JP2016144119A - Electronic pen, terminal, and system, method and program for signature collation - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a signature collation system, including an electronic pen, a signature terminal and a collation server, capable of enhancing security against the camouflage of an encrypted signature and a wiretap.SOLUTION: An electronic pen 10d includes: a cipher key storage unit 11d for storing a cipher key to be used for encryption; an encryption unit 12d for encrypting signature data received by an external device, using the cipher key; and a communication unit 13d, which is communicably connected to a signature terminal, which is an external device to accept the input of the signature data, for receiving the signature data and transmitting the encrypted signature data. The system further includes a collation server for storing collation signature data threaded with the electronic pen. On receiving from the signature terminal a request to authenticate the signature data encrypted by the electronic pen, the collation server decrypts the encrypted signature data, to collate the decrypted signature data with the collation signature data.SELECTED DRAWING: Figure 18

Description

  The present invention relates to an authentication technique using a handwritten signature (signature).

  There is a technique for digitizing a handwritten signature and using it for authentication. In this technology, information of a handwritten signature is acquired and analyzed as digital data using an electronic pen and used for personal verification.

  Patent Document 1 discloses a technique for authenticating a signature by collating the characteristics of an input handwritten signature with the characteristics stored in a feature storage unit.

  Patent Document 2 discloses a technique for storing handwritten signature data initially registered by a user and authenticating a handwritten signature by comparing the input handwritten signature with the initially registered data.

  Patent Document 3 discloses a technique of an electronic pen system that improves reliability by including time (time stamp) in handwritten information by the electronic pen.

  Patent Document 4 discloses a technology of a digital pen system with a high security level that makes it impossible for a third party to decipher the contents of the encrypted handwritten information by encrypting the handwritten information.

JP-A-7-105136 JP 2000-194618 JP 2008-242988 JP 2009-187260 A

  In the techniques of Patent Document 1, Patent Document 2, and Patent Document 3, if a copy image of a handwritten signature leaks, the image of the signature may be misused, and authentication unintended by the person may be performed. Similarly, when a signature image imitating a handwriting is misused, authentication that is not intended by the person may be performed.

  The technique of Patent Document 4 attempts to ensure security by performing encryption and decryption on signature data. However, if the encryption key and the decryption key are wiretapped, the parties including the owner of the electronic pen Unintended authentication may be performed.

  The present invention has been made to solve the above problems. The main object of the present invention is to improve security against forgery and eavesdropping of an encrypted signature using an electronic pen.

In order to solve the above problems, the first aspect of the present invention is to
An encryption key storage means for storing an encryption key used for encryption;
Encryption means for encrypting signature data received from an external device using an encryption key;
An electronic pen that is communicably connected to an external device that accepts input of signature data and includes communication means for receiving signature data and transmitting encrypted signature data.

The second aspect of the present invention is:
A signature input means for receiving a signature input;
A signature processing means for converting the signature into signature data;
When the signature data is transmitted to the first external device and the encrypted signature data is received, the terminal includes a communication unit that transmits a request for authentication of the encrypted signature data to the second external device.

The third aspect of the present invention is:
An electronic pen as described above;
A terminal as described above,
A verification server that stores verification signature data associated with the electronic pen,
The verification server receives a request for authentication of the signature data encrypted by the electronic pen from the terminal, decrypts the encrypted signature data, and collates the decrypted signature data with the verification signature data.
It is a signature verification system.

  ADVANTAGE OF THE INVENTION According to this invention, the security with respect to the camouflaging of the signature with an electronic pen and wiretapping can be improved.

1 is a configuration diagram of a signature verification system according to a first embodiment of the present invention. It is a figure which shows the signature terminal and electronic pen in the 1st Embodiment of this invention. It is a figure which shows the internal data structure of the decryption key memory | storage part in the 1st Embodiment of this invention. It is a figure which shows the internal data structure of the collation signature data storage part in the 1st Embodiment of this invention. It is a flowchart which shows operation | movement of the signature verification system in the 1st Embodiment of this invention. It is a block diagram of the signature verification system which concerns on the 2nd Embodiment of this invention. It is a figure which shows the signature terminal and electronic pen in the 2nd Embodiment of this invention. It is a figure which shows the internal data structure of the decryption key memory | storage part in the 2nd Embodiment of this invention. It is a figure which shows the internal data structure of the collation signature data storage part in the 2nd Embodiment of this invention. It is a flowchart which shows operation | movement of the signature verification system in the 2nd Embodiment of this invention. It is a block diagram of the signature verification system which concerns on the 3rd Embodiment of this invention. It is a figure which shows the internal data structure of the collation signature data storage part in the 3rd Embodiment of this invention. It is a flowchart which shows operation | movement of the signature verification system in the 3rd Embodiment of this invention. It is a block diagram of the signature verification system which concerns on the 4th Embodiment of this invention. It is a figure which shows the internal data structure of the collation signature data storage part in the 4th Embodiment of this invention. It is a flowchart which shows operation | movement of the signature verification system in the 4th Embodiment of this invention. It is an arrangement plan of a signature input unit in a modification of the embodiment of the present invention. It is a block diagram of the electronic pen which concerns on the 5th Embodiment of this invention.

