JP2006148586A - Method and program for verifying electronic information disclosure, and recording medium with electronic information disclosure verification program recorded thereon - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an electronic information disclosure verifying method for verifying that certain electronic information has been disclosed on a network, an electronic information disclosure verification program for realizing the electronic information disclosure verifying method, and a recording medium in which the electronic information disclosure verification program is recorded. <P>SOLUTION: This method for verifying that particular electronic information has been disclosed for a predetermined period in a particular computer connected to the network comprises an electronic certification information reading step for reading electronic certification information including information obtained by accessing the particular electronic information within the predetermined period, an electronic information reading step for reading electronic information to be verified, and a disclosure verifying step for verifying whether the electronic information to be verified has been disclosed on the basis of the information included in the electronic certification information and information obtained from the electronic information to be verified. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an electronic information disclosure verification method for verifying whether certain electronic information has been disclosed on a network, an electronic information disclosure verification program for realizing the electronic information disclosure verification method, and a recording medium on which the electronic information disclosure verification program is recorded. .

  Legal reform has been carried out, such as the Electronic Public Notice Act, which is regarded as legally disclosed by publishing electronic documents on the Internet. In addition, the Patent Law has been amended, and for applications filed on or after January 1, 2000, electronic documents published on the Internet in addition to conventional publications have been handled as publicly known documents.

  On the other hand, information published on the Internet has the convenience of being able to publish quickly and easily, but it is easier to modify public information and cancel information disclosure than information published on paper. It also has problems that it is difficult to prove that the information has been made public with the same content (integrity proof) and proof that the information was accessible to the public (availability proof).

As a system for proving that electronic information is disclosed on the network, there are Patent Document 1 and Patent Document 2.
Japanese Patent Laid-Open No. 11-39395 JP 2001-154988 A

However, the verification result of whether or not it has been released becomes complicated depending on the complexity of the actual disclosure situation, and even in such a case, the user can easily understand the verification result In view of such a problem, the present invention is an electronic information disclosure verification method for verifying whether certain electronic information has been disclosed on the network, and an electronic information disclosure verification for realizing the electronic information disclosure verification method. An object of the present invention is to provide a recording medium on which the program and its electronic information disclosure verification program are recorded.

  In order to solve the above-described problem, the present invention is a method for verifying that specific electronic information has been disclosed in a predetermined period in a specific computer connected to a network, and that includes the above-described period of time within the predetermined period. An electronic certification information reading stage for reading electronic certification information including information obtained by accessing specific electronic information; an electronic information reading stage for reading electronic information to be verified; and information included in the electronic certification information; And a public verification stage for verifying whether or not the electronic information to be verified has been disclosed based on information obtained from the electronic information to be verified.

  In order to solve the above problem, the present invention provides the electronic verification information, as information obtained by the access, including a hash value of the electronic information within the predetermined period, and the public verification step Then, the verification is performed by comparing the hash value of the electronic information to be verified with the hash value included in the electronic certification information.

  In order to solve the above-mentioned problem, the present invention is characterized by having a public verification result display step of displaying a public verification result indicating a verification result of the electronic information to be verified.

  In order to solve the above problem, the present invention is characterized in that the electronic certification information includes period information during which the specific electronic information has been made public.

  In order to solve the above problem, the present invention is characterized in that the setting information inspection means uses information obtained by SNMP for inspection.

  In order to solve the above problem, the present invention is characterized in that the period information is displayed in the public verification result display stage.

  In order to solve the above-mentioned problem, the present invention shows the electronic information published in the period information for each period information in the public verification result display stage when there are a plurality of the specific electronic information. It is characterized by displaying information.

  In addition, in order to solve the above-described problem, the present invention provides a method in which, when there are a plurality of the specific electronic information, in the public verification result display stage, for each specific electronic information, the period that has been disclosed in the electronic information It is characterized by displaying information.

  As described above, the present invention provides an electronic information disclosure verification method for verifying whether certain electronic information is disclosed on the network, an electronic information disclosure verification program for realizing the electronic information disclosure verification method, and the electronic information disclosure verification program Can be provided.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the present embodiment, description of the already described reference numerals is omitted.

  First, the hardware configuration of a computer system used in this embodiment will be described with reference to FIG.

