JP6886350B2 - Program, time stamp management device and time stamp management method - Google Patents

Description

The present invention relates to a program capable of managing a time stamp token of an electronic file, a time stamp management device, and a time stamp management method.

For example, a time stamp token is added to electronic data such as documents, images, videos, figures, and sounds, and proof that the electronic data existed at the date and time indicated by the time information included in the time stamp token (existence proof). ), And time authentication technology that facilitates proof (integrity proof) that the electronic data has not been tampered with after that date and time is widespread.

To explain this technology concretely by taking the case where the electronic data is document data as an example, the user generates a hash value of the document data contained in the document file and sends this hash value to the time authentication authority. Send and request the time certification body to issue a time stamp. In response to this, the time certification body generates a time stamp token by digitally signing the received hash value, time information indicating the time stamp issuance time, and the like with a private key. Normally, the digital certificate of the time certification body is also included in the time stamp token. This digital certificate contains a public key used to verify the signature of the time certification authority on the time stamp token. Then, the time certification body sends a response including the time stamp token to the user who requested the issuance of the time stamp.

The user receives the time stamp token from the time authentication authority and adds the received time stamp token to the document file. For example, when the document file is a PDF file, the user can embed the time stamp token in the PDF file. As a result, the user can manage the document data and the time stamp token in a single document file.

The following Patent Document 1 describes a time authentication technique using a time stamp. However, Patent Document 1 does not describe a technique for managing a time stamp token integrated with an electronic file by adding the time stamp token to the electronic file.

Japanese Unexamined Patent Publication No. 2016-170643

Currently, a time stamp storage service is provided in which a specific institution keeps time stamp tokens from users and stores them. Hereinafter, a specific institution that provides a time stamp storage service is referred to as a "time stamp storage institution". According to the time stamp storage service, the user can deposit the time stamp token in the time stamp storage institution and can safely store it for a long period of time.

When the user manages the time stamp token integrated with the electronic file by adding the time stamp token to the electronic file, it is added to the electronic file when the time stamp token is deposited in the time stamp storage institution. It is desirable to extract the obtained time stamp token from the electronic file and generate a time stamp token file containing the extracted time stamp token. Therefore, at present, a time stamp management device has been developed in which a time stamp token added to an electronic file is extracted from the electronic file to generate a time stamp token file, and the time stamp token file is stored in a storage unit. By using the time stamp management device, the user can generate a time stamp token file corresponding to the electronic file to which the time stamp token is added, and send the time stamp token file to the time stamp storage organization. Therefore, the deposit of the time stamp token can be realized.

In addition, when depositing time stamp tokens in a time stamp storage institution, it is desirable to verify whether the time stamp tokens are valid for storage and deposit only valid time stamp tokens in the time stamp storage institution. .. Hereinafter, the validity of the object to be stored in the time stamp storage organization is referred to as "storage validity". Therefore, it is desirable that the time stamp management device has a function of verifying the storage validity of the time stamp token added to the electronic file before generating the time stamp token file. The verification items for the storage validity of the time stamp token include, for example, that the electronic file to which the time stamp token is attached has not been tampered with after the time indicated by the time information included in the time stamp token, and that the time stamp token includes it. The signature on the digital certificate is normal, the digital certificate included in the time stamp token is within its expiration date, the signature on the time stamp token is normal, and the time stamp token. It is possible that the digital certificate included in is not revoked.

In addition, the following three results can be considered as the verification results of the storage validity of the time stamp token attached to the electronic file. In the following, verification is performed for one verification item regarding the storage validity of the time stamp token, and if a result is obtained in which the storage validity of the time stamp token is affirmed, the result of the one verification item is obtained. Is "good", and if the result that the storage validity of the time stamp token is not affirmed is not obtained, the result of the one verification item is described as "not good". For example, verification was performed on the verification item that the electronic file to which the time stamp token was added was not tampered with after the time indicated by the time information included in the time stamp token, and the time stamp token was added accordingly. If the result is that the electronic file has not been tampered with after the time indicated by the time information contained in the time stamp token, the result of this verification item is stated as "good".
(1) All verification items are verified against the time stamp token attached to the electronic file, and the verification results of all the verification items are good. (2) The time stamp token attached to the electronic file. On the other hand, some verification items were verified, and all the verification results of some of the verification items were good, but the remaining verification items were not verified due to some kind of failure (3). One of the verification items is verified for the time stamp token attached to the electronic file, and the verification result of the verification item is not good. The handling of the time stamp token file generated by the time stamp management device is these. It depends on the verification result of. That is, in the case of the verification result of (1) above, since the storage validity of the time stamp token included in the time stamp token file generated by the time stamp management device is recognized, the user can use the time stamp token file. You can immediately deposit it in a time stamp storage organization. On the other hand, in the case of the verification result of (2) above, the storage validity of the time stamp token included in the time stamp token file generated by the time stamp management device must be verified again for the unverified verification items. Since it is unknown, the user needs to verify the unverified verification item of the time stamp token again. On the other hand, in the case of the verification result of (3) above, since the storage validity of the time stamp token included in the time stamp token file generated by the time stamp management device is not recognized, the user can use the time stamp token file. Should not be deposited in a time stamp storage agency.

In this way, considering that the handling of the time stamp token file generated by the time stamp management device differs depending on the verification result of the storage validity of the time stamp token, for example, the time stamp token generated by the time stamp management device can be used. Have a function to facilitate the handling of the time stamp token file by the user, such as classifying the files according to the verification result of the storage validity of the time stamp token, and send it to the time stamp storage organization of the time stamp token file. It is desirable to improve the efficiency of the deposit work.

The present invention has been made in view of the above-mentioned problems, for example, and the subject of the present invention is that the user can easily handle the time stamp token file according to the verification result of the storage validity of the time stamp token. The purpose of the present invention is to provide a program, a time stamp management device, and a time stamp management method capable of improving the efficiency of depositing a time stamp token file into a time stamp storage organization.

In order to solve the above problems, the program of the present invention includes a time stamp token containing the main data, a hash value of the main data, time information given by the time certification body, and a public key certificate of the time certification body. The time stamp token of the electronic file designation unit that specifies the electronic file stored in the storage unit and the electronic file specified by the electronic file designation unit is appropriate as a storage target in the time stamp storage organization. Duplicate the time stamp token of the electronic file specified by the electronic file specification unit and the verification unit that verifies multiple verification items to verify whether or not the storage validity that means that there is is recognized. A time stamp token file containing the duplicated time stamp token is generated, and the generated time stamp token file is used as a fixed time stamp token file, or a provisional time stamp token file whose storage mode is different from that of the fixed time stamp token file. It is a program for operating a computer as a time stamp management device including a time stamp token file generation unit that stores data in the storage unit, and the time stamp token file generation unit is an electronic file designated by the electronic file designation unit. If the verification unit verifies all the verification items among the plurality of verification items and the verification results of all the verification items are good, the generated time stamp token is generated. The file is stored in the storage unit as a fixed time stamp token file, and the verification unit verifies some of the verification items among the multiple verification items for the time stamp token of the electronic file specified by the electronic file designation unit. If the remaining verification items are not verified due to a failure, and the verification results of some verification items are all good, the generated time stamp token file is used as a provisional time stamp token file. The time stamp token stored in the storage unit and held by the electronic file specified by the electronic file designation unit is verified by the verification unit for any one of a plurality of verification items, and the verification item of the verification item is verified. If the verification result is not good, the time stamp token file is not generated.

