KR100911445B1 - Apparatus and method for keeping document in which electronic signature is included, and computer readable medium on which program for executing the method thereof - Google Patents

Abstract

The present invention relates to an electronic document storage method, an apparatus and a computer readable recording medium having recorded thereon a program for executing the method.

The electronic document storage method of the present invention comprises the steps of storing the first electronic document containing the signature in the first storage encrypted with the first password, the encrypted signature on the second storage encrypted with the second password Storing the second electronic document, storing the first electronic document in a third storage encrypted with a third password in which the first password and the second password are combined, and hashing the first electronic document. Storing the value in a fourth storage.

Electronic documents, digital signatures, hashes, hashes

Description

Apparatus and method for storing a document containing an electronic signature, and a computer-readable recording medium recording a program for executing the method. EXECUTING THE METHOD THEREOF}

The present invention relates to an electronic document storage device, a method and a computer readable recording medium having recorded thereon a program for executing the method. More particularly, the present invention relates to an electronic document storage device capable of eliminating the possibility of forgery / falsification of an electronic document, a method, and a computer-readable recording medium having recorded thereon a program for executing the method.

As the information society is advanced, the use of electronic documents that are easy to handle and low in cost of creation and preservation is increasing. Accordingly, the storage of electronic documents is required, and the legal evidence effect of such electronic documents is required.

It must be ensured that the digitization of such documents is safe in all aspects of the document's life cycle of creation, distribution, preservation and disposal.

In the case of electronic documents including current digital signatures, the creation and distribution of the electronic signatures may provide security, but not the case of preservation. This is because it is possible to falsify or forge an electronic document with current digital devices. Thus, methods for preventing forgery, tampering, and loss of electronic documents are currently incomplete.

Moreover, electronic documents often contain contractual information that exercises legal rights. Therefore, even if such an electronic document is not forged or altered, even in the present state where the electronic document can be forged / modulated, it is difficult to have the reliability of the electronic document itself. It is difficult to be adopted as a problem.

The problem to be solved by the present invention is to provide an electronic document storage method that can eliminate the possibility of forgery / forgery of the electronic document.

In addition, an object of the present invention is to provide an electronic document storage device that can eliminate the possibility of forgery / forgery of the electronic document.

Another object of the present invention is to provide a computer-readable recording medium having recorded thereon a program for executing an electronic document storage method capable of eliminating the possibility of forgery / falsification of an electronic document.

In addition, the problem to be solved by the present invention is to provide an electronic document inquiry method that can prevent the access of third parties.

An electronic document storage method according to an embodiment of the present invention includes the steps of: storing a first electronic document including a signature in a first storage unit encrypted with a first password input by a first user; Storing a second electronic document in a second storage encrypted with a second password input by a second user, wherein the second electronic document is encrypted with the signature in the first electronic document; 2 storing the electronic document; Storing the first electronic document in a third storage encrypted with a third password in which the first password and the second password are combined; And storing a hash value hashing the first electronic document stored in the third storage unit in a fourth storage unit.
Here, the encrypted signature is preferably a fake stroke is added to the signature.
The method of adding the fake stroke to the signature may include generating a hash value based on the first password; Generating insertion positions of the fake stroke and the fake stroke based on the hash value; And adding the fake stroke to the signature based on the insertion position information of the fake stroke.
The third password may be in a concatenated form in which the first password and the second password are sequentially connected.
A computer-readable recording medium having recorded thereon a program according to the present invention includes: storing a first electronic document including a signature in a first storage unit encrypted with a first password inputted by a first user; Storing a second electronic document in a second storage encrypted with a second password input by a second user, wherein the second electronic document is encrypted with the signature in the first electronic document; 2 storing the electronic document; Storing the first electronic document in a third storage encrypted with a third password in which the first password and the second password are combined; And storing a hash value hashing the first electronic document stored in the third storage unit in a fourth storage unit.
An electronic document storage device according to the present invention comprises: a first storage unit for storing a first electronic document including a signature and encrypted with a first password; A second storage unit encrypting the signature in the first electronic document to generate and store a second electronic document, and encrypting the signature with a second password; A third storage unit storing the first electronic document and encrypted with a third password in which the first password and the second password are combined; And a fourth storage unit storing a hash value of the first electronic document stored in the third storage unit.
Here, the second storage unit preferably adds a fake stroke to the signature of the first electronic document to encrypt the signature.
The third password is preferably a form in which the first password and the second password are sequentially connected.
In addition, the electronic document inquiry method according to the present invention is an electronic document inquiry method stored by the method according to claim 1, comprising the steps of: receiving login information from the signer who signed; A first authentication step of verifying whether the received login information is login information of the signer; Requesting input of the first password to the terminal of the signer, if it is confirmed that the signer is a valid signer; A second authentication step of authenticating whether a password received from the terminal of the signer matches the first password; If the password received from the signer's terminal and the first password match, sending a final authentication number to a mobile communication terminal subscribed to the signer's resident registration number or used by the signer; A third authentication step of verifying whether the authentication number received from the terminal of the signer matches the final authentication number; And transmitting the contents of the first electronic document to the terminal of the signer if the authentication number received from the terminal of the signer matches the final authentication number.

delete

delete

delete

delete

delete

The effect of the present invention provides an electronic document storage method that can eliminate the possibility of forgery / forgery of the electronic document.

