KR102400798B1 - Electronic Document Managing System - Google Patents

Abstract

The present invention is an invention for protecting against any tampering by a user's intentional actions or malicious programs in the process of digitizing and storing paper documents, strengthening security, and improving legal evidence.

Description

Electronic Document Managing System

The present invention relates to an electronic document management system. More particularly, the invention relates to generating an electronic document by scanning a paper document, and storing and transmitting the generated electronic document.

Various types of paper documents are issued in various places such as hospitals, schools, private or public enterprises.

These paper documents can contain a variety of security content, including personal information, patient information, and trade secrets. Therefore, it is important to prevent leakage of paper documents. In addition, a place for storing a large amount of paper documents is also required.

Such work using paper documents is inefficient, and the cost required to prevent leakage and storage of paper documents is high.

Therefore, in recent years, efforts are being made to electronically store and store these paper documents.

However, there is a security problem in the process of digitalizing and managing paper documents. In addition, in the process of digitizing paper documents, the level of management that allows for the same level of legal evidence as the original is not being performed.

An object of the present invention is to provide an invention that can protect against any tampering by a user's intentional actions or malicious programs in the process of digitizing and storing paper documents.

In addition, another technical problem to be solved by the present invention is to provide an invention capable of enhancing security in the process of transmitting an electronic document and maintaining security even if it is leaked.

In addition, another technical problem to be solved by the present invention is to provide an invention that can be managed at a level that can prove that the electronic document under management is the same as the original when the content contained in the electronic document is necessary to resolve a legal dispute. The purpose.

In addition, another technical problem to be solved by the present invention is to provide an invention capable of synchronizing files for secondary backup while reducing network transmission and reception traffic.

The technical problems of the present invention are not limited to the technical problems mentioned above, and other technical problems not mentioned will be clearly understood by those skilled in the art from the following description.

The ASFS key generation method according to the first aspect of the present invention for achieving the above technical problem is a method for generating a key to be used in an Ascan Secure File System (ASFS), which is a real-time encryption file system, an identifier from the user side. requesting authentication from an authentication server using (ID) and a password (Password); transmitting, by the authentication server, a seed value of a key to be used for real-time encryption/decryption on the user side (Cache Seed Key) when the authentication is successful; and generating a key to be used in ASFS by using the Cache Seed Key, an identifier, and a password.

According to an embodiment, the requesting for authentication, transmitting the seed value, and generating the key all operate in a memory and are not recorded in a local storage area.

According to an embodiment, the ASFS may exist as a file filter driver on top of the raw disk driver area in the kernel area of the operating system.

The synchronization method for secondary backup according to the second aspect of the present invention for achieving the above technical problem is a method for backing up while reducing network transmission and reception traffic in the process of backing up a file related to an electronic document, splitting file B into fixed-size blocks of non-S bytes length; calculating a checksum for each block of the file B; transmitting the calculated checksum to another device; retrieving, by the other device, all blocks of length S bytes having the same checksum as one of the blocks of file B in file A using the received checksum for file B; and transmitting a command sequence for making a copy of the file A.

According to one embodiment, calculating a checksum for each block of file B comprises calculating a weak 32-bit rolling checksum and a strong 128-bit MD4 checksum, and retrieving the block comprises: retrieving from file A all blocks of length S bytes having the same checksum pair as one of the blocks in file B, wherein the checksum pair consists of the computation result of the weak 32-bit rolling checksum and the strong 128-bit MD4 checksum. means that

The method for improving the legal evidence of electronic document data according to a third aspect of the present invention for achieving the above technical problem is a method for improving the legal evidence of electronic document data generated by scanning a paper document, when the document is digitized generating a time check stamp including information about; generating an electronic signature including information on whether the forgery has occurred; and combining and storing the time confirmation stamp and the electronic signature with the electronic document data.

