JP2006011916A - Network proofreading method for compilation - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a proofreading method for proofreading an original in a publication of especially high confidentiality for concealing orderer information, regrading a proofreading method of proofreading data by use of a network. <P>SOLUTION: When the proofreading data is transmitted/received, it is encrypted by a public key or a common key doubly between an orderer terminal and a communication server, and between the orderer terminal and an information management server, the information of the orderer is automatically concealed by the information management server, and the orderer information and the proofreading data are concealed. Thereby, proofreading work necessary for a production process of the publication is performed efficiently by communication while a security policy can be satisfied as well as preventing eavesdropping, spoofing, or hacking of an external third person. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a proofreading method for a compilation using a network, and more particularly to a proofreading method for a highly confidential publication that makes it impossible for a person other than a person in charge to view it.

  The proofreading work of a publication is performed between the orderer and the contractor, and the manuscript is exchanged by mail or transportation.

  In the printing industry, DTP (Desktop Publishing) has become the mainstream, and all processes from submission to publishing are now working with digital data. For this reason, there are increasing cases in which an original is converted into electronic data, the data is shared by electronic communication means, and the calibration work is exchanged between the orderer and the contractor.

  An example of such a calibration method is a network calibration system (see, for example, Patent Document 1).

  Due to the widening of communication means due to the spread of the Internet network in recent years, manuscripts are often exchanged by data communication using this network.

  On the other hand, among the same printed publications, the printed publications, such as financial statements, are extremely confidential and may cause problems if known to a third party before publication. In some cases, the exchange of proofreading manuscript data via data communication in such a network does not solve the concern of maintaining confidentiality, so the proofreading work is performed by registered mail or bringing data, which is costly. ing.

  It has been pointed out that there is a possibility of unauthorized access by a third party for data communication using the network, and for confidential information communication, access restrictions by using password settings, use of dedicated lines, encryption of digital data Are being taken as a precaution against unauthorized access.

  As a method for enabling such confidentiality of transmission data to a third party, mutual authentication of senders and receivers, and guaranteeing data consistency, that is, guaranteeing that data has not been tampered with, there is a data transmission method ( For example, see Patent Document 2).

JP 2002-49615A Japanese Patent Laid-Open No. 10-83138

  However, in the network calibration system described above, the calibration work can be performed in full digital, but the calibration data is circulated at the end of the work for each department. Even if it is not a person in charge, the confidential information can be browsed from the outside, and the possibility of leakage of the confidential information cannot be denied.

  The data transmission method described above is for determining mutual authentication of data senders and data and consistency of data, and is suitable for determining whether the data has been altered by a third party. It has not been possible to conceal the existence of the data file from a third party.

  An object of the present invention is to provide a calibration method capable of concealing customer information (orderer information) by double-encrypting data to be transmitted.

  The present invention can restrict access by editors and the like according to the assigned security level, and can also restrict access even when the data contains a keyword that should be kept secret by full-text search. The purpose is to propose a calibration method that can be performed.

  The present invention relates to an information management server that is a computer that manages digitized document data for proofreading (hereinafter referred to as “proofreading data”), and an edit that is a computer that edits proofreading data managed by the information management server. The orderer and the manufacturer of the publication use the network system including the orderer terminal, which is a computer that transmits / receives calibration data to / from the information management server, the communication server for communication, and the certificate authority. This is a network proofreading method for edits that can communicate with each other while ensuring safety, and the input data for creating proofreading data is input from the orderer terminal, and the input data is sent via the network. Is edited by the editor terminal to create calibration data, the calibration data is calibrated by the orderer terminal, and the correction instruction information or the school completion signal is displayed. Transmitted to the collector terminal, in accordance with the correction instruction information or proofreading signal, a network calibration method of compilation, characterized in that the modified or proofreading calibration data by the editing terminal.

  In the present invention, the input data is input from the orderer terminal, edited by the editor terminal via the network, and the proofreading data is created. When the user is authenticated by the communication server, encryption communication is started, and the orderer information of the input data is replaced with the management ID, and the input data is decrypted (the encrypted information is restored). The management rank is automatically set, the input data is encrypted, and the transfer to the editor terminal is performed by the information management server. The editor terminal decrypts the input data and encrypts the proofreading data. This is a network proofreading method for an edited material.

