JP2010081424A - Document transmitting and receiving system, document transmitting device, document receiving device, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To achieve a function to complement an electronic certificate afterward. <P>SOLUTION: A document transmitting and receiving device includes: a document acquisition means for acquiring a document; a first-order transmitting means for producing a first-order document containing user identification information for identifying a user, a first electronic certificate in which a first certifier certifies the authenticity of the user identification information, and the document acquired above and then transmitting the first-order document to a document receiving device; and a second-order transmitting means for producing a second document containing the user identification information, a second electronic certificate in which a second certifier, different from the first certifier, certifies the authenticity of the user identification information, and information showing the document acquired above and then transmitting the second-order document to the document receiving device. The document receiving device includes a first document receiving means for receiving the first-order document, a second document receiving means for receiving the second-order document, and a transmitter identity confirming means for confirming the identity of the user identification information contained in the first electronic certificate and the identity of the user identification information contained in the second electronic certificate. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a document transmission / reception system, a document transmission apparatus, a document reception apparatus, and a program.

  Increasingly, various documents such as official documents are transmitted and received electronically via a data communication network such as the Internet. In such a case, an electronic signature and an electronic certificate are often used to prevent “falsification” that rewrites a transmission document in the middle and “spoofing” that pretends to be the person and transmits the document. An electronic signature is data obtained by encrypting a digest of a document such as a hash value with a sender's private key, and the sender of the document proves that the electronic document has not been tampered with. On the other hand, a digital certificate is data in which a highly reliable certificate authority encrypts information such as the sender's public key, name, and expiration date with the secret key of the certificate authority. This proves the non-falsification and authenticity of the.

  An object of the present invention is to provide a document transmission / reception system, a document transmission apparatus, a document reception apparatus, and a program that can prove the validity of a submitter of a previously submitted document with an electronic certificate supplemented later.

  In order to solve the above problems, a document transmission / reception system according to the present invention includes a document transmission device for a user to transmit a document and a document reception device for receiving the document, and the document transmission device receives the document. A primary including: a document acquisition unit to acquire; user identification information for identifying the user; a first electronic certificate for authenticating the user identification information by a first prover; and the document A primary transmission means for generating a document and transmitting the primary document to the document reception device; and a second proof including the user identification information and different in authenticity of the user identification information from the first certifier A secondary transmission means for generating a secondary document including a second electronic certificate certified by the person and information indicating the document, and transmitting the secondary document to the document reception device, The document reception device A primary document receiving means for receiving a document; a secondary document receiving means for receiving the secondary document; the user identification information included in the first electronic certificate; and the secondary electronic certificate included in the second electronic certificate. Sender identity confirmation means for confirming identity with the user identification information.

  The document transmission apparatus according to the present invention includes a document acquisition unit for acquiring a document, user identification information for identifying a user, and a first certifier that verifies the authenticity of the user identification information. A primary transmission unit that generates a primary document including an electronic certificate and the document, transmits the primary document to a document reception device, and includes the user identification information, and the authenticity of the user identification information is A secondary document that includes a second electronic certificate certified by a second certifier different from the first certifier and the document, and that transmits the secondary document to the document reception device. Transmitting means.

  In addition, the document reception apparatus according to the present invention includes user identification information for identifying a user, a first electronic certificate for authenticating the authenticity of the user identification information by a first prover, and a document. A first document receiving means for receiving a primary document including the first document from the document transmitting device; and a second certifier that includes the user identification information and that authenticates the authenticity of the user identification information by a second certifier different from the first certifier. Secondary document receiving means for receiving a secondary document including the electronic certificate of 2 and information indicating the document from the document transmitting device, the user identification information included in the first electronic certificate, and the Sender identity confirmation means for confirming identity with the user identification information included in the second electronic certificate.