Next, an embodiment of the present invention will be described with reference to the drawings. In the following description of the drawings, the same or similar parts are denoted by the same or similar reference numerals. However, the drawings schematically show the configuration of the embodiment of the present invention. Furthermore, the embodiment of the present invention described below is an example, and can be appropriately changed within a range in which the essence is the same.
<First embodiment>
(Signature verification system)
A configuration of the signature verification system 100 according to the first embodiment of the present invention will be described. As shown in FIG. 1, the signature verification system 100 includes an electronic pen 10, a signature terminal 20, and a verification server 30. The electronic pen 10 is a pen for signing. The signature terminal 20 is a first external device, such as a tablet terminal that accepts a signature. The verification server 30 is a second external device, and performs personal authentication by verifying a signature input to the signature terminal 20 by the electronic pen 10 with previously registered signature data.

  Wireless communication is possible between the electronic pen 10 and the signature terminal 20. A wired connection may be used. Communication between the signature terminal 20 and the verification server 30 is possible via a wired or wireless network.

  Within the signature verification system 100, there are a plurality of electronic pens 10 and signature terminals 20. A plurality of verification servers 30 may exist for each region.

  The user signs the signature terminal 20 via the electronic pen 10. The signature terminal 20 transmits data representing the user's signature to the verification server 30 via a network or the like. The verification server 30 determines whether the transmitted signature matches the registered signature, and transmits the determination result to the signature terminal 20.

  As a business model of the signature verification system 100, it is assumed that the signature verification system 100 is used in a business that requires a signature to conclude a contract, for example, between a banker and a customer, or between a real estate agent and a customer. In this case, the customer has the electronic pen 10, and the banker, the real estate agent, or the customer himself has the signature terminal 20.

  As another business model, a company such as a bank may give the electronic pen 10 to an employee who needs a signature for business. The business model described above is merely an example, and the signature verification system 100 is not limited to this.

  The electronic pen 10 includes an encryption key storage unit 11, an encryption unit 12, a communication unit 13, and an electronic pen ID storage unit 14.

  The encryption key storage unit 11 stores an encryption key for encrypting a signature written on the signature terminal 20 by the user via the electronic pen 10.

  The encryption unit 12 encrypts a signature written on the signature terminal 20 by the user via the electronic pen 10 using the encryption key stored in the encryption key storage unit 11.

  The communication unit 13 is an interface composed of at least one of hardware and software for communicating with the outside. The communication unit 13 signs via wireless communication such as Wi-Fi (Wireless Fidelity (registered trademark)), BlueTooth (registered trademark), near field communication, or non-contact communication (Near Field Communication, hereinafter referred to as “NFC”). Communication with the terminal 20 is performed. In order to enhance security when sending and receiving a signature, this communication is preferably near field communication such as NFC. An example of a communication protocol of NFC technology is FeliCa (registered trademark).

  The communication unit 13 receives signature image data (hereinafter referred to as “signature data”) from the signature terminal 20 to the electronic pen 10 when a signature is made by the user, and the electronic pen 10 to the signature terminal 20. The encrypted signature data (hereinafter referred to as “encrypted signature data”) is transmitted to the server.

  The electronic pen ID storage unit 14 stores an identifier (ID: identification) assigned to each electronic pen in the signature verification system 100 for identifying the electronic pen.

  The signature terminal 20 includes a signature data storage unit 21, an encrypted signature data storage unit 22, a signature input unit 23, a signature processing unit 25, and a communication unit 26.

  The signature data storage unit 21 stores a signature input by the user via the electronic pen 10.

  The encrypted signature data storage unit 22 stores signature data (hereinafter referred to as encrypted signature data) encrypted by the encryption unit 12 of the electronic pen 10.

  The signature input unit 23 is an input unit for a user to input a signature through the electronic pen 10. As shown in FIG. 2, the signature input unit 23 is a tablet screen or the like that receives an input of a signature from the electronic pen 10, and is arranged at a position where a signature input from a user such as the surface of the signature terminal 20 can be made.

  The signature processing unit 25 stores the signature image data input to the signature input unit 23 in the signature data storage unit 21. The signature processing unit 25 receives the signature image data encrypted by the electronic pen 10 from the communication unit 26 and stores it in the encrypted signature data storage unit 22. When the signature processing unit 25 transmits the encrypted signature data stored in the encrypted signature data storage unit 22 to the communication unit 26 and further receives a verification result from the communication unit 26, the signature processing unit 25 notifies the user of this. The notification may be displayed on the signature input unit 23 or may be notified using a notification lighting or blinking lamp (not shown). The signature processing unit 25 erases the data in the signature data storage unit 21 and the encrypted signature data storage unit 22 after notification of the verification result.

  The communication unit 26 is an interface including at least one of hardware and software for communicating with the electronic pen 10 and the verification server 30. The communication unit 26 uses near field communication such as NFC when communicating with the electronic pen 10, and uses a network such as WAN (Wide Area Network) or LAN (Local Area Network) when communicating with the verification server 30. To do.

  The verification server 30 includes a decryption key storage unit 31, a verification signature data storage unit 32, a decryption unit 33, a verification unit 34, and a communication unit 35.

  The decryption key storage unit 31 has a data configuration as shown in FIG. 3, and stores the electronic pen ID and the decryption key as one record.

