JP4963982B2 - Self-extracting data structure, self-extracting program, and computer - Google Patents

Description

  The present invention relates to a self-extracting data structure, a self-extracting program, and a computer.

As a technique for collecting a plurality of files on a computer into one, an executable file having a self-extracting data structure is known.
This executable file is a collection of a plurality of files and a program for extracting and expanding these files from the executable file itself as a single file. By executing a file having such a data structure as a program, the computer restores the file included in the file to the original form.
An example of the data structure of such a self-extracting file is shown in Patent Document 1.

JP 2003-99302 A

However, the conventional data structure has a problem in terms of convenience because the executable file itself cannot be updated.
For example, in the data structure of the encapsulated document shown in FIG. 1 of Patent Document 1, the operation program can extract and refer to text information and media information. When these contents are changed by a user operation, In addition, there is no means for reflecting the change in the original encapsulated document.
For this reason, when updating an executable file having a conventional data structure, the user needs to save the updated contents as a separate file and create a new executable file based on this. It takes time and effort.
Also, the user needs to prepare a separate program for creating an executable file for this purpose, and this is also troublesome.

  The present invention has been made to solve such problems, and provides a data structure, a program, and a computer for automatically updating an executable file itself in a self-extracting executable file. The purpose is to do.

In order to solve the above-described problems, a self-extracting data structure according to the present invention includes a decompression program that causes a computer to function as decompression means, an update program that causes a computer to function as update means, and document data. The self-extracting data structure does not include any application program for browsing, editing, printing, saving, or attaching an e-mail to the document data, and the expansion means expands the document data included in the data structure. The update unit is activated and the update unit activates the copy unit. When the time stamp of the copy of the document data is updated by an application program that is not included in the data structure of the self-decompression format, the copy of the document data is copied. The document data included in the data structure is determined to have been updated. To update the data.

The document data and the copy of the document data are encrypted documents encrypted using an encryption key, and the data structure is encrypted by creating an encrypted document by encrypting a plain text document using the encryption key and the encryption key. Restricts the encryption program that makes a computer function as a means, decrypts an encrypted document using an encryption key, and creates a plain text document, makes the computer function as a decryption means, and uses of the encrypted document and the plain text document And a use right that is data to be used, and a restriction program that restricts the use method of the encrypted document and the plaintext document according to the use right and that causes the computer to function as a restriction unit.

  The data structure includes data related to the defined password, and the expansion means receives the input password and determines whether the input password and the defined password match. It may be one that does not make a copy of.

Also, self-extracting program according to the present invention causes a computer to function as a self-extracting unit, a self-extracting program having the data structure described above.

The computer according to the present invention, comprises a memorize means, for storing the self-extracting file having the data structure described above in the storage means.

  According to the data structure, the program, and the computer according to the present invention, when the self-extracting program, which is a self-extracting executable file, is executed, it is updated in accordance with the user updating the decompressed document data. Means automatically update the self-extracting program itself. This eliminates the need for the user to update the self-extracting program and improves convenience.

Embodiments of the present invention will be described below with reference to the accompanying drawings.
Embodiment 1 FIG.
FIG. 1 shows a configuration of a PC 100 that is a system for storing a self-extracting program 200 having a data structure according to Embodiment 1 of the present invention.
The PC 100 is a computer having a well-known configuration, and includes a CPU that is a calculation unit that performs a calculation, and a storage unit that includes a magnetic disk and a semiconductor memory for storing information. The PC 100 further includes a keyboard and mouse that are input devices, a display and printer that are output devices, and a network interface that serves both as an input device and an output device for a communication network.
The storage means of the PC 100 stores the self-extracting program 200 as data. In addition, the CPU of the PC 100 has a function of executing an application 300 that is a program and editing document data in a specific format in accordance with a user operation.

