KR100831521B1 - Method for preventing forgery and original copy guarantee of authorization electronic documents - Google Patents

Abstract

The present invention relates to a method for guaranteeing authenticity and preventing forgery and alteration of electronic documents of an authorized electronic document repository, and more particularly, electronic documents (image documents, structured documents, and unstructured documents) are finally stored in a certified electronic document storage server. The present invention relates to a technology capable of ensuring the authenticity of electronic documents until service and preventing the forgery / falsification, thereby ensuring the stability and reliability of official electronic documents.

According to the present invention, converting an electronic document of the user terminal into a standard document (PDF / A), encrypting and packaging; Transmitting the packaged standard document (PDF / A) to a certified electronic document storage server for storage; And distributing the stored electronic document to be viewed through a user terminal. It proposes the authenticity guarantee and anti-counterfeiting method of a certified electronic document comprising a.

Certified electronic document, authenticity, forgery, standard document, PDF / A

Description

Authenticity for preventing forgery and original copy guarantee of authorization electronic documents

1 is an overall configuration diagram of a certified electronic document storage system according to the present invention.

Figure 2 is a detailed configuration of the official electronic document storage server shown in FIG.

3 is a flowchart illustrating a process of processing an image document among types of electronic documents for ensuring authenticity and preventing leakage of a certified electronic document according to the present invention.

4 is a detailed flowchart of the scanning process illustrated in FIG. 3.

5 is a view showing an example of document security for preventing forgery of authorized electronic documents according to the present invention.

6 is a flowchart illustrating a process of packaging an image document as a PDF / A document among types of electronic documents according to the present invention.

7 is a schematic view for explaining the container method of the authorized electronic document according to the present invention.

8 is a flowchart illustrating a process of packaging a structured document and an unstructured document into a PDF / A document among the types of electronic documents according to the present invention.

9 is a view showing an example of electronic document security for preventing forgery of authorized electronic documents according to the present invention.

<Description of Symbols for Major Parts of Drawings>

100: user terminal 200: network

300: certified electronic document storage server 400: DB server

410: long-term storage medium information DB 420: original / certificate information DB

430: meta information DB 500: public certification authority server

600: billing management server

The present invention relates to a method of guaranteeing authenticity of a certified electronic document and preventing forgery and alteration. More specifically, it guarantees the authenticity of the electronic document until the electronic document (image document, structured document, and unstructured document) is finally stored / serviced in the official electronic document storage server and prevents forgery and alteration. The present invention relates to a technology that can guarantee the stability and reliability of electronic documents.

As businesses and governments e-business, the use of electronic documents and electronic transactions are rapidly expanding, and the electronic document market is being pioneered around the electronic document management system (EDMS) and XML (Extensible Markup Language) markets. to be. Accordingly, the requirements for securing and storing original documents, proof of immutability of electronic documents, and prevention of forgery of electronic documents are increasing rapidly.

The requirements related to securing, archiving, authenticating, and preventing forgery are focused on industries, industries, companies, and organizations that have to deal with documents of high importance and security as the importance and security of electronic document contents increases. Demand is growing, and as business gets more sophisticated, the need grows.

The introduction of electronic documents for business efficiency in the financial and insurance industries, which handle vast amounts of contracts and transaction records, in the securities industry, where millions of Internet transactions occur daily, and in the pharmaceutical industry, which requires complex records management due to intellectual property issues. And the necessity of work such as keeping original electronic documents, proofing, and preventing forgery.

In addition, the authenticity of electronic documents in the logistics industry, legal system, and pharmaceutical industry, where electronic documents in the form of securities go through complicated paths and various subjects, and the subjects of recording, managing, and viewing of electronic trade or electronic documents are constantly changing. In addition to guarantees and certifications, the demand for work on preventing forgery is increasing.

The present invention is to solve the above problems, an object of the present invention is to store the electronic document (image document, structured document, unstructured document) in the electronic document from the registration process to finally stored in the official electronic document storage server to service In addition to ensuring the authenticity of the electronic document that is output from the certified electronic document storage server to prevent forgery and forgery to ensure the authenticity and authenticity of the official electronic document that can guarantee the stability and reliability of the electronic document, To provide.

