JP7078378B2 - Program and timestamp management device - Google Patents

Description

The present invention relates to a program and a time stamp management device capable of managing a time stamp token of an electronic file.

For example, for an electronic file containing electronic data such as document data, image data, moving image data, and audio data, a time authentication technique for issuing a time stamp token corresponding to the electronic data by a time authentication organization has become widespread. In this time authentication technology, the time stamp token proves that the electronic data existed at the issue date and time of the time stamp token (existence proof), and the electronic data is tampered with after the issue date and time of the time stamp token. Prove that it is not (proof of completeness). The time certification body generates a time stamp token by digitally signing the combined data of the hash value of the electronic data and the time information of the issue date and time by encrypting it with a private key. The time stamp token also includes an electronic certificate or the like that certifies the public key paired with the private key.

For example, the user generates a hash value of electronic data for an electronic file for which certification by a time stamp is desired, sends this hash value to a time authentication authority, and requests the issuance of a time stamp token. In response to this, the time certification body acquires time information indicating the issue date and time of the time stamp token, generates a time stamp token from the hash value and the time information, and sends the time stamp token to the user.

When the user verifies the electronic file using the time stamp token, for example, the hash value of the electronic data of the electronic file is calculated, and the calculated hash value is included in the time stamp token received from the time authentication authority. Compare with the hash value. If the electronic data has not been tampered with, both hash values match. On the other hand, when the electronic data has been tampered with, both hash values do not match.

In addition, users can safely store time stamps for a long period of time by sending and depositing time stamp tokens to, for example, a time stamp storage organization such as an independent administrative agency or the National Center for Industrial Property Information and Training (IMPIT). can. The user can acquire (download) or delete the deposited time stamp token from the time stamp storage organization.

The following Patent Document 1 describes a technique for storing a hash value generated from an electronic file to be managed in a storage server operated by a public institution.

Japanese Unexamined Patent Publication No. 2016-218554

By the way, in order to deposit the time stamp token in the time stamp storage organization, the user needs to identify the electronic file corresponding to the time stamp token that requires deposit. Therefore, the user identifies and manages the electronic file subject to time stamp management among the electronic files owned by the user, but the electronic file to which the time stamp token is issued and the electronic file to which the time stamp token is issued are not issued. It is necessary to identify and manage electronic files. However, it is difficult and burdensome for the user to identify and manage a large number of electronic files as described above. As described above, it is difficult to easily and appropriately deposit the time stamp token of the electronic file in the time stamp storage organization.

Further, while the user's terminal device stores an electronic file to be managed by the time stamp, the time stamp token is issued by the time authentication organization independently of the electronic file. If the electronic file and the time stamp token are stored independently, it becomes difficult to manage them while associating them with each other.

In Patent Document 1, the time stamp device issues a time stamp token based on the target data, the storage device issues a storage ID to the time stamp token, and the storage ID and the time stamp token are stored. There is. Then, the information management device stores the target data in association with the storage ID. However, there is a possibility that the association with the target data may be impaired when the time stamp token is stored, or the association with the target data may be impaired when the storage ID is issued.

By the way, some user terminal devices assign a time stamp token to an electronic file, that is, embed the time stamp token in the electronic file and store it as one file. There is a concern that the association between the electronic file and the time stamp token will be impaired, so that general users cannot easily extract the time stamp token from the electronic file except when necessary such as at the time of verification. In this case, the association between the electronic file and the time stamp token is not impaired, but the time stamp token given to the electronic file cannot be extracted from the electronic file when it is deposited in the time stamp storage organization.

The present invention has been made in view of, for example, the above-mentioned problems, and an object of the present invention is to provide a program and a time stamp management device that enable easy and appropriate deposit of a time stamp token to a time stamp storage organization. It is in.

In order to solve the above problem, the first program of the present invention monitors the monitoring folder that is the storage destination of the managed file to be managed by the time stamp, and monitors the monitoring folder to detect the managed file from the monitoring folder. When the monitoring condition grant mode is the normal grant mode for the managed file detected from the watched folder by the watch section, a time stamp token is given to the managed file. On the other hand, when the monitoring condition granting mode is the non-granting mode, the management target is detected when the management target file is detected from the monitoring folder by the granting unit that does not perform the granting process and the monitoring unit. With respect to the managed file after extracting the time stamp token from the file and extracting the time stamp token, the managed file that did not have the grant process is moved from the monitoring folder to the completion folder, and the grant process is performed. The managed file is moved from the monitored folder to the granted folder, and the managed file to which the time stamp token is not assigned is moved from the monitored folder to the error folder, and the extraction unit. The computer functions as a time stamp management device including a generation unit that generates a token file of a time stamp based on the time stamp token extracted by the above and stores it in a predetermined output folder.

