JP4681471B2 - Electronic post system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To achieve an electronic post system for preventing any erroneous distribution from an enterprise. <P>SOLUTION: The electronic post system 10 is provided with an enterprise server 14 and an electronic post server 12. The enterprise server 12 is provided with a customer management DB42 for storing electronic post ID and an electronic post public key for every customer; a means 44 for encrypting an electronic distributed matter to the destination of the customer by using a user public key, and for adding the corresponding electronic post ID to this; and a means 46 for transmitting this to the electronic post server 12. The electronic post server 12 is provided with an electronic post storage part 30 in which the storage region of the electronic distributed matter is formed for every electronic post ID; an electronic post DB 34 for storing an electronic post secret key for every electronic post ID; and a means 36 for decrypting the electronic distributed matter received from an enterprise server by using the corresponding electronic post secret key, and for storing the encrypted electronic distributed matter in the pertinent region in an electronic post storage part 30 when the decryption is successful. <P>COPYRIGHT: (C)2007,JPO&amp;INPIT

Description

  The present invention relates to an electronic post system for each company or the like to distribute electronic documents to their customers or the like via a network.

In recent years, the use environment of the Internet has improved, and online banking and stock investment via the Internet have become commonplace. With regard to the delivery of various report documents resulting from these transactions, instead of conventional mail, e-mail and Increasing use of downloads from websites. This trend is expected to accelerate in the future due to the so-called “e-document law”.
Kabu.com Securities / Easy delivery / contract [Search January 26, 2006] Internet URL: http://www.kabu.com/riskmanagement/rakuraku.asp JP 2002-288373 A

In the case of the electronic document delivery system described in Non-Patent Document 1 and Patent Document 1 above, it is assumed that a specific securities company issues an electronic document individually to its customers. It is necessary to receive an electronic document according to a separate procedure for each company with a transaction, and the management becomes complicated.
In addition, there is a problem that even a company cannot employ a small and medium-sized enterprise because a huge investment is required to construct and maintain the system on its own.

For this reason, the advent of an electronic post system having a mechanism for storing electronic documents from a large number of member companies and storing them in electronic posts assigned to each customer is awaited.
Once such an electronic post system as a social infrastructure is established, each company can deliver electronic documents to its customers by paying a reasonable membership fee. It is possible to save the postage and the labor cost of the shipping department without incurring costs. Further, the customer side can access electronic documents issued by each company by accessing his / her own electronic post, and has an advantage that the management becomes easy.

However, when realizing the above-mentioned company-saddle-type electronic post system, it is essential to prepare a mechanism for reducing the risk of erroneous delivery as much as possible.
In other words, since the electronic documents sent from each company contain a lot of valuable personal information of customers, if the important documents are misdelivered to another person's electronic post, the trust of the company will be lost. Of course, the trust in the electronic post system itself will fluctuate, causing damage that cannot be recovered on the customer side.
Of course, such a risk can also occur in a conventional electronic delivery system for each individual company, but in the case of each company's shared electronic post system, there is a concern that the situation will become more serious.

  The present invention has been devised to solve the above-mentioned problems associated with electronic post systems as social infrastructure, and aims to realize an electronic post system capable of preventing erroneous delivery from each participating company as much as possible. It is said.

In order to achieve the above object, an electronic post system according to claim 1 is an electronic post system including an enterprise server and an electronic post server, and the enterprise server is provided with an electronic post ID for each customer of the company. And storage means for storing the electronic post public key, means for encrypting the electronic distribution to the customer using the electronic post public key of the customer, and corresponding to the encrypted electronic distribution Means for adding the electronic post ID to the electronic post server and transmitting the electronic post ID to the electronic post server. The electronic post server includes an electronic post storage means in which an electronic distribution storage area is provided for each electronic post ID; Storage means for storing the electronic post secret key for each post ID, and the electronic post secret key associated with the electronic post ID for the encrypted electronic distribution received from the company server And a means for trying to decrypt, and a means for storing the encrypted electronic distribution in a corresponding storage area in the electronic post storage means when the decryption is successful. .
When decryption using the electronic post secret key fails, processing such as discarding the electronic distribution and returning it to the company server is executed by the electronic post server (the same applies hereinafter).
The “corporate server” is a server managed by a private company, a national institution, a local government, a public interest corporation, or an independent administrative corporation that wishes to distribute electronic documents to end users using this electronic post system. Widely refers (the same shall apply hereinafter).