The self-extracting program 200 shown in FIG. 1 has a data structure as an executable file in a so-called self-extracting format. For example, the file name has an extension of “.exe”. The PC 100 functions as a self-extracting means (not shown) by executing the self-extracting program 200.
The self-extracting program 200 shown in FIG. 1 is created by, for example, an external file server, and is input to the PC 100 via a communication network, a portable storage medium, etc., and is stored in the storage means.
The self-extracting program 200 includes, as data structures, an encrypted document 10, a decompression program 20, an update program 30, an offline license 40, a password hash 50, and add-in data 60 as data. Here, for example, the self-extracting program 200 includes these data in a format compressed by a well-known method, but may include an uncompressed format.

The encrypted document 10 is data obtained by encrypting a document file corresponding to the application 300. For example, the application 300 is a CAD program, and the encrypted document 10 is design data processed thereby. The document file before encryption, that is, the data of the plain text file is the plain text document 12 (see FIG. 8), which will be described later.
The expansion program 20 is a program that is executed first when the execution of the self-extracting program 200 is instructed. That is, the above self-extracting means causes the PC 100 to execute the expansion program 20.
When the expansion program 20 is executed by the PC 100, it realizes a function of creating a temporary folder and copying the encrypted document 10, and the details will be described later with reference to FIGS.
When the update program 30 is executed by the PC 100, it implements a function for updating the self-extracting program 200, and the details will be described later with reference to FIGS.

  The offline license 40 includes an encryption key 42 corresponding to the encrypted document 10. The encryption key 42 is used in common for both processing for encrypting data of a certain document to create the encrypted document 10 and processing for decrypting the encrypted document 10 to create plain text document data. One key. Instead of the single encryption key 42, a pair of an encryption key used for encryption and a decryption key used for decryption may be included.

In addition, the offline license 40 includes a usage right 44 that is data defining the user's authority regarding the self-extracting program 200.
The usage right 44 includes information indicating whether to restrict a part of the function according to the function of the application 300. That is, the usage right 44 restricts the usage method of the encrypted document 10. For example, the following items are restricted.
-Whether you have permission to view the document being processed.
-Whether you have permission to edit the document being processed.
-Whether you have permission to print the document being processed.
-Whether you have permission to copy the document being processed. Here, copying means a process of copying data to a storage area that is not directly managed by the application 300, and is used for so-called copy and paste operations. A copy of data in all formats such as a copy of text data, a copy in the data format of the application 300, and a copy of the displayed screen data is included.
・ Whether or not to overwrite the document being processed. Here, overwriting means saving in the form of updating the contents of an existing file.
・ Whether or not to save a new document being processed. Here, the new saving means storing and saving as a file different from the existing file.
-Whether or not the document being processed is allowed to be attached to an e-mail in an encrypted state.
-Whether the document being processed is allowed to be saved as a file in plain text.
・ Whether or not to change the usage right 44. That is, permission to update the self-extracting program 200 to include the changed usage right or permission to create a new self-extracting program including the changed usage right. This permission may be specified for each item of the usage right 44. Further, it may be possible to change only to a stricter limit, that is, change to a direction in which permitted functions are prohibited. In this case, for example, the usage right 44 that prohibits printing of a document cannot be changed so that printing is permitted.
• The period or time limit for which each of the above permits is valid.
-Whether or not there is permission to perform operations specific to the application 300. For example, when the application 300 is a CAD program, permission to rotate design data being processed and display it from different directions, or permission to display it by cutting it in parallel sections.
In addition, the usage right 44 may include items set in well-known security management.

  The password hash 50 is hash data corresponding to a predetermined password that is required when the expansion program 20 is executed.

The add-in data 60 is an add-in for the application 300, that is, an additional program. The add-in 61 (see FIG. 3) installed based on the add-in data 60 is executed together with the application 300 to add or change the function of the application 300. The addition and change of this function are made according to the contents of the above-mentioned usage right 44. Details of the add-in 61 will be described later with respect to step S18 of FIG.
A plurality of applications 300 can be stored in the storage unit of the PC 100, and the encrypted document 10 and the add-in data 60 corresponding to the application 300 are configured in the self-decompression program 200.