  The verification signature data storage unit 32 has a data configuration as shown in FIG. 4 and stores an electronic pen ID and verification signature data. The verification signature data is data indicating the signature of the user who has been registered in advance by the user who uses the electronic pen 10 and the characteristic points of the signature. The verification signature data storage unit 32 may store other information related to the user, such as the name of the user.

  The decryption unit 33 decrypts the encrypted signature data received from the signature terminal 20 using the decryption key stored in the decryption key storage unit 31. The decryption key storage unit 31 and the decryption unit 33 may exist outside the verification server 30, and the verification server 30 may be configured to only receive the decryption result.

  The collation unit 34 has two signatures written by the same person by collating the feature points of the decrypted plaintext signature data and the signature data stored in the collation signature data storage unit 32. It is determined whether it is a thing.

  The communication unit 35 is an interface including at least one of hardware and software for communicating with the outside. The communication unit 35 communicates with the signature terminal 20 via a network or the like. The communication unit 35 receives a signature verification request including the encrypted signature data from the signature terminal 20 and transmits a verification result to the signature terminal 20.

  In the signature verification system 100 described above, the signature terminal 20 and the verification server 30 are an input device such as a keyboard and a touch panel, an output device of a display, a communication control device such as a communication interface with other devices, a work area, and data. A storage device or the like as a storage location may be provided (both not shown).

  The encryption unit 12 in the electronic pen 10 shown in FIG. 1, the signature processing unit 25 in the signature terminal 20, and the decryption unit 33 and verification unit 34 in the verification server 30 are regarded as programs expressed in units of functional blocks. Can do. These programs are stored in a CPU (Central Processing Unit) of a computer (not shown), a ROM (Read Only Memory) (not shown), a RAM (Random Access Memory) (not shown), and the like. These functions are executed by a CPU (not shown) appropriately processing these programs. Each unit described above may be configured by dedicated hardware such as an electronic circuit.

In FIG. 1, the signature terminal 20 and the verification server 30 are configured as separate devices capable of communication, but may be provided in the same device.
(Operation of signature verification system)
Next, the operation of the signature verification system 100 according to the first embodiment of the present invention will be described with reference to the flowchart of FIG.

  In step S101, when the user starts a handwritten signature using the electronic pen 10, the signature input unit 23 of the signature terminal 20 detects a predetermined pressure and input position applied by the pressure detection sensor (not shown) from the electronic pen 10. To recognize the signature input and output the signature data. The signature processing unit 25 stores the signature data in the signature data storage unit 21 and transmits it to the communication unit 26.

  In step S102, signature data is transmitted from the communication unit 26 of the signature terminal 20 to the electronic pen 10 via wireless communication such as NFC.

  In step S103, the communication unit 13 of the electronic pen 10 receives the signature data. The encryption unit 12 receives the signature data from the communication unit 13 and acquires the encryption key from the encryption key storage unit 11. The communication unit 13 acquires the electronic pen ID from the electronic pen ID storage unit 14. The encryption unit 12 encrypts the signature data with the encryption key and generates encrypted signature data. The encrypted signature data and the electronic pen ID are transmitted to the signature terminal 20 via the communication unit 13.

  In step S104, when the communication unit 26 of the signature terminal 20 acquires the encrypted signature data, the communication unit 26 transmits a verification request including the encrypted signature data and the electronic pen ID to the verification server 30 via the network. To do. The signature processing unit 25 receives the encrypted signature data from the communication unit 26 and stores it in the encrypted signature data storage unit 22.

  In step S <b> 105, when the communication unit 35 of the verification server 30 receives the encrypted signature data and the electronic pen ID, the communication unit 35 transmits the encrypted signature data and the electronic pen ID to the decryption unit 33. Based on the electronic pen ID, the decryption unit 33 searches the decryption key storage unit 31 illustrated in FIG. 3 for a decryption key for decrypting the encrypted signature data. When the decryption unit 33 retrieves the decryption key, the decryption unit 33 decrypts the encrypted signature data using the decryption key, and converts it into plain text signature data.

  In step S106, the collation unit 34 receives the plaintext signature signature data and the electronic pen ID from the decryption unit 33, collates with the signature data corresponding to the electronic pen ID registered in advance in the collation signature data storage unit 32, Check the integrity of the signature. The consistency is confirmed by examining whether the feature points of the registered signature data match the feature points of the signature data received from the decryption unit 33 or the like.

  In step S <b> 107, the collation unit 34 transmits the collation result to the signature terminal 20 via the communication unit 35.

  In step S <b> 108, the signature processing unit 25 performs personal authentication based on the verification result received from the verification server 30 by the communication unit 26 of the signature terminal 20. For example, the signature is authenticated if the collation results match, and the signature is not authenticated if the collation results do not match. After the personal authentication, the signature processing unit 25 deletes the data in the signature data storage unit 21 and the encrypted signature data storage unit 22.

  As described above, in the first embodiment of the present invention, by combining the electronic pen ID, handwritten signature data, and the encryption key, security against impersonation or eavesdropping of the encrypted signature by the electronic pen is improved. Simple and strong personal authentication can be realized.