  The electronic post system according to claim 2 is an electronic post system including an enterprise server and an electronic post server, and the enterprise server includes an electronic post ID, an electronic post public key, and a user public for each customer of the company. Storage means for storing the key, means for applying a first encryption to the electronic distribution for the customer using the user public key of the customer, and for the encrypted electronic distribution for the electronic distribution Means for performing second encryption using the customer's electronic post public key, and means for adding an electronic post ID corresponding to the double-encrypted electronic distribution and transmitting it to the electronic post server. The electronic post server comprises an electronic post storage means provided with an electronic distribution storage area for each electronic post ID, a storage means for storing an electronic post secret key for each electronic post ID, From corporate server A means to try to decrypt the double-encrypted electronic distribution received using the electronic post private key associated with the electronic post ID and, if successful, this double Means for storing the encrypted electronic distribution in a corresponding storage area in the electronic post storage means.

The electronic post system according to claim 3 is an electronic post system including an enterprise server, an electronic post server, and an end user terminal device, and the enterprise server includes an electronic post ID and an electronic post ID for each customer of the company. Storage means for storing the electronic post public key, means for encrypting the electronic distribution for the customer using the electronic post public key of the customer, and corresponding to the encrypted electronic distribution Means for adding an electronic post ID to the electronic post server and transmitting the electronic post ID to the electronic post server. The electronic post server includes an electronic post storage means provided with an electronic distribution storage area for each electronic post ID, and each electronic post. The storage means for storing the electronic post secret key for each ID and the electronic post secret key associated with the electronic post ID for the encrypted electronic distribution received from the company server. A means for attempting decryption, a means for storing the encrypted electronic distribution in a corresponding storage area in the electronic post storage means, and a terminal device of the end user when the decryption is successful. Means for extracting an encrypted electronic distribution from the corresponding storage area and transmitting it to the terminal device when a browsing request with an electronic post ID is transmitted. Storage means for storing the post secret key, means for receiving the encrypted electronic distribution from the electronic post server, and applying the electronic post secret key to the encrypted electronic distribution It is characterized by comprising means for performing decryption and means for outputting the decrypted electronic distribution through a display or a printer.

  The electronic post system according to claim 4 is an electronic post system including an enterprise server, an electronic post server, and an end user terminal device, wherein the enterprise server includes an electronic post ID for each customer of the company, A storage means for storing an electronic post public key and a user public key; a means for performing a first encryption on the electronic distribution for the customer using the user public key of the customer; A means for applying a second encryption to the electronic distribution using the customer's electronic post public key, and adding the electronic post ID corresponding to the double encrypted electronic distribution to add the electronic post Means for transmitting to the server, and the electronic post server stores an electronic post storage means provided with an electronic distribution storage area for each electronic post ID, and stores an electronic post secret key for each electronic post ID. Memory And a means for attempting to decrypt the double-encrypted electronic distribution received from the company server using the electronic post private key associated with the electronic post ID, and the decryption was successful. In this case, a browsing request with an electronic post ID is transmitted from the end user's terminal device and means for storing the doubly encrypted electronic distribution in the corresponding storage area in the electronic post storage means. A means for extracting a double-encrypted electronic distribution from the storage area and transmitting the extracted electronic distribution to the terminal device, the terminal device having an electronic post secret key and a user secret key of the end user. Storage means for storing, means for receiving the electronic distribution double encrypted from the electronic post server, and applying the electronic post secret key to the double encrypted electronic distribution do it 1 means for performing decryption, means for performing the second decryption by applying the user secret key to the electronic distribution that has been subjected to the first decryption, and the decrypted electronic distribution. Is provided through a display or a printer.