Next, the operation when the PC 100 executes the self-extracting program 200 will be described with reference to FIGS.
FIG. 2 shows a flowchart of the expansion program 20, and FIG. 3 shows a configuration of the PC 100 immediately before the execution of the flowchart of FIG.
The self-extracting program 200 is configured such that when the execution is instructed, the expansion program 20 is executed first. That is, the flowchart of the expansion program 20 shown in FIG. 2 is started when a user or another program or the like instructs execution of the self-decompression program 200.

The PC 100 functions as the expansion unit 21 by executing the expansion program 20.
The expansion means 21 first asks the user of the PC 100 for a password and receives it as an input password (step S10). Next, the expansion unit 21 calculates a hash function of the input password and compares the calculation result with the password hash 50 (step S12). Here, the hash function may be a well-known one.
If the calculation result based on the input password does not match the password hash 50, the expansion unit 21 determines that the defined password and the input password are different, and ends the execution.

If the calculation result based on the input password matches the password hash 50, the expansion means 21 determines that the defined password matches the input password, and creates a temporary folder 70 (see FIG. 3) (step S14). ). Here, the temporary folder 70 is a normal folder created in the storage means of the PC 100, and functions as a means for storing files, other folders, and the like.
Next, the expansion means 21 expands the encrypted document 10 to create an encrypted document copy 11, and stores it in the temporary folder 70 (step S16). Here, “development” means that data corresponding to the encrypted document 10 is extracted from the self-extracting program 200 and the extracted data is converted into a single file format. Further, the operation of “development” may be performed until the storage unit stores the data converted into a single file format. The encrypted document copy 11 is an expanded version of the encrypted document 10.
This expansion process is performed in the same manner as a well-known self-extracting executable file.

Next, the expansion means 21 installs the add-in data 60 in the application 300 and sets it as the add-in 61 (step S18).
Here, the add-in 61 acts as a decryption program that provides the PC 100 with a function of decrypting the encrypted document copy 11 and converting it into a data format that can be processed by the application 300. In other words, the PC 100 functions as a decryption unit by executing the add-in 61, and can use the application 300 to process the encrypted document copy 11 in the same manner as an unencrypted document.
Similarly, the add-in 61 acts as an encryption program that provides the PC 100 with a function of creating an encrypted file from data processed by the application 300. That is, the PC 100 functions as an encryption unit by executing the add-in 61, and can use the application 300 to encrypt and store a document being processed.

Further, the add-in 61 is installed in a state including the data of the usage right 44, and adds, changes, or restricts some of the functions realized by the application 300 according to the set permission items. The PC 100 functions as a limiting unit that limits the usage method of the encrypted document 10 according to the usage right 44 by executing the add-in 61.
Note that the content of the usage right 44 may not be included in the add-in 61. In this case, the add-in 61 refers to the usage right 44 in the self-extracting program 200 as appropriate, and the application 300 determines whether or not The function may be changed.

  After step S18, the expansion unit 21 starts the application 300 (step S20). That is, the PC 100 is caused to start executing the application 300. Here, some of the functions of the application 300 are added or changed by the add-in 61.

Next, the expansion unit 21 starts the update program 30 (step S22). That is, the PC 100 is caused to start executing the update program 30 included as data in the self-extracting program 200. The PC 100 functions as the update unit 31 by executing the update program 30. That is, the expansion unit 21 activates the update unit 31 in step S22.
As a modification, the expansion unit 21 may copy the update program 30 into the temporary folder 70 and start its execution before step S22. Alternatively, data necessary for execution of the update program 30 may be created in the temporary folder 70.
After step S22, the expanding means 21 ends the process.

4 and 6 show a flowchart of the update program 30. FIG. The PC 100 functions as the update unit 31 by executing the update program 30. The updating unit 31 executes the processes in FIGS. 4 and 6 in parallel.
FIG. 5 shows the configuration of the PC 100 related to the execution of the flowchart of FIG. In the flowchart of FIG. 4, the update unit 31 first determines whether or not the encrypted document copy 11 has been updated (step S30). The criterion for determining whether or not the update has occurred is, for example, a time stamp representing the update date and time associated with the file of the encrypted document copy 11. If this time stamp is newer than that when step S30 was previously executed, it is determined that the encrypted document copy 11 has been updated.
As described above, the update process itself of the encrypted document copy 11 is performed by the add-in 61 of the application 300.