According to the present invention as a technical idea for achieving the object of the present invention, the step of converting the electronic document of the user terminal into a standard document (PDF / A), encrypting and packaging; Transmitting the packaged standard document (PDF / A) to a certified electronic document storage server for storage; And distributing the stored electronic document to be viewed through a user terminal. It provides a guarantee and authenticity of the authenticity of the official electronic document, characterized in that it comprises a.

Preferably, the electronic document is composed of any one of an image document (paper document), a structured document, an unstructured document, and converting the electronic document into a standard document (PDF / A) and encrypting and packaging the metadata in the electronic document. It is characterized in that the container of the standard document (PDF / A) by adding the authority information, authentication information, bar code information.

More preferably, the component of the container is provided with original data, metadata, digital signature data, authentication data, bar code data, the bar code information is provided with bar code data containing the original information, authentication information, and outputs an electronic document If it is characterized in that printed on the output document to prevent forgery of the electronic document.

More preferably, in the process of converting the electronic document into a standard document (PDF / A), an encryption and key of the electronic document are generated as a document security function, and an encryption key generated by the security policy is destroyed. In the document security, the electronic document may not be stored and printed, and after a predetermined time, the electronic document may be restricted.

Hereinafter, with reference to the accompanying drawings, the configuration and operation of the embodiment of the present invention will be described in detail.

Prior to the description of the present invention, a detailed description of known functions or configurations related to the present invention will be omitted if it is determined that the gist of the present invention may be unnecessarily obscured.

1 is an overall configuration diagram of a certified electronic document storage system according to the present invention, Figure 2 is a detailed configuration diagram of the certified electronic document storage server shown in FIG.

As shown in FIG. 1, the authorized electronic document storage system according to the present invention includes a user terminal 100 linked with a scanner 50 and a web service interface for registration; Network 200; Certified electronic document storage server 300; A DB server 400 interworking with the medium information DB 410 for long-term storage, the original / certificate information DB 420, and the meta information DB 430; Public certification authority server 500; And a billing management server (600).

The user terminal 100 may be a financial institution such as a financial settlement agency, the Bank of Korea, domestic or foreign banks; Private companies such as mobile carriers, construction companies, manufacturing / services, distribution / logistics, etc .; Other public institutions; as a communication terminal device for the use of certified electronic document storage service, a computer (PC), a notebook computer, a mobile communication terminal (mobile phone), and a personal digital assistant (PDA) are applied. The scanner device 50 is a device that converts various paper documents into electronic documents, and excludes a digital camera, a hand scanner, and the like.

In this case, in the case of a paper document, the user terminal 100 includes a large-capacity document of a financial institution (a variety of financial documents), a private company (internal corporate document, external document, inter-company transaction document), or a public institution (civil document). By scanning the batch using the high-speed scanner device 50 and performing the recognition and correction work, the paper document is imaged (digitized) to be registered and stored. Of course, among the types of electronic documents, the structured document and the unstructured document can recognize the document itself as an electronic document, thereby eliminating scanning operations such as paper documents.

The network 200 represents a wired or wireless communication network for establishing a communication interface to enable data communication between the user terminal 100 and the official electronic document storage server 300.

Certified electronic document storage server 300 is to ensure the originality of the electronic document (image document, structured document, unstructured document) legally while keeping / storing the electronic document and using the stored original document, and transferred to another storage server. Basically, it provides management services for the life cycle of electronic documents, up to disposal. In this case, the electronic document in the present invention refers to an image document, a structured document, and an unstructured document which are created in an electronic form by an information processing system such as a computer and transmitted or stored and certified by an authorized certification authority.

The official electronic document storage server 300, as shown in Figure 2, the electronic document storage server for providing an electronic document storage service for the storage of electronic documents 310; A transmission / reception relay server 320 interworking with the electronic document storage server 310 to provide a transmission / reception relay service for document distribution; A certificate issuing server 330 interworking with the transmission / reception relay server 320 and providing a certificate issuance service for electronic document contents and processing; It consists of an electronic document conversion server 340 in conjunction with the electronic document storage server 310 provides an electronic document conversion service for converting an image document, a structured document, an unstructured document into an electronic document (PDF).