Further, in order to solve the above problem, the first time stamp management device of the present invention monitors the monitoring folder which is the storage destination of the management target file to be managed by the time stamp, and is managed from the monitoring folder. When the monitoring condition assignment mode is the normal grant mode for the monitoring unit that detects the file and the management target file detected from the monitoring folder by the monitoring unit, the time stamp token is used as the management target file. When the granting mode for monitoring conditions is the non-granting mode, the granting unit that does not perform the granting process and the monitoring unit detect the managed file from the monitoring folder. With respect to the managed file after extracting the time stamp token from the managed file and extracting the time stamp token, the managed file that has not been given is moved from the monitoring folder to the completion folder. The managed file to which the grant processing has been performed is moved from the monitoring folder to the grant folder, and the managed file to which the time stamp token has not been granted is moved from the monitoring folder to the error folder. It is characterized by including a generation unit that generates a token file of a time stamp based on the time stamp token extracted by the extraction unit and stores it in a predetermined output folder.

According to the first program and the first time stamp management device of the present invention, the user can deposit an appropriate token file in the time stamp storage organization by a simple operation of storing the managed file in the monitoring folder. Can be automatically generated. In particular, it is possible to improve the convenience of extracting time stamp tokens and managing token files for a large number of managed files. In addition, since the generated token file is automatically stored in the output folder, the user can easily and appropriately deposit the token file in the time stamp storage organization without making a mistake in the storage location of the token file. And the time stamp storage service can be easily used. Further, the user can easily and appropriately manage the managed file due to the easy and appropriate management of the token file.
In addition, an appropriate time stamp token can be automatically assigned to the managed file that is the target of time stamp management, and a token file of the automatically assigned time stamp token can be automatically generated. can. Therefore, it is possible to automatically enable the existence proof and completeness proof of the managed file without imposing a burden on the user. In particular, it is possible to improve the assignment and extraction of time stamp tokens for a large number of managed files, and further improve the convenience of managing token files.

In order to solve the above problem, in the second program of the present invention, the management target file determined by the granting unit to be not given the time stamp token among the management target files detected from the monitoring folder. It is characterized in that a time stamp token is given to the file.

Further, in order to solve the above problem, in the second time stamp management device of the present invention, the granting unit determines that the time stamp token is not given among the managed files detected from the monitoring folder. It is characterized in that a time stamp token is given to the managed file to be managed.

According to the second program of the present invention and the second time stamp management device, the managed file to which the time stamp token should be given is automatically determined without imposing a burden on the user, and an appropriate time stamp is obtained. Tokens can be granted automatically. It should be noted that the process of granting the time stamp token can be suppressed to the minimum necessary.

According to the present invention, the program and the time stamp management device make it possible to easily and appropriately deposit the time stamp token into the time stamp storage organization.

It is a block diagram which shows the structure of the time stamp system provided with the terminal apparatus as the time stamp management apparatus which concerns on embodiment of this invention. It is explanatory drawing which shows an example of the management target file which is an electronic file. It is explanatory drawing which shows the other example of the managed file which is an electronic file. It is explanatory drawing which shows the example of the managed file which is a bag file. It is a table which shows the transition of the management target file in the terminal apparatus as the time stamp management apparatus which concerns on embodiment of this invention. It is a top view which shows an example of the main screen displayed on the terminal apparatus as the time stamp management apparatus which concerns on embodiment of this invention. It is a top view which shows the other example of the main screen displayed on the terminal apparatus as the time stamp management apparatus which concerns on embodiment of this invention. It is a top view which shows the example of the environment setting screen displayed on the terminal apparatus as the time stamp management apparatus which concerns on embodiment of this invention. It is a flowchart which shows the operation example of the time stamp management in the terminal apparatus as the time stamp management apparatus which concerns on embodiment of this invention. It is a flowchart which shows the operation example of the time stamp token addition in the terminal apparatus as the time stamp management apparatus which concerns on embodiment of this invention.

Hereinafter, embodiments of the present invention will be described with reference to the drawings. The following embodiments are preferred embodiments of the present invention and disclose various preferred techniques, but the technical scope of the invention is not limited to these embodiments.

The time stamp system 1 provided with the terminal device 6 as the time stamp management device according to the embodiment of the present invention will be described with reference to FIG. As shown in FIG. 1, the time stamp system 1 includes a time stamp token issuing server (TST issuing server) 2, a time distribution server 3, an electronic authentication management server 4, a time stamp token storage server (TST storage server) 5, and a terminal device. It has a 6. These are connected to each other so as to be able to communicate with each other via a network 7 such as the Internet. In the following, for convenience of explanation, the time stamp token 33 (see FIG. 2) may be referred to as “TST”.

In the present embodiment, the electronic file subject to time stamp management by the terminal device 6 as the time stamp management device is referred to as a management target file 31 (see FIG. 2). The management target file 31 includes electronic data 32 such as document data, image data, moving image data, and audio data, and is composed of, for example, a PDF file or the like.