In addition, the effect of the present invention provides an electronic document storage device that can eliminate the possibility of forgery / forgery of the electronic document.

The present invention also provides a computer readable recording medium having recorded thereon a program for executing an electronic document storage method capable of eliminating the possibility of forgery / falsification of an electronic document.

In addition, the effect of the present invention provides an electronic document inquiry method that can prevent the access of third parties.

1 is a flowchart illustrating a method of storing an electronic document according to an embodiment of the present invention.

As illustrated in FIG. 1, an electronic document storage method according to an embodiment of the present invention stores a first electronic document including a signature in a first storage encrypted with a first password input by a first user. In operation S100, storing the second electronic document in which the signature is encrypted in the first electronic document in a second storage encrypted with the second password input by the second user in operation S110, the first password and the second password. Storing the first electronic document in a third storage unit encrypted with a password combined with the password (S120) and a hash value hashing the first electronic document stored in the third storage unit in a fourth storage unit; And storing in step S130.

First, in step S100, the first electronic document including the signature of the signer (first user) is stored in the first storage unit. At this time, the first storage unit is encrypted with the first password inputted from the signer to store the first electronic document. Thus, the first electronic document cannot be read without the signer's first password. That is, the first electronic document stored in the first storage unit has a function for personal verification of the signer.

In operation S110, the second electronic document including the signed signature of the signer is stored in the second storage unit. At this time, the second storage unit is encrypted with the second password inputted from the other party (second user) of the signer to store the second electronic document. Therefore, the second electronic document cannot be read without the second password of the other party. In addition, since the signature included in the second electronic document is not the true signature of the signer, the second electronic document itself cannot have a legal effect. That is, the second electronic document stored in the second storage unit has a function for internal confirmation of the counterpart. Anyone can naturally infer that the first user and the second user use the modifiers of 'first' and 'second' to indicate that they are not the same person. In addition, the 'signer' is an example of the first user, and the first user may be anyone as long as the first user is not the same person as the second user and not the signer. Those skilled in the art will naturally understand the spirit of the present invention that can be understood from the detailed description of the present invention.

In operation S120, the first electronic document is stored in the third storage unit. At this time, the third storage unit stores the first electronic document by being encrypted with a third password in which the first password inputted from the signer and the second password inputted from the counterpart are combined. Here, the third password may be a concatenated form in which the first password and the second password are concatenated. Without the first to second passwords of the signer and the counterpart, the first electronic document stored in the third storage unit cannot be read. Thus, the first electronic document stored in the third storage can have a true legal effect.

In operation S130, a hash value obtained by hashing the first electronic document stored in the third storage unit is stored in the fourth storage unit. When the first electronic document stored in the third storage unit is read and read later, it is possible to check whether the first electronic document stored in the third storage unit has been forged / modulated by referring to the hash value stored in the fourth storage unit. To do this.

In step S110, the method of generating an encrypted signature by encrypting the signature of the signer may include generating a hash value based on the first password, and generating insertion position information of the fake stroke and the fake stroke based on the hash value. And adding the fake stroke to the signature based on the insertion position information of the fake stroke. A method of encrypting a signer's signature is described below with a specific example.

First, a password having a variable length within 10 bytes is received from a signer (S300).

Next, a hash value of 64 bytes is generated using SHA-512 (secure hash algorithm-512) for a password within 10 bytes input from the signer (S310). Here, although SHA-512 is used as an embodiment, it will be apparent to those skilled in the art that other implementations may be implemented using algorithms such as SHA-1, SHA-2, and SHA-256.

On the basis of the generated 64-byte hash value to generate the fake stroke and the insertion position information of the fake stroke (S320).

The method of generating the fake stroke and the insertion position information of the fake stroke based on the generated hash value divides the hash value into M (M is a natural number) segments, and N bits constituting the fake stroke with some bits of one segment. Generating point information and generating insertion position information of the fake stroke with the remaining bits.

로 나눈 몫으로 상기 가짜획을 구성하는 N개의 점 정보를 생성하는 단계를 포함한다.The method of generating N point information constituting a fake stroke with some bits in each segment includes dividing some bits of one segment into 2 * N regions and n in 2 * N regions (where 0 <n ≤ N, where n is a natural number) and the x coordinate information is determined as the x coordinate information, and the n + N th region is determined as the y coordinate information, and x and y coordinate information are respectively determined.

