JP2006011766A - Electronic administration system using digital pen - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To solve the problem that any public key which is original to a user to be generated inside an electronic administration system is not used for the encrypting means of the electronic administration system such as electronic bidding or electronic voting using a digital pen. <P>SOLUTION: This electronic bidding using a digital pen is configured of a digital pen 1, an electronic bidding server 5 and an interface 3. The digital pen 1 is provided with a biological authentication function, and the electronic bidding server 5 is provided with a function for generating a public key each time the user takes turns, and for transmitting the public key through the interface 3 to the digital pen 1. The data generated by the digital pen 1 are encrypted by the public key. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an electronic administrative system for providing administrative services by sending / receiving electronic data to / from users, such as an electronic bidding system and an electronic voting system that create and transmit electronic data using a digital pen.

  In recent years, the construction of an electronic administrative system has been promoted in various operations in order to improve residents' services and improve the efficiency of local government operations. In order to provide an electronic administrative service that can be accessed from a remote location, it is common to construct an electronic administrative system using an information terminal. Like an electronic bidding system, it is already possible to remotely use an electronic signature and a terminal device. There is a system that accepts bids from the ground.

  On the other hand, in the promotion of electronic administration, it is necessary to consider the disparity of services that can be enjoyed (digital divide) due to the difference in residents' ability to operate information-related equipment. One means for eliminating this digital divide is a digital pen. The digital pen has a function of recording information created by handwriting as electronic data, as in a conventional pen. Therefore, even a person unfamiliar with a keyboard or the like can create electronic data by using a digital pen in the same manner as using a terminal. In the future, it is desired to construct an electronic administrative system corresponding to such input means considering the digital divide.

  As an example of an electronic administration system corresponding to such handwritten input, an example of an electronic voting system is shown in Patent Literature 1, and an example of an electronic bidding system using a terminal device is shown in Patent Literature 2.

JP 2003-58670 A JP 2000-134194 A

  However, an electronic administrative system corresponding to handwritten input using a digital pen or the like as shown in Patent Document 1 has a problem in terms of security compared to an electronic administrative system as shown in Patent Document 2 of the conventional type. That is, in the electronic administrative system as shown in Patent Document 2, here, the electronic bidding system uses encryption technology to prevent falsification of bid data, while in the electronic administrative system corresponding to handwritten input as shown in Patent Document 1. There is a problem that data interception at the time of communication is not taken into account, and security levels are greatly different, so that they cannot be handled equally. Also, in the electronic bidding system as shown in Patent Document 2, a public key / private key pair is created for each bidder, and consideration is given to key leakage. In the case of a handwritten input electronic bidding system using a digital pen or the like, there is a possibility that a plurality of people use the same pen. Therefore, a means for maintaining information on individual bidders is required.

  Furthermore, in order to realize an electronic administration system suitable for all users, it is necessary to construct an electronic administration system that mainly uses input using information terminal equipment, and also uses handwritten input using a digital pen, It was necessary to handle various inputs with the same security.

  An object of the present invention is to solve the above-described problems and provide an electronic administrative system capable of realizing security equivalent to that of a conventional terminal device in an electronic administrative system using a digital pen. Another object of the present invention is to provide an electronic administrative system that maintains information on individual bidders when a plurality of users use the same digital pen. Still another object is to provide an electronic administrative system that can accept inputs from both a digital pen and a terminal device and can handle them equally.

The present invention has the following features in order to solve the above problems.
First, an electronic administration system using a digital pen capable of realizing the same security as that of a conventional terminal device as the first object has the following configuration. The electronic administrative system mediates communication between the server and the digital pen, a server that transmits and receives electronic data through network means, a digital pen that has the function of creating, storing, and transmitting electronic data from information written by the user. Interface device. The server includes means for generating a public key and a secret key for each user, means for sending the public key to the interface device, and means for storing encrypted data acquired from the interface device. Means for sending a public key acquired from a server to the digital pen; means for transmitting encrypted data acquired from the digital pen to the server; and means for storing the public key acquired from the interface device in the digital pen; Means for encrypting the created data with a public key and transmitting it to the interface device. Like the electronic bidding system shown in Patent Document 2, the electronic administrative system server of the present invention generates a set of a public key and a private key for each user, and attaches a key ID to the information of the set or the private key. The public key stored in the server and created together with the ID is sent to the interface device. The interface device is a device that transmits / receives electronic data to / from a server through a network, and further transmits / receives electronic data to / from a digital pen and wirelessly or by a data acquisition device.

