JP4953944B2 - Document delivery system, information processing apparatus and control method thereof, image processing apparatus and control method thereof, and program - Google Patents

Description

  The present invention relates to a document delivery system in which a user operation terminal for making a document issuance application and a document issuance server for issuing a requested document are connected via a network.

  Public certification service has been provided since 2004 to realize e-Government / E-Government. By using the public authentication service, a user can prove an individual using an ID card issued to him (an IC card storing an electronic certificate). Therefore, various applications for public documents / certificates, such as copies of resident cards, can be made from the home via the Internet without going to a public facility such as a ward office.

However, a personal computer (PC) and an IC card reader must be purchased and user-specific software must be installed. Therefore, not all users can be introduced and used at home. On the other hand, in order to easily use public authentication services, proposals have been made to use information terminals arranged in convenience stores. For example, Patent Document 1 discloses a system that enables application and delivery of an official document by using an electronic certificate stored in a basic resident register card of a user from a digital multifunction peripheral installed in a convenience store or the like. Has been.
JP 2005-309888 A

  However, in the system disclosed in Patent Document 1 described above, it cannot be said that security is sufficiently ensured when the Basic Resident Register Card (ID card) is stolen. In other words, when the Basic Resident Register card is stolen, it is impossible to prevent operations from application to issuance before completion of the revocation procedure for the electronic certificate of the Basic Resident Register card. Therefore, there is a possibility that the system is illegally used by impersonating a malicious third party. However, while various applications can be used more easily, there is a problem due to IC card theft. Therefore, it is necessary to ensure higher security.

  Therefore, in order to solve the above-mentioned problems, the present invention does not accept the application until the revocation list is updated on the certificate authority side in order to confirm the validity of the certificate, and confirm the identity. The purpose is to provide the user with a more secure document issuing system by sending an application acceptance document to the user's home.

  In order to solve one or more of the problems described above, the document delivery system of the present invention has the following configuration. That is, it includes at least one user operation terminal, a mediation server, a certificate management server, and a document issuing server, and the user operation terminal is a user set in a card reader of the user operation terminal. A certificate reading means for reading an electronic certificate stored in the ID card, an input receiving means for receiving input of application information from a user, an electronic certificate read by the certificate reading means, and the input receiving means Application information transmitting means for transmitting received application information to the mediation server, hash data received from the mediation server, and secret included in the ID card, in an ID card set in a card reader of the user operation terminal And generating encrypted hash data based on the key and transmitting the encrypted hash data to the mediation server. Means, application acceptance information transmitting means for reading application acceptance information from a recording medium in which application acceptance information is recorded by a reading unit, and transmitting the application acceptance information to the mediation server; and recording document data received from the mediation server Document output means for recording and outputting to a medium, and the intermediary server transmits the electronic certificate and application information received from the user operation terminal to the document issuing server, and is associated with the electronic certificate. Inquiry means for inquiring whether or not the user and the user associated with the application information are the same, and a hash based on the application information when the inquiry means determines that the user is the same user Hash data transmission means for transmitting data to the user operation terminal, and application acceptance information including the application information and encrypted hash data received from the user operation terminal Generating means, transmitting means for transmitting the result of application acceptance to the user operation terminal that has transmitted the corresponding application information based on whether or not application acceptance information is generated by the generating means, and application accepting information by the generating means Confirmation means for confirming whether or not the electronic certificate related to the application acceptance information is valid based on the electronic certificate revocation list managed by the certificate management server after a predetermined time has elapsed When the electronic certificate is confirmed to be valid by the confirmation unit, the medium in which the application acceptance information is recorded is delivered to the user with the name and address of the user included in the electronic certificate as a destination. Therefore, application acceptance information output means for outputting the application acceptance information to a recording medium, and requests the document issuing server to issue document data based on the application information, and receives the issued document data. And storing the document data storage means, detecting means for detecting falsification of the application acceptance information based on the encrypted hash data included in the application acceptance information received from the user operation terminal, and accepting the application by the detection means A document data transmission means for reading out document data related to the application acceptance information from the document data storage means and transmitting the document data to a user operation terminal when it is confirmed that the information has not been falsified; Delivery system.