  The program according to the present invention includes a document acquisition means for acquiring a document, user identification information for identifying a user, and a first electronic certificate for authenticating the authenticity of the user identification information by a first prover. And a first transmission means for transmitting the primary document to a document reception device, and the user identification information, and authenticating the user identification information with the first proof. A secondary document that generates a secondary document including a second electronic certificate certified by a second certifier different from the person and information indicating the document, and transmits the secondary document to the document reception device. A program for causing a computer to function as a transmission unit.

  A program according to the present invention includes user identification information for identifying a user, and includes a first electronic certificate for authenticating the authenticity of the user identification information by a first certifier and a document. Primary document receiving means for receiving a document from a document transmitting device, second electronic data including the user identification information and certifying the authenticity of the user identification information by a second certifier different from the first certifier Secondary document receiving means for receiving a secondary document including a certificate and information indicating the document from the document transmitting device, and the user identification information included in the first electronic certificate and the second It is a program for causing a computer to function as sender identity confirmation means for confirming identity with the user identification information included in an electronic certificate.

  The information indicating the document included in the secondary document may be the document itself. At this time, the document receiving apparatus may further include document identity confirmation means for confirming the identity between the document included in the primary document and the document included in the secondary document.

  The primary document may include an electronic signature with a first secret key. At this time, the first electronic certificate may include a first public key corresponding to the first private key.

  Similarly, the secondary document may include an electronic signature with a second private key. At this time, the second electronic certificate may include a second public key corresponding to the second private key.

  The document transmission apparatus may further include an electronic certificate storage unit that stores a third electronic certificate including a third private key and a third public key corresponding to the third private key. At this time, the primary transmission means may generate the primary document including the electronic signature by the third secret key and the third certificate.

  The document transmission apparatus may further include an electronic certificate storage unit that stores a third electronic certificate including a third private key and a third public key corresponding to the third private key. At this time, the secondary transmission means may generate the secondary document including the electronic signature using the third private key and the third electronic certificate.

  Further, the secondary transmission means may generate the secondary document including the primary document. At this time, the document transmission device may include primary document storage means for storing the primary document.

  The first electronic certificate may be stored on a portable medium. At this time, the primary transmission means may read the first electronic certificate from the portable medium. The second electronic certificate may be stored in the portable medium. At this time, the secondary transmission means may read the second electronic certificate from the portable medium. Further, information for identifying the portable medium may be used as the user identification information for identifying the user.

  The document acquisition unit may acquire the document by reading an image of the document formed on a medium.

  According to the present invention, the legitimacy of the submitter of the previously submitted document can be proved by an electronic certificate supplemented later.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is an overall configuration diagram of a document transmission / reception system according to an embodiment of the present invention. As shown in FIG. 1, the document transmission / reception system 10 includes an authentication server 12, a document reception computer 14 (document reception device), and a multifunction device 18 (document transmission device), which are connected to a communication network 16 such as the Internet. Thus, mutual data communication is possible. The authentication server 12 and the document reception computer 14 are realized by a known computer system. The multifunction machine 18 is a device having three functions of a printer, a scanner, and a copying machine, and has a built-in computer, and each function is controlled by the computer. In particular, the multi-function device 18 adds a user's electronic signature to the document image generated by the scanner, and further provides an electronic certificate issued by a trusted third party certification authority (second certifier). In addition, it has a function of transmitting information thus obtained to the document reception computer 14. The authentication server 12 is a computer managed by a certificate authority (second certifier) that is a trusted third party who proves the authenticity of information such as a public key. On the other hand, the document reception computer 14 is a computer such as a public institution, and receives a document with an electronic signature and an electronic certificate from the multifunction device 18 via the communication network 16.