Generating N point information constituting the fake stroke by the quotient divided by.

The method of generating the insertion position information of the fake stroke using the remaining bits is to convert the remaining bits to the decimal number and to perform the modular operation on the converted decimal number by the number of events currently generated. Generating.

To explain this in detail, a method of generating fake strokes and insertion position information of fake strokes when a hash value of 64 bytes and N = 5 and M = 8 will be described.

에서 N이 5이므로)로 나누고, 나눠진 몫을 이용하여 가짜획을 구성하는 5개의 점의 x 및 y좌표 값으로 사용한다. Eight segments are generated by breaking the generated 64 byte hash value by 64 bits (seg1 ~ seg8). In the 64-bit first segment (seg1), the most significant bit is divided into 50 bits by 5 bits, and the most significant bit is sequentially (x1, x2, x3, x4, x5, y1, y2, y3, y4, y5). Decide on Then, each value of (x1, y1), (x2, y2), (x3, y3), (x4, y4), and (x5, y5) information by 5 bits is set to 31 (

(N is 5), and use the divided quotient as the x and y coordinate values of the five points that make up the fake stroke.

The remaining 14 bits in the first segment are converted to decimal numbers, and the result is a modular operation based on the current number of event information to generate insertion position information of the fake stroke.

The first curve passing through five points constituting the fake stroke is generated by referring to the insertion position information of the fake stroke generated previously. Then, the generated first curve is interpolated to a plurality of points to generate a second curve. The second curve thus generated is inserted into the signer's digital signature.

The remaining second to eighth segments (seg2 to seg8) are also processed as described above to add the fake stroke to the signature.

Although not shown in the drawings, a computer-readable recording medium according to another embodiment of the present invention records a program for executing the electronic document storage method according to an embodiment of the present invention shown in FIG. 1.

That is, the first to fourth storage units in which the steps S100 to S130 shown in FIG. 1 are executed may be implemented as one recording medium. Since all of the first to fourth storage units are encrypted independently, such a recording medium makes it possible to verify the conformity of all of them.

Additionally, to prevent software or hardware errors, the management system may have a separate MD5 checksum file of a computer-readable recording medium according to another embodiment of the present invention.

2 is a view showing an electronic document storage device according to another embodiment of the present invention. More specifically, FIG. 1 is a view for explaining an electronic document storage device for performing the electronic document storage method according to an embodiment of the present invention shown in FIG.

As shown in FIG. 2, the electronic document storage device 200 according to another exemplary embodiment of the present invention may include a first storage unit 210, a second storage unit 220, a third storage unit 230, and a fourth storage unit. The storage unit 240 is included.

The first storage unit 210 stores the first electronic document 250 including the signature 255 of the signer and is encrypted with the first password input from the signer. Therefore, the first electronic document 250 cannot be read without the signer's first password.

The second storage unit 220 stores the second electronic document 265 including the encrypted signature 265 and is encrypted with the second password inputted from the counterpart of the signer. Therefore, the second electronic document 260 cannot be read without the second password of the other party.

The third storage unit 230 stores the first electronic document 250 and is encrypted with a third password in which the first password and the second password are combined. Therefore, the first electronic document 250 cannot be read without the first password and the second password.

The fourth storage unit 240 stores a hash value obtained by hashing the first electronic document 250 stored in the third storage unit 230.

Therefore, the electronic document storage device according to another embodiment of the present invention cannot forge / modulate the first electronic document stored in the third storage unit without the password of both the signer and the counterpart. Even if the document is forged / modulated, the hash value stored in the fourth storage unit can be referred to as a forgery / modulation.

3 is a flowchart illustrating an electronic document inquiry method according to another embodiment of the present invention. In more detail, FIG. 1 is a flowchart illustrating an inquiry method of an electronic document stored by the electronic document storage method according to an embodiment of the present invention.

As shown in FIG. 3, the electronic document inquiry method according to another embodiment of the present invention first receives login information from a signer who has signed (not shown).

Next, authentication check whether the received login information is valid login information of the signer (S300). That is, it is determined whether the login information received from the signer and the member information of the pre-stored signer match.

As a result of the authentication check in step S300, if it is confirmed that the signer is valid, request the input of the first password to the terminal of the signer (S310), if not matched again receives the login information from the signer. Here, the first password refers to the password entered by the signer himself in FIG. 1.

Next, the authentication check whether the password received from the terminal of the signer matches the first password (S320).

As a result of the authentication check in step S320, if the password received from the signer's terminal and the first password is the same, the final authentication number is sent to the mobile communication terminal subscribed to the signer's resident registration number or used by the signer (S330). If it does not match, request the input of the first password to the terminal of the signer (S310). Here, the final authentication number may be transmitted to the signer's mobile communication terminal in the form of a text message.

