JP4674124B2 - Electronic document image formation authentication system and method, electronic document image formation authentication program, and recording medium - Google Patents

Description

The present invention relates to an electronic document image forming apparatus and method, and more particularly to an electronic document image forming authentication system for providing an electronic signature and an electronic time stamp for proving the authenticity of an electronic document image when the electronic document image is formed. And an electronic document image formation authentication program and a recording medium .

  In recent years, in offices and the like, documents are stored as electronic data using electronic document image forming apparatuses such as scanners instead of paper documents, reducing the cost of storing paper documents, improving availability by converting to electronic data, etc. It is illustrated. In response to the decline in the price of electronic data storage devices and the general enforcement of the “e-Document Law”, electronic preservation of official documents has become legally accepted. It is expected to accelerate further.

  A problem in storing document / image data using such electronic data is the authenticity of the electronic data. Electronic data can be easily tampered. In particular, in the case of an official document, it is important to confirm the authenticity of “when”, “who” the data was created, and “to whom” the data was approved.

  As conventional techniques for assuring the authenticity of electronic data, techniques of “electronic signature” and “electronic time stamp” are known. Both of these conventional technologies apply PKI (Public Key Cryptography), and the data that is the target or the hash created using a secret key based on the data and time is used as the electronic stamp. And tampering is detected by examining the hash using the public key during data verification. In order to use this technology, it is necessary to manage the issuance of an electronic certificate that certifies the private key / public key pair and the owner of the key, which is the foundation of PKI reliability.

As a conventional technique related to electronic document generation in which an electronic certificate is assigned to an electronic document and the electronic document is stored, a technique described in, for example, Patent Document 1 is known.
JP 2003-296742 A

  However, in general, an electronic certificate has an expiration date, and verification with an expired certificate is not reliable, and it is possible to renew a certificate or create a new certificate. is necessary. This is also true when generating an electronic document image. For example, when an electronic document data that has been stored and managed for a certain period of time is signed in an official document or the like, it expires or is valid. Using a key pair that is certified by a certificate that has just expired is likely to cause problems during verification in the next step.

The present invention has been made to solve the above problem, the technical problem, an electronic signature for proving the authenticity of electronic document image forming time Niso electronic document, attaching an electronic time stamp An electronic document image forming authentication system that can confirm the validity of a certificate without the user being aware of it, and can prevent the document from being guaranteed when the electronic document image needs to be verified, and A method, an electronic document image formation authentication program, and a recording medium are provided.

The first means of the present invention for solving the above technical problem is to form an electronic document image, and to add an electronic signature for proving authenticity to the electronic document image, with user owns an IC card that stores constant data where necessary to perform the digital signature, the is connected to an electronic document image forming apparatus, the mounted one or et before Symbol of the IC card an IC card reader to read the predetermined data, is connected to the electronic document image forming apparatus via a network, are formed in the electronic document image forming apparatus, the electronic certificate obtained from the IC card is attached And an authentication server that stores and holds the electronic document image and performs authentication, wherein the electronic document image forming apparatus includes the IC card. The authentication requests to the authentication server via the network based on the previous SL predetermined data from the IC card read in over da, the authentication result is imageable if Shimese authentication is response from the authentication server in the over the network as well as accumulation and storage in the electronic document based on data in the electronic certificate form to its own device the electronic document image by applying a the number of the formed electronic document image as the accounting information becomes It has a function of logging out when an instruction is given to the user to remove the IC card from the IC card reader after transmission to the authentication server. Second means of the present invention is an electronic document imaging authentication system of the first means, the predetermined data, User chromatography The ID, and characterized in that it is a password. According to a third means of the present invention, in the electronic document image formation authentication system of the first means, the electronic document source data is scanner data scanned by a scanner installed in the electronic document image forming apparatus. It is characterized by. According to a fourth means of the present invention, in the electronic document image formation authentication system of the first means, the authentication server integrates the charging information for each user and uses the result of the integration for charging. Features.