In the electronic post system according to claim 1 and 3, after an electronic distribution to a specific customer is encrypted with an electronic post public key associated with the electronic post ID of the customer in the enterprise server, the electronic post Decryption is attempted by applying the electronic post private key associated with the electronic post ID in the server, and the encrypted electronic distribution is stored in the corresponding area of the electronic post storage means only when the decryption is successful. It has a mechanism.
Therefore, when an electronic distribution addressed to a customer is encrypted with an incorrect electronic post public key due to a system malfunction or the like in the company server, it can be prevented from being delivered to the end user as it is.

5. The electronic post system according to claim 2 and 4, wherein an electronic distribution to a specific customer is double-encrypted by an electronic post public key and a user public key associated with the electronic post ID of the customer in the enterprise server. After the data is encrypted, the electronic post server applies the electronic post secret key associated with the electronic post ID, and decryption is attempted. The encrypted electronic distribution is stored in the electronic post only when the decryption is successful. It has a mechanism to be stored in the corresponding area of the means.
Therefore, when an electronic distribution addressed to a customer is encrypted with an incorrect electronic post public key due to a system malfunction or the like in the company server, it can be prevented from being delivered to the end user as it is.
Moreover, since the electronic distribution is encrypted using the user public key before being encrypted with the electronic post public key, and the electronic post server does not have the user secret key, the electronic post server does not have the electronic secret. Even when decryption is performed using a post-secret key, there is an advantage that confidentiality of contents is ensured.

  FIG. 1 is an overall configuration diagram of an electronic post system 10 according to the present invention. This system 10 includes an electronic post server 12 of an electronic post company, a company server 14 of each participating company, and a client PC 16 of each end user. The authentication server 18 of the certification authority includes a network connection between each server and the client PC via the Internet 20.

FIG. 2 is a block diagram showing functional configurations of the company server 14, the electronic post server 12, and the client PC 16. As shown in FIG.
First, the electronic post server 12 includes an electronic post storage unit 30, an NG post storage unit 32, an electronic post database 34, a reception unit 35, a delivery destination check unit 36, and a transmission unit 37.
The reception unit 35, the distribution destination check unit 36, and the transmission unit 37 are composed of the CPU of the electronic post server 12 that operates according to a predetermined program.
The electronic post storage unit 30 is provided with a large number of electronic post areas allocated to end users, and stores electronic distributions transmitted from each participating company to the end users. A unique ID is assigned to each electronic post area.
The NG post storage unit 32 is provided with a number of NG post areas allocated to the participating companies, and stores electronic distributions determined to be misdistributed by the distribution destination check unit 36 (details will be described later).

As shown in FIG. 3, an electronic post public key and an electronic post secret key are registered in the electronic post database 34 for each electronic post ID.
The electronic post public key and the electronic post secret key are encryption key sets unique to the present system set for each electronic post area, and are issued by an electronic post company or a certification body.
The electronic post public key is disclosed to everyone through the electronic post server 12 and the authentication server 18. In contrast, the electronic post secret key is distributed to each end user, and a copy thereof is stored in the electronic post database 34 of the electronic post server 12 as described above.

The company server 14 includes a transaction history database 40, a customer management database 42, an electronic distribution generation unit 44, and a transmission unit 46.
The electronic distribution generation unit 44 and the transmission unit 46 are composed of the CPU of the company server 14 that operates according to a predetermined program.
The transaction history database 40 stores transaction history data for each customer in each participating company. For example, in the case of a bank, it is deposit / withdrawal data for a customer's account, and in the case of a securities company, customer contract data, etc. Is applicable.

In the customer management database 42, as shown in FIG. 4, a name, an electronic post ID, an electronic post public key, and a user public key are registered for each customer ID.
Unlike the electronic post public key, this user public key is one of general encryption key sets issued to each end user by the authentication server 18, and the company server 14 acquires in advance through the authentication server 18. The paired user secret key is issued only from the authentication server 18 to each user.

The client PC 16 includes a receiving unit 50, a decoding unit 52, and a display unit 54.
The receiving unit 50, the decoding unit 52, and the display unit 54 are composed of the CPU of the client PC 16 that operates according to a predetermined program.
In addition, the electronic post secret key 56 and the user secret key 58 of each end user are stored in the external storage device of the client PC 16 or in the USB memory connected to the USB port.