  The present invention decodes the proofreading data edited from the submitted data in the step of performing the proofreading operation at the orderer terminal based on the proofreading data transmitted from the editor terminal, and determines the orderer from the management ID of the proofreading data. The information management server performs the replacement with information, encrypts the calibration data, and transfers it to the communication server. The communication server authenticates the encryption communication request from the orderer terminal. This is a network proofing method for an edited material, wherein the proofreading is performed after decryption, and the proofreading data is encrypted after correction.

  The present invention starts encryption communication when authenticated by a communication server in a process of performing correction work at an editor terminal based on correction support information by a calibration work transmitted from an orderer terminal, and orders calibration data. The information management server replaces the editor information with the management ID, decrypts the calibration data, automatically sets the management rank, encrypts the calibration data, and transfers the data to the editor terminal. A network proofreading method for an edited material, characterized by performing decryption, correction, and encryption.

  The present invention performs a calibration operation at the orderer terminal based on the calibration data transmitted from the editor terminal, and starts cryptographic communication upon authentication from the communication server in the process of transmitting a school completion notice. Replacing the completion notification data from the orderer information to the management ID, decrypting and encrypting the completion notification data, and transferring to the editor terminal by the information management server, the editor terminal decrypting the completion notification data And a network calibrating method for an edited material, characterized in that transmission to the next process is performed.

  In the present invention, in the setting of the management rank, the keyword search means provided in the information management server is used to search whether the secret keyword preset in the secret keyword database is included in the submitted data and the proofreading data, A network proofreading method for an edited material, characterized in that security level information suitable for a corresponding secret keyword is set.

  In the replacement of the orderer information, the sorting control means provided in the information management server divides the submitted data and the proofreading data into the publication information and the orderer information. It is a network proofreading method for an edited matter, characterized in that setting is performed and proofreading work is performed between set accessors.

  The network used for the calibration method of the present invention is a broadband network.

  The editing network calibration method according to the present invention uses the videophone means to authenticate the secret communication, and if necessary, confirms the other party's face in two directions via the Internet videophone. It is characterized by being able to confirm.

  Provision of a security policy (anonymity of the orderer) that conceals information related to the orderer other than the designated person in the process of producing publications and electronic publications that require a certain level of confidentiality. It became possible to improve safety. The term “safety” as used in the present invention refers to preventing information from being leaked to a third party.

  The present invention can efficiently perform proofreading necessary for the production process of a publication by communication, and can prevent eavesdropping, impersonation, and unauthorized intrusion by an external third party, and at the same time satisfy a security policy.

  According to the present invention, a security level of a publication is automatically determined by searching from a keyword included in the publication, and processing conforming to a security policy corresponding to each security level can be performed.

  A network calibration method for a compilation according to an embodiment of the present invention will be described. However, the present invention is not limited to the best mode for carrying out the invention described below, and includes various other embodiments within the scope of the technical idea described in the scope of claims. .

  In the embodiment of the present invention, processing such as output of calibration data, browsing, and addition of correction instructions uses the PDF (Portable Document Format) format as the calibration data file format, and the calibration means is manufactured by Adobe. Although it is realized using software Acrobat, other formats may be used as long as they are in an environment where the software can be used mutually.

  The network proofreading method for an edited material according to the present invention is executed by the system shown in FIG. 1. This system includes one or more orderer terminals, a communication line network, a communication server, an information management server, one It consists of the above editor terminal and certificate authority. The orderer terminal possessed by the orderer has an input means, a calibration means, a storage means, a communication means, and a detachable tamper resistant device. The tamper resistant device has an encryption / decryption means and a key storage means. The communication server includes a communication unit, a storage unit, an authentication unit, and a tamper resistant device. The tamper resistant device includes an encryption / decryption unit and a key storage unit. The information management server includes communication means, selection control means, orderer information replacement means, orderer information database, keyword search means, secret keyword database, database editing means, authentication means, input means, storage means, public key storage means, It has encryption means and a detachable tamper resistant device. The tamper resistant apparatus includes an encryption / decryption unit and a key storage unit. The editor terminal possessed by the editor includes communication means, storage means, calibration data browsing means, detachable tamper resistant device, editing means, input means, and calibration data output means. The tamper-proof device includes encryption / decryption means and key storage means.

