KR100966323B1 - System for managing electric filing document, and method therefor, and the recording media storing the program performing the said method - Google Patents

Abstract

The present invention provides a process for acquiring various types of electronic document certificates for authenticating an electronic document by a user server driven at the request of the user, and an electronic document original encrypted by the user server with an electronic document storage server connected to the user server. The present invention relates to a system for managing an electronic document related to a process of providing an electronic document package, and a method thereof, and a recording medium storing a program for implementing the method. According to the present invention, regardless of time and place, the user can be provided with the electronic document certificate from the electronic document storage side, thereby improving the recognition of the electronic document storage side and improving the reliability of the electronic document. . In addition, the electronic archives and related companies can develop a user server system that is consistent with each other, and users of the electronic archives service can use the user server system having a unified function regardless of the developer, making it easier and more reliable. The service will be available.

Electronic Document, Electronic Document Certificate, Electronic Document Package, Electronic Document Archive (CEDA), Submission Information Package (SIP), Dissemination Information Package (DIP), Archival Information Package (AIP)

Description

System for managing electric filing document, and method therefor, and the recording media storing the program performing the said method}

The present invention relates to a system for managing an electronic document, a method thereof, and a recording medium storing a program for implementing the method. More specifically, a process in which a user server driven at the request of a user acquires various types of electronic document certificates for authenticating the electronic document, and an electronic document in which the electronic document storage server connected to the user server and the network is encrypted in the user server. A system for managing an electronic document related to a process of providing an electronic document package including an original, and a method thereof, and a recording medium storing a program for implementing the method.

In general, an electronic filing document is an electronic form by an apparatus having an information processing capability such as a computer, and refers to information that can be stored and transmitted using a signal. Such electronic documents are protected under today's legislation, for example, according to Article 5 of the Telecommunications Business Law, "E-Documents are not valid as documents because they are in electronic form, unless otherwise provided by other laws. It is not denied. "

However, in the related art, a certificate for estimating the authenticity of such an electronic document has not been properly prepared. For this reason, in the case of forging or tampering with an electronic document through hacking or the like, proper coping is not achieved, causing a user to doubt the electronic document itself. In view of this, the user can inquire the electronic document repository side of the current state of the electronic document, but in the past, such a service itself was not possible because there was no certificate. As an example, there is a prior invention related to the electronic document certificate, Korean Patent Publication No. 2006-110955 (Invention name: the method of updating the content certificate of the electronic document content verification system and the method of verifying the updated content certificate). The overall contents described are for extending the validity of the electronic document, and it is impossible to provide a certificate service in response to the user's request.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-described problems, wherein a user server driven at the request of a user acquires various types of electronic document certificates for authenticating an electronic document through an electronic document storage server provided in the electronic document storage. An object of the present invention is to provide a system for managing an electronic document related to a method, a method thereof, and a recording medium storing a program for implementing the method.

In addition, the present invention is characterized in that the electronic document certificate is encrypted and provided as an electronic document package using the structure according to the SIP (Submission Information Package), DIP (Dissemination Information Package), AIP (Archival Information Package), etc., together with the original electronic document An object of the present invention is to provide a recording medium storing a system for managing an electronic document, a method thereof, and a program for implementing the method.

The present invention has been made to achieve the above object, in the system for managing an electronic document, generating a certificate request message requesting issuance of an electronic document certificate for authenticating the electronic document, according to the certificate request message A user server that stores the issued electronic document certificate, verifies and reads the issued or stored electronic document certificate, and prints the printed document on paper after the electronic document certificate is forged or protected; And if the certificate request message is provided, and verifies the certificate request message, and provides an electronic document management system comprising a pre-architecture server for issuing the electronic document certificate upon successful verification.

Preferably, the electronic document certificate is a registration certificate to prove the registration of the electronic document, an issuance certificate to prove the issuance of the electronic document, a transfer certificate to prove the transfer of the electronic document, a revocation certificate to prove the disposal of the electronic document, issuance And at least one of an original certificate certifying that the electronic document is the same original as the archived electronic document, and a time-certification certificate certifying that the schedule data existed at a specific time.

Preferably, the user server generates a SIP containing information on the electronic document registration, and process the DIP provided by containing the electronic document original or the electronic document conversion, the SIP, the electronic document original and the electronic document The electronic document package including at least one of the converted versions is read, and the electronic document package is characterized in that it is provided with prints after the forgery prevention or copy protection.

Preferably, the user server accesses the electronic document storage server to query the contents to be contained in the certificate request message; A message generation unit generating the certificate request message based on the contents inquired by the inquiry unit; A certificate verification unit that verifies an electronic document certificate provided from the electronic document storage server with respect to the certificate request message as a certificate for authenticating the electronic document; A SIP generating unit generating a SIP containing information on electronic document registration; A DIP processing unit for processing an electronic document original or electronic document converted DIP provided from the electronic document storage server, and decrypting the electronic document original or the electronic document converted if it is encrypted; A package verification unit that verifies an electronic document package including at least one of the SIP, the electronic document original, and the electronic document converted version; A display unit for reading the electronic document certificate or the electronic document package that has been successfully verified by the certificate verification unit or the package verification unit; A forgery and forgery prevention unit for providing a forgery prevention function or a copy protection function when the electronic document certificate or the electronic document package is requested to be printed on paper; An output unit for printing an electronic document certificate or an electronic document package according to a processing result of the forgery and alteration prevention unit; A communication unit for network connection with the electronic document storage server; And a central processing unit for controlling the overall operation of all the components constituting the user server.