According to a fifth aspect of the present invention, when the electronic document image forming apparatus for forming an electronic document image gives an electronic signature for proving authenticity to the electronic document image, the electronic document image forming apparatus is connected to the electronic document image forming apparatus. and an IC card reader and authentication request to the authentication server via the network based on the electronic signature read from the IC card which stores a constant data where necessary to perform the equivalent the predetermined data and answered electrons the electronic document in the image forming apparatus by applying the obtained electronic certificate from the IC card to form the electronic document image to be accumulated and held in the authentication server via the network when the authentication result indicates authentication A document image formation authentication method, comprising: electronic document source data as an image formable state on the electronic document image forming apparatus side when the returned authentication result indicates authentication A first step of granting the electronic certificate to form the electronic document image and storing and storing the electronic document image in the apparatus; and the electronic document image forming apparatus side determines the number of the formed electronic document images as billing information A second step of transmitting to the authentication server via the network, and a third step of logging out when the electronic document image forming apparatus instructs the user to remove the IC card from the IC card reader. These steps are included.

Further, the sixth means of the present invention connects to the electronic document image forming apparatus when the electronic document image forming apparatus for forming the electronic document image gives an electronic signature for proving authenticity to the electronic document image. and an IC card reader and authentication request to the authentication server via the network based on the electronic signature read from the IC card which stores a constant data where necessary to perform the equivalent the predetermined data and answered basic to the electronic document in the image forming apparatus by applying the obtained electronic certificate from the IC card to form the electronic document image to be accumulated and held in the authentication server via the network when the authentication result indicates authentication An electronic document image formation authentication program having function processing information and executed by the electronic document image forming apparatus, comprising: On the side, when the returned authentication result indicates authentication, the electronic certificate is attached to the electronic document original data as an image formable state, and the electronic document image is formed and stored and held in the first apparatus. On the electronic document image forming apparatus side, on the electronic document image forming apparatus side, a second step of transmitting the number of the formed electronic document images as accounting information to the authentication server via the network, and on the electronic document image forming apparatus side And a third step of logging out when an instruction is given to the user to remove the IC card from the IC card reader.

In addition , the electronic document image formation authentication recording medium of the seventh means of the present invention provides the information on the basic function processing in the electronic document image formation authentication program of the sixth means, and the first step to the first step. The information of step 3 is recorded so as to be readable by a computer.

According to the present invention, it is possible to check the validity of a certificate without the user's usual awareness, and it is possible to prevent the document from being guaranteed when the electronic document image needs to be verified.

Embodiments of an electronic document image formation authentication system and method, an electronic document image formation authentication program, and a recording medium according to the present invention will be described below in detail with reference to the drawings.

Figure 1 is a block diagram showing the schematic configuration of the implementation electronic document image forming device provided in engagement Ru electronic document imaging authentication system in the form of the present invention, FIG. 2 is operated at the time of the electronic document creation in an embodiment of the present invention It is a sequence chart explaining this. In FIG. 1, 101 is an apparatus control unit, 102 is an IC card reader, 103 is a clock information unit, 104 is an image forming unit, 105 is a data storage unit, and 106 is an operation panel.

As shown in FIG. 1, the above-described electronic document image forming apparatus reads the contents of an IC card having a CPU, an internal memory, etc., which controls the entire apparatus, and an IC card in which an electronic certificate is stored. An IC card reader 102, a clock information unit 103 that manages time information, a scanner that reads the content of a document using paper or the like, an image forming unit 104 that uses the read document information as electronic data, and the created electronic A data storage unit 105 capable of storing a large amount of information, such as a hard disk device for storing electronic document images as data, and an operation panel 106 used by a user to operate the electronic document image forming apparatus. Is done. As described above, the image forming unit 104 also includes a print mechanism that prints the electronic document image stored in the data storage unit 105 on paper or the like.

  Next, with reference to a sequence chart shown in FIG. 2, a normal operation at the time of document creation in the embodiment of the present invention will be described.