  The multifunction machine 18 is installed in a company or the like and is used by many users, and includes an IC card reader for reading various types of user information. Here, the user's private key and electronic certificate necessary for the electronic signature are read from each user's IC card by the IC card reader. FIG. 2 schematically shows information stored in the IC card. As shown in FIG. 2A, a card ID 31 and temporary certification information 32 are stored in the IC card 30. These pieces of information are stored by the manufacturer (first certifier) of the multifunction machine 18 when the IC card 30 is issued. Here, the card ID 31 is identification information of the IC card 30. Furthermore, since the card ID 31 is generated for each user, it also functions as user identification information. The card ID 31 is issued by the manufacturer of the multifunction machine 18 or the like. The temporary certification information 32 is information issued by the manufacturer of the multifunction device 18 for each IC card 30 and includes a temporary private key and a temporary electronic certificate generated by a public key cryptosystem. It is out. The temporary electronic certificate includes a temporary public key corresponding to the temporary private key, a card ID 31, and information (electronic signature) obtained by encrypting them with a private key such as the manufacturer of the multifunction machine 18. Thus, the temporary public key and the card ID 31 are associated with each other.

  Further, the certification information 33 is also stored in the IC card 30. The certification information 33 includes a secret key (this secret key) generated by a public key cryptosystem and an electronic certificate (this electronic certificate). This electronic certificate includes a public key (this public key) corresponding to this private key included in the certification information 33, a card ID 31, and information (electronic signature) obtained by encrypting them with the private key of the certification authority. , Including. Thus, the public key and the card ID 31 are associated with each other.

  If the certification information 33 is stored in the IC card 30 that has been read by the IC card reader of the multifunction machine 18 as shown in FIG. 2A, an image of the scanned document is obtained as shown in FIG. A main signature composed of an electronic signature obtained by encrypting the image with a private key included in the certificate information 33 and a digital certificate included in the certification information 33. 21 is added and this data is transmitted to the document reception computer 14.

  On the other hand, according to the present embodiment, when the digital certificate has not been issued from the certification authority, and the certification information 33 is not yet stored in the IC card 30 as shown in FIG. First, the multi-function device 18 executes signature processing using the temporary certification information 32 stored in the IC card 30, and once transmits the image of the document subjected to the signature processing to the document reception computer 14. Thereafter, when the electronic certificate is issued from the certificate authority and the certificate information 33 is stored in the IC card 30, the certificate information 33 is read from the IC card 30 and the document is received. Supplement to the computer 14. FIG. 4 is a processing flow diagram.

  That is, when the certification information 33 is not yet stored in the IC card 30, the multi-function device 18 acquires the scanned document image (S1), and the document image is shown in FIG. Thus, the card ID 31 stored in the IC card 30 is added (S2). Then, as shown in FIG. 5B, a temporary signature 23 is further added (S3). The temporary signature 23 includes information (electronic signature) obtained by encrypting the information shown in FIG. 5A with the temporary secret key included in the temporary certification information 32 stored in the IC card 30, and the temporary certification information 32. And a provisional electronic certificate included. Furthermore, in this embodiment, as shown in FIG. 5C, a device signature is further added (S4). That is, in this embodiment, the manufacturer of the multifunction device 18 issues a key pair and an electronic certificate to the multifunction device 18 itself, and the secret key (device secret key) of the multifunction device 18 is used in FIG. Information obtained by encrypting the information to be shown (electronic signature), a corresponding public key (device public key), and an electronic certificate (device electronic certificate) certifying the authenticity of the location of the multifunction device 18, etc. The signature 24 is added. The multi-function device 18 stores the information (document image with temporary signature (primary document)) shown in FIG. 5C in the document database 18i in association with the card ID 31 (S5). Further, the multifunction machine 18 transmits the document image with the provisional signature to the document reception computer 14, and the document reception computer 14 associates it with the card ID 31 and stores it in the document database 14a (S6). The document database 14 a is a document storage unit provided in the document reception computer 14.

  Thereafter, when the user receives the electronic certificate from the certification authority, it is additionally stored in the IC card 30. For example, when the user transmits the card ID 31 stored in the IC card 30 to the computer of the certification authority such as the authentication server 12 together with other necessary items such as the name by the multifunction device 18 or another computer (not shown), the certification authority In this computer, an electronic signature using the private key of the certification authority is added to the information and the user's public key. Then, the electronic certificate obtained in this way is returned. In the multi-function device 18 and another computer (not shown), the received electronic certificate is written in the IC card 30. The private key and the public key may be generated by the multi-function device 18 and written to the IC card 30, or may be transmitted to a computer of a certification authority for issuing the electronic certificate. Alternatively, the secret key and the public key may be generated by the computer of the certification authority and transmitted to the multifunction device 18. The secret key thus obtained is also written in the IC card 30. Thus, the contents of the IC card 30 are updated from those shown in FIG. 2B to those shown in FIG.