As shown in FIG. 2, the managed file 31 can be given a time stamp token 33 based on the hash value 34 of the electronic data 32 in order to prove the existence and completeness of the electronic data 32. That is, the time stamp token 33 can be embedded in the managed file 31 to form one file. The time stamp token 33 includes, for example, a hash value 34, a time information 35 indicating the issue time of the time stamp token 33, an electronic signature 36 for the hash value 34 and the time information 35, and an electronic signature 36 for verifying the electronic signature 36. Certificate 37 is included. As shown in FIG. 3, one or more time stamp tokens 33 issued at different times can be attached to the managed file 31.

Further, as shown in FIG. 4, the management target file 31 is composed of a bag bag file (for example, a bag bag PDF (registered trademark) file) to which one or more attachment files 41 are attached in addition to the electronic data 32. Some are done. In the managed file 31 as a package file, the managed file 31 itself is based on the hash value of the comprehensive data including the electronic data 32 of the managed file 31, the electronic data 42 of each attached file 41, and the time stamp token 43. (Whole) time stamp token 33 can be given. Hereinafter, the hash value 34 of the electronic data 32 of the management target file 31 indicates the hash value of the above-mentioned comprehensive data when the management target file 31 is a bagging file.

For example, in FIG. 4, the managed file 31 of the “○○ specification” composed of the PDF file of the package bag is composed of the attached file 41 of the “○○ design document” composed of the PDF file and the PDF file. The attached file 41 of the "○○ evaluation report" is included. The managed file 31 includes the electronic data 32 of the “○○ specification”. Further, the managed file 31 includes the electronic data 42 and the time stamp token 43 of the attachment file 41 of the “○○ design document” and the electronic data 42 and the time stamp token 43 of the attachment file 41 of the “○○ evaluation report”. It is included. Further, the managed file 31 includes a time stamp token 33 of the managed file 31 itself.

The TST issuing server 2 is provided in the time authentication body (TSA) and issues the time stamp token 33 given to the managed file 31. Specifically, the TST issuing server 2 receives the issuance request of the hash value 34 of the electronic data 32 and the time stamp token 33 included in the managed file 31 from the terminal device 6 via the network 7. The TST issuing server 2 generates time information 35 indicating the issuance time of the time stamp token 33 based on the time delivered from the time distribution server 3 in response to the issuance request of the time stamp token 33.

Then, the TST issuing server 2 generates the time stamp token 33 including the hash value 34 and the time information 35 described above. Further, the TST issuing server 2 generates an electronic signature 36 by encrypting the combined data of the hash value 34 and the time information 35 and the like with a predetermined private key, and adds the electronic signature 36 to the time stamp token 33. .. The time stamp token 33 also includes an electronic certificate 37 issued by the electronic authentication management server 4 for the public key paired with the private key. Then, the TST issuing server 2 transmits the time stamp token 33 to the terminal device 6 that has transmitted the request for issuing the time stamp token 33.

The time distribution server 3 is provided in the time distribution organization (TAA), distributes the time to the TST issuing server 2 of the time authentication organization, and audits the clock of the TST issuing server 2.

The electronic authentication management server 4 is provided in an electronic authentication organization (CA) to issue an electronic certificate and perform revocation processing. Specifically, when the electronic authentication management server 4 receives a request for issuing a public key and an electronic certificate from the TST issuing server 2, it generates an electronic certificate for the public key and sends it to the TST issuing server 2. The digital certificate includes the corresponding public key.

The TST storage server 5 is provided in the time stamp storage organization and stores the time stamp token 33. Specifically, when the TST storage server 5 receives a time stamp token file (hereinafter referred to as a token file) including the time stamp token 33 and a storage request thereof from the terminal device 6 via the network 7, the token is received. Save the file. Further, when the TST storage server 5 receives the token file transmission (download) request from the terminal device 6 via the network 7, the TST storage server 5 transmits a copy of the token file to the terminal device 6 that has made the transmission request.

The terminal device 6 is a terminal such as a personal computer used by the user as a time stamp management device. The terminal device 6 includes an arithmetic processing unit 11, a storage unit 12, a communication unit 13, an operation unit 14, a display unit 15, and an input / output unit 16.

The arithmetic processing unit 11 is composed of, for example, a CPU (Central Processing Unit). The storage unit 12 includes, for example, a main storage device such as a semiconductor storage device and an auxiliary storage device such as a magnetic storage device. The communication unit 13 is a communication control circuit for communicating with an external device via the network 7. The operation unit 14 is composed of, for example, a keyboard, a pointing device, and the like. The display unit 15 is, for example, a display device such as a display. The input / output unit 16 is an interface for connecting to an external storage device such as a USB (universal serial bus) memory or another device such as an optical disk drive device to input / output data to / from another device.