According to a fourth aspect of the present invention, there is provided an electronic document management system (ASFS), which is a real-time encrypted file system for receiving scanned data of a paper document from a scanner and temporarily storing the received data. Secure File System); a private cloud storage for receiving and storing data temporarily stored in the ASFS through a security protocol; and an external cloud storage for backing up data stored in the private cloud storage.

The computer program according to the fifth aspect of the present invention for achieving the above technical problem may be stored in a medium for performing the method according to the first aspect of the present invention to the method according to the third aspect of the present invention.

According to the present invention as described above, it is possible to protect a paper document from being tampered with by an intentional action of a user or a malicious program in the process of digitizing and storing the paper document.

In addition, the present invention can enhance security in the process of transmitting an electronic document, and maintain security even if it is leaked.

In addition, the present invention enables management at a level that can prove that the electronic document under management is the same as the original, when the content included in the electronic document is necessary for resolving a legal dispute.

In addition, the present invention can synchronize files for secondary backup while reducing network transmission/reception traffic.

Effects of the present invention are not limited to the effects mentioned above, and other effects not mentioned will be clearly understood by those skilled in the art from the following description.

1 is a diagram illustrating an environment to which an electronic document management system according to an embodiment of the present invention is applied.
2 is a flowchart illustrating an example of managing a key used in ASFS.
3 is a flowchart illustrating an example of a process for determining whether the ASFS is access by an authorized program.
4 is a flowchart illustrating an example of synchronizing files for secondary backup while reducing network transmission/reception traffic.
5 is a flowchart illustrating a specific example of step S340.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. Advantages and features of the present invention, and a method for achieving them will become apparent with reference to the embodiments described below in detail in conjunction with the accompanying drawings. However, the present invention is not limited to the embodiments published below, but may be implemented in various different forms, and only these embodiments allow the publication of the present invention to be complete, and common knowledge in the technical field to which the present invention pertains It is provided to fully inform the possessor of the scope of the invention, and the present invention is only defined by the scope of the claims. Like reference numerals refer to like elements throughout.

Unless otherwise defined, all terms (including technical and scientific terms) used herein may be used with the meaning commonly understood by those of ordinary skill in the art to which the present invention belongs. In addition, terms defined in a commonly used dictionary are not to be interpreted ideally or excessively unless clearly defined in particular. The terminology used herein is for the purpose of describing the embodiments and is not intended to limit the present invention. In this specification, the singular also includes the plural unless specifically stated otherwise in the phrase.

In this specification, the singular may also include the plural unless otherwise specified in the phrase. As used herein, "comprises" and/or "comprising" refers to the presence of one or more other components, steps, operations and/or elements mentioned. or addition is not excluded.

1 is a diagram illustrating an environment to which an electronic document management system according to an embodiment of the present invention is applied.

However, in FIG. 1 , it is shown that the electronic document management system 1000 , the ASFS 2000 , the private cloud storage 3000 and/or the external cloud storage 4000 exist independently, but the electronic document management system 100 has ASFS 2000 , private cloud storage 3000 and/or external cloud storage 4000 may be included. In addition, a separate configuration for implementing the functions for enhancing security, preventing forgery, and improving legal evidence mentioned throughout the specification of the present invention may be added to the electronic document management system 1000 .

Referring to FIG. 1 , the scanner 20 transmits the scanned data of the paper document 10 to the electronic document management system 1000 .

The electronic document management system 1000 may store the scanned data (ie, an electronic document) of the paper document 10 and transmit it to another device according to a request from the user side 100 .

The electronic document management system 1000 may store and transmit the electronic document to prove that it is the same as the original.

Specifically, the electronic document management system 1000 may manage information about the time when the electronic document is generated. Also, the electronic document management system 1000 may check whether the electronic document is forged or altered by using the signature information.

In addition, the electronic document management system 1000 may enhance security in various ways to prevent leakage of electronic documents and to prevent leakage of contents included in electronic documents.

