JP5878146B2 - Browse control system - Google Patents

Description

  The present invention relates to a browsing control system that controls browsing of confidential information stored in a notification file.

Conventionally, transmission / reception of secret information between a plurality of users has been widely performed. Typically, a file creator transmits a file with a password to a viewer, and transmits / receives secret information (file / password) separately from the file.
According to such a method, since the file and the password are transmitted separately, a certain level of security can be ensured, but both the file and the password may be intercepted by a third party. It was not preferable.

In recent years, therefore, several attempts have been made to improve security when sending and receiving secret information. In particular, the method described in Patent Document 1 by the present inventor is well known.
In the method described in Patent Document 1, when a file creator sends a file with a first password to a viewer, the viewer attaches a second password to the file and returns the file to the creator. Then, when the creator receives the file to which the first password and the second password are attached, the creator releases the first password attached by himself and transmits it again to the viewer. Then, since the file with the second password attached by the viewer himself / herself is transmitted to the viewer, the second password attached to the file can be easily released.

Japanese Patent No. 4920093

  According to the method described in Patent Literature 1, since the password attached to the file is not transmitted, there is no possibility that the password is intercepted by a third party, and the security can be improved. However, the target file has to be reciprocated halfway between the creator and the viewer, and further improvements have been demanded.

  Therefore, an object of the present invention is to provide a browsing control system capable of improving security while reducing the number of round trips of secret information.

  (1) A browsing control system that controls browsing of secret information between a browser terminal that receives secret information and a creator terminal that sends secret information using a notification file including an encryption module and a decryption module. Based on the authentication number received by the first input receiving unit and the first input receiving unit that receives the authentication number input from the browser terminal, the encryption module of the notification file can be used. And a use setting unit that disables the use of the decryption module, a second input receiving unit that receives an instruction to store secret information in the notification file from the creator terminal, and the secret information is stored. In the state where the secret information cannot be browsed using the encryption module, and the secret information cannot be browsed by the lock unit. When state receiving the authentication number was browsing control system and a unlocking unit making available the decryption module.

  According to the browsing control system of (1), the creator of the secret information stores the encrypted secret information in the notification file and transmits it to the viewer. At this time, the notification file is set in advance so that it can be encrypted with the authentication number entered by the viewer but cannot be decrypted. Therefore, the notification file sent from the creator is intercepted. The third party who cannot do this cannot unlock the encrypted confidential information. On the other hand, since the reader can decrypt the secret information using the authentication number set by the viewer, the reader can unlock the encrypted secret information. As a result, transmission / reception between the viewer and the creator can be performed in one round trip, such as sending a notification file from the viewer to the creator, and returning a notification file (secret information storage) from the creator to the viewer. In addition, since the authentication number that enables decryption is not transmitted / received, security can be improved.

  According to the present invention, it is possible to improve security while reducing the number of round trips of target secret information.

It is a figure which shows an example of the utilization aspect of secret information transmission / reception using the browsing control system of this invention. It is a block diagram which shows the functional structure of the browsing control system of this invention. It is a figure which shows the flow of a process of the browsing control system of this invention. It is a figure which shows the flow of a process of the browsing control system of this invention. It is a figure which shows the example of a display accompanying operation | movement of the browsing control system of this invention. It is a figure which shows the example of a display accompanying operation | movement of the browsing control system of this invention. It is a figure which shows the example of a display accompanying operation | movement of the browsing control system of this invention.

Embodiments of the present invention will be described below with reference to the drawings.
FIG. 1 is a diagram illustrating an example of a usage mode of secret information transmission / reception using the browsing control system 1 of the present invention. In the present embodiment, the document A with password (PW) created by the creator is transmitted from the creator terminal 13 to the viewer terminal 11, and a password set separately from the document A with PW is stored in the PW notification file 12. The data is stored and transmitted from the creator terminal 13 to the viewer terminal 11. That is, in the present embodiment, the password set in the document A with PW is used as confidential information transmitted / received between the creator and the viewer. Of course, other information may be used as the secret information, and the document itself created by the creator may be used as the secret information.
The terminal device refers to a general computer. For example, a central processing unit (CPU) is provided as a control unit, and a memory (RAM, ROM), a hard disk (HDD), and an optical disc (CD,) are provided as storage units. DVD and the like as network communication units, various wired and wireless LAN devices as display units, for example, various displays such as liquid crystal displays and plasma displays, and operation units such as keyboards and pointing devices (mouse, tracking) Ball) and the like, and these are connected by a bus line.

