JP2019082785A - Program and timestamp management device - Google Patents

Abstract

To easily and properly leave a timestamp token under the management of a timestamp storage system.SOLUTION: A terminal device 6 as a timestamp management device comprises: a folder monitoring part 22 which monitors a monitoring folder as a storage destination of a management-object file as an object of timestamp management and detects the management-object file in the monitoring folder; a timestamp token extraction part 25 which extracts a timestamp token from the management-object file when the folder monitoring part detects the management-object file in the monitoring folder; and a token file generation part 26 which generates a token file of a timestamp on the basis of the timestamp token extracted by the timestamp token extraction part, and stores it in a predetermined output folder.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a program capable of managing time stamp tokens of an electronic file and a time stamp management device.

  For example, with respect to electronic files including electronic data such as document data, image data, moving image data, audio data and the like, a time authentication technology has been in widespread use where time stamp tokens corresponding to the electronic data are issued by a time authentication organization. In this time authentication technology, the time stamp token proves that the electronic data exists at the date of issue of the time stamp token (proof of existence), and the electronic data is falsified after the date of issue of the time stamp token. Prove that not (completeness proof). The time stamp authority encrypts the combined data of the hash value of the electronic data and the time information of the issue date and time with a secret key to apply a digital signature to generate a time stamp token. The time stamp token also includes an electronic certificate or the like that certifies a public key paired with the secret key.

  For example, the user generates a hash value of electronic data for an electronic file for which proof by a time stamp is desired, transmits the hash value to a time certification authority, and requests issuance of a time stamp token. In response to this, the time authentication organization acquires time information indicating the issuance date and time of the time stamp token, generates a time stamp token from the hash value and the time information, and transmits this time stamp token to the user.

  When the user verifies the electronic file using the time stamp token, for example, the hash value of the electronic data of the electronic file is calculated, and the calculated hash value and the time stamp token received from the time authentication organization are included Compare with hash value. If the electronic data has not been tampered with, the two hash values match. On the other hand, when the electronic data is falsified, the two hash values do not match.

  In addition, the user may keep safe for a long period of time by transmitting a time stamp token to a time stamp storage organization such as, for example, an independent administrative corporation or industrial property information and training center (INPIT). it can. The user can obtain (download) or delete the deposited time stamp token from the time stamp storage facility.

  Patent Document 1 below describes a technique for storing a hash value generated from an electronic file to be managed in a storage server operated by a public organization.

JP, 2016-218554, A

  By the way, the user needs to identify the electronic file corresponding to the time stamp token requiring deposit in order to deposit the time stamp token with the time stamp storage facility. Therefore, while the user identifies and manages the electronic file to be subjected to time stamp management in the electronic files owned by the user, the electronic file issued with the time stamp token and the time stamp token are not issued. It is necessary to identify and manage electronic files. However, performing identification and management as described above on a large number of electronic files is difficult and burdensome for the user. Thus, it has become difficult to deposit time stamp tokens of electronic files with the time stamp storage facility easily and properly.

  In addition, while the terminal device of the user stores the electronic file to be subjected to time stamp management, the time stamp token is issued from the time authentication organization independently of the electronic file. If the electronic file and the time stamp token are stored independently, it becomes difficult to manage them while grasping them in relation to each other.

  In Patent Document 1, a time stamp device issues a time stamp token based on target data, and a storage device issues a storage ID for the time stamp token and stores a storage ID and a time stamp token. There is. Then, the information management apparatus stores target data in association with the storage ID. However, the association with the target data may be lost when the timestamp token is stored, or the association with the target data may be lost when the storage ID is issued.

  By the way, there is a terminal device of a user which assigns a timestamp token to an electronic file, that is, embeds a timestamp token in the electronic file and stores it as one file. Concerned that the association between the electronic file and the time stamp token is lost, general users can not easily extract the time stamp token from the electronic file except at the time of verification or the like. In this case, although the association between the electronic file and the time stamp token is not lost, the time stamp token attached to the electronic file can not be extracted from the electronic file when deposited with the time stamp storage facility.

  The present invention has been made in view of, for example, the problems as described above, and it is an object of the present invention to provide a program and a time stamp management device which make it possible to deposit a time stamp token easily and appropriately to a time stamp storage facility. It is in.

  In order to solve the above problems, a first program according to the present invention monitors a monitoring folder which is a storage destination of a management target file to be subjected to time stamp management, and detects the management target file from the monitoring folder. And an extraction unit for extracting a time stamp token from the management target file when the management target file is detected from the monitoring folder by the monitoring unit; and a time based on the time stamp token extracted by the extraction unit A computer functions as a time stamp management apparatus including a generation unit that generates a token file of stamps and stores the generated token file in a predetermined output folder.