  As shown in FIG. 1, the hardware configuration of the computer system includes an input device 22, a display device 23, a drive device 24, a recording medium 25, and an auxiliary storage device 26 that are mutually connected by a bus B. A memory device 27, an arithmetic processing device 20, and an interface device 21.

  The input device 22 includes a keyboard and a mouse, and is used to input various operation signals to the computer system. The display device 23 displays various windows and data necessary for operating the computer system. The interface device 21 is an interface for connecting the computer system to a network or an interface for connecting other devices, and is composed of, for example, a NIC (Network Interface Card), a modem, a USB (Universal Serial Bus), or the like.

  A program for operating the computer system is provided by a recording medium 25 such as a CD-ROM or downloaded through a network. The recording medium 25 is set in the drive device 24, and data and programs are installed from the recording medium 25 to the auxiliary storage device 26 via the drive device 24. The auxiliary storage device 26 may be expressed as an HDD (Hard Disk Drive) in the following description.

  The auxiliary storage device 26 stores data and programs, and stores necessary files and the like. The memory device 27 reads and stores the program from the auxiliary storage device 26 when the computer system is activated. The arithmetic processing unit 20 executes processing in accordance with a program read and stored in the memory device 27. The processing described below is also executed by the arithmetic processing unit 20.

  Next, an example in which the electronic information to be publicly certified is one file will be described.

  FIG. 2 is a diagram showing the configuration of the public verification program and the data flow when performing public verification processing.

  As shown in FIG. 2, the public verification program includes a user interface 101 (hereinafter referred to as UI 101), an electronic information reading function 102, a public verification function 103, an electronic certificate holding function 105, and an electronic certificate reading. And function 104. FIG. 2 also shows a public verifier 100 that is a user who performs verification.

  The UI 101 is an interface for the public verifier 100. The electronic certificate reading function 104 is a function that is specified by the passed file path and reads a certificate file for public certification from the HDD. Upon receiving the certificate file, the electronic certificate holding function 105 starts analyzing the certificate file, takes out information necessary for the UI 101 to display the contents of the certificate from the certificate file, and passes it to the UI 101. It is a function. The public verification function 103 is a function for calculating a hash value of electronic information to be publicly verified. The electronic information reading function 102 is a function for reading a file specified by the passed file path from the HDD and passing the read electronic information to be publicly verified to the public verification function 103.

  Next, the flow of public verification will be described using the sequence diagram of FIG. 3 and the user interface. 3 is a sequence diagram between the public verifier 100, the UI 101, the electronic certificate reading function 104, the electronic certificate holding function 105, the electronic information reading function 102, and the public verification function 103. The processing is shown.

  In step S101, the public verifier 100 opens the certificate file. The user interface at that time is shown in FIGS. The public verifier 100 selects “open certificate” from the menu 201 of the public certificate verification tool screen 200. By this selection, the opening screen 202 shown in FIG. 5 is displayed. On this screen 202, the public verifier 100 can open a certificate file by selecting a certificate file and pressing an open button 203. As a result, the public verifier 100 inputs a certificate file reading command to the user interface of the public verification program. As described above, the UI 101 requests the public verifier 100 to select a certificate file. When the certificate file is selected, the UI 101 passes the file path of the certificate file obtained by the input of the public verifier 100 to the electronic certificate reading function 104 in step S102.

  In step S103 corresponding to the electronic certificate information reading stage, the electronic certificate reading function 104 reads the certificate file specified by the passed file path from the HDD. In the next step S104, the electronic certificate reading function 104 reads the certificate file, and at the same time, checks whether the contents of the certificate file have not been tampered with from the time the certificate was created until now (certification Whether the authenticity of the document file is maintained. This verification is performed using an electronic signature for the contents of the certificate file included in the certificate file.

  If the authenticity of the certificate file is maintained, the electronic certificate reading function 104 passes the read certificate file to the electronic certificate holding function 105 in step S105. Upon receiving the certificate file, the electronic certificate holding function 105 starts analyzing the certificate file, takes out information necessary for the UI 101 to display the contents of the certificate file from the certificate file, and performs step S107. Then, the data is passed to the UI 101.

  The UI 101 displays certificate data indicating the contents of the passed certificate as shown in FIG. FIG. 6 shows a certificate data display screen 210 and a certificate file content 211 corresponding thereto.