More preferably, the user server comprises a certificate storage folder generating unit for providing a folder generating process for storing the electronic document certificate; And a package storage folder generation unit that provides a folder generation process for storing the electronic document package.

In addition, the present invention provides a method for acquiring an electronic document certificate for authenticating an electronic document, comprising the steps of: (a) generating and transmitting a certificate request message requesting issuance of the electronic document certificate; (b) verifying the certificate request message when it is received; (c) issuing and transmitting the electronic document certificate upon successful verification in step (b); (d) verifying the electronic document certificate when it is received; And (e) storing, displaying, or printing the electronic document certificate upon successful verification in the step (d).

Preferably, after the step (e), (fa) loading the stored electronic document certificate; (fb) verifying the loaded electronic document certificate; And (fc) displaying or printing the loaded electronic document certificate upon successful verification.

Preferably, the step (a), (aa) querying the contents to be contained in the certificate request message; (ab) generating the certificate request message based on the inquired content; And (ac) transmitting the generated certificate request message, wherein the storing in step (e) combines the associated electronic document certificate and the certificate request message into one.

Preferably, when the print in the step (e) is provided as a paper, the paper is characterized in that the printing is performed only in a forgery-proof, copy-protected or designated place.

Preferably, step (d) comprises: (da) receiving an issued electronic document certificate; (db) determining whether the received electronic document certificate is requested by the user using the stored certificate request message; And (dc) if the determination result is requested by the user, performs step (e), and if the determination is not requested by the user, stopping the execution of step (e).

Preferably, the verification in step (d) uses a Submission Information Package (SIP) that contains information on electronic document registration.

In addition, the present invention comprises the steps of (a) generating a SIP (Submission Information Package) containing the registration information of the specific electronic document; (b) receiving and processing the generated SIP to generate an archive information package (AIP) for the specific electronic document; (c) issuing a registration certificate certifying that the specific electronic document is registered according to the AIP generation; (d) processing the AIP to generate a DIP (Dissemination Information Package) when there is a request for issuing the electronic document; (e) receiving and processing the generated DIP, and decrypting an electronic document original or an electronic document conversion copy attached to the generated DIP if it is encrypted; (f) checking whether the requested electronic document is inserted in the processed DIP; And (g) storing or displaying an electronic document package including one or more of the AIP, the original electronic document, and the converted electronic document when the requested electronic document is inserted. Provide the method of providing.

Preferably, in the step (a) it also generates an electronic signature attached to the SIP.

Preferably, the encryption in step (d) uses the public key of the user, and the decryption in step (e) uses the private key provided by the user.

The present invention also provides a recording medium in which a program for implementing the above-described methods is stored in a computer-readable recording medium.

The present invention produces the following effects when the above object and configuration are satisfied. First, regardless of time and place, the user can be provided with the electronic document certificate from the electronic document storage side, thereby improving the recognition of the electronic document storage side, and improves the reliability of the electronic document. Second, according to the present invention, the electronic document storage side or related companies can develop a user server system that is consistent with each other, and the electronic document storage service user can use a user server system having a unified function regardless of the developer. Easy and reliable service will be available.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First of all, in adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are used as much as possible even if displayed on different drawings. In addition, in describing the present invention, when it is determined that the detailed description of the related known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted. In addition, the following will describe a preferred embodiment of the present invention, but the technical idea of the present invention is not limited thereto and may be variously modified and modified by those skilled in the art.

1 is a conceptual diagram schematically illustrating the overall configuration of an electronic document management system according to a preferred embodiment of the present invention. As shown in FIG. 1, the electronic document management system 100 according to a preferred embodiment of the present invention includes a user terminal 110, a user server 120, a user database 122, and an electronic document storage server 130. And electronic document archive database 132.

The user terminal 110 refers to a terminal to which an individual who wishes to use an electronic filing document or an electronic document certificate for authenticating the electronic document in an embodiment of the present invention. In an embodiment of the present invention, the electronic document certificate may be any one of a registration certificate, an issuance certificate, a transfer certificate, a revocation certificate, an original certificate, and a time certification certificate. The definition of each certificate is as follows.

The registration certificate is defined as a certificate issued by the electronic document storage server 130 as a target for the electronic document registration function. The issuance certificate is defined as a certificate for issuing a certificate for the electronic document issuing function performed by the electronic document storage server 130. The transfer certificate is defined as a certificate issued for the evidence for the electronic document transfer function performed by the electronic document storage server 130. The revocation certificate is defined as a certificate issued for the evidence of the electronic document revocation function performed by the electronic document storage server 130. The original certificate is defined as a certificate certifying that the contents of the electronic document issued by the electronic document storage server 130 are the same as the contents of the original electronic document stored in the archive. A time stamp is defined as a certificate that certifies that specific data existed at a particular time.

The user server 120 registers and manages an electronic document according to a user's request for access through the user terminal 110 in the embodiment of the present invention, and performs a function related to the application and issuance of an electronic document certificate. Specifically, in the embodiment of the present invention, the user server 120 generates a certificate request message containing information related to an electronic document certificate issuance request, stores a provided electronic document certificate, and functions related to viewing the electronic document certificate. It provides a function of preventing forgery and alteration when outputting an electronic document certificate on paper, and a function of verifying an electronic document certificate.