Hereinafter, a series of processing procedures in the system 10 will be described with reference to the flowcharts of FIGS.
First, in the enterprise server 14, the electronic distribution generation unit 44 refers to the transaction history database 40 and generates an electronic distribution for a specific customer in plain text (S10 in FIG. 5).
Next, the electronic distribution generation unit 44 refers to the customer management database 42 and acquires the electronic post public key and user public key of the customer (S12).
Next, the electronic distribution generation unit 44 performs the first encryption (first encryption) on the electronic distribution using the user public key (S14).
Next, the electronic distribution generation unit 44 performs the second encryption (second encryption) on the encrypted electronic distribution using the electronic post public key (S16).
Next, the electronic distribution generation unit 44 refers to the customer management database 42, acquires the electronic post ID of the customer, and designates it as the destination of the electronic distribution (S18).
This double-encrypted electronic distribution is transmitted to the electronic post server 12 via the transmitter 46 (S20).

The delivery destination check unit 36 of the electronic post server 12 that has received this via the receiving unit 35 (S30 in FIG. 6) refers to the electronic post database 34 and refers to the electronic post associated with the electronic post ID of the electronic distribution. A secret key is acquired (S32).
Next, the delivery destination check unit 36 attempts to decrypt the electronic distribution using the electronic post secret key (S34).
If the decryption is successful (S36), it is determined that the destination designation is correct, and the electronic distribution is stored in the corresponding electronic post area while being double-encrypted (S38). ).
On the other hand, if the decryption fails (S36), it is determined that the electronic post ID and the electronic post public key do not match, that is, “misplacement”, and the electronic distribution is double-encrypted. It is stored in the NG post of the participating company as it is (S40).

An end user who knows the arrival of an electronic distribution by e-mail from the electronic post server 12 accesses the electronic post server 12 through the Web browser of the client PC 16, and passes through the transmission unit 37 and the reception unit 50 of the electronic post server 12. Download the electronic distribution from its own electronic post area (S50).
Next, the decryption unit 52 is activated, and the electronic distribution is first decrypted using the electronic post secret key 56 (S52).
Next, the decryption unit 52 performs the second decryption on the electronic distribution using the user secret key 58 (S54).
The electronic distribution obtained by the above decryption process is output to the display 60 through the display unit 54.

  As described above, the system is configured such that the electronic distribution generation unit 44 of the enterprise server 14 performs double encryption using the user public key in addition to the electronic post public key on the plain text electronic distribution. Therefore, even if the e-poster succeeds in decrypting the cipher using the e-post secret key, the user secret key is held only by the end-end user, so the contents cannot be deciphered. There is a merit that can prevent the leakage of information.

However, in order to achieve the purpose of preventing the electronic distribution from being accidentally distributed to other end users, the electronic distribution generation unit 44 only performs encryption using the electronic post public key. A system can also be configured.
In this case, the system configuration can be simplified even though there is a possibility of information leakage in the electronic post company. In addition, by selecting a person who is sufficiently reliable as an electronic post trader, the risk of information leakage can be approached to zero as much as possible.

1 is an overall configuration diagram of an electronic post system according to the present invention. It is a block diagram which shows the function structure of a company server, an electronic post server, and a client PC. It is a graph which shows the registration data of an electronic post database. It is a chart which shows the registration data of a customer management database. It is a flowchart which shows the operation | movement procedure of a company server. It is a flowchart which shows the operation | movement procedure of an electronic post server. It is a flowchart which shows the operation | movement procedure of client PC.

Explanation of symbols

10 Electronic post system
12 Electronic post server
14 Corporate server
18 Authentication server
20 Internet
30 Electronic post storage unit
32 NG post storage
34 Electronic Post Database
35 Receiver
36 Delivery destination check section
37 Transmitter
40 Transaction history database
42 Customer management database
44 Electronic Distribution Generation Department
46 Transmitter
50 Receiver
52 Decryption part
54 Display
56 Electronic post secret key
58 User private key
60 displays

Claims (4)

