JP5179319B2 - Electronic document management apparatus and electronic document management method - Google Patents

Description

  The present invention relates to an electronic document management apparatus and an electronic document management method for guaranteeing the authenticity of an electronic document, and more particularly to an electronic document management apparatus and an electronic document management method capable of efficiently providing an electronic signature.

Since it is easy to change the content of an electronic document, it is not easy to confirm whether the electronic document is from a legitimate creator or is not altered by anyone other than the legitimate creator.
Therefore, conventionally, an electronic signature is known as a technique for the purpose of guaranteeing the creator of an electronic document and preventing falsification of the created electronic document. By making an electronic signature, it is possible to prove that the electronic document including the creator has not been tampered with.

However, electronic documents are usually updated due to the nature of being easy to change and the ability to easily handle large amounts of data.
Therefore, a document to be subjected to an electronic signature is divided into constituent elements, and an electronic signature is assigned to each constituent element.

However, if the amount of data in an electronic document increases and the number of components increases, the amount of processing when an electronic signature is added increases. Also, the amount of work for verifying the electronic signature increases.
Therefore, there is a technique for calculating a hash value for each divided component and attaching an electronic signature to data obtained by combining the calculated hash values (see, for example, Patent Document 1).
JP 2005-51734 A

  The range of handling electronic documents will continue to increase, and the demand for revisions such as correction, correction, addition or deletion of electronic documents will also increase. Even if there is a revision, it is necessary to ensure sufficient authenticity of the electronic document and at the same time reduce the processing amount for guaranteeing it.

  However, in the conventional technique, when the divided components change due to revision, the hash value is recalculated, and a new electronic signature is added to the data obtained by combining the recalculated hash values. When such processing is performed, the digital signature is assigned by arranging the revised components, and the processing time for generating the hash value and applying the electronic signature is not reduced.

  SUMMARY An advantage of some aspects of the invention is that it provides an electronic document management apparatus and an electronic document management method capable of reducing a processing burden at the time of revision of an electronic document.

In order to solve the above-described problem, the present invention is an electronic document management apparatus that manages an electronic document composed of a plurality of constituent elements so as to guarantee authenticity, and is configured to acquire two or more constituent elements of an electronic document as a group An element acquisition unit; an electronic document recording unit capable of recording the acquired group of component elements; an identification information addition unit that assigns unique identification information to the component element; and a hash that generates a hash value for each of the component elements A value generating means, an electronic signature giving means for giving an electronic signature to the data obtained by combining the generated hash values, and one electron constituted by one or more constituent elements included in the group of the constituent elements Configuration information receiving means for receiving configuration information representing a configuration for each document, and for each electronic document based on the configuration information, the identification information, the hash value, and the Management information generating means for generating management information associated with correspondence with an electronic signature, revision information receiving means for receiving revision information for instructing revision for each component constituting the one electronic document, and the one electronic When the document component is revised, the identification information of the revised component, the hash value for each revised component, and the data obtained by combining the generated hash values There is provided an electronic document management apparatus comprising: management information updating means for updating the management information with update management information associated with the correspondence with the electronic signature.

According to such an electronic document management apparatus, the constituent elements of two or more electronic documents are acquired as a group by the constituent element acquisition means. The electronic document recording means records the acquired group of components . Unique identification information is given to the component by the identification information giving means. A hash value is generated for each component by the hash value generation means. An electronic signature is attached to the data obtained by combining the generated hash values by the electronic signature attaching means. The configuration information accepting unit accepts configuration information representing the configuration of one electronic document composed of one or more components. The management information generating means generates management information that associates the correspondence between the identification information, the hash value, and the electronic signature for each electronic document based on the configuration information. The revision information accepting unit accepts revision information instructing revision for each component constituting one electronic document. When the component of one electronic document is revised by the management information updating means, the identification information of the component to be revised, the hash value for each component to be revised, and each of the generated hash values The management information is updated with the update management information that correlates the correspondence with the electronic signature for the data combined with.

In order to solve the above-described problem, the present invention is an electronic document management apparatus that manages an electronic document composed of a plurality of constituent elements so as to guarantee authenticity, and acquires two or more constituent elements of the electronic document as a group. Generating a hash value for each of the constituent elements, an electronic document recording means capable of recording the acquired group of constituent elements, an identification information giving means for giving unique identification information to the constituent elements, A hash value generation means that requests the external certification authority to issue a time stamp to the combined data of the generated hash values, and a time stamp issuance request means that receives the time stamp issued from the external certification authority; Configuration information for receiving configuration information representing a configuration for each electronic document configured by one or more of the configuration elements included in the group of the configuration elements For each electronic document based on the configuration information, management information that associates the correspondence between the identification information, the hash value, and the time stamp issued from the external certification authority is generated based on the configuration information Management information generating means, revision information accepting means for accepting revision information for instructing revision for each component constituting the one electronic document, and revision when the component of the one electronic document is revised. The update management information that associates the correspondence between the identification information of the constituent element that becomes, the hash value for each of the constituent elements that become the revision, and the time stamp for the data that combines the generated hash values Thus, an electronic document management apparatus comprising a management information updating means for updating the management information is provided.

According to such an electronic document management apparatus, the constituent elements of two or more electronic documents are acquired as a group by the constituent element acquisition means. The electronic document recording means records the acquired group of components . Unique identification information is given to the component by the identification information giving means. A hash value is generated for each component by the hash value generation means. The time stamp issuance requesting means requests the external certification authority to issue a time stamp to the combined data of the generated hash values, and receives the time stamp from the external certification authority. The configuration information accepting unit accepts configuration information representing the configuration of one electronic document composed of one or more components. The management information generating means generates management information that associates the correspondence between the identification information, the hash value, and the time stamp issued from the external certification authority for each electronic document based on the configuration information. The revision information accepting unit accepts revision information instructing revision for each component constituting one electronic document. When the component of one electronic document has been revised by the management information updating means, the identification information of the component to be revised, the hash value for each component to be revised, and the generated hash value are combined. The management information is updated with the update management information that correlates the correspondence with the time stamp for the processed data.

  According to the disclosed electronic document management apparatus, it is possible to reduce the processing burden when the electronic document is revised.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. First, an outline of the present embodiment will be described, and then specific contents of the present embodiment will be described.
FIG. 1 is a diagram illustrating an outline of an electronic document management apparatus according to an embodiment. The electronic document management apparatus 100 illustrated in FIG. 1 assigns an electronic signature to an electronic document, and generates a correspondence relationship between the electronic document and the electronic signature for the electronic document as management information. If the electronic document is revised, an electronic signature is assigned to the revised part of the electronic document, and a correspondence relationship between the revised part of the electronic document and the revised part of the electronic signature is generated. Update the management information by reflecting the correspondence of the revised part to the management information before the revision. The electronic document management apparatus 100 includes an electronic document recording unit 1, an identification information adding unit 2, a hash value generating unit 3, an electronic signature adding unit 4, a configuration information receiving unit 5, a management information generating unit 6, a revision information receiving unit 7, and a management. It has information update means 8.

The electronic document recording unit 1 records an electronic document to be managed by dividing it into predetermined components. Alternatively, electronic documents composed of a plurality of components are recorded in advance as a group of electronic documents.
The identification information giving means 2 gives unique identification information uniquely determined in the system to each component of the electronic document. The hash value generation unit 3 generates a hash value for each component of the electronic document using a predetermined hash function. The electronic signature assigning means 4 assigns an electronic signature to data obtained by combining hash values of each component of the electronic document.