  In addition, since a valid authentication is not performed unless the electronic pen is provided by a proper holder of the electronic pen, a third party can use an electronic pen other than the electronic pen of the right holder in the signature verification system. Even if the handwriting is imitated (spoofed) and signed, unauthorized verification can be blocked on the verification server 30 side.

Furthermore, in the present embodiment, by using short-range wireless communication such as NFC in communication between the electronic pen 10 and the signature terminal 20, wiretapping of communication by a third party between the electronic pen 10 and the signature terminal 20 is possible. Etc. can be made difficult.
<Second Embodiment>
(Signature verification system)
A signature verification system 200 according to the second embodiment of the present invention will be described. In the signature verification system 200 according to the second embodiment, compared to the signature verification system 100 according to the first embodiment, the electronic pen 10a does not include an electronic pen ID, and the user is prompted each time a signature is input. The user is prompted to input an electronic pen ID.

  A configuration of the signature verification system 200 according to the second embodiment of the present invention will be described. As shown in FIG. 6, the signature verification system 200 includes an electronic pen 10a, a signature terminal 20a, and a verification server 30a.

  Within the signature verification system 200, there are a plurality of electronic pens 10a and signature terminals 20a. A plurality of verification servers 30a may exist for each region.

  The electronic pen 10a includes an encryption key storage unit 11, an encryption unit 12, and a communication unit 13.

  The signature terminal 20a includes a signature data storage unit 21, an encrypted signature data storage unit 22, a signature input unit 23, an ID input unit 24, a signature processing unit 25, and a communication unit 26.

  The ID input unit 24 is an input unit for inputting an identifier and a password that are given to each electronic pen in the signature verification system 200 to identify the electronic pen. FIG. 7 shows an example of the ID input unit 24. The ID input unit 24 includes an input display unit 24a and an input keyboard 24b. The input display unit 24a is a display for displaying the input electronic pen ID and password. The input keyboard 24b is a keyboard composed of characters and numbers for inputting the electronic pen ID and password, and may be hardware or software. In FIG. 7, it is arranged at a position different from the signature input unit 23, but it may be displayed as a software keyboard superimposed on the signature input unit 23.

  The input keyboard 24b may be a software keyboard integrated with the signature input unit 23. Alternatively, the biometric authentication (fingerprint, retina, voiceprint, etc.) may be used as the user ID (electronic pen ID), and the input keyboard 24b may be configured as a biometric data reading mechanism.

  The electronic pen ID is an identifier of the electronic pen, but this may be arbitrarily set by the user if the identifier is unique. For example, it may be a user account number, a telephone number, or the biometric data described above.

  The verification server 30a includes a decryption key storage unit 31a, a verification signature data storage unit 32a, a decryption unit 33, a verification unit 34a, and a communication unit 35.

  As illustrated in FIG. 8, the decryption key storage unit 31a stores the electronic pen ID, the password, and the decryption key as one record. The password may be notified to the user in advance or may be arbitrarily set by the user.

  As shown in FIG. 9, the verification signature data storage unit 32a stores the electronic pen ID, password, and verification signature data as one record.

  The collation unit 34a has two signatures written by the same person by collating the feature points of the decrypted plaintext signature data and the signature data stored in the collation signature data storage unit 32a. It is determined whether it is a thing. Further, it is determined whether the input password matches the password stored in the verification signature data storage unit 32a.

Since other configurations are the same as those of the first embodiment, description thereof is omitted.
(Operation of signature verification system)
Next, the operation of the signature verification system 200 in the second exemplary embodiment of the present invention will be described with reference to the flowchart of FIG.

  In step S201, when the user starts a handwritten signature using the electronic pen 10a, the user is prompted to input the electronic pen ID and password via the input keyboard 24b of FIG. The input electronic pen ID and password may be temporarily displayed on the input display unit 24a. Next, when the user starts a handwritten signature, a pressure detection sensor (not shown) of the signature input unit 23 of the signature terminal 20a detects the predetermined pressure and input position applied from the electronic pen 10a, thereby inputting the signature. Recognize and output signature data. When the signature is completed, the signature processing unit 25 stores the signature data in the signature data storage unit 21 and transmits the signature data to the communication unit 26.

  In step S202, signature data is transmitted from the communication unit 26 of the signature terminal 20a to the electronic pen 10a via wireless communication such as NFC.

  In step S203, when the communication unit 13 of the electronic pen 10a receives the signature data, the encryption unit 12 acquires the encryption key from the encryption key storage unit 11. The encryption unit 12 encrypts the signature data received from the communication unit 13 with the encryption key, and generates encrypted signature data. The encrypted signature data is transmitted to the signature terminal 20a via the communication unit 13.

  In step S204, when the communication unit 26 of the signature terminal 20a acquires the encrypted signature data, the communication unit 26 sends a verification request including the encrypted signature data, the electronic pen ID, and the password via the network to the verification server 30a. Send to. The signature processing unit 25 receives the encrypted signature data from the communication unit 26 and stores it in the encrypted signature data storage unit 22.