In the program of the present invention, the verification results of all the verification items related to the storage validity are good, and the time stamp token file including the time stamp token whose storage validity is confirmed is stored as a fixed time stamp token file. In addition, a time stamp token file containing a time stamp token whose storage validity is unknown because the verification results of some verification items related to storage validity are all good, but the remaining verification items have not been verified. Is stored as a provisional timestamp token file. The user can easily distinguish between the fixed time stamp token file and the provisional time stamp token file based on the difference in the storage mode. Then, the user can immediately deposit the fixed time stamp token file in the time stamp storage institution. In addition, the user can understand that the provisional time stamp token file should be verified for unverified verification items before being deposited in the time stamp storage organization. On the other hand, the verification result of one of the verification items related to the storage validity is not good, and the time stamp token file containing the time stamp token whose storage validity is not recognized is not generated. Therefore, it is possible to prevent the user from accidentally depositing the time stamp token file containing the time stamp token whose storage validity is not recognized in the time stamp storage organization.

As described above, according to the program of the present invention, when the verification results of the verified verification items are all good, a time stamp token file is generated and whether or not there are unverified verification items. Based on this, the generated time stamp token file is classified into a fixed time stamp token file and a provisional time stamp token file. On the other hand, if the verification result of the verified verification item is not good, a time stamp token file is generated. Therefore, the user can easily handle the time stamp token file according to the verification result of the storage validity of the time stamp token.

Further, in the above-described program of the present invention, it is preferable that the fixed time stamp token file and the provisional time stamp token file are given different file names.

According to this aspect of the present invention, the user can use a time stamp token file containing a time stamp token in which the verification results of all the verification items related to storage validity are good, and some verification items related to storage validity. It is possible to clearly and easily identify a time stamp token file containing a time stamp token that has not been verified for the remaining verification items although all the verification results are good, based on the file name of the time stamp token file. it can. Therefore, it is possible to facilitate the handling of the time stamp token file by the user.

Further, in the above-described program of the present invention, it is preferable that the fixed time stamp token file and the provisional time stamp token file have different storage locations in the storage unit.

According to this aspect of the present invention, the user can use a time stamp token file containing a time stamp token in which the verification results of all the verification items related to storage validity are good, and some verification items related to storage validity. It is possible to clearly and easily identify a time stamp token file containing a time stamp token whose verification results are all good but the remaining verification items have not been verified, based on the storage location of the time stamp token file. it can. Therefore, it is possible to facilitate the handling of the time stamp token file by the user.

Further, in the above-described program of the present invention, the above-mentioned plurality of verification items include an online verification item for verification by communicating with another device via a computer network and a computer between the other device. It includes an offline verification item that performs verification without communicating via a network, and it is preferable that the above-mentioned failure cannot communicate with another device via a computer network.

In this aspect of the present invention, a computer that functions as a time stamp management device according to the program of the present invention is an offline verification item for a time stamp token when it can communicate with another device via a computer network. And verify all of the online verification items. Then, when the verification results of these offline verification items and online verification items are all good, the computer generates a time stamp token file and stores the time stamp token file as a fixed time stamp token file. On the other hand, when it is not possible to communicate with other devices via the computer network, the computer verifies all of the offline verification items for the time stamp token, but verifies all of the online verification items. Not performed. Then, when all the verification results of the offline verification items are good, the computer generates a time stamp token file and stores this time stamp token file as a provisional time stamp token file. As described above, according to this aspect of the present invention, even when communication with other devices cannot be performed via the computer network, the offline verification items are verified, so that the efficiency of the verification process is improved. Can be done. In addition, since the user can recognize whether or not the online verification item has been verified based on the storage mode of the time stamp token file, it is possible to facilitate the handling of the time stamp token file by the user. it can.

Further, in the above-described program of the present invention, the offline verification items include that the signature of the public key certificate included in the time stamp token of the electronic file is normal and that the time stamp token of the electronic file has. The public key certificate that was issued is within the expiration date, the signature on the time stamp token of the electronic file is normal, and the time information that the electronic file is included in the time stamp token of the electronic file. Includes at least one of those that have not been tampered with since the time indicated by, and the online verification items include that the public key certificate contained in the time stamp token of the electronic file has not been revoked. Is preferable.

According to this aspect of the present invention, the storage validity of the time stamp token can be correctly verified.

Further, in the above-described program of the present invention, the verification unit detects the presence or absence of the above-mentioned failure, and when the above-mentioned failure disappears, verifies the remaining verification items with respect to the time stamp token included in the provisional time stamp token file. In the time stamp token file generation unit, the verification unit verifies the remaining verification items for the time stamp tokens included in the provisional time stamp token file, and all the verification results of the remaining verification items are verified. If it is good, the provisional time stamp token file is changed to the fixed time stamp token file, and the verification department verifies the remaining verification items for the time stamp token included in the provisional time stamp token file. If the verification result of the verification item is not good, it is preferable to delete the provisional time stamp token file.

According to this aspect of the present invention, when the failure disappears, the time stamp token included in the provisional time stamp token file can be automatically verified for the unverified verification items. Therefore, it is possible to improve the efficiency of the user's work of depositing the time stamp token file in the time stamp storage institution.

In addition, if all the verification results for the unverified verification items are good, the provisional time stamp token file is changed to the fixed time stamp token file, so that the user can perform the verification after the failure disappears. It can be recognized that the storage validity of the time stamp token included in the time stamp token file has been confirmed.

In addition, if the verification result for the unverified verification item is not good, the provisional time stamp token file is deleted, so the user mistakenly enters the time stamp token file containing the time stamp token whose storage validity is not recognized. It is possible to prevent the time stamp from being deposited in a storage institution.

Further, in the above-described program of the present invention, the time stamp token file generation unit receives a fixed time stamp token file when a predetermined time elapses from the time when the generated time stamp token file is stored in the storage unit as a fixed time stamp token file. Is preferably changed to a provisional timestamp token file.

Some verification items for time stamp tokens change their verification results over time. In this aspect of the present invention, a predetermined time may have elapsed from the time when the time stamp token file generated by the time stamp token file generation unit is stored in the storage unit as a fixed time stamp token file, and the verification result may have changed. If so, change the fixed timestamp token file to a provisional timestamp token file. As a result, the user can recognize that the storage validity of the time stamp token included in the time stamp token file has become unknown over time.

In order to solve the above problems, the time stamp management device of the present invention includes the main data, the hash value of the main data, the time information given by the time certification body, and the public key certificate of the time certification body. The time stamp token of the electronic file designation unit that has a stamp token and specifies the electronic file stored in the storage unit and the electronic file specified by the electronic file designation unit is to be stored in the time stamp storage organization. A verification unit that verifies multiple verification items for verifying whether or not storage validity is recognized, and a time stamp token possessed by the electronic file specified by the electronic file designation unit. Duplicate, generate a time stamp token file containing the duplicated time stamp token, and use the generated time stamp token file as a fixed time stamp token file, or a provisional time whose storage mode is different from that of the fixed time stamp token file. A time stamp token file generation unit that stores the time stamp token file as a stamp token file in the storage unit is provided, and the time stamp token file generation unit has a plurality of time stamp tokens generated by the verification unit for the time stamp token of the electronic file specified by the electronic file specification unit. If all the verification items among the verification items are verified and the verification results of all the verification items are good, the generated time stamp token file is stored in the storage unit as a confirmed time stamp token file. , The time stamp token of the electronic file specified by the electronic file specification unit has been verified by the verification unit for some of the verification items, but the remaining verification items have failed due to a failure. If the verification is not performed and the verification results of some of the above verification items are all good, the generated time stamp token file is stored in the storage unit as a provisional time stamp token file and specified by the electronic file specification unit. If the verification unit verifies the time stamp token of the electronic file for any one of the plurality of verification items and the verification result of the verification item is not good, the time stamp token is used. It is characterized by not generating a file. According to the time stamp management device of the present invention, the same operation and effect as the above-mentioned program of the present invention can be obtained.