  If it is determined in step S30 that the encrypted document copy 11 has not been updated, the updating unit 31 executes step S30 again. That is, while the encrypted document copy 11 is not updated, the updating unit 31 repeatedly executes step S30. Here, step S30 may be repeated after a certain period of time.

When it is determined in step S30 that the encrypted document copy 11 has been updated, the updating unit 31 updates the self-decompression program 200 based on the updated encrypted document copy 11 (step S32). Here, the update unit 31 encrypts the updated encrypted document copy 11 using the encryption key 42 and creates a new encrypted document 10. Further, this is replaced with the original encrypted document 10. That is, the encrypted document 10 is updated by overwriting.
This update process may update not only the encrypted document 10 but also the entire self-decompression program 200 in accordance with the update of the encrypted document 10. For example, the updating means 31 restores all the data included in the self-extracting program 200, replaces the encrypted document 10 with the updated one, and then compresses all the data into the self-extracting format to execute the self-extracting program 200. It may be recreated and updated.
After execution of step S32, the process returns to step S30. That is, in the flowchart of FIG. 4, the updating unit 31 does not finish the execution after finishing all the processes.

FIG. 7 shows the configuration of the PC 100 related to the execution of the flowchart of FIG.
In the flowchart of FIG. 6, the update unit 31 first determines whether or not the application 300 has ended (step S40). The criterion for determining whether or not the application 300 has ended is, for example, whether or not the PC 100 is executing a program corresponding to the application 300.

  When it is determined that the application 300 has not ended, the update unit 31 executes step S40 again. That is, while the application 300 is being executed, the updating unit 31 repeatedly executes step S40. Here, step S40 may be repeated after a certain period of time.

If it is determined in step S40 that the application 300 has ended, the updating unit 31 deletes the encrypted document copy 11 (step S42), and further deletes the temporary folder 70 (step S44). When data other than the encrypted document copy 11 is stored in the temporary folder 70, the update unit 31 deletes all of the data together with the temporary folder 70.
Next, the update unit 31 uninstalls the add-in 61 from the application 300 (step S46). As a result, the add-in 61 is deleted, so that the function of the application 300 that has been added, changed, or restricted based on the add-in 61 is restored. That is, the function of the application 300 is the same as the function in the state before step S18 in FIG.

In connection with the PC 100 operating as described above, a specific example of the processing of the external server, the user's operation, and the processing flow of the PC 100 itself will be described below.
FIG. 8 shows the flow of processing in which the self-extracting program 200 is created. As long as the data has the same structure as the self-extracting program 200, the creation method is not limited to the following processing, and may be created by any method.

A plain text document 12 that is unencrypted document data, an encryption key 42, a usage right 44, an expansion program 20, an update program 30, a password 51, and add-in data 60 are stored in the storage unit of the license server 400 that is an external computer. Stored.
Note that the password 51 does not have to be stored in advance as a predefined password in this way. For example, the password 51 may be defined by requesting the user to input the password 51 as necessary. Further, the usage right 44 is created by a known method corresponding to each user. For example, a combination of the user ID corresponding to the user and the authority corresponding to the user, that is, the content of permission may be registered as a database. In this case, the usage right 44 is created according to the user ID of the user who requested creation of the self-extracting program 200.

First, the license server 400 functions as the encryption unit 402 by executing a program (not shown) stored in its own storage unit. The encryption unit 402 encrypts the plain text document 12 with the encryption key 42, creates the encrypted document 10, and stores it in the storage unit.
Next, the license server 400 functions as the license registration unit 404 by executing another program (not shown). The license registration unit 404 combines the encryption key 42 and the usage right 44, creates the offline license 40 based on these, and stores them in the storage unit.