  The interface device sends the acquired public key to the digital pen. The digital pen stores the acquired public key, encrypts the writing data with the public key, and transmits the encrypted electronic data to the interface device. The digital pen may be of a format in which information of a digital paper having a dot pattern is read and acquired as trajectory data, or a format in which the pen's XY coordinates are acquired as trajectory data by an antenna. May be good. The interface device transmits the set of encrypted data and ID to the electronic administrative system server, and the server stores the set of encrypted data and ID in the database.

  Alternatively, the interface device may also send the ID to the digital pen and create a set of ID and encrypted data with the pen. When the present invention is applied to an electronic bidding or electronic voting system, data stored in a database is kept encrypted until the date of bid opening and the date of vote opening. The electronic administrative system server decrypts the stored data with a secret key corresponding to each ID after a predetermined period, and edits the data into a form suitable for the intended administrative service. In the case of electronic data created with a general digital pen, first, the decrypted data is converted into image data using a correspondence table for converting into image data. Thereafter, the image data is converted into a character code data or a format such as a table as necessary.

  In order to realize an electronic administrative system for maintaining information on individual bidders when a plurality of users who use the same digital pen, which is another object of the present invention, It has a function. First, the digital pen is provided with a biometric authentication function for authenticating a user and a means for detecting a change of the user. As the biometric authentication function, a fingerprint sensor or a vein pattern sensor may be mounted on the pen itself, or a biometric sensor connected to the pen may be used as an activation switch.

  Furthermore, the digital pen has a function of creating information for notifying that the user has changed when a change in the user is detected, and transmits the information to the electronic administrative system server through the interface device. At this time, the digital pen may be provided with a lock function so that writing data cannot be acquired until a new public key is received. When the server receives the information, the server generates a new public key and a secret key, and transmits the new public key to the interface device by the same processing as described above. The interface device transmits a new public key to the digital pen. The digital pen stores a new public key and returns to a state where writing data can be acquired.

  Furthermore, in order to provide an electronic administration system that can accept inputs from both the digital pen and the terminal device, which are other purposes, and can handle them equally, the electronic administration system server has the following functions. The configuration of the electronic administrative system that receives input from the terminal device may be the same as that shown in Patent Document 2. In order to use this together with the input by the digital pen, the server has a function of discriminating the electronic data transmitted from the terminal device and the electronic data transmitted from the digital pen and storing them in another file or database. The process of creating and transmitting a public key and private key pair may be the same. The reason why the data is stored in the separate file is that the data transmitted from the terminal device is the character code data that can be handled as it is, while the data transmitted from the digital pen is the writing trajectory information or the image information.

  The server includes means for decrypting the electronic data created with the digital pen with a secret key, means for converting the decrypted electronic data into handwritten image data, and writing the text data or tabular text information. Means for converting to data is provided. This decryption process is performed after the predetermined date as described above. The conversion of the decrypted electronic data into character data is automatically performed as a series of processes by the data conversion table and processing program corresponding to the type of digital pen.

  On the other hand, the electronic data created by the terminal device is decrypted with the secret key. The electronic data derived from the terminal device is decrypted, and the data derived from the digital pen is merged and stored in the same database in the format after the conversion process. By editing the information in this database, for example, it is possible to sort bid data input from a terminal and bid data handwritten with a digital pen as they are and arrange them in order of money amount, and the time for bid opening processing can be greatly shortened.

  According to the present invention, in an electronic administrative system using a digital pen, a unique public key is sent from the electronic administrative system server to the digital pen, and data encrypted with the key is transmitted, so that it is as high as a terminal device. Security can be realized.

(Configuration and overview of electronic bidding system using digital pen)
An example in which an electronic administrative system using the digital pen of the present invention is applied to an electronic bidding system will be described below. The digital pen assumed here is a method of reading a trace pattern written on paper using digital paper.