  The configuration information receiving unit 5 receives configuration information representing the configuration of one electronic document composed of one or more components. The management information generating unit 6 generates management information for each electronic document. The management information indicates the correspondence between the identification information of the component specified by the configuration information, the hash value corresponding to the component, and the electronic signature for the combined data including the hash value.

  The revision information accepting unit 7 accepts revision information representing a revision configuration of one electronic document composed of components that have been subject to revision. The management information update unit 8 generates revision management information of the revision target part. The revision part of the management information of the electronic document before the revision is updated with the generated revision management information. Similarly to the management information, the revision management information indicates the correspondence between the identification information of the component specified by the configuration information, the hash value corresponding to the component, and the electronic signature for the combined data including the hash value.

  As a result, it is only necessary to generate a hash value and give an electronic signature to the revision target part at the time of revision, and it is not necessary to generate a hash value and attach an electronic signature to all the electronic documents that were revised at the time of revision. The processing burden at the time of revision of the electronic document can be reduced.

Hereinafter, the embodiment will be described more specifically.
[First Embodiment]
First, a first embodiment will be described in detail with reference to the drawings.

  FIG. 2 is a diagram illustrating a hardware configuration of the electronic document management apparatus according to the first embodiment. The entire electronic document management apparatus 100 is controlled by a CPU (Central Processing Unit) 101. A random access memory (RAM) 102, a hard disk drive (HDD) 103, a communication interface 104, a graphic processing device 105, and an input / output interface 106 are connected to the CPU 101 via a bus 107.

  The RAM 102 temporarily stores at least part of an OS (Operating System) program and application programs to be executed by the CPU 101. The RAM 102 stores various data necessary for processing by the CPU 101. The HDD 103 stores an OS program and application programs. The communication interface 104 is connected to the network 70.

  A monitor 71 is connected to the graphic processing device 105. The graphic processing device 105 displays an image on the screen of the monitor 71 in accordance with a command from the CPU 101. The input / output interface 106 transmits a signal sent from the scanner 72, the keyboard 73, the mouse 74, and the IC card 76 inserted in the IC card reader 75 to the CPU 101 via the bus 107. Further, a DMAC (Direct Memory Access Controller) (not shown) transmits a signal transmitted from the scanner 72 to the RAM 102 or the HDD 103 without passing through the CPU 101. With the hardware configuration as described above, the processing functions of the present embodiment can be realized.

  FIG. 3 is a block diagram illustrating functions of the electronic document management apparatus according to the first embodiment. The document storage unit 17, the data registration unit 10, and the data verification unit 20 illustrated in FIG. 3 are provided in the electronic document management apparatus 100. The electronic document management apparatus 100 is connected to a TSA (Time Stamping Authority) certificate authority 112 via a network 70.

  The document storage unit 17 is accessed from the data registration unit 10 and the data verification unit 20. The document storage unit 17 includes an input data storage unit 17A, a signature data storage unit 17B, a configuration management information storage unit 17C, and an update history information storage unit 17D.

  The data registration unit 10 performs registration for electronic documents, management for guaranteeing authenticity of electronic documents, and version management of electronic documents. Here, the authenticity assurance of the electronic document includes a guarantee that the signer and contents of the electronic document use the electronic signature, and a guarantee that the creation date and time of the electronic document uses a time stamp. The data registration unit 10 includes a data input unit 11, a hash generation unit 12, a signature issue unit 13, a configuration management setting unit 14, an update history setting unit 15, and a time stamp issue request unit 16.

  The data input unit 11 inputs an electronic document to be stored, configuration information representing the configuration of the electronic document, and revision information representing the revision configuration of the electronic document. Here, the electronic document is not necessarily limited to text data composed of characters, but may be image data captured from an optical reading unit such as the scanner 72, audio data captured from a microphone or a music playback device, and the like. Any data format can be used as long as it is a target managed for guaranteeing the performance. Data input is performed by connecting a data conversion device such as a scanner 72 and a microphone, a data reading device for reading data from a storage medium such as a flash memory, a CD (Compact Disc), and a DVD (Digital Versatile Disk) to the input / output interface 106. . Data is input via a network to which the communication interface 104 is connected. The input electronic document is divided into predetermined components and stored in the input data storage unit 17A. At this time, unique identification information uniquely determined in the system is assigned to each component of the electronic document, and corresponding identification information of each component is stored in the input data storage unit 17A together with each component. .

  The predetermined component is a predetermined data unit. For example, in the case of image data, one electronic document is composed of a plurality of pages with one page as one data unit. In the case of image data such as a form, one electronic document is composed of a plurality of items constituting the form with image data for each item as one data unit. Similarly, if it is page data, a page, a sentence, a paragraph, a chapter, etc. can be made into a component as a data unit. In the case of a database, one record can be a component. In this way, the constituent elements of the electronic document can be arbitrary data units. In general, the size of a component is a data unit to be added, deleted, or changed at the time of revision.

In the present embodiment, image data consisting of a plurality of pages will be described as an electronic document using one page of image data as a data unit (component).
The hash generation unit 12 generates a hash value for each component of the electronic document stored in the input data storage unit 17A. The hash value can be generated using, for example, a known hash function MD5 (Message Digest algorithm 5). As many hash values as the number of components constituting the electronic document are generated. The generated group of hash values is stored in the signature data storage unit 17B.

  The signature issuing unit 13 reads out a group of hash values generated by the hash generation unit 12 from the signature data storage unit 17B and combines them into one data. Then, an electronic signature is issued for the combined data (hereinafter, combined data). In issuing an electronic signature, signature data obtained by encrypting the combined data with the signer's private key and certificate data that proves that the decryption public key corresponding to the private key belongs to the signer. Is done. The signature data and certificate data are stored in the signature data storage unit 17B as a signature file together with a group of hash values constituting the electronic document. The secret key used for encryption is stored in the IC card 76 inserted in the IC card reader 75 connected via the input / output interface 106 in the electronic document management apparatus 100. When the combined data is transmitted to the IC card 76, the IC card 76 encrypts the combined data with a secret key stored therein and outputs signature data. Depending on the security of the electronic document management apparatus 100, a secret key may be stored in the electronic document management apparatus 100, and the electronic document management apparatus 100 may encrypt the combined data and generate signature data. In this case, the IC card 76 inserted in the IC card reader 75 stores the signature data issued by the certification authority, and the signature data is acquired by an acquisition request to the IC card.

  The configuration management setting unit 14 sets, as configuration management information, the correspondence between the identification information of the component constituting the electronic document including one or more components, the hash value of the component, and the electronic signature for the combined data including the component. And stored in the configuration management information storage unit 17C.

The update history setting unit 15 sets an update history when the electronic document is updated, and stores the update history in the update history information storage unit 17D.
The time stamp issuance request unit 16 requests the TSA certificate authority 112 to issue a time stamp for the combined data. The TSA certificate authority 112 issues a time stamp for the combined data. The time stamp issuance request unit 16 stores the issued time stamp as a time stamp file in the signature data storage unit 17B. The TSA certificate authority 112 is a general external certificate authority that is network-connected to the electronic document management apparatus 100 via the communication interface 104. The network connection is performed using a secure communication protocol such as SSL (Secure Socket Layer) communication.

  The data verification unit 20 verifies the authenticity of the registered and version-managed electronic document. Here, verification of the authenticity of the electronic document includes verification of the signer and contents of the electronic document and verification of the creation date and time of the electronic document. The data verification unit 20 includes a document acquisition unit 21, a data acquisition unit 22, a hash verification unit 23, a signature acquisition unit 24, a signature verification unit 25, a configuration management acquisition unit 26, a time stamp acquisition unit 27, and a time stamp verification unit 28. .

