JP2005346192A - Electronic document recording method and device, computer program, electronic document management system and electronic document browsing device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To securely manage an electronic document file including a document and graphics. <P>SOLUTION: Hash data are generated from document data, and embedded in drawing data with an electronic watermark, and registered in an electronic document and drawing database 12 as an electronic document file. The electronic document file designated by a browser is read from the electronic document and drawing database, and first hash data are generated from document data in the file, and the hash data embedded in the drawing data in the electronic document file are detected as second hash data, and the first and second hash data are compared, and when those hash data are not matched, it is determined that the document data and/or drawing data in the electronic document file have been altered, and the browsing of the electronic document file is inhibited. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an electronic document recording method, an electronic document recording apparatus, a computer program, an electronic document management system, and an electronic document browsing apparatus for managing an electronic document including document data and drawing data.

  In the following Patent Document 1 as a conventional example, when a member user generates unique information of an electronic file to be notarized at a member user terminal and the notary server identifies the member user by sign input, When the information and member user identification information are stored in the database together with the registration key ID, the registration key ID is transmitted to the member user, and the general user performs notarization confirmation of the electronic file, When the unique information is generated from the electronic file using the user terminal, transmitted to the notary server together with the registration key ID obtained together with the electronic file, and the unique information received by the notary server matches the unique information of the database, A method for transmitting notary information to a general user is disclosed.

The digital watermark signal is a technique for embedding some information in multimedia data such as an image or sound. There are various methods of embedding. The following Non-Patent Document 1 proposes an information embedding method based on changing MPEG information, particularly DCT coefficients, motion vectors, and quantization characteristics. Non-Patent Document 2 below proposes a method of diffusing an image signal with a PN sequence and synthesizing signature information with an image according to a direct diffusion method.
JP 2002-24177 A (abstract) "Copyright information embedding method in digital video using DCT", SCIS '97 -31G NTT "Watermark Signature Method for Images Using PN Series", SCIS '97 -26B, National Defense University

  However, in the technique disclosed in Patent Document 1, data access to a notary server can be performed using secure authentication, but it is not disclosed until secure management of electronic document data and images. In particular, document-specific management such as patents must be performed more strictly than normal document management, and the development of a special mechanism has been desired.

  In view of the above-described problems of the conventional example, the present invention provides an electronic document recording method, an electronic document recording apparatus, a computer program, an electronic document management system, and an electronic document browsing apparatus capable of securely managing an electronic document file including documents and graphics. The purpose is to provide.

In order to achieve the above object, an electronic document recording method, an electronic document recording apparatus, and a computer program according to the present invention generate hash data from document data created by a writer when recording an electronic document,
Embed the hash data in the drawing data created by the writer with a digital watermark,
The document data, the drawing data in which the hash data is embedded, and the document management data are combined and registered in the database as an electronic document file.

The electronic document recording method, the electronic document recording apparatus, and the computer program of the present invention embed a predetermined unique code in drawing data created by the writer with a digital watermark in order to achieve the above object,
The document data created by the writer, the drawing data in which the unique code is embedded, and the document management data are combined and registered in the database as an electronic document file.

Further, in order to achieve the above object, the electronic document management system of the present invention generates hash data from document data created by the writer, and the created writer creates the hash data using a digital watermark as a drawing. A file registration means for embedding in the data, combining the document data, the drawing data in which the hash data is embedded, and the document management data and registering it in the database as an electronic document file;
When the viewer has browse access to the database, the viewer is recorded as a log, and the electronic document file designated by the viewer is read from the database, and the document data in the electronic document file is read from the document data. When the first hash data is generated and the hash data embedded in the drawing data in the electronic document file is detected as the second hash data, and the first and second hash data are compared and do not match File browsing means for determining that the document data and / or drawing data in the electronic document file has been tampered with and prohibiting browsing of the electronic document file;
It was set as the structure which has.

In order to achieve the above object, the electronic document management system of the present invention embeds a predetermined unique code in the drawing data created by the writer with a digital watermark, the document data created by the writer, and the unique code File registration means for combining the drawing data embedded with the document management data and registering it in the database as an electronic document file, and recording the writer as a log,
When there is browsing access to the database by a viewer, the viewer is recorded as a log, and a predetermined first unique code is read, and an electronic document file designated by the viewer is read from the database If the unique code embedded in the drawing data in the electronic document file is detected as a second unique code and the first and second unique codes are compared and do not match, the document in the electronic document file File browsing means for determining that the data and / or drawing data has been tampered with and prohibiting browsing of the electronic document file;
It was set as the structure which has.