  Further, in order to solve the above problems, the first time stamp management device of the present invention monitors a monitoring folder which is a storage destination of a management target file to be a target of time stamp management, and manages from the monitoring folder A monitoring unit for detecting a file, an extraction unit for extracting a time stamp token from the management target file when the management target file is detected from the monitoring folder by the monitoring unit, and a time stamp extracted by the extraction unit And a generation unit for generating a token file of a time stamp based on the token and storing the token file in a predetermined output folder.

  According to the first program and the first time stamp management apparatus of the present invention, the user can store an appropriate token file that can be deposited at the time stamp storage facility by a simple operation of storing the management target file in the monitoring folder. Can be generated automatically. In particular, it is possible to improve the convenience of extracting timestamp tokens and managing token files for a large number of managed files. In addition, since the generated token file is automatically stored in the output folder, the user can easily and properly deposit the token file to the time stamp storage facility without mistaken storage location of the token file. And the time stamp storage service can be easily used. Furthermore, the user can manage the managed file easily and properly due to the easy and appropriate management of the token file.

  In order to solve the above problem, a second program according to the present invention relates to a time stamp token before extraction of a time stamp token by the extraction unit with respect to a management target file detected from the monitoring folder by the monitoring unit. The computer is made to function as a time stamp management device further comprising an application unit for applying

  Further, in order to solve the above problem, a second time stamp management apparatus according to the present invention is characterized in that before the extraction unit extracts the time stamp token for the management target file detected from the monitoring folder by the monitoring unit. , And a grant unit for granting a timestamp token.

  According to the second program and the second time stamp management apparatus of the present invention, an appropriate time stamp token can be automatically assigned to a management target file to be subjected to time stamp management, and further, automatically A token file of timestamp tokens assigned to can be generated automatically. Therefore, with respect to the management target file, the existence proof and the integrity proof can be automatically made possible without burdening the user. In particular, it is possible to improve the assignment and extraction of time stamp tokens for a large number of managed files, and further improve the convenience of managing token files.

  In order to solve the above problems, according to a third program of the present invention, of the files to be managed, of the files to be managed, of the files to be managed, it is determined that the time stamp token is not attached. Are given a time stamp token.

  Further, in order to solve the above problem, in the third timestamp management apparatus according to the present invention, the assigning unit determines that the timestamp token is not assigned among the management target files detected from the monitoring folder. A timestamp token is assigned to the managed file.

  According to the third program and the third time stamp management apparatus of the present invention, the management target file to which the time stamp token is to be added is automatically determined without burdening the user, and the appropriate time stamp is determined. Tokens can be granted automatically. It is possible to minimize the process of giving the time stamp token 33.

  According to the present invention, the program and timestamp management device enables the timestamp token to be easily and properly deposited to the timestamp repository.

It is a block diagram showing composition of a time stamp system provided with a terminal unit as a time stamp management device concerning an embodiment of the present invention. It is explanatory drawing which shows an example of the management object file which is an electronic file. It is explanatory drawing which shows the other example of the management object file which is an electronic file. It is explanatory drawing which shows the example of the management object file which is a packaging file. It is a table | surface which shows transition of the management object file in the terminal device as a time stamp management apparatus which concerns on embodiment of this invention. It is a top view showing an example of the main screen displayed on the terminal unit as a time stamp management device concerning an embodiment of the present invention. It is a top view which shows the other example of the main screen displayed on the terminal device as a time stamp management apparatus which concerns on embodiment of this invention. It is a top view which shows the example of the environment setting screen displayed on the terminal device as a time stamp management apparatus which concerns on embodiment of this invention. It is a flowchart which shows the operation example of the time stamp management in the terminal device as a time stamp management apparatus which concerns on embodiment of this invention. It is a flowchart which shows the operation example of the time stamp token provision in the terminal device as a time stamp management apparatus which concerns on embodiment of this invention.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. The following embodiments are preferred embodiments of the present invention and disclose various preferred techniques, but the technical scope of the present invention is not limited to these embodiments.

  A time stamp system 1 provided with a terminal device 6 as a time stamp management device according to an embodiment of the present invention will be described with reference to FIG. As shown in FIG. 1, the time stamp system 1 includes a time stamp token issuing server (TST issuing server) 2, a time delivery server 3, an electronic authentication management server 4, a time stamp token storage server (TST storage server) 5 and a terminal device It has six. These are communicably connected to each other via a network 7 such as the Internet. Hereinafter, for convenience of explanation, the time stamp token 33 (see FIG. 2) may be expressed as “TST”.

  In the present embodiment, an electronic file to be subjected to time stamp management by the terminal device 6 as a time stamp management device is referred to as a management object file 31 (see FIG. 2). The management target file 31 includes electronic data 32 such as document data, image data, moving image data, audio data, etc., and is configured by, for example, a PDF file or the like.