  The flow of the entire proofreading work by the network proofreading method of the edited material of the present invention will be described with reference to the flowchart of FIG. First, the orderer creates data to be submitted (hereinafter referred to as “submission data”) (S201) and transmits it to the editor (S202). Next, the editor receives the submitted data D from the orderer (S208). The editor performs editing based on the received submission data D1 (S209), and creates proofreading data (hereinafter referred to as “proofreading data”) (S210). The editor transmits the created calibration data D1 to the orderer (S211). The orderer (proofreader) receives the calibration data D1 transmitted from the editor (S203). The orderer calibrates and determines whether the calibration data D1 needs to be corrected (S204). If correction is necessary, information (hereinafter referred to as “correction instruction information”) indicating the correction location and the correction content is added to the calibration data D1 (S205) and transmitted to the editor (S206). The editor receives the calibration data D1 to which the correction instruction information from the orderer is added (S212). The editor (editor) edits based on the correction instruction information added to the calibration data D1, and again creates calibration data (S210). The editor again transmits the created calibration data to the orderer (S211). Thereafter, the calibration work of the calibration data D1 is advanced between the orderer and the editor in the same manner. While the proofreading operation is performed several times, when the orderer calibrates and determines that the calibration data D1 does not need to be corrected, the orderer transmits a school completion signal to the editor (S207). The editor receives the school completion signal, the proofreading work is finished (S214), and the proofreading data D1 completed is sent to the printing / publishing process. This is the flow of calibration work.

  In carrying out the present invention, the following processing is necessary in advance. Before performing communication, the communication server 1 and the information management server 2, the first key storage means 10a and the second key storage means 10b of each key storage means in the orderer terminal 4 and the editor terminal 3, The fourth key storage unit 10d and the third key storage unit 10c store the private key in the public key cryptosystem and the public key certificate issued by the certificate authority 25, respectively. The secret key is unique to the server or terminal and is stored in the tamper resistant device. The tamper resistant device is a device such as an IC chip, which has a CPU and a memory area inside and has durability against a physical attack from the outside. The tamper resistant device has a function of storing a secret key therein and storing it securely without being stolen by a third party. Further, the detachable tamper-resistant device is a detachable tamper-resistant device that can be arbitrarily removed. The tamper-resistant device itself can be stored or carried by a person in charge and used for authentication during communication.

  The first key storage unit 10a and the second key storage unit 10b, and the fourth key storage unit of each of the key storage units in the communication server 1 and the information management server 2, the orderer terminal 4 and the editor terminal 3. In addition to the private key and public key certificate, the following items are stored and stored in 10d and the third key storage unit 10c. The fourth key storage means in the tamper resistant device 8 d in the orderer terminal 4 includes the public key certificate of the communication server 1 issued by the certificate authority 25 and the disclosure of the information management server 2 issued by the certificate authority 25. The key certificate is stored. The first key storage unit 10 a in the tamper resistant device 8 a in the communication server 1 stores the orderer's public key certificate issued by the certificate authority 25. The second key storage means 10b in the tamper resistant device 8b in the information management server 2 stores the orderer's public key certificate issued by the certificate authority 25. The third key storage unit 10c in the third tamper resistant apparatus 8c in the editor terminal 3 stores the public key certificate of the information management server 2 issued by the certificate authority 25. However, these public key certificates do not necessarily have to be stored in the tamper resistant device if a means for securely providing the public key certificate is secured. The public key storage means 16 of the information management server 2 securely stores the public key certificates of each orderer terminal 4 and each editor terminal 3 issued by the certificate authority 25. There are many known methods for storing these keys, but any method may be adopted. Also, the public key to be targeted can be extracted from each public key certificate.

  The orderer information database 15 in the information management server 2 stores a management ID corresponding to the orderer information that should be concealed according to the security policy. The secret keyword database 19 stores a security level corresponding to the keyword for determining the security level of the proofreading data D1. As a result, the orderer information database 15 and the secret keyword database 19 in the information management server 2 can be edited by the database editing means 20 and the first input means 12a, but by using the second authentication means 11b, the database Editing can be limited to secret managers only. Further, by encrypting the orderer information database 15 and the secret keyword database 19 using the secret key of the information management server 2, higher security can be ensured.