Further, in order to achieve the above object, the electronic document browsing apparatus of the present invention generates hash data from document data created by the writer, and the created writer creates the hash data using a digital watermark. An electronic document management system that combines the document data, the drawing data embedded with the hash data, and the document management data into a database as an electronic document file and records the entry as a log. A document browsing device,
When the viewer has browse access to the database, the viewer is recorded as a log, and the electronic document file designated by the viewer is read from the database, and the document data in the electronic document file is read from the document data. Means for generating one hash data;
Means for detecting the hash data embedded in the drawing data in the electronic document file as second hash data;
When the first and second hash data are compared and matched, browsing of the electronic document file is permitted, and when they do not match, it is determined that the document data and / or drawing data in the electronic document file has been falsified. And means for prohibiting browsing of the electronic document file,
It was set as the structure which has.

Further, in order to achieve the above object, the electronic document browsing apparatus of the present invention embeds a predetermined unique code in drawing data created by the writer with a digital watermark, the document data created by the writer, and the unique code Is an electronic document browsing device of an electronic document management system that combines the drawing data embedded with the document management data and registers them in a database as an electronic document file, and records the writer as a log,
Means for recording the viewer as a log when the viewer has browse access to the database, and further reading a predetermined first unique code;
Means for reading out the electronic document file designated by the viewer from the database and detecting the unique code embedded in the drawing data in the electronic document file as a second unique code;
When the first and second hash data are compared and matched, browsing of the electronic document file is permitted, and when they do not match, it is determined that the document data and / or drawing data in the electronic document file has been falsified. And means for prohibiting browsing of the electronic document file,
It was set as the structure which has.

  According to the present invention, document data can be recorded in a text format or the like in a record relating to an electronic document, particularly a laboratory notebook electronic document, a drawing data image, a signer image of a writer, a witness, signature data, a date of entry, and a date of viewing. Information can be recorded, and by combining all the information, the management database can be simplified, and the management data can be easily generated because a list of generation recording date / time and browsing date / time can be recorded in the management data. In addition, hash data generated from a part or all of information such as text data and a predetermined unique code can be recorded in a graphic image such as a bitmap with an image digital watermark. It can be detected reliably. In addition, since the combined data can be encrypted, security such as prevention of leakage of electronic documents is improved, and the list data of people who are allowed to enter and view is included, thus preventing unauthorized entry. You can also.

  Embodiments of the present invention will be described below with reference to the drawings. Here, the present invention has realized a system capable of effectively managing hash data, digital watermarks, and database technologies in combination for the purpose of securely recording and reproducing (viewing) LabNote electronic documents. There are two aspects to lab note recording: “rights protection” and “recording in research activities”, and it is important to keep not only regular electronic data management technology but also security and entry and browsing records. come. From the perspective of rights protection, lab notes serve as evidence. In the United States, R & D is not obligated to fill in lab notes, but when used based on appropriate controls, in many cases it can be legally effective as evidence. It also exists in precedents. This is based on the exception of hearsay evidence in Article 803 (e) of the Federal Evidence Rules.

Necessary conditions for a system to record (register) and browse electronic documents in lab notes are as follows:
(1) The contents, date, and entry must be recorded in a secure format in the management information or document.
(2) The signer's signature and the signature of the witness are included in the date.
(3) Lab notes should be stored for 30 years.
(4) Use an individual ID or specific information of a PC to be entered, or a network ID to identify an individual.
(5) Have security that only the person or the viewer can perform.
(6) The technology that indicates that the contents of lab notes or management information has not been tampered with.
(7) Provide a reader entry table.
(8) To be identified by a person who has permission or who is not authorized to view.
it is conceivable that.

<First Embodiment>
Therefore, in the present invention, the system is configured with a focus on the functions of security and entry and browsing record display. FIG. 1 is a block diagram of a recording apparatus according to the first embodiment of the present invention. First, the electronic document data and drawing data created by the writer are input to the electronic document data input device 4 and the drawing data input device 7 via the user interface 3, respectively. The electronic document data is electronic data of word processing software that handles text data. It can be anything in binary or text format. Drawing data is a drawing used for explanation together with documents in research. This may be photographic image data of a digital camera. The format may be any format such as a bitmap format or JPEG compressed from the bitmap format. The user interface 3 inputs these data by a method such as copying a file using the file system of the PC 100.

  The user interface 3 is provided with a handwritten sign diagram input device 6 as a mechanism for inputting a handwritten signature of a writer or a data viewer using a sensor such as pen input. Data input by the handwritten sign diagram input device 6 is input as bitmap image data. The signature can record both the signer's signature and the witness's signature. In addition, the writer or the data viewer inputs the name (signature) and date as a character code with the signature / date data input device 5 through an interface such as keyboard input. In the case of an interface such as a PC, the date may be entered automatically by the date information of the OS.