  In step S205, when the communication unit 35 of the verification server 30a receives the encrypted signature data, the electronic pen ID, and the password, the communication unit 35 transmits the encrypted signature data, the electronic pen ID, and the password to the decryption unit 33. Based on the electronic pen ID, the decryption unit 33 searches the decryption key storage unit 31a illustrated in FIG. 8 for a decryption key for decrypting the encrypted signature data. At this time, it may be checked whether the passwords match. When the decryption unit 33 retrieves the decryption key, the decryption unit 33 decrypts the encrypted signature data using the decryption key, and converts it into plain text signature data.

  In step S206, the verification unit 34a receives the plaintext signature signature data, the electronic pen ID, and the password from the decryption unit 33, and the signature data and password corresponding to the electronic pen ID registered in advance in the verification signature data storage unit 32a. To verify the integrity of the signature and password. Consistency can be confirmed by examining whether or not the feature points of the registered signature data match the feature points of the signature data received from the decryption unit 33, and the password registered in advance and the decryption unit 33. This is done by considering whether the received password matches. Note that the password check may be performed by either the decryption unit 33 or the verification unit 34a.

  In step S207, the collation unit 34a transmits the collation result to the signature terminal 20a via the communication unit 35.

  In step S208, the signature processing unit 25 performs personal authentication based on the verification result received from the verification server 30a by the communication unit 26 of the signature terminal 20a. For example, if the user authentication and the password authentication match, the signature is authenticated, and if either the user authentication or the password authentication does not match, the signature is not authenticated. After the personal authentication, the signature processing unit 25 deletes the data in the signature data storage unit 21 and the encrypted signature data storage unit 22.

  As described above, in the second embodiment of the present invention, in addition to the effects of the first embodiment, the electronic pen ID, password, handwritten signature data, and encryption key are combined to be encrypted by the electronic pen. It is possible to realize simple and strong personal authentication with improved security against signature forgery and wiretapping.

Further, in the present embodiment, the electronic pen ID is wiretapped or lost even when the electronic pen 10a is lost or destroyed in order to prompt the user to input the electronic pen ID and password at the signature terminal 20a every time a signature is made. There is nothing to do. Further, by allowing the user to arbitrarily set the electronic pen ID and password and prompting the user to periodically update the password, stronger security can be realized.
<Third Embodiment>
(Signature verification system)
A signature verification system 300 according to the third embodiment of the present invention will be described. The signature verification system 300 according to the second embodiment prevents the user from signing without permission by designating the date and time when the signature is possible on the verification server 30b side. This is effective, for example, when the company gives the electronic pen 10b to an employee who requires a signature for business purposes, but invalidates the signature by the employee outside of business hours or after retirement.

  The configuration of the signature verification system 300 according to the third embodiment of the present invention will be described. As shown in FIG. 11, the signature verification system 300 includes an electronic pen 10b, a signature terminal 20b, and a verification server 30b.

  In the signature verification system 300, there are a plurality of electronic pens 10b and a signature terminal 20b. Further, a plurality of verification servers 30b may exist for each region.

  The electronic pen 10b includes an encryption key storage unit 11, an encryption unit 12, a communication unit 13, an electronic pen ID storage unit 14, and a signature date / time storage unit 15.

  The signature date storage unit 15 stores the date and time when the electronic pen 10b signed. The electronic pen 10b is assumed to have a time stamp program (not shown) for acquiring the date and time.

  The signature terminal 20b includes a signature data storage unit 21, an encrypted signature data storage unit 22, a signature input unit 23, a signature processing unit 25, and a communication unit 26.

  The verification server 30b includes a decryption key storage unit 31, a verification signature data storage unit 32b, a decryption unit 33, a verification unit 34b, and a communication unit 35.

  As shown in FIG. 12, the verification signature data storage unit 32b stores an electronic pen ID, signature date / time data, and verification signature data. The decryption key storage unit 31 stores the electronic pen ID and the decryption key as one record (see FIG. 3).

  The collation unit 34b examines whether or not the feature point of the registered signature data matches the feature point of the signature data received from the decryption unit 33, and within the pre-registered signable date / time data Judgment is made as to whether the time stamp of the signature is applicable, and the validity of the signature and the signature date / time is confirmed.

Since other configurations are the same as those of the first and second embodiments, the description thereof is omitted.
(Operation of signature verification system)
Next, the operation of the signature verification system 300 in the third exemplary embodiment of the present invention will be described with reference to the flowchart of FIG.

  In step S301, when the user starts a handwritten signature, the pressure detection sensor (not shown) of the signature input unit 23 of the signature terminal 20b detects the predetermined pressure and input position applied from the electronic pen 10b, thereby inputting the signature. Is recognized and signature data is output. The signature processing unit 25 stores the signature data in the signature data storage unit 21 and transmits it to the communication unit 26.

  In step S302, signature data is transmitted from the communication unit 26 of the signature terminal 20b to the electronic pen 10b via wireless communication such as NFC.

  In step S303, when the communication unit 13 of the electronic pen 10b receives the signature data, this reception is used as a trigger, and the communication unit 13 records the reception date and time of the signature data in the signature date and time storage unit 15 as a time stamp. The encryption unit 12 acquires an encryption key from the encryption key storage unit 11. The communication unit 13 acquires the electronic pen ID from the electronic pen ID storage unit 14. The encryption unit 12 encrypts the signature data with the encryption key and generates encrypted signature data. The encrypted signature data, the electronic pen ID, and the time stamp are transmitted to the signature terminal 20b via the communication unit 13.