  Next, a processing procedure at the time of submission will be described using the flowchart of FIG. The orderer inputs the submitted data D to the proofreading means 24 using the third input means 12c of the orderer terminal 4 (S301). The submitted data D is data used as material for editing a publication, such as text data, image data, and layout instructions. The submitted data D may be created and captured using another device, or may be directly input on the orderer terminal 4 using an input device such as a scanner, a keyboard, or a mouse. The input submission data D is combined into one data by the proofreading unit 24, encrypted by the fourth encryption / decryption unit 9d using the public key of the information management server 2 in the fourth key storage unit 10d, It is stored in the fourth storage means 7d (S302). As a method for encryption, a method using a public key cryptosystem, a method using a common key cryptosystem for encrypting the data file itself, and a method using a public key cryptosystem for encrypting the common key can be applied. The orderer uses the third input means 12c to input information about the publication, security level information, and a transmission instruction to the fourth communication means 6d (S303). The information related to the publication includes the orderer information, the name of the publication, the creation date of the submission data D, identification information relating to the progress of the proofreading work, and the like. The security level information is used to determine the level of access restriction to the submitted data D. The entered orderer information and security level information are temporarily stored together with the submitted data D in the fourth storage means 7d. Here, the security level information is encrypted with the public key of the information management server 2 by the fourth encryption / decryption means 9d.

  The fourth communication means 6d in the orderer terminal 4 transmits a request for encryption communication to the first communication means 6a in the communication server 1 through the network communication line 5 represented by the Internet (S304). The first communication means 6a in the communication server 1 authenticates the orderer using the first authentication means 11a in the communication server 1 (S309). As the authentication method, a publicly known method such as a password method, a method of verifying an electronic signature using the orderer's private key with the orderer's public key, or a method using biometrics can be arbitrarily applied. If the authentication fails, the encrypted communication is rejected (S308). If the authentication is successful, encrypted communication through the communication line 5 is started between the orderer terminal 4 and the communication server 1 (S305). As a communication encryption method, a method using a public key encryption method and a method using a public key encryption method for exchanging a common key can be applied. The encryption communication method is not limited, but it is required that the encryption method and the key length are publicly recognized for safety. SSL encryption communication, IPSEC, and the like, which are commonly used encryption methods, can be used. The fourth communication means 6d in the orderer terminal 4 uses the arbitrarily set encryption communication using the public key of the communication server 1 in accordance with the encryption communication method, and information on the publication in the fourth storage means 7d, security The level information and the submitted data D are transmitted to the first communication means 6a in the communication server 1 (S306). On the communication line 5, information on the publication is encrypted using the public key of the communication server 1, and the security level information and the submitted data D are the public key of the information management server 2 and the public key of the communication server 1. Is double encrypted.

  The first communication means in the communication server 1 uses the private key possessed by the communication server 1 in the first encryption / decryption means 9a for the information relating to the publication received in accordance with the encryption communication method, the security level information and the submitted data D. The data is decrypted and stored in the first storage means 7a (S310). Thereafter, the encryption communication is terminated (S307). At this stage, the information related to the publication stored in the first storage unit 7a is in plain text, but the security level information and the submitted data D are still encrypted using the public key of the information management server 2. Therefore, even the administrator of the communication server 1 cannot see the contents of the submitted data D. Also, the security level information cannot be rewritten.

  The communication server 1 uses the first communication unit 6a to transfer the information about the publication in the first storage unit 7a, the security level information, and the submitted data D to the information management server 2 (S311). The communication line between the communication server 1 and the information management server 2 is an internal network of the editor, and any file transfer method can be used as long as its safety is ensured.

  The information management server 2 stores the information related to the publication, the security level information, and the submitted data D received through the second communication unit 6 b in the second storage unit 7 b using the selection control unit 13. The selection control means 13 of the information management server 2 uses the second encryption / decryption means 9b to decrypt the security level information. The selection control means 13 performs the next access restriction process based on the security level information (S312).

  If it is determined that the orderer information needs to be concealed based on the security level information, the sorting control unit 13 sends information about the publication to the orderer information replacement unit 14. The orderer information replacement unit 14 compares the orderer information in the information related to the publication with the orderer information database 15 and replaces it with the corresponding management ID (S313). The orderer information here refers to the orderer name, the address at the time of communication, and the like. The processing by the orderer information replacing unit 14 is to make it impossible to specify the orderer from the information regarding the publication of the submitted data.