First, with reference to FIG. 1, the structure and outline | summary of the electronic bid system which concerns on embodiment of this invention are demonstrated. The present invention comprises a digital pen 1, a digital paper 2, an electronic bidding server-interface device 3 (hereinafter referred to as interface 3), network means 4, an electronic bidding server 5, and an electronic bidding participation terminal 6. The digital pen 1 has a function of reading the contents described in the digital paper 2 as electronic data. Here, the electronic data created by the digital pen 1 is referred to as pen creation data 7. The pen creation data 7 is data unique to the digital pen, such as a dot pattern. The structure of the pen creation data 7 will be described later. The created pen creation data 7 is transmitted to the electronic bidding server 5 through the network means 4 by connecting the digital pen 1 to the interface 3. As a method of transmitting and receiving data between the digital pen 1 and the interface 3, there are a method of directly connecting the digital pen 1 to the interface 3, and a method of using the Internet or a wireless LAN. Here, the method will be described in which the digital pen and the interface 3 described above are directly connected.
The network means 4 for connecting the interface 3 and the electronic bidding server 5 uses a dedicated line or a virtual dedicated line using the Internet.

  The electronic bidding server 5 includes a key pair logic 8 for generating a public key / secret key, a key storage DB 11 for storing the secret key, a key storage program 13, a key transfer program 12 for transferring the public key to the user, a secret key and A secret key matching program 14 for associating created data, a data conversion program 16 for converting data created by a digital pen into bid value data, a pen data correspondence table 26 used for data conversion, and bid value data A bid price DB 22 to be stored and a pen creation data storage DB 24 to store data created by the digital pen are configured. Details of each will be described later.

  The system configuration of the present invention can use both electronic bidding using a digital pen and electronic bidding using a terminal device that is generally performed. The terminal of the user when performing the conventional electronic bidding is the electronic bidding participation terminal 6, which can be connected to the electronic bidding server 5 through the network means 4.

  In the conventional electronic bidding, a public key cryptosystem is adopted as the encryption means. The electronic bidding server 5 includes a key pair logic 8 that generates an encryption / decryption key, a public key 9 that is a generated encryption key, a secret key 10 that is a decryption key, and a key storage DB 11 that stores the secret key. . The key pair logic 8 generates a public key 9 and a secret key 10 when receiving a user change signal which is a signal changed by the user from the interface 3. The public key 9 and the private key 10 are assigned the same key number. The public key 9 generated by the key pair logic 8 is sent to the interface 3 via the network means 4 by the key transfer program 12.

  On the other hand, the secret key 10 is stored in the key storage DB 11 by the key storage program 13. At the time of bid opening, the secret key matching program 14 selects and decrypts a secret key corresponding to each key NO of the pen creation data and the bid value record. The bid price record will be described later. Since the decrypted pen creation data is data unique to the digital pen, it is necessary to change to a conventional electronic bidding format. A data conversion program 16 is a program for converting data into a conventional electronic bidding format. The data conversion program 16 has an OCR program. First, the data conversion program processes the pen creation data into image data. What is needed at this time is a pen data correspondence table 26. The pen data correspondence table 26 is a correspondence table for projecting digital pen trajectory data into a coordinate space and converting it into image data. The pen data correspondence table differs depending on the type of digital pen and the system server. Using this table, the data conversion program 26 converts the pen creation data into image data. Next, the data conversion program 16 converts the image data into character data and processes it into the same format as the bid price record. This is merged with the bid price DB 24 to create the bid opening price table 9. The bid opening price table 9 is sorted in ascending order of bid prices, and the staff determines the winning bidder from the bid opening price table 9.

  Next, an example of the configuration of the digital pen 1 will be described with reference to FIG. The digital pen 1 includes a memory 17 for storing an encryption key and created data, a light emitting unit 18, a light emitting program 19, a biometric authentication program 20, and an authentication data storage memory 21. The memory 17 stores pen creation data 7 created from the digital pen 1 and the digital paper 2 and encrypted with the public key 9. The light emission program 19 issues a command for causing the light emitting unit 18 to emit light if data is stored in the memory 17. The user can visually confirm that the data has been created by the light emission of the light emitting unit 18. In addition, the biometric authentication program 20 detects a user change by fingerprint authentication or the like, and sends a user change signal to the interface 3. The authentication data storage memory 21 is a memory for storing authentication data created by the biometric authentication program 20.