  The document acquisition unit 21 accesses the document storage unit 17 on behalf of the data verification unit 20. The document storage unit 17 is accessed to acquire the component of the electronic document to be verified, signature data for verification, and configuration management information. The latest configuration management information of the electronic document to be verified is read from the configuration management information storage unit 17C. Since the configuration management information includes identification information of the constituent elements that constitute the electronic document to be verified, the constituent elements stored in the input data storage unit 17A are identified and acquired using the identification information as a key. Further, since the configuration management information includes the electronic signature of the electronic document, the signature file stored in the signature data storage unit 17B is specified and acquired by the electronic signature.

The data acquisition unit 22 refers to the configuration management information, and acquires the component to be verified and the verification data.
The hash verification unit 23 refers to the configuration management information and extracts a hash value corresponding to the component from the signature file. Also, a new hash value is generated from the component, and the hash value is verified by comparing it with the hash value extracted from the signature file. As a result of the verification, if the two match, tampering is not permitted (authentic), and if they do not match, tampering is permitted (no authenticity).

The signature acquisition unit 24 refers to the configuration management information and acquires a signature file corresponding to the component.
The signature verification unit 25 verifies the signature using the signature file acquired by the signature acquisition unit 24.

The configuration management acquisition unit 26 acquires configuration management information via the document acquisition unit 21.
The time stamp acquisition unit 27 refers to the configuration management information and acquires a time stamp file corresponding to the component.

The time stamp verification unit 28 refers to the configuration management information, extracts a time stamp corresponding to the component from the time stamp file, and verifies the time stamp.
As a result, it is only necessary to generate a hash value and give an electronic signature to the revision target part at the time of revision, and it is not necessary to generate a hash value and attach an electronic signature to all the electronic documents that were revised at the time of revision. The processing burden at the time of revision of the electronic document can be reduced.

  Further, at the time of revision, it is only necessary to give a time stamp to the part to be revised, and it is not necessary to give a new time stamp to all the electronic documents that have been revised at the time of revision, so the processing burden at the time of revision of the electronic document can be reduced.

  Next, a state at the time of initial registration of the electronic document will be described with reference to FIGS. The electronic document is set to the first version at the time of initial registration. Then, a management information file (configuration management information) is generated for each version. FIG. 4 is a diagram showing an outline of electronic document initial registration according to the first embodiment.

  Document A (first version) 41 and document B (first version) 42 are electronic documents that are initially registered. It is more efficient to give a signature in a certain unit (electronic document registration unit) than to give a signature to each of the document A (first version) 41 and document B (first version) 42. A signature is given after the documents are put together. A certain unit is, for example, a document unit set in a sheet feeder of a scanner. In this way, unique identification information is assigned to each page (component) of the electronic document that is collectively taken into the electronic document management apparatus 100. In addition, the document configuration (configuration information) is received from an operation input from the keyboard 73 and the mouse 74 or a file input such as a configuration definition file, and the document A (first version) 41 is data A-1, data A-2. , Data A-3 and data A-4 are registered. Similarly, it is registered that the document B (first version) 42 includes data B-1, data B-2, data B-3, and data B-4.

  Then, a hash is obtained for each component (data A-1, data A-2, data A-3, data A-4, data B-1, data B-2, data B-3, data B-4). Values (hash A-1, hash A-2, hash A-3, hash A-4, hash B-1, hash B-2, hash B-3, hash B-4) are generated. A signature α (S1) is given to the group of hash values 44. A signature α file 43 is generated including a group of hash values 44 and a signature α (S1). The signature α file 43 is stored in the signature data storage unit 17B as an accompanying configuration file of the document A (first version) 41 and the document B (first version) 42, or as an independent signature α document.

  As a result, even if the initially registered electronic document is large, the data to be signed can be reduced. In addition, since a plurality of documents or a plurality of components need only be signed once, a response for signature addition is improved.

  FIG. 5 is a diagram illustrating configuration management information at the time of initial registration of the electronic document according to the first embodiment. The document A (first version) configuration management information file 45 is a management information file of the document A (first version) 41. Correspondences between identification information of component elements, signature files, and hash values are managed for each component element. Since document A (first version) 41 is initially registered, document A (first version) configuration management information file 45 is registered as the first version. In addition, since each component is given a signature at the same time, each component is associated with the same signature file. The document B (first version) configuration management information file 46 is a management information file of the document B (first version) 42. Correspondences between identification information of component elements, signature files, and hash values are managed for each component element. Since document B (first version) 42 is initially registered, document B (first version) configuration management information file 46 is registered as the first version. In addition, since each component is given a signature at the same time, each component is associated with the same signature file. In addition, since each component of the document A (first version) 41 and the document B (first version) 42 is simultaneously signed, each component is associated with the same signature file even if the documents are different. ing.

  Next, the state of electronic document update registration will be described with reference to FIGS. When the electronic document is registered for update, the management information file of the previous version is updated and the version number is increased. A management information file (configuration management information) is generated for each version, and the old version is also stored and held.

FIG. 6 is a diagram showing an outline of electronic document update registration according to the first embodiment.
A document A (second version) 47 is an electronic document to be updated and registered. Update registration is performed only for data A-2a and data A-5, which are pages to be updated. Data A-2a is a replacement page from data A-2, and data A-5 is a newly added page. The page to be updated is also taken into the electronic document management apparatus 100 as an electronic document collected by a plurality of pages. The electronic documents that are collectively taken in this way are given unique identification information for each page (component).

  Then, a hash value (hash A-2a, hash A-5) is generated for each component (data A-2a, data A-5). A signature β (S2) is given to the group of hash values 49. A signature β file 48 is generated including a group of hash values 49 and a signature β (S2). The signature β file 48 is stored in the signature data storage unit 17B as an incidental configuration file of the document A (second version) 47 or as an independent signature β document.

  Thereby, in order to guarantee the authenticity of the electronic document that has been updated and registered, it is not necessary to sign an electronic document including an electronic document that has not been updated. Since it is possible to reduce the data to be signed at the time of updating the electronic document, the response of adding the signature at the time of updating is improved.

  FIG. 7 is a diagram illustrating configuration management information at the time of electronic document update registration according to the first embodiment. The document A (second version) configuration management information file 50 is a management information file of the document A (second version) 47.

  A document configuration (revised information) is received from an operation input from the keyboard 73 or mouse 74 or a file input such as a configuration definition file, and document A (second edition) 47 is data A-1, data A-2a, data A-3, data A-4, and data A-5 are registered. Since document A (second version) 47 is update registration for revising document A (first version) 41, document A (second version) configuration management information file 50 is registered as the second version. In addition, since the signatures given by the constituent elements are different, each constituent element is associated with a different signature file depending on the constituent elements.

  The document A (second version) configuration management information file 50 is stored in the configuration management information storage unit 17C as the latest version, and the document A (first version) configuration management information file 45 is stored as the old version in the configuration management information storage unit. Stored in 17C.

Next, an electronic document signature verification method will be described with reference to FIG. FIG. 8 is a diagram illustrating an outline of signature verification of an electronic document according to the first embodiment.
When the electronic signature of the document A (second version) 47 is verified, the document A (second version) configuration management information file 50 is referred to. According to the document A (second edition) configuration management information file 50, the document A (second edition) 47 is composed of data A-1, data A-2a, data A-3, data A-4, and data A-5. It can be seen that it consists of five pages. Among them, the data A-1, the data A-3, and the data A-4 are attached with the electronic signature of the signature α (S1), and the data A-2a and the data A-5 are signed β (S2). ) Is attached. Here, in order to verify the authenticity of each page data stored (managed) in the document storage unit 17, the signature α (S1) and the signature β (S2) are first verified. Here, if all electronic signatures are guaranteed, each page data is verified on the assumption that the electronic signature is guaranteed. Each page data is verified by comparing the hash value included in each signature file with the correspondence of the document A (second version) configuration management information file 50 with the hash value generated from each page data. When the hash values match, the authenticity of each page data is guaranteed.