In order to solve the above problem, the time stamp management method of the present invention includes the main data, the hash value of the main data, the time information given by the time certification body, and the public key certificate of the time certification body. The time stamp token of the electronic file designation process that has a stamp token and specifies the electronic file stored in the storage unit and the electronic file specified in the electronic file designation process is to be stored in the time stamp storage organization. A verification process that verifies multiple verification items to verify whether or not storage validity is recognized, and a time stamp token possessed by the electronic file specified in the electronic file designation process. Duplicate, generate a time stamp token file containing the duplicated time stamp token, and use the generated time stamp token file as a fixed time stamp token file, or a provisional time whose storage mode is different from that of the fixed time stamp token file. It is provided with a time stamp token file generation step of storing in the storage unit as a stamp token file, and in the time stamp token file generation step, a plurality of time stamp tokens possessed by the electronic file specified in the electronic file designation step are verified in the verification step. If all of the verification items in the above are verified and the verification results of all the verification items are good, the generated time stamp token file is stored in the storage as a confirmed time stamp token file. However, the time stamp token of the electronic file specified in the electronic file designation process was verified for some of the verification items among the multiple verification items in the verification process, but the remaining verification occurred due to a failure. If the items are not verified and the verification results of some of the above verification items are all good, the generated time stamp token file is stored in the storage unit as a provisional time stamp token file, and in the electronic file designation process. If any of the multiple verification items is verified in the verification process for the time stamp token of the specified electronic file and the verification result of the verification item is not good, the time stamp is used. It is characterized by not generating a token file. According to the time stamp management method of the present invention, the same action and effect as the above-mentioned program of the present invention can be obtained.

According to the present invention, the user can easily handle the time stamp token file according to the verification result of the storage validity of the time stamp token, and the efficiency of the work of depositing the time stamp token file in the time stamp storage organization can be improved. Can be improved.

It is explanatory drawing which shows the time authentication system which includes the user terminal which functions as the time stamp management apparatus realized by the program of embodiment of this invention. It is explanatory drawing which shows the structure of a document file. It is explanatory drawing which shows the structure of the time stamp token file. It is a flowchart which shows the document file browsing process in the user terminal in FIG. It is explanatory drawing which shows the document browsing screen in the user terminal in FIG. It is a flowchart which shows the content of the verification process in FIG. It is explanatory drawing which shows the verification result window when the verification result of all the verification items is good in the user terminal in FIG. It is explanatory drawing which shows the time stamp token output window when the verification result of all the verification items is good in the user terminal in FIG. It is explanatory drawing which shows the verification result window when there is an unverified verification item in the user terminal in FIG. It is explanatory drawing which shows the time stamp token output window when there is an unverified verification item in the user terminal in FIG. It is explanatory drawing which shows the verification result window when the verification result of the verification item is not good in the user terminal in FIG. It is a flowchart which shows the post-verification process in the user terminal in FIG. It is a flowchart which shows the re-verification setting process in the user terminal in FIG.

(Time authentication system)
FIG. 1 shows a time authentication system 1. In FIG. 1, the time authentication system 1 includes a time stamp issuing server 2, a time distribution server 3, an electronic authentication management server 4, a time stamp storage server 5, and a user terminal 6. These are connected to each other so as to be able to communicate with each other via a computer network 7 such as the Internet.

The time stamp issuing server 2 is provided in the time certification body (TSA) and issues the time stamp. That is, when the user transmits the hash value 35 of the document data 32 included in the document file 31 (see FIG. 2) from the user terminal 6 to the time stamp issuing server 2 and requests the issuance of the time stamp, the time The stamp issuing server 2 generates the time stamp token information 34 by digitally signing the hash value 35 transmitted from the user terminal 6 and the time information 36 indicating the time stamp issuing time with a private key. Further, the time stamp issuing server 2 adds the digital certificate 38 of the time authentication organization to the time stamp token information 34. Then, the time stamp issuing server 2 transmits the time stamp token 33 including the time stamp token information 34 and the digital certificate 38 to the user terminal 6 of the user who requested the issuance of the time stamp. The user adds the time stamp token 33 transmitted from the time stamp issuing server 2 to the document file 31.

The time distribution server 3 is provided in the time distribution organization (TAA), distributes the time to the time authentication organization, and audits the clock of the time authentication organization. The time information 36 used to generate the time stamp token information 34 in the time stamp issuing server 2 of the time authentication organization is generated using the time indicated by the clock of the time authentication organization audited by the time distribution organization.

The electronic authentication management server 4 is provided in an electronic authentication organization (CA) and issues and revokes an electronic certificate.

The time stamp storage server 5 is provided in the time stamp storage organization and stores the time stamp token. That is, when the user transmits the time stamp token file 42 (see FIG. 3) from the user terminal 6 to the time stamp storage server 5 and requests the storage of the time stamp token file 42, the time stamp storage server 5 is used. The time stamp token file 42 transmitted from the personal terminal 6 is stored. Further, when the user requests the transmission of the time stamp token file 42, the time stamp storage server 5 uses the stored time stamp token file 42 as the user of the user who requested the transmission of the time stamp token file 42. Send to terminal 6.

(User terminal)
The user terminal 6 is a terminal used by the user. The user terminal 6 functions as a time stamp management device realized by the program of the embodiment of the present invention. The user terminal 6 is, for example, a personal computer, and includes an arithmetic processing unit 11, a temporary storage unit 12, an operation unit 13, a display unit 14, a communication unit 15, and an external storage unit 16. The arithmetic processing unit 11 is, for example, a CPU (Central Processing Unit). The temporary storage unit 12 is a storage device that can be directly accessed by the arithmetic processing unit 11 and is used for reading and writing data and the like required for processing performed by the arithmetic processing unit 11, and is, for example, a main storage device. The operation unit 13 is, for example, a keyboard, a pointing device, or the like. The display unit 14 is a display device such as a display. The communication unit 15 is a communication control circuit for communicating with another device via the computer network 7. The external storage unit 16 is a storage device used for long-term storage of data and the like, and is, for example, a hard disk. Although not shown, the user terminal 6 is provided with a port for connecting a portable external storage device such as a USB (universal serial bus) memory, an optical disk drive device, and the like.

Further, the arithmetic processing unit 11 includes a document file designation unit 21, a display control unit 22, a verification unit 23, and a time stamp token file generation unit 24. These are realized by executing the program of the embodiment of the present invention for making the computer function as a time stamp management device.