Further, the terminal device 6 includes a monitoring condition setting unit 21, a folder monitoring unit (monitoring unit) 22, a managed file determination unit (determination unit) 23, a time stamp token granting unit (TST granting unit, granting unit) 24, and a time stamp. It includes functional units such as a token extraction unit (TST extraction unit, extraction unit) 25, a token file generation unit (generation unit) 26, a log recording unit 27, a display control unit 28, and a token file deposit unit 29. These functional units may be composed of a program stored in the storage unit 12 and executed by the arithmetic processing unit 11. That is, the storage unit 12 stores a program for operating the computer as a time stamp management device provided with these functional units. In other words, the arithmetic processing unit 11 and the storage unit 12 constitute a control device for the time stamp management device.

The monitoring condition setting unit 21 sets various monitoring conditions when the folder monitoring unit 22 performs folder monitoring. For example, the monitoring condition setting unit 21 has, as monitoring conditions, a monitoring folder that is a storage destination of the management target file 31 that is the target of time stamp management, a completion folder that is a storage destination of the management target file 31 that has completed monitoring, and a new one. The grant folder that is the storage destination of the managed file 31 to which the time stamp token 33 is attached, the output folder that is the storage destination of the token file of the time stamp token 33 extracted from the managed file 31, and the time stamp management (time stamp token 33). It is possible to specify an error folder that is a storage destination of the managed file 31 in which an error is detected during extraction or assignment. FIG. 5 shows the transition in which the managed file 31 is stored in each folder. As these folders, the monitoring condition setting unit 21 uses any storage area available in the terminal device 6, such as the storage unit 12 of the terminal device 6 and other devices connected to the input / output unit 16. You may.

The monitoring condition setting unit 21 may set different folders as the monitoring folder, the completion folder, the output folder, the grant folder, and the error folder, and if the same folder is specified, an error output may be performed. The managed file 31 is identified as another electronic file by being stored in the monitoring folder, the completion folder, the grant folder, or the error folder, and the token file is identified as another electronic file by being stored in the output folder. File.

The monitoring condition setting unit 21 selects either a move mode for moving to the completed folder or the granted folder or a delete mode for deleting as the post-processing mode regarding the post-processing method of the managed file 31 for which monitoring has been completed. Can be done.

Further, the monitoring condition setting unit 21 generates a token file with the same name and overwrites the existing file as a duplicate processing mode regarding the processing method when an existing file with the same name exists when the token file is generated. , It is possible to select one of the error modes of moving the corresponding managed file 31 to the error folder without generating the token file.

Further, the monitoring condition setting unit 21 has, as a grant mode regarding how to grant the time stamp token 33 when the time stamp token 33 can be extracted from the managed file 31, a non-grant mode in which the time stamp token 33 is not granted and a normal mode. It is possible to select one of the normal grant modes in which the time stamp token 33 of the above is added and granted.

The monitoring condition setting unit 21 can set one or more (for example, 10) different monitoring patterns for each folder and each mode combination described above. Further, the monitoring condition setting unit 21 can set a monitoring execution flag for whether or not to execute monitoring for each monitoring pattern. The monitoring condition setting unit 21 may set different monitoring folders for each monitoring pattern, and output an error when the same monitoring folder is specified between the monitoring patterns. Further, the monitoring condition setting unit 21 may set a different folder for each monitoring pattern for the completion folder, the grant folder, the output folder, and the error folder, or may set the same folder between the monitoring patterns.

Further, the monitoring condition setting unit 21 has a monitoring interval (time) for monitoring the monitoring folder and a monitoring status (for example, stopped, monitoring, time stamp extraction, time stamping, etc.) common to each monitoring pattern. You can set the status confirmation interval (time) to confirm. The monitoring interval is the interval from processing the last file in the monitoring folder of all monitoring patterns to starting the next monitoring.

Further, the monitoring condition setting unit 21 can select whether or not to record the processing result of the time stamp management in the log, which is common to each monitoring pattern. The monitoring condition setting unit 21 is a log folder that is an output destination of the recorded log file (for example, a text file in which the extraction result, grant result, error status, etc. of the time stamp token 33 for each managed file 31 are written). Can be set.

The folder monitoring unit 22 monitors the monitoring folder according to each monitoring condition set by the monitoring condition setting unit 21. Specifically, the folder monitoring unit 22 monitors the monitoring folder at each monitoring interval for the monitoring pattern for which the monitoring execution flag is turned on, and detects the managed file 31 existing in the monitoring folder.

The management target file determination unit 23 analyzes the management target file 31 detected by the folder monitoring unit 22 and determines whether or not the time stamp token 33 has already been assigned to the management target file 31.