In the above, the certificate request message uses signedData represented by a ContentInfo structure presented by IETF RFC 3852 CMS (Cryptographic Message Syntax), which is a digital signature structure. signedData is a commonly used structure, and has a function to give various additional information and functions. CMS basically conforms to Abstract Syntax Notation One (ASN.1) Basic Encoding Rules (BER), and may require DER (Distinguished Encoding Rules) for some information. have.

As described above, a method for implementing the above-described certificate request message is, for example, "X680; ITU-T Recommendation X.680 | ISO / IEC 8824-1: Information Technology ◎ Abstract Syntax Notation One (ASN.1): Specification of basic notation" , "X690; ITU-T Recommendation X.690 | ISO / IEC 8825-1: Information Technology ◎ SN.1 Encoding Rules: Specification of Basic Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER) "," CMP; Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP) (RFC 4210), IETF, 2005 "," CMS; Cryptographic Message Syntax (RFC 3852), IETF, 2004 ", and the like. .

The user server 120 also provides a function related to an electronic document package, a function related to an interface associated with the electronic document storage server 130, and the like. In detail, the user server 120 may generate a SIP for an electronic function (a function related to an electronic document package), a function of storing an electronic document package, a viewing function of an electronic document package, and forgery when outputting the electronic document package to a paper. It provides a function that prevents the processing, the DIP processing the encrypted document and optionally decrypts the encrypted electronic document. In addition, the user server 120 provides a function for generating or processing a message, a message security function, and the like for the latter function (a function related to an associated interface).

On the other hand, the SIP (Submission Information Package) is an acquisition information package, and refers to a structure configured when the user transmits the electronic document to the electronic document storage server 130. On the other hand, DIP (Dissemination Information Package) is a distribution information package, a structure that is used when the electronic document storage server 130 provides the electronic document to the user server 120.

Meanwhile, the user server 120 also provides functions related to other operations in addition to the above-described main functions. That is, the user server 120 provides a function of registering or correcting user information, generating user identification information, and the like in relation to user management. In addition, the user server 120 provides a function of managing a user certificate in connection with certificate management, a function of verifying a certificate issued by the electronic document storage server 130 or managing verification information. In addition, the user server 120 provides an access control function, an integrity verification function, a version management function, an update function, a user information protection function, and the like in connection with user system management.

In the above, a detailed description of functions provided by the user server 120 will be described later with reference to the accompanying drawings.

The user database 122 is a database associated with the user server 120. In the present invention, the user database 120 stores data received or processed by the user server 120.

The electronic document storage server 130 is a device having an information processing function provided in a CEDA (Certified E-Document Authority). In the present invention, although the concept of the server is borrowed, it is not necessarily limited to the server. That is, even a computer capable of acting as a server can be sufficiently implemented, and this is also the case of the user server 120.

The electronic document storage server 130 is connected to the user server 120 through various wired and wireless communication networks 140 functioning as a network in an embodiment of the present invention, and functions to process various items requested by the user server 120. To perform. In the present invention, since the function performed by the electronic document storage server 130 corresponds to the request of the user server 120, the details of the user server 120 will be described later.

The electronic document storage database 132 is linked to the electronic document storage server 130 and stores the data received or processed by the electronic document storage server 130 as a role of the user database 122. Meanwhile, it is preferable that the user database 122 and the electronic document archive database 132 have a write once read many (WORM) function in an embodiment of the present invention. Then, during the set retention period, deletion, forgery, or the like becomes impossible, thereby improving reliability.

Next, the internal structure of the user server 120 is demonstrated. 2 is a block diagram showing the internal configuration of a user server according to a preferred embodiment of the present invention. According to FIG. 2, the user server 120 according to an exemplary embodiment of the present invention includes a communication unit 200, a central processing unit 205, an inquiry unit 210, a message generator 215, and a certificate storage folder generator 220. And a storage folder generating unit 230, a display unit 235, an output unit 240, a forgery and alteration prevention unit 245, a certificate verification unit 250, and a package verification unit including a package storage folder generation unit 225. A verification unit 260 including 255, and a messaging unit 275 including a SIP generation unit 265 and a DIP processing unit 270. Functions of the respective parts constituting the user server 120 will be described below with reference to the accompanying drawings, which will be omitted herein.

On the other hand, the user server 120 may further include a power supply unit for supplying power so as to be always driven in an embodiment of the present invention, an input unit for performing a specific signal input.

Next, the functions performed by each component of the user server 120 according to the present invention will be described in detail.

① Certificate related function

The user server 120 performs a function of requesting issuance of a certificate for an electronic document from the electronic document storage server 130 in the embodiment of the present invention. To this end, the user server 120 performs a function of generating a certificate request message in advance. The user server 120 generates a certificate request message as follows.

In a first step, the communication unit 200 performs a communication task to be connected to the electronic document storage server 130 under the control of the central processing unit 205. In the second step, when the user server 120 and the electronic document storage server 130 are interconnected, the inquiry unit 210 accesses the electronic document storage server 130 and inquires the contents to be included in the certificate request message. In a third step, the message generator 215 generates a certificate request message based on the inquired content.

When the certificate request message is generated as described above, the certificate storage function is provided thereafter. The certificate storage method of the user server 120 is as follows.