  In step S304, when the communication unit 26 of the signature terminal 20b obtains the encrypted signature data, the electronic pen ID, and the time stamp, the communication unit 26 requests a verification including the encrypted signature data, the electronic pen ID, and the time stamp. It transmits to the collation server 30b via a network. The signature processing unit 25 receives the encrypted signature data from the communication unit 26 and stores it in the encrypted signature data storage unit 22.

  In step S305, when the communication unit 35 of the verification server 30b receives the encrypted signature data, the electronic pen ID, and the time stamp, the communication unit 35 transmits the encrypted signature data, the electronic pen ID, and the time stamp to the decryption unit 33. . Based on the electronic pen ID, the decryption unit 33 searches the decryption key storage unit 31 (see FIG. 3) for a decryption key for decrypting the encrypted signature data. When the decryption unit 33 retrieves the decryption key, the decryption unit 33 decrypts the encrypted signature data using the decryption key, and converts it into plain text signature data.

  In step S306, the collation unit 34b receives the plaintext signature signature data, the electronic pen ID, and the time stamp from the decryption unit 33, and the signature data corresponding to the electronic pen ID registered in advance in the collation signature data storage unit 32b and Check the validity of the signature and the date and time of signature by comparing with the date and time data that can be signed. The validity can be confirmed by examining whether or not the feature point of the registered signature data matches the feature point of the signature data received from the decryption unit 33, and in the pre-registered signature date / time data. This is performed by determining whether or not the signature time stamp is applicable.

  In step S307, the collation unit 34b transmits the collation result to the signature terminal 20b via the communication unit 35.

  In step S308, the signature processing unit 25 performs personal authentication and date / time authentication based on the verification result received by the communication unit 26 of the signature terminal 20b from the verification server 30b. For example, if the personal authentication and the date / time authentication match, the signature is authenticated, and if either the user authentication or the date / time authentication does not match, the signature is not authenticated. After the personal authentication, the signature processing unit 25 deletes the data in the signature data storage unit 21 and the encrypted signature data storage unit 22.

  As described above, in the third embodiment of the present invention, in addition to the effects of the first embodiment, the electronic pen ID is encrypted by combining the electronic pen ID, the signature date and time, the handwritten signature data, and the encryption key. It is possible to realize simple and strong personal authentication with improved security against forged signatures and eavesdropping.

Furthermore, in this embodiment, since the time stamp of the signature date / time is attached to each signature, when the electronic pen 10b is discovered after being lost, the history of the electronic pen 10b being used can be found by browsing the signature date / time storage unit 15. . Further, the signable date / time data in the collation signature data storage unit 32b of the collation server 30b can be rewritten as “unusable” by the collation server 30b administrator immediately after the loss, thereby preventing signatures by malicious third parties. I can do it. In addition, if the employee or the like does not want to sign other than the predetermined date and time, the signable date and time data in the verification signature data storage unit 32b can be rewritten to be unusable except for the predetermined date and time. You can prevent signatures that you don't.
<Fourth Embodiment>
(Signature verification system)
A signature verification system 400 according to the fourth embodiment of the present invention will be described. The signature verification system 400 according to the fourth embodiment prevents signing at a location that is not permitted by the user by designating a location (position data) where the signature is possible on the verification server 30c side. This is effective, for example, when the company gives the electronic pen 10c to an employee who needs a signature for business purposes, but invalidates the signature by the employee outside the business place or business partner.

  A configuration of a signature verification system 400 according to the fourth embodiment of the present invention will be described. As shown in FIG. 14, the signature verification system 400 includes an electronic pen 10c, a signature terminal 20c, and a verification server 30c.

  In the signature verification system 400, there are a plurality of electronic pens 10c and a signature terminal 20c. Further, a plurality of verification servers 30c may exist for each region.

  The electronic pen 10c includes an encryption key storage unit 11, an encryption unit 12, a communication unit 13, an electronic pen ID storage unit 14, a position detection unit 16, and a signature position storage unit 17.

  The position detection unit 16 is a satellite positioning system (GPS: Global Positioning System) or the like for detecting the position of the electronic pen 10c. The signature position storage unit 17 stores the position data detected by the position detection unit 16.

  The signature terminal 20c includes a signature data storage unit 21, an encrypted signature data storage unit 22, a signature input unit 23, a signature processing unit 25, and a communication unit 26.

  The verification server 30c includes a decryption key storage unit 31, a verification signature data storage unit 32c, a decryption unit 33, a verification unit 34c, and a communication unit 35.

  As shown in FIG. 15, the verification signature data storage unit 32c stores an electronic pen ID, signature possible position data, and verification signature data. There may be a plurality of signable position data. The decryption key storage unit 31 stores the electronic pen ID and the decryption key as one record (see FIG. 3).

  The collation unit 34c examines whether or not the feature points of the registered signature data match the feature points of the signature data received from the decryption unit 33, and the position data is added to the pre-registered signable position data. Is determined and the validity of the signature and the signature position is determined.

Since other configurations are the same as those in the first to third embodiments, description thereof is omitted.
(Operation of signature verification system)
Next, the operation of the signature verification system 400 according to the fourth embodiment of the present invention will be described with reference to the flowchart of FIG.

