KR100694792B1 - System for circulation notary in online and method for managing notary electric p.o. box for customer unification - Google Patents

Abstract

A system for notarizing circulation of an electronic information file and a method for operating integrated electronic notary POB(Post Office Box) of a customer are provided to transmit a security certified e-document and a certificate in an email, and guarantee the same legal effect as an original copy by issuing the certificate to the received e-document and registering/storing the certificate and the e-document to a repository. A web application(209) manages the e-document and a document inputted from a user, and operates electronic signature, validity guarantee certificate issuance, and non-repudiation reception confirmation. A mail server(211) transmits a receiver/document receiving right verifying key through an SMS(Short Message Service), transmits the certificate/electronic information file to a receiver, and allows the receiver to inquire the received document file by receiving key transmitted through the SMS or generated from an OTP(One-Time Password) terminal. A database server(213) manages the document circulated online, manages the document received from the user and manages/operates the certificate for each document.

Description

DISTRIBUTION NOTIFICATION SYSTEM FOR ELECTRONIC INFORMATION FILES AND CUSTOMER INTEGRATION BOX FOR CUSTOMER UNIFICATION}

1 is a view for explaining a conventional public authentication method.

2 is a block diagram illustrating the concept of a distribution notarization system according to the present invention.

3 is a view showing a distribution notarization system according to the present invention.

4 is a view for explaining another embodiment of FIG. 3.

5 is a flowchart illustrating a registration storage service according to the present invention.

6 is a flowchart illustrating a search and browsing service according to the present invention.

7 is a flowchart for explaining a migration service according to the present invention.

8 is a flowchart for explaining a disposal service according to the present invention.

9 is a flowchart illustrating a transfer and discard service according to the present invention.

10 is a flowchart for explaining a certificate issuance service according to the present invention.

11 is a flowchart for explaining a certificate revocation service according to the present invention.

<Explanation of symbols for main drawings>

209: Web application 211: Mail server unit

213: Database 301: Firewall System

303: Data System 305: Backup Server

307: Backup Library 309: Scan Station

311 backup system 313 DMZ

The present invention relates to an electronic document authentication service, and more particularly, to guarantee the original immutability of electronic documents distributed and transmitted on the Internet cyber, to archive and prove electronic information files, to perform legal notarization of documents and to ensure legal validity The present invention relates to a distribution notarization system for electronic information files and a method of operating an integrated electronic mailbox for customers.

Recently, electronic document management methods for notarization, non-repudiation, etc. of an electronic information file (hereinafter referred to as "electronic document") have been disclosed. This is a notary method for all advisory documents sent over the Internet. When a digital file is transmitted through the Internet, it is encrypted by a separate notary server and has an algorithm that gives a confirmation date when the transmission is completed.

1 is a flowchart illustrating a notary method for a conventional electronic document. As shown, a first step in which the sender and the receiver accesses the notary web server and inputs predetermined member information, the notary web server stores it and transmits the plug-in program to be installed in the terminal of the sender and the receiver; When the sender wants to transmit a file to the receiver, the encryption key is received from the notary web server, combined with the file, and transmitted to the receiver. When the reception completion signal is transmitted from the receiver terminal, the sender receives a confirmation date. A second step of storing in a database; When the sender or the receiver wants to check the confirmation date, the file is sent to the notary web server by using a plug-in program. The notary web server checks the encryption key and issues a certificate if the encryption key matches. step; It consists of.

The notarization of the electronic document according to the above-described procedure requires that the sender's terminal to transmit the file and the receiver's terminal to be connected to the notary web server through the Internet receive a confirmation date for the file. Will be given.

However, as described above, the non-repudiation of the sender is not clear based on the confirmation date of the transmitted electronic document, and there is a problem in that the reliability is lowered due to the lack of authorized certification for the electronic document. For example, there is a need to strengthen a security network, system management, and security functions for authorized authentication of electronic documents, and to establish an interface for user convenience in response thereto.