In the fourth step following the third step, the communication unit 200 transmits the generated certificate request message to the electronic document storage server 130 under the control of the central processing unit 205. In a fifth step, if the electronic document certificate is normally issued by the electronic document storage server 130, the communication unit 200 receives it, and the central processing unit 205 stores the received electronic document certificate in the user database 122. Let's do it. At this time, the central processing unit 205 preferably stores the electronic document certificate in association with the relevant certificate request message. On the other hand, the electronic document certificate is stored in the default path of the user database 122, which can be implemented as a hard disk, but is not necessarily limited thereto, and may be stored in any path or other storage medium designated by the user. On the other hand, the user server 120 according to the present invention provides a folder generating process for storing the certificate through the certificate storage folder generation unit 220, a detailed description thereof will be described later.

On the other hand, the user server 120 is provided with a display unit 235 to provide a certificate viewing function for outputting the contents of the electronic document certificate on the screen for the user to check. Such a certificate viewing function is preferably to be automatically performed as soon as the communication unit 200 receives the electronic document certificate issued by the electronic document storage server 130. On the other hand, when the central processing unit 205 loads the stored electronic document certificate according to the user's instructions, the list of electronic document certificates stored in the default path is automatically inquired so that the user can easily browse the electronic document certificate. It is also possible. Meanwhile, in the present invention, the user server 120 may display the above-described bar on the display device of the user terminal 110 without providing the display unit 235 separately.

The user server 120 may implement a certificate viewing function through a certificate viewer interface. The certificate viewer interface can be easily implemented by those skilled in the art, and thus a detailed description thereof will be omitted.

In the embodiment of the present invention, the user server 120 also provides a function of outputting an electronic certificate as a paper certificate through the output unit 240. When printing as a paper certificate, 2D barcodes (overcoming the limitations of data capacity of existing one-dimensional barcodes, a large amount of information such as letters, numbers, photos, etc. can be stored in a small square so that the contents described by the forgery and alteration prevention unit 245 cannot be forged. It is preferable to apply a forgery prevention technique or a copy protection technique, such as a high-density coded dimensional symbol), and to prevent this, it is also possible to provide output only through a printer device registered in the electronic document storage server 130. . Meanwhile, the output unit 240 may also provide a function of including a guide letter and a web page URL so that the user may verify the certificate by accessing the web page provided by the former advisory vault server 130 when generating the paper certificate. . As described above, the format of the above-described paper certificate is composed of a certificate type, a certificate content, an official electronic document archives logo image, an online confirmation guide letter, and the like, and thus a detailed description thereof will be omitted.

The user server 120 provides a function of verifying the electronic document certificate issued by the electronic document storage server 130 through the certificate verification unit 250 in the embodiment of the present invention. The electronic document certificate verification function of the certificate verification unit 250 is preferably performed immediately after the communication unit 200 receives the certificate, and then automatically performs the verification even when the contents of the stored certificate are loaded for use in checking or using the certificate. This is preferred.

The electronic document certificate verification method of the user server 120 can be summarized as follows. In a first step, the communication unit 200 receives the electronic document certificate. In a second step, the certificate verification unit 250 reads the stored certificate request message, and determines whether the received certificate is a certificate of the content requested by the user. In the third step, if the identity is confirmed, the certificate verification unit 250 notifies the central processing unit 205 of the verification confirmation, so that the central processing unit 205 performs the next function. On the other hand, if the identity is denied, the certificate verification unit 250 notifies the user of the verification failure so that the subsequent procedure does not proceed.

In the above description, the method for receiving and issuing an electronic document certificate by synthesizing the certificate-related functions of the user server 120 described above is summarized as follows. 3 is a flowchart illustrating a method for acquiring an electronic document certificate of a user server according to a preferred embodiment of the present invention.

Referring to FIG. 3, when an electronic document certificate request is received through the user terminal 110 (S300), the user server 120 generates a certificate request message (S305). This implementation of step S305 may be performed by the user inputting a certificate issue button in the embodiment of the present invention. Next, when the user server 120 transmits the generated certificate request message to the electronic document storage server 130 (S310), the electronic document storage server 130 performs a function of verifying the certificate request message (S315). The verification of the certificate request message of the electronic document storage server 130 may be performed by, for example, determining whether the certificate request message is generated by the registered user server 120. Of course, the verification of the certificate request message of the electronic document storage server 130 is not limited thereto.

Next, if the verification is successful, the electronic document storage server 130 issues an electronic document certificate (S320), and transmits it to the user server 120 (S325). Next, the user server 120 verifies the received electronic document certificate (S330), and stores the electronic document certificate in the user database 122 only in case of successful verification (S335).

Meanwhile, as already mentioned, the user server 120 immediately displays the received or loaded electronic document certificate. In the case of displaying the received electronic document certificate, it may be executed simultaneously with storing the electronic document certificate in step S330. On the other hand, in the case of displaying the loaded electronic document certificate, the user server 120 executes the interface according to the user's request, verifies the electronic document certificate loaded through the interface, and provides the electronic document certificate only for successful verification. It is done as it is. On the other hand, when a user requests output, the user server 120 outputs an electronic document certificate.

② Function related to electronic document package

In order for the user server 120 to register the electronic document in the electronic document storage server 130, it is necessary to generate the SIP through the SIP generating unit 265. When the SIP generating unit 265 generates the SIP, the SIP generating unit 265 generates the authentication information (for example, the digital signature) attached to the SIP.