  In step S401, when the user starts a handwritten signature, the pressure detection sensor (not shown) of the signature input unit 23 of the signature terminal 20c detects a predetermined pressure and input position applied from the electronic pen 10c, thereby inputting the signature. Recognize and output signature data. The signature processing unit 25 stores the signature data in the signature data storage unit 21 and transmits it to the communication unit 26.

  In step S402, signature data is transmitted from the communication unit 26 of the signature terminal 20c to the electronic pen 10c via wireless communication such as NFC.

  In step S403, when the communication unit 13 of the electronic pen 10c receives the signature data, the communication unit 13 notifies the position detection unit 16 of the reception of the signature data. The position detection unit 16 uses the notification as a trigger to detect the current position of the electronic pen 10c using GPS. The detection result is position data such as latitude, longitude, and altitude three-point coordinates. The position data detected by the position detection unit 16 is stored in the signature position storage unit 17. The encryption unit 12 acquires an encryption key from the encryption key storage unit 11. The communication unit 13 acquires the electronic pen ID from the electronic pen ID storage unit 14. The encryption unit 12 encrypts the signature data with the encryption key and generates encrypted signature data. The encrypted signature data, the electronic pen ID, and the position data are transmitted to the signature terminal 20c via the communication unit 13.

  In step S404, when the communication unit 26 of the signature terminal 20c obtains the encrypted signature data, the electronic pen ID, and the position data, the communication unit 26 requests a verification including the encrypted signature data, the electronic pen ID, and the position data. It transmits to the collation server 30c via a network. The signature processing unit 25 receives the encrypted signature data from the communication unit 26 and stores it in the encrypted signature data storage unit 22.

  In step S405, when the communication unit 35 of the verification server 30c receives the encrypted signature data, the electronic pen ID, and the position data, the communication unit 35 transmits the encrypted signature data, the electronic pen ID, and the position data to the decryption unit 33. . Based on the electronic pen ID, the decryption unit 33 searches the decryption key storage unit 31 (see FIG. 3) for a decryption key for decrypting the encrypted signature data. When the decryption unit 33 retrieves the decryption key, the decryption unit 33 decrypts the encrypted signature data using the decryption key, and converts it into plain text signature data.

  In step S406, the collation unit 34c receives the plaintext signature signature data, the electronic pen ID, and the position data from the decryption unit 33, and the signature data corresponding to the electronic pen ID registered in advance in the collation signature data storage unit 32c Check the validity of the signature and signature position by comparing with the signable position data. The validity can be confirmed by examining whether or not the feature point of the registered signature data matches the feature point of the signature data received from the decryption unit 33, and the signature-possible location data registered in advance. This is performed by determining whether the position data is applicable.

  In step S407, the collation unit 34c transmits the collation result to the signature terminal 20c via the communication unit 35.

  In step S408, the signature processing unit 25 performs personal authentication and location authentication based on the verification result received from the verification server 30c by the communication unit 26 of the signature terminal 20c. For example, if the user authentication and the position authentication match, the signature is authenticated, and if either the user authentication or the position authentication does not match, the signature is not authenticated. After the personal authentication, the signature processing unit 25 deletes the data in the signature data storage unit 21 and the encrypted signature data storage unit 22.

  As described above, in the fourth embodiment of the present invention, in addition to the effects of the first embodiment, the electronic pen ID is encrypted by combining the electronic pen ID, signature position, handwritten signature data, and encryption key. It is possible to realize simple and strong personal authentication with improved security against forged signatures and eavesdropping.

  Further, in the present embodiment, since the position data of the signature position is attached every time a signature is made, when the electronic pen 10c is discovered after being lost, it can be seen where the electronic pen 10c is used by browsing the signature position storage unit 17. Furthermore, the signature by the malicious third party can be prevented by rewriting the signable position data in the verification signature data storage unit 32b of the verification server 30c immediately after being lost. In addition, when it is not desired for a user such as an employee to sign other than a predetermined position, the signable position data in the verification signature data storage unit 32b can be rewritten as being unusable except for a predetermined position, thereby You can prevent signatures that you don't.

The first to fourth embodiments can be realized in various combinations. For example, the second and third embodiments are combined, and a signature terminal having an ID input unit 24 (see FIG. 6) that allows a user to manually input an ID, and a signature date / time storage unit 15 (see FIG. 11) that stores the date and time when the signature is possible It is also possible to implement a signature verification system including an electronic pen with For example, the third and fourth embodiments are combined, and an electronic device provided with a signature date storage unit 15 (see FIG. 11) for storing a date and time for signing and a position detection unit 16 (see FIG. 14) for detecting a signable position. A signature verification system including a pen and capable of setting a signature date and a signature position can also be realized.
(Example of change)
Although the signature terminals 20, 20a, 20b, and 20c according to the first to fourth embodiments are assumed to be independent tablet terminals, the signature terminals are personal computers distributed in the market as shown in FIG. This can also be realized by connecting the signature input unit 23 to a computer via an interface such as a USB (Universal Serial Bus). In this case, the signature signature data storage unit 21, the encrypted signature data storage unit 22, the ID input unit 24, the signature processing unit 25, and the communication unit 26 may be provided on the personal computer side or on the signature input unit 23 side. It may be provided.