The document file designation unit 21 performs a process of designating the document file 31 stored in the external storage unit 16. The display control unit 22 performs a process of displaying the contents of the document data 32 included in the document file 31 designated by the document file designation unit 21 on the screen of the display unit 14. The verification unit 23 performs a process of verifying whether or not the storage validity of the time stamp token 33 added to the document file 31 is recognized. The time stamp token file generation unit 24 duplicates the time stamp token 33 added to the document file 31 designated by the document file specification unit 21, and the time stamp token file including the duplicated time stamp token 33. 42 is generated, and a process of storing the generated time stamp token file 42 in the external storage unit 16 is performed.

(Document file structure)
FIG. 2 shows the structure of the document file 31. In FIG. 2, the document file 31 is an electronic file of a document, for example, a PDF file. The document file 31 includes document data 32, which is document data, as main data. Further, a time stamp token 33 is added to the document file 31. The time stamp token 33 is transmitted from the time stamp issuing server 2 of the time authentication organization and added to the document file 31 by the user. The time stamp token 33 includes the time stamp token information 34 generated by the time certification body and the digital certificate 38 of the time certification body.

The time stamp token information 34 includes a hash value 35 of the document data 32, time information 36 indicating the time stamp issuance time generated by the time certification body, and a signature 37 of the time certification body. The digital certificate 38 is a public key certificate. The digital certificate 38 includes a public key 39 used for decrypting (verifying) the time stamp token information 34, an expiration date information 40 indicating the expiration date of the digital certificate 38, and an electronic authentication organization that issued the digital certificate 38. Signature 41 is included.

(Structure of timestamp token file)
FIG. 3 shows the structure of the time stamp token file 42. The time stamp token file 42 is a file including a copy of the time stamp token 33 attached to the document file 31. As shown in FIG. 3, the content of the time stamp token file 42 is the same as the content of the time stamp token 33. The time stamp token file 42 does not include the document data 32.

Further, the time stamp token file 42 includes a fixed time stamp token file and a provisional time stamp token file. The fixed time stamp token file and the provisional time stamp token file have the same structure as each other, but the storage modes (file naming method and storage mode in the present embodiment) are different from each other.

Specifically, the fixed time stamp token file is a method in which only the extension of the file name of the document file 31 to which the corresponding time stamp token 33 is added is changed to the half-width character string ".tst". The time stamp token file 42 is given the file name generated in the above and is stored in the fixed file folder (first storage location) set in advance in the external storage unit 16. On the other hand, in the provisional time stamp token file, a half-width character string "temp" or "prov" is inserted immediately before the extension in the file name of the document file 31 to which the corresponding time stamp token 33 is added. , And the file name generated by changing the extension to the half-width character string ".tst" is attached, and the temporary file folder (second storage location) set in advance in the external storage unit 16 is set. The stored time stamp token file 42.

(Document file viewing process)
FIG. 4 shows the contents of the document file browsing process performed on the user terminal 6. The following functions are realized by the document file viewing process.
(A) File browsing function: The contents of the document data 32 in the document file 31 can be displayed on the screen. It is a function as a so-called document viewer.
(B) Time stamp token verification function: Verify the storage validity of the time stamp token 33 added to the document file 31 (it is valid as a target to be stored in the time stamp storage organization), and display the verification result on the screen. be able to.
(C) Time stamp token file generation function: The time stamp token 33 added to the document file 31 can be duplicated, and the time stamp token file 42 including the duplication of the time stamp token 33 can be generated.
(D) Time stamp token file classification function: The generated time stamp token file 42 is placed in either a fixed time stamp token file or a provisional time stamp token file according to the verification result of the storage validity of the time stamp token 33. It can be classified and stored in the external storage unit 16.

The contents of the document file viewing process are as follows. In FIG. 4, first, the user operates the operation unit 13, specifies the document file 31 stored in the external storage unit 16, and inputs a command to open the document file 31 to the user terminal 6. According to the designated input by the user, the document file designation unit 21 designates the document file 31 stored in the external storage unit 16 and reads the designated document file 31 into the temporary storage unit 12 (step S1).

Subsequently, the display control unit 22 displays the contents of the document data 32 in the document file 31 designated by the document file designation unit 21 on the screen of the display unit 14 (step S2). Here, FIG. 5 shows a document viewing screen 51 displaying the contents of the document data 32. In the process of step S2, the document viewing screen 51 as shown in FIG. 5 is formed on the screen of the display unit 14.

Subsequently, the verification unit 23 executes the post-verification process (step S3). Subsequently, the verification unit 23 executes the verification process (step S4). The ex post facto verification process and the verification process will be described later.

After the content of the document data 32 is displayed on the screen of the display unit 14 in step S2 in FIG. 4, the display of the content of the document data 32 is retained during and after the post-verification process and the verification process. .. The user can confirm the contents of the document data 32 by looking at the document viewing screen 51.

Further, after the verification process is completed, the arithmetic processing unit 11 forms the verification result display button 52 in the document viewing screen 51 as shown in FIG. The user can confirm the result of the verification process by operating the operation unit 13 and pressing the verification result display button 52. When the user presses the verification result display button 52 (step S5: YES), the arithmetic processing unit 11 executes the processes from step S7 to step S16 as described later.

Further, the user can close the document viewing screen 51 by pressing the end button 53 in the document viewing screen 51. When the user presses the end button 53 (step S6: YES), the arithmetic processing unit 11 closes the document viewing screen 51 and ends the document file viewing process.

(Verification process)
FIG. 6 shows the contents of the verification process. The verification process is a process for verifying the storage validity of the time stamp token 33 added to the document file 31, and is executed by the verification unit 23 in the document file viewing process (see step S4 in FIG. 4).

In the verification process, a plurality of verification items for verifying the storage validity of the time stamp token are verified. The verification items are as follows, for example.
(A) The signature 41 of the electronic certificate 38 included in the time stamp token 33 attached to the document file 31 is normal. (B) The electronic certificate included in the time stamp token 33 attached to the document file 31. Document 38 is within its expiration date (c) The signature 37 of the time stamp token 33 attached to the document file 31 is normal (d) It is included in the time stamp token 33 attached to the document file 31. The electronic certificate 38 has not been revoked (e) The document file 31 has not been tampered with after the time indicated by the time information 36 in the time stamp token 33. Among the above verification items, the user terminal 6 and others. An offline verification item that performs verification without communicating with the device (for example, electronic authentication management server 4 or the like) via the computer network 7, and between the user terminal 6 and another device via the computer network 7. There is an online verification item that verifies by communicating with. That is, the above (a), (b), (c) and (e) are offline verification items, and the above (d) is an online verification item.

In FIG. 6, the verification unit 23 first verifies the signature 41 of the digital certificate 38 (step S21). That is, the verification unit 23 decrypts the digital certificate 38 using the public key included in the root certificate, and determines whether or not the signature 41 of the electronic authentication authority included in the digital certificate 38 is normal. Then, the verification unit 23 stores the verification result in the temporary storage unit 12.

Subsequently, the verification unit 23 determines whether or not the expiration date of the digital certificate 38 has been exceeded (step S22). The verification unit 23 makes this determination, for example, as follows. That is, the verification unit 23 reads the expiration date indicated by the expiration date information 40 in the digital certificate 38 included in the time stamp token 33 attached to the document file 31, and the current date and time sets the read expiration date. Determine if it is not exceeded. Then, the verification unit 23 stores the verification result in the temporary storage unit 12.