  Next, the selection control means 13 uses the second encryption / decryption means 9b to decrypt the submitted data D using the secret key of the information management server in the second key storage means 10b (S314), and the keyword search means 17 (S315). The keyword search unit 17 searches whether the keyword on the secret keyword database 19 is included in the input data D. If the keyword is included, the keyword search unit 17 selects the security level information corresponding to the corresponding secret keyword 13 Return to. The selection control unit 13 compares the security level information from the keyword search unit 17 and the security level information transmitted from the orderer with the security policy, and determines the person in charge of editing (S316). The selection control means 13 takes out the public key of the editor in charge from the public key storage means 16, and encrypts information related to the publication, security level information, and submission data D using the public key of the editor in charge by the encryption means 18. Then, the data is transferred to the editor terminal 3 of the corresponding editor in charge through the second communication means 6b (S318). When the amount of the submitted data D is large, the selection control unit 13 can divide the submitted data D and send it to a plurality of editors.

  In addition, when the person in charge of editing is determined by the selection control means 13, the submitted data D may be sent to each editor terminal 3 via a work management server that manages work on the editing terminal 3. In this case, the submission data D can be recorded and managed by the work management server.

  The editor terminal 3 stores the information relating to the publication received through the third communication means 6c, the security level information, and the submitted data D in the third storage means 7c (S319). The editor in charge uses the third encryption / decryption means 9c to decrypt the security level information and the submitted data D using the secret key of the editor terminal 3 through the proofreading data browsing means 21 (S320). The person in charge of editing performs editing using the second input means 12b and the editing means 22 based on the submitted data D (S321), and outputs the calibration data D1 by the calibration data output means 23 (S322). The output proofreading data D1, publication information and security level information are encrypted by the third encryption / decryption means 9c using the public key of the information management server 2 and stored in the third storage means 7c ( S324).

  Next, a calibration data transfer processing procedure from the editor to the orderer will be described with reference to the flowchart of FIG. After the editing or correction is completed, the editor inputs an instruction to transmit the calibration data D1 to the third communication unit 6c in the editor terminal 3 through the second input unit 12b of the editor terminal 3. The third communication means 6c of the editor terminal 3 rewrites the identification information relating to the progress of the proofreading work in the information relating to the publication, and the proofreading data D1 and the security level already encrypted and stored in the third storage means 7c. Information about the publication together with the information is transmitted to the second communication means 6b of the information management server 2 (S401). The second communication means 6b of the information management server 2 receives the calibration data D1 transmitted from the editor terminal 3 (S402).

  The second communication unit 6 b of the information management server 2 sends the proofreading data D 1 received from the editor terminal 3, information about the publication, and security level information to the selection control unit 13. The selection control means 13 decrypts the calibration data D1 and the security level information by using the secret key of the information management server 2 by the second encryption / decryption means 9b (S403). The screening control means 13 examines the decrypted security level information and information about the publication, and when there are a plurality of persons in charge of editing, the divided data are combined as soon as they are gathered, and the orderer's information is kept secret Then, the information on the publication is transferred to the orderer information replacing means 14. The orderer information replacement unit 14 compares the management ID in the information related to the publication with the orderer information database 15, replaces the management ID with the orderer information, and returns the management ID to the selection control unit 13 (S404). The calibration data D1 and the security level information are encrypted by the orderer's public key by the second encryption / decryption means 9b (S405). The encrypted security level information and the proofreading data D1 are transferred to the communication server 1 from the second communication means 6b of the information management server 2 together with information about the publication (S406).

  The first communication unit 6a of the communication server 1 stores the information related to the publication received from the information management server 2, the security level information, and the proofreading data D1 in the first storage unit 7a (S407). At this time, a storage area for each orderer is allocated to the first storage unit 7a, and information on the publication, security level information, and calibration data D1 are based on the orderer information in the information on the publication. Stored in an appropriate storage area. The first communication means 6a of the communication server 1 transmits to the orderer terminal 4 that the calibration preparation is completed based on the orderer information using a contact means such as e-mail (S408). Alternatively, completion of calibration preparation may be confirmed periodically from the orderer terminal 4 to the communication server 1.

  The orderer terminal confirms that the calibration preparation is completed by a notification from the communication server 1 (S414), and issues a request to start encryption communication to the communication server 1 (S415). The first communication means 6a in the communication server 1 authenticates the orderer using the first authentication means 11a in the communication server 1 (S410). If the authentication fails, the encrypted communication is rejected (S409). If the authentication is successful, encrypted communication via the communication line 5 is started between the orderer terminal 4 and the communication server 1 (S411). The communication server 1 and the orderer terminal 4 start encryption communication in the same manner as the submission process, and transmit the calibration data D1 from the communication server 1 to the orderer terminal 4 (S412). At this time, information on the publication is encrypted on the communication line 5 using the orderer's public key, and the security level information and the calibration data D1 are double-encrypted using the orderer's public key. It has become. The orderer terminal receives the calibration data D1 transmitted from the communication server 1 in accordance with the encryption communication method, decrypts it using its own secret key, and stores it in the fourth storage means 7d (S416). When the encryption communication ends, the line is blocked (S413).