The document storage service of the authorized electronic document storage server 300 is linked to the electronic document conversion server 340 to register / store / convert the electronic document, electronic document for the purpose of safe storage until the electronic document is generated and discarded Provides functions such as searching / reading, issuing electronic documents, and transferring / discarding electronic documents.

That is, the document storage service is a basic service for managing electronic documents among the functions provided by the certified electronic document storage server 300, which is stably stored in the authorized electronic document storage server 300, and then retrieved / readed and transferred / decommissioned. Provide the necessary basic functions.

The transmission and reception relay service of the authorized electronic document storage server 300 is a service for distributing the stored electronic document or delivering the electronic document to a designated recipient for the electronic document submitted for distribution only. Transmission / reception confirmation, status / history management, forgery / It provides functions such as non repudiation, linking with other depots, and distribution.

Such transmission and reception relay services include a method of transmitting and receiving electronic documents through a web service and a method of transmitting and receiving documents through on / offline.

The electronic document transmission and reception method by the web service is a method of requesting the electronic document registration to the authorized electronic document storage server 300 or bringing necessary electronic documents by providing a web service interface. In addition, the method of transmitting and receiving the electronic document online is a method of directly transmitting verification data to a third party through a web service or an e-mail, and the electronic document can be provided in the form of an offline output when it is difficult to transmit or receive the electronic document online. This is how the document forgery protection function is applied.

The certificate issuance service of the authorized electronic document storage server 300 is composed of functions such as registration certificate, delivery certificate, content certificate, authenticity proof and certificate issue of the electronic document. In other words, the certificate issuance service is performed at the request of the user, and performs a task such as issuance / inquiry / revocation / verification of the certificate, and generates and processes the certificate request message and the configuration of the certificate in a specified format.

The DB server 400 interoperates with the official electronic document storage server 300 organically and provides a database of various information on the electronic document.

Long-term storage medium information DB (410) stores the media information data for document properties and classification, content certificate issuance, certificate issuance, etc. of each financial institution, private enterprise, public institutions that require long-term storage, original / certificate storage DB Information data about the original, converted document, certificate, etc. of the electronic document is stored in the 420, and the meta information DB 430 is automatically generated systematically with index information, classification information, user information, etc. for managing the electronic document. Meta-information data for automatic extraction and handwritten input data by recognition are stored for data and indexing and retrieval.

The accredited certification authority server 500 interoperates with the accredited electronic document storage server 300 to provide a public certification certificate issued by the Financial Services Authority, the Korea Computer Center, the Korea Securities Computerization, the Korea Information Certification Authority, and the Korea Electronic Certification Authority. do.

The billing management server 600 is interlocked with the authorized electronic document storage server 300 using the usage log of the authorized electronic document storage server 300, the billing system, such as service type, capacity, use period, use case, etc. This function transmits billing data for creating and inquiring charges according to the access right or the right of reading.

3 is a flowchart illustrating a process of processing an image document among types of electronic documents for ensuring authenticity and preventing leakage of a certified electronic document according to the present invention. 4 is a detailed flowchart of the scanning process illustrated in FIG. 3.

In the present invention, in order to ensure the authenticity of the official electronic document and to prevent leakage, a large amount of paper documents (image documents) are scanned in a batch using a high-speed scanner device 50, and recognition and correction are performed to form an electronic document. do.

That is, after converting the image paper document for permanent preservation into a PDF document and packaging the electronic document information as a standard document (PDF / A) (packaging) is finally stored in the official electronic document storage server 300.

This paper document processing process of the present invention, as shown in Figure 3, the scanning step for generating an image (electronic document) of the paper document (S110); Correcting / indexing the image document (S120); Converting the image document into a PDF document and storing the converted document (S130); Packaging the PDF document into a standard document (PDF / A) document (S140); And transmitting the packaged standard document (PDF / A) to a certified electronic document storage server (S150).