Subsequently, the verification unit 23 verifies the signature 37 of the time stamp token 33 (step S23). That is, the verification unit 23 decrypts the time stamp token information 34 using the public key 39 included in the digital certificate 38, and whether or not the signature 37 of the time authentication authority included in the time stamp token information 34 is normal. To judge. Then, the verification unit 23 stores the verification result in the temporary storage unit 12.

Subsequently, the verification unit 23 determines whether or not the document file 31 has been tampered with (step S24). The verification unit 23 makes this determination, for example, as follows. That is, the verification unit 23 calculates the hash value of the document data 32 in the document file 31. A hash function is used to calculate the hash value. The hash function is stored in the external storage unit 16 or the like. Subsequently, the verification unit 23 uses the calculated hash value (current hash value) and the hash value 35 (at the time of issuing the time stamp) in the time stamp token information 34 included in the time stamp token 33 added to the document file 31. Compare with the hash value of). When the document file 31 has not been tampered with (that is, when neither the document data 32 nor the time stamp token information 34 has been tampered with), the calculated hash value and the hash value 35 in the time stamp token information 34 are mutually exclusive. Match. On the other hand, when the document file 31 has been tampered with (that is, when the document data 32 or the time stamp token information 34 has been tampered with), the calculated hash value and the hash value 35 in the time stamp token information 34 are mutually exclusive. It does not match. The verification unit 23 stores the verification result in the temporary storage unit 12.

Subsequently, the verification unit 23 determines whether or not the communication unit 15 and the electronic authentication management server 4 of the electronic authentication organization can communicate with each other via the computer network 7 (step S25). Specifically, the communication unit 15 has a function of detecting the connection state between the user terminal 6 and the electronic authentication management server 4 and outputting the detection result to the arithmetic processing unit 11. The verification unit 23 determines whether or not the communication unit 15 and the electronic authentication management server 4 can communicate with each other via the computer network 7 based on the detection result output from the communication unit 15. be able to.

When the communication unit 15 and the electronic authentication management server 4 are in a state where they can communicate with each other via the computer network 7 (step S25: YES), the verification unit 23 determines whether or not the electronic certificate 38 has been revoked. (Step S26). The verification unit 23 makes this determination, for example, as follows. That is, the verification unit 23 controls the communication unit 15 to access the electronic authentication management server 4 of the electronic authentication organization, and the revocation information of the electronic certificate 38 included in the time stamp token 33 attached to the document file 31. Check for the existence of. Then, the verification unit 23 determines that the digital certificate 38 has not been revoked when the revocation information does not exist, and determines that the digital certificate 38 has revoked when the revocation information exists. .. Then, the verification unit 23 stores the verification result in the temporary storage unit 12. Further, the verification unit 23 stores the verification status information indicating that the online verification item has been verified in the temporary storage unit 12.

On the other hand, when the communication unit 15 and the electronic authentication management server 4 are not in a state where they can communicate with each other via the computer network 7 (step S25: NO), the communication unit 15 can access the electronic authentication management server 4. Therefore, the existence or nonexistence of the revocation information of the digital certificate 38 cannot be checked, and therefore, the verification unit 23 cannot determine whether or not the digital certificate 38 has been revoked. In this case, the verification unit 23 stores the verification status information indicating that the online verification item has not been verified in the temporary storage unit 12 (step S27). As described above, the verification process for the document file 31 designated by the document file designation unit 21 is completed.

According to such a verification process, even when communication between the communication unit 15 and the electronic authentication management server 4 cannot be performed via the computer network 7, the offline verification items are verified, so that the efficiency of the verification process can be improved. Can be improved.

Further, since each verification item (a) to (e) is set as an item to be verified in the verification process, the storage validity of the time stamp token 33 can be correctly verified.

(Generation of time stamp token file)
7, 9 and 11 show verification result windows 53, 54 and 55, respectively. 8 and 10 show the time stamp token output windows 61 and 62, respectively.

In the document file browsing process shown in FIG. 4, when the user presses the verification result display button 52 (see FIG. 5) on the document browsing screen 51 (step S5: YES), the arithmetic processing unit 11 executes in step S4. A process of displaying the verification result in the verified verification process and a process of generating and storing the time stamp token file 42 according to the verification result are executed (steps S7 to S16).

First, the arithmetic processing unit 11 determines the result of the verification processing for the document file 31 specified in step S1 based on the verification result and the verification status information for each verification item stored in the temporary storage unit 12 (step). S7, S8).

Then, when the document file 31 specified in step S1 is verified for all the verification items (a) to (e) above, and the verification results of all the verification items are good, that is, The signature 41 of the electronic certificate 38 is normal, the electronic certificate 38 is within its expiration date, the signature 37 of the time stamp token 33 is normal, the electronic certificate 38 has not been revoked, and the document file. When 31 has not been tampered with after the time indicated by the time information 36 in the time stamp token 33 (step S7: NO, step S8: NO), the arithmetic processing unit 11 displays the verification result window 53 shown in FIG. After the display (step S9), the time stamp token file 42 is generated according to the instruction of the user, and the time stamp token file 42 is stored in the external storage unit 16 as a fixed time stamp token file (steps S10 and S11).

Specifically, in the verification result window 53 shown in FIG. 7, a message indicating that the document file 31 has not been tampered with, and verification items relating to the time stamp token 33 and the electronic certificate 38 attached to the document file 31 are included. A message indicating that the verification result is good and the time indicated by the time information 36 included in the time stamp token 33 attached to the document file 31 are displayed. In addition, the user can confirm the details of the verification results of each verification item by selecting the tab 56 of the "verification result details" in the verification result window 53 and switching the display of the verification result window 53. it can. The user can check the storage validity of the time stamp token 33 attached to the document file 31 by looking at the verification result window 53. Further, the user can close the verification result window 53 by pressing the OK button 59 in the verification result window 53.

Further, as shown in FIG. 7, the arithmetic processing unit 11 forms a tab 57 of “output of time stamp token” in the verification result window 53. By selecting this tab 57, the user can switch the verification result window 53 to the time stamp token output window 61 shown in FIG. A fixed time stamp token file output button 63 is formed in the time stamp token output window 61. By pressing the fixed time stamp token file output button 63, the user can generate the time stamp token file 42 for the document file 31 specified in step S1.

When the user presses the confirmed time stamp token file output button 63, the time stamp token file generation unit 24 generates the time stamp token file 42. Specifically, the time stamp token file generation unit 24 duplicates the time stamp token 33 added to the document file 31 specified in step S1. Subsequently, the time stamp token file generation unit 24 generates a time stamp token file 42 including a duplicate of the time stamp token 33 as shown in FIG.

Subsequently, the time stamp token file generation unit 24 stores the generated time stamp token file 42 as a fixed time stamp token file in the external storage unit 16. Specifically, the time stamp token file generation unit 24 changes the file name of the file name of the document file 31 specified in step S1 by changing only the extension to the half-width character string ".tst". Generate and attach this file name to the generated time stamp token file 42. Subsequently, the time stamp token file generation unit 24 stores the generated time stamp token file 42 in the fixed file folder set in advance in the external storage unit 16. By storing the time stamp token file 42 with the file name in this way in the fixed file folder, the time stamp token file 42 becomes a fixed time stamp token file.