  Next, the hash data generator 8 generates hash data using the electronic document data input device 4 and signature, and the electronic document data and signature and date data input to the date data input device 5 respectively, or all or part of the date data. To do. The hash data may be generated by a means for calculating a message authenticator or the like. In the authenticator calculation, generally, a hash value of digital data is first calculated, and the calculation result is held as separate data. The “hash value” is a result calculated by what is called a “hash function”. The “hash function” is a function h_K in which it is difficult to obtain x such that h_K (x) = y when a function value y is given. When a “hash function” is used for tamper detection, x is an arbitrary length and y is a fixed length. At this time, h_K changes depending on the secret key K known only to the sender and the receiver. When K and x are given, h_K (x) is set so that it can be easily calculated. That is, the hash data generator 8 performs an operation corresponding to generating this hash value.

  The hash data is transmitted to the digital watermark embedded recorder 9. On the other hand, the image data input to the handwritten sign diagram input device 6 and the drawing data input device 7 is also transmitted to the digital watermark embedding device 9, and the hash data generated by the hash data generator 8 is used as the digital watermark data to generate the image data. It is embedded in the handwritten signature diagram and drawing data. As a digital watermarking method, “a watermark signature method for an image using a PN sequence” described in Non-Patent Document 2, or a method of embedding in an AC or DC component such as DCT may be used.

  The image data and the electronic document data in which the digital watermark information is embedded in this manner are combined with some additional information in the document and image data combiner 10 in the configuration as shown in FIG. Is transmitted. On the other hand, the date / time information is also transmitted from the recording date / time data generator 14 to the encryptor 11 and is encrypted with the date / time information structure of FIG. The encryption method may be anything, but the key information is preferably created by using a hash function for data unique to the PC, for example, data based on the chip serial number, network ID, or the like. Alternatively, a specific administrator may input a password and create the data using a hash function.

  The encrypted data is transmitted to the electronic document / drawing database 12 and stored as an electronic document file. The file is managed as a so-called file system, the file name is set to the name of the writer, and the date and time of data creation is recorded by a mechanism provided in a normal file system. Further, the display unit 1 is connected to the user interface 3, and the input state and the like can be monitored by a GUI or the like. In addition, the entry authenticator 2 enters the entry into the recording device only when the user name and password of the writer or the data viewer are input and registered in the writer and viewer database 13. And browsing. The structure of the writer / browser database 13 is as shown in FIGS. The recording date / time data generator 14, the encryptor 11, the electronic document, the drawing database 12, the writer, and the viewer database 13 are usually provided in the PC 100 and its peripheral devices (hard disk). However, it may be realized with special hardware.

  Next, the data structure in the electronic document / drawing database 12 will be described with reference to FIG. The database is configured on a medium such as a hard disk or an optical disk. One file is composed of one lab note document per day. The database has a document data area D1 first, followed by a drawing data area D2, a signature data area D3, a recording date / time data area D4, and a browsing list area D5 in this order. In the document data area D1, the size information D11 (8 bytes) of the document data area D12 exists as a header, and the size information D11 indicates the data size up to the end of the document data area D12 immediately thereafter. Similarly, the drawing data area D2 has a header indicating the drawing data area size D21 up to the end of the drawing data area D22, followed by the drawing data area D22 of the indicated size.

  Similarly, the sign data area D3 has 8 bytes of headers indicating the sizes D31 and D33 of the writer sign data area D32 and the witness sign data area D34, respectively, and then the writer sign data area D32 of the indicated size. The witness signature data area D34 follows. The document data area D1, the drawing data area D2, and the sign data area D3 can be added with data by changing the size information. A 32-byte kanji code such as “February 4, 2004” or the like is recorded as it is in the recording date / time data area D4.

  The browsing list area D5 includes an area D51 (8 bytes) indicating the number of entries in which the document data or drawing data has been browsed, and an entry data area D52. The entry data area D52 has an area D521 for recording the 32-byte viewer name and an area D522 for recording the browsing date, and each data is recorded. The browsing date / time data area D522 has the same format as the recording date / time data area D4.

  Next, the data structure of the writer / viewer database 13 will be described with reference to FIGS. 3, 4, and 5. FIG. 4 is a diagram showing a data structure indicating entry permission of a writer, that is, a person who fills in a lab note. The database administrator creates this data structure first. Alternatively, this structure may be generated by executing an initial registration program in the user interface 3. The number of entries in FIG. 4 is the number of lab note writers who use this system. By registering one person per entry, the name of the writer, the password used at the time of entry, and the registration date and time can be entered in 32 bytes each.