The electronic document management system 1000 may use the ASFS 2000 to enhance the security of the electronic document. The ASFS 2000 may be included in the electronic document management system 1000 . However, depending on the system environment, the ASFS 2000 may exist separately from the electronic document management system 1000 . The ASFS 2000 may temporarily store data related to an electronic document received through a scanner or the like. ASFS (2000) will be described in more detail later.

The electronic document management system 1000 may store the electronic document in the private cloud storage 3000 if necessary for management efficiency of the electronic document. Even when the electronic document is stored in the private cloud storage 3000 , the electronic document management system 1000 may take measures to prove that it is the same as the original and prevent leakage.

In addition, the electronic document management system 1000 or the private cloud storage 3000 may take measures to safely store the electronic document in the external cloud storage 4000 for secondary backup.

"Important electronic document" as used in the specification of the present invention means an electronic document requiring security and confidentiality. An important electronic document must be blocked from malicious access from the outside by the electronic document management system 1000 . The important electronic document may be some or all of the electronic documents managed by the electronic document management system 1000 .

The electronic document management system 1000 is both a file about an important electronic document temporarily stored in order to retrieve and provide an important electronic document in an operating system (OS) and/or a file about an important electronic document that is permanently stored You can block access through other routes.

For example, after logging in as Administrator, which is the highest root authority in Windows, one of the operating systems, the folder managed by the important electronic document management system 1000 and the operation of the important electronic document management system 1000 through Explorer Even if the accessed folder is searched, the file related to the important electronic document cannot be checked by the important electronic document management system 1000 .

Also, for example, even if a file accessed by the operation of the electronic document management system 1000 is monitored through procomon.exe, a program that analyzes a malicious program provided by Microsoft, the location monitored by the electronic document management system 1000 is monitored. It is not possible to read the contents of the file.

In addition, when a file related to an important electronic document is accessed using a malicious code, the electronic document management system 1000 checks the electronic signature status of the malicious code and blocks communication when it is not a preset electronic signature to block the important electronic document can protect In addition, even if the function of blocking the communication is disabled due to an unexpected vulnerability, all data related to an important electronic document is encrypted with an algorithm such as AES-256, so that the information cannot be checked.

The electronic document management system 1000 may block malicious access to an important electronic document and protect information by using the methods exemplified above.

[Real-time encrypted file system ASFS ( Ascan Secure File System)]

The electronic document management system 1000 receives an important electronic document through the scanner 20 . The electronic document management system 1000 temporarily stores the received important electronic document in an Ascan Secure File System (ASFS) 2000, which is a real-time encrypted file system, rather than a general-purpose file system such as NTFS or FAT, and is private through a security protocol. It is stored in NAS storage installed in the cloud area to share important records with multiple users. ASFS (2000) is the name of a real-time encrypted file system developed by itself to improve the security of important electronic documents. For reference, 'Ascan' represents the applicant of the present application, Alligator Scan.

When explaining the necessity of ASFS (2000) to improve the security of important electronic documents, if the scanned important electronic documents are recorded locally as general image files, the computer is physically exposed to the outside or the hard disk is replaced due to aging. When exposed to the public, important electronic documents are not encrypted, so information may be leaked to the outside.

In addition, since malicious programs have easy access to important electronic documents, the possibility of information leakage is high.

In the ASFS (2000), thumbnail images and cache files are the main objects of storage in order to increase loading speed, and important electronic documents are transferred from the scanner 20 to the cloud to prevent forgery or falsification of important electronic documents and increase their legal status as evidence. It is a real-time encryption/decryption virtual file system optimized for images so that it is difficult to inflict any damage until they are stored in the storage. By combining the ASFS (2000) with the electronic document management system (1000), the security of important electronic documents is improved.

2 is a flowchart illustrating an example of managing a key used in ASFS.

Referring to FIG. 2 , the user side 100 requests authentication from the authentication server 1100 using an identifier (ID) and a password (Password) (S110).

The authentication server 1100 may be a server included in the electronic document management system 1000 , or may be a server existing separately from the electronic document management system 1000 .