On the other hand, all of the offline verification items (a), (b), (c) and (e) are verified, and the verification results of these items are all good, but the communication unit 15 and the electronic authentication management server. When the verification with the online verification item of (d) is not performed because it is not possible to communicate with 4 via the computer network 7 (step S7: NO, step S8: YES). After displaying the verification result window 54 shown in FIG. 9 (step S12), the arithmetic processing unit 11 generates a time stamp token file 42 according to the instruction of the user, and externally uses it as a provisional time stamp token file. It is stored in the storage unit 16 (steps S13 and S14).

Specifically, in the verification result window 54 shown in FIG. 9, a message indicating that the document file 31 has not been tampered with and all verification items related to the storage validity of the time stamp token 33 can be verified. A message to that effect and the time indicated by the time information 36 included in the time stamp token 33 attached to the document file 31 are displayed. Further, as in the case of the verification result window 53, the user selects the tab 56 of the “verification result details” in the verification result window 54 and switches the display of the verification result window 54 to switch the display of each verification item. You can check the details of the verification result of. The user looks at the verification result window 54, and regarding the storage validity of the time stamp token 33 of this document file 31, the verification results of some verification items are all good, but the remaining verification items have not been verified. You can confirm that there is. Further, the user can close the verification result window 54 by pressing the OK button 59 in the verification result window 54.

Further, as shown in FIG. 9, the arithmetic processing unit 11 forms a tab 57 of “output of time stamp token” in the verification result window 54. By selecting this tab 57, the user can switch the verification result window 54 to the time stamp token output window 62 shown in FIG. A provisional time stamp token file output button 64 is formed in the time stamp token output window 62. By pressing the provisional time stamp token file output button 64, the user can generate the time stamp token file 42 for the document file 31 specified in step S1.

When the user presses the provisional time stamp token file output button 64, the time stamp token file generation unit 24 generates the time stamp token file 42. Specifically, the time stamp token file generation unit 24 duplicates the time stamp token 33 added to the document file 31 specified in step S1, and the time stamp token file including the duplication of the time stamp token 33. 42 is generated.

Subsequently, the time stamp token file generation unit 24 stores the generated time stamp token file 42 as a provisional time stamp token file in the external storage unit 16. Specifically, the time stamp token file generation unit 24 inserts a half-width character string "temp" or "prov" immediately before the extension in the file name of the document file 31 specified in step S1. A file name is generated by changing the extension to the half-width character string ".tst", and this file name is attached to the generated time stamp token file 42. Subsequently, the time stamp token file generation unit 24 stores the generated time stamp token file 42 in the provisional file folder set in advance in the external storage unit 16. By storing the time stamp token file 42 with the file name in this way in the provisional file folder, the time stamp token file 42 becomes a provisional time stamp token file.

On the other hand, when the verification process is performed on the document file 31 specified in step S1 and the verification result of any of the verification items (a) to (e) above is not good, That is, the signature 41 of the digital certificate 38 is abnormal, the digital certificate 38 has passed its expiration date, the signature 37 of the time stamp token 33 is abnormal, and the digital certificate 38 has been revoked, or When the document file 31 has been tampered with after the time indicated by the time information 36 in the time stamp token 33 (step S7: YES), the arithmetic processing unit 11 displays the verification result window 55 shown in FIG. 11 (step S7: YES). Step S15).

In the verification result window 55 shown in FIG. 11, for example, in addition to a message indicating whether or not the document file 31 has been tampered with, a message indicating that the signature 41 of the digital certificate 38 is not normal and the digital certificate 38 are valid. A message or the like indicating that the deadline has been exceeded is displayed. In addition, the user can confirm the details of the verification results of each verification item by selecting the tab 56 of the "verification result details" in the verification result window 55 and switching the display of the verification result window 55. .. The user can see the verification result window 55 and confirm that the storage validity of the time stamp token 33 is not recognized. Further, the user can close the verification result window 55 by pressing the OK button 59 in the verification result window 55 (step S16: YES).

Further, as shown in FIG. 11, the arithmetic processing unit 11 does not form a tab of "output of time stamp token" in the verification result window 55 (or grayed out so that it cannot be selected). As a result, the user cannot generate the time stamp token file 42 if the storage validity of the time stamp token 33 is not recognized.

As described above, according to the processes from step S7 to step S16 in the document file browsing process, the verification results of all the verification items related to the storage validity are good, and the time stamp token 33 in which the storage validity is confirmed is included. However, the time stamp token file 42 is stored as a fixed time stamp token file. In addition, although the verification results of some of the verification items related to storage validity are all good, the remaining verification items have not been verified, and the time stamp token including the time stamp token 33 whose storage validity is unknown is unknown. File 42 is stored as a provisional time stamp token file. The user can easily and clearly distinguish between the fixed time stamp token file and the provisional time stamp token file based on the difference in the file name and storage location. In addition, the user can immediately deposit the fixed time stamp token file in the time stamp storage institution. In addition, the user can understand that the provisional time stamp token file should be verified for unverified verification items before being deposited in the time stamp storage organization.

On the other hand, the verification result of any of the verification items regarding the storage validity is not good, and the time stamp token file 42 including the time stamp token 33 whose storage validity is not recognized is not generated. Therefore, it is possible to prevent the user from accidentally depositing the time stamp token file 42 including the time stamp token 33 whose storage validity is not recognized in the time stamp storage organization.

As described above, according to the processes from step S7 to step S16 in the document file browsing process, the user can easily handle the time stamp token file 42 according to the verification result of the storage validity of the time stamp token 33. The time stamp token file 42 can be efficiently deposited in the time stamp storage organization.

(Post-verification processing)
The user terminal 6 has a function of performing post-verification processing. The ex post facto verification process refers to the time stamp token 33 included in the provisional time stamp token file when the communication unit 15 and the electronic authentication management server 4 can communicate with each other via the computer network 7. If the verification results of the verification items are all good, the provisional time stamp token file is changed to the finalized time stamp token file, while the verification results of the verification items are the same. If it is not good, it is a process to delete the provisional time stamp token file. FIG. 12 shows the contents of the post-verification process. The post-verification process is executed in the document file browsing process (see step S3 in FIG. 4). The post-verification process may be executed at regular intervals.

As shown in FIG. 12, in the post-verification process, the verification unit 23 first determines whether or not the provisional time stamp token file is stored in the provisional file folder of the external storage unit 16 (step S31). If the provisional time stamp token file is not stored in the provisional file folder at all (step S31: NO), the verification unit 23 immediately ends the post-verification process.

On the other hand, when the provisional time stamp token file is stored in the provisional file folder (step S31: YES), the verification unit 23 communicates between the communication unit 15 and the electronic authentication management server 4 via the computer network 7. It is determined whether or not it is possible (step S32). When the communication unit 15 and the electronic authentication management server 4 are not in a state where they can communicate with each other via the computer network 7 (step S32: NO), the verification unit 23 immediately ends the post-verification process.

On the other hand, when the communication unit 15 and the electronic authentication management server 4 can communicate with each other via the computer network 7 (step S32: YES), the verification unit 23 is stored in the provisional file folder. It is determined whether or not the digital certificate 38 included in the time stamp token 33 in the provisional time stamp token file is revoked (step S33). That is, the verification unit 23 controls the communication unit 15 to access the electronic authentication management server 4, checks for the existence of the revocation information of the digital certificate 38, and if the revocation information does not exist, the digital certificate 38. Is determined to have not been revoked, and if revocation information exists, it is determined that the digital certificate 38 has been revoked.