Next, the license server 400 functions as the encapsulation unit 406 by executing another program (not shown). The encapsulating means 406 obtains the password hash 50 based on the password 51, and combines the encrypted document 10, the decompression program 20, the update program 30, the offline license 40, the password hash 50, and the add-in data 60 into the self-decompression program 200. create. At this time, when the execution of the self-extracting program 200 is instructed, the contents are set such that the expansion program 20 is executed first. The encapsulating means 406 stores the created self-extracting program 200 in the storage means.
The self-extracting program 200 is created as described above.

The user inputs the created self-extracting program 200 into the PC 100. This is obtained, for example, by acquiring, that is, downloading, the self-extracting program 200 from the license server 400 via the communication network. However, connection via a communication network is not essential, and it may be input to the PC 100 via a portable storage medium or the like.
Also, the encryption unit 402 and the encapsulation unit 406 described with reference to FIG. 8 are provided in the PC 100, and the content of the offline license 40 is confirmed by communicating with the license server 400, and the encapsulation is performed with the encryption unit 402. It is also possible to configure so that the self-extracting program 200 is created by the PC 100 in cooperation with the means 406.
In this state, even if the user or another person directly refers to the data of the self-extracting program 200, the encrypted document 10 is encrypted and the contents cannot be known.

Next, the user instructs the PC 100 to start executing the self-extracting program 200. This is performed, for example, by double-clicking on an icon representing the self-extracting program 200 on the screen of the PC 100.
The PC 100 starts executing the self-extracting program 200. As described above, first, the execution of the expansion program 20 included in the self-decompression program 200 is started, whereby the PC 100 functions as the expansion means 21.
As shown in FIGS. 2 and 3, the expansion means 21 confirms the user's password, creates the encrypted document copy 11 as a file, installs the add-in 61, starts the application 300 and the update program 30, The process ends.
Again, the encrypted document copy 11 is encrypted, and even if the user or another person directly refers to the data of the encrypted document copy 11, the contents cannot be known.

  Next, the user uses the application 300 to process the encrypted document copy 11. This processing is the browsing, editing, printing, etc. of the data corresponding to the decrypted content of the encrypted document copy 11, that is, the plain text document 12 (see FIG. 8), but is restricted according to the usage right 44 by the add-in 61. It becomes. Further, since the contents of the encrypted document 10 can be accessed only through the application 300 and the function of the application 300 is restricted by the add-in 61, the user cannot perform an unauthorized operation. The data of the encrypted document 10 is protected.

When the user overwrites and saves the document being processed, the updating unit 31 updates the encrypted document 10 in the self-extracting program 200 according to the contents as shown in FIGS. For this reason, the content of the self-extracting program 200 is always kept up-to-date.
When the user terminates the application 300, the update unit 31 deletes the encrypted document copy 11 and uninstalls the add-in 61, as shown in FIGS.
Further, when updating the encrypted document copy 11, that is, when the self-extracting program 200 is updated, the user sends the updated self-extracting program 200 back to the license server 400. This is done, for example, by sending, ie uploading, the self-extracting program 200 via a communication network. However, connection via a communication network is not essential and may be input to the license server 400 via a portable storage medium or the like.

  Although not shown, the license server 400 takes out the encrypted document 10 from the updated self-extracting program 200 and stores it. Alternatively, the plaintext document 12 updated by decrypting it may be created and stored. As a result, the encrypted document 10 or the plain text document 12 on the license server 400 is kept up-to-date.

According to the first embodiment described above, when the self-extracting program 200 is executed, the expansion unit 21 first activates the update unit 31. Further, when the user updates the decompressed encrypted document copy 11, the update means 31 automatically updates the encrypted document 10 in the self-decompressing program 200 in accordance with the update.
For this reason, the user only needs to update the encrypted document copy 11, and the work of reflecting this update in the self-decompression program 200 becomes unnecessary, and convenience is improved. Further, since the contents of the self-extracting program 200 are always updated, it is possible to avoid a situation in which the user accidentally uses the self-extracting program 200 before the update.
Furthermore, since the update program 30 for updating the self-extracting program 200 is included in the self-extracting program 200 itself, the user does not need to prepare a separate program such as a self-extracting file creation tool. But convenience is improved.