The detailed scanning process of the step (S110) includes the step of collectively scanning a large-capacity paper document through the high speed scanner device (50) (S111); Setting a zone addition / deletion / characteristic information check and correction to be recognized as a preprocessing step for recognizing the image document generated through the scanning (S112); Recognizing an image document using optical character reading (OCR) / form recognition / barcode / checkbox according to the setting of the preprocessing step (S113); And transmitting the document information package formed by adding the original image, the proof data, and the 2D bar code information to the image document to the authorized electronic document storage server 300 (S114).

In the image document correction process of step S120, the tilt of the image document is corrected, the contrast is adjusted, and the image document is processed in the indexing process of the image document, the OCR technique is applied, and metadata (registration information, reference information, Insert structure information, context information, content information, environment information, usage and management information, and authentic authentication information.

In the process of packaging the standard document (PDF / A) of the step (S140), the electronic document information is packaged, converted into a PDF / A format of the international standard, and read, inquired, and outputted according to access rights to the requesting requestor. Provides various forms of electronic document services. It also provides secure transmission and reception of electronic documents.

Next, the processing of the electronic document for preventing forgery of the authorized electronic document according to the present invention will be described in detail with reference to FIGS. 5 to 9. FIG. 5 illustrates an example of document security for preventing forgery and alteration of a certified electronic document, and FIG. 6 is a flowchart illustrating a process of converting an image document into a PDF / A document among electronic document types. 7 is a schematic diagram illustrating a container method of a certified electronic document, and FIG. 8 is a flowchart illustrating a process of converting a structured / unstructured document into a PDF / A document among electronic document types. Figure 9 shows an example of document security for preventing forgery of authorized electronic documents.

Processing of the electronic document for preventing forgery and alteration in the present invention, as shown in Figure 5 converts all electronic documents that can be output, such as image documents, structured documents, unstructured documents into PDF documents, original documents, metadata, authentication Data, barcode information, and other information are packaged in a container (PDF / A) and encrypted to prevent forgery.

The image document is an image generated to digitize a paper document, which is converted into a PDF document, and includes JPEG, JPEG2000, TIFF, BMP, PNG, GIF, and all other commercially available images. A structured document is an electronic document that merges data values, such as XML, database (DB), and SGML, and standardized forms, which are also converted into PDF documents. Unstructured documents are all electronic documents that can be printed, such as Hangul, MS Word, and plain text, which are also converted to PDF documents.

The process of converting an imaged electronic document into a PDF / A document or converting a structured / unstructured document into a PDF / A document is as follows.

6 is a process of converting an image document into a PDF / A document among the types of electronic documents, the process of scanning / correcting by imaging (digitizing) the paper document (S210); Imaging the electronic document (S220); Digitally signing the electronic document (S230); Converting the electronic document into a PDF document and encrypting it (S240); Constructing a container of a PDF / A document by adding metadata, authority information, proof information, and barcode information to the electronic document (S250); Recording and storing management information of the container configuration (S260); And distributing the electronic document to be viewed through the user terminal 100 (S270).

The electronic signature of the step (S230) can prevent illegal leakage and denial of the scan data in the scanning process, and the electronic signature based on the official certificate when the final data is stored.

The container configuration of the step (S250) includes original data, metadata, electronic signature, proof data, bar code data as shown in FIG. 7 and standard documents by container configuration of various electronic documents such as image documents, structured documents, and unstructured documents. Generated by converting to (PDF / A).

At this time, the original document is stored as a container component, and the metadata stores registration information, reference information, structure information, context information, content information, environmental information, usage and related information, and authentic authentication information which the authorized electronic document should have. In the case of an image document, electronic signature information of a person in charge of scanning / correcting is stored.

In addition, the proof data stores proof information about the original document, and the bar code data includes the original information, the proof information, and the like in the output document to prevent forgery of the document when the barcode information and the document are output.