  FIG. 5 is a diagram showing the structure of a viewer database. The database administrator first creates the data structure for the viewer as well as the writer. Alternatively, this structure may be generated by executing an initial registration program in the user interface 3. The number of entries in FIG. 5 is the number of persons who have the viewing authority to use this system. By registering one person per entry, the name of the viewer, the password used at the time of browsing entry, and the registration date and time can be entered in 32 bytes each. FIG. 3 shows a state in which a log of browsing using the system is left, and the browsing data recorded includes the browsing count, browsing name, and browsing date. This browsing date and time is the date and time when the system was browsed, and the browsing list recorded in the area D5 in FIG. 2 includes the date and time when the document or drawing was browsed.

  Next, the flow of the recording algorithm according to the first embodiment of the present invention will be described with reference to FIG. Since the detailed processing contents of the steps are the same as those described in the description of the block diagram of FIG. 1, only the order of the steps will be briefly described here. First, in step S1, the user name and password of the entry person to be entered are entered. In step S2, it is determined whether the user name is registered in the writer / viewer database 13 and the passwords match. If the determination result is NO, the process returns to step S1. If YES, the process proceeds to step S3. In step S3, an electronic document, drawing data, a handwritten signature, and a date are input. In the next step S4, hash data is generated using a hash function based on the data of the electronic document part.

  In step S5, the generated hash data is embedded as digital watermark data in image data (drawing data and / or handwritten signature image data). In step S6, the document data and the image data are combined into a format as shown in FIG. In step S7, the combined data is encrypted. In step S8, the encrypted data is recorded in the electronic document / drawing database 12. In step S9, the date and time when the encrypted data is recorded in the electronic document / drawing database 12 is recorded in the electronic document / drawing database 12. This is performed by using date information such as a file system. Next, in step S10, it is determined whether there is still document data or drawing data. If YES, the process returns to step S3. If NO, the input operation is terminated.

  Next, a playback apparatus according to the first embodiment of the present invention will be described with reference to FIG. When the viewer makes a browsing entry using the user interface 24, the entry authenticator 23 inquires the viewer about the user name and password. When the user name and password are entered, the configuration data shown in FIG. 5 of the writer / viewer database 13 is referenced to compare whether the name and password match. The request is transmitted to the PC 100 by a control signal (not shown). If they do not match, return to the input screen again. First, the file of the recorded date and time is searched from the date and time of the lab notebook to be browsed in the electronic document and drawing database 12, and the file is transmitted to the encryption / decryption device 33. The encryption / decryption device 33 decrypts the data to obtain the configuration data shown in FIG.

  Next, in the retention period manager 34, the current date and time are compared with the recording date and time shown in FIG. 2 obtained by decrypting the encryption. In the interface 24, a confirmation message asking whether or not to discard this data is issued, and when discarding is permitted, this file is deleted after browsing. It may be deleted after browsing without displaying a message.

  The encrypted / decrypted data is transmitted to the document and image data separator 32. The document and image data separator 32 separates the document data and the image data, and transmits the document data portion to the hash data generator 29. The image data is transmitted to the digital watermark detector 31. The hash value generated by the hash data generator 29 and the hash data recorded as the digital watermark data detected by the digital watermark detector 31 are transmitted to the hash data comparator 30 and compared. The comparison result is transmitted to the display controller 22, and the display controller 22 displays when the comparison result matches, and stops displaying when the comparison result does not match. At the same time as the stop, a warning sound and a warning display may be given that “data may have been tampered with”.

  The electronic document data, the signature, and the date data are transmitted to the electronic document data output unit 25, the signature, and the date data output unit 26 through the hash data generator 29, respectively, and the display controller 22 through the user interface 24. Then, the display 21 performs control based on the comparison result described above. On the other hand, the image data is transmitted to the handwritten signature diagram output device 27 and the drawing data output device 28 via the digital watermark detector 31, and the handwritten signature diagram output device 27 and the drawing data output device 28 are handwritten signature diagrams and drawing data. Is output as necessary. This output is also displayed on the display 21 by the display controller 22 via the user interface 24 and controlled according to the comparison result described above.

  Next, the flow of the reproduction algorithm according to the first embodiment of the present invention will be described with reference to FIG. Since the detailed processing contents of the steps are the same as those described in the description of the block diagram of FIG. 7, only the order of the steps will be briefly described here. First, the user name and password of the viewer to be entered in step S11 are input. In step S12, it is determined whether the user name is registered in the writer / viewer database 13 and the passwords match. If the determination result is NO, the process returns to step S11, and if YES, the process proceeds to step S13.