  After updating the contents of the IC card 30, the user then supplements the electronic certificate to the document reception computer 14 using the IC card 30. That is, when the IC card 30 is inserted into the IC card reader of the multifunction machine 18, the card ID 31 is read from the IC card 30 (S7). Then, among the document images with provisional signatures already stored in the document database 18i of the multi-function device 18, the one associated with the read card ID 31 is read (S8). Then, to the document image with the temporary signature read out in this way, as shown in FIG. 6A, a main signature 25 which is an electronic signature using the main secret key included in the main certification information 33 of the IC card 30 is added. (S9). Further, as shown in FIG. 6B, a device signature 26, which is an electronic signature using a device secret key stored in the multi-function device 18, is added (S10). Then, the signed document image (secondary document) thus obtained is stored in the document database 18i (S11) and transmitted to the document reception computer 14.

  When the document reception computer 14 receives the document image with the signature, the document reception computer 14 reads the document image with the temporary signature stored in the document database in association with the card ID 31 included therein, and the identity of both the document images and the identity of the sender. The sex is confirmed (S12). That is, the document image parts included in the both are compared, and if they match, they are identical, and if they do not match, the electronic certificate is rejected as no identity. Further, the device signatures 24 and 26 are compared to confirm whether the document image with the signature and the document image with the provisional signature are properly transmitted from the same multifunction device 18. Further, the card ID in the electronic certificate included in the main signature 25 added to the document image with the main signature, and the temporary electronic included in the temporary signature 23 added to the document image with the main signature or the document image with the temporary signature. The card ID in the certificate is compared to confirm whether both document images have been transmitted using the same IC card 30, that is, the identity of the sender. That is, if both card IDs match, it is determined that the senders are the same, and if they do not match, the sender is not the same and the supplement of the electronic certificate is rejected. The document reception computer 14 can appropriately check the authenticity and non-tampering of the document image with the temporary signature and the document image with the main signature by using the public key of the certification authority or the manufacturer of the multifunction device 18. In this way, the electronic signature and the electronic certificate using the private key can be safely supplemented to the document image.

  Here, the configuration of the multifunction machine 18 will be described in detail with reference to the drawings. FIG. 7 is a functional block diagram relating to document transmission of the multifunction machine 18. As shown in the figure, the MFP 18 includes an IC card reader 18a, a device certificate storage unit 18b, a certificate reading unit 18c, a scanner unit 18d, a certificate supplementing unit 18g, a main signature unit 18f, a temporary signature unit 18e, and a transmission. A section 18h and a document database 18i are included. The device certificate storage unit 18b, the certificate reading unit 18c, the certificate supplementing unit 18g, the main signature unit 18f, and the temporary signature unit 18e may be realized by executing a program in a computer built in the multi-function device 18. This program may be downloaded from another computer via the communication network 16, or may be read from a portable computer-readable storage medium such as a semiconductor memory.

