the PC 10.

  In the electronic signature system 1, the user clicks on the mode icon 131b of the task tray on which the user is displayed and inputs an input mode switching instruction, but the input mode is switched by pressing a combination of a plurality of keys on the keyboard 15 or the like. An instruction may be input, and the method of inputting the instruction to the PC 10 is not limited.

  The electronic signature system 1 performs an electronic signature on all files included in the folder of the folder icon 131c selected by the user. When one file icon 131e is selected, the electronic signature system 1 performs an electronic signature on the file. Also good. As shown in FIG. 6, when the file window 131h is selected (FIG. 6 (a)), the electronic signature system 1 performs an electronic signature on the file, and the file window 131h of the file for which the electronic signature has been applied. And the signed information display icon 131f may be displayed in an overlapping manner (FIG. 6B).

  When the user selects the folder icon 131c to instruct an electronic signature, the electronic signature system 1 collectively performs an electronic signature on all the files in the folder, but the layered file window When the user instructs the electronic signature by placing the mouse cursor 131a on the overlapping portion of 131h, the electronic signature may be collectively applied to the files in the overlapping file window 131h.

  The electronic signature system 1 may display the file window 131h, the folder window 131d, the file icon 131e, the folder icon 131c, the signed information display icon 131f, and the changed information display icon 131g in association with each other. May be displayed.

  Although the electronic signature system 1 performs an electronic signature on a document file, the electronic signature system 1 may perform an electronic signature on a file other than the document file, such as an image file. The versatility and convenience can be improved without depending on the file type.

  The PC 10 displays the signed information display icon 131f and the change information display icon 131g in both the normal mode and the stamping mode, but may display them only in the stamping mode.

  Although the IC card 20 and the R / W 16 communicate with each other in a contact type, the communication method is not limited as long as communication is possible.

  The control unit 124 performs the determination process of S440 in FIG. 4 when a window disclosure command for a signed file is input (S410 in the same figure), but may be performed when the operation system of the PC 10 is activated, It may be performed when the user switches the input mode to the stamping mode, and the timing for performing the determination process is not limited.

It is a block diagram which shows the Example of an electronic signature system. It is a flowchart which shows the operation | movement of an electronic signature system, and the Example of a program. 6 is a diagram showing a display screen 131 of the display unit 13. FIG. It is a flowchart which shows the operation | movement of an electronic signature system, and the Example of a program. 4 is a diagram showing a display screen 131 of the display unit 13. FIG. It is explanatory drawing for demonstrating the modification of an electronic signature system.

Explanation of symbols

1 Electronic signature system 10 PC
11 Memory 12 CPU
13 Display unit 14 Mouse 15 Keyboard 16 R / W
20 IC card 21 private key 121 determination unit 122 signature file generation unit 123 calculation unit 124 control unit

Claims (12)

Storage means for managing and storing information in files and folders;
Display means for displaying the contents and / or icons of the files and / or folders stored in the storage means;
Selection means for selecting any one or more of the files and / or folders displayed by the display means in accordance with a user instruction;
A signature unit that performs an electronic signature of the user on a file selected by the selection unit or a file included in a folder selected by the selection unit;
An electronic signature system comprising: The electronic signature system according to claim 1,
The display means associates the contents and / or icon of the file or folder digitally signed by the signing means with signed information indicating that the digital signature of the user has been signed by the signing means. Displaying,
An electronic signature system characterized by The electronic signature system according to claim 1 or 2,
The signature means includes signature information generation means for encrypting the file to be digitally signed or a summary thereof with the user's private key to generate signature information;
An electronic signature system characterized by The electronic signature system according to claim 3, wherein
The signature information generating means is provided in a portable information storage medium in which the user's private key is stored, and is encrypted with the user's private key;
Features an electronic signature system. The electronic signature system according to claim 3 or 4,
The storage means stores the signature information generated by the signature information generation means in association with the file that is the basis of the signature information,
Based on the signature information stored in association with the storage unit and the file, a determination unit that determines whether or not the content of the file has changed after the digital signature is performed by the signature unit,
The display means displays the change information indicating that the change has occurred and the contents of the file or the folder including the file and / or an icon in association with each other when the determination means determines affirmative. ,
An electronic signature system characterized by In the electronic signature system according to any one of claims 1 to 5,
Provided with an input mode switching means for switching the input mode according to the user's instructions,
The signing means performs the electronic signature of the user when the input mode is switched to the seal mode by the input mode switching means;
An electronic signature system characterized by A program that causes a computer to execute an electronic signature,
A display procedure for displaying the contents and / or icons of stored files and / or folders;
A selection procedure for selecting any one or more of the files and / or folders displayed in the display procedure in accordance with a user instruction;
A signature procedure for performing an electronic signature of the user on the file selected in the selection procedure or the file included in the folder selected in the selection procedure,
A program characterized by The program according to claim 7,
The display procedure associates and displays the contents and / or icon of the file or folder that has been digitally signed in the signature procedure and the signed information indicating that the user has signed the digital signature in the signature procedure. about,
A program characterized by In the program according to claim 7 or 8,
The signature procedure includes a signature information generation procedure for generating signature information by encrypting the file to be digitally signed or a summary thereof with the user's private key;
A program characterized by The program according to claim 9,
The signature information generation procedure includes a signature information generation instruction procedure for instructing generation of the signature information to an external portable information storage medium storing the user's private key, and the signature information generation instruction procedure. A signature information receiving procedure for receiving signature information from the portable information storage medium as a response to the performed command;
A program that features. In the program according to claim 9 or claim 10,
A storage procedure for storing the signature information generated in the signature information generation procedure in association with the file that is the basis of the signature information;
Based on the signature information stored in association with the storage procedure and the file, and a determination procedure for determining whether or not the content of the file has changed after the electronic signature is performed in the signature procedure,
The display procedure, when it is determined to be affirmative in the determination procedure, the change information indicating that the change has occurred, and the content and / or icon of the file or the folder including the file are displayed in association with each other;
A program characterized by In the program according to any one of claims 7 to 11,
Provided with an input mode switching procedure for switching the input mode according to the user's instructions,
The signature procedure is to perform the electronic signature of the user when the input mode is switched to the seal mode in the input mode switching procedure;
A program characterized by

Images