(1) When the user sets a paper document for which an electronic document image with an electronic signature is to be created is set in the scanner of the image forming unit 104, the apparatus control unit 101 detects the setting of the original and displays it on the display unit of the operation panel 106. A request for user authentication is made (sequences 201 and 202).

(2) The user presents or designates a certificate after receiving user authentication and acquiring the right to use the apparatus by inputting a password from the operation panel 106 or the like. The certificate may be specified in advance in the apparatus, for example, in a non-volatile memory in the apparatus control unit 101, or the certificate stored in an external device such as an IC card is sent from the IC card reader 102. It may be read and input. In addition, if secure communication is possible, it is also possible to obtain from a server on the network (sequences 203 and 204).

(3) The device control unit 101 checks the expiration date of the presented certificate based on the clock information in the clock information unit 103. As the clock information to be used, a real-time clock in the internal clock information unit 103 may be used, or external reliable clock information such as an NTP server on the network may be used (sequence 205).

(4) If the apparatus control unit 101 confirms that there is no problem in the creation of the electronic document created by the certificate expiration date, it notifies the user of that (sequence 206).

(5) When the user instructs creation of an electronic document image, the apparatus control unit 101 instructs the image forming unit 104 to make the document an electronic document, and adds a signature to the created electronic document (sequence 207, 208).

(6) The apparatus control unit 101 accumulates the electronic document with the signature created by the image forming unit 104 in the data accumulation unit 105, and then notifies the user that the electronic document has been created and accumulated ( Sequence 209, 210).

  In the foregoing, a more reliable electronic time stamp service provider service can be used to attach accurate clock information to the signature. The electronic document can be stored in the data storage unit 105 in the electronic document image forming apparatus as described above, or can be transmitted and stored in an external server or the like via a network.

Figure 3 is a block diagram illustrating a basic configuration of the engagement Ru electronic document imaging authentication system implementation embodiment of the present invention having a function for signing the electronic document image using an electronic certificate and key information in the IC card It is. 3, 301 is an electronic document image forming apparatus, 302 is a user authentication server, 303 is an IC card, 304 is a network, and other reference numerals are the same as those in FIG.

The electronic document image formation authentication system shown in FIG. 3 is an example of a system that uses an IC card to pass key information and a certificate to the electronic document image formation apparatus, and is the one described with reference to FIG. An electronic document image forming apparatus 301 having basically the same configuration and a user authentication server 302 are connected via a network 304, and an IC card reader 102 is connected to the electronic document image forming apparatus 301. The IC card 303 carried by the user, as the content of the data, PIN, user ID, password, electronic certificate, and key information is stored is a security code. In addition, the user authentication server 302 holds a table in which information on a large number of users including user IDs and their passwords is stored. This table can also store the number of electronic documents as billing information for electronic documents created by the user.

Next, a flow of operation processing in the electronic document image formation authentication system will be described with reference to FIG.

  A user who wants to create an electronic document image to which an electronic signature is attached first attaches the IC card 303 possessed by the user to the IC card reader 102. When the electronic document image forming apparatus 301 detects that the IC card 303 is attached to the IC card reader 102, the electronic document image forming apparatus 301 displays a request for inputting the PIN to the user. When the user inputs a PIN, the electronic document image forming apparatus 301 notifies the IC card 303 of the input PIN information via the IC card reader 102. The IC card 303 compares the PIN information in the IC card 303 with the notified PIN information, and if a match is obtained, the user ID and password information in the IC card 303 are electronically transmitted via the IC card reader 102. It is transmitted to the document image forming apparatus 301.

  The electronic document image forming apparatus 301 transmits the user ID and password sent from the IC card 303 to the user authentication server 302 via the network 304 and requests authentication. The user authentication server 302 checks the user information in its own server and returns the authentication result to the electronic document image forming apparatus 301. If the authentication result from the user authentication server 302 is OK, the electronic document image forming apparatus 301 can use the apparatus for creating an electronic document image with an electronic signature and notifies the user to that effect. To do.