The TST granting unit 24 newly grants the time stamp token 33 to the managed file 31 determined to be the grant target among the managed files 31 detected by the folder monitoring unit 22. The management target file 31 to be granted is determined based on the determination result of the management target file determination unit 23 and the grant mode set by the monitoring condition setting unit 21. For example, if the managed file 31 to which the time stamp token 33 is not assigned is determined to be the grant target, and the grant mode is the normal grant mode even for the managed file 31 to which the time stamp token 33 is assigned. Judged as a grant target.

Specifically, the TST granting unit 24 calculates the hash value 34 based on the electronic data 32 of the managed file 31, and requests the communication unit 13 and the network 7 to issue the hash value 34 and the time stamp token 33. It is transmitted to the TST issuing server 2 via. Then, the TST granting unit 24 receives the time stamp token 33 corresponding to the issuance request from the TST issuing server 2 via the network 7 and the communication unit 13, and newly grants the time stamp token 33 to the managed file 31.

The original managed file 31 before the time stamp token 33 is given by the TST granting unit 24 is moved from the monitoring folder to the completion folder and stored, and the managed file 31 newly given the time stamp token 33 is the original. It is stored in the monitoring folder instead of the managed file 31 of. Therefore, only the managed file 31 to which the time stamp token 33 is assigned is stored in the monitoring folder after the grant process by the TST granting unit 24. Further, the managed file 31 when an error occurs in the granting process by the TST granting unit 24 is moved from the monitoring folder to the error folder and stored.

The grant processing by the TST granting unit 24 may be performed at the timing when the determination processing by the management target file determination unit 23 is completed for each management target file 31, or the determination processing for each monitoring pattern, that is, for each monitoring folder. May be performed at the timing when the determination process of all monitoring patterns, that is, all monitoring folders is completed.

The TST extraction unit 25 extracts the time stamp token 33 from the managed file 31 stored in the monitoring folder. Regarding the managed file 31 after the time stamp token 33 is extracted by the TST extraction unit 25, the managed file 31 that has not been given is moved from the monitoring folder to the completion folder and stored, and the managed file 31 that has been given has been given. The file 31 is moved from the monitoring folder to the grant folder and stored. Further, when an error occurs in the extraction process by the TST extraction unit 25 (for example, when the time stamp token 33 is not assigned), the managed file 31 is moved from the monitoring folder to the error folder and stored.

When the extraction process by the TST extraction unit 25 is performed for each managed file 31, the managed file determination unit 23 performs the determination process for the managed file 31 that has not been assigned by the TST grant unit 24. On the other hand, the managed file 31 to which the grant processing has been performed may be performed at the timing when the grant processing is completed. Alternatively, the extraction process may be performed for each monitor pattern, that is, at the timing when the determination process and the grant process are completed for each monitor folder, or at the timing when the determination process and the grant process for all the monitor patterns are completed. good.

The token file generation unit 26 generates a token file based on the time stamp token 33 extracted by the TST extraction unit 25 and stores it in the output folder. The token file is configured to include, for example, the time stamp token 33.

The generation process by the token file generation unit 26 may be performed at the timing when the extraction process by the TST extraction unit 25 is completed for each managed file 31, or the extraction process is performed for each monitoring pattern, that is, for each monitoring folder. It may be performed at the timing when it is completed, or it may be performed at the timing when the extraction process of all monitoring patterns is completed.

The log recording unit 27 records the processing result of the time stamp management in the log file according to the monitoring conditions set by the monitoring condition setting unit 21, and stores it in the set log folder. The log recording unit 27 may record a log for each management target file 31 for each process by the TST granting unit 24, the TST extraction unit 25, and the token file generation unit 26.

The display control unit 28 controls each unit of the terminal device 6 so that the display unit 15 displays the execution screen of each program such as a program (time stamp management program) that causes the computer to function as the time stamp management device.

For example, the display control unit 28 causes the display unit 15 to display the main screen 50 (see FIGS. 6 and 7) when the time stamp management program is executed on the terminal device 6. On the main screen 50, the monitoring status (for example, stopped, monitoring, time stamp extraction, time stamping, etc.), monitoring start time, and monitoring end time are displayed. Further, the main screen 50 includes a monitoring start button 51, a monitoring stop button 52, and an environment setting button 53, and items having the same functions as these buttons may be displayed on the menu bar. Monitoring is started according to the operation of the monitoring start button 51, and monitoring is stopped according to the operation of the monitoring stop button 52. For example, FIG. 6 shows the main screen 50 when the monitoring status is stopped, and FIG. 7 shows the main screen 50 when the monitoring status is being monitored.

Further, the display control unit 28 causes the display unit 15 to display the environment setting screen 60 (see FIG. 8) in response to the operation of the environment setting button 53 on the main screen 50. On the environment setting screen 60, a monitoring setting tab 61 for setting monitoring conditions and an extraction setting tab 62 for setting extraction conditions are displayed in a switchable manner. On the monitoring setting tab 61, a monitoring pattern tab 63 for setting monitoring conditions for each one or more monitoring patterns is displayed in a switchable manner, that is, for input operations of setting items displayed on each monitoring pattern tab 63. The monitoring conditions for each monitoring pattern can be set accordingly.