The self-extracting program 200 does not create a file having the decrypted content of the encrypted document 10, that is, a file corresponding to the plaintext document 12, except when permitted by the usage right 44.
The encrypted document 10 and the encrypted document copy 11 are always encrypted, and the decrypted contents can be accessed only through the application 300. The function of the application 300 is limited by the add-in 61 based on the usage right 44. Therefore, it is possible to prevent document data from being leaked or illegally used.

  Further, when using the self-extracting program 200, the communication network connection between the PC 100 and the license server 400 is not necessary. In particular, access to the license server 400 is not required even during editing of the encrypted document 10. For this reason, the degree of freedom of the user is increased and the convenience is improved as compared with the conventional technique in which a security server or the like must be accessed via a communication network in order to obtain permission to use a document.

In the first embodiment described above, the application 300 is preinstalled in the PC 100. However, as a modification, the application 300 may be included in the self-extracting program 200. In this case, the add-in 61 and the application 300 may be integrated, and data corresponding to the add-in 61 may not exist.
In the case of such a configuration, the expansion means 21 installs the application 300 (and data corresponding to the add-in 61 if included) instead of installing the add-in in step S18 of FIG. In addition, the update unit 31 uninstalls the application 300 (and data corresponding to the add-in 61 if included) in step S46 of FIG.
In the case of such a configuration, the application 300 need not be installed in the PC 100 in advance, so that the degree of freedom of the user is further increased and convenience is improved.

In the first embodiment, the update unit 31 determines update of the encrypted document copy 11, but this determination may be performed by other methods. For example, the update unit 31 does not make a determination, and the add-in 61 notifies the update unit 31 when the encrypted document copy 11 is updated, and the update unit 31 updates the encrypted document 10 in response to receiving this notification. Good.
In that case, step S30 in FIG. 4 is replaced with a process of waiting for a notification from the add-in 61.
Similarly, the determination of whether or not the application 300 has ended may be performed by other methods. For example, the update unit 31 may not perform the determination, and the add-in 61 may notify the update unit 31 when the application 300 ends, and the update unit 31 may delete the encrypted document copy 11 in response to receiving this notification. .
In this case, step S40 in FIG. 5 is replaced with a process of waiting for a notification from the add-in 61.

There may be a plurality of encrypted documents 10 included in the self-extracting program 200, and they may correspond to different applications. In that case, in steps S18, S20, S40, and S46, processing for each encrypted document and application is executed.
In this case, the expanding unit 21 or the updating unit 31 may create and display a list of the encrypted documents 10.

In the license server 400, exclusive control of the encrypted document 10 or the plaintext document 12 may be performed. That is, for example, after a user instructs the license server 400 to create the self-extracting program 200, the user returns the updated self-extracting program 200 to the license server 400, and the updated encrypted document 10 or Until the plaintext document 12 is stored, the license server 400 may prohibit the creation of the encrypted document 10 or another self-extracting program 200 related to the plaintext document 12.
By doing so, it is possible to prevent different users from updating the encrypted document 10 or the plaintext document 12 at the same time, so that the consistency between the encrypted document 10 and the plaintext document 12 is maintained.

Embodiment 2. FIG.
FIG. 9 shows a configuration of PC 500 that is a system for storing self-extracting program 600 having a data structure according to Embodiment 2 of the present invention.
The above-described self-extracting program 200 according to the first embodiment has a configuration in consideration of security such as encryption. The self-extracting program 600 of the second embodiment has a simpler configuration when security considerations are unnecessary.

The self-extracting program 600 includes a plain text document 610 that is unencrypted document data, a decompression program 620, and an update program 630.
Since the plaintext document 610 is not encrypted, it is included in a format corresponding to the application 700, and the application 700 does not require an add-in or the like for processing the plaintext document 610.