  Upon receiving this notification, the user sets a paper document for which an electronic document image with an electronic signature is to be created on the scanner, sets scan conditions and the like, and executes scanning. The electronic document image forming apparatus 301 generates an electronic document image obtained by adding the electronic certificate obtained from the IC card 303 to the scanned data, and stores the electronic document image in the data storage unit 105. The operation of generating the electronic document image here is performed in the same manner as the sequences 205 to 210 described with reference to FIG.

  Thereafter, the electronic document image forming apparatus 301 transmits the number of created electronic document images to the user authentication server 302 as billing information, stores it in the table of the user authentication server 302, and allows the user from the IC card reader 102 to the IC card. The user logs out 303 and disables use of the electronic document image forming apparatus 301 for generating an electronic document image with an electronic signature.

In the above description, the number of electronic document images stored in the table of the user authentication server 302 is accumulated for each user and used for billing at a later date. The electronic document image forming apparatus 301 may be configured in the same manner as that shown in FIG. 1, or may be configured in a multi-function peripheral having a plurality of functions such as a scanner, a copy, a printer, and a fax machine .

  FIG. 4 is a sequence chart for explaining processing in which the administrator sets a policy for the validity period of a certificate in the electronic document image forming apparatus 301, and a sequence for explaining processing when the validity period is NG in the operation for creating the electronic document. First, a description will be given of a process in which an administrator sets a policy for a certificate expiration date. It is assumed that the electronic document image forming apparatus in the example described here has the same configuration as that described with reference to FIG.

(1) The device administrator logs in to the electronic document image forming apparatus. This login may be to attach an IC card held by the administrator to the IC card reader (sequence 401).

(2) The apparatus control unit of the electronic document image forming apparatus requests the user who is logging in, here the administrator, to input authentication information by detecting the insertion of the IC card into the IC card reader (sequence 402). .

(3) When the administrator inputs authentication information from the operation panel, the apparatus control unit confirms this, and if the authentication is OK, login by the administrator is completed (sequence 403).

(4) The administrator then sets a policy for the certificate expiration date by using a tool such as an operation panel or a Web browser via a network. Details of the policy to be set will be described later (sequence 404).

  Next, with reference to the latter part of the sequence chart shown in FIG. 4, a process when the validity period of the certificate is NG in the operation when creating the electronic document by the user will be described.

(1) When the user sets a paper document for which an electronic document image with an electronic signature is to be created is set in the scanner of the image forming unit 104, the apparatus control unit 101 detects the setting of the original and displays it on the display unit of the operation panel 106. A request for user authentication is made (sequences 411 and 412).

(2) The user presents or designates a certificate after receiving user authentication and acquiring the right to use the apparatus by inputting a password from the operation panel 106 or the like. The certificate may be specified in advance in the apparatus, for example, in a non-volatile memory in the apparatus control unit 101, or the certificate stored in an external device such as an IC card is sent from the IC card reader 102. It may be read and input. In addition, if secure communication is possible, it is also possible to obtain from a server on the network (sequences 413 and 414).

(3) The device control unit 101 checks the expiration date of the presented certificate based on the clock information in the clock information unit 103. As the clock information to be used, a real-time clock in the internal clock information unit 103 may be used, or external reliable clock information such as an NTP server on the network may be used (sequence 415).

(4) In this description, since the validity period of the certificate is NG, the device control unit 101 notifies the user that the electronic document cannot be created according to the check result, and performs processing. The process ends (sequence 416).

  FIG. 5 is a view showing a display example on the operation panel 106 for notifying that the validity period of the certificate is NG.

The certificate expiration date check described above is performed according to the certificate expiration policy set by the administrator, and the electronic document image forming apparatus generates an electronic document image using the device. Check whether the expiration date of the electronic certificate meets the policy, tell the user that the electronic document image cannot be created if there is a problem, and extend the expiration date or Encourage publication. The notification to the user can be performed by displaying on the operation panel 106 as in the example shown in FIG. In the example shown in FIG. 5A, “Certificate validity verification error has occurred” and “Certificate status: out of validity period” are displayed. This notification to the user can be performed by E-mail instead of being displayed on the operation panel 106. In addition, the administrator can check the error history and the like using a web browser or the like. A display example of history confirmation and the like is shown in FIG. 5B, and the administrator can confirm the history of the user usage time, the certificate validity verification result, and the like.