In order to solve one or more of the problems described above, an information processing apparatus of the present invention has the following configuration. That is, a user associated with the electronic certificate received from the user terminal, the inquiry unit for inquiring whether the user associated is identical to the application information received from said user terminal, When it is determined by the inquiry means that the same user, hash data transmission means for sending hash data based on the application information to the user operation terminal, and the application information and the user operation terminal The generation means for generating the application acceptance information including the received hash data, and whether the electronic certificate related to the application acceptance information is valid after a predetermined time has elapsed since receiving the application information from the user terminal. Confirmation means for confirming whether or not, and output means for outputting information related to the application acceptance information when the electronic certificate is confirmed to be valid by the confirmation means.

In order to solve one or more of the problems described above, the image processing apparatus of the present invention has the following configuration. That is, in an image processing apparatus having a reading unit and a printing unit, a certificate reading unit that reads an electronic certificate stored in a user ID card set in a card reader, and an input reception unit that receives input of application information And an application information transmitting unit that transmits the electronic certificate read by the certificate reading unit and the application information received by the input receiving unit to the mediation server, and an ID set in the card reader of the image processing apparatus the card, to produce a cryptographic hash data based on the secret key contained in the hash data and the ID card received from the mediation server, the encrypted hash data transmission means for transmitting the encrypted hash data to the mediation server When read by the reading unit the sheet on which the image information of the encrypted hash data and the application received information is printed, Comprising the application receipt information transmitting means for transmitting the application receipt information to the mediating server, and output means for outputting by using the printing unit of the document data on a sheet received from the mediating server, the.

  According to the present invention, it is possible to provide a document delivery system with higher security.

  Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the drawings. The following embodiments are merely examples, and are not intended to limit the scope of the present invention.

(First embodiment)
As a first embodiment of the document delivery system according to the present invention, an example of applying and issuing using an MFP device (multifunction device) installed in a convenience store will be described below.

<System configuration>
FIG. 1 is a system configuration diagram of a document delivery system according to the first embodiment. The document delivery system includes at least one MFP device 10 that is a user operation terminal (user terminal) for a user to perform an operation, and a card reader 11 is installed in the MFP device 10. Furthermore, a business support system 20 that is an intermediary server and a basic resident register network 30 that is a document issuing server are included. Furthermore, an authentication server 40 that is a certificate management server that manages an electronic certificate stored in an ID card (IC card 12) issued in advance to the user is included. Each device is connected to be communicable with each other via a network such as the Internet. The business support system 20 includes an information processing device.

  User A who is a user holds an ID card (IC card 12) for using the public authentication service in advance. The IC card 12 stores an electronic certificate for the user A himself / herself. The electronic certificate stores personal data such as the name and address of the user A.

  In the following description, a case where the MFP device 10 and the business support system 20 are connected via the Internet will be described, but the present invention can also be implemented in an intranet such as a LAN. In addition, the case where the IC card 12 of the user A is read through the card reader 11 connected to the MFP device 10 will be described, but the electronic certificate issued from the public authentication service is not an IC card but a storage medium such as a USB. It may be stored using.

  FIG. 2 is a diagram showing an internal block configuration of the MFP device 10 which is an image processing apparatus. FIG. 5 is a functional configuration diagram of a client application that operates on the MFP device 10.

  The CPU 101 controls functions of the MFP device 10 by connecting each function / apparatus to be described later via the internal bus 109. The user interface (UI) device 102 is a device for displaying a user interface on a touch panel (operation panel) and receiving various inputs. The user A performs an operation and the like for performing a user-desired operation via a user interface displayed on the UI device 102. The scanner device 103 is a device (reading unit) for reading a document having a function such as an auto document feeder function. The printer device 104 is a device (printing unit) for outputting electronic data on paper. Further, the memory 105 stores various commands (application program / control program) executed by the CPU 101 to control the MFP device 10. Note that a client application described later is also loaded into the memory 105 and executed by the CPU 101.