For example, in the monitoring pattern tab 63, the monitoring execution setting unit 64 is displayed by a check box or the like in order to set the above-mentioned monitoring execution flag as the monitoring condition of the corresponding monitoring pattern. Further, in the monitoring pattern tab 63, in order to specify the above-mentioned monitoring folder, completion folder, grant folder, output folder, and error folder, the monitoring folder designation unit 65 is completed by the input box, the start button of the folder selection dialog, or the like. The folder designation section 66, the output folder designation section 67, the grant folder designation section 68, and the error folder designation section 69 are displayed, respectively. Further, in the monitoring pattern tab 63, in order to set the post-processing mode, the duplicate processing mode, and the assigning mode described above, the post-processing mode setting unit 70, the duplicate processing mode setting unit 71, and the assigning mode are provided by a check box, an option button, or the like. The mode setting units 72 are displayed respectively.

Further, on the monitoring setting tab 61, a monitoring interval setting unit 73 and a status confirmation interval setting unit 74 are displayed in order to set the above-mentioned monitoring interval and status confirmation interval, which are common to each monitoring pattern. Further, on the monitoring setting tab 61, the log execution setting unit 75 is displayed to set whether or not to record the above-mentioned log, and the log folder specification unit 76 is displayed to specify the above-mentioned log folder. ..

The token file deposit unit 29 deposits the token file stored in the output folder described above in the TST storage server 5 of the time stamp storage organization. Specifically, the token file depositing unit 29 transmits the token file to be deposited and the storage request thereof to the TST storage server 5 via the communication unit 13 and the network 7. The token file deposit unit 29 may specify a token file to be deposited from the token files stored in each output folder, or is stored in each output folder by designating each output folder. All token files may be the target of deposit, or all token files stored in all output folders may be the target of deposit without specifying the output folder.

The token file depositing unit 29 transmits (downloads) the token file stored in the TST storage server 5 or a copy thereof to the terminal device 6, and the TST storage server 5 via the network 7 and the communication unit 13. You can also send a request to send (download) a token file to.

Next, the time stamp management by the terminal device 6 as the time stamp management device of the present embodiment, that is, the operation of the time stamp management program will be described with reference to FIG. 9 and the like.

When the time stamp management program is executed in the terminal device 6, the main screen 50 is displayed on the display unit 15. In response to the operation of the monitoring start button 51 on the main screen 50, the time stamp management program starts monitoring the managed file 31 in the monitoring folder according to the monitoring conditions (step S1). It is assumed that the monitoring conditions have already been set according to the convenience of the user. Further, one or more monitoring patterns will be managed in order, but one monitoring pattern will be described below, that is, the monitoring pattern will be described without specifying the monitoring pattern. While the monitoring status of the time stamp management program is being monitored, the folder monitoring unit 22 monitors whether or not the managed file 31 exists in the monitoring folder at each monitoring interval.

If the managed file 31 is not stored in the monitored folder and the managed file 31 in the monitored folder is not detected (step S2: NO), the monitoring process by the folder monitoring unit 22 is repeated. Further, when the monitoring status of the time stamp management program is stopped by the operation of the monitoring stop button 52 on the main screen 50 (step S3: YES), the monitoring process by the folder monitoring unit 22 is terminated.

On the other hand, when the user stores the managed file 31 in the monitored folder, the folder monitoring unit 22 detects the managed file 31 in the monitored folder (step S2: YES).

At this time, the managed file determination unit 23 determines whether or not the time stamp token 33 has already been assigned to each of the detected managed files 31 (step S4).

As a result of the determination by the management target file determination unit 23, the management target file 31 to which the time stamp token 33 is not assigned (step S4: NO) is determined to be an assignment target, and the assignment process by the TST granting unit 24 (step S6). Move to.

Further, the managed file 31 to which the time stamp token 33 is attached is determined to be an grant target when the monitoring condition grant mode is the normal grant mode (step S5: YES). , The process proceeds to the granting process (step S6) by the TST granting unit 24.

On the other hand, the managed file 31 to which the time stamp token 33 is assigned (step S4: YES) is determined not to be granted if the monitoring condition grant mode is the non-grant mode (step S5: NO). Then, the process proceeds to the extraction process (step S7) by the TST extraction unit 25.

The granting process (step S5) by the TST granting unit 24 will be described with reference to the flowchart of FIG. Regardless of whether or not the time stamp token 33 has been assigned to the original managed file 31, the managed file 31 to be granted is stored in the monitoring folder. The TST granting unit 24 sequentially extracts the management target file 31 to be granted from the monitoring folder and performs the granting process.