  Next, the interface 3 will be described with reference to FIG. The interface 3 has a data transfer program 22 and a data erasure program 23. The data transfer program 22 is a program that transmits and receives data to and from the electronic bidding server 5 and the digital pen 1.

The data erasure program 23 is a program for issuing a command for erasing data in the memory 17 of the digital pen 1. When the user finishes using the digital pen 1 and connects the digital pen 1 to the interface 3, the information in the memory 17 in the digital pen 1 is erased by an instruction of the data erasing program 23. At this time, since there is no information in the memory 17, the light emission of the light emitting unit 18 is extinguished. Therefore, the next user can use the digital pen from which the information of the original user is erased.
Next, the structure of the key storage DB 11 will be described with reference to FIG. The key storage DB 11 is a DB in which a secret key is stored. Each secret key is numbered with a key NO.

  Next, the configuration of the digital paper 2 will be described with reference to FIG. The digital paper 2 is prepared as a bid information recording paper using a special paper on which a dot pattern or the like that can be read by a digital pen is described. The digital paper 2 is provided with an entry field in advance, and the user enters the trader name and the bid price in the entry field by handwriting on the digital paper 2 using the digital pen 1. Since the contents written in the digital paper 2 by the digital pen 1 are associated with the item names for each entry field range, they can be read as electronic data for each entry field. Here, the content described in the area 501 is read as a trader name, and the content described in the area 502 is read as a bid amount. By this entry, pen creation data 7 is created in the internal memory 17 of the digital pen 1. The pen creation data 7 is encrypted with the public key, and the key number of the public key is added to the header.

  Next, the data structure of the bid price record 15 will be described with reference to FIG. The bid price record 15 is data created by the electronic bid participation terminal 6 and is composed of a key NO, a trader name, and a bid price. Here, it is assumed that the key number is 601, the trader name is 602, and the bid amount is 603. The trader name and the bid amount are encrypted with the public key.

  FIG. 7 shows the pen creation data 7. Reference numeral 701 denotes a public key key NO. 702 is a trader name, and 703 is a bid price recorded as information unique to the digital pen. The pen creation data 7 has the same data structure as the bid value record 15 by the data conversion program 16.

  FIG. 8 shows the data structure of the bid price DB 23. The bid price DB 23 stores a plurality of bid price records.

  FIG. 9 shows the data structure of the bid opening value table 9. On the bid opening date, the bid price record in the bid price DB 23 is decrypted, and the bid opening price table 9 is created.

  FIG. 10 shows the structure of the pen creation data storage DB 24. The pen creation data storage DB 24 is configured by the pen creation data of FIG.

(Description of operation)
Next, the operation of the electronic bidding system using the digital pen according to the embodiment of the present invention will be described with reference to FIGS. 11, 12, and 13. FIGS. 11, 12, and 13 are flowcharts showing operations up to registering a bidder / bid value in the electronic bidding system using a digital pen. First, the user touches the digital pen 1 (step S01). Then, the biometric authentication program 20 sends a user change signal to the interface 3 (step S02). Details of the operation of the biometric authentication program 20 will be described in detail with reference to FIG. Next, the interface 3 receives the user change signal sent from the digital pen 1 (step S03), and sends the signal to the electronic bidding server 5 (step S04).

When the electronic bidding server 5 receives the signal (step S05), a public key and a secret key are generated from the key logic 8 (step S06). The same key number is assigned to the public key and the secret key. Subsequently, the key transfer program 12 sends the public key to the interface 3 (step S07). On the other hand, the secret key is stored in the key storage DB 11 (step S08).
Subsequently, the interface 3 receives the public key transmitted from the electronic bidding server 5 via the network means 4 (step S09), and sends the key to the digital pen 1 (step S10).