  The management target file 31 can be provided with a time stamp token 33 based on the hash value 34 of the electronic data 32, in order to prove existence and integrity of the electronic data 32, as shown in FIG. That is, the time stamp token 33 can be embedded in the management object file 31 to make one file. The time stamp token 33 includes, for example, a hash value 34, time information 35 indicating an issuance time of the time stamp token 33, an electronic signature 36 for the hash value 34 and the time information 35, and an electronic signature 36 for verifying the electronic signature 36. And a certificate 37. Note that, as illustrated in FIG. 3, one or more time stamp tokens 33 issued at different times can be added to the management target file 31.

  Also, as shown in FIG. 4, the management target file 31 is composed of a wrapping file (for example, a wrapping PDF (registered trademark) file) to which one or more attached files 41 are attached in addition to the electronic data 32. Some are done. In the management object file 31 as the packaging file, the management object file 31 itself based on the hash value of the integrated data including all the electronic data 32 of the management object file 31, the electronic data 42 of each attached file 41 and the time stamp token 43. A (total) timestamp token 33 can be given. Hereinafter, the hash value 34 of the electronic data 32 of the management target file 31 indicates the hash value of the comprehensive data described above when the management target file 31 is a package file.

  For example, in FIG. 4, the management target file 31 of the “xxx specification” composed of the packaging PDF file is made up of the attached file 41 of “xxx design document” composed of the PDF file and the PDF file And the attached file 41 of the “xxx evaluation sheet”. The management target file 31 includes electronic data 32 of “XX specification”. Also, in the management target file 31, the electronic data 42 and the time stamp token 43 of the attached file 41 of the "xxx design document" and the electronic data 42 and the time stamp token 43 of the attached file 41 of the "xxx evaluation sheet" It is included. Furthermore, the management target file 31 includes the time stamp token 33 of the management target file 31 itself.

  The TST issuing server 2 is provided in a time certification authority (TSA) and issues a time stamp token 33 given to the management object file 31. Specifically, the TST issuance server 2 receives a request for issuing the hash value 34 of the electronic data 32 and the time stamp token 33 included in the management target file 31 from the terminal device 6 via the network 7. The TST issuance server 2 generates the time information 35 indicating the issuance time of the time stamp token 33 based on the time distributed from the time distribution server 3 in response to the issuance request of the time stamp token 33.

  Then, the TST issuance server 2 generates a time stamp token 33 including the hash value 34 and the time information 35 described above. Further, the TST issuing server 2 generates the electronic signature 36 by encrypting the combination data of the hash value 34 and the time information 35 and the like with a predetermined secret key, and adds the electronic signature 36 to the time stamp token 33. . The time stamp token 33 also includes an electronic certificate 37 issued from the electronic certificate management server 4 for the public key paired with the secret key. Then, the TST issuance server 2 transmits the time stamp token 33 to the terminal device 6 that has transmitted the issuance request of the time stamp token 33.

  The time delivery server 3 is provided in a time delivery agency (TAA), and delivers time to the TST issuance server 2 of the time certification agency and audits the clock of the TST issue server 2.

  The electronic certification management server 4 is provided in an electronic certification authority (CA), and issues and revokes electronic certificates. Specifically, when the electronic certificate management server 4 receives a request for issuing a public key and an electronic certificate from the TST issuing server 2, the electronic certificate management server 4 generates an electronic certificate for the public key and sends it to the TST issuing server 2. The electronic certificate includes the corresponding public key.

  The TST storage server 5 is provided at the time stamp storage organization, and stores the time stamp token 33. Specifically, when the TST storage server 5 receives a token file of a timestamp (hereinafter referred to as a token file) including the timestamp token 33 and its storage request from the terminal device 6 via the network 7, the token Save the file. Further, when the TST storage server 5 receives a request for transmission (download) of a token file from the terminal device 6 via the network 7, the TST storage server 5 transmits a copy of the token file to the terminal device 6 which made the transmission request.

  The terminal device 6 is a terminal such as a personal computer used by the user as a time stamp management device. The terminal device 6 includes an arithmetic processing unit 11, a storage unit 12, a communication unit 13, an operation unit 14, a display unit 15, and an input / output unit 16.

  The arithmetic processing unit 11 is configured by, for example, a CPU (central processing unit). The storage unit 12 is configured to include, for example, a main storage device such as a semiconductor storage device and an auxiliary storage device such as a magnetic storage device. The communication unit 13 is a communication control circuit for communicating with an external device via the network 7. The operation unit 14 includes, for example, a keyboard and a pointing device. The display unit 15 is, for example, a display device such as a display. The input / output unit 16 is an interface that is connected to an external storage device such as a USB (Universal Serial Bus) memory or another device such as an optical disk drive device to input / output data to / from another device.