  The orderer issues an instruction from the third input unit 12c, and sends the calibration data D1 and the security level data in the fourth storage unit 7d to the calibration unit 24. The calibration unit 24 decrypts the calibration data D1 and the security level information using the orderer's public key by the fourth encryption / decryption unit 9d (S417), and the orderer calibrates the information (S418), and the correction is performed. If necessary, a correction instruction is added to the calibration data D1 (S419).

  The orderer instructs the calibration means 24 to end the work after completing the calibration work and the input of the correction instruction to the calibration data D1. In the proofreading means 24, the security level information and the proofreading data D1 are encrypted by the fourth encryption / decryption means 9d using the public key of the information management server 2 (S420), and stored in the fourth storage means 7d (S421).

  A procedure for transferring the calibration data D1 from the orderer to the editor will be described with reference to the flowchart of FIG. The fourth communication means 6d of the orderer terminal 4 rewrites the identification information regarding the progress of the proofreading work in the information regarding the publication. The subsequent processing is the same as the processing at the time of submission (S303 to S324), and the fourth communication means 6d in the orderer terminal 4 sends a request for encrypted communication to the first communication means 6a in the communication server 1. Transmit (S501). The first communication means 6a in the communication server 1 authenticates the orderer using the first authentication means 11a in the communication server 1 (S506). If the authentication fails, the encrypted communication is rejected (S505). If the authentication is successful, encrypted communication through the communication line 5 is started between the orderer terminal 4 and the communication server 1 (S502). The fourth communication means 6d in the orderer terminal 4 uses the arbitrarily set encryption communication using the public key of the communication server 1 in accordance with the encryption communication method, and information on the publication in the fourth storage means 7d, security The level information and the calibration data D1 are transmitted to the first communication means 6a in the communication server 1 (S503). On the communication line 5, information on the publication is encrypted using the public key of the communication server 1, and the security level information and the calibration data D1 use the public key of the information management server 2 and the public key of the communication server 1. Are double encrypted. The first communication means 6a in the communication server 1 uses the first encryption / decryption means 9a to receive the information relating to the publication received in accordance with the encryption communication method, the security level information, and the proofreading data D1. The data is decoded and stored in the first storage means 7a (S507). Thereafter, the encryption communication is terminated (S504). The communication server 1 uses the first communication unit 6a to transfer information relating to the publication in the first storage unit 7a, security level information, and proofreading data D1 to the information management server 2 (S508). The information management server 2 stores the information relating to the publication, the security level information, and the proofreading data D1 received through the second communication unit 6b in the second storage unit 7b through the selection control unit 13. The selection control means 13 of the information management server 2 uses the second encryption / decryption means 9b to decrypt the security level information. The selection control unit 13 performs the next access restriction process based on the security level information. The orderer information replacement unit 14 compares the orderer information in the information related to the publication with the orderer information database 15 and replaces it with the corresponding management ID (S510). Next, the selection control means 13 uses the second encryption / decryption means 9b to decrypt the calibration data D1 using the secret key of the information management server in the second key storage means 10b, and sends it to the keyword search means 17 ( S511). The keyword search means 17 performs a full text search to determine whether the keyword in the secret keyword database 19 is included in the input data D. If the secret keyword is included, the keyword search means 17 selects and controls the security level information corresponding to the corresponding secret keyword. Return to step 13 (S512). The selection control unit 13 compares the security level information from the keyword search unit 17 and the security level information transmitted from the orderer with the security policy, and determines the person in charge of editing (S513). The sorting control means 13 takes out the public key of the editor in charge from the public key storage means 16, and encrypts the information relating to the publication, the security level information, and the proofreading data D1 by the encryption means 18 using the public key of the editor in charge ( In S514, the data is transferred to the editor terminal 3 of the corresponding editor in charge through the second communication means 6b (S515). When the amount of the proofreading data D1 is large, the selection control means 13 can divide the proofreading data D1 and send it to a plurality of editors.