Next, the authentication check received from the signer's terminal is the same as the final authentication number authentication check (S340)

As a result of the authentication check in step S340, if the authentication number and the final authentication number received from the signer's terminal is matched, the contents of the first electronic document are transmitted to the signer's terminal (S350), and if not, re-request the final authentication number. (S330). Here, when the authentication number received from the signer's terminal and the final authentication number does not match, the final authentication number may be re-requested, or a new final authentication number may be sent to the signer's mobile terminal and requested. In addition, the final authentication number may be a one-time authentication number, such a one-time authentication number is a certification number that is no longer valid after a certain time or after use.

As described above, the electronic document inquiry method according to another embodiment of the present invention effectively prevents access by third parties because the signer can inquire the electronic document created by the signer only after passing through the first to third authentication steps. can do.

As described above, those skilled in the art will appreciate that the present invention can be implemented in other specific forms without changing the technical spirit or essential features. Therefore, the exemplary embodiments described above are to be understood as illustrative and not restrictive in all respects, and the scope of the present invention is indicated by the following claims rather than the detailed description, and the meaning and scope of the claims and All changes or modifications derived from the equivalent concept should be interpreted as being included in the scope of the present invention.

1 is a flowchart illustrating an electronic document storage method according to an embodiment of the present invention.

2 is a view for explaining an electronic document storage device according to another embodiment of the present invention.

3 is a flowchart illustrating an electronic document inquiry method according to another embodiment of the present invention.

Claims (12)

Storing a first electronic document including a signature in a first storage unit encrypted with a first password input by a first user; Storing a second electronic document in a second storage encrypted with a second password input by a second user, wherein the second electronic document is encrypted with the signature in the first electronic document; 2 storing the electronic document; Storing the first electronic document in a third storage encrypted with a third password in which the first password and the second password are combined; And Storing a hash value hashing the first electronic document stored in the third storage unit in a fourth storage unit; Including, electronic document storage method. The method of claim 1, And the signature is encrypted, wherein a fake stroke is added to the signature. The method of claim 2, The method of adding the fake stroke to the signature Generating a hash value based on the first password; Generating insertion positions of the fake stroke and the fake stroke based on the hash value; And Adding the fake stroke to the signature based on the insertion position information of the fake stroke; Including, electronic document storage method. The method of claim 1, The third password is, And the first password and the second password are in a concatenated form. Storing a first electronic document including a signature in a first storage unit encrypted with a first password input by a first user; Storing a second electronic document in a second storage encrypted with a second password input by a second user, wherein the second electronic document is encrypted with the signature in the first electronic document; 2 storing the electronic document; Storing the first electronic document in a third storage encrypted with a third password in which the first password and the second password are combined; And storing a hash value hashing the first electronic document stored in the third storage unit in a fourth storage unit, in which a program for executing an electronic document storage method is recorded. . The method of claim 5, Wherein the signature is encrypted, wherein a fake stroke is added to the signature, wherein the computer readable recording medium has recorded a program for executing the electronic document storage method. The method of claim 6, The method of adding the fake stroke to the signature Generating a hash value based on the first password; Generating insertion positions of the fake stroke and the fake stroke based on the hash value; And Adding the fake stroke to the signature based on the insertion position information of the fake stroke; Computer-readable recording medium recording a program for executing the electronic document storage method comprising a. The method of claim 5, The third password is, A computer-readable recording medium having recorded thereon a program for executing an electronic document storage method, wherein the first password and the second password are sequentially connected. A first storage unit storing a first electronic document including a signature and encrypted with a first password; A second password-encrypted second storage unit for encrypting the signature in the first electronic document to generate and store a second electronic document; A third storage unit storing the first electronic document and encrypted with a third password in which the first password and the second password are combined; And A fourth storage unit storing a hash value obtained by hashing the first electronic document stored in the third storage unit Electronic document storage device comprising a. The method of claim 9, And the second storage unit encrypts the signature by adding a fake stroke to the signature of the first electronic document. The method of claim 9, The third password is, The electronic document storage device of the form in which the first password and the second password are successively attached. In the electronic document inquiry method stored by the method according to claim 1, Receiving login information from the signed signer; A first authentication step of verifying whether the received login information is login information of the signer; Requesting input of the first password to the terminal of the signer, if it is confirmed that the signer is a valid signer; A second authentication step of authenticating whether a password received from the terminal of the signer matches the first password; If the password received from the signer's terminal and the first password match, sending a final authentication number to a mobile communication terminal subscribed to the signer's resident registration number or used by the signer; A third authentication step of verifying whether the authentication number received from the terminal of the signer matches the final authentication number; And If the authentication number received from the terminal of the signer matches the final authentication number, transmitting the contents of the first electronic document to the terminal of the signer. Including, electronic document inquiry method.

Images