  The IC card reader 18a is a hardware device that accepts the user's IC card 30 and reads the contents therefrom, and the scanner unit 18d is a hardware device that optically reads the user's document, images it, and outputs it. . The certificate reading unit 18c accesses the IC card reader 18a and acquires the contents of the IC card 30. Then, when the actual certification information 33 is not included in the content of the acquired IC card 30 and only the card ID 31 and the temporary certification information 32 are included, the card ID 31 and the temporary certification information 32 are transferred to the temporary signature unit 18e. In response to this, the provisional signature unit 18e executes the processes of S1 to S5 in FIG. At this time, the device private key and the device electronic certificate are read from the device certificate storage unit 18b. If the certification information 33 is included in the contents of the acquired IC card 30, the certification information 33 is transferred to the signature unit 18f. The signature part 18f adds a book name to the document image output from the scanner part 18d to generate a signed document image (see FIG. 3), and passes it to the transmission part 18h. Further, the certificate reading unit 18c includes the certification information 33 in the content of the acquired IC card 30, and in particular, when instructed by a button operation or the like from the user, the certificate reading unit 18c adds the card ID 31 and the certification information 33 to the certificate supplement. Pass to part 18g. The certificate supplementing unit 18g executes the processes of S7 to S11 in FIG. At this time, the device private key and the device electronic certificate are read from the device certificate storage unit 18b. The transmission unit 18h is a communication device connected to the communication network 16, and transmits the document image output from the certificate supplement unit 18g, the main signature unit 18f, and the temporary signature unit 18e to the document reception computer 14 via the communication network 16. To do.

  As described above, according to the present embodiment, the temporary electronic certificate is stored in the IC card 30, and when the electronic certificate is not stored in the IC card 30, the temporary electronic certificate and the temporary private key are used. If the document image is transmitted to the document receiving computer 14 after the provisional signature is applied and the electronic certificate is stored in the IC card 30 later, the electronic certificate can be supplemented to the document receiving computer. At this time, in the electronic certificate, the public key and the card ID 31 are associated with each other, and in the temporary electronic certificate, the temporary public key and the card ID 31 are associated with each other. It can be confirmed whether the document image is transmitted using the card 30. In this way, a system in which fraud is unlikely to occur can be realized.

  In addition, this invention is not limited to the said embodiment, A various deformation | transformation is possible. For example, in the above description, the document image 20 is included in the secondary document, but the document image 20 itself is not necessarily included. The device signatures 24 and 26 are not necessarily included in the primary document and the secondary document.

1 is an overall configuration diagram of a document transmission / reception system according to an embodiment of the present invention. It is a figure which shows the content of an IC card typically. It is a figure which shows typically the document image with a signature. FIG. 10 is a communication sequence diagram illustrating transmission / reception of a document image with a temporary signature and a document image with a main signature between the multifunction peripheral and the document reception computer. It is a figure which shows the production | generation procedure of the document image with a temporary signature. It is a figure which shows the production | generation procedure of the document image with this signature. FIG. 2 is a functional block diagram of a multifunction machine.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 Document transmission / reception system, 12 Authentication server, 14 Document reception computer, 14a, 18i Document database, 16 Communication network, 18 Multifunction machine, 18a IC card reader, 18b Device certificate memory | storage part, 18c Certificate reading part, 18d Scanner part, 18e provisional signature section, 18f main signature section, 18g certificate supplement section, 18h transmission section, 20 document image, 21 main signature, 23 temporary signature, 24, 26 device signature, 25 main signature, 30 IC card, 31 card ID, 32 temporary certification information, 33 permanent certification information.

Claims (16)