Meanwhile, although FIG. 6 illustrates a process of converting an image document into a PDF / A document among the types of electronic documents, FIG. 8 illustrates a process of converting a structured / unstructured document into a PDF / A document. Looking at, step of converting the electronic document original data of the structured / unstructured document into a PDF document and encrypting (S310); Constructing a container of the PDF / A document by adding metadata, authority information, authentication information, and barcode information to the original data of the electronic document (S320); Recording and storing management information of the container configuration (S330); And distributing the electronic document to be viewed through the user terminal 100 (S340).

At this time, in the present invention, by converting the electronic document original data of the structured / unstructured document into a PDF document and encrypting it, it is managed in the form of a PDF / A document of the container configuration to prevent forgery and alteration in the verification process after viewing, inquiry, output of the electronic document Can be.

Therefore, in the present invention, the authenticity of the electronic document can be guaranteed from the registration of the electronic document to the storage and service, and the stability and reliability can be guaranteed even in the case of forgery attempt and leakage.

In more detail, when the user terminal 100 requests an electronic document, the authorized electronic document storage server 300 generates an encryption and a key for the electronic document as a document security function and processes it and applies it to the electronic document. After that, the encryption key generated by the security policy is destroyed.

At this time, the document security is applied to the printing and storage restriction document security that is impossible to store the electronic document in the user terminal 100 and printing, and the time-limited document security that limits the open after a predetermined time.

As an example, referring to FIG. 9, PDF digital copyright management (DRM) encryption is set as a security method of an electronic document, and all functions other than opening a document are disabled in the document proposal summary. In addition, barcodes for preventing forgery and alteration are printed on the top and bottom of the output document.

At this time, the PDF DRM technology converts the original document into a single format PDF document when generating a package of electronic document information, and 128 bit encryption is formed in the security handler inside the PDF document.

On the other hand, in the present invention may be stored and used in another computer-readable recording medium. Computer-readable recording media include all kinds of recording devices that store data that can be read by a computer system. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

As described above, although preferred embodiments of the present invention have been described, the present invention is not limited to the specific preferred embodiments described above, and the technology to which the present invention belongs without departing from the gist of the present invention as claimed in the claims. Various modifications can be made by those skilled in the art, and such changes can be included within the technical scope of the claims.

As described above, according to the method of guaranteeing the authenticity and prevention of forgery and alteration of the official electronic document of the present invention, from the registration process of the electronic document (image document, structured document, atypical document) to the final certified electronic document storage server to service The authenticity of electronic documents can be guaranteed. In addition, the present invention can ensure the stability and reliability of the official electronic document by preventing forgery / forgery of the electronic document that is output from the authorized electronic document storage server.

Claims (8)

Converting an electronic document of a user terminal including any one of an image document (paper document), a structured document, and an unstructured document into a standard document of PDF / A, encrypting and packaging the document; Metadata, authority information, attestation information and barcode information are added to the standard document of the PDF / A to construct a container of the standard document (PDF / A), and original data, metadata, digital signature data, authentication data, barcode data Transmitting and recording and storing management information of the container configuration further provided to a certified electronic document storage server; And Distributing the stored electronic document to be viewed through a user terminal; Guarantee authenticity and prevention of forgery of a certified electronic document comprising a. delete delete delete According to claim 1, The bar code data is further provided with bar code data containing the original information, authentication information, when the electronic document output the electronic document, characterized in that printed on the output document to prevent forgery of the electronic document To guarantee authenticity and prevent forgery. The method of claim 1, wherein the metadata stores registration information, reference information, structure information, context information, content information, environmental information, usage and related information, authentic authentication information, and the like, which the electronic document should have. In this case, the electronic signature information of the person who scanned / corrected is stored. The method of claim 1, wherein in the step of converting and encrypting the electronic document into a standard document of PDF / A, an encryption and a key of the electronic document are generated as a document security function, and an encryption key generated by a security policy. ) Is guaranteed authenticity and prevention of forgery and alteration of the official electronic document, characterized in that extinction. The method of claim 7, wherein the document security is prevented from storing and printing the electronic document. 8.

Images