  Next, in the case where a document A made up of a plurality of pages of paper medium is captured from the scanner 72 and registered as the electronic document A, processing of each functional block at the time of initial registration of the electronic document will be specifically described with reference to a sequence diagram. . FIG. 9 is a sequence diagram of electronic document initial registration according to the first embodiment.

  The data input unit 11 reads a document from the scanner 72 and inputs data D1. Further, the document configuration (configuration information) R1 is received from an operation input from the keyboard 73 and the mouse 74 or a file input such as a configuration definition file. The data D1 is divided into unit image data (components) (unit division 11A). For example, when the data D1 is composed of four pages of image data, it is divided into page data D1A, page data D1B, page data D1C, and page data D1D.

  Then, unique identification information within the system is assigned to the image data (component) of the page unit (identification information addition 11B). For example, the serial number 123456 (N1A) as identification information for the page data D1A, the serial number 123457 (N1B) as identification information for the page data D1B, the serial number 123458 (N1C) as identification information for the page data D1C, and the identification number for the page data D1D. A serial number 123459 (N1D) is given as information. The page data to which the identification information is added is stored in the document database 18.

  The identification information may be assigned with identification information reserved in advance at the time of unit division, or may be designated by an operator. Further, an identification number such as a serial number may be automatically assigned to facilitate management of identification information. The identification information is not limited to an identification number, and may be an identification symbol or the like so that an operator can easily specify a document. The document configuration R1 specifies page data constituting the document A. As a result, the page data D1A, page data D1B, page data D1C, and page data D1D can be determined to be the document A.

  The hash generation unit 12 generates a hash value (hash generation 12A) using a predetermined hash function (for example, MD5) for each page data (component) divided by the data input unit 11 as a unit. For example, a hash a (H1A) is generated from the page data D1A, a hash b (H1B) is generated from the page data D1B, a hash c (H1C) is generated from the page data D1C, and a hash d (H1D) is generated from the page data D1D. The generated hash value is transmitted to the configuration management setting unit 14.

  The signature issuing unit 13 issues an electronic signature for data (combined data) obtained by combining a group of hash values corresponding to each component generated by the hash generation unit 12. By transmitting the combined data to the IC card 76 connected to the electronic document management apparatus 100, the IC card 76 generates a signature α (S1) obtained by encrypting the combined data with the secret key stored therein, and the certificate 29 ( An electronic signature is issued with a certificate data) (signature issuance 13A). For example, a signature α (S1) obtained by encrypting the combined data of the hash a (H1A), the hash b (H1B), the hash c (H1C), and the hash d (H1D) with a secret key is generated, and a certificate 29 is attached. Issue an electronic signature. The issued signature data and certificate data of the electronic signature are transmitted to the configuration management setting unit 14 as a signature file. Alternatively, the connected IC card 76 holds the signature data issued by the certification authority, acquires the signature data S1 by the acquisition request to the IC card 76, and attaches the certificate 29 (certificate data). To issue an electronic signature (signature issue 13A).

  The configuration management setting unit 14 sets the configuration management information 30 by associating the identification information given by the data input unit 11, the hash value generated by the hash generation unit 12, and the signature file issued by the signature issuing unit 13 ( Configuration management information setting 14A). The set configuration management information 30 is stored in the document database 18.

  The update history setting unit 15 sets the update history information 31 based on the document configuration (configuration information) R1 received by the data input unit 11 (update history information setting 15A). The update history information 31 includes the date and time of revision, the revision person, the revision content, and the like. The set update history information 31 is stored in the document database 18.

The document storage unit 17 includes a document database 18 and stores and stores various data.
Next, in the case where a revised document composed of a plurality of pages of paper medium is fetched from the scanner 72 and the electronic document A is revised and updated, the processing of each functional block at the time of electronic document update registration is concretely described with reference to a sequence diagram. Explained. FIG. 10 is a sequence diagram of electronic document update registration according to the first embodiment.

  The data input unit 11 reads a document from the scanner 72 and inputs data D2. Also, the document configuration (revised information) R2 is received from an operation input from the keyboard 73 or the mouse 74 or a file input such as a configuration definition file. The data D2 is divided (unit division 11A) into page-unit image data (components). For example, when the data D2 is composed of two pages of image data, it is divided into page data D2A and page data D2B.

  Then, unique identification information within the system is assigned to the image data (component) of the page unit (identification information addition 11B). For example, serial number 456456 (N2A) is assigned as identification information to page data D2A, and serial number 456457 (N2B) is assigned as identification information to page data D2B. The page data to which the identification information is added is stored in the document database 18.

  The document configuration (revised information) R2 specifies identification information to be updated of the document A and update contents. Thereby, for example, it can be determined that the page data D1B is replaced with the page data D2A, and the revision is such that the page data D2B is added after the page data D1D.

  The hash generation unit 12 generates a hash value (hash generation 12A) using a predetermined hash function (for example, MD5) for each page data (component) divided by the data input unit 11 as a unit. For example, a hash e (H2A) is generated from the page data D2A, and a hash f (H2B) is generated from the page data D2B. The generated hash value is transmitted to the configuration management setting unit 14.

  The signature issuing unit 13 issues an electronic signature for data (combined data) obtained by combining a group of hash values corresponding to each component generated by the hash generation unit 12. By transmitting the combined data to the IC card 76 connected to the electronic document management apparatus 100, the IC card 76 generates a signature β (S2) obtained by encrypting the combined data with the secret key stored therein, and the certificate 29 ( An electronic signature is issued with a certificate data) (signature issuance 13A). For example, a signature β (S2) obtained by encrypting combined data of the hash e (H2A) and the hash f (H2B) with a secret key is generated, and an electronic signature is issued with the certificate 29 attached. The issued signature data and certificate data of the electronic signature are transmitted to the configuration management setting unit 14 as a signature file.

  The configuration management setting unit 14 reads the identification information given by the data input unit 11, the hash value generated by the hash generation unit 12, and the signature file issued by the signature issuing unit 13 from the document database 18 in association with each other. The latest configuration management information 30A is updated, and the revised configuration management information 30B is set (configuration management information setting 14A). The set configuration management information 30B is stored in the document database 18.

  The update history setting unit 15 sets the update history information 31 (update history information setting 15A) based on the document configuration (revised information) R2 received by the data input unit 11. The update history information 31 includes the date and time of revision, the revision person, the revision content, and the like. The set update history information 31 is stored in the document database 18.

The document storage unit 17 includes a document database 18 and stores and stores various data.
Next, in the case of verifying the authenticity of the electronic document, the processing of each functional block at the time of verifying the electronic document will be specifically described with reference to the sequence of FIGS. First, the process up to acquisition of data necessary for verification will be described. FIG. 11 is a sequence diagram of electronic document verification (data acquisition) according to the first embodiment.

  The document acquisition unit 21 acquires the latest configuration management information 30 </ b> A of the document A from the document database 18. By referring to the latest configuration management information 30A, the page data D2A and D2B updated in the latest version and the signature file corresponding to the page data D2A and D2B are acquired (latest version document acquisition 21A). If there is a revision, the old version of the page data D1A to D1D and the signature file corresponding to the page data D1A to D1D are acquired (old version document acquisition 21B). If there is a further old version, all the page data and the corresponding signature file are obtained in the same manner. The acquired latest configuration management information 30 </ b> A is notified to the configuration management acquisition unit 26.