  The editor terminal 3 stores the information relating to the publication received through the third communication unit 6c, the security level information, and the proofreading data D1 in the third storage unit 7c (S516). The editor in charge uses the third encryption / decryption means 9c to decrypt the security level information and the proofreading data D1 by using the private key of the editor terminal 3 through the proofreading data browsing means 21 (S517). The person in charge of the editing browses the calibration data D1 using the calibration data browsing means, performs the correction work using the second input means 12b and the editing means 22 based on the correction instruction in the calibration data D1 (S518), Calibration data output means 23 outputs calibration data D1. The output proofreading data D1, information on the publication and security level information are encrypted by the third encryption / decryption means 9c using the public key of the information management server 2 (S520) and stored in the third storage means 7c. (S521).

  The calibration data completion notification processing procedure from the orderer to the editor will be described with reference to the flowchart of FIG. If it is determined that correction is not necessary as a result of the calibration work, the orderer sends an instruction to end school from the third input means 12c to the fourth communication means 6d. The fourth communication means 6d rewrites the identification information regarding the progress of the proofreading work in the information regarding the corresponding publication. The fourth communication means 6d makes a request to start encrypted communication in order to send information related to the publication to the communication server 1 (S601). The processing until the information related to the subsequent publications is received by the information management server 2 via the communication server 1 is the submission process and the proofreading data D1 transfer process from the orderer to the editor (S304 to S313, S501). To S510).

  The fourth communication unit 6d in the orderer terminal 4 transmits a request for encrypted communication to the first communication unit 6a in the communication server 1 (S601). The first communication means 6a in the communication server 1 authenticates the orderer using the first authentication means 11a in the communication server 1 (S606). If the authentication fails, the encrypted communication is rejected (S605). If the authentication is successful, encrypted communication via the communication line 5 is started between the orderer terminal 4 and the communication server 1 (S602). The fourth communication means 6d in the orderer terminal 4 uses the encryption communication using the public key of the communication server 1 in accordance with the arbitrarily set encryption communication method, and information on the publication in the fourth storage means 7d, the security level Information and school completion notification data are transmitted to the first communication means 6a in the communication server 1 (S603). On the communication line 5, information about the publication is encrypted using the public key of the communication server 1, and the security level information and the school completion notification data are the public key of the information management server 2 and the public information of the communication server 1. It is encrypted twice using a key. The first communication means 6a in the communication server 1 has its own private key held in the communication server 1 by the first encryption / decryption means 9a for information, security level information and school completion notification data related to the publication received according to the encryption communication method. And is stored in the first storage means 7a (S607). Thereafter, the encryption communication is terminated (S604). The communication server 1 uses the first communication unit 6a to transfer information about the publication in the first storage unit 7a, security level information, and school completion notification data to the information management server 2 (S608). The information management server 2 uses the sorting control unit 13 to select the school completion notification data received through the second communication unit 6b from the information on the publication, the security level information, and the school completion notification data, and then to the second storage unit 7b. Store (S609). The selection control means 13 of the information management server 2 uses the second encryption / decryption means 9b to decrypt the security level information. The selection control unit 13 performs the next access restriction process based on the security level information. The orderer information replacement unit 14 compares the orderer information in the information about the publication with the orderer information database 15 and replaces it with the corresponding management ID (S610). The selection control means 13 uses the second encryption / decryption means 9b to decrypt the school completion notification data (S611). The sorting control means 13 determines the person in charge from the information relating to the security level and the publication, extracts the public key of the editor in charge from the public key storage means 16, and uses the public key of the editor in charge by the encryption means 18 Information, security level information and school completion notification data are encrypted (S612) and transferred to the editor terminal 3 of the corresponding editor in charge through the second communication means 6b (S613).

  The editor terminal 3 receives the school completion notification data (S614), decrypts it using its own secret key (S615), the editor confirms the contents, and sends the calibration data D1 that has been completed to the next process. (S616), and the calibration work ends.

  As described above, when each communication is authenticated, the communication is started. However, by installing a microphone, headphones, and a small TV camera in the orderer terminal and the information management server, the orderer It is now possible to make a meeting about calibration work while confirming the other party's face and talking with the manufacturer's secret manager in an Internet videophone. The videophone communication method may be a known transmission method.