  In step S13, the electronic document and the combined data of the encrypted electronic document data and drawing data are read from the drawing database 12. In step S14, the read data is decrypted. In step S15, document data and image data are separated. In step S16, hash data is generated using a hash function based on the data of the electronic document portion. In step S17, digital watermark data (hash data) embedded in the image data (drawing data and / or handwritten signature image data) is detected. In step S18, the hash data generated in step S16 is compared with the hash data detected in step S17. In step S19, it is determined whether or not the comparison results match. If NO, the display is stopped in step S20. Along with the stop, a step of performing a warning sound and a warning display that “data may have been tampered with” may be added. Then exit.

  If YES, an electronic document or drawing data is displayed in step S21. A step of displaying date / time information or displaying signature image data as necessary may be provided. In that case, it is possible to perform display by issuing a display request through another user interface (not shown). In step S22, it is determined whether or not there is document data or drawing data. If YES, the process returns to step S13. If NO, it is determined in step S23 whether the storage period has passed 30 years. If it has passed (YES), the document drawing data file is deleted from the database in step S24. Then, the process ends. If not (NO), for example, how many years have passed with respect to the storage period of 30 years, or how many years are to be stored, is displayed in step S25, and then the process ends.

<Second Embodiment>
Next, a recording apparatus according to the second embodiment of the present invention will be described with reference to FIG. First, electronic document data and drawing data are input to the electronic document data input device 4 and the drawing data input device 7 via the user interface 3, respectively. Connected to the user interface 3 is a handwritten sign diagram input device 6 as a mechanism capable of inputting a handwritten signature of a writer or a data viewer using a pen input sensor. The input data is input as bitmap image data by the handwritten signature diagram input device 6. Further, the writer or the data viewer inputs the name (signature) and date as a character code through the interface such as keyboard input, and inputs the signature with the date data input device 5.

  Next, the unique code data read from the ROM 8a, the signature, the signature input to the date data input device 5, and the date data are transmitted to the digital watermark embedding recorder 9. As the unique code data, a system-specific serial number of about 32 bytes may be used. The signature data and date data may each be 32 bytes of data as in the data structure shown in FIG. 2, and a total of 96 bytes of data is embedded in the drawing data with a digital watermark. If that amount of information cannot be embedded in the digital watermark method, the information amount of 96 bytes may be reduced to about 16 bytes by a hash value calculator (not shown).

  On the other hand, the image data input to the handwritten signature diagram input unit 6 and the drawing data input unit 7 is also transmitted to the digital watermark embedding recorder 9, and the above 96-byte unique code data, signature and date data are used as the digital watermark data. Embed in image data. The image data in which the digital watermark information is embedded and the electronic document data are combined in the document and image data combiner 10 together with some additional information in the configuration as shown in FIG. .

  On the other hand, the date / time information from the recording date / time data generator 14 is also transmitted to the encryptor 11 and input to the data of the date / time information structure of FIG. 2 for encryption. Encryption is applied to the entire data structure. Any encryption method may be used, but the key information is preferably created using a hash function of data unique to the PC, such as data based on the serial number of the chip, network ID, or the like. Alternatively, a specific administrator may input a password and create the data using a hash function. Alternatively, a special unique code may be recorded in the ROM data, and a key may be generated based on the data. The encrypted data is transmitted to the electronic document / drawing database 12 and stored as a file. The file is managed as a so-called file system, the file name is set to the name of the writer, and the date and time of data creation is recorded by a mechanism provided in a normal file system.

  Further, the display unit 1 is connected to the user interface 3, and the input state and the like can be monitored by a GUI or the like. Further, the entry authenticator 2 inputs the user name and password of the writer or the data viewer when entering the recording device, and the entry authenticator 2 can input or enter only when the user is registered in the writer and viewer database 13. Browsing is possible. The structure of the writer / viewer database 13 is as shown in FIGS. The recording date / time data generator 14, the encryptor 11, the electronic document, the drawing database 12, the writer, and the viewer database 13 are usually provided in the PC 100 and its peripheral devices (hard disks), respectively. Although it is a form, you may implement | achieve with special hardware.

  Next, the flow of the recording algorithm according to the second embodiment of the present invention will be described with reference to FIG. Since the detailed processing contents of the steps are the same as those described in the description of the block diagram of FIG. 9, only the order of the steps will be briefly described here. First, in step S1, the user name and password of the entry person to be entered are entered. In step S2, it is determined whether the user name is registered in the writer / viewer database 13 and the passwords match. If the determination result is NO, the process returns to step S1, and if YES, the process proceeds to step S3.