The present invention was created to solve the above problems, and an object of the present invention is to manage digital signatures and index information, and to manage the evidence through time stamps, and to validate documents in electronic documents that are stored and received through the Internet or the Internet. It issues a certificate of guarantee, registers and stores it in the store, and distributes a securely authenticated electronic document along with the certificate by e-mail according to the recipient / viewer information specified by the client, has a non-repudiation acknowledgment function, and guarantees the same legal effect as the original. The present invention provides an electronic document distribution notarization system that can provide an integrated electronic mailbox management system, and a method for operating an integrated electronic mailbox.

These features and advantages of the present invention will become more apparent from the following detailed description based on the accompanying drawings. Prior to this, the terms or words used in the present specification and claims are defined in the technical spirit of the present invention on the basis of the principle that the inventor can appropriately define the concept of the term in order to explain his invention in the best way. It should be interpreted to mean meanings and concepts.

Electronic document distribution notarization system according to the first aspect of the present invention for achieving the above object performs management of electronic documents or documents distributed in offline, and issuance and non-repudiation of electronic signature, validation guarantee certificate for each document Web application for operating the acknowledgment on the web, a mail server unit for sending a secure authentication electronic document by e-mail according to the recipient or the reader information due to the request of the client, document management distributed online, provided offline It is characterized by consisting of a database server for document management and storage of the certificate for each document.

On the other hand, the electronic document customer integrated authorized electronic mailbox operating method according to the second aspect of the present invention for achieving the above object, in the method of operating a customer integrated certified electronic mailbox using an electronic document distribution notarization system, a) in the request for electronic document storage Registration custody procedure to execute request document archiving and certificate issuance; b) retrieval and retrieval procedures for performing retrieval of archived documents and provision of request documents for retrieval requests; c) Escalation procedures for handling escalation requests for other archives of archived documents and for disposal of escalation archive documents; d) revocation procedures for retiring archived documents and certificates and storing associated logs upon user revocation request; e) transfer and retirement procedures for disposing of expired documents, storing them in off-line storage, and performing work based on the revocation of certificates; f) a certificate issuance procedure for verifying authority and digital signatures and generating / issuing certificates in accordance with a user's request for certificate issuance; And g) executing a service including any one or more of a certificate revocation procedure for retiring the certificate after checking the revocation authority and the digital signature according to the user's request for revocation of the certificate.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

First, the electronic document distribution notarization system according to the present invention provides a storage service, a transmission / reception service, an authentication service, and a general management service. The storage service is a service such as registration, search, reading, transfer / disposal, and the like. The transmission / reception service includes transmission / reception and confirmation, status management, schedule management, history management, system linkage service, and the like. The attestation service includes a certificate generation, a certificate issuance / reissue, a certificate verification, a certificate renewal, a certificate revocation, a certificate management service, and the like. The general management service performs system management, security management, and backup / recovery. In addition, it may include additional services such as reading, inquiry, and short message (SMS).

The above-mentioned electronic document distribution notarization system performs a delivery, non-repudiation, and certification of various documents distributed online and offline, and provides services such as operating a credit card company and sending general corporate bills. For example, the electronic document distribution notarization system performs a receiving customer's mail account and billing information registration for billing information storage registration, and transmits the first sending, receiving and checking request, bill reading and sending status by SMS. It performs the function.

2 is a block diagram illustrating the concept of an electronic document distribution notarization system according to the present invention.

As shown, the electronic document distribution notarization system 201 manages electronic documents or documents distributed offline, and manages the digital signature, validity assurance certificate issuance, and non-repudiation receipt confirmation for each document on the web. A web application 209 for transmitting a message, a mail server unit 211 for transmitting an electronic document securely authenticated according to recipient or reader information due to a request of a client, and a document management distributed online and offline. It is composed of a database server 213 for storing and operating the provided document management and the certificate for each document.