1 is an overall configuration diagram of a network proofing system for a compilation that is an embodiment of the present invention. FIG. It is a flowchart of the whole calibration work It is a flowchart at the time of submission It is a flowchart of the transfer process of the proofreading data from an editor to an orderer. It is a flowchart of the transfer process of the proofreading data from an orderer to an editor. It is a flowchart at the end of school

Explanation of symbols

1 communication server 2 information management server 3 editor terminal 4 orderer terminal 5 communication line (network)
6a 1st communication means 6b 2nd communication means 6c 3rd communication means 6d 4th communication means 7a 1st storage means 7b 2nd storage means 7c 3rd storage means 7d 4th storage means 8a 1st 1 tamper resistant device 8b detachable second tamper resistant device 8c detachable third tamper resistant device 8d detachable fourth tamper resistant device 9a first encryption / decryption means 9b second encryption / decryption means 9c third Encryption / decryption means 9d Fourth encryption / decryption means 10a First key storage means 10b Second key storage means 10c Third key storage means 10d Fourth key storage means 11a First authentication means 11b Second authentication means 12a 1st input means 12b 2nd input means 12c 3rd input means 13 Selection control means 14 Orderer information replacement means 15 Orderer information database 16 Public key storage means 17 Keyword search Stage 18 Encryption means 19 private keyword database 20 database editing means 21 calibration data reading unit 22 editing means 23 calibration data output means 24 calibration means D received data D1 calibration data

Claims (7)

An information management server that is a computer that manages digitized document data for proofreading (hereinafter referred to as “proofreading data”), and an editor terminal that is a computer that edits the proofreading data managed by the information management server; The orderer and the manufacturer of the publication use the network system including the orderer terminal, which is a computer for transmitting / receiving the calibration data to / from the information management server, the communication server for communication, and the certificate authority, to obtain the calibration data. A network calibration method for compilations that can communicate with each other while ensuring safety,
Input the submission data for creating the calibration data by the orderer terminal, edit the submission data by the editor terminal via the network, create the calibration data, and create the calibration data. Is corrected by the orderer terminal, and correction instruction information or a school completion signal is transmitted to the editor terminal, and the calibration data is corrected or corrected by the editing terminal according to the correction instruction information or the school completion signal. A network proofreading method for an edited matter, characterized by comprising: In the step of inputting the submitted data by the orderer terminal, editing the editor terminal via the network and creating the calibration data,
Encryption of the submitted data and assignment of orderer information are performed at the orderer terminal, and when authenticated from the communication server, encrypted communication is started, and the orderer information of the submitted data is replaced with a management ID And decryption of the submitted data, automatic setting of the management rank, encryption of the submitted data and transfer to the editor terminal by the information management server, and the editor terminal 2. The network calibration method for an edited material according to claim 1, wherein decryption and encryption of the calibration data are performed. Based on the calibration data transmitted from the editor terminal, in the process of performing a calibration work in the orderer terminal,
The proofreading data edited from the submitted data is decrypted, the proofreading data management ID is replaced with orderer information, the proofreading data is encrypted, and transferred to a communication server by the information management server. The communication server authenticates the encrypted communication request from the orderer terminal, decrypts the calibration data by the orderer terminal, performs the calibration work, and encrypts after correcting the calibration data. 3. A network proofreading method for a compilation according to claim 1 or 2. Based on the correction support information by the calibration work transmitted from the orderer terminal, in the process of performing the correction work in the editor terminal,
When authenticated from the communication server, encryption communication is started, the replacement of the calibration data from the orderer information to the management ID, the decryption of the calibration data, the automatic setting of the management rank, the encryption of the calibration data, The transfer to the editor terminal is performed by the information management server, and the editing data is decrypted, corrected, and encrypted by the editor terminal. Network calibration method for compilations. Based on the calibration data transmitted from the editor terminal, performing the calibration work at the orderer terminal, and sending a school completion notice,
When authenticated from the communication server, encryption communication is started, the orderer information of the school completion notification data is replaced with the management ID, the school notification data is decrypted and encrypted, and transferred to the editor terminal. 5. The network calibration of an edited material according to any one of claims 1 to 4, wherein the information management server performs the processing, and the editor terminal decodes the school completion notification data and transmits it to the next process. Method.   The setting of the management rank is performed by searching whether or not a secret keyword preset in a secret keyword database is included in the submission data and the proofreading data by keyword search means provided in the information management server, 5. The network calibration method for an edited material according to claim 2, wherein security level information suitable for the corresponding secret keyword is set. In the replacement of the orderer information, the submission data and the proofreading data are divided into publication information and orderer information by the selection control means provided in the information management server, and the accessor is determined from the security level information. The network calibration method for an edited material according to any one of claims 2 to 6, wherein a calibration operation is performed between the set accessors.

Images