  In step S3, an electronic document, drawing data, a handwritten signature, and a date are input. In the next step S4a, the unique code data is read from the ROM 8a. In step S5, the unique code data, signature, and date data are embedded as digital watermark data in the image data (drawing data and / or handwritten signature image data). In step S6, the document data and the image data are combined into a format as shown in FIG. In step S7, the combined data is encrypted. In step S8, the encrypted data is recorded in the electronic document / drawing database 12. In step S9, the date and time when the encrypted data is recorded in the electronic document / drawing database 12 is recorded in the electronic document / drawing database 12. This is performed by using date information such as a file system. Next, in step S10, it is determined whether there is still document data or drawing data. If NO, the input operation is terminated.

  Next, a block diagram of a playback apparatus according to the second embodiment of the present invention will be described with reference to FIG. When the browsing user makes a browsing entry using the user interface 24, the entry authenticator 23 inquires about the user name and password. When the user name and password are entered, the configuration data shown in FIG. 5 of the writer / viewer database 13 is referenced to compare whether the name and password match. Is transmitted to the PC 100 by a control signal (not shown). If they do not match, return to the input screen again. First, the electronic document / drawing database 12 is searched for the file with the recorded date and time from the date and time of the lab notebook to be browsed, and the file is transmitted to the encryption / decryption device 33. The encryption / decryption device 33 decrypts the data to obtain the configuration data shown in FIG.

  Next, the storage period manager 34 compares the current date and time with the recording date and time (D4) shown in FIG. 2 obtained by decrypting the encryption, and if the storage period has passed 30 years, When the user interface 24 issues a confirmation message as to whether or not to discard the data, and if the destruction is permitted, the file is deleted after browsing. It may be deleted after browsing without displaying a message.

  The encrypted / decrypted data is transmitted to the document and image data separator 32. The document and image data separator 32 separates the document data and the image data, and transmits the signature data and the recording date data to the ROM data comparator 30a. Further, the unique code data is read from the ROM 29a, and the unique code data is transmitted to the ROM data comparator 30a together with the signature and date data. The image data is transmitted to the digital watermark detector 31. The unique code data, signature, date data and ROM 29a recorded as the digital watermark data detected by the digital watermark detector 31 and the unique code data, signature and date data separated by the document and image data separator 32 are read into the ROM. Comparison is made by the data comparator 30a.

  The comparison result is transmitted to the display controller 22, and the display controller 22 displays when the comparison result matches, and stops displaying when the comparison result does not match. At that time, a warning voice and a warning display “data may have been tampered with” may be displayed simultaneously with the stop. The electronic document data, signature, and date data are transmitted to the electronic document data output unit 25, signature, and date data output unit 26, respectively, and controlled by the display controller 22 via the user interface 24 according to the comparison result. Displayed on the display 21. On the other hand, the image data is transmitted to the handwritten signature diagram output device 27 and the drawing data output device 28 via the digital watermark detector 31, and the handwritten signature diagram output device 27 and the drawing data output device 28 are respectively handwritten signature diagram and drawing. Output data as needed. This output is also displayed on the display 21 after being controlled by the display controller 22 via the user interface 24 according to the comparison result described above.

  Next, a flowchart of the reproduction algorithm according to the second embodiment of this invention will be described with reference to FIG. Since the detailed processing contents of the steps are the same as those described in the description of the block diagram of FIG. 11, only the order of the steps will be briefly described here. First, in step S11, the user name and password of the viewer to be entered are input. In step S12, it is determined whether the user name is registered in the writer / viewer database 13 and the passwords match. If the determination result is NO, the process returns to step S11. If YES, the process proceeds to step S13.

  In step S13, the combined data of the encrypted electronic document data and drawing data is read from the electronic document / drawing database 12. In step S14, the read data is decrypted. In step S15, document data and image data are separated. In step S16a, the unique code data is read from the ROM 29a. In step S17, digital watermark data embedded in the image data (drawing data and / or handwritten signature image data) is detected. In step S18a, the unique code data and signature / date data read from the ROM 29a are compared with the unique code data, signature and date data detected from the digital watermark.

  Next, in step S19a, it is determined whether or not the comparison results match. If NO, the display is stopped in step S20. Along with the stop, a step of performing a warning sound and a warning display that “data may have been tampered with” may be added. Then exit. If YES, an electronic document or drawing data is displayed in step S21. A step of displaying date / time information or displaying signature image data as necessary may be provided. In that case, it is possible to perform display by issuing a display request through another user interface (not shown). Next, in step S22, it is determined whether there is still document data or drawing data. If YES, the process returns to step S13. If NO, it is determined in step S23 whether the storage period has passed 30 years. If it has passed (YES), the document drawing data file is deleted from the electronic document / drawing database 12 in step S24. Then, the process ends. If it has not passed (NO), for example, it is displayed in step S25 how many years have passed with respect to the storage period of 30 years, or how many remaining years are to be stored, and then the processing is terminated. .