The electronic document distribution notarization system 201 configured as described above is connected to the Internet to receive service requests from the B2C individuals 203 and B2B enterprise resource management (ERP), and transmits the security document to the receiver terminal 207. Perform notarization

The electronic document distribution notarization system 201 may be an authentication center implemented in the form of a certified electronic document storage, and the authentication center includes a one-time password (including a procedure of verifying whether the certificate is original through a certificate's unique number). You can verify the right to access and receive documents through OTP (One Time Password) or Short Message (SMS).
In the present embodiment, although it is set to verify whether or not to access and receive documents through one-time password (OTP) or short message (SMS), the present invention is not limited to this, but the fingerprint scan (Finger Scan), iris recognition ( It can also be verified through the Biometrics authentication method, which is an authentication method that extracts and informatizes unique biometric information of an individual including Iris Scan, Vein Recognition, or Voice Recognition.
In addition, verification may be possible through a smart card.
In this case, the certificate may include a two-dimensional barcode.

That is, the mail server unit 211 transmits a verification message (password) to verify the recipient and the document receiving authority in a short message SMS, and a certificate and an electronic information file such as a document, voice, video, image, photo, film, etc. Is sent to the recipient information processing system. When reading the certificate and the electronic information file, the mail server 211 receives the generated security key of the transmission or one-time password (OTP) terminal through a short message (SMS) to view the received document file.
On the other hand, when the certificate includes a two-dimensional bar code can also check the received document file through a barcode reader provided separately.

3 is a network diagram illustrating an electronic document distribution notarization system according to the present invention. The electronic document distribution notarization system according to the present embodiment represents an IDC (Internet Data Center) rental structure.

As shown, the electronic document distribution notarization system 201 serves as a main route of traffic to be transmitted and received between networks, so as to ensure the security of the private network, the firewall system 301, the firewall system 301 and Data system 303 for storing and managing the file and the verification guarantee certificate distributed in association with each other, in order to back up the online data stored and managed by the data system 303, a separate LAN or network is configured to manage the data. A backup system 311 for storing, a backup server 305 for backing up offline data stored and managed by the data system 303, and storing data according to the operation of the backup server 305, and storing the stored data offline. Backup library 307 for providing on, in conjunction with the firewall system 301, documents, voice, video, images, Consists of; (313 DMZ) Jin, DM support for providing the data such as a film on-line. In this case, DMG refers to an area that does not use a security policy on the network, and represents a neutral network or a buffer area existing between an internal network and an external network.

The electronic document distribution notarization system 201 performs a verification guarantee for document transmission to a client through the Internet, but the document is also transmitted when an arbitrary document is scanned and transmitted by e-mail or fax in the electronic document distribution notarization system 201. Security authentication and non-repudiation acknowledgment for To this end, the electronic document distribution notarization system 201 includes a scan station 309, and the scan station 309 includes an L2 switch for interworking with the firewall system 301.

Meanwhile, the data system 303 includes a gigabit switch for interworking with the backup system 311 and the backup server 305, and the DMZ 313 interworks with the firewall system 301. It is connected to the L4 switch to make it.

The firewall system 301 includes a backbone switch, a L4 switch, a gigabit switch, and a firewall (F / W). The data system 303 includes a database composed of a DB and a main management (MMG), and a storage group composed of first storage and second storage. In this case, MMG (MMG) refers to the main operation management server.

In addition, although the embodiment of the present invention proposes an IDC rental structure, the electronic document distribution notarization system may be implemented as needed. 4 is a diagram illustrating a network implemented according to another embodiment of the present invention. As shown, the firewall system 301 further includes an intrusion prevention system, i.e., an Intrusion Prevention System (IPS), and an intrusion detection system, i.e., an Intrusion Detection System (IDS), and the DMZ. Is directly connected to the firewall system.

The system configured as described above establishes an operating system for security, network, platform, system linkage, user interface, and system management, and executes storage service, transmission / reception service, attestation service, and general management service.

First, the security system includes an operating system security, an audit function, a server for protecting all server resources through access control between heterogeneous platforms; Detects unauthorized access to infiltrate systems, firewall networks to control access to internal undisclosed resources, control external resources for internal employees to access, and to protect resources of private networks from users of other networks. And a network configured as a VPN network for compressing and encrypting packets for end-to-end communication, and for protecting data through tunneling transmission for preventing IDS / IPS networks. It includes.