  The mass storage device 106 stores a client application program file (to be described later), a scan image read by the scanner device 103, and the like. The network interface 107 transmits / receives various data via the Internet. In particular, it is used here for communication with the business support system 20.

  The storage medium connection device 108 controls the card reader 11. More specifically, it controls the reading of the electronic certificate in the IC card 12, the data encryption instruction to the IC card, and the like.

  The client application may be configured to be stored in advance in the mass storage device 106 or may be configured to be dynamically acquired via the network interface 107.

  As described above, the client application is loaded into the memory 105 and executed by the CPU 101. Then, each means shown in FIG. 5 is realized by a user's operation on the UI device 102 as a trigger. FIG. 6 is a functional configuration diagram of an application that operates in the business support system 20. Detailed operations of the client application or the means realized by the application will be described in an operation flow described later.

<System operation>
<Overview>
FIG. 3 is a flowchart showing an outline of the operation of the document delivery system according to the first embodiment. Specifically, it consists of three steps: a document issuance application (Process 1), an application acceptance document is sent (Process 2), and a document is delivered (Process 3).

  In step S10, the user A who acquires a document operates the MFP device 10 and makes a document issuance application. At this time, the user A sets the IC card 12 of the user A on the card reader 11 of the MFP device 10 in advance.

  FIG. 4 is a diagram illustrating an example of an operation screen displayed on the UI device 102 of the client application operating on the MFP device 10. Note that this operation screen is an example, and any form may be used as long as the user can perform a desired process.

  In step S <b> 11, the business support system 20 generates an application acceptance document according to the content that the user A has applied for in step S <b> 10. Further, the application acceptance document is output based on the electronic certificate information in the IC card 12 read from the card reader 11 in step S10. The output application acceptance document is delivered to the user A with the name and address in the electronic certificate as the destination.

  In step S <b> 12, the MFP device 10 reads the application acceptance document delivered to the user A with the scanner device 103, acquires a document corresponding to the application content in step S <b> 10 from the business support system 20, and uses the printer device 104. Print out.

  Below, the detail of the process of each step of step S10-step S12 is demonstrated.

<Process 1: Application for document issuance>
FIG. 7 is a diagram showing a data flow in the system in the document issuance application process corresponding to step S10 in FIG. FIG. 8 is an operational flowchart of the system in the document issuance application process corresponding to step S10 in FIG.

  In step S <b> 100, the user A inserts the IC card 12 into the card reader 11 connected to the MFP device 10.

  In step S110, the storage medium control unit 1004 detects that the IC card 12 has been inserted into the card reader 11 in step S100, and notifies the application main control unit 1001 of the event.

  Based on the reception of the event, the application main control unit 1001 loads the client application from the mass storage device 106 into the memory 105 and executes it by the CPU 101. Then, the operation screen of the client application is displayed on the UI device 102 of the MFP device 10 using the GUI display unit 1002.

  At this time, the application main control unit 1001 instructs the storage medium control unit 1004 which is a certificate reading unit, and reads the information of the electronic certificate from the IC card 12 inserted into the card reader 11. In addition, the data storage unit 1007 is used to temporarily store the electronic certificate information in the mass storage device 106. Note that the storage location of the electronic certificate information may be the memory 105.

  In step S101, the user A inputs a desired document issuance setting using the user interface that is the input receiving means displayed in step S110. Here, the desired document issuance setting specifically refers to the required number of copies in the case of a resident's card, presence / absence of a description of a permanent register, and the like. It is also set for the applicant's information. However, the information on the applicant himself / herself may be automatically extracted and set from the certificate of user A stored in the IC card 12.

  In step S111, when the user A applies for document issuance in step S101, the system main unit 1001 that receives the application event from the user operation processing unit 1003 uses the data storage unit 1007 to store a large capacity. The application content is temporarily stored in the device 106.