  The digital pen 1 receives the public key from the interface 3 (step S11). The public key is sent each time the user changes. Here, the public key used by the previous user is overwritten with the new public key. The user writes a trader name and a bid price on the digital paper 2 using a digital pen (step S12). The input data is encrypted with a public key, and a key number is assigned to become pen creation data 7 (step S13). The pen creation data 7 is immediately stored in the memory 17, and the light emitting unit 18 emits light (step S14). The user can confirm with the light emitting unit 18 that the data has been stored. Thereafter, when the user connects the digital pen 1 to the interface 3, the pen creation data 7 is transmitted to the interface 3 (step S15).

When the interface 3 receives the pen creation data 7 from the digital pen 1 (step S16), the data erasure program 23 issues a command to erase the data in the memory 17 in the digital pen 1 (step S17). The data in the memory 17 inside the digital pen 1 is erased (step S18), and the light emission of the light emitting unit 18 of the digital pen 1 is turned off (step S19). The pen creation data 7 is transmitted to the electronic bidding server 5 by the data transfer program 22 of the interface 3 (step S20).
The electronic bidding server 5 receives the pen creation data 7 (step S21). The pen creation data 7 is stored in the pen creation data storage DB 24 (step S22).

On the other hand, the electronic bidding system of the present invention also accepts electronic bidding by a conventional terminal device in parallel. The operation of a part related to the present invention in the conventional electronic bidding will be described with reference to FIG.
When a signal notifying participation in bidding is sent from the user terminal to the electronic bidding server 5, the key pair logic 8 generates a public key and a secret key. The secret key is stored in the key storage DB 11 (step S101).

The key transfer program 12 sends the public key to the electronic bid participation terminal 6 (step S102). The user creates a bid value record 15 at the electronic bidding participating terminal 6 (step S103). The bid price record 15 is encrypted with the public key (step S104) and sent to the electronic bidding server 5 (step S105). The sent bid price record 15 is stored in the bid price DB 23 (step S106).
Next, the operation at the time of bid opening will be described with reference to FIG. 15, FIG. 16, and FIG. First, the secret key matching program 14 in the electronic bidding server 5 extracts the secret key stored in the key storage DB 11 having the same key NO as the key NO of the pen creation data (step S201). Then, the pen creation data is decrypted one record at a time with the secret key (step S202).

  In parallel with this operation, the bid price record in the bid price DB 23 is also decrypted. Similar to the decryption of the pen creation data, the secret key matching program 14 extracts the secret key stored in the key storage DB 11 having the same key NO as the key NO of the pen creation data (step S301). Then, the pen creation data is decrypted one record at a time with the secret key (step S302).

  The decrypted pen creation data is converted by the data conversion program 16 into the same format as the bid price record. First, the data conversion program 16 compares the pen data correspondence table 26 with the pen data, and converts the pen data into image data (step S401). Subsequently, the data conversion program 16 converts the image data into character data from the built-in OCR program (step S402). Originally, the pen creation data is divided into areas for each trader name and bid price, and in the image data, the trader name and bid price are similarly separated. Therefore, when the image data is converted into character data, the trader name and the bid price are not combined, and the structure is the same as the bid price record.

  The data conversion program 16 merges the bid price record obtained by converting the pen creation data and the bid price DB 23 stored in the bid price DB 23, and creates a bid opening price table (step S403). The data conversion program 16 sorts the completed bid opening price table in order of bid amount (step S404). The bid opener selects a successful bidder from the bid opening price table (step S405).

  Next, the operation of the biometric authentication program 20 will be described with reference to FIG. There are various authentication methods for biometric authentication, such as fingerprints and veins. Here, fingerprint authentication will be described.

  First, when the user touches the pen, the biometric authentication program 20 creates authentication data 25 (step S501). The authentication data 25 is compared with the authentication data 25 in the authentication data storage memory 21, and if the data is different, a user change signal is sent to the interface 3 (step S502). The authentication data 25 is stored in the authentication data storage memory 21 (step S503).

  As described above, according to the embodiment of the present invention, it is possible to prevent leakage / falsification of application information unless the secret key in the server is leaked. Also, by providing the digital pen with a biometric authentication function, different public keys can be used for each user even with the same pen, and there is an effect of preventing impersonation. Furthermore, by using the input of the terminal device and the digital pen together, it becomes possible to realize an electronic administrative system that can be widely used.