  As shown in FIG. 6, the certificate data includes the target, the total number of accesses, the start time of the publicly certified period, and the like. This target is the URL of the electronic information that is the subject of public certification.

  The correspondence between the certificate data display screen 210 and the certificate file content 211 is shown by taking the target and the number of accesses as an example. The target 212 corresponds to the XML sentence 213 in the certificate file content 211. The total access number 214 corresponds to the XML sentence 215 of the certificate file content 211.

  FIG. 7 shows the correspondence between the element name of the XML sentence of the certificate file content 211 and the field. If there is an element with the same name, it includes the element name one level above. This field name will be described. The target is as described above. The start time of the requested certification period indicates the start time of the period for proving that the request has been made public. The end time of the requested certification period indicates the end time of the period for proving that the request has been made public.

  The total number of accesses indicates the number of accesses during the period. The number of successful accesses indicates the number of successful accesses out of being accessed. The access success rate indicates a value obtained by dividing the number of successful accesses by the total number of accesses. The access frequency indicates how many times a day has been accessed. The number of access points indicates the number of access points. An access point is an information terminal that accesses an electronic document, and specifically includes a PC. It can be claimed that the larger the value of the number of access points, the wider the electronic document has been disclosed. The start time of the publicly certified period is the start time of the period in which it has been proved that it has been actually made public. The end time of the publicly certified period is the end time of the period in which it was proved that it was actually made public. The acquired content information indicates the number of contents of the electronic information that has been made public. The hash value of evidence data is a hash value of data that is evidence that the evidence data has been released. The electronic signature is an electronic signature for the contents of the certificate file. The public key of the certification server is a public key of the server that proves that the certification server has been made public. The public key certificate of the certification server is a certificate of the public key.

  The contents described above are displayed on the certificate data display screen 210. Next, the public verifier 100 clicks the verification button 220 displayed on the certificate data display screen 210 shown in FIG. 8 in order to perform public verification. By this click, an opening screen 202 shown in FIG. 9 is displayed. On this screen 202, the public verifier 100 can open a file by selecting a file to be subject to public verification and pressing an open button 203.

  The UI 101 passes the file path obtained by the input of the public verifier 100 to the electronic information reading function 102 in step S110. The electronic information reading function 102 reads the file specified by the passed file path from the HDD in step S111 corresponding to the electronic information reading stage. The electronic information reading function 102 passes the read public verification target data to the public verification function 103 in step S112. Also, the electronic certificate holding function 105 passes the held electronic certificate to the public verification function 103 in step S113.

  The public verification function 103 first calculates a hash value of the public verification target data in step S114. Next, the public verification function 103 extracts the hash value included in the electronic certificate in step S115, and compares it with the hash value calculated in step S114 in step S116. This step S116 corresponds to a public verification stage. As a result of the comparison, if they match, it is determined that the read public verification target data has been released, and if they do not match, it is determined that they have not been released. Then, the public verification function 103 passes the public verification result to the UI 101 in step S117. The UI 101 displays the verification result to the public verifier 100 in step S118 corresponding to the public verification result display stage.

  10 and 11 are screens for displaying the verification results using a dialog box. FIG. 10 shows a screen when it has been made public, and FIG. 11 shows a screen when it has not been made public.

  On the screen shown in FIG. 10, a document public verification result 230 is displayed. The public verification result 230 indicates that the document has been released. In addition, the public verification result 230 shown in FIG. 11 indicates that it has not been disclosed.

  Note that “not published” here means that “the currently read electronic certificate cannot prove that it was published”, and “the currently read electronic information is not It didn't mean it wasn't published anywhere above.

  In other words, “In the URL described in the currently read electronic certificate, the read electronic information is made public during the period described in the certificate (the period when the public certification was requested). It was not done. "

  In FIG. 10 and FIG. 11, the dialog box is displayed and displayed, but the display location may be in the window of the verification program.

  In addition, it is possible that the public certification as described above is not published in all the requested periods and may or may not be published. For example, as shown in FIG. 12, when the period for which the public certification is requested is 12: 4: 36 on May 20, 2004 to 11:55:34 on June 20, 2004, Suppose that it was not released from 12:14:20 on March 2 to 12:30:12 on June 12, the same year.

  In the screen displayed in this case, as shown in FIG. 13, public periods are listed and the public periods are listed.