  Subsequently, the application main control unit 1001 instructs the data transmission / reception unit 1008, which is an application information transmission unit, to input the electronic certificate information of the user A to the business support system 20 via the network interface 107 in step S101. Submit your application details.

  In step S112, when a document issuance application is received from the client application in step S111, the service main control unit 2001 stores the information of the electronic certificate of the user A and the application content in the user information storage unit 2003. Thereafter, the service main control unit 2001 performs identity verification using the information of the electronic certificate of the user A to the basic resident register network 30 via the data transmission / reception unit 2002 (inquiry unit). That is, an inquiry is made as to whether or not the user information included in the electronic certificate information matches the user information included in the application content. When the result of failure of identity verification is returned from the basic resident register network 30, the failure is notified to the user A in step S117 described later. If the identity verification is successful, the process proceeds to step S113.

  In step S113, the service main control unit 2001 generates electronic data of an application acceptance form corresponding to the application content of the user A via the application acceptance form generation unit 2007. Then, the data is stored in a storage unit (not shown) via the data storage unit 2004. Subsequently, hash data is calculated from the application acceptance information via the hash calculation unit 2006, and is stored together with the application content stored in S112. When calculating hash data, unique information such as a reception number for an application by the user A may be used together.

  In step S114, the service main control unit 2001 returns the hash data generated in step S113 to the MFP device 10 via the data transmission / reception unit 2002, which is a hash data transmission unit.

  In step S 115, the hash data returned from the business support system 20 in step S 114 is received via the network interface 107 of the MFP device 10. Then, the application main control unit 1001 of the client application instructs the storage medium control unit 1004 to encrypt the hash data. Specifically, encrypted hash data is generated by encrypting the received hash data using a private key associated with the electronic certificate of user A stored in the IC card 12 inserted in the card reader 11. To do.

  Subsequently, the application main control unit 1001 instructs the data transmission / reception unit 1008 that is the encrypted hash data transmission unit to transmit the encrypted hash data to the business support system 20 via the network interface 107.

  In step S116, the business support system 20 stores the encrypted hash data transmitted from the client application of the MFP device in step S115 in a storage unit (not shown). Thereafter, the encrypted hash data is embedded in the electronic data of the application acceptance document generated in step S113 via the application acceptance document generation means 2007. Note that any method for embedding encrypted hash data can be used. For example, it may be embedded using a marker such as a barcode, or may be embedded as a watermark that is difficult for humans to distinguish in the background of an application acceptance document.

  In step S117, the business support system 20 returns the application processing result up to step S116 to the client application of the MFP device 10. That is, the corresponding application content is transmitted to the MFP device 10 that has transmitted it. Then, the MFP device 10 displays the received application processing result on the UI device 102 using the GUI display unit 1002.

  In step S102, the user A who has confirmed the application process result in step S117 takes out the IC card 12 from the card reader 11, and ends the application process.

<Process 2: Sending Application Acceptance>
FIG. 9 is a diagram showing a data flow in the system in the application acceptance document sending process corresponding to step S11 in FIG. FIG. 10 is an operational flowchart of the system in the application acceptance document sending process corresponding to step S11 in FIG.

  In step S210, the business support system 20 waits for a predetermined time after the user A has applied for document issuance in step S10. Then, the business support system 20 instructs the certificate confirmation unit 2005 after the predetermined time has elapsed, and acquires the electronic certificate revocation list from the authentication server 40. Note that the previously specified time can be arbitrarily set, but may be determined based on, for example, the update period of the electronic certificate revocation list. Here, it is assumed that it is several days after user A's document issuance application.

  In step S211, the service main control unit instructs the certificate checking unit 2005 to check the validity of the certificate of the user A using the electronic certificate revocation list acquired in step S210. In this way, by checking the validity of the electronic certificate after elapse of a predetermined time, it is more likely that the electronic certificate is not stored in the stolen IC card. It becomes possible to confirm. If the validity of the certificate of the user A is confirmed, the process proceeds to step S212. If the validity is confirmed, the process proceeds to step S218.