  The terminal device 6 also includes a monitoring condition setting unit 21, a folder monitoring unit (monitoring unit) 22, a management target file determination unit (determination unit) 23, a time stamp token addition unit (TST addition unit, addition unit) 24, a time stamp A token extraction unit (TST extraction unit, extraction unit) 25, a token file generation unit (generation unit) 26, a log recording unit 27, a display control unit 28, a token file deposit unit 29, and the like are provided. These functional units may be configured by programs stored in the storage unit 12 and executed by the arithmetic processing unit 11. That is, the storage unit 12 stores a program for causing a computer to function as a time stamp management device provided with these functional units. In other words, the arithmetic processing unit 11 and the storage unit 12 constitute a control device of the time stamp management device.

  The monitoring condition setting unit 21 sets various monitoring conditions when the folder monitoring unit 22 performs folder monitoring. For example, the monitoring condition setting unit 21 sets a monitoring folder as a storage destination of the management target file 31 targeted for time stamp management, a completion folder as a storage destination of the management target file 31 whose monitoring has been completed, and a new monitoring condition. An attached folder as a storage destination of the management target file 31 to which the time stamp token 33 is attached, an output folder as a storage destination of the token file of the time stamp token 33 extracted from the management target file 31, and timestamp management (time stamp token 33 An error folder as a storage destination of the management target file 31 in which an error is detected can be specified at the time of extraction and addition of FIG. 5 shows a transition in which the management object file 31 is stored in each folder. The monitoring condition setting unit 21 uses any storage area that can be used by the terminal device 6 such as the storage unit 12 of the terminal device 6 or another device connected to the input / output unit 16 as these folders. You may

  The monitoring condition setting unit 21 may set different folders as the monitored folder, the completed folder, the output folder, the added folder, and the error folder, and may output an error when the same folder is designated. The management target file 31 is identified as another electronic file by being stored in the monitoring folder, the completion folder, the grant folder, or the error folder, and the token file is identified as another electronic file by being stored in the output folder. Ru.

  The monitoring condition setting unit 21 selects, as a post-processing mode related to the method of post-processing of the management target file 31 for which monitoring has been completed, either the move mode for moving to the complete folder or the attached folder or the delete mode to delete. Can.

  In addition, the monitoring condition setting unit 21 generates a token file with the same name as an overlapping mode as a duplicate processing mode related to the method of processing when there is an existing file with the same name at the time of generation of the token file, and It is possible to select one of the error modes in which the corresponding managed object file 31 is moved to the error folder without generating a token file.

  Furthermore, the monitoring condition setting unit 21 sets the time stamp token 33 as the giving mode related to the method of giving the time stamp token 33 when the time stamp token 33 can be extracted from the management target file 31; The time stamp token 33 can be added to the normal grant mode.

  The monitoring condition setting unit 21 can set one or more (for example, 10) different monitoring patterns for the combination of each folder and each mode described above. Further, the monitoring condition setting unit 21 can set a monitoring execution flag as to whether or not to perform monitoring for each monitoring pattern. The monitoring condition setting unit 21 may set different monitoring folders for each monitoring pattern, and output an error when the same monitoring folder is specified among the monitoring patterns. Further, the monitoring condition setting unit 21 may set a different folder for each monitoring pattern or may set the same folder among monitoring patterns for the complete folder, the addition folder, the output folder, and the error folder.

  In addition, the monitoring condition setting unit 21 monitors the monitoring folder at monitoring intervals (time) or monitoring status (for example, stopped, monitoring, time stamp extraction, time stamp attached, etc.) common to each monitoring pattern. You can set the status confirmation interval (hour) to confirm the. The monitoring interval is an interval from when the last file of the monitoring folder of all monitoring patterns is processed to when the next monitoring is started.

  Furthermore, the monitoring condition setting unit 21 can select whether to record the processing result of time stamp management in a log in common to each monitoring pattern. Note that the monitoring condition setting unit 21 is a log folder that is an output destination of the recorded log file (for example, a text file in which the extraction result of the time stamp token 33 for each management target file 31, the addition result, the error status, etc. is written). Can be set.

  The folder monitoring unit 22 monitors the monitored folder in accordance with each monitoring condition set by the monitoring condition setting unit 21. Specifically, for the monitoring pattern in which the monitoring execution flag is turned on, the folder monitoring unit 22 monitors the monitoring folder at each monitoring interval, and detects the management target file 31 existing in the monitoring folder.

  The management target file determination unit 23 analyzes the management target file 31 detected by the folder monitoring unit 22 and determines whether the time stamp token 33 has already been added to the management target file 31.

