KR102580421B1 - Electronic Document Managing System - Google Patents

Abstract

The present invention is intended to protect paper documents from being altered by intentional actions or malicious programs during the process of digitizing and storing paper documents, strengthen security, and improve legal evidence.

Description

Electronic Document Managing System}

The present invention relates to an electronic document management system. More specifically, the invention relates to scanning paper documents to create electronic documents, and storing and transmitting the generated electronic documents.

Various paper documents are issued in various places such as hospitals, schools, and private or public companies.

These paper documents may contain various security contents such as personal information, patient information, and corporate secrets. Therefore, it is important to prevent leakage of paper documents. Additionally, a place to store large amounts of paper documents is also needed.

Work using paper documents is inefficient, and the costs required to prevent and store paper documents from being leaked are also high.

Therefore, recently, efforts have been made to store and archive these paper documents by electronically documenting them.

However, there are security issues in the process of digitizing and managing paper documents. In addition, in the process of digitizing paper documents, management is not carried out at a level that allows them to be recognized as having the same level of legal evidence as the original.

The technical problem to be solved by the present invention is to provide an invention that can protect paper documents from being tampered with by intentional actions of users or malicious programs during the process of digitizing and storing paper documents.

In addition, another technical problem to be solved by the present invention is to provide an invention that strengthens security during the transmission of electronic documents and maintains security even if they are leaked.

In addition, another technical problem that the present invention aims to solve is to provide an invention that can manage the electronic document at a level that can prove that it is the same as the original when the content contained in the electronic document is necessary to resolve legal disputes. The purpose.

In addition, another technical problem to be solved by the present invention is to provide an invention that can synchronize files for secondary backup while reducing network transmission and reception traffic.

The technical problems of the present invention are not limited to the technical problems mentioned above, and other technical problems not mentioned will be clearly understood by those skilled in the art from the description below.

The ASFS key generation method according to the first aspect of the present invention for achieving the above technical problem is a method of generating a key to be used in ASFS (Ascan Secure File System), a real-time encryption file system, where the user generates an identifier Requesting authentication from an authentication server using (ID) and password; If the authentication is successful, the authentication server transmits a seed value (Cache Seed Key) of a key to be used for real-time encryption and decryption on the user side; And it may include generating a key to be used in ASFS using the Cache Seed Key, identifier, and password.

According to one embodiment, the steps of requesting authentication, transmitting the seed value, and generating the key are all performed in memory and are not recorded in the local storage area.

According to one embodiment, the ASFS may exist as a file filter driver at the top of the raw disk driver area within the kernel area of the operating system.

The synchronization method for secondary backup according to the second aspect of the present invention for achieving the above technical problem is a method of backing up files related to electronic documents while reducing network transmission and reception traffic in the process of backing up files, without duplication in the files. splitting file B into fixed-size blocks of length S bytes; calculating a checksum for each block of the file B; transmitting the calculated checksum to another device; the other device using the received checksum for file B to retrieve all S bytes long blocks in file A that have the same checksum as one of the blocks in file B; and transmitting a command string for making a copy of file A.

According to one embodiment, calculating a checksum for each block of file B includes calculating a weak 32-bit rolling checksum and a strong 128-bit MD4 checksum, and retrieving the block includes: Retrieving in file A all blocks of length S bytes having the same checksum pair as one of the blocks in file B, wherein the checksum pair is the result of calculating the weak 32-bit rolling checksum and the strong 128-bit MD4 checksum. means that

A method for improving the legal evidence of electronic document data according to a third aspect of the present invention for achieving the above technical problem is a method for improving the legal evidence of electronic document data generated by scanning a paper document, at the point when the document is electronic. generating a time confirmation stamp containing information about; Generating an electronic signature including information on whether the forgery or alteration has occurred; And it may include combining and storing the time verification stamp and the electronic signature with the electronic document data.

The electronic document management system according to the fourth aspect of the present invention for achieving the above technical problem is ASFS (Ascan), a real-time encrypted file system that receives data scanned from a paper document from a scanner and temporarily stores the received data. Secure File System); a private cloud storage that receives and stores data temporarily stored in the ASFS through a security protocol; And it may include an external cloud storage that backs up data stored in the private cloud storage.

The computer program according to the fifth aspect of the present invention for achieving the above technical problem may be stored in a medium for performing the method according to the first aspect of the present invention to the method according to the third aspect of the present invention.

According to the present invention as described above, it is possible to protect paper documents from being tampered with by intentional actions of the user or malicious programs during the process of digitizing and storing paper documents.

Additionally, the present invention enhances security in the process of transmitting electronic documents and maintains security even if they are leaked.

In addition, the present invention enables management at a level that can prove that the electronic document being managed is identical to the original when the content contained in the electronic document is necessary to resolve legal disputes.

Additionally, the present invention can synchronize files for secondary backup while reducing network transmission and reception traffic.

The effects of the present invention are not limited to the effects mentioned above, and other effects not mentioned will be clearly understood by those skilled in the art from the description below.