An electronic post system comprising an enterprise server and an electronic post server,
The company server has storage means for storing an electronic post ID and an electronic post public key for each customer of the company,
Means for encrypting the electronic distribution to the customer using the electronic post public key of the customer;
A means for adding an electronic post ID corresponding to the encrypted electronic distribution and sending it to the electronic post server,
The electronic post server is an electronic post storage means provided with a storage area for electronic distribution for each electronic post ID,
Storage means for storing an electronic post secret key for each electronic post ID;
Means for attempting to decrypt the encrypted electronic distribution received from the company server using an electronic post private key associated with the electronic post ID;
An electronic post system comprising: means for storing the encrypted electronic distribution in a corresponding storage area in the electronic post storage means when the decryption is successful. An electronic post system comprising an enterprise server and an electronic post server,
The company server has storage means for storing an electronic post ID, an electronic post public key, and a user public key for each customer of the company,
Means for applying a first encryption to the electronic distribution for the customer using the user public key of the customer;
Means for applying a second encryption to the encrypted electronic distribution using the electronic post public key of the customer;
A means for adding an electronic post ID corresponding to this double-encrypted electronic distribution and sending it to the electronic post server,
The electronic post server is an electronic post storage means provided with a storage area for electronic distribution for each electronic post ID,
Storage means for storing an electronic post secret key for each electronic post ID;
Means for attempting to decrypt the double-encrypted electronic distribution received from the company server using an electronic post private key associated with the electronic post ID;
An electronic post system comprising: means for storing the double-encrypted electronic distribution in a corresponding storage area in the electronic post storage means when the decryption is successful. An electronic post system comprising an enterprise server, an electronic post server, and an end user terminal device,
The company server has storage means for storing an electronic post ID and an electronic post public key for each customer of the company,
Means for encrypting the electronic distribution to the customer using the electronic post public key of the customer;
A means for adding an electronic post ID corresponding to the encrypted electronic distribution and sending it to the electronic post server,
The electronic post server is an electronic post storage means provided with a storage area for electronic distribution for each electronic post ID,
Storage means for storing an electronic post secret key for each electronic post ID;
Means for attempting to decrypt the encrypted electronic distribution received from the company server using an electronic post private key associated with the electronic post ID;
In the case of successful decryption, means for storing the encrypted electronic distribution in a corresponding storage area in the electronic post storage means,
When a browsing request with an electronic post ID is transmitted from the end user's terminal device, the encrypted electronic distribution is extracted from the corresponding storage area, and includes means for transmitting to the terminal device,
The terminal device includes storage means for storing an end user's electronic post secret key;
Means for receiving an encrypted electronic distribution from the electronic post server;
Means for applying the electronic post secret key to decrypt the encrypted electronic distribution;
An electronic post system comprising: means for outputting the decrypted electronic distribution. An electronic post system comprising an enterprise server, an electronic post server, and an end user terminal device,
The company server has storage means for storing an electronic post ID, an electronic post public key, and a user public key for each customer of the company,
Means for applying a first encryption to the electronic distribution for the customer using the user public key of the customer;
Means for applying a second encryption to the encrypted electronic distribution using the electronic post public key of the customer;
A means for adding an electronic post ID corresponding to this double-encrypted electronic distribution and sending it to the electronic post server,
The electronic post server is an electronic post storage means provided with a storage area for electronic distribution for each electronic post ID,
Storage means for storing an electronic post secret key for each electronic post ID;
Means for attempting to decrypt the double-encrypted electronic distribution received from the company server using an electronic post private key associated with the electronic post ID;
In the case of successful decryption, means for storing the double encrypted electronic distribution in a corresponding storage area in the electronic post storage means;
Means for extracting a double-encrypted electronic distribution from the corresponding storage area and transmitting it to the terminal device when a browsing request with an electronic post ID is transmitted from the terminal device of the end user. ,
The terminal device includes storage means for storing an end user's electronic post secret key and user secret key;
Means for receiving a double encrypted electronic distribution from the electronic post server;
Means for applying a first decryption to the doubly encrypted electronic distribution by applying the electronic post secret key;
Means for applying a second decryption by applying the user secret key to the electronic distribution product subjected to the first decryption;
An electronic post system comprising: means for outputting the decrypted electronic distribution.

Images