By configuring the signing terminal in this way, the cost of the signing terminal can be reduced.
<Fifth Embodiment>
An electronic pen 10d according to a fifth embodiment of the present invention will be described with reference to FIG. An electronic pen 10d according to the fifth embodiment is a pen that encrypts a signature received by an external device (external signature terminal), and includes an encryption key storage unit 11d, an encryption unit 12d, and a communication unit 13d.

  The encryption key storage unit 11d stores an encryption key used for encryption. The encryption unit 12d encrypts signature data received from the external device using an encryption key. The communication unit 13d is communicably connected to an external device, receives signature data from this terminal, and transmits encrypted signature data to the external device.

  As described above, in the fifth embodiment of the present invention, by encrypting the handwritten signature data with the encryption key built in the electronic pen, it is possible to prevent forgery or eavesdropping of the encrypted signature by the electronic pen. Simple and strong personal authentication with improved security can be realized.

  Furthermore, in this embodiment, wiretapping by a third party can be made difficult by using short-range wireless communication such as NFC in communication between the electronic pen 10d and an external device.

10, 10a, 10b, 10c, 10d Electronic pen 11 Encryption key storage unit 12 Encryption unit 13 Communication unit 14 Electronic pen ID storage unit 15 Signature date storage unit 16 Position detection unit 17 Signature position storage unit 20, 20a, 20b, 20c Signature Terminal 21 Signature data storage unit 22 Encrypted signature data storage unit 23 Signature input unit 24 ID input unit 25 Signature processing unit 26 Communication unit 30, 30a, 30b, 30c Verification server 31, 31a Decryption key storage unit 32, 32a, 32b, 32c Verification signature data storage unit 33 Decoding unit 34, 34a, 34b, 34c Verification unit 35 Communication unit 100, 200, 300, 400 Signature verification system

Claims (16)

An encryption key storage means for storing an encryption key used for encryption;
Encryption means for encrypting signature data received from an external device using the encryption key;
An electronic pen that is communicably connected to the external device that receives the input of the signature data, and includes a communication unit that receives the signature data and transmits the encrypted signature data. The communication is short-range wireless communication;
The electronic pen according to claim 1. The electronic pen according to claim 1, further comprising a storage unit that stores an identifier for identifying each electronic pen. The electronic pen according to any one of claims 1 to 3, further comprising a date and time storage unit that stores data representing a date and time when the input of the signature data is accepted. 5. The electronic pen according to claim 1, further comprising position detection means for detecting data representing a position where the input of the signature data is received. A signature input means for receiving a signature input;
Signature processing means for converting the signature into signature data;
A terminal comprising communication means for transmitting the signature data to a first external device and transmitting the request for authentication of the encrypted signature data to the second external device when the encrypted signature data is received. The terminal according to claim 6, further comprising an identifier input unit that receives an input of an identifier associated with the signature data. The transmission of the signature data and the reception of the encrypted signature data use near field communication.
The terminal according to claim 6 or 7.   The signature input means is separable from the signature processing means and the communication means, and the signature input means, the signature processing means and the communication means are connected via a communication interface. Listed devices An electronic pen according to any one of claims 1 to 5,
A terminal according to claims 6 to 9,
A verification server that stores verification signature data associated with the electronic pen,
The verification server receives a request for authentication of the encrypted signature data by the electronic pen from the terminal, decrypts the encrypted signature data, and decrypts the decrypted signature data, the verification signature data, Match
Signature verification system. Remember the encryption key used for encryption,
The signature data received from the external device is encrypted using the encryption key,
Communicatively connected to the external device for accepting input of the signature data, and receiving the signature data and transmitting the encrypted signature data;
Signature verification method. Accepts signatures,
Converting the signature into signature data;
When the signature data is transmitted to the first external device and the encrypted signature data is received, a request for authentication of the encrypted signature data is transmitted to the second external device.
Signature verification method. An electronic pen according to any one of claims 1 to 5,
A terminal according to claims 6 to 9,
In a system comprising a verification server for storing verification signature data associated with the electronic pen,
A request for authentication of the encrypted signature data by the electronic pen is received from the terminal,
Decrypting the encrypted signature data;
Collating the decrypted signature data with the verification signature data;
Signature verification method. A function for storing an encryption key used for encryption;
A function of encrypting received signature data received from an external device using the encryption key;
A signature verification program that is communicably connected to the external device that receives input of the signature data, and that causes a computer to execute a function of receiving the signature data and transmitting the encrypted signature data. The ability to accept signature input;
A function of converting the signature into signature data;
A function of transmitting the signature data to the first external device and transmitting the request for authentication of the encrypted signature data to the second external device upon receipt of the encrypted signature data;
Signature verification program that causes a computer to execute An electronic pen according to any one of claims 1 to 5,
A terminal according to claims 6 to 9,
In a system comprising a verification server that stores verification signature data associated with the electronic pen,
A function of receiving a request for authentication of the encrypted signature data by the electronic pen from the terminal;
A function of decrypting the encrypted signature data;
A signature verification program for executing a function of verifying the decrypted signature data and the verification signature data.

Images