If the electronic certificate 38 included in the time stamp token 33 in the time stamp token file stored in the provisional file folder has not been revoked (step S33: YES), the time stamp token file generation unit 24 , The provisional time stamp token file is changed to the final time stamp token file (step S34). Specifically, the character string "temp" or "prov" is removed from the file name of the provisional time stamp token file, and the provisional time stamp token file is moved from the provisional file folder to the confirmation file folder.

On the other hand, when the digital certificate 38 included in the time stamp token 33 in the provisional time stamp token file has expired (step S33: NO), the time stamp token file generation unit 24 has the provisional time stamp token file. Is deleted from the external storage unit 16 (step S35).

According to such a post-verification process, the provisional time is obtained when the failure disappears, that is, when the communication unit 15 and the electronic authentication management server 4 can communicate with each other via the computer network 7. The time stamp token 33 included in the stamp token file can be automatically verified for unverified verification items. Therefore, the user monitors the communication status between the communication unit 15 and the electronic authentication management server 4 by himself / herself, manually operates the user terminal 6 at the timing when both can communicate with each other, and performs a provisional time stamp token file. There is no need to perform time-consuming work such as causing the user terminal 6 to verify the unverified verification items of the time stamp token 33 included in the above. Therefore, the user can efficiently deposit the time stamp token file 42 into the time stamp storage organization.

In the post-verification process, if the verification results for the unverified verification items are all good, the provisional time stamp token file is changed to the fixed time stamp token file. If the verification result for the unverified verification item is not good, the provisional time stamp token file is deleted. Therefore, the user can easily handle the time stamp token file 42 according to the verification result of the storage validity of the time stamp token 33.

(Re-verification setting process)
The user terminal 6 has a function of performing re-verification setting processing. The re-verification setting process is a confirmation time when a predetermined time elapses from the time when the time stamp token file 42 generated by the time stamp token file generation unit 24 is stored in the external storage unit 16 as the confirmation time stamp token file. This is a process to change the stamp token file to a provisional time stamp token file. That is, after the generated time stamp token file 42 is stored in the external storage unit 16 as a fixed time stamp token file, the user leaves the fixed time stamp token file without immediately depositing it in the time stamp storage organization. In this case, it is conceivable that the revocation information of the electronic certificate 38 included in the time stamp token 33 in the fixed time stamp token file is newly issued from the electronic certification body. Therefore, when a predetermined time elapses from the time when the generated time stamp token file 42 is stored in the external storage unit 16 as the fixed time stamp token file, the fixed time stamp token file is changed to the provisional time stamp token file. As a result, this provisional time stamp token file is subject to the post-verification process, and the post-verification process checks for the existence of revocation information of the digital certificate 38 included in the time stamp token 33 in the provisional time stamp token file. , It is automatically determined whether or not the digital certificate 38 has been revoked. FIG. 13 shows the contents of the re-verification setting process. The re-verification setting process is executed, for example, at a fixed cycle.

As shown in FIG. 13, in the re-verification setting process, the time stamp token file generation unit 24 determines whether or not the confirmed time stamp token file is stored in the confirmed file folder of the external storage unit 16 (step S41). .. If no confirmed time stamp token file is stored in the confirmed file folder (step S41: NO), the time stamp token file generation unit 24 immediately ends the revalidation setting process.

On the other hand, when the confirmed time stamp token file is stored in the confirmed file folder (step S41: YES), the time stamp token file generation unit 24 starts when the confirmed time stamp token file is stored in the confirmed file folder. The elapsed time from to the present time is calculated (step S42). For example, the time stamp token file generation unit 24 calculates the time from the creation date and time to the present time in the meta information of the fixed time stamp token file.

Subsequently, the time stamp token file generation unit 24 determines whether or not the elapsed time from the time when the confirmed time stamp token file is stored in the confirmed file folder to the present time exceeds a predetermined time (step S43). If the elapsed time from the time when the confirmed time stamp token file is stored in the confirmed file folder to the present time does not exceed the predetermined time (step S43: NO), the time stamp token file generation unit 24 performs the re-verification setting process. Is terminated immediately.

On the other hand, when the elapsed time from the time when the confirmed time stamp token file is stored in the confirmed file folder to the present time exceeds a predetermined time (step S43: YES), the time stamp token file generation unit 24 determines the confirmation. The time stamp token file is changed to the provisional time stamp token file (step S44). Specifically, in the file name of the fixed time stamp token file, the character string "temp" or "prov" of the half-width character string is inserted immediately before the extension, and the fixed time stamp token file is inserted from the fixed file folder. Move to the provisional file folder.

According to such a re-verification setting process, there is a possibility that a predetermined time has elapsed from the time when the time stamp token file 42 is stored as the confirmed time stamp token file and the verification result has changed (the revocation information of the electronic certificate 38 is If there is a possibility that it was newly issued), the fixed time stamp token file is changed to the provisional time stamp token file, so that the user can store the time stamp token 33 included in the time stamp token file 42. It can be recognized that the validity has become unclear over time. Further, by changing the time stamp token file 42 from the fixed time stamp token file to the provisional time stamp token file, the time stamp token file 42 can be the target of the post-verification processing. Then, by performing the post-verification process on the time stamp token file 42, it is possible to prevent the verification accuracy of the storage validity of the time stamp token 33 from deteriorating with the passage of time.

In the above-described embodiment, the case where the file name and the storage location are different between the fixed time stamp token file and the provisional time stamp token file has been given as an example, but the present invention is not limited to this. For example, only the file naming method may be different between the fixed time stamp token file and the provisional time stamp token file, or only the storage location may be different. Further, the method of naming each of the fixed time stamp token file and the provisional time stamp token file is not limited to the above-mentioned method.

Further, in the above-described embodiment, the verification items from (a) to (e) above are given as the verification items for the storage validity of the time stamp token 33, but these are the verification items for the storage validity of the time stamp token 33. Not limited to. For example, some of the above-mentioned offline verification items may be excluded, or another offline verification item or online verification item may be added.

Further, in the above-described embodiment, as an example of a failure in which the verification process cannot be performed, a state in which the communication unit 15 and the electronic authentication management server 4 cannot communicate with each other via the computer network 7 is given as an example. In this state, for example, the communication unit 15 cannot be connected to the computer network 7, the communication unit 15 can be connected to the computer network 7, but the electronic authentication management server 4 cannot be connected, and communication. Unit 15 can be connected to the electronic authentication management server 4, but cannot log in to the electronic authentication management server 4, and can log in to the electronic authentication management server 4, but the information necessary for verification that should normally be obtained cannot be obtained. Including state etc. Moreover, the failure that cannot perform the verification process is not limited to these.

Further, in the above-described embodiment, the case where the electronic file to which the time stamp token 33 is added is the document file 31 is taken as an example, but the electronic file is, for example, an image file, a graphic file, an audio file, a video file, or the like. But it may be.

Further, in the above-described embodiment, the case where the verification process and the process of generating and storing the time stamp token file are performed in the document file browsing process has been given as an example, but the present invention is not limited to this. The verification process and the process of generating and storing the time stamp token file may be separated from the document file viewing process. For example, in the context menu that is displayed when the user right-clicks the unopened document file 31 with the mouse and specifies it, the items of the verification process and the process of generating and storing the time stamp token file are arranged. When the user specifies the item, the verification process and the process of generating and storing the time stamp token file may be executed.