First, the TST granting unit 24 calculates the hash value 34 of the electronic data 32 of the management target file 31 to be granted (step S11), and transmits the hash value 34 and the issuance request of the time stamp token 33 to the TST issuing server 2. (Step S12). As described above, the TST issuing server 2 generates the time stamp token 33 in response to the issuing request and transmits it to the terminal device 6 (step S13).

When the TST granting unit 24 receives the time stamp token 33 from the TST issuing server 2 (step S14), the TST granting unit 24 newly grants the time stamp token 33 to the duplicate file of the managed file 31 to be granted to generate a new managed file 31 (step S14). Step S15). The original managed file 31 is moved from the monitored folder to the completed folder, and the new managed file 31 to which the time stamp token 33 is attached is stored in the monitored folder.

For example, when the time stamp token 33 is not given to the managed file 31 to be granted, the time stamp token 33 generated this time is used as the first time stamp token 33 and is the electronic data of the managed file 31. It is given following 32. Further, if one time stamp token 33 (that is, the first time stamp token 33) has already been given to the managed file 31 to be granted, the time stamp token 33 generated this time is the second time stamp token 33. As the time stamp token 33, it is given following the first time stamp token 33 of the managed file 31.

The extraction process (step S7) by the TST extraction unit 25 will be described. Regardless of whether or not the time stamp token 33 is attached to the original managed file 31, all the managed files 31 stored in the monitoring folder are to be extracted. The TST extraction unit 25 sequentially extracts the management target file 31 to be extracted from the monitoring folder, extracts the time stamp token 33, and temporarily stores it in the storage unit 12. Regarding the managed file 31 after the extraction process, the managed file 31 without the grant process is moved from the monitoring folder to the completion folder, and the managed file 31 with the grant process is moved from the monitoring folder to the grant folder. Will be done.

Then, based on the time stamp token 33 extracted by the TST extraction unit 25, the token file generation unit 26 generates a token file (step S8) and stores it in the output folder. The time stamp token 33 temporarily stored in the storage unit 12 is deleted.

The user can deposit the token file stored in the output folder into the TST storage server 5 by the token file deposit unit 29 of the terminal device 6, and the TST storage server 5 stores the deposited token file.

As described above, according to the present embodiment, the terminal device 6 as the time stamp management device monitors the monitoring folder that is the storage destination of the management target file 31 that is the target of the time stamp management, and from this monitoring folder. TST extraction that extracts the time stamp token 33 from the managed file 31 when the managed file 31 is detected from the monitored folder by the folder monitoring unit (monitoring unit) 22 that detects the managed file and the folder monitoring unit 22. A unit (extraction unit) 25, a token file generation unit 26 (generation unit) that generates a time stamp token file based on the time stamp token 33 extracted by the TST extraction unit 25 and stores it in a predetermined output folder. It is equipped with.

With such a configuration, in the time stamp management device according to the present embodiment, the user can store an appropriate token file that can be deposited in the TST storage server 5 by a simple operation of storing the managed file 31 in the monitoring folder. It can be generated automatically. In particular, it is possible to improve the convenience of extracting the time stamp token 33 and managing the token file for a large number of managed files 31. Further, since the generated token file is automatically stored in the output folder, the user can easily and appropriately deposit the token file in the TST storage server 5 without making a mistake in the storage location of the token file. And the time stamp storage service can be easily used. Further, the user can easily and appropriately manage the managed file 31 due to the easy and appropriate management of the token file.

Further, in the present embodiment, the terminal device 6 as the time stamp management device performs the management target file 31 detected from the monitoring folder by the folder monitoring unit 22 before the TST extraction unit 25 extracts the time stamp token 33. Further, a TST granting unit (granting unit) 24 for granting the time stamp token 33 is further provided.

With such a configuration, the time stamp management device can automatically assign an appropriate time stamp token 33 to the managed file 31 to be managed by the time stamp, and further, the automatically assigned time stamp. A token file for token 33 can be automatically generated. Therefore, the existence proof and the completeness proof of the managed file 31 can be automatically made possible without imposing a burden on the user. In particular, it is possible to improve the assignment and extraction of the time stamp token 33 for a large number of managed files 31, and further improve the convenience of managing the token files.

Further, in the present embodiment, in the terminal device 6 as the time stamp management device, the TST giving unit 24 determines that the time stamp token 33 is not given among the managed files 31 detected from the folder monitoring unit 22. A time stamp token 33 is given to the managed file 31.

With such a configuration, it is possible to automatically determine the managed file 31 to which the time stamp token 33 should be assigned and automatically assign an appropriate time stamp token 33 without imposing a burden on the user. .. The process of granting the time stamp token 33 can be suppressed to the minimum necessary.