  Next, FIG. 2 shows a functional configuration of the browsing control system 1 of the present invention. As shown in FIG. 2, the browsing control system 1 includes a browser terminal 11, a PW notification file 12, and a creator terminal 13.

  The PW notification file 12 includes an encryption module 121, a decryption module 122, and an information storage area 123, stores confidential information created by the creator, and travels between the creator and the viewer. To do.

The encryption module 121 encrypts the secret information stored in the information storage area 123 so that it cannot be browsed. The decryption module 122 decrypts the encrypted secret information so that it can be viewed. The encryption and decryption methods are not particularly limited as long as they are known.
Here, the encryption module 121 and the decryption module 122 are configured so as to be able to be used. The method for setting availability can be performed by any method. In this embodiment, the availability is set based on an authentication number set by the viewer as will be described later.
The information storage area 123 stores secret information created by the creator. The secret information stored in the information storage area 123 is encrypted by the encryption module 121 and transmitted from the creator to the viewer.

  The browser terminal 11 is a terminal device used by a reader of secret information, and includes a first input receiving unit 111, a usage setting unit 112, an unlocking receiving unit 113, and an unlocking unit 114. The

  The first input receiving unit 111 includes an input form displayed on the display unit, and receives an authentication number input from a viewer. Note that the authentication number is not limited to numbers, and any text information such as characters and symbols can be used.

The use setting unit 112 sets the encryption module 121 of the PW notification file 12 to be usable and sets the decryption module 122 to be unusable based on the authentication number received through the first input receiving unit 111. To do.
Specifically, the usage setting unit 112 generates an encryption PW “A” and a decryption PW “F” from the authentication number. Then, the generated encryption PW “A” and decryption PW “F” are set in the encryption module 121 and the decryption module 122, that is, the encryption module 121 is used unless the encryption PW “A” is set. The decryption module 122 is set to be unusable unless the decryption PW “F” is set. In addition, the usage setting unit 112 automatically sets the generated encryption PW “A” in the encryption module 121 to make the encryption module 121 available. On the other hand, the use setting unit 112 does not set the decryption PW “F” in the decryption module 122, and makes the decryption module 122 unusable.
Note that the authentication number, the encryption PW “A”, and the decryption PW “F” need only have an irreversible relationship, and are generated by an arbitrary method using a predetermined one-way function. be able to. Further, since the use restriction only needs to be applied to the decryption module 122, the encryption PW “A” is not necessarily generated, and the encryption module 121 may be set to be usable by flag management or the like. That is, when the first input receiving unit 111 receives the authentication number, the usage setting unit 112 may set the flag to ON and set the encryption module 121 to be usable.

  The unlocking reception unit 113 is configured by an input form or the like displayed on the display unit, and in the state where the encrypted secret information is stored in the information storage area 123 of the PW notification file 12, an authentication number is received from the viewer. Accepts input.

  The unlocking unit 114 makes the decryption module 122 available based on the authentication number received by the unlocking receiving unit 113. Specifically, the unlocking unit 114 generates a decryption PW from the authentication number received by the unlocking reception unit 113 using the one-way function used by the usage setting unit 112, and generates the decryption PW generated Is set in the decryption module 122.

At this time, when the set decryption PW matches the decryption PW “F” set in the decryption module 122, the decryption module 122 can be used and stored in the information storage area 123. The secret information thus decrypted is decrypted by the decryption module 122. As a result, the secret information created by the creator can be browsed.
On the other hand, if the set decryption PW does not match the decryption PW “F” set in the decryption module 122, the use restriction of the decryption module 122 is not released and the information storage is performed. The secret information stored in the area 123 is not decrypted.

The creator terminal 13 is a terminal device used by a creator of secret information, and includes a second input receiving unit 131 and a locking unit 132.
The second input receiving unit 131 receives an input of secret information from the creator. The input secret information is stored in the information storage area 123 of the PW notification file 12. As described above, in the present embodiment, the password set in the document A with PW is used as secret information, and therefore the second input receiving unit 131 can be configured by an input form or the like displayed on the display unit. .
The locking unit 132 sets the secret information stored in the information storage area 123 to a state where it cannot be browsed by encrypting it using the encryption module 121.