  In step S212, in order to deliver the application acceptance document to the user A who has applied, the name / address information is extracted from the information of the electronic certificate of the user A, and a postcard, an envelope, or the like is printed with the name / address as the destination (Application acceptance information output means). Printing is executed by the printers 21 and 22 connected to the business support system 20.

  In step S213, the application acceptance document in which the encrypted hash data generated in step S116 is embedded is printed. Printing is executed by the printers 21 and 22 connected to the business support system 20.

  In step S214, the service main control unit 2001 requests the basic resident register network 30 to create document (various certificate) data according to the application contents saved in the storage unit in step S112. Document data is data to be printed out by the MFP device 10.

  In step S215, the document data requested in step S214 and generated in the basic resident register network 30 is acquired.

  In step S216, the document data acquired in step S215 is associated with the application information of user A and stored in the data storage unit 2004 that is a document data storage unit.

  In step S217, the application receipt printed in step S213 is enclosed in the postcard or envelope obtained in step S212, and a delivery process for delivery is performed.

  As a result, the application acceptance document generated using the IC card 12 of the user A is delivered to the user A. Therefore, it becomes possible to confirm the identity of the user A more reliably. In other words, it is possible to interrupt an impersonation application using a stolen IC card at this point.

  In step S218, the processing status for user A's application is saved. By doing so, for example, the user A can confirm the application processing status by accessing the business support system 20 from a PC (not shown) using a browser or the like.

  In step S200, user A receives the application receipt sent out in step S217.

<Process 3: Document delivery>
FIG. 11 is a diagram showing a data flow in the system in the document delivery process corresponding to step S12 in FIG. FIG. 12 is an operation flowchart of the system in the document delivery process corresponding to step S12 in FIG.

  In step S300, the user A inserts the IC card 12 into the card reader 11 connected to the MFP device 10.

  In step S310, the storage medium control unit 1004 recognizes that the IC card 12 has been inserted into the card reader 11, and notifies the application main control unit 1001 of the event. Upon receiving the event, the application main control unit 1001 loads the client application of this system from the mass storage device 106 to the memory 105 and executes it by the CPU. Then, the operation screen of the client application is displayed on the UI device 102 of the MFP device 10 using the GUI display unit 1002.

  At this time, the application main control unit 1001 instructs the storage medium control unit 1004 to read out the electronic certificate information from the IC card 12 inserted in the card reader 11. In addition, the data storage unit 1007 is used to temporarily store the electronic certificate information in the mass storage device 106. Note that the storage location of the electronic certificate information may be the memory 105.

  In step S301, the user A operates the operation screen displayed in step S310, and selects document delivery. Subsequently, the application acceptance received in step S <b> 11 described above is read using the scanner device 103 which is a reading unit of the MFP device 10. That is, the application acceptance information recorded on the recording medium (for example, paper) is read. This operation may be configured to display a procedure on an operation screen on the UI device 102 and prompt the user to perform the operation.

  In step S311, the application main control unit 1001 that has received an event from the user operation processing unit 1003 of the client application reads the image of the application acceptance document via the scanner control unit 1005. Then, the scan data acquired by reading is temporarily stored in the mass storage device 106 of the MFP device 10 via the data storage unit 1007.

  Subsequently, the application main control unit 1001 transmits the electronic certificate information of the user A and the acquired scan data to the business support system 20 (application acceptance information transmission unit). At this time, not all the scan data may be transmitted, and only the encrypted hash information embedded in the application acceptance document may be extracted and transmitted.