In the above-described embodiment, the TST extraction unit 25 extracts the time stamp token 33 and the token file generation unit 26 extracts the managed file 31 to which the time stamp token 33 is assigned by the TST grant unit 24. Although an example of generating a token file based on the time stamp token 33 has been described, the token file generation process according to the present invention is not limited to this example. For example, in another embodiment, when the TST granting unit 24 grants the time stamp token 33 to the managed file 31, the time stamp token 33 is temporarily stored in the storage unit 12 and is stored by the TST extraction unit 25. The extraction process may be omitted, and the token file generation unit 26 may generate a token file based on the time stamp token 33 temporarily stored in the storage unit 12. As a result, the extraction process of the time stamp token 33 can be suppressed to the minimum necessary.

In the above-described embodiment, when the time stamp token 33 is assigned to the managed file 31 by the TST granting unit 24 and then the time stamp token 33 is extracted by the TST extraction unit 25, the original managed file 31 is completed. Although an example of storing the managed file 31 after granting in the folder and storing the managed file 31 in the granting folder has been described, the folder for storing each managed file 31 according to the present invention is not limited to this example. For example, in another embodiment, the original managed file 31 may be stored in a pre-grant folder other than the above, and the post-grant managed file 31 may be stored in the completion folder. As a result, regardless of whether or not the time stamp token 33 is newly assigned by the TST granting unit 24, all the managed files 31 corresponding to the token files can be stored in the completion folder for the convenience of the user. be able to.

Further, the present invention can be appropriately changed within the scope of the claims and within the range not contrary to the gist or idea of the invention that can be read from the entire specification, and the program and the time stamp management device accompanied by such changes are also the present invention. It is included in the technical idea of.

The present invention can be used for the management and operation of digitized intellectual property-related documents, tax-related documents, medical-related documents, etc., and stores the time stamp token attached to the electronic file in a time stamp storage organization. It can be used as a means of extracting a time stamp token from an electronic file.

1 Timestamp system 2 Timestamp token issuing server (TST issuing server)
3 Time distribution server 4 Digital authentication management server 5 Timestamp token storage server (TST storage server)
6 Terminal device 7 Network 11 Arithmetic processing unit 12 Storage unit 13 Communication unit 14 Operation unit 15 Display unit 16 Input / output unit 21 Monitoring condition setting unit 22 Folder monitoring unit (monitoring unit)
23 Managed file judgment unit (judgment unit)
24 Timestamp token granting section (TST granting section, granting section)
25 Timestamp token extraction unit (TST extraction unit, extraction unit)
26 Token file generation unit (generation unit)
27 Log recording unit 28 Display control unit 29 Token file deposit unit 31 Managed file 32 Electronic data 33 Timestamp token 34 Hash value 35 Time information 36 Digital signature 37 Digital certificate 41 Attachment 42 Electronic data 43 Timestamp token

Claims (4)

A monitoring unit that monitors the monitoring folder that stores the managed files that are subject to time stamp management and detects the managed files from the monitoring folder.
When the monitoring condition grant mode is the normal grant mode for the managed file detected from the watch folder by the monitoring unit, the time stamp token is granted to the managed file. , When the monitoring condition grant mode is the non-grant mode, the grant unit that does not perform the grant process and
When the managed file is detected from the monitored folder by the monitoring unit, the time stamp token is extracted from the managed file, and the managed file after the time stamp token is extracted is not given. The managed file was moved from the monitored folder to the completed folder, the managed file that had been granted was moved from the monitored folder to the granted folder, and the time stamp token was not assigned. The managed files include an extraction unit that moves from the monitoring folder to the error folder, and
A generation unit that generates a time stamp token file based on the time stamp token extracted by the extraction unit and stores it in a predetermined output folder.
A program for operating a computer as a time stamp management device equipped with. The granting unit is characterized in that, among the managed files detected from the monitoring folder, the time stamp token is given to the managed file for which it is determined that the time stamp token is not given. The program described in. A monitoring unit that monitors the monitoring folder that stores the managed files that are subject to time stamp management and detects the managed files from the monitoring folder.
When the monitoring condition grant mode is the normal grant mode for the managed file detected from the watch folder by the monitoring unit, the time stamp token is granted to the managed file. , When the monitoring condition grant mode is the non-grant mode, the grant unit that does not perform the grant process and
When the managed file is detected from the monitored folder by the monitoring unit, the time stamp token is extracted from the managed file, and the managed file after the time stamp token is extracted is not given. The managed file was moved from the monitored folder to the completed folder, the managed file that had been granted was moved from the monitored folder to the granted folder, and the time stamp token was not assigned. The managed files include an extraction unit that moves from the monitoring folder to the error folder, and
A time stamp management device including a generation unit that generates a time stamp token file based on the time stamp token extracted by the extraction unit and stores it in a predetermined output folder. 3. The granting unit is characterized in that, among the managed files detected from the monitoring folder, the time stamp token is given to the managed file for which it is determined that the time stamp token is not given. Timestamp management device described in.

Images