By creating an apparatus and a program based on the block diagram and the flowchart as described above, the above-described conditions necessary as a mechanism for recording and browsing information in a lab notebook can be satisfied. That is,
(1) Regarding the content, date and time, and the information that the writer is recorded in a secure format in the management information or document, the present invention encrypts and records the structure data in FIG. The key information is information unique to the PC, such as data created based on the serial number of the chip, network ID, etc. using a hash function, or a specific administrator inputs a password to obtain the hash function Or a special unique code recorded in ROM data and a key generated based on the data can be used.

(2) In the present invention, it can be described in the structure shown in FIG. 2 with respect to the fact that the signature, date, sign by the witness, etc. are entered.
(3) With regard to storing the lab notebook for 30 years, in the present invention, the storage period manager 34 can manage the lab notebook as in the first and second embodiments.
(4) Regarding the identification of an individual using an individual ID or specific information of a PC to be entered and a network ID, the information specific to the PC is also data based on, for example, a chip serial number or a network ID. Is created using a hash function, or a specific administrator enters a password and the data is created using a hash function, or a special unique code is recorded in ROM data and the data Since a key generated based on the key can be used as key information for encryption, individuals and systems can be identified.

(5) The security that can be performed only by the person or the viewer can be realized by the entry authenticators 2 and 23 together with the above cipher.
(6) With regard to the fact that the contents of the lab notebook or the management information is not included, the present invention includes electronically converting the hash data or unique code of the document data into an image of drawing data or signature data. Since it is embedded with a watermark, it is realized by detecting falsification by utilizing the property that when either document data or image data is falsified, the data does not match each other.

(7) Regarding the provision of a viewer entry table, in the present invention, the entry list shown in FIG. 2 is used to record the viewer and the date and time of viewing each time a document or drawing is viewed. it can.
(8) With regard to browsing by an authorized person and browsing by an unauthorized person and identifying it, the entry authenticator 23 can authenticate by using a database having the structure shown in FIGS. realizable.

  In the present invention, the database is described as being provided in the PC 100. However, the database may be a system realized by communication using a network. Further, since data can be transmitted via any transmission medium such as communication and broadcasting without recording data on the recording medium, the recording apparatus can be used as a transmission apparatus in that case. The playback device can also be used as a receiving device.

  In addition, the recording medium on which the signal data of the present invention is recorded has the structure shown in FIGS. 2, 3, 4 and 5, and can efficiently register document data, drawing data, signature data, viewers and writers, There is an effect peculiar to the medium in that it has a database structure capable of recording the number of browsing times and date / time logs, and a system for managing electronic documents can be suitably realized. The “recording medium” includes not only a narrowly-defined medium capable of recording data but also an electromagnetic wave and light for transmitting signal data. In addition, the information recorded on the recording medium includes data itself such as an electronic file in a state where the information is not recorded.

1 is a block diagram showing a recording apparatus according to a first embodiment of the present invention. It is explanatory drawing which shows the format of the data structure example of the electronic document file of this invention. It is explanatory drawing which shows the format of the data structure of the browsing log of this invention. It is explanatory drawing which shows the format of the data structure of the writer database of this invention. It is explanatory drawing which shows the format of the data structure of the viewer database of this invention. It is a flowchart which shows the recording algorithm which concerns on the 1st Embodiment of this invention. It is a block diagram which shows the reproducing | regenerating apparatus concerning the 1st Embodiment of this invention. It is a flowchart which shows the reproduction | regeneration algorithm which concerns on the 1st Embodiment of this invention. It is a block diagram which shows the recording device which concerns on the 2nd Embodiment of this invention. It is a flowchart which shows the recording algorithm which concerns on the 2nd Embodiment of this invention. It is a block diagram which shows the reproducing | regenerating apparatus concerning the 2nd Embodiment of this invention. It is a flowchart which shows the reproduction | regeneration algorithm based on the 2nd Embodiment of this invention.

Explanation of symbols

1, 21 display device 2, 23 entry authentication device 3, 24 user interface 4 electronic document data input device 5 signature, date data input device 6 handwritten signature diagram input device 7 drawing data input device 8, 29 hash data generator 8a, 29a ROM
9 Digital Watermark Embedded Recorder 10 Document and Image Data Combiner 11 Encryptor 12 Electronic Document, Drawing Database 13 Filler, Viewer Database 14 Recorded Date / Time Data Generator 22 Display Controller 25 Electronic Document Data Output Device 26 Signature, Date Data output device 27 Handwritten signature diagram output device 28 Drawing data output device 30 Hash data comparator 30a ROM data comparator 31 Digital watermark detector 32 Document and image data separator 33 Crypto-decryptor 34 Retention period manager 100 PC

Claims (12)