If authentication is successful, the authentication server 1100 transmits the seed value of the key to be used for real-time encryption/decryption on the user's side (S120). The seed value of the key to be used for the real-time encryption/decryption may be named "Cache Seed Key".

Upon receiving the "Cache Seed Key", the user side 100 can generate a key to be used in the ASFS 2000 by combining it with the "Hash(ID+Password)" value used for authentication (S130).

The processes S110 , S120 , and S130 described with reference to FIG. 2 all operate on the memory, and no information is recorded in the local storage area. When a key to be used in the ASFS 2000 is generated by the method described with reference to FIG. 2, the initial value for generating a key to be used for encryption/decryption without going through the authentication server 1100 not operated by the user side 100 is Could not get "Cache Seed Key". In addition, even if the "Cache Seed Key" is exposed, the key to be used for encryption/decryption is not leaked because it is combined with the password that the user side 100 knows.

In addition, even after the key to be used for the ASFS 2000 is generated, the ASFS 2000 has a mechanism that can be opened only in a specified situation. This mechanism will be described with reference to FIG. 3 .

3 is a flowchart illustrating an example of a process for determining whether the ASFS is access by an authorized program.

The ASFS 2000 may be developed and installed as a file filter driver on top of a raw disk driver area within the kernel area of the operating system.

The ASFS (2000) creates a separate file system structure in the log disk area and encrypts all data in real time using the AES algorithm or the like.

The ASFS 2000 may include a security function that opens only to a designated process in addition to protection by an encryption key in the process of passing a file handle by opening a file to a process.

The electronic document management system 1000 receives a PKI certificate to be used for code signing from a global authorized certification authority, etc., and signs the S/W 1300 executable file for electronic document management before distribution ( S210 ). This signature value is distributed and installed together with S/W 1300 for electronic document management.

When S/W (1300) for electronic document management requests a file handle to ASFS (2000) filter driver to access important electronic documents (S220), ASFS (2000) determines whether the requested program is an authorized program based on the signature value Confirm (S230). As a result of checking based on the signature value, the ASFS 2000 blocks access if it is not an authorized program (S240).

The S/W for electronic document management 1300 may be a computer program that implements all or some functions of the electronic document management system 1000 .

ASFS 2000 transmits the "Cache Seed Key" received from the authentication server 1100 in case of access by an authorized program as a result of checking based on the signature value (S250).

Since all important electronic documents are encrypted even after access by an authorized program, data can be decrypted only through a password known only to the user side 100 as described with reference to FIG. 1 .

The in-house cloud storage may be an archive server that finally stores important electronic documents collected through the electronic document management system 1000 .

The in-house cloud storage and the electronic document management system 1000 may provide a synchronization function for transmitting and receiving files related to electronic documents.

With only a general external cloud server, there is a problem with the network speed for sending and receiving encrypted files. In-house cloud storage can be configured to respond to problems with physical hard disks through RAID configuration by default. However, even if the in-house cloud storage is configured to respond to problems with the physical hard disk, there is a possibility of damage due to unforeseen circumstances, so a secondary backup may be required.

In order to reduce network transmission/reception traffic in synchronizing files for secondary backup, a file can be cut to a certain size and only the changed area can be transmitted/received.

Specifically, the process of synchronizing files for secondary backup while reducing network transmission/reception traffic is mainly divided into five processes. The process of synchronizing files for secondary backup may be performed by the first computing device 200 and the second computing device 300 . The first computing device 200 and/or the second computing device 300 operates the electronic document management system 1000, a device for operating an in-house cloud storage, a device connected to the in-house cloud storage, and a storage for secondary backup It can also be a device connected to a storage device and/or storage for secondary backup.

4 is a flowchart illustrating an example of synchronizing files for secondary backup while reducing network transmission/reception traffic.

Referring to FIG. 4 , as a first process, the first computing device 200 may split the file B into non-overlapping S-byte fixed size blocks ( S310 ). Accordingly, the size of the last block is less than or equal to S.