In addition, mail security applications that block information leakage to the outside through encryption of contents and attachment files, personal antivirus applications that perform virus prevention, infection diagnosis and treatment programs, administrator access status to users, Rights management applications running software that manages control, data content management applications that manage the stability of distribution over the Web, and prevention of illegal distribution.

It has secret key / public key encryption algorithm, random number generator, encryption data to perform encryption verification, digital signature algorithm, digital signature hash algorithm, and online signature for tampering or intentional forgery of sender during transmission of wireless contents. It includes digital signature data and web service / XML data that are verified and authenticated through the service. The security system also has a user security function that launches a security application solution that is accessible to each business system and Internet service with one login authentication.

In addition, the security system performs access control, alarm, locking device through the mixing method of bio-based, possession-based format such as fingerprint, iris recognition, key, card key, password, flood prevention, power supply, constant temperature and humidity control, We have security facilities such as intrusion detection and physical security devices.

In addition, the network system includes an Ethernet local area network consisting of Ethernets, Fast Ethernets, and Gigabit Ethernets, an FDDI local area network that controls network access using a token transfer method as a ring-structured communication network in the form of a fiber optic cable, and a token on a network. X.25, which specifies the interface between a local area network consisting of a wireless LAN, a communication protocol for packet documents, and a DCE (line termination) and a DTE (terminal), including a token ring communication that allows only one PC to transmit data. Wide area communication has ATM wide area communication which divides the information into packets of a certain size, adds destination information to the header portion, delivers them in a fixed size cell form, and returns them to original data at the destination.

The network system is a device that connects separate networks using the same transport protocol. A router that connects network layers, a switch that selects a path or a circuit for transmitting a unit network to a next destination, a hub, and another network that enters another network. This includes network facilities consisting of gateways, network interface cards, etc., for entry and exit.

The platform system includes servers such as RISC, Clustering, Workload, Management, etc., and comprises a UNIX server such as Solaris, AIX, HP-UX, and a Windows server including a Windows 2003 server. It consists of a client operating system platform with a Windows XP client operating system, and has a storage platform. The storage platform includes a disk (DISK), a storage area network (SAN), a network attached storage (NAS), a direct attached storage (DAS), and a backup device. The DISK storage is composed of Fiber Channel, SCSI-2, and SCSI-3 as one of server components.

The SAN storage is a network of an optical storage area that connects and manages different types of data storage devices with related data servers, and the NAS storage is a LAN or a network separately from the SAN. It is a kind of file server concept which is a storage method to organize and store data. NAS uses LAN protocols such as Ethernets and TCP / IP. The DAS storage is a storage device directly connected to a server through a SCSI or Fiber Channel, and the backup device is a digital linear tape drive (DLT), a SDD (Super DLT), Linear Tape Open (LTO), Digital Data Storage (DAT), or the like. As other facilities of the platform system, a personal computer (GUI) -type user interface, a personal productivity tool, and a PC capable of providing data storage, access, and manipulation methods are used.

Also, the system for system linkage is implemented with the web service based system, and this applies only the standard technology defined in the standard specification, and SOAP, WSDL, UDDI, etc. are used. Other technologies include TCP / IP, FTP, and Net BIOS / NetBEUI that apply open standard technologies when web services are not available.

The user interface system uses Win32-based GUIs such as web document manipulation APIs, web pages, cookies, links, images, and image maps. In addition, browser interfaces such as web browsers such as MS Internet Explorer and Netscape Navigator, and mobile browsers having a mobile web page format are used. Office automation tools such as MS Work, Hangul Hangul, Hunminjeongeum, document editing, presentations using MS Power Point, and spreadsheets using MS Excel are applied.

The system management system is a network management tool with proactive troubleshooting and prevention functions to ensure business continuity, and data collected from the performance management process are databased to predict CPU, memory and capacity trends, and to proceed with planning and execution. Storage management tools, management of IT resources assigned to applications, and performance management tools to eliminate performance degradation through proactive monitoring of system performance; task automation, classification, order management, errors, Operations management tools that perform tasks such as failure response, operation tools including server connection tools, and risk management tools that automatically manage backup / recovery.