  In step S312, the service main control unit 2001 stores the electronic certificate information of the user A in the user information storage unit 2003 when receiving a document delivery instruction. Further, the service main control unit 2001 stores the scan data in the data storage unit 2004. Thereafter, identity verification is performed on the basic resident register network 30 using the information of the electronic certificate of the user A. That is, an inquiry is made as to whether or not the user information included in the electronic certificate information matches the user information included in the application content. When the result of failure in the identity verification is returned from the basic resident register network 30, the user A is notified of the failure in step S317 described later. If the identity verification is successful, the process proceeds to step S313.

  In step S313, the service main control unit 2001 extracts the encrypted hash data embedded in the application acceptance document from the scan data stored in step S312. Subsequently, the hash data encrypted using the certificate (public key) of the user A is decrypted.

  In step S314, the service main control unit 2001 compares the hash data decrypted in step S313 with the hash data stored when the application is accepted in step S113 (detection unit). As a result of the comparison, it can be confirmed that the application acceptance document obtained by scanning has not been tampered with by determining that they are the same. If it is confirmed that the image has not been tampered with, the process proceeds to step S315. If it is determined that the image has been tampered with, the process proceeds to step S317.

  In step S315, the service main control unit 2001 retrieves the document (various certificate) data stored in step S216 from the data storage unit 2004 and returns it to the MFP device 10 via the data transmission / reception unit 2002 (document data transmission unit). ).

  In step S316, the MFP device 10 receives document (various certificate) data. The application main control unit 1001 of the client application instructs the printer control unit 1006 to print the document data from the printer device 104 (document output unit). That is, recording is performed on a recording medium (for example, paper) based on the document data.

  In step S317, the delivery processing result up to step S316 is displayed on the UI device 102 using the GUI display unit 1002 of the MFP device 10.

  In step S302, the user A confirms the document output result in step S316 or the delivery processing result in step S317. Then, the IC card 12 is taken out from the card reader 11 connected to the MFP device 10, and the delivery process ends.

The following effects can be obtained by issuing the document through the above flow. In other words,
-Adding encryption information using an encryption key associated with an electronic certificate in an individual's IC card to the application acceptance document has the effect of making it difficult to falsify the application acceptance document.

  ・ By physically delivering the application acceptance form with the name and address stored as the information of the electronic certificate as the destination, it becomes possible to confirm the identity more reliably.

  That is, a document delivery system with higher security can be provided by delivering a document using the system described in the first embodiment.

(Other embodiments)
Although the embodiments of the present invention have been described in detail above, the present invention may be applied to a system constituted by a plurality of devices or may be applied to an apparatus constituted by one device.

  The present invention can also be achieved by supplying a program that realizes the functions of the above-described embodiments directly or remotely to a system or apparatus, and the system or apparatus reads and executes the supplied program code. The Accordingly, the program code itself installed in the computer in order to realize the functional processing of the present invention by the computer is also included in the technical scope of the present invention.

  In this case, the program may be in any form as long as it has a program function, such as an object code, a program executed by an interpreter, or script data supplied to the OS.

  Examples of the recording medium for supplying the program include a floppy (registered trademark) disk, a hard disk, an optical disk (CD, DVD), a magneto-optical disk, a magnetic tape, a nonvolatile memory card, and a ROM.

  Further, the functions of the above-described embodiments are realized by the computer executing the read program. In addition, based on the instructions of the program, an OS or the like running on the computer performs part or all of the actual processing, and the functions of the above-described embodiments can also be realized by the processing.

  Further, the program read from the recording medium is written in a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer. Thereafter, the CPU of the function expansion board or function expansion unit performs part or all of the actual processing based on the instructions of the program, and the functions of the above-described embodiments are realized by the processing.

1 is a system configuration diagram of a document delivery system according to a first embodiment. 2 is a diagram showing an internal block configuration of an MFP device 10. FIG. It is a flowchart which shows the operation | movement outline | summary of the document delivery system which concerns on 1st Embodiment. 3 is a diagram illustrating an example of an operation screen displayed on a UI device 102 of a client application that operates on the MFP device 10. FIG. 2 is a functional configuration diagram of a client application that operates on the MFP device 10; FIG. 2 is a functional configuration diagram of an application that operates in a business support system 20. FIG. It is a figure which shows the flow of the data in a system in the issuance application process of a document. It is an operation | movement flowchart of the system in the issuing application process of a document. It is a figure which shows the flow of the data in a system in the sending process of an application acceptance document. It is an operation | movement flowchart of the system in the sending process of an application acceptance document. It is a figure which shows the flow of the data in a system in the delivery process of a document. It is an operation | movement flowchart of the system in the delivery process of a document.