As a second process, the first computing device 200 may calculate a checksum for each block ( S320 ). The first computing device 200 may calculate a weak 32-bit rolling checksum and a strong 128-bit MD4 checksum.

As a third process, the first computing device 200 transmits the checksum to the second computing device 300 ( S330 ).

As a fourth process, the second computing device 300 uses the checksum pair (eg, rolling checksum and MD4 checksum) for file B received from the first computing device 200 to block the file A from file B. It is possible to find all S-byte-length blocks having the same checksum pair as one of them (S340). The process of finding a block of all S bytes in file A with the same checksum pair as one of the blocks in file B can be quickly processed in a single pass by using the special property of rolling checksum.

As a fifth process, the second computing device 300 transmits a command sequence for making a copy of the file A to the first computing device 200 ( S350 ). Each command in the command string may be a reference to a block in file B, or may be string data for sections of file A that do not match any block in file B.

The result of this series of processes is that the first computing device 200 has a copy of file A, but only certain portions of file A that are not found in file B are transmitted through the actual link. Accordingly, only one round trip is required for this series of processes, and this single round trip can minimize the effect on link delay.

After receiving the checksum list of the blocks of the file B, the second computing device 300 may find whether there is a block matching the checksum in the received block for all offsets and all blocks of the file A ( S340 ).

For example, the second computing device 300 may sequentially calculate a 32-bit rolling checksum in blocks of length S for each byte of the file A, and retrieve a matching checksum from the list. Specifically, such a search may be performed in a total of three steps. A total of three steps may be performed by the second computing device 300 and the checksum may be retrieved as another process.

Specifically, step S340 will be described with reference to FIG. 5 .

5 is a flowchart illustrating a specific example of step S340.

Referring to FIG. 5F , the first step of the checksum search uses a 16-bit hash of a 32-bit rolling checksum and a hash table of 216 entries. The list of checksum values (the checksum computed from the file B blocks) can be ordered according to a 16-bit hash of a 32-bit rolling checksum.

Each item in the hash table points to the first element in the list for that hash value, or contains a NULL value if there is no element in the list with that hash value.

At each offset of the file, a 32-bit rolling checksum and its 16-bit hash are calculated, and if the hash table entry for the hash value is not NULL, the second step of retrieving the checksum is performed (S341).

The second step of checksum search is to find a 32-bit rolling checksum that matches the current value in the sorted checksum list pointed to by the hash table entry (S343).

The checksum search ends when a 16-bit hash reaches another entry, and a third-stage checksum check is executed when a matching entry is found.

Checksum retrieval The third step is to calculate a strong checksum (128-bit MD4 checksum) from the offset of the current file (S345). The result is compared with the strong checksum in the current list entry (S347). If they match, it is considered that the block of file A matching the block of file B is found (S349).

If a matching block is found through the third checksum search step, the second computing device 300 transmits data between the current offset of the file A and the last matched location to the first computing device 200 . After transmission, the block index of file B corresponding to the matching block is transmitted. The transmission time is the moment when a matching target is found. If no match is found, the search continues with the rolling checksum of the next offset. If there is a previously matched block, the search can proceed from the end of that block.

[Method of improving legal evidence of electronic documents]

Several documents may be admissible as evidence in a legal battle. However, in order for an electronic document to be legally admissible, it must be able to prove that it is the same as the original.

Accordingly, the electronic document management system 1000 according to an embodiment of the present invention scans the paper document 10 containing important content, and in the process of generating and storing the important electronic document, the important electronic document is separated from the paper document 10 and the paper document 10 . to prove that they are the same.

Specifically, the electronic document management system 1000 may provide a time confirmation function informing that the electronic document has been made at a certain point in time.

In addition, the electronic document management system 1000 may provide an electronic signature function that can prove that any forgery or falsification has not occurred in the process of generating, transmitting, and storing the electronic document.