  The configuration management acquisition unit 26 acquires the latest configuration management information 30A (configuration management information acquisition 26A) via the document acquisition unit 21. The configuration management acquisition unit 26 instructs the data acquisition unit 22 to acquire the latest version of data from management information related to the latest version (for example, the second version) of the configuration management information 30A. The data acquisition unit 22 acquires the page data D2A and D2B updated with the latest version from the document acquisition unit 21 based on an instruction from the configuration management acquisition unit 26 (data acquisition 22A).

  Further, the configuration management acquisition unit 26 instructs the signature acquisition unit 24 to acquire the latest version of the signature file from the management information related to the latest version (for example, the second version) of the configuration management information 30A. The signature acquisition unit 24 acquires signature files corresponding to the page data D2A and D2B updated in the latest version from the document acquisition unit 21 based on an instruction from the configuration management acquisition unit 26 (signature acquisition 24A). Here, the acquired signature file includes a certificate 29, a signature β (S2), and a group of hashes H2 to be signed. The group of hashes H2 includes a hash e (H2A) and a hash f (H2B).

  Next, when there is an old version, the configuration management acquisition unit 26 has information on the old version (before one revision of the latest version) from the management information related to the latest version (for example, the second version) of the configuration management information 30A. When the determination is made, the data acquisition unit 22 is instructed to acquire the data of the old version (for example, the first version). The data acquisition unit 22 acquires D1D from the page data D1A updated or newly registered in the old version from the document acquisition unit 21 based on an instruction from the configuration management acquisition unit 26 (data acquisition 22B).

  Further, the configuration management acquisition unit 26 instructs the signature acquisition unit 24 to acquire the old version of the signature file from the management information related to the old version of the configuration management information 30A. Based on an instruction from the configuration management acquisition unit 26, the signature acquisition unit 24 acquires signature files corresponding to the page data D1A to D1D updated or newly registered in the old version from the document acquisition unit 21 (signature acquisition 24B). Here, the acquired signature file includes a certificate 29, a signature α (S1), and a group of hashes H1 that are the subject of the signature. The group of hashes H1 includes a hash a (H1A), a hash b (H1B), a hash c (H1C), and a hash d (H1D).

Next, verification of an electronic signature will be described. FIG. 12 is a sequence diagram of electronic document verification (electronic signature verification) according to the first embodiment.
The signature verification unit 25 reads the signature files corresponding to the page data D2A and D2B updated in the latest version from the signature acquisition unit 24 and verifies them (latest version signature verification 25A). Specifically, the signature β (S2) (signature data) is decrypted using the public key certified by the certificate 29. The data obtained by decryption is compared with the combined data of the hash e (H2A) and the hash f (H2B) (latest version signature verification 25A). If the comparison result is determined (25B) and does not match, the verification of the signature β (S2) is rejected (25F), and the authenticity of the electronic document is not guaranteed. If the comparison result is determined (25B) and they match, the old version is determined (25C) in order to perform similar signature verification for the old version. Here, if there are no more old versions, the verification of the signature β (S2) is accepted (25G), and first, the authenticity of the electronic signature is guaranteed.

  Next, the signature verification unit 25 reads the signature file corresponding to the old version of the page data D1A to D1D from the signature acquisition unit 24 and verifies (signature verification 25D). Specifically, the signature α (S1) (signature data) is decrypted using the public key certified by the certificate 29. The data obtained by the decryption is compared with the combined data from the hash a (H1A) to the hash d (H1D) (old version signature verification 25D). If the comparison result is determined (25E) and does not match, the verification of the signature α (S1) is rejected (25F), and the authenticity of the electronic document is not guaranteed. If the comparison result is determined (25E) and they match, the presence or absence of a further old version is determined (25C) in order to perform the same signature verification for the further old version. Here, if there is no more old version, the verification of the signature α (S1) is accepted (25G), and first, the authenticity of the electronic signature is guaranteed.

  In this way, hash verification is performed if authenticity is guaranteed for all electronic signatures in the configuration management information. If at least one of the electronic signatures is not guaranteed to be authentic, a result in which the authenticity of the electronic document is denied is derived and the verification process is terminated.

Next, verification of the hash value will be described. FIG. 13 is a sequence diagram of electronic document verification (hash value verification) according to the first embodiment.
When the signature verification unit 25 accepts the signature verification, the hash verification unit 23 verifies the hash value. First, the page data D2A and D2B are acquired from the data acquisition unit 22 and a hash value is generated (hash generation 23A). Next, the hash e (H2A) and the hash f (H2B) are acquired and compared from the signature file whose signature verification corresponding to the page data D2A and D2B updated in the latest version is accepted (hash comparison verification 23B). . If the comparison result is determined (23C) and does not match, the hash verification is rejected (23H), and the authenticity of the electronic document is not guaranteed. If the comparison result is determined (23C) and they match, the old version is determined (23D) for the same hash verification for the old version. Here, if there is no older version, hash verification is accepted (23I), and the authenticity of the electronic document is guaranteed.

  Next, the hash verification unit 23 acquires D1D from the old version of the page data D1A from the data acquisition unit 22 and generates a hash value (hash generation 23E). Next, the hash d (H1D) is acquired from the hash a (H1A) from the signature file for which the signature verification corresponding to the old version of the page data D1A to D1D has been accepted and compared (hash comparison verification 23F). If the comparison result is determined (23G) and does not match, the hash verification is rejected (23H), and the authenticity of the electronic document is not guaranteed. If the comparison result is determined (23G) and the two match, the same hash verification is performed for the further old version, and the presence / absence of the further old version is determined (23D). Here, if there is no older version, hash verification is accepted (23I), and the authenticity of the electronic document is guaranteed.

  In this way, if the authenticity of the electronic document corresponding to all the electronic signatures in the configuration management information is guaranteed, the verification of the authenticity of the electronic document is terminated. If at least one of the electronic documents is not guaranteed to be authentic, a result in which the authenticity of the electronic document is denied is derived and the verification process is terminated.

[Second Embodiment]
In the first embodiment, an example has been described in which the authenticity of an electronic document is guaranteed by using the electronic signature for the signer and contents of the electronic document. Next, in the second embodiment, an example will be described in which the authenticity of an electronic document is guaranteed with respect to the creation date and time of the electronic document using a time stamp.

  The time stamp in this embodiment is a time stamp issued by the TSA certificate authority 112 requesting the TSA certificate authority 112 to issue a time stamp for the combined data, and issued by the TSA certificate authority 112 for the combined data. . The issued time stamp is stored in the signature data storage unit 17B as a time stamp file.

First, an electronic document time stamp verification method will be described with reference to FIG. FIG. 14 is a diagram showing an outline of time stamp verification of an electronic document according to the second embodiment.
When verifying the time stamp of the document A that has been revised and has the second edition, the document A (second edition) configuration management information file 53 is referred to. According to the document A (second edition) configuration management information file 53, the document A (second edition) 47 includes data A-1, data A-2a, data A-3, data A-4, and data A-5. It can be seen that it consists of five pages. Of these, the time stamp t1 (TS1) is attached to the data A-1 and data A-3, and the time stamp t2 (TS2) is assigned to the data A-2a, data A-4, and data A-5. It can be seen that is attached. Here, in order to verify the time stamp of each page data stored (managed) in the document storage unit 17, the time stamp t1 (TS1) and the time stamp t2 (TS2) are first verified. Here, if all time stamps are guaranteed, each page data is verified on the assumption that the time stamp is guaranteed. Each page data is verified by comparing the hash value included in each time stamp file with the correspondence of the document A (second version) configuration management information file 53 with the hash value generated from each page data. When the hash values match, the authenticity of each page data is guaranteed. Here, the time stamp file includes a time stamp and a group of hashes subjected to the time stamp. A group of hashes includes a hash value of each page data.