  FIG. 6 is a diagram illustrating an example of a policy to be set, and FIG. 7 is a diagram illustrating an example of a setting screen. Next, these will be described.

  As shown in FIG. 6, the policy set by the administrator is composed of setting item 1, setting item 2 and purpose. As setting item 1, “validity period check” for designating whether or not to check the validity period. As the policy of setting item 1, “policy title” of setting item 2 indicating the title of each setting policy, and “policy title” of setting item 2 that specifies not to accept a signature with a certificate key that does not satisfy the required validity period. There is “minimum required expiration date” and “image creation permission” of setting item 2 for designating whether or not scanning is permitted when a certificate having a problem with the expiration date is presented. Also, as a warning notification method of setting item 1, “notification method” of setting item 2 for designating notification by panel or e-mail, and “notification method” of setting item 2 for designating certificate authority information (address etc.) for issuing a certificate. "CA station information", and further, as setting item 1, "certificate acquisition method" for designating IC card, inside of device, via network, "certificate creation" for designating creation of certificate inside device, There is "Certificate Import" that specifies that an externally created certificate is imported into the device.

  The policy setting as described above is performed by the administrator by the processing described in the sequences 401 to 404 shown in FIG. 4. When the administrator logs in to the electronic document image forming apparatus, the operation panel 106 displays A setting screen as shown in FIG. 7 is displayed, and the administrator can use this display screen to set detailed information regarding the policy as described above. The setting of the expiration date check is not only performed as shown in FIG. 7 but also whether or not the processing is permitted when the remaining period of the expiration date is reduced. It can also be set. Further, setting of detailed information related to the policy can be performed using a tool such as a Web browser via a network, instead of using the operation panel 106.

  By making the detailed settings as described above, it is possible to apply a validity check rule suitable for the purpose of the document to be digitized. Also, by making the settings as described above, not only warning of certificate expiration, but also the creation of electronic document images with all electronic signatures is prohibited in the case of important electronic document image creation. be able to. Thus, it is possible to prevent a signed document from being created with a key pair of a certificate that has expired or is about to expire, and to prevent rework during verification in the next step.

  The above-described processing by the sequence of the electronic document image forming apparatus in the embodiment of the present invention is configured by a program and can be executed by a CPU provided in the apparatus. These programs are FD, CDROM, DVD, and the like. It can be provided by being stored in a recording medium, and can be provided as digital information via a network.

  According to the above-described embodiment of the present invention, the validity of the certificate is checked, and when there is a problem, the user is notified of the problem. Confirmation can be performed, and creation of an electronic document image with an expired signature can be suppressed.

  In addition, by setting detailed policies for checking the expiration date, it is possible to flexibly change the check criteria for signing important documents and documents that are not. In addition, by not generating any image with the certificate key that has a problem with the expiration date, it is possible to prevent the creation of a document that becomes an invalid and invalid document when verifying the signature in the next process. Rework can be prevented.

It is a block diagram showing the schematic configuration of an electronic document image forming device provided in engagement Ru electronic document imaging authentication system implementation embodiment of the present invention. It is a sequence chart explaining operation at the time of electronic document creation in an embodiment of the present invention. It is a block diagram illustrating a basic configuration of the engagement Ru electronic document imaging authentication system implementation embodiment of the present invention. 5 is a sequence chart for explaining processing for an administrator to set a policy for a certificate expiration date in the electronic document image forming apparatus, and a sequence chart for explaining processing when an expiration date is NG in an operation for creating an electronic document. It is a figure which shows the example of a display on the operation panel 106 which notifies that the expiration date of a certificate is NG. It is a figure explaining the example of the policy to set. It is a figure explaining the example of a setting screen.