Further, the user terminal that functions as a time stamp management device by the program of the present invention is not limited to a personal computer, and may be another type of terminal device such as a tablet terminal or a smartphone.

Further, the present invention can be appropriately modified within the scope of claims and within a range not contrary to the gist or idea of the invention that can be read from the entire specification, and a program, a time stamp management device and a time stamp management accompanied by such changes. The method is also included in the technical idea of the present invention.

INDUSTRIAL APPLICABILITY The present invention can be used as a means for extracting a time stamp token from an electronic file when depositing the time stamp token attached to the electronic file in a time stamp storage institution.

1 Time authentication system 4 Electronic authentication management server 5 Time stamp storage server 6 User terminal 11 Arithmetic processing unit 14 Display unit 15 Communication unit 16 External storage unit (storage unit)
21 Document file specification unit 23 Verification unit 24 Timestamp token file generation unit 31 Document file 32 Document data 33 Timestamp token 34 Timestamp token information 35 Hash value 36 Time information 38 Electronic certificate 42 Timestamp token file

Claims (9)

An electronic file having a main data, a hash value of the main data, time information given by a time certification body, and a time stamp token containing a public key certificate of the time certification body, and stored in a storage unit. Electronic file specification part that specifies
In order to verify whether or not the time stamp token possessed by the electronic file designated by the electronic file designation unit is valid for storage, which means that the time stamp token is valid as a storage target in the time stamp storage organization. Verification department that verifies multiple verification items of
The time stamp token of the electronic file specified by the electronic file designation unit is duplicated, a time stamp token file including the duplicated time stamp token is generated, and the generated time stamp token file is determined. To operate a computer as a time stamp management device including a time stamp token file generation unit stored in the storage unit as a stamp token file or as a provisional time stamp token file having a storage mode different from that of the fixed time stamp token file. It ’s a program
The time stamp token file generation unit
The verification unit verifies all the verification items among the plurality of verification items against the time stamp token of the electronic file designated by the electronic file designation unit, and all the verification items of the verification items. When the verification result is good, the generated time stamp token file is stored in the storage unit as the fixed time stamp token file.
The time stamp token of the electronic file specified by the electronic file designation unit has been verified by the verification unit for some of the verification items, but a failure has occurred. If the remaining verification items are not verified and the verification results of some of the verification items are all good, the generated time stamp token file is stored in the storage unit as the provisional time stamp token file. ,
The verification unit verifies the time stamp token of the electronic file designated by the electronic file designation unit for any one of the plurality of verification items, and verifies the verification items. A program characterized in that the time stamp token file is not generated when the result is not good. The program according to claim 1, wherein the fixed time stamp token file and the provisional time stamp token file are named differently from each other. The program according to claim 1, wherein the fixed time stamp token file and the provisional time stamp token file have different storage locations in the storage unit. The plurality of verification items include an online verification item for verification by communicating with another device via a computer network and without communicating with the other device via the computer network. One of claims 1 to 3, which includes an offline verification item for verification, and the failure is the inability to communicate with the other device via the computer network. The program described in. The offline verification items are that the signature on the public key certificate included in the time stamp token of the electronic file is normal, and that the public key included in the time stamp token of the electronic file is normal. The certificate is within its expiration date, the signature of the electronic file on the time stamp token is normal, and the time information that the electronic file contains in the time stamp token of the electronic file is Includes at least one that has not been tampered with since the indicated time
The program according to claim 4, wherein the online verification item includes that the public key certificate included in the time stamp token of the electronic file has not been revoked. The verification unit
The presence or absence of the failure is detected, and when the failure disappears, the remaining verification items are verified against the time stamp token included in the provisional time stamp token file.
The time stamp token file generation unit
When the verification unit verifies the remaining verification items of the time stamp token included in the provisional time stamp token file and the verification results of the remaining verification items are all good. Change the provisional time stamp token file to the fixed time stamp token file,
If the verification unit verifies the remaining verification items of the time stamp token included in the provisional time stamp token file and the verification result of the verification items is not good, the provisional time stamp The program according to any one of claims 1 to 5, wherein the token file is deleted. When a predetermined time has elapsed from the time when the generated time stamp token is stored in the storage unit as the fixed time stamp token file, the time stamp token file generation unit uses the fixed time stamp token file as the provisional time stamp token. The program according to any one of claims 1 to 6, which comprises changing to a file. An electronic file having a main data, a hash value of the main data, time information given by a time certification body, and a time stamp token containing a public key certificate of the time certification body, and stored in a storage unit. Electronic file specification part that specifies
In order to verify whether or not the time stamp token possessed by the electronic file designated by the electronic file designation unit is valid for storage, which means that the time stamp token is valid as a storage target in the time stamp storage organization. Verification department that verifies multiple verification items of
The time stamp token of the electronic file specified by the electronic file designation unit is duplicated, a time stamp token file including the duplicated time stamp token is generated, and the generated time stamp token file is determined. It is provided with a time stamp token file generation unit to be stored in the storage unit as a stamp token file or as a provisional time stamp token file having a storage mode different from that of the fixed time stamp token file.
The time stamp token file generation unit
The verification unit verifies all the verification items among the plurality of verification items against the time stamp token of the electronic file designated by the electronic file designation unit, and all the verification items of the verification items. When the verification result is good, the generated time stamp token file is stored in the storage unit as the fixed time stamp token file.
The time stamp token of the electronic file specified by the electronic file designation unit has been verified by the verification unit for some of the verification items, but a failure has occurred. If the remaining verification items are not verified and the verification results of some of the verification items are all good, the generated time stamp token file is stored in the storage unit as the provisional time stamp token file. ,
The verification unit verifies the time stamp token of the electronic file designated by the electronic file designation unit for any one of the plurality of verification items, and verifies the verification items. A time stamp management device characterized in that the time stamp token file is not generated when the result is not good. An electronic file having a main data, a hash value of the main data, time information given by a time certification body, and a time stamp token containing a public key certificate of the time certification body, and stored in a storage unit. Electronic file specification process to specify
In order to verify whether or not the time stamp token possessed by the electronic file designated in the electronic file designation process is valid for storage, which means that the time stamp token is valid as a storage target in the time stamp storage organization. The verification process that verifies multiple verification items and
The time stamp token of the electronic file specified in the electronic file designation step is duplicated, a time stamp token file including the duplicated time stamp token is generated, and the generated time stamp token file is determined. It is provided with a time stamp token file generation step of storing in the storage unit as a stamp token file or as a provisional time stamp token file having a storage mode different from that of the fixed time stamp token file.
In the time stamp token file generation process,
In the verification step, all verification items among the plurality of verification items are verified against the time stamp token possessed by the electronic file designated in the electronic file designation step, and all the verification items of the verification items are verified. When the verification result is good, the generated time stamp token file is stored in the storage unit as the fixed time stamp token file.
The time stamp token of the electronic file specified in the electronic file designation step was verified in the verification step for some of the verification items, but a failure occurred. If the remaining verification items are not verified and the verification results of some of the verification items are all good, the generated time stamp token file is stored in the storage unit as the provisional time stamp token file. ,
The time stamp token possessed by the electronic file designated in the electronic file designation step is verified for any one of the plurality of verification items in the verification step, and the verification item is verified. A time stamp management method characterized in that the time stamp token file is not generated when the result is not good.

Images