  Next, in the case where a document A made up of a plurality of pages of paper medium is captured from the scanner 72 and registered as the electronic document A, processing of each functional block at the time of initial registration of the electronic document will be specifically described with reference to a sequence diagram. . FIG. 15 is a sequence diagram of electronic document initial registration according to the second embodiment.

  The data input unit 11 reads a document from the scanner 72 and inputs data D1. Further, the document configuration (configuration information) R1 is received from an operation input from the keyboard 73 and the mouse 74 or a file input such as a configuration definition file. The data D1 is divided into unit image data (components) (unit division 11A). For example, when the data D1 is composed of three pages of image data, the data is divided into page data D1A, page data D1B, and page data D1C.

  Then, unique identification information within the system is assigned to the image data (component) of the page unit (identification information addition 11B). For example, serial number 123456 (N1A) is assigned as identification information to page data D1A, serial number 123457 (N1B) is assigned as identification information to page data D1B, and serial number 123458 (N1C) is assigned as identification information to page data D1C. The page data to which the identification information is added is stored in the document database 18. The document configuration R1 specifies page data constituting the document A. As a result, the page data D1A, page data D1B, and page data D1C can be determined to be the document A.

  The hash generation unit 12 generates a hash value (hash generation 12A) using a predetermined hash function (for example, MD5) for each page data (component) divided by the data input unit 11 as a unit. For example, a hash a (H1A) is generated from the page data D1A, a hash b (H1B) is generated from the page data D1B, and a hash c (H1C) is generated from the page data D1C. The generated hash value is transmitted to the configuration management setting unit 14.

  The time stamp issuance request unit 16 generates a hash t1 (Ht1) as data (combined data) obtained by combining a group of hash values corresponding to each component generated by the hash generation unit 12. Then, the TSA certificate authority 112 is requested to issue a time stamp for the hash t1 (Ht1). The TSA certificate authority 112 issues a time stamp t1 (TS1) (TS issue 112A). When the time stamp issuance request unit 16 acquires the time stamp t1 (TS1), it transmits it to the configuration management setting unit 14.

  The configuration management setting unit 14 associates the identification information given by the data input unit 11, the hash value generated by the hash generation unit 12, and the time stamp file acquired from the time stamp issuance request unit 16 with the configuration management information 30. Is set (configuration management information setting 14A). The set configuration management information 30 is stored in the document database 18.

  The update history setting unit 15 sets the update history information 31 based on the document configuration (configuration information) R1 received by the data input unit 11 (update history information setting 15A). The update history information 31 includes the date and time of revision, the revision person, the revision content, and the like. The set update history information 31 is stored in the document database 18.

The document storage unit 17 includes a document database 18 and stores and stores various data.
Next, in the case where a revised document composed of a plurality of pages of paper medium is fetched from the scanner 72 and the electronic document A is revised and updated, the processing of each functional block at the time of electronic document update registration is concretely described with reference to a sequence diagram. Explained. FIG. 16 is a sequence diagram of electronic document update registration according to the second embodiment.

  The data input unit 11 reads a document from the scanner 72 and inputs data D2. Also, the document configuration (revised information) R2 is received from an operation input from the keyboard 73 or the mouse 74 or a file input such as a configuration definition file. The data D2 is divided (unit division 11A) into page-unit image data (components). For example, when the data D2 is composed of three pages of image data, the data is divided into page data D2A, page data D2B, and page data D2C.

  Then, unique identification information within the system is assigned to the image data (component) of the page unit (identification information addition 11B). For example, serial number 456456 (N2A) is assigned as identification information to page data D2A, serial number 456457 (N2B) is assigned as identification information to page data D2B, and serial number 456458 (N2C) is assigned as identification information to page data D2C. The page data to which the identification information is added is stored in the document database 18.

  The document configuration (revised information) R2 specifies identification information to be updated of the document A and update contents. Thereby, for example, it can be determined that the page data D1B is replaced with the page data D2A, and the page data D2B and the page data D2C are added after the page data D1C.

  The hash generation unit 12 generates a hash value (hash generation 12A) using a predetermined hash function (for example, MD5) for each page data (component) divided by the data input unit 11 as a unit. For example, a hash e (H2A) is generated from the page data D2A, a hash f (H2B) is generated from the page data D2B, and a hash g (H2C) is generated from the page data D2C. The generated hash value is transmitted to the configuration management setting unit 14.

  The time stamp issuance request unit 16 generates a hash t2 (Ht2) as data (combined data) obtained by combining a group of hash values corresponding to each component generated by the hash generation unit 12. The TSA certificate authority 112 is requested to issue a time stamp for the hash t2 (Ht2). The TSA certificate authority 112 issues a time stamp t2 (TS2) (TS issue 112A). When the time stamp issuance request unit 16 acquires the time stamp t2 (TS2), it transmits it to the configuration management setting unit 14.

  The configuration management setting unit 14 associates the identification information given by the data input unit 11, the hash value generated by the hash generation unit 12, and the time stamp file acquired from the time stamp issuance request unit 16, thereby creating a document database 18. The latest configuration management information 30A read from is updated, and the revised configuration management information 30B is set (configuration management information setting 14A). The set configuration management information 30 is stored in the document database 18.

  The update history setting unit 15 sets the update history information 31 (update history information setting 15A) based on the document configuration (revised information) R2 received by the data input unit 11. The update history information 31 includes the date and time of revision, the revision person, the revision content, and the like. The set update history information 31 is stored in the document database 18.

The document storage unit 17 includes a document database 18 and stores and stores various data.
Next, in the case where the authenticity of the electronic document is guaranteed with respect to the creation date and time of the electronic document using the time stamp, the processing of each functional block at the time of verification of the electronic document is specifically described using the sequence of FIGS. explain. First, the process up to acquisition of data necessary for verification will be described. FIG. 17 is a sequence diagram of electronic document verification (data acquisition) according to the second embodiment.

  The document acquisition unit 21 acquires the latest configuration management information 30 </ b> A of the document A from the document database 18. By referring to the latest configuration management information 30A, the page data D2A to D2C and the time stamp file corresponding to the page data D2A to D2C updated in the latest version are acquired (latest version document acquisition 21A). If there is a revision, the old version of the page data D1A to D1C and the time stamp file corresponding to the page data D1A to D1C are acquired (old version document acquisition 21B). If there is a further old version, all the page data and the corresponding time stamp file are obtained in the same manner. The acquired latest configuration management information 30 </ b> A is notified to the configuration management acquisition unit 26.

  The configuration management acquisition unit 26 acquires the latest configuration management information 30A (configuration management information acquisition 26A) via the document acquisition unit 21. The configuration management acquisition unit 26 instructs the data acquisition unit 22 to acquire the latest version of data from management information related to the latest version (for example, the second version) of the configuration management information 30A. The data acquisition unit 22 acquires the page data D2A to D2C updated with the latest version from the document acquisition unit 21 based on an instruction from the configuration management acquisition unit 26 (data acquisition 22A).

  In addition, the configuration management acquisition unit 26 instructs the time stamp acquisition unit 27 to acquire the latest version of the time stamp file from the management information related to the latest version (for example, the second version) of the configuration management information 30A. The time stamp acquisition unit 27 acquires time stamp files corresponding to the page data D2A to D2C updated with the latest version from the document acquisition unit 21 based on an instruction from the configuration management acquisition unit 26 (time stamp acquisition 27A). Here, the acquired time stamp file includes a time stamp t2 (TS2) and a group of hashes H2 to be time stamped. The group of hashes H2 includes a hash e (H2A), a hash f (H2B), and a hash g (H2C).