  The TST assigning unit 24 newly assigns a time stamp token 33 to the management target file 31 determined to be the addition target among the management target files 31 detected by the folder monitoring unit 22. The management target file 31 to be assigned is determined based on the determination result of the management target file determination unit 23 and the assignment mode set by the monitoring condition setting unit 21. For example, if the management target file 31 to which the time stamp token 33 is not attached is determined to be an addition target and the management target file 31 to which the time stamp token 33 is attached is the addition mode is the normal addition mode, It is determined to be the grant target.

  Specifically, the TST giving unit 24 calculates the hash value 34 based on the electronic data 32 of the management target file 31 and issues a request for issuing the hash value 34 and the time stamp token 33 to the communication unit 13 and the network 7. It is transmitted to the TST issuing server 2 via Then, the TST assigning unit 24 receives the time stamp token 33 corresponding to the issue request from the TST issuing server 2 via the network 7 and the communication unit 13 and newly assigns it to the management target file 31.

  The original management target file 31 before the time stamp token 33 is provided by the TST giving unit 24 is moved from the monitoring folder to the completion folder and stored, and the management target file 31 having the time stamp token 33 newly given is the original Instead of the file 31 to be managed, the file is stored in the monitoring folder. Therefore, only the management object file 31 to which the time stamp token 33 is attached is stored in the monitoring folder after the addition processing by the TST attachment unit 24. Also, the management target file 31 when an error occurs in the assignment processing by the TST assignment unit 24 is moved from the monitoring folder to the error folder and stored.

  The addition process by the TST application unit 24 may be performed at the timing when the judgment process by the management object file judgment unit 23 is completed for each management object file 31, or the judgment process for each monitoring pattern, that is, for each monitoring folder. May be performed at the completion timing, or may be performed at the completion timing of the determination processing of all the monitoring patterns, that is, all the monitoring folders.

  The TST extraction unit 25 extracts the time stamp token 33 from the management target file 31 stored in the monitoring folder. With respect to the management target file 31 after the TST extraction unit 25 extracts the time stamp token 33, the management target file 31 for which the addition processing has not been performed is moved from the monitoring folder to the completion folder and stored. The file 31 is moved from the monitoring folder to the grant folder and stored. Further, the management target file 31 in the case where an error occurs in the extraction processing by the TST extraction unit 25 (for example, when the time stamp token 33 is not assigned) is moved from the monitoring folder to the error folder and stored.

  When the extraction processing by the TST extraction unit 25 is performed for each management target file 31, the determination processing by the management target file determination unit 23 is performed for the management target file 31 for which the TST attachment unit 24 has not performed the addition processing. While the process may be performed at the completed timing, the management target file 31 to which the addition process has been performed may be performed at the time when the addition process is completed. Alternatively, the extraction process may be performed for each monitoring pattern, that is, at the timing when the determination process and the application process have been completed for each monitoring folder, or even when the determination process and the application process for all the monitoring patterns are completed. Good.

  The token file generation unit 26 generates a token file based on the time stamp token 33 extracted by the TST extraction unit 25 and stores the token file in the output folder. The token file is configured to include, for example, a timestamp token 33.

  The generation process by the token file generation unit 26 may be performed at the timing when the extraction process by the TST extraction unit 25 is completed for each management target file 31, or the extraction process is performed for each monitoring pattern, that is, for each monitoring folder. It may be performed at the completed timing, or may be performed at the completed extraction processing of all the monitoring patterns.

  The log recording unit 27 records the processing result of time stamp management in a log file according to the monitoring condition set by the monitoring condition setting unit 21 and stores the result in the set log folder. The log recording unit 27 may record a log for each process performed by the TST assignment unit 24, the TST extraction unit 25, and the token file generation unit 26 for each management target file 31.

  The display control unit 28 controls each unit of the terminal device 6 to display an execution screen of each program such as a program (time stamp management program) that causes a computer to function as a time stamp management device.

  For example, when the time stamp management program is executed on the terminal device 6, the display control unit 28 causes the display unit 15 to display the main screen 50 (see FIGS. 6 and 7). The main screen 50 displays a monitoring status (for example, stopping, monitoring, extracting a time stamp, applying a time stamp, etc.), a monitoring start time, and a monitoring end time. Further, the main screen 50 may include a monitoring start button 51, a monitoring stop button 52, and an environment setting button 53, and may display items having the same function as these buttons on the menu bar. The monitoring is started in response to the operation of the monitoring start button 51, and the monitoring is stopped in response to the operation of the monitoring stop button 52. For example, FIG. 6 shows the main screen 50 when the monitoring status is stopped, and FIG. 7 shows the main screen 50 when the monitoring status is monitoring.