  The functional configuration of the browsing control system 1 of the present invention has been described above. Subsequently, a processing flow of the browsing control system 1 will be described with reference to FIGS.

  With reference to FIG. 3, the 1st input reception part 111 of the browser terminal 11 receives the input of an authentication number from a browser first (step S1). Then, the use setting unit 112 of the browser terminal 11 generates an encryption PW “A” and a decryption PW “F” that are difficult to reproduce the authentication number from the received authentication number (step S2). Subsequently, the use setting unit 112 of the browser terminal 11 sets the generated encryption PW “A” in the encryption module 121 to make the encryption module 121 available (step S3). On the other hand, the usage setting unit 112 of the browser terminal 11 does not set the decryption PW “F” in the decryption module 122 and leaves the decryption module 122 unusable (step S4). ).

  As described above, when the availability setting of the encryption module 121 (step S3) and the availability setting of the decryption module 122 (step S4) are completed, the viewer transmits the PW notification file 12 to the creator. (Step S5).

  Subsequently, the second input receiving unit 131 of the creator terminal 13 that has received the PW notification file 12 receives input of secret information (password) from the creator (step S6), and the received secret information is transferred to the PW notification file. 12 information storage areas 123 (step S7). Then, when storing the secret information, the locking unit 132 of the creator terminal 13 operates the encryption module 121 (step S8), and locks by encrypting the secret information stored in the information storage area 123 (step S8). S9).

  Thus, when the encrypted secret information is stored in the information storage area 123, the creator transmits the PW notification file 12 to the viewer (step S10).

  Referring to FIG. 4, the unlocking reception unit 113 of the browser terminal 11 that has received the PW notification file storing the secret information receives an input of an authentication number from the viewer (step S11). Then, the unlocking unit 114 of the browser terminal 11 generates a decryption PW from the received authentication number (step S12), and sets the generated decryption PW in the decryption module 122 (step S13). At this time, if the authentication number accepted in step S1 and the authentication number accepted in step S11 match, the same decryption PW “F” is generated, and if they do not match, different decryption PWs are generated. Will be generated. Therefore, when both authentication numbers match, the decryption module 122 is set with the decryption PW “F”, and the decryption module 122 can be used. When both authentication numbers do not match, the decryption module 122 Thus, the decryption PW “F” is not set and the decryption module 122 remains unavailable. Then, when the decryption module 122 becomes available, the unlocking unit 114 of the browser terminal 11 operates the decryption module 122 to decrypt the encryption of the secret information stored in the information storage area 123 and open it. Lock (step S14).

  When the encrypted secret information is decrypted in this way, the browser terminal 11 extracts the secret information from the PW notification file 12 and displays it on the display unit, thereby notifying the viewer of the secret information. (Step S15).

  The flow of processing of the browsing control system 1 of the present invention has been described above. Next, the operation of restricting the browsing of confidential information by the browsing control system 1 performed by such processing will be described with reference to display examples shown in FIGS.

  FIG. 5A shows a display example of the PW notification file 12 displayed on the viewer terminal 11. The PW notification file 12 includes an input unit 210 for a viewer to input an authentication number, and a PW input unit 220 for a creator to input secret information (password).

  The input unit 210 includes an input form 211, an authentication button 212, an unlock button 213, and a setting status display unit 214.

  The input form 211 is an authentication number input field, and the authentication number is input by the viewer. The authentication button 212 and the unlock button 213 are operation buttons for registering the input authentication number. Specifically, the authentication button 212 is operated when the usage setting unit 112 sets the usage of the encryption module 121 and the decryption module 122, and the unlock button 213 is used to decrypt the secret information by the unlocking unit 114. When operated. That is, when the viewer operates the authentication button 212 after inputting the authentication number in the input form 211, the authentication number is input (step S1 in FIG. 3), and the password is generated by the use setting unit 112 (step S2 in FIG. 3). ) Etc. are performed. Further, when the reader operates the unlock button 213 after inputting the authentication number in the input form 211, the authentication number is input (step S11 in FIG. 4), and the password is generated by the unlocking unit 114 (step in FIG. 4). S12) and the like are performed.

  The setting status display unit 214 displays the current status of the input unit 210. In FIG. 5A, it is displayed that authentication is not set. “Authentication is not set” means that the authentication number has not yet been input (step S1 in FIG. 3). When the authentication number is input, the setting status display unit 214 displays that authentication is being set (see FIG. 5 (2)). “Authentication is being set” means that the use setting of the encryption module 121 and the decryption module 122 has been completed.