Generating hash data from document data created by the entrant;
Embedding the hash data in the drawing data created by the writer with a digital watermark;
Combining the document data, the drawing data in which the hash data is embedded, and the document management data and registering them in the database as an electronic document file;
An electronic document recording method. A step of embedding a predetermined unique code in drawing data created by the writer with a digital watermark;
Combining the document data created by the writer, the drawing data in which the unique code is embedded, and the document management data and registering it in the database as an electronic document file,
An electronic document recording method. Means for generating hash data from document data created by the entrant;
Means for embedding the hash data in the drawing data created by the writer with a digital watermark;
Means for combining the document data, the drawing data in which the hash data is embedded, and the document management data and registering it in the database as an electronic document file;
An electronic document recording apparatus. Means for embedding a predetermined unique code in drawing data created by the writer with a digital watermark;
Means for registering the document data created by the writer, the drawing data embedded with the unique code, and the document management data as an electronic document file in a database;
An electronic document recording apparatus. Generating hash data from document data created by the entrant;
Embedding the hash data in the drawing data created by the writer with a digital watermark;
Combining the document data, the drawing data in which the hash data is embedded, and the document management data and registering them in the database as an electronic document file;
A computer program that causes a computer to operate a process having A step of embedding a predetermined unique code in drawing data created by the writer with a digital watermark;
Combining the document data created by the writer, the drawing data in which the unique code is embedded, and the document management data and registering it in the database as an electronic document file,
A computer program that causes a computer to operate a process having Hash data is generated from document data created by the writer, and the generated hash data is embedded in the drawing data created by the writer with a digital watermark, the document data, and drawing data in which the hash data is embedded; File registration means for combining document management data and registering it in a database as an electronic document file, and recording the writer as a log;
When the viewer has browse access to the database, the viewer is recorded as a log, and the electronic document file designated by the viewer is read from the database, and the document data in the electronic document file is read from the document data. When the first hash data is generated and the hash data embedded in the drawing data in the electronic document file is detected as the second hash data, and the first and second hash data are compared and do not match File browsing means for determining that the document data and / or drawing data in the electronic document file has been tampered with and prohibiting browsing of the electronic document file;
Electronic document management system having. A predetermined unique code is embedded in the drawing data created by the writer with a digital watermark, and the document data created by the writer, the drawing data in which the unique code is embedded, and the document management data are combined to form a database as an electronic document file. And file registration means for recording the writer as a log,
When there is browsing access to the database by a viewer, the viewer is recorded as a log, and a predetermined first unique code is read, and an electronic document file designated by the viewer is read from the database If the unique code embedded in the drawing data in the electronic document file is detected as a second unique code and the first and second unique codes are compared and do not match, the document in the electronic document file File browsing means for determining that the data and / or drawing data has been tampered with and prohibiting browsing of the electronic document file;
Electronic document management system having.   9. The electronic document management system according to claim 7, wherein the electronic document file is lab note information.   The document management data includes any one of the information on the writer, the information on the witness who approved the electronic document file, the information on the storage period of the electronic document, or the information on the remaining period until the storage period. The electronic document management system according to any one of claims 7 to 9. Hash data is generated from document data created by the writer, and the generated hash data is embedded in the drawing data created by the writer with a digital watermark, the document data, and drawing data in which the hash data is embedded; An electronic document browsing apparatus of an electronic document management system for combining document management data and registering it in a database as an electronic document file, and recording the writer as a log,
When the viewer has browse access to the database, the viewer is recorded as a log, and the electronic document file designated by the viewer is read from the database, and the document data in the electronic document file is read from the document data. Means for generating one hash data;
Means for detecting the hash data embedded in the drawing data in the electronic document file as second hash data;
When the first and second hash data are compared and matched, browsing of the electronic document file is permitted, and when they do not match, it is determined that the document data and / or drawing data in the electronic document file has been falsified. And means for prohibiting browsing of the electronic document file,
The electronic document browsing apparatus which has. A predetermined unique code is embedded in the drawing data created by the writer with a digital watermark, and the document data created by the writer, the drawing data in which the unique code is embedded, and the document management data are combined to form a database as an electronic document file. And an electronic document browsing device of an electronic document management system for recording the writer as a log,
Means for recording the viewer as a log when the viewer has browse access to the database, and further reading a predetermined first unique code;
Means for reading out the electronic document file designated by the viewer from the database and detecting the unique code embedded in the drawing data in the electronic document file as a second unique code;
When the first and second hash data are compared and matched, browsing of the electronic document file is permitted, and when they do not match, it is determined that the document data and / or drawing data in the electronic document file has been falsified. And means for prohibiting browsing of the electronic document file,
The electronic document browsing apparatus which has.

Images