As described above, the present invention implements a storage service, a transmission / reception service, an authentication service, and a general management service through the above system configuration. This will be described based on the attached exemplary drawings.

5 is a flowchart illustrating a registration storage service according to the present invention. Registration Archiving Service issues request document archiving and certificate for electronic document archiving request.

First, enter the step S501, the user performs system authentication via the Internet. System authentication is performed based on registered user information. In step S503, in order to perform registration for the electronic document, the electronic document registration information input and document attachment is executed. That is, the user requests the document registration to the authorized electronic document repository, and transmits the registration information and the document according to the document registration request.

In step S505, the official electronic document storage confirms the attached documents and registration information. At this time, if an error occurs in the document or the registration information is not confirmed, the user terminal requests error checking and retransmission. However, if there is no error in the attached document in step S505, and if the registration information is confirmed as the registered information, and enters step S507. In operation S507, the electronic document registration information and electronic document authority information input from the user are stored, and the original data of the attached document is stored and managed.

In step S509, the authorized electronic document storage confirms the storage of the electronic document stored in the storage, and if an error occurs in the document storage, the user is required to check the error and resend the document. On the contrary, if the storage confirmation of the electronic document is normally performed, the process proceeds to step S511 and stores log information. The log information includes a document storage time, user information, document capacity, and the like. In step S513, the official electronic document storage performs a certificate generation and certificate issuance. The certificate is stored as a certificate for document storage management including the history. This certificate is then sent to the user terminal.

6 is a flowchart for explaining a search and browsing service.

As shown, in step S601 the user performs system authentication. In step S603, the user specifies a search condition and requests execution thereof. The certified electronic document storage performs verification check on the search condition in step S605. The verification check for the search condition determines whether the user has authority to the search item, and determines whether the search item is possible. If it is determined that the search condition is not verified, the process returns to step S603 to request re-specification of the search condition.

On the other hand, if the entered search condition is verified, the process proceeds to step S607 to search for document information according to the authority. In step S609, the user presents a search result and guides the user to select an inquiry based on the search result. In this step, the user may re-specify the search condition or request to search the electronic document for the search result. If the user requests the inquiry of the electronic document, the process proceeds to step S611 and the authorized electronic document repository determines whether there is access authority according to the inquiry of the electronic document. If it is determined that there is no access right to the document, an error message is sent to the user.

However, if the access authority for the electronic document requested by the user is verified and verified, the log information is stored in step S613. The log information stores the access status of the user, that is, access time and user information. In step S615, the authorized electronic document repository transmits the electronic document to the user terminal after performing an immutation and copy protection process for the electronic document.

7 illustrates an escalation service procedure according to the present invention. The Escalation Service represents the process of escalating a request for the transfer of another archive of archived documents and the disposal of the archive document.

As shown in step S701, the user performs a login for system authentication and performs a document transfer request for document transfer in step S703. At this time, the electronic document storage is transferred to verify the access authority for the user in step S705. Document Migration If the requested user does not have access rights, the user will be notified of an error message. However, if the access authority for the current user is verified, the process proceeds to step S707 and transfers to the electronic document storage to be carried out.

The electronic document storage office enters into step S709 to check the document and registration information. Here, when an error occurs in any one of the documents or the registered information, the official electronic document archive notifies the transfer error to the electronic document archive. When the transfer error occurs as described above, the process proceeds to step S721 and the electronic document archive receives the transfer result. The electronic document archive determines the error status according to the result of the transfer and notifies the user terminal of the result.

However, as a result of the determination in step S709, if there is no transfer error, step S711 is entered. The official electronic document storage stores the registration information of the electronic document, the authority information of the electronic document, and the original data of the document. In step S713 the water pipe electronic document storage checks the stored electronic document. If an error occurs in the storage management, the process returns to step S721 described above. On the other hand, if the storage for the electronic document is normally made, go to step S715 to store the log information according to the electronic document transfer. The log information includes time information at the time of transfer, electronic document archive information, user information, and the like.