The user server 120 provides a function of storing the SIP in the user database 122 through the central processing unit 205 when the SIP is generated. The central processing unit 205 provides a function of storing a DIP issued by the electronic document storage server 130 or a SIP or DIP provided from another user. The series of electronic document packages including the SIP or the DIP is stored in the default path of the user database 122 as in the case of the electronic document certificate, and may be stored in any path or other storage medium designated by the user. Meanwhile, a folder generation process for storing an electronic document package executed by the package storage folder generator 225 will be described later.

On the other hand, the user server 120 in the embodiment of the present invention it is also possible to use the SIP when verifying the certificate (specifically, when verifying the electronic document) through the certificate verification unit 250. In consideration of this, the present invention may store the AIP ID information included in the certificate response message of the electronic document storage server 130 at the time of registering the electronic document to be utilized as link information of the SIP. In the above, the certificate response message refers to the processing result of the electronic document storage server 130 for the certificate request message, AIP (Archival Information Package) is a preservation information package configured when the electronic document storage server 130 stores the electronic document. Says structure.

The user server 120 also provides an electronic document package reading function for outputting the contents of the electronic document package on the screen through the display unit 235 so that the user can check the contents of the electronic document package. . On the other hand, the user server 120 supports the reading of the electronic document included as an attachment in the embodiment of the present invention is a long-term storage of the original. If the user server 120 does not support a long-term storage format, a conversion format of the business utilization format, or an electronic document original, it is also possible to support the function of storing as a file so that it can be loaded by an application that supports the format.

The user server 120 may implement the electronic document package viewing function through the electronic document package viewer interface. The electronic document package viewer interface can be easily implemented by those skilled in the art, and thus a detailed description thereof will be omitted.

On the other hand, the central processing unit 205 of the user server 120 may be limited to view the contents of the electronic document package or the attached file to one in consideration of security. In this case, the central processing unit 205 may designate a specific protocol through consultation with the electronic document storage server 130 to be linked. However, it is preferable that this specific protocol does not violate the standard provided by the electronic document management system according to the present invention.

The user server 120 may provide an output function for the electronic document package or the long-term storage electronic document through the output unit 240. An alternative output function has already been described in the electronic document certificate-related functions, which is omitted here. However, in the case of the documents, a warning sentence may be included in the output, and the warning sentence is preferably located at the beginning or the end so as not to damage the contents of the document. Note that the present invention does not provide such an output function for the electronic document original.

Meanwhile, the user server 120 may provide a verification function for the structure of the electronic document package or the electronic signature inserted in the package through the package verification unit 255. This also omits detailed description as already explained in the certificate related function.

On the other hand, the user server 120 in the embodiment of the present invention, because the electronic document storage server 130 encrypts the electronic document (or the entire DIP including this and attachments) when generating the DIP DIP processing unit 270 to solve the problem ). Usually, the electronic document storage server 130 encrypts and issues an electronic document included in the DIP using the user's public key according to the user's request, and the DIP processing unit 270 receives the user's private key and reads it. The electronic document is decrypted as much as possible.

The electronic document package providing method of the electronic document management system 100 will now be described based on the electronic document package related function. 4 is a flowchart illustrating a method for providing an electronic document package in an electronic document management system according to a preferred embodiment of the present invention.

Referring to FIG. 4, first, the user server 120 generates a SIP that contains registration information of an electronic document for an electronic document registration request (S400). Next, the user server 120 transmits the SIP to the electronic document storage server 130 (S405), and the electronic document storage server 130 generates an AIP for the electronic document registered using the SIP (S410). ). Thereafter, the electronic document storage server 130 stores the generated AIP in the electronic document storage database 132 (S415). At the same time, the electronic document storage server 130 by default generates and issues a registration certificate to prove the electronic document registration (S420). In the above, the SIP has a structure that is not suitable for storing in the electronic document storage database 132, but has a structure suitable for storage by generating in the AIP.

Thereafter (ie, after a predetermined time or period of time), when there is a request for issuing an electronic document from the user (S425), the electronic document storage server 130 generates a DIP by encrypting the electronic document attached to the AIP. (S430). Of course, it is possible to generate a DIP in AIP without encrypting the electronic document. This is because AIP and DIP have different structures. Specifically, AIP has a structure suitable for database storage, and DIP has a structure that is mutually contracted so that transport and other servers can easily interpret it. Meanwhile, the encrypted electronic document may be an electronic document original or an electronic document converted copy (for example, a copy) having the same configuration as the electronic document original. Thereafter, the electronic document storage server 130 transmits the DIP to the user server 120 (S435).

If the user server 120 receives the DIP and processes it (S440). When the electronic document included in the DIP is encrypted during the DIP process, the user server 120 decrypts the electronic document. Thereafter, the user server 120 determines whether the electronic document extracted from the DIP is requested (S445), and includes the AIP, the original electronic document, and the converted electronic document only when the electronic document is requested. The electronic document package is stored in the user database 122 (S450). The DIP at step S440 includes, of course, an electronic document original or electronic document conversion.

In this case, the user server 120 may bundle the SIPs provided with the DIP as one and store them as an electronic document package. On the other hand, the user server 120 provides a function of reading the electronic document package in addition to storing the electronic document package executed in the step S450 (S455).