Specifically, in order to improve the legal evidence of important electronic documents, the electronic document management system 1000 is implemented according to the TWAIN protocol for communication with a plurality of general-purpose scanners 20, etc., but the electronic data is transmitted by the ASFS (2000) described above. It prevents the data input from the scanner 20 from being tampered with by the user side 100 .

Also, the electronic document management system 1000 may extract a digest or hash value from the digitalized data and transmit it to a server for time management.

The server for time point management may use the digest or hash value extracted from the electronic data to manage information about at what point in time when electronic documentation was made, and may manage information regarding when transmission, etc. occurred.

The server for time point management may be a server included in the electronic document management system 1000 or may be a server existing separately from the electronic document management system 1000 .

Specifically, the server for time management can create a hash value by connecting it with the current time and sign it with an authorized certificate to create a stamp whose integrity is guaranteed. Using the stamp information created in this way, the electronic document management system 1000 may store electronic data including signature information and time information. Accordingly, it is possible to prove that the electronic data stored by the electronic document management system 1000 has no occurrence of forgery and falsification using signature information and time information and is identical to the original.

Although the operations illustrated in the figures of FIGS. 2-5 are shown in a particular order, it is understood that the operations must be executed in the specific order or sequential order shown, or that all illustrated operations must be performed to achieve the desired result. shouldn't be In certain circumstances, multitasking and parallel processing may be advantageous. Moreover, the separation of the various components in the embodiments described above should not be construed as necessarily requiring such separation, and the program components and systems described may generally be integrated together into a single software product or packaged into multiple software products. should understand

In FIG. 1 , the ASFS 2000 may refer to software or hardware such as a field-programmable gate array (FPGA) or an application-specific integrated circuit (ASIC). However, the above components are not meant to be limited to software or hardware, and may be configured to be in an addressable storage medium or configured to execute one or more processors. The functions provided in the components may be implemented by more subdivided components, or may be implemented as one component that performs a specific function by combining a plurality of components.

Although embodiments of the present invention have been described above with reference to the accompanying drawings, those of ordinary skill in the art to which the present invention pertains can realize that the present invention can be embodied in other specific forms without changing its technical spirit or essential features. you will be able to understand Therefore, it should be understood that the embodiments described above are illustrative in all respects and not restrictive.

Claims (9)

An electronic document management system comprising: an Ascan Secure File System (ASFS), which is a real-time encrypted file system that receives data from a scanned paper document from a scanner and temporarily stores the received data,
The ASFS exists as a file filter driver at the top of the RAW DISK driver area in the kernel area of the operating system, and the ASFS has its own separate file system structure in the raw disk area. It is characterized in that data is encrypted in real time,
In the ASFS, an ASFS key for security when handing over a file handle is used, the ASFS key requesting authentication from an authentication server using an identifier (ID) and a password (Password) in a user-side device; transmitting, by the authentication server, a cache seed key of a key to be used for real-time encryption/decryption in the user-side device if the authentication is successful; and generating a key to be used in ASFS by using the Cache Seed Key, an identifier, and a password, characterized in that it is generated by the ASFS key generation method,
The step of requesting the authentication, the step of transmitting the seed value, and the step of generating the key are all operated in memory and are not recorded in a local storage area,
Electronic document management system. delete delete According to claim 1,
The ASFS, when any electronic document management S / W accesses the electronic document,
receiving a request for a file handle to access the electronic document from the electronic document management S/W;
checking whether the program requesting the file handle is an authorized program based on a signature value;
blocking access if it is not an authorized program as a result of checking based on the signature value; and
If it is an approved program as a result of checking based on the signature value, the step of transmitting a cache seed key of a key to be used for real-time encryption/decryption received from the authentication server to the S/W for electronic document management is executed to do,
Electronic document management system. delete delete delete 5. The method of claim 4,
a private cloud storage for receiving and storing data temporarily stored in the ASFS through a security protocol; and
Further comprising an external cloud storage for backing up the data stored in the private cloud storage,
Electronic document management system. delete

Images