  Next, when there is an old version, the configuration management acquisition unit 26 has information on the old version (before one revision of the latest version) from the management information related to the latest version (for example, the second version) of the configuration management information 30A. When the determination is made, the data acquisition unit 22 is instructed to acquire the data of the old version (for example, the first version). Based on an instruction from the configuration management acquisition unit 26, the data acquisition unit 22 acquires the page data D1A to D1C updated or newly registered from the document acquisition unit 21 (data acquisition 22B).

  Further, the configuration management acquisition unit 26 instructs the time stamp acquisition unit 27 to acquire the old version time stamp file from the management information related to the old version of the configuration management information 30A. The time stamp acquisition unit 27 acquires time stamp files corresponding to the page data D1A to D1C updated or newly registered in the old version from the document acquisition unit 21 based on an instruction from the configuration management acquisition unit 26 (time stamp acquisition 27B). . Here, the acquired time stamp file includes a time stamp t1 (TS1) and a group of hashes H1 subjected to the time stamp. The group of hashes H1 includes a hash a (H1A), a hash b (H1B), and a hash c (H1C).

Next, time stamp verification will be described. FIG. 18 is a sequence diagram of electronic document verification (time stamp verification) according to the second embodiment.
The time stamp verification unit 28 reads the time stamp file corresponding to the page data D2A to D2C updated in the latest version from the time stamp acquisition unit 27 and verifies (the latest version time stamp verification 28A). Specifically, the certificate of the TSA certificate authority 112 is acquired, and the time stamp t2 (TS2) is decrypted using the public key certified by the certificate. The data obtained by the decryption is compared with the hash t2 (Ht2) generated as the combined data of the hash e (H2A), the hash f (H2B), and the hash g (H2C) (latest version time stamp verification 28A). If the comparison result is determined (28B) and does not match, the verification of the time stamp t2 (TS2) is rejected (28F), and the authenticity of the electronic document is not guaranteed. If the comparison result is determined (28B) and the two match, the old version is determined (28C) for the same time stamp verification. Here, if there is no more old version, the verification of the time stamp t2 (TS2) is accepted (28G), and first, the authenticity of the time stamp is guaranteed.

  Next, the time stamp verification unit 28 reads the time stamp file corresponding to the old version of the page data D1A to D1C from the time stamp acquisition unit 27 and performs verification (old version time stamp verification 28D). The certificate of the TSA certificate authority 112 is acquired, and the time stamp t1 (TS1) is decrypted using the public key certified by the certificate. The data obtained by the decryption is compared with the hash t1 (Ht1) generated as the combined data of the hash a (H1A), the hash b (H1B), and the hash c (H1C) (old version time stamp verification 28D). If the comparison result is determined (28E) and there is a mismatch, the verification of the time stamp t1 (TS1) is rejected (28F), and the authenticity of the electronic document is not guaranteed. If the comparison result is determined (28E) and the two match, the same time stamp verification is performed for the further old version, and the presence / absence of the further old version is determined (28C). Here, if there is no more old version, the verification of the time stamp t1 (TS1) is accepted (28G), and first, the authenticity of the time stamp is guaranteed.

  In this way, hash verification is performed if authenticity is guaranteed for all time stamps in the configuration management information. If at least one of the time stamps is not guaranteed to be authentic, a result in which the authenticity of the electronic document is denied is derived and the verification process is terminated.

Next, verification of the hash value will be described. FIG. 19 is a sequence diagram of electronic document verification (hash value verification) according to the second embodiment.
The hash verification unit 23 verifies the hash value when the time stamp verification unit 28 accepts the time stamp verification. First, D2C is acquired from the page data D2A from the data acquisition unit 22, and a hash value is generated (hash generation 23A). Next, the hash e (H2A), the hash f (H2B), and the hash g (H2C) are acquired and compared from the time stamp file for which the time stamp verification corresponding to the page data D2A to D2C updated in the latest version is accepted. (Hash comparison verification 23B). If the comparison result is determined (23C) and does not match, the hash verification is rejected (23H), and the authenticity of the electronic document is not guaranteed. If the comparison result is determined (23C) and they match, the old version is determined (23D) for the same hash verification for the old version. Here, if there is no older version, hash verification is accepted (23I), and the authenticity of the electronic document is guaranteed.

  Next, the hash verification unit 23 acquires old version page data D1A to D1C from the data acquisition unit and generates a hash value (hash generation 23E). Next, the hash a (H1A), the hash b (H1B), and the hash c (H1C) are acquired and compared from the time stamp file for which the time stamp verification corresponding to the old page data D1A to D1C has been accepted (hash comparison). Verification 23F). If the comparison result is determined (23G) and does not match, the hash verification is rejected (23H), and the authenticity of the electronic document is not guaranteed. If the comparison result is determined (23G) and the two match, the same hash verification is performed for the further old version, and the presence / absence of the further old version is determined (23D). Here, if there is no older version, hash verification is accepted (23I), and the authenticity of the electronic document is guaranteed.

  In this way, if the authenticity of the electronic document corresponding to all the time stamps in the configuration management information is guaranteed, the verification of the authenticity of the electronic document is terminated. If at least one of the electronic documents is not guaranteed to be authentic, a result in which the authenticity of the electronic document is denied is derived and the verification process is terminated.

  In the first embodiment, the signer and the content of the electronic document are used to guarantee the authenticity of the electronic document using the electronic signature. In the second embodiment, the electronic document is created using the time stamp. Although the embodiment for guaranteeing the authenticity of the electronic document with respect to the date and time has been described, it is possible to use both together.

[Third Embodiment]
FIG. 20 is a diagram illustrating a system configuration of an electronic document management system according to the third embodiment. The first embodiment is different from the first embodiment in that the electronic document management system 120 is configured by distributing and arranging the functions of the electronic document management apparatus 100 on a network.

  The electronic document management system 120 includes a network 70, a data registration terminal 110 connected to the network 70, a data verification terminal 111, and a document storage server 113. The data registration terminal 110, the data verification terminal 111, and the document storage server 113 have the same hardware configuration as that of the electronic document management apparatus 100 in FIG. 2, and are connected to the network 70 via a communication interface to transmit / receive information to / from each other. . The electronic document management system 120 communicates with the TSA certificate authority 112 for issuing a time stamp using a secure communication protocol such as SSL communication.

  The data registration terminal 110 includes a data registration unit 10. The data verification terminal 111 includes a data verification unit 20. The document storage server 113 includes a document storage unit 17. The data registration terminal 110 and the data verification terminal 111 may include a plurality of units.

  Although the electronic document management apparatus of the present invention has been described based on the illustrated embodiment, the present invention is not limited to this, and the configuration of each part of the electronic document management apparatus 100 has the same function. Any configuration can be substituted. Moreover, other arbitrary structures and processes may be added to the present invention. Further, the present invention may be a combination of any two or more configurations (features) of the above-described embodiments.

  When a part of the processing functions provided in the electronic document management apparatus 100 is realized by software, a program describing the processing contents of the function is provided. By executing the program on a computer, the above processing functions are realized on the computer.

  The program describing the processing contents can be recorded on a computer-readable medium. Examples of the computer-readable recording medium include a magnetic recording device, an optical disk, a magneto-optical recording medium, and a semiconductor memory. Examples of the magnetic recording device include a hard disk device (HDD), a flexible disk (FD), and a magnetic tape. Examples of the optical disk include a DVD, a DVD-RAM, a CD-ROM (Read Only Memory), and a CD-R (Recordable) / RW (ReWritable). Examples of the magneto-optical recording medium include an MO (Magnet-Optical disk).