③ Interface related function

In the case of the present invention, the user server 120 may be divided into a personal use and a corporate use. In the case where the user server 120 is for a corporation, the user server 120 complies with the provisions for supporting the generation, transmission, processing (including analysis, verification, etc.) of each function. As defined, supported messages include document registration messages (SubmitDocument), document issuance messages (GetDocument), document third-party issuance messages (DeliverDocument), document issuance messages using certificates (GetDocumentByCert), document transfer messages (TransferDocument), and document disposal. Message (DeleteDocument), Extended Document Retention Message (ExtendRetention), Certificate Issuance Message (IssueCert), Certificate Renewal Message (UpdateCert), Certificate Verification Message (VerifyCert), Certificate Download Message (GetCert), Search Message (Search), etc. .

On the other hand, when the user server 120 is for personal use, it is not necessary to comply with the message format according to the standard. However, when sending a request message, a specific factor must be included and transmitted, and in the case of a response message, it must be checked whether the included factor is valid. The parameters included in the message include SIP on request message when registering electronic documents, response message when registering electronic documents, certificate of initial registration when issuing electronic documents including encryption request, certificate list on request message when issuing electronic documents including encryption request, and response message when issuing electronic documents including encryption request. DIP, issuance of electronic document using the recipient's email address, recipient certificate and certificate in the request message when implementing the 3rd party issuance of DIP, electronic document issuing the certificate and certificate in the request message. DIP including the original document or electronic document conversion in the response message for the original document, the certificate request message in the request message when issuing the certificate, the certificate in the response message when the certificate is issued, the certificate in the request message or the response message when the certificate issuance is issued. Verification of certificates issued by individuals The response message is a certificate of a random number, certificate download response message.

The user server 120 provides security functions such as encryption / decryption, integrity guarantee, and non-repudiation for all transmission / reception messages for using the electronic document storage server 130 regardless of whether it is for personal or corporate use. Specifically, when the user server 120 is for a corporation, it provides a designated security function for all transmission and reception messages. On the other hand, in the case where the user server 120 is private, the same level as the designated security function may be sufficient, but the security function may be provided in a safe and reasonable manner.

④ Other operation related functions

The user server 120 provides an interface for allowing a user to register or manage personal information through the user terminal 110. Personal information includes a real name, identification number (eg, ID), registration date, e-mail address, home or company address, telephone number, mobile phone number, subscriber certificate, etc. In particular, the registration date of the user server 120 It is also possible to be automatically generated by the electronic document storage server 130. When personal information is included in a transmission / reception message, it is essential to provide a security function. On the other hand, the user server 120 generates the identification information using the certificate immediately (or after a certain time) when the user's personal information is registered, it is also provided to the electronic document storage server 130.

The user server 120 provides a certificate and private key management function for user identification, electronic signature, encryption / decryption operations, etc., which can be made when communicating with the electronic document storage server 130 according to a user's request. Preferably, the user server 120 encrypts the certificate and the private key to be securely managed. In order to provide the user server 120 is an interface for certificate management, for example, the Korea Information Security Agency published in April 2007 "[KCAC.TS.UI] User Interface Technical Interoperability Specification for Interoperation between Accredited Certification Authorities v1. 60 "applies mutatis mutandis. Here, the technical specification of the user interface for interoperation between accredited certification bodies refers to the user interface defined for subscribers to easily identify and conveniently use the accredited certificate (or certificate) for interoperation of PKI certification services in the digital signature certification system. Refers to the technical specification.

On the other hand, the user server 120 verifies the server 130 or the data received when performing communication with the electronic document storage server 130, in this process to confirm the validity and reliability of the other party's certificate. Of course, the user server 120 stores such a certificate in the user database 122 for convenience, and can also check the validity from time to time. For the validity review of the certificate, for example, "[KCAC.TS.CERTVAL] Accredited Certificate Path Verification Technical Specification v1.00" published by the Korea Information Security Agency in May 2004 may be applied mutatis mutandis. Here, the technical standard for certification path verification refers to a technical standard that specifies a certification path construction method and verification procedure to ensure the reliability of the digital signature certification system. On the other hand, the credibility review of the certificate is whether the electronic document archive server 130 that provides the certificate is a trusted place, whether the certificate is made of identifiable objective and reasonable information, and a forgery prevention function or detection function ( Notification and block access to the information) may be implemented to ensure safety.

The user server 120 allows only a legitimate user to access the service provided by the electronic document storage server 130 through a login function or the like in the embodiment of the present invention. To this end, the user server 120 may provide an access control function. In this case, the access control object is preferably limited to various services or main data provided by the electronic document storage server 130. On the other hand, the user server 120 may add another access control function so as to prevent any modification or deletion, such as to maintain confidentiality, apart from the login function.

Meanwhile, when the user server 120 is connected, the electronic document storage server 130 verifies the integrity of the user server 120. Therefore, information necessary for integrity verification should be provided in the user database 122 in advance, which is preferably generated only for distributors whose reliability has been verified. In addition, the information is preferably updated from time to time so that the reliability and validity can be authenticated, it is also possible to include the distributor information (for example, distributor name, URL for verifying detailed information about the distributor, etc.).

User server 120 also manages the version (version) for the convenience of upgrade. Information about the version may be provided so that the user can always check, and the self version of the user server 120, the version of the specification at the time of implementation, information about the distributor and the like can be included. On the other hand, the user server 120 is provided to be automatically executed when the upgrade is requested for reasons such as revision of the standard or function improvement. It is also required to announce this so that the user can confirm the upgrade. When the upgrade of the user server 120 is executed, a convenient and reliable procedure is performed. In this case, it is preferable that the integrity verification of the user server 120 or the reliability of the distributor is performed. On the other hand, the user server 120 is required to apply the relevant laws and regulations related to information protection so that the user's personal information is not illegally exposed.