When the log information is generated, the water pipe electronic document storage in step S717 performs the generation and issuance of a registration certificate. In operation S719, the certificate storage and the history are stored and managed, and the document transfer result is notified to the electronic document archive. The electronic document archive confirms the result of the migration in step S721. If an error occurs in the implementation of the transfer, an error notification is performed. If the migration is performed normally, the process proceeds to step S723 and discards the document managed in the transfer electronic document repository.

Revocation processing of documents stores and manages log information for disposal processing separately. When the log information is generated and stored in the electronic document archive, the process proceeds to step S725 to discard the registration certificate, and stores the log information according to the certificate revocation. The transfer certificate generation issue and history are stored, and the issued transfer certificate is notified to the user.

8 illustrates a disposal service in accordance with the present invention. The revocation service is a procedure for retiring archived documents and certificates and storing related logs in response to a user's revocation request.

As shown, in step S801 the user performs system authentication and enters step S803 to request the document discard. The authorized electronic document store reviews the access authority for the user requesting the disposal of the document in step S805. If there is no access right for the user, the authorized electronic document archive provides an error message to the user.

However, if the access authority of the user is verified and verified, the process proceeds to step S807 and discards the document requested by the user. The certified electronic document repository performs reconfirmation of the discarded document in step S809, and notifies the user when an error occurs when discarding the document. On the other hand, if the document is discarded normally enters step S811 and requests the certificate to be discarded, and stores log information on the certificate discard. The log information includes certificate revocation time information, document information and user information.

When the log information is stored as described above, the authorized electronic document archive completes the certificate revocation process in step S813 and issues a certificate of revocation. In step S815, the revocation certificate is stored and history information thereof is stored. The notice of revocation and the certificate of revocation are sent to the user.

9 is a flowchart illustrating a transfer and discard service according to the present invention. It describes the procedures for discarding expired documents, storing them in off-line storage, and depending on whether the certificate is revoked.

First, in step S901, the official electronic document archives search for discarded documents whose retention period has passed. The search for the target document is performed along with the extraction of user information of the document. In step S903, the certified electronic document storage asks the user whether to discard or extend the document.

If the user requests that the document be discarded, the process proceeds to step S907 and the official electronic document storage is transferred to a secondary storage device, that is, a tape, a dat, a disk, or the like. The document state is stored in step S909, and the log information is stored and managed in step S911. The log information includes time information and user information according to secondary storage of the document. In step S913, the certified electronic document archive performs a certificate revocation process upon the expiration of the initial storage period, and issues a certificate of revocation. The issued certificate stores the certificate and the history information in step S915, and informs the user of the discard certificate.

On the other hand, if it is determined in step S905 that the user wants to extend the retention period without discarding the document expired, the retention period is extended in step S917. This is to modify the retention period information to the storage that stores the document, and stores the log information according to the extension as in step S919. The result of the extension of the document retention period is notified to the user.

10 is a flowchart for explaining a certificate issuance procedure according to the present invention. Issuance of a certificate is a procedure of generating and issuing a certificate to verify authority and digital signature according to a user's request for certificate issuance.

The service also performs a system authentication in step S1001, and has a user login procedure for this. After the user login is performed, the user performs a certificate issuance application in step S1003. Accordingly, the authorized electronic document archive receives a request for issuing a certificate and verifies the access authority and the digital signature for the user in step S1005.

As a result of the determination in step S1005, if there is no user's access authority or if an error occurs in the electronic signature, the official electronic document archives notify the user of the error. However, if there is no error in access authority and digital signature, go to step S1007 and check the type of certificate issued. After verifying the type of certificate issued, the certified electronic archives requests a time stamp from a separate certification body.

The certification authority generates a time stamp with the corresponding certificate and transmits the generated time stamp key information to the official electronic document archive. The official electronic document storage proceeds to step S1009 to perform certificate generation (DVCS) and certificate issuance. In step S1011, the certificate and the history are stored, and the certificate is sent to the user.