The expansion program 620 is a program that is executed first when the execution of the self-extracting program 600 is instructed. The PC 500 functions as expansion means (not shown) by executing the expansion program 620, and performs the same processing as the flowchart of FIG. However, processing related to security, that is, steps S10, S12, and S18 are not executed.
As described above, the expansion unit according to the second embodiment creates a temporary folder, creates a copy of the plain text document 610 in the temporary folder, and starts execution of the application 700 and the update program 630.

The PC 500 functions as update means (not shown) by executing the update program 630, and performs the same processing as the flowcharts of FIGS. However, processing related to security, that is, step S46 is not executed.
As described above, when the copy of the plain text document 610 is updated, the update unit according to the second embodiment updates the self-extracting program 600 accordingly. Further, the update unit according to the second embodiment deletes the copy of the plain text document 610 and the temporary folder when the execution of the application 700 is completed.

According to the second embodiment described above, as in the first embodiment, when the self-decompression program 600 is executed, the expansion unit first activates the update unit. Further, when the user updates a copy of the decompressed plain text document, the update means automatically updates the plain text document 610 in the self-decompression program 600 in accordance with this.
Therefore, as in the first embodiment, it is unnecessary for the user to reflect the updated contents in the self-extracting program 600, and it is not necessary to prepare a program such as a self-extracting file creation tool. User convenience is improved.

It is a figure which shows the data structure which concerns on Embodiment 1 of this invention, the self-extracting program, and the structure of PC. It is a flowchart of an expansion | deployment program. It is a figure which shows the structure of PC relevant to execution of the flowchart of FIG. It is a flowchart of an update program. It is a figure which shows the structure of PC relevant to execution of the flowchart of FIG. It is a flowchart of an update program. It is a figure which shows the structure of PC relevant to execution of the flowchart of FIG. It is a figure which shows the flow of the process in which the self-decompression program of FIG. 1 is created. It is a figure which shows the structure of the data structure which concerns on Embodiment 2 of this invention, a self-extracting program, and PC.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 Cryptographic document (document data), 11 Cryptographic document copy (copy of document data), 12, 610 Plain text document (document data), 20, 620 Expansion program, 21 Expansion means, 30, 630 Update program, 31 Update means, 42 Encryption key, 44 usage rights, 50 password hash (data related to defined password), 51 password (defined password), 60 add-in data (encryption program, decryption program, restriction program), 61 add-in (encryption program, Decryption program, restriction program), 200, 600 Self-extracting program (self-extracting file).

Claims (5)

A deployment program that causes a computer to function as a deployment means;
An update program for causing the computer to function as an update unit;
Document data,
A self-extracting data structure that does not include an application program that allows the computer to view, edit, print, save, or attach an e-mail to the document data,
The expansion means expands the document data included in the data structure and creates a copy thereof, and activates the update means,
The update means determines that the copy of the document data has been updated when a time stamp of the copy of the document data is updated by the application program not included in the self-extracting data structure , A self-extracting data structure for updating the document data included in the data structure accordingly. The document data and the copy of the document data are encrypted documents encrypted using an encryption key;
The data structure is
The encryption key;
An encryption program for encrypting a plain text document using the encryption key and creating the encrypted document, causing the computer to function as an encryption unit;
Decrypting the encrypted document using the encryption key to create the plaintext document, causing the computer to function as decryption means,
A usage right that is data that restricts the usage of the encrypted document and the plaintext document;
The data structure according to claim 1, further comprising: a restriction program that restricts a method of using the encrypted document and the plaintext document according to the use right, and that causes the computer to function as a restriction unit. The data structure includes data associated with a defined password;
The expansion means receives an input password, determines whether the input password and the defined password match,
The data structure according to claim 1, wherein if the data does not match, the expansion unit does not create the copy of the document data.   A self-extracting program for causing a computer to function as self-extracting means, the self-extracting program having the data structure according to claim 1.   A computer comprising storage means and storing a self-extracting file having the data structure according to claim 1 in the storage means.

Images