In the above, various functions provided by the user server 120 have been described. In addition to the functions described above, the user server 120 of the present invention may be used within the scope of the user without departing from the contents of relevant laws, regulations, and standards. It is also possible to provide additional functions for other purposes.

Next, a process of creating a folder for storing a certificate will be described.

The user server 120 according to the present invention defines a default path of the user database 122 to store the electronic document certificate (hereinafter, abbreviated as certificate) as shown in FIG. In FIG. 5, descriptions of the CEDA folder to the CERT folder are as shown in Table 1 below.

Meanwhile, each of the folders located under the CERT folder are folders classified by types, and the details thereof are shown in Table 2 below.

On the other hand, in order to manage a plurality of certificates, it is necessary to create a subfolder according to the certificate issue date and time under the classified folder for each type of certificate. Descriptions of these folders are shown in Table 3 below.

In the meantime, the certificate is stored in the certificate serial number folder in Table 3 in the form of "repository ID_certificate type prefix_certificate issue date_certificate serial number" and the extension "acr", which stands for "arcCertResponse". Use

The user server 120 may also store the certificate request (same as the certificate request message concept) when storing the certificate in the same folder. In this case, it is preferable that the name of the stored certificate request is the same name as the certificate to be paired, and the extension uses "acq", which stands for "arcCertRequest". As an example:

Example 1) Certificate: KIEC_REG_20070402_0a12af.acr

=> Registration certificate with serial number 0a12af issued by the KIEC repository on April 2, 2007

Example 2) Request for certification: KIEC_REG_20070402_0a12af.acq

=> Request for proof of registration certificate with serial number 0a12af issued by the KIEC repository on 2 April 2007

On the other hand, the default storage path of the certificate is as shown in Table 4 below.

6 shows an example of storing a certificate and a certificate request on a hard disk in an MS Windows environment.

Next, a process of creating a folder for storing a package will be described.

The user server 120 according to the present invention defines a default path of the user database 122 where the electronic document package is to be stored as shown in FIG. 7. The description of the CEDA folder to the PACKAGE folder in FIG. 7 is shown in Table 5 below.

On the other hand, each folder located under the PACKAGE folder is a folder divided into packages by type, the details of which are shown in Table 6 below.

Meanwhile, in order to manage the plurality of electronic document packages, it is required that a subfolder according to the generation and issue date and time of the electronic document package is created under the classified folder for each package type. Each subfolder is described in Table 7 below.

On the other hand, the electronic document package is stored in the electronic document package identifier folder described in Table 7 in the form of "repository ID_package type prefix_electronic document package registration_date of issue_date_electronic document package identifier", and the extension is SIP uses "sip" and DIP uses "dip". As an example:

Example 1) SIP: KIEC_SIP_20070402_a57d5bf755735421d08cd0.sip

=> SIP with a57d5bf755735421d08cd0 identification number registered to the KIEC archive on April 2, 2007

Example 2) DIP: KIEC_DIP_20070402_1.2.410.200005.2.177ab58.dip

=> DIP with the 1.2.410.200005.2.177ab58 identification number issued by the KIEC repository on 2 April 2007

Meanwhile, the default storage path of the electronic document package is shown in Table 8 below.

Meanwhile, the above-described embodiments of the present invention can be written as a program that can be executed in a computer, and can be implemented in a general-purpose digital computer that operates the program using a computer-readable recording medium. The computer-readable recording medium may include a magnetic storage medium (for example, a ROM, a floppy disk, a hard disk, etc.), an optical reading medium (for example, a CD-ROM, a DVD, etc.) and a carrier wave (for example, Storage media such as transmission over the Internet).

The above description is merely illustrative of the technical spirit of the present invention, and those skilled in the art to which the present invention pertains various modifications, changes, and substitutions without departing from the essential characteristics of the present invention. will be. Accordingly, the embodiments disclosed in the present invention and the accompanying drawings are not intended to limit the technical spirit of the present invention but to describe the present invention, and the scope of the technical idea of the present invention is not limited by the embodiments and the accompanying drawings. . The scope of protection of the present invention should be interpreted by the following claims, and all technical ideas within the scope equivalent thereto should be construed as being included in the scope of the present invention.

According to the present invention, the user's use of the service provided by the electronic document storage side will be further increased, and thus the recognition of the electronic document storage side will be improved. In the future, various documents are expected to be accelerated by the electronic document, and thus, the service according to the present invention is expected to be much used through the provision of great reliability, and if it is established as a standard, it will create the sameness of the industry service. It will be more doubled.

1 is a conceptual diagram schematically illustrating the overall configuration of an electronic document management system according to a preferred embodiment of the present invention;

2 is a block diagram showing an internal configuration of a user server according to a preferred embodiment of the present invention;

3 is a flowchart illustrating a method for acquiring an electronic document certificate of a user server according to a preferred embodiment of the present invention;

4 is a flowchart illustrating a method for providing an electronic document package in an electronic document management system according to an embodiment of the present invention;

5 and 6 are reference diagrams for explaining a folder creation process for storing an electronic document certificate of a user server according to an embodiment of the present invention;

7 is a reference diagram for explaining a folder creation process for storing an electronic document package of a user server according to an exemplary embodiment of the present invention.