  In the embodiment described above, the electronic information to be publicly certified is a single file. In the embodiment described below, the electronic information to be publicly certified is a plurality of files. As a specific example, when a file is an HTML file, a file to which a link is pasted from the HTML file is also used as one electronic information.

  FIG. 14 shows a state in which an HTML file is displayed. A general HTML file has a hyperlink as shown in FIG. In the case of this figure, “Welcome to this Web site” is linked with an image file “welcome.jpg”. In addition, “product.html” is also a hyperlink.

  Such an HTML file is composed of a plurality of files as shown in FIG. As shown in FIG. 15, in the case of an HTML file, it is common that index.html300 to product.html301, download.html302, welcome.jpg303, and report.pdf304 are hyperlink destination files.

  The public verification process in the case of such a plurality of files will be described with reference to FIG. The basic process in this process is the same as that for one file.

  Also in the case of a plurality of files, steps S101 to S109 in FIG. 3 are performed. In step S109 in FIG. 3, the UI 101 requests the public verifier 100 to select a file to be publicly verified. However, in the case of a plurality of files, the UI 101 selects a folder instead of a file. To request. And it differs from the next step S110 in FIG.

  In the case of FIG. 3, the file path is notified because it is one file, but this time, the folder path is notified because there are a plurality of files. That is step S201 in FIG. It is assumed that the folder specified by this folder path contains all target files.

  In step S202, the electronic information reading function 102 acquires the file names of all the files contained in the folder specified by the passed folder path. At this time, the number of files in the folder is also known. Next, the electronic information reading function 102 sequentially reads the files specified by the acquired file names from the HDD. Then, the electronic information reading function 102 passes the read public verification target data (each file) to the public verification function 103. This reading process ends when it is repeated the same number of times as the number of files.

  The electronic certificate holding function 105 passes the held electronic certificate to the public verification function 103 in step S204.

  In step S205, the public verification function 103 calculates a hash value of the public verification target data. In this case, it is calculated for each of a plurality of files. Next, the public verification function 103 extracts the hash value included in the digital certificate in step S206, and matches the hash value calculated in step S205 among the hash values included in the certificate. Check if there is a comparison by comparing hash values.

  As a result, if the hash values of all the passed files are included in the certificate, the public verification function 103 determines that the electronic information has been released, and if there is any hash value that is not included. It is determined that it has not been released.

  The result is notified to the public verifier 100 as in steps S117 to S118 of FIG.

  In the above-described embodiment, a plurality of files constituting the electronic information are regarded as one in total, and therefore, when even one of the files is not disclosed, it is determined that “electronic information has not been disclosed”.

  However, in some cases, instead of determining whether to release such information, I want to know in detail the release status of each file, such as “That file was not released, but only this file was released”. Sometimes it is.

  For example, the following shows how the five files shown in FIG. 15 display the result of the public verification when the public status as shown in FIG. 17 is displayed, and further explains how to realize it. .

The public status shown in FIG. 17 indicates that the period when the public certification is requested is from 12: 4: 36 on May 20, 2004 to 11:55:34 on June 20, 2004, from the start time. From June 2nd, 12:14:20 (hereinafter referred to as date A), all five files have been released, from date A to 12:30 12:12 on June 12, the same year (hereinafter referred to as date B). Is a situation in which only index.html is disclosed, and from date B to the end time, three files, index.html, product.html, and download.html, are disclosed.
□ First, the case where each file is displayed on the axis will be described. In this case, the document public verification result 400 shown in FIG. 18 is obtained. In the document public verification result 400, verification results 401, 402, 403, 404, and 405 are displayed.

  These verification results correspond to each file. Specifically, the verification result 401 corresponds to index.html, the verification result 402 corresponds to product.html, the verification result 403 corresponds to download.html, and the verification result 404 corresponds to welcome.html. Correspondingly, the verification result 405 corresponds to report.html. The file names of these html files are information indicating electronic information.

  When displaying each such file on the axis, the hash value of each file and the publication period of the file are associated with the electronic certificate. That is, one or more public periods correspond to one or more hash values.

  At that time, first, the file is read and the hash value is calculated. Next, using the hash value as a key, the file publication period is searched in the electronic certificate. Then, the file name and the publication period are displayed together.

  In this way, the verification result can be displayed for each file.