Claims (9)

A document delivery system including at least one user operation terminal, an intermediary server, a certificate management server, and a document issuing server,
The user operation terminal is
Certificate reading means for reading an electronic certificate stored in a user ID card set in a card reader of the user operation terminal;
An input receiving means for receiving input of application information from the user;
Application information transmitting means for transmitting the electronic certificate read by the certificate reading means and the application information received by the input receiving means to the mediation server;
The encrypted hash data is generated by causing the ID card set in the card reader of the user operation terminal to generate encrypted hash data based on the hash data received from the mediation server and the secret key included in the ID card. Encrypted hash data transmission means for transmitting to the mediation server,
Application acceptance information transmitting means for reading the application acceptance information from the recording medium in which the application acceptance information is recorded by the reading unit, and transmitting the application acceptance information to the mediation server;
Document output means for recording and outputting document data received from the mediation server to a recording medium;
With
The mediation server is
The electronic certificate received from the user operation terminal and the application information are transmitted to the document issuing server, and whether the user associated with the electronic certificate and the user associated with the application information are the same Inquiry means to inquire
When the inquiry means determines that the same user, hash data transmission means for transmitting hash data based on the application information to the user operation terminal;
Generating means for generating application acceptance information including the application information and the encrypted hash data received from the user operation terminal;
Based on whether or not the application acceptance information is generated by the generation means, a transmission means for transmitting the result of application acceptance to the user operation terminal that has transmitted the corresponding application information;
An electronic certificate revocation list managed by the certificate management server to determine whether or not an electronic certificate related to the application acceptance information is valid after a predetermined time has elapsed after generating the application acceptance information by the generation means. Confirmation means to confirm based on,
When the electronic certificate is confirmed to be valid by the confirmation means, in order to deliver to the user the medium in which the application acceptance information is recorded with the name and address of the user included in the electronic certificate as a destination , Application acceptance information output means for outputting the application acceptance information to a recording medium;
Document data storage means for requesting the document issuing server to issue document data based on the application information, and receiving and storing the issued document data;
Detection means for detecting falsification of the application acceptance information based on the encrypted hash data included in the application acceptance information received from the user operation terminal;
Document data that, when it is confirmed by the detection means that the application acceptance information has not been tampered with, reads out document data related to the application acceptance information from the document data storage means and transmits the document data to the user operation terminal A transmission means;
A document delivery system comprising: A user associated with the received electronic certificate from the user terminal, the inquiry unit for inquiring whether the user associated is identical to the application information received from said user terminal,
If the inquiry means determines that the same user, hash data transmission means for transmitting hash data based on the application information to the user operation terminal;
Generating means for generating application acceptance information including the application information and hash data received from the user operation terminal;
Confirmation means for confirming whether the electronic certificate related to the application acceptance information is valid after a predetermined time has elapsed since receiving the application information from the user terminal;
An output means for outputting information related to application acceptance information when the electronic certificate is confirmed to be valid by the confirmation means;
An information processing apparatus comprising: When the electronic certificate is confirmed to be valid by the confirmation means, in order to send to the user the medium on which the application acceptance information is printed with the name and address of the user included in the electronic certificate as a destination The information processing apparatus according to claim 2, wherein the output unit outputs information related to the application acceptance information on a sheet for printing the application acceptance information . In an image processing apparatus having a reading unit and a printing unit,
Certificate reading means for reading an electronic certificate stored in a user ID card set in a card reader;
An input receiving means for receiving input of application information;
Application information transmitting means for transmitting the electronic certificate read by the certificate reading means and the application information received by the input receiving means to the mediation server;