  The PW input unit 220 includes an input form 221, a lock button 222, and a setting status display unit 223.

  The input form 221 is a secret information input field, and the creator inputs secret information (password set in the document with PW). The lock button 222 is an operation button for registering the input secret information. When the creator operates the lock button 222 after inputting the secret information in the input form 221, the secret information is input (see FIG. 3). Step S6), the operation of the encryption module (step S8 in FIG. 3), etc. are performed.

  The setting status display unit 223 displays the current status of the PW input unit 220. In FIG. 5A, it is displayed that the secret information cannot be set. As shown in FIG. 5 (2), when authentication is being set, the setting status display unit 223 displays that the secret information can be set, and as shown in FIG. 6 (4), When the information is registered, the setting status display unit 223 displays that the secret information is being set.

Returning to FIG. 5A, first, the viewer inputs the authentication number in the input form 211 of the input unit 210 and operates the authentication button 212. Then, the authentication number is set. That is, based on the authentication number, the encryption module 121 is set to be usable, and the decryption module 122 is set to be unusable.
As a result, as shown in FIG. 5B, the lock button 222 of the PW input unit 220 becomes active, and the PW input unit 220 can be used. Thereafter, the PW notification file 12 is transmitted from the viewer terminal 11 to the creator terminal 13.

Referring to FIG. 6 (3), the creator who has received the PW notification file 12 that can be used by the PW input unit 220 subsequently inputs secret information into the input form 221 of the PW input unit 220. The lock button 222 is operated. Then, secret information is set. That is, the encryption module 121 is activated, and the input secret information is encrypted, and the secret information cannot be browsed.
As a result, as shown in FIG. 6 (4), the unlock button 213 of the input unit 210 becomes active, and the input unit 210 can be used. Thereafter, the PW notification file 12 is transmitted from the creator terminal 13 to the viewer terminal 11.

  Referring to FIG. 7 (5), the viewer who has received the PW notification file 12 that can be used by the input unit 210 subsequently inputs the authentication number into the input form 211 of the input unit 210 and unlocks it. The button 213 is operated. Then, verification of the authentication number is performed. That is, a decryption PW is generated from the authentication number, and it is determined whether or not it matches the decryption PW “F” set in the decryption module 122. As a result, if they match, the encrypted secret information is decrypted by the decryption module 122 and the secret information is displayed to the viewer.

The embodiment of the browsing control system 1 of the present invention has been described above. In such a browsing control system 1, the creator stores and returns the secret information to the PW notification file 12 transmitted from the viewer to the creator, so that the secret information is exchanged between the viewer and the creator. Transmission / reception is completed. That is, transmission / reception of secret information can be realized in one round trip between the viewer and the creator.
At this time, since the PW notification file 12 is set in advance so that it can be encrypted but cannot be decrypted, even if a third party intercepts the PW notification file 12, The person cannot decrypt the stored secret information, and can increase security. In addition, the information (authentication number) for enabling decryption is sufficient if only the viewer knows it, and it is not necessary to notify other people at all. Unusable settings cannot be unlocked and security can be increased.

  The embodiment of the present invention has been described above, but the present invention is not limited to the present embodiment, and modifications, improvements, and the like within the scope that can achieve the object of the present invention are included in the present invention.

DESCRIPTION OF SYMBOLS 1 Browsing control system 11 Browser terminal 111 1st input reception part 112 Usage setting part 113 Unlocking reception part 114 Unlocking part 12 PW notification file 121 Encryption module 122 Decryption module 123 Information storage area 13 Creator terminal 131 1st 2-input reception part 132 Locking part

Claims (1)

A browsing control system that controls browsing of secret information between a browser terminal that receives secret information and a creator terminal that sends secret information using a notification file including an encryption module and a decryption module,
A first input receiving unit for receiving an input of an authentication number from the browser terminal;
Based on the authentication number received by the first input receiving unit, the use setting unit that makes the encryption module of the notification file usable and makes the decryption module unusable,
A second input receiving unit that receives input of secret information from the creator terminal and stores the received secret information in the notification file;
In a state where the secret information is stored, a locking unit that makes it impossible to browse the secret information using the encryption module;
When the authentication number is received in a state where the secret information can no longer be browsed by the locking unit, an unlocking unit that makes the decryption module available,
A browsing control system comprising:

Images