The revocation procedures for these certificates are then as follows. In this case, the certificate revocation is a procedure of revocation of the certificate after confirming the revocation authority and the digital signature according to the user's request for revocation of the certificate.

First, in step S1101, the user has a login procedure for system authentication. In step S1103, the user implements a certificate revocation application according to the certificate revocation procedure. The authorized electronic document archive receives the request for revocation of the certificate from the user, and verifies the revocation authority and the digital signature for the user as in step S1105. Here, if the user does not have the authority to discard or an error occurs in the electronic signature, it is notified to the user.

On the other hand, if the normal procedure for revocation authority and digital signature verification is made, go to step S1107 to search and verify the requested certificate. In this process as well, if the requested certificate is not retrieved or a separate error occurs, the user is notified of this. However, if there is no error in retrieving the requested certificate, the process proceeds to step S1109 and performs the certificate revocation procedure. When the certificate is revoked, in order to retain the revocation certificate list as in step S1111, the revocation list management is performed, and the user is notified of the revocation completion.

As described above and described with reference to a preferred embodiment for illustrating the technical idea of the present invention, the present invention is not limited to the configuration and operation as shown and described as described above, it is a deviation from the scope of the technical idea It will be understood by those skilled in the art that many modifications and variations can be made to the invention without departing from the scope of the invention. Accordingly, all such suitable changes and modifications and equivalents should be considered to be within the scope of the present invention.

As described above, the electronic document distribution notarization system and customer integrated electronic mailbox operating method according to the present invention establish a validity and security system for electronic documents received through the Internet or an offline path, thereby making the original document immutable. It has the effect of guaranteeing the quality of the documents, performing legal notarization of documents, and ensuring the legal validity.

Claims (15)