Explanation of symbols

DESCRIPTION OF SYMBOLS 101 Device control part 102 IC card reader 103 Clock information part 104 Image forming part 105 Data storage part 106 Operation panel 301 Electronic document image forming apparatus 302 User authentication server 303 IC card 304 Network

Claims (7)

And forming an electronic document image, and an electronic document image forming apparatus for attaching an electronic signature for proving the authenticity in the electronic document image, the user owns, the constant place necessary to perform the digital signature an IC card which stores data, the which is connected to the electronic document an image forming apparatus, and an IC card reader to read the loaded one or al the previous SL predetermined data of the IC card, the electronic document images via network is connected to the forming apparatus, is formed in the electronic document image forming apparatus, an authentication server that performs the authentication accumulates and holds the electronic document image obtained electronic certificate is attached from the IC card, the An electronic document image formation authentication system comprising:
The electronic document image forming apparatus, the authentication requests to the authentication server via the network based on the previous SL predetermined data from the IC card read by the IC card reader, is the response from the authentication server authentication together with the results are accumulated and held in by applying the electronic certificate to the electronic document based on the data becomes available imaging if Shimese authentication form the electronic document images within the own device, an electronic document image, which is the form An electronic document having a function of logging out when the user is instructed to remove the IC card from the IC card reader after transmitting the number of copies as accounting information to the authentication server via the network Image formation authentication system. The electronic document imaging authentication system according to claim 1, wherein the predetermined data, User chromatography The ID, an electronic document imaging authentication system, which is a password.   2. The electronic document image formation authentication system according to claim 1, wherein the electronic document original data is scanner data scanned by a scanner installed in the electronic document image formation apparatus. .   2. The electronic document image formation authentication system according to claim 1, wherein the authentication server integrates the charging information for each user and uses the result of the integration for charging. When an electronic document image forming apparatus that forms an electronic document image gives an electronic signature for authenticating the electronic document image, an IC card reader connected to the electronic document image forming apparatus performs the electronic signature. the electronic document when authenticated requesting to the authentication server via a network based on those said predetermined data read from the IC card which stores a constant data where necessary, the response authentication result indicates authentication an electronic document imaging authentication method for accumulation and storage to form the electronic document image by applying the obtained electronic certificate from the IC card to the authentication server via the network the image forming apparatus,
The electronic document image forming apparatus forms the electronic document image by giving the electronic certificate to the electronic document original data as an image formable state when the authentication result returned indicates authentication, and forms the electronic document image A first step of accumulating and holding at
A second step of transmitting, on the electronic document image forming apparatus side, the number of the formed electronic document images as accounting information to the authentication server via the network;
And a third step of logging out when the electronic document image forming apparatus instructs the user to remove the IC card from the IC card reader. . When an electronic document image forming apparatus that forms an electronic document image gives an electronic signature for authenticating the electronic document image, an IC card reader connected to the electronic document image forming apparatus performs the electronic signature. the electronic document when authentication requests to the authentication server via the network on the basis of those said predetermined data read from the IC card which stores a constant data where necessary, the response authentication result indicates authentication together with the information of the basic functional processes of accumulating held in the authentication server via the network by applying the obtained electronic certificate form the electronic document image from the IC card in the image forming apparatus, the electronic document An electronic document image formation authentication program to be executed by an image forming apparatus,
The electronic document image forming apparatus forms the electronic document image by giving the electronic certificate to the electronic document original data as an image formable state when the authentication result returned indicates authentication, and forms the electronic document image A first step of accumulating and holding at
A second step of transmitting, on the electronic document image forming apparatus side, the number of the formed electronic document images as accounting information to the authentication server via the network;
An electronic document image having information about a third step of logging out when the electronic document image forming apparatus instructs the user to remove the IC card from the IC card reader. Formation authentication program.   7. An electronic document comprising the information on the basic function processing and the information on the first to third steps recorded in the electronic document image formation authentication program according to claim 6 so as to be readable by a computer. Recording medium for image formation authentication.

Images