  Next, the case where each publication period is displayed on the axis will be described. In this case, the document public verification result 400 shown in FIG. 19 is obtained. In the document public verification result 400, verification results 410, 411, and 412 are displayed.

  These verification results correspond to each release period. Specifically, the verification result 410 corresponds to the disclosure period from the start time to date A, the verification result 411 corresponds to the disclosure period from date A to date B, and the verification result 412 ends from date B Corresponds to the release period until the time.

  When displaying each such publication period on the axis, each publication period is associated with the hash values of all files published within that period in the electronic certificate. That is, zero or more hash values correspond to one disclosure period.

  At that time, the file is first read and the hash value is calculated. Next, it is checked whether there is a hash value corresponding to each public period that matches the hash value obtained earlier. If there is a match, it can be seen that the original file of that hash value was published during that period.

  In this case, if the hash value associated with any publication period does not match, the electronic certificate cannot prove that the read file has been published.

It is a hardware block diagram of a computer system. It is a figure which shows the structure of a public authentication program. It is a sequence diagram which shows the flow of public verification (the 1). It is a figure which shows a public certificate verification tool screen. It is a figure which shows the screen which opens a certificate file. It is a figure which shows a certificate data display screen. It is a figure which shows the correspondence of an element name and a field. It is a figure which shows a certificate data display screen. It is a figure which shows the screen which opens a file. It is a figure which shows the screen which displays a verification result. It is a figure which shows the screen which displays a verification result. It is a figure which shows a public period. It is a figure which shows the screen which enumerated the period currently disclosed. It is a figure which shows a mode that the HTML file was displayed. It is a figure which shows the structure of an HTML file. It is a sequence diagram which shows the flow of public verification (the 2). It is a figure which shows the public period of several files. It is a figure which shows the screen which displays a public verification result centering on each file. It is a figure which shows the screen which displays a public verification result on the axis of each public period.

Explanation of symbols

DESCRIPTION OF SYMBOLS 20 Arithmetic processing device 21 Interface device 22 Input device 23 Display device 24 Drive device 25 Recording medium 26 Auxiliary storage device 27 Memory device 100 Public verifier 101 User interface 102 Electronic information reading function 103 Public verification function 104 Electronic certificate reading function 105 Electronic Certificate holding function 200 Public certificate verification tool screen 201 Menu 202 Open screen 203 Open button 210 Certificate data display screen 211 Certificate file content 212 Target 213, 215 XML sentence 214 Total number of accesses 220 Verification button 230, 400 Document public verification Result 300 index.html
301 product.html
302 download.html
303 welcome.jpg
304 report.pdf
401, 402, 403, 404, 405, 410, 411, 412 Verification result

Claims (9)

A method for verifying that specific electronic information has been disclosed for a predetermined period on a specific computer connected to a network,
An electronic certification information reading step of reading electronic certification information including information obtained by accessing the specific electronic information within the predetermined period;
An electronic information reading stage for reading electronic information to be verified;
A public verification stage for verifying whether the electronic information to be verified has been disclosed based on information included in the electronic certification information and information obtained from the electronic information to be verified. Electronic information disclosure verification method. The electronic certification information includes a hash value of the electronic information within the predetermined period as information obtained by the access,
2. The electronic information public verification according to claim 1, wherein in the public verification stage, verification is performed by comparing a hash value of electronic information to be verified with a hash value included in the electronic certification information. Method. The electronic information disclosure verification method according to claim 1, further comprising a disclosure verification result display step of displaying a disclosure verification result indicating a verification result of the electronic information to be verified. 4. The electronic information disclosure verification method according to claim 3, wherein the electronic certification information includes period information during which the specific electronic information has been disclosed. 5. The electronic information disclosure verification method according to claim 4, wherein the period information is displayed in the disclosure verification result display step. When the specific electronic information is plural,
6. The electronic information disclosure verification method according to claim 5, wherein, in the disclosure verification result display step, information indicating the electronic information disclosed in the period information is displayed for each period information. When the specific electronic information is plural,
6. The electronic information disclosure verification method according to claim 5, wherein in the disclosure verification result display step, period information that has been disclosed in the electronic information is displayed for each specific electronic information. An electronic information disclosure verification program for executing the electronic information disclosure verification method according to any one of claims 1 to 7 on a computer. A computer-readable recording medium on which the electronic information disclosure verification program according to claim 8 is recorded.

Images