A system for performing distribution notarization of documents, A web application for managing an electronic document or a document received from a user, and operating an electronic signature for each document, issuance of a validation guarantee certificate, and non-repudiation receipt confirmation on a web; Send recipient verification and document receiving authority verification key (password) in short message (SMS), send certificate and electronic information file to recipient information processing system, and send through short message (SMS) when reading certificate and electronic information file Or a mail server unit for reading a received document file by receiving a generated security key of an One Time Password (OTP) terminal; A database server for managing documents distributed online, managing documents received from a user, and storing and managing certificates for each document; And A scanning station that performs security authentication and non-repudiation acknowledgment for the document even when scanning any document by e-mail or fax; A firewall system for acting as a main route of traffic targeted for transmission and reception between networks, to ensure security of a private network; And An L2 switch for interworking the scan station with the firewall system; Distribution notarization system of the electronic information file comprising a. delete delete The method of claim 1, The electronic information file, Distribution notarization system for electronic information files, characterized in that any one of the document, voice, video, image, photo, film. The method of claim 1, Store and manage files and verification guarantee certificates distributed and distributed in conjunction with the firewall system, including a database composed of DB and MMG (Main Management), and a storage group composed of first storage and second storage. Data system for; A backup system for managing and storing corresponding data by configuring a separate LAN or network to back up online data stored and managed by the data system; A backup server for backing up data received from a user to be stored and managed by the data system; A backup library for storing data according to the operation of the backup server and providing the stored data offline; And DMZ for interworking with the firewall system and providing the data of the electronic information file online; Distribution notarization system of the electronic information file further comprising a. The method of claim 1, The firewall system, A distribution notarization system for an electronic information file, comprising a backbone switch, a L4 switch, a gigabit switch, and a firewall (F / W). The method of claim 1, The firewall system, Intrusion Prevention System (IPS), an intrusion prevention system; And Intrusion Detection System (IDS) which is an intrusion detection system; Distribution notarization system of the electronic information file further comprising a. In the method of operating a customer integrated authorized electronic mailbox using the distribution notarization system of the electronic information file according to claim 1, a) a registration custody procedure for archiving the request document for the electronic document custody request and executing the generation and issue of a certificate; b) After immutation and copy protection processing for the electronic document is performed, the verification information on the search condition is performed to search the document information according to the authority, and the access authority according to the electronic document inquiry is judged to determine the inquiry request. A search and viewing procedure for providing a request document to a user terminal; c) Escalation procedures for handling escalation requests for other archives of archived documents and for disposal of escalation archive documents; d) revocation procedures, upon revocation of archive documents and revocation certificates upon user revocation request, and storing logs of revocation of certificates; e) transfer and revocation procedures to carry out work subject to the revocation of certificates; f) After the access authority and the digital signature are verified, the time stamp is requested from a separate certification authority by checking the type of the issuing certificate, and then the time is generated by the certification authority. Upon receipt of time stamp key information, it performs certificate generation (DVCS) and certificate issuance, stores the certificate and the history, and denies the certificate by using the recipient or reader information set due to the request of the client. A certificate issuance procedure that includes an anti-acknowledgement function and is emailed to the user; And g) a certificate revocation procedure for performing revocation of the certificate, performing revocation list management, and notifying the user of revocation completion after confirmation of revocation authority and digital signature upon the revocation of the certificate of the user; Customer integrated certified electronic mailbox operating method characterized in that to carry out. delete delete The method of claim 8, The transfer process, c-1) performing a document transfer request for document transfer and verifying and verifying user access authority thereto; c-2) when the user's access authority is verified, performing the migration of the document to the electronic document storage to be managed; c-3) checking the document and the registration information in the electronic document repository in charge and providing the verification result to the electronic document repository; c-4) storing registration information of the electronic document, authority information of the electronic document, and original data of the document in the electronic document repository in charge; c-5) storing log information according to the electronic document transfer including time information at the time of migration, electronic document archive information, and user information in the electronic document repository in charge; c-6) generating and issuing a registration certificate as well as storing the log information in the electronic document repository in charge; c-7) confirming the result of the migration in the electronic document repository, and discarding the document according to the verification result; And c-8) separately storing and managing log information on the discarded document, generating issuance and history of transfer certificate, and notifying the user of the issued transfer certificate; Customer integrated certified electronic mailbox operating method characterized in that consisting of. The method of claim 8, The disposal procedure, d-1) receiving, by the authorized electronic document repository, a request for discarding the document, and verifying an access right for the user requesting the discarding of the document; d-2) after the user's access authority is verified, discarding the document requested by the user; d-3) requesting and processing the certificate revocation when the document revocation is completed, storing log information on the certificate revocation including the certificate revocation time information, document information and user information, and issuing a revocation certificate; And d-4) storing the revocation certificate and history information thereof, and sending the revocation notice and revocation certificate to the user; Customer integrated certified electronic mailbox operating method characterized in that consisting of. The method of claim 8, The transfer and disposal procedures, e-1) extracting the user information of the document by searching for the discarded document whose storage period has elapsed; e-2) requesting the user whether to discard or extend the document; e-3) when the user requests that the document be discarded in step e-2), transferring to a secondary storage device including Tape, Dat, and Disk, and storing the document state; e-4) storing and managing log information of the discarded document including time information and user information according to the secondary storage of the document, performing certificate disposal upon expiration of the initial storage period, and issuing a discard certificate. step; e-5) storing the revocation certificate and history information and notifying the user of the revocation certificate; e-6) if the user wants to extend the retention period without discarding the document whose retention period has expired in step e-2), modifying the retention period information with the storage storing the document; And e-7) storing log information according to the extension of the document, and notifying the user of the result of the extension of the document retention period; Customer integrated certified electronic mailbox operating method characterized in that consisting of. delete The method of claim 8 The certificate revocation process, g-1) accepting a certificate revocation application in accordance with the Certificate Revocation Procedure Guide; g-2) verifying the revocation authority and the digital signature on the user, and retrieving and confirming the requested certificate according to the verification result; And g-3) performing a revocation procedure for the certificate, performing revocation list management, and performing notice of completion of revocation to the user; Customer integrated certified electronic mailbox operating method characterized in that consisting of.

Images