  When distributing the program, for example, portable recording media such as a DVD and a CD-ROM in which the program is recorded are sold. It is also possible to store the program in a storage device of a server computer and transfer the program from the server computer to another computer via a network.

  The computer that executes the program stores, for example, the program recorded on the portable recording medium or the program transferred from the server computer in its own storage device. Then, the computer reads the program from its own storage device and executes processing according to the program. The computer can also read the program directly from the portable recording medium and execute processing according to the program. In addition, each time the program is transferred from the server computer, the computer can sequentially execute processing according to the received program.

It is a figure which shows the outline | summary of the electronic document management apparatus of embodiment. It is a figure which shows the hardware constitutions of the electronic document management apparatus of 1st Embodiment. It is a block diagram which shows the function of the electronic document management apparatus of 1st Embodiment. It is a figure which shows the outline | summary of the electronic document initial registration of 1st Embodiment. It is a figure which shows the structure management information at the time of the electronic document initial registration of 1st Embodiment. It is a figure which shows the outline | summary of the electronic document update registration of 1st Embodiment. It is a figure which shows the structure management information at the time of electronic document update registration of 1st Embodiment. It is a figure which shows the outline | summary of the signature verification of the electronic document of 1st Embodiment. It is a sequence diagram of the electronic document initial registration of the first embodiment. It is a sequence diagram of the electronic document update registration of 1st Embodiment. It is a sequence diagram of electronic document verification (data acquisition) of the first embodiment. FIG. 5 is a sequence diagram of electronic document verification (electronic signature verification) according to the first embodiment. It is a sequence diagram of electronic document verification (hash value verification) of the first embodiment. It is a figure which shows the outline | summary of the time stamp verification of the electronic document of 2nd Embodiment. It is a sequence diagram of the electronic document initial registration of the second embodiment. It is a sequence diagram of the electronic document update registration of 2nd Embodiment. It is a sequence diagram of electronic document verification (data acquisition) of the second embodiment. It is a sequence diagram of electronic document verification (time stamp verification) of the second embodiment. It is a sequence diagram of electronic document verification (hash value verification) of the second embodiment. It is a figure which shows the system configuration | structure of the electronic document management system of 3rd Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Electronic document recording means 2 Identification information provision means 3 Hash value generation means 4 Electronic signature provision means 5 Configuration information reception means 6 Management information generation means 7 Revision information reception means 8 Management information update means 100 Electronic document management apparatus

Claims (8)

An electronic document management apparatus that manages an electronic document composed of a plurality of components so as to guarantee authenticity,
Component acquisition means for acquiring two or more electronic document components as a group;
An electronic document recording means capable of recording the obtained group of components;
Identification information giving means for giving unique identification information to the component;
Hash value generating means for generating a hash value for each of the components;
An electronic signature giving means for giving an electronic signature to data obtained by combining the generated hash values;
Configuration information receiving means for receiving configuration information representing a configuration for each electronic document configured by one or more of the components included in the group of the components;
Management information generating means for generating management information that associates the correspondence between the identification information, the hash value, and the electronic signature for each electronic document based on the configuration information;
Revision information receiving means for receiving revision information for instructing revision for each component constituting the one electronic document;
When the component of the one electronic document is revised, the identification information of the component to be revised, the hash value for each of the components to be revised, and the data obtained by combining the generated hash values Management information update means for updating the management information with update management information associated with the correspondence with the electronic signature for
An electronic document management apparatus comprising: The management information update means includes management information storage means for storing the management information,
2. The management information storage unit according to claim 1, wherein when the management information is updated with the update management information, the management information before the update and the management information after the update are subjected to version management and stored in the management information storage unit. Electronic document management device. The electronic document management device includes:
An electronic signature verification means for verifying the authenticity of all the electronic signatures corresponding to the components constituting the one electronic document from the management information;
A data verification unit that verifies the authenticity of the data that is the signature of the electronic signature when the electronic signature is verified as authentic by the electronic signature verification unit;
The electronic document management apparatus according to claim 2, further comprising: An electronic document management apparatus that manages an electronic document composed of a plurality of components so as to guarantee authenticity,
Component acquisition means for acquiring two or more electronic document components as a group;
An electronic document recording means capable of recording the obtained group of components;
Identification information giving means for giving unique identification information to the component;
Hash value generating means for generating a hash value for each of the components;
A request to issue a time stamp to an external certificate authority for the data obtained by combining the generated hash values, and a time stamp issue request means for receiving the time stamp from the external certificate authority;
Configuration information receiving means for receiving configuration information representing a configuration for each electronic document configured by one or more of the components included in the group of the components;
Management information generation means for generating management information that associates the correspondence between the identification information, the hash value, and the time stamp issued from the external certification authority for each electronic document based on the configuration information When,
Revision information receiving means for receiving revision information for instructing revision for each component constituting the one electronic document;
When the component of the one electronic document is revised, the identification information of the component to be revised, the hash value for each of the components to be revised, and the data obtained by combining the generated hash values Management information update means for updating the management information with update management information related to the correspondence with the time stamp for
An electronic document management apparatus comprising: The management information update means includes management information storage means for storing the management information,
5. The management information storage unit according to claim 4, wherein when the management information is updated with the update management information, the management information before the update and the management information after the update are subjected to version management and stored in the management information storage unit. Electronic document management device. The electronic document management device includes:
Time stamp verification means for verifying the authenticity of all the time stamps corresponding to the components constituting the one electronic document from the management information;
A data verification unit that verifies the authenticity of the data targeted by the time stamp when the time stamp is verified by the time stamp verification unit;
The electronic document management apparatus according to claim 5, further comprising: An electronic document management method for an electronic document management apparatus that manages an electronic document composed of a plurality of components so as to guarantee authenticity,
Obtaining two or more electronic document components as a group;
Recording the obtained group of components;
Providing unique identification information to the component;
Generating a hash value for each of the components;
Giving an electronic signature to data obtained by combining the generated hash values;
Receiving configuration information representing a configuration for each electronic document configured by one or more of the components included in the group of the components;
Generating management information associating correspondence between the identification information, the hash value, and the electronic signature for each electronic document based on the configuration information;
Receiving revision information instructing revision for each component constituting the one electronic document;
When the component of the one electronic document is revised, the identification information of the component to be revised, the hash value for each of the components to be revised, and the data obtained by combining the generated hash values Updating the management information with the update management information associated with the correspondence with the electronic signature for
An electronic document management method for an electronic document management apparatus, comprising: An electronic document management method for an electronic document management apparatus that manages an electronic document composed of a plurality of components so as to guarantee authenticity,
Obtaining two or more electronic document components as a group;
Recording the obtained group of components;
Providing unique identification information to the component;
Generating a hash value for each of the components;
Requesting an external certification authority to issue a time stamp for the combined data of the generated hash values, and receiving the time stamp issuance from the external certification authority; and
Receiving configuration information representing a configuration for each electronic document configured by one or more of the components included in the group of the components;
Generating management information associating the correspondence between the identification information, the hash value, and the time stamp issued from the external certification authority for each electronic document based on the configuration information;
Receiving revision information instructing revision for each component constituting the one electronic document;
When the component of the one electronic document is revised, the identification information of the component to be revised, the hash value for each of the components to be revised, and the data obtained by combining the generated hash values Updating the management information with the update management information associated with the correspondence with the time stamp for
An electronic document management method for an electronic document management apparatus, comprising:

Images