  Further, the display control unit 28 causes the display unit 15 to display the environment setting screen 60 (see FIG. 8) in response to the operation of the environment setting button 53 of the main screen 50. A monitoring setting tab 61 for setting a monitoring condition and an extraction setting tab 62 for setting an extraction condition are displayed on the environment setting screen 60 in a switchable manner. In the monitoring setting tab 61, a monitoring pattern tab 63 for setting a monitoring condition for each of one or more monitoring patterns is displayed so as to be switchable, that is, for input operation of setting items displayed on each monitoring pattern tab 63. Accordingly, monitoring conditions of each monitoring pattern can be set.

  For example, in the monitoring pattern tab 63, a monitoring execution setting unit 64 is displayed by a check box or the like in order to set the above-described monitoring execution flag as a monitoring condition of the corresponding monitoring pattern. Also, in the monitoring pattern tab 63, the monitoring folder specification unit 65 is completed by the start button of the input box or folder selection dialog, etc., in order to specify the monitoring folder, completion folder, grant folder, output folder and error folder described above. Folder designation unit 66, output folder designation unit 67, granted folder designation unit 68, and error folder designation unit 69 are displayed. Furthermore, in the monitoring pattern tab 63, the post-processing mode setting unit 70, the overlapping processing mode setting unit 71, and the addition are provided by a check box, an option button or the like in order to set the above-described post-processing mode The mode setting unit 72 is displayed respectively.

  Further, on the monitoring setting tab 61, a monitoring interval setting unit 73 and a condition confirmation interval setting unit 74 are displayed in order to set the above-mentioned monitoring interval and the condition confirmation interval in common with each monitoring pattern. Furthermore, on the monitoring setting tab 61, the log execution setting unit 75 is displayed to set whether or not the above-described log is to be recorded, and the log folder designation unit 76 is displayed to specify the above-described log folder. .

  The token file deposit unit 29 deposits the token file stored in the above-described output folder into the TST storage server 5 of the time stamp storage organization. Specifically, the token file deposit unit 29 transmits the token file to be deposited and its storage request to the TST storage server 5 via the communication unit 13 and the network 7. The token file storage unit 29 may specify a token file to be stored from among the token files stored in each output folder, or is stored in each output folder by specifying each output folder. All token files may be subject to deposit, or all token files stored in all output folders may be subject to deposit without specifying an output folder.

  The token file depositing unit 29 transmits (downloads) the token file stored in the TST storage server 5 or a copy thereof to the terminal device 6 via the network 7 and the communication unit 13. You can also send a request to send (download) a token file.

  Next, time stamp management by the terminal device 6 as the time stamp management apparatus of the present embodiment, that is, the operation of the time stamp management program will be described with reference to FIG.

  When the time stamp management program is executed in the terminal device 6, the main screen 50 is displayed on the display unit 15. In response to the operation of the monitoring start button 51 of the main screen 50, the time stamp management program starts monitoring the management target file 31 in the monitoring folder according to the monitoring condition (step S1). The monitoring conditions are already set according to the convenience of the user. Also, although one or more monitoring patterns are managed in order, one monitoring pattern will be described below, that is, it will be described without specifying the monitoring pattern. While the monitoring status of the time stamp management program is being monitored, the folder monitoring unit 22 monitors, at each monitoring interval, whether or not the management target file 31 exists in the monitoring folder.

  When the management target file 31 is not stored in the monitoring folder and the management target file 31 in the monitoring folder is not detected (step S2: NO), the monitoring process by the folder monitoring unit 22 is repeated. When the monitoring status of the time stamp management program is stopped by the operation of the monitoring stop button 52 of the main screen 50 (step S3: YES), the monitoring process by the folder monitoring unit 22 is ended.

  On the other hand, when the user stores the management target file 31 in the monitoring folder, the folder monitoring unit 22 detects the management target file 31 in the monitoring folder (step S2: YES).

  At this time, the management target file determination unit 23 determines whether the time stamp token 33 has already been assigned to each of the detected management target files 31 (step S4).

  As a result of the determination by the management target file determination unit 23, the management target file 31 to which the time stamp token 33 is not attached is determined as an addition target (step S4: NO), and the addition process by the TST giving unit 24 (step S6) Migrate to

  Further, the management object file 31 to which the time stamp token 33 is attached is determined to be an attachment target when the monitoring condition assignment mode is the normal assignment mode (step S5: YES) (step S4: YES). Then, the process proceeds to the application process (step S6) by the TST application unit 24.

  On the other hand, if the management condition file 31 to which the time stamp token 33 is assigned is "YES" at step S4 and the grant mode of the monitoring condition is the non-grant mode (NO at step S5), it is determined that it is not a grant target. Then, the process proceeds to the extraction process (step S7) by the TST extraction unit 25.