It is a figure which shows the structure of the electronic bidding system which concerns on embodiment of this invention. It is a figure which shows the structure of the digital pen which concerns on implementation of this invention. It is a figure which shows the structure inside the electronic bid server-digital pen interface which concerns on embodiment of this invention. It is a figure which shows the structure of key storage DB which concerns on embodiment of this invention. It is a figure which shows the structure of the digital paper which concerns on embodiment of this invention. It is a figure which shows the data structure of the bid value record which concerns on embodiment of this invention. It is a figure which shows the structure of the pen creation data which concerns on embodiment of this invention. It is a figure which shows the structure of bid price DB which concerns on embodiment of this invention. It is a figure which shows the structure of the bid opening price table which concerns on embodiment of this invention. It is a figure which shows the structure of pen creation data storage DB which concerns on embodiment of this invention. It is a figure which shows operation | movement of the digital pen at the time of the bid which concerns on embodiment of this invention. It is a figure which shows operation | movement of the electronic bid server-digital pen interface at the time of the bid based on embodiment of this invention. It is a figure which shows operation | movement of the electronic bid server at the time of the bid which concerns on embodiment of this invention. It is a figure which shows the operation | movement of the electronic bidding performed in parallel without using the digital pen at the time of the bid which concerns on embodiment of this invention. It is a figure which shows the operation | movement of decoding of pen production data which concerns on embodiment of this invention. It is a figure which shows the operation | movement of the decoding of the bid price record which concerns on embodiment of this invention. It is a figure which shows operation | movement of bid opening value table preparation from the conversion of the data at the time of bid opening based on embodiment of this invention. It is a figure which shows operation | movement of the biometrics authentication program at the time of the bid which concerns on embodiment of this invention.

Explanation of symbols

1 Digital Pen 2 Digital Paper 3 Electronic Bidding Server-Digital Pen Interface 4 Network Means 5 Electronic Bidding Server 6 Electronic Bidding Participating Terminal 7 Pen Creation Data 8 Key Pair Logic 9 Public Key 10 Private Key 11 Key Storage DB
12 Key transfer program 13 Key storage program 14 Private key matching program 15 Bid value record 16 Data conversion program 17 Digital pen internal memory 18 Digital pen light emitting unit 19 Light emission program 20 Biometric authentication program 21 Authentication data storage memory 22 Data transfer program 23 Data deletion Program 24 Pen creation data storage DB
25 Authentication data 26 Pen data correspondence table

Claims (3)

  An electronic administration system that provides administrative services by sending and receiving electronic data to and from users. The electronic administration system creates electronic data from information written by the user and a server that sends and receives electronic data through network means. , A digital pen having a function of storing and transmitting, and an interface device that mediates communication between the server and the digital pen. The server generates a public key and a secret key for each user, and the public key Means for sending to the interface device and means for storing the encrypted data acquired from the interface device, the interface device having means for sending the public key acquired from the server to the digital pen and the encryption acquired from the digital pen Means for transmitting data to a server, and the digital pen has the interface. E-administration system using the digital pen, characterized in that to encryption processing data created as a means with a public key stores the public key acquired from Esu device comprises means for transmitting to the interface device.   The electronic administrative system using the digital pen according to claim 1, wherein biometric authentication means for authenticating the user to the digital pen and information for notifying that the user is changed when a change in the user is detected. And a means for transmitting the information to the electronic administrative system server through the interface device, and a means for generating a new public key and secret key when the server receives the information. Electronic administration system using a digital pen. The electronic administrative system using the digital pen according to claim 1 or 2, further comprising: a terminal device that accesses a server of the electronic administrative system via a network means in addition to the digital pen as an input means of the user, Means for transmitting the public key to the terminal device among the public key and private key for each user created when there is an application request from the terminal device, and the public key using the digital pen or terminal device used by the user Means for storing the electronic data encrypted and transmitted to the server in separate files for a certain period of time, means for decrypting the electronic data created by the digital pen with a secret key, and writing image of the decrypted electronic data Means for converting into data, and means for converting the written image data into character information or tabular character information data. And means for decrypting the electronic data created by the terminal device with a secret key, and means for storing the decrypted electronic data from the terminal device and the electronic data converted into character information in the same database. An electronic administrative system using a digital pen.

Images