The image processing apparatus card reader to the set ID card, to produce a cryptographic hash data based on the secret key contained in the hash data and the ID card received from the mediating server, the cryptographic hash data Encrypted hash data transmission means for transmitting to the mediation server;
Application acceptance information transmitting means for reading the paper on which the image information of the encrypted hash data and the application acceptance information are printed by the reading unit, and transmitting the application acceptance information to the mediation server;
Output means for outputting the document data received from the mediation server to paper using the printing unit;
An image processing apparatus comprising: Inquiry inquiring inquiry means, a user associated with the electronic certificate received from the user terminal, whether the user associated is identical to the application information received from said user terminal Process,
If the hash data transmission means is determined to be the same user in the inquiry step, a hash data transmission step of transmitting hash data based on the application information to the user operation terminal;
Generating means, a generating step of generating application acceptance information including the hash data received from the user operation terminal and the application information,
Confirmation means comprises a confirmation step after time specified in advance from the reception of the application information from the user terminal, an electronic certificate associated with the application receipt information to confirm valid or not,
When the output means confirms that the electronic certificate is valid in the confirmation step, an output step of outputting information related to the application acceptance information;
A method for controlling an information processing apparatus. When the electronic certificate is confirmed to be valid in the confirmation step, in order to send to the user the medium on which the application acceptance information is printed with the name and address of the user included in the electronic certificate as a destination 6. The information processing apparatus control method according to claim 5, wherein the output means outputs information related to the application acceptance information on a sheet for printing the application acceptance information . A control method of an image processing apparatus having a reading unit and a printing unit,
A certificate reading step in which the certificate reading means reads the electronic certificate stored in the ID card of the user set in the card reader;
An input receiving step for receiving input of application information;
An application information transmitting unit transmits an electronic certificate read by the certificate reading process and an application information received by the input receiving process to an intermediary server; and
Cryptographic hash data transmitting means, said the ID card set in the card reader of the image processing apparatus, generates a cryptographic hash data based on the secret key contained in the hash data and the ID card received from the mediation server is a cryptographic hash data transmission step of transmitting the encrypted hash data to the mediation server,
An application acceptance information transmitting means reads the paper on which the image information of the encrypted hash data and the application acceptance information are printed by a reading unit, and transmits the application acceptance information to the mediation server; and
An output step in which the output means outputs the document data received from the mediation server to a sheet using the printing unit;
A method for controlling an image processing apparatus. A user associated with the received electronic certificate from the user terminal, and inquiring step of inquiring whether the user associated is identical to the application information received from said user terminal,
If it is determined that the same user in the inquiry step, hash data transmission step of transmitting hash data based on the application information to the user operation terminal,
Generating step for generating application acceptance information including the application information and hash data received from the user operation terminal;
A confirmation step of confirming whether the electronic certificate related to the application acceptance information is valid after a predetermined time has elapsed since receiving the application information from the user terminal;
When the electronic certificate is confirmed to be valid in the confirmation step, an output step for outputting information related to the application acceptance information;
A program that causes a computer to execute. A control program for an image processing apparatus having a reading unit and a printing unit,
A certificate reading step for reading an electronic certificate stored in a user ID card set in a card reader;
An input acceptance process for accepting input of application information;
An application information transmission step of transmitting the electronic certificate read by the certificate reading step and the application information received by the input reception step to the mediation server;
The image processing apparatus card reader to the set ID card, to produce a cryptographic hash data based on the secret key contained in the hash data and the ID card received from the mediating server, the cryptographic hash data An encrypted hash data transmission step for transmitting to the mediation server;
An application acceptance information transmitting step of reading the paper on which the image information of the encrypted hash data and the application acceptance information are printed by a reading unit, and transmitting the application acceptance information to the mediation server;
An output step of outputting the document data received from the mediation server to paper using the printing unit;
A program that causes a computer to execute.

Images