  The assignment process (step S5) by the TST assignment unit 24 will be described with reference to the flowchart of FIG. Regardless of whether the time stamp token 33 is assigned to the original management target file 31, the management target file 31 to be granted is stored in the monitoring folder. The TST giving unit 24 sequentially takes out the management target files 31 to be provided from the monitoring folder and performs the giving process.

  First, the TST assignment unit 24 calculates the hash value 34 of the electronic data 32 of the management target file 31 to be assigned (step S11), and transmits the issue request of the hash value 34 and the time stamp token 33 to the TST issuance server 2 (Step S12). As described above, the TST issuance server 2 generates the time stamp token 33 in response to the issuance request and transmits it to the terminal device 6 (step S13).

  When receiving the time stamp token 33 from the TST issuing server 2 (step S14), the TST giving unit 24 newly gives it to the duplicate file of the management target file 31 to be provided and generates a new management target file 31 (step S14) Step S15). The original management target file 31 is moved from the monitoring folder to the completion folder, and the new management target file 31 to which the time stamp token 33 is added is stored in the monitoring folder.

  For example, when the time stamp token 33 is not assigned to the management target file 31 to be assigned, the time stamp token 33 generated this time is the electronic data of the management target file 31 as the first time stamp token 33. It is granted following 32. In addition, when one time stamp token 33 (that is, the first time stamp token 33) is already assigned to the management target file 31 to be provided, the time stamp token 33 generated this time is the second time. The timestamp token 33 is given subsequent to the first timestamp token 33 of the management target file 31.

  The extraction process (step S7) by the TST extraction unit 25 will be described. Regardless of whether the time stamp token 33 is assigned to the original management target file 31, all management target files 31 stored in the monitoring folder are extraction targets. The TST extraction unit 25 sequentially extracts the management target file 31 to be extracted from the monitoring folder, extracts the time stamp token 33, and temporarily stores it in the storage unit 12. In addition, with respect to the management target file 31 after extraction processing, the management target file 31 for which the addition processing has not been performed is moved from the monitoring folder to the completion folder, and the management target file 31 for which the addition processing is performed is moved from the monitoring folder to the addition folder Be done.

  Then, based on the time stamp token 33 extracted by the TST extraction unit 25, the token file generation unit 26 generates a token file (step S8), and stores the token file in the output folder. The time stamp token 33 temporarily stored in the storage unit 12 is deleted.

  The user can deposit the token file stored in the output folder into the TST storage server 5 by the token file deposition unit 29 of the terminal device 6. The TST storage server 5 stores the deposited token file.

  As described above, according to the present embodiment, the terminal device 6 as the time stamp management device monitors the monitoring folder that is the storage destination of the management target file 31 that is the target of the time stamp management, and from this monitoring folder When the folder monitoring unit (monitoring unit) 22 for detecting the management target file and the management target file 31 are detected from the monitoring folder by the folder monitoring unit 22, TST extraction for extracting the time stamp token 33 from the management target file 31 A token file generation unit 26 (generation unit) that generates a token file of a time stamp based on the time stamp token 33 extracted by the TST extraction unit 25 and the TST extraction unit 25 and stores the token file in a predetermined output folder; Is equipped.

  With such a configuration, in the time stamp management apparatus according to the present embodiment, the user can store an appropriate token file that can be deposited on the TST storage server 5 by a simple operation of storing the management target file 31 in the monitoring folder. It can be generated automatically. In particular, the convenience of extracting the time stamp token 33 and managing the token file can be improved for a large number of managed files 31. In addition, since the generated token file is automatically stored in the output folder, the user can easily and properly deposit the token file on the TST storage server 5 without making an error in the storage location of the token file. And the time stamp storage service can be easily used. Furthermore, the user can manage the management target file 31 easily and properly due to the easy and appropriate management of the token file.

  Further, in the present embodiment, the terminal device 6 as the time stamp management device extracts the management target file 31 detected from the monitoring folder by the folder monitoring unit 22 before extraction of the time stamp token 33 by the TST extraction unit 25. , And a TST giving unit (the giving unit) 24 for giving the time stamp token 33.

  With such a configuration, the time stamp management apparatus can automatically assign an appropriate time stamp token 33 to the management target file 31 to be subjected to time stamp management, and further, the time stamp automatically assigned. A token file of tokens 33 can be generated automatically. Therefore, the existence proof and the integrity proof can be automatically made possible for the management target file 31 without burdening the user. In particular, it is possible to improve the assignment and extraction of the time stamp token 33 with respect to a large number of managed files 31 and further improve the convenience of managing token files.