Description of the Related Art

100: electronic document management system 110: user terminal

120: user server 122: user database

130: electronic archive server 132: electronic archive database

200: communication unit 205: central processing unit

210: inquiry unit 215: message generation unit

230: storage folder generation unit 235: display unit

240: output unit 245: forgery and alteration prevention unit

260 verification unit 275 messaging unit

Claims (15)

In the system for managing electronic documents, Generate a certificate request message requesting issuance of an electronic document certificate certifying the electronic document, store the issued electronic document certificate according to the certificate request message, verify and view the issued or stored electronic document certificate, and then read the electronic document A user server for printing the certificate on paper after making the certificate forgery-proof or copy-protected; And An electronic document storage server that verifies the certificate request message if the certificate request message is provided and issues the electronic document certificate upon successful verification. Including; The user server accesses the electronic document storage server to query an inquiry unit for inquiring contents contained in the certificate request message, a message generating unit for generating the certificate request message based on the inquiry contents, and a certificate for authenticating an electronic document. A certificate verification unit for verifying an electronic document certificate provided from the electronic document storage server with respect to the certificate request message, a SIP generating unit for generating a SIP containing information on electronic document registration, and an electronic document from the electronic document storage server A DIP processing unit for processing the DIP and decrypting the electronic document original or the electronic document converted copy if the DIP including the original or electronic document converted copy is provided, the SIP and the electronic document original and the electronic document converted copy Validate an electronic document package that contains one or more of Is a package verification unit, a display unit for reading the electronic document certificate or the electronic document package that has been successfully verified by the certificate verification unit or the package verification unit, a print request to the electronic document certificate or the electronic document package to the paper is A forgery prevention unit providing a forgery protection function or a copy protection function, an output unit for printing an electronic document certificate or an electronic document package according to the processing result of the forgery protection unit, a communication unit for network connection with the electronic document storage server, and the Electronic document management system comprising a central processing unit for controlling the overall operation of all the components constituting the user server. The method of claim 1, The electronic document certificate may include a registration certificate certifying the electronic document registration, an issuance certificate certifying the issuance of the electronic document, a transfer certificate certifying the electronic document transfer, a revocation certificate certifying the disposal of the electronic document, and an issued electronic document. And at least one of an original certificate certifying that the original document is the same as an archived electronic document, and a viewpoint confirmation certificate certifying that schedule data existed at a specific time. The method of claim 1, The user server generates a SIP containing information on the electronic document registration, processes the DIP provided by containing the electronic document original or the electronic document conversion version, one of the SIP, the electronic document original and the electronic document conversion An electronic document management system, comprising: reading an electronic document package including the above, making the electronic document package tamper-resistant or copy-protected and then printing the paper. delete The method of claim 1, The user server, A certificate storage folder generation unit providing a folder generation process for storing the electronic document certificate; And Package storage folder generation unit for providing a folder creation process for storing the electronic document package Electronic document management system further comprises. A user server which processes an electronic document or an electronic document certificate for authenticating the electronic document at a user's request, and includes a certificate storage folder generating unit for providing a folder generating process for storing the electronic document certificate; And Electronic document storage server processing the request of the user server Including; (a) generating and transmitting, by the user server, a certificate request message requesting the issuance of the electronic document certificate; (b) verifying the received certificate request message by the electronic archive server; (c) upon successful verification in step (b), issuing and transmitting the electronic document certificate by the electronic document storage server; (d) the user server verifying the received electronic document certificate; And (e) upon successful verification in step (d), storing, by the user server, the electronic document certificate, or displaying or printing the electronic document certificate according to a folder generation process provided by the certificate storage folder generation unit. Electronic document certificate acquisition method comprising a. The method of claim 6, As a step after step (e), (fa) at the user's request, loading the stored electronic document certificate by the user server; (fb) the user server verifying the loaded electronic document certificate; And (fc) upon successful verification, displaying or printing the loaded electronic document certificate by the user server; Electronic document certificate acquisition method characterized in that it further comprises. The method of claim 6, In step (a), (aa) inquiring, by the inquiry unit of the user server, contents to be included in the certificate request message; (ab) generating a certificate request message based on the inquiries of the message generating unit of the user server; And (ac) the communication unit of the user server transmitting the generated certificate request message It consists of When storing the electronic document certificate in the step (e), the central processing unit of the user server bundles and stores the certificate request message associated with the electronic document certificate. The method of claim 6, When printing the electronic document certificate in the step (e), the electronic server certificate acquisition method characterized in that the user server causes the electronic document certificate to be forgery-protected or copy-protected and then printed on paper. The method of claim 6, In step (d), (da) receiving, by the communication unit of the user server, an electronic document certificate issued from the electronic document storage server; (db) determining whether the received electronic document certificate is at the request of the user using the certificate request message stored in the certificate verification unit of the user server; And (dc) if the determination result is at the request of the user, the certificate verification unit notifies the central processing unit of the verification success so that the central processing unit of the user server can perform step (e); Notifying the user of the failure of verification by the certificate verifier; Electronic document certificate acquisition method characterized in that consisting of. The method of claim 6, When verifying the received electronic document certificate in the step (d), the electronic document certificate acquisition method, characterized in that the certificate verification unit of the user server uses a SIP (Submission Information Package) containing information on the electronic document registration . delete delete delete In a computer-readable recording medium, A recording medium storing a program for implementing the method according to any one of claims 6 to 11.

Images