A document transmission / reception system including a document transmission device for a user to transmit a document and a document reception device for receiving the document,
The document transmission device includes:
Document acquisition means for acquiring the document;
Generating a primary document that includes user identification information for identifying the user, a first electronic certificate certified by a first certifier by the first certifier, and the document; Primary transmission means for transmitting a document to the document reception device;
A second electronic certificate that includes the user identification information, a second certifier different from the first certifier proves the authenticity of the user identification information, and information indicating the document. A secondary transmission means for generating a secondary document and transmitting the secondary document to the document reception device,
The document reception device
Primary document receiving means for receiving the primary document;
Secondary document receiving means for receiving the secondary document;
Sender identity confirmation means for confirming the identity of the user identification information contained in the first electronic certificate and the user identification information contained in the second electronic certificate;
A document transmission / reception system characterized by that. The document transmission / reception system according to claim 1,
Information indicating the document included in the secondary document is the document itself;
The document reception device further includes a document identity confirmation unit that confirms the identity between the document included in the primary document and the document included in the secondary document.
A document transmission / reception system characterized by that. In the document transmission / reception system according to claim 1 or 2,
The primary document includes an electronic signature with a first private key, and the first electronic certificate includes a first public key corresponding to the first private key;
A document transmission / reception system characterized by that. In the document transmission / reception system according to any one of claims 1 to 3,
The secondary document includes an electronic signature with a second private key, and the second electronic certificate includes a second public key corresponding to the second private key;
A document transmission / reception system characterized by that. In the document transmission / reception system according to any one of claims 1 to 4,
The document transmission device includes an electronic certificate storage unit that stores a third electronic certificate including a third private key and a third public key corresponding to the third private key,
The primary transmission means generates the primary document including an electronic signature with the third private key and the third certificate;
And a document sending and receiving system. In the document transmission / reception system according to any one of claims 1 to 5,
The document transmission device includes an electronic certificate storage unit that stores a third electronic certificate including a third private key and a third public key corresponding to the third private key,
The secondary transmission means generates the secondary document including an electronic signature by the third private key and the third electronic certificate;
And a document sending and receiving system. In the document transmission / reception system according to any one of claims 1 to 6,
The secondary transmission means generates the secondary document including the primary document;
A document transmission / reception system characterized by that. The document transmission / reception system according to claim 7,
The document transmission device includes primary document storage means for storing the primary document.
A document transmission / reception system characterized by that. The document transmission / reception system according to any one of claims 1 to 8,
The first electronic certificate is stored in a portable medium, and the primary transmission means reads the first electronic certificate from the portable medium;
A document transmission / reception system characterized by that. The document transmission / reception system according to claim 9,
The second electronic certificate is stored in the portable medium, and the secondary transmission means reads the second electronic certificate from the portable medium;
A document transmission / reception system characterized by that. The document transmission / reception system according to claim 9 or 10,
Information for identifying the portable medium is used as the user identification information for identifying the user.
A document transmission / reception system characterized by that. The document transmission / reception system according to any one of claims 1 to 11,
The document acquisition means acquires the document by reading an image of the document formed on a medium;
A document transmission / reception system characterized by that. A document acquisition means for acquiring a document;
Generating a primary document including user identification information for identifying a user and a first electronic certificate for authenticating the authenticity of the user identification information by the first certifier; and the document. Primary transmission means for transmitting the document to the document reception device;
A second electronic certificate that includes the user identification information, a second certifier different from the first certifier proves the authenticity of the user identification information, and information indicating the document. Secondary transmission means for generating a secondary document and transmitting the secondary document to the document reception device;
A document transmission apparatus comprising: A primary document that includes user identification information that identifies a user and that receives a primary document from a document transmission device, the document including a first electronic certificate that is certified by the first certifier and authenticating the user identification information. A document receiving means;
A second electronic certificate that includes the user identification information, a second certifier different from the first certifier proves the authenticity of the user identification information, and information indicating the document. Secondary document receiving means for receiving a secondary document from the document transmitting device;
Sender identity confirmation means for confirming the identity of the user identification information contained in the first electronic certificate and the user identification information contained in the second electronic certificate;
A document receiving apparatus characterized by the above. A document acquisition means for acquiring a document;
Generating a primary document including user identification information for identifying a user and a first electronic certificate for authenticating the authenticity of the user identification information by the first certifier; and the document. And a second electronic certificate that includes the user identification information and certifies the authenticity of the user identification information by a second certifier different from the first certifier A program for causing a computer to function as secondary transmission means for generating a secondary document including a document and information indicating the document and transmitting the secondary document to the document reception device. A primary document that includes user identification information that identifies a user and that receives a primary document from a document transmission device, the document including a first electronic certificate that is certified by the first certifier and authenticating the user identification information. Document receiving means,
A second electronic certificate that includes the user identification information, a second certifier different from the first certifier proves the authenticity of the user identification information, and information indicating the document. Secondary document receiving means for receiving a secondary document from the document transmission device, and the same user identification information included in the first electronic certificate and the user identification information included in the second electronic certificate A program for causing a computer to function as a sender identity confirmation means for confirming sex.

Images