  Furthermore, in the present embodiment, in the terminal device 6 as the time stamp management device, the TST giving unit 24 determines that the time stamp token 33 is not given among the management target files 31 detected from the folder monitoring unit 22. A timestamp token 33 is assigned to the managed file 31 that has been sent.

  With such a configuration, it is possible to automatically determine the management target file 31 to which the time stamp token 33 is to be added without giving a burden to the user, and to automatically add the appropriate time stamp token 33. . It is possible to minimize the process of giving the time stamp token 33.

  In the above-described embodiment, the TST extraction unit 25 extracts the time stamp token 33 for the management target file 31 to which the TST giving unit 24 adds the time stamp token 33, and the token file generation unit 26 extracts the time stamp token 33. Although the example of generating the token file based on the timestamp token 33 has been described, the generation process of the token file according to the present invention is not limited to this example. For example, in another embodiment, when the TST adding unit 24 adds the time stamp token 33 to the management target file 31, the time stamp token 33 is temporarily stored in the storage unit 12, and the TST extracting unit 25 The extraction process may be omitted, and the token file generation unit 26 may generate a token file based on the time stamp token 33 temporarily stored in the storage unit 12. This makes it possible to minimize the extraction process of the time stamp token 33.

  In the embodiment described above, when the time stamp token 33 is extracted by the TST extraction unit 25 after the TST addition unit 24 adds the time stamp token 33 to the management object file 31, the original management object file 31 is completed. Although the example which stores the management object file 31 after provision in a provision folder while storing in a folder was demonstrated, the folder which stores each management object file 31 by this invention is not limited to this example. For example, in another embodiment, the original management target file 31 may be stored in the pre-assignment folder other than the above, and the management target file 31 after the grant may be stored in the completion folder. As a result, regardless of whether the TST giving unit 24 newly gives the time stamp token 33, all the management target files 31 corresponding to the token file can be stored in the completion folder, which is convenient for the user. be able to.

  Further, the present invention can be suitably modified without departing from the scope of the invention or the spirit of the invention which can be read from the claims and the specification as a whole, and a program and a time stamp management device with such changes are also disclosed. Included in the

  The present invention can be used to manage and manage computerized intellectual property documents, tax documents, medical documents, etc., and store time stamp tokens added to electronic files in a time stamp storage facility. , And can be used as a means to retrieve a timestamp token from an electronic file.

1 Time stamp system 2 Time stamp token issuing server (TST issuing server)
3 Time delivery server 4 Electronic authentication management server 5 Time stamp token storage server (TST storage server)
6 terminal device 7 network 11 arithmetic processing unit 12 storage unit 13 communication unit 14 operation unit 15 display unit 16 input / output unit 21 monitoring condition setting unit 22 folder monitoring unit (monitoring unit)
23 Management target file judgment unit (judgment unit)
24 Time stamp token giving unit (TST giving unit, giving unit)
25 Time stamp token extraction unit (TST extraction unit, extraction unit)
26 Token file generator (generator)
27 log recording unit 28 display control unit 29 token file deposit unit 31 managed file 32 electronic data 33 time stamp token 34 hash value 35 time information 36 electronic signature 37 electronic certificate 41 attached file 42 electronic data 43 time stamp token

Claims (6)

A monitoring unit that monitors a monitored folder that is a storage destination of a managed file targeted for time stamp management and detects the managed file from the monitored folder;
An extraction unit that extracts a time stamp token from the management target file when the management target detects a management target file from the monitoring folder;
A generation unit that generates a token file of a timestamp based on the timestamp token extracted by the extraction unit and stores the token file in a predetermined output folder;
A program for causing a computer to function as a time stamp management device comprising:   A computer functions as a time stamp management apparatus further comprising an adding unit for adding a time stamp token to the management target file detected from the monitoring folder by the monitoring unit before the extraction unit extracts the time stamp token The program according to claim 1, characterized in that   Among the files to be managed that are detected from the monitoring folder, the giving unit gives a time stamp token to the file to be managed that is determined not to be given a time stamp token. The program described in. A monitoring unit that monitors a monitored folder that is a storage destination of a managed file targeted for time stamp management and detects the managed file from the monitored folder;
An extraction unit that extracts a time stamp token from the management target file when the management target detects a management target file from the monitoring folder;
A time stamp management apparatus comprising: a generation unit that generates a token file of a time stamp based on the time stamp token extracted by the extraction unit and stores the token file in a predetermined output folder.   5. The apparatus according to claim 4, further comprising: an adding unit that adds a time stamp token to the management target file detected from the monitoring folder by the monitoring unit before the extraction unit extracts the time stamp token. A time stamp management device as described.   Among the files to be managed that are detected from the monitoring folder, the giving unit gives a time stamp token to the file to be managed that is determined not to be given a time stamp token. The time stamp management device described in.

Images