1 is a diagram showing an environment to which an electronic document management system according to an embodiment of the present invention is applied.
Figure 2 is a flowchart to explain an example of managing keys used in ASFS.
Figure 3 is a flowchart showing an example of a process for ASFS to determine whether access is by an authorized program.
Figure 4 is a flowchart illustrating an example of synchronizing files for secondary backup while reducing network transmission and reception traffic.
Figure 5 is a flowchart showing a specific example of step S340.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the attached drawings. The advantages and features of the present invention and methods for achieving them will become clear by referring to the embodiments described in detail below along with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below and may be implemented in various different forms. The present embodiments are merely intended to ensure that the disclosure of the present invention is complete and to provide common knowledge in the technical field to which the present invention pertains. It is provided to fully inform those who have the scope of the invention, and the present invention is only defined by the scope of the claims. Like reference numerals refer to like elements throughout the specification.

Unless otherwise defined, all terms (including technical and scientific terms) used in this specification may be used with meanings that can be commonly understood by those skilled in the art to which the present invention pertains. Additionally, terms defined in commonly used dictionaries are not interpreted ideally or excessively unless clearly specifically defined. The terminology used herein is for describing embodiments and is not intended to limit the invention. As used herein, singular forms also include plural forms, unless specifically stated otherwise in the context.

In this specification, singular forms may also include plural forms unless specifically stated in the phrase. As used herein, “comprises” and/or “comprising” refers to the presence of one or more other components, steps, operations and/or elements. or does not rule out addition.

1 is a diagram showing an environment to which an electronic document management system according to an embodiment of the present invention is applied.

However, Figure 1 shows that the electronic document management system 1000, ASFS (2000), private cloud storage 3000, and/or external cloud storage 4000 exist independently, but the electronic document management system 100 ASFS (2000), private cloud storage (3000), and/or external cloud storage (4000) may be included. In addition, a separate configuration may be added to the electronic document management system 1000 to implement functions for strengthening security, preventing forgery and falsification, and improving legal evidence as mentioned throughout the specification of the present invention.

Referring to FIG. 1, the scanner 20 transmits data obtained by scanning a paper document 10 to the electronic document management system 1000.

The electronic document management system 1000 may store scanned data (i.e., electronic document) of the paper document 10 and transmit it to another device according to a request from the user 100.

The electronic document management system 1000 can store and transmit electronic documents so that they can be proven to be identical to the original.

Specifically, the electronic document management system 1000 can manage information about the time an electronic document was created. Additionally, the electronic document management system 1000 can use signature information to check whether the electronic document has been forged or altered.

Additionally, the electronic document management system 1000 can strengthen security in various ways to prevent leakage of electronic documents and prevent leakage of content contained in electronic documents.

The electronic document management system 1000 may use ASFS 2000 to enhance the security of electronic documents. ASFS (2000) may be included in electronic document management system (1000). However, depending on the system environment, ASFS (2000) may exist separately from the electronic document management system (1000). ASFS (2000) can temporarily store data about electronic documents received through a scanner, etc. ASFS (2000) explains in more detail later.

The electronic document management system 1000 can store electronic documents in the private cloud storage 3000 when necessary for efficient management of electronic documents. Even when electronic documents are stored in the private cloud storage 3000, the electronic document management system 1000 can take measures to prevent leakage by proving that they are identical to the original.

Additionally, the electronic document management system 1000 or the private cloud storage 3000 may take steps to safely store electronic documents in the external cloud storage 4000 for secondary backup.

“Important electronic document” as used in the specification of the present invention means an electronic document that requires security and confidentiality. Important electronic documents must be blocked from malicious access from outside by the electronic document management system 1000. Important electronic documents may be some or all of the electronic documents managed by the electronic document management system 1000.

The electronic document management system 1000 includes all files related to important electronic documents stored temporarily and/or files related to important electronic documents stored permanently in order to search and provide important electronic documents within the operating system (OS). Access through other routes can be blocked.

For example, after logging in as Administrator, which is the highest root authority in Windows, one of the operating systems, you can access the folders managed by the important electronic document management system 1000 and the operations of the important electronic document management system 1000 through Explorer. Even if the accessed folder is searched, files related to important electronic documents cannot be confirmed by the important electronic document management system 1000.

In addition, for example, even if files accessed by the operation of the electronic document management system 1000 are monitored through procomon.exe, a program that analyzes malicious programs provided by Microsoft, the location monitored by the electronic document management system 1000 It is impossible to view the contents of the file.

In addition, when a file related to an important electronic document is accessed using malicious code, the electronic document management system 1000 checks the electronic signature status of the malicious code and, if it is not a preset electronic signature, blocks communication and documents the important electronic document. can protect. In addition, even if the function to block communication is disabled due to an unexpected vulnerability, all data related to important electronic documents are encrypted with an algorithm such as AES-256, so the information cannot be confirmed.

The electronic document management system 1000 can block malicious access to important electronic documents and protect information using the above-mentioned methods.

[Ascan Secure File System (ASFS), a real-time encryption file system]

The electronic document management system 1000 receives important electronic documents through the scanner 20. The electronic document management system (1000) temporarily stores received important electronic documents in ASFS (Ascan Secure File System) (2000), a real-time encryption file system, rather than a general-purpose file system such as NTFS or FAT, and privately stores them through a security protocol. Share important records with multiple users by storing them in NAS storage installed in the cloud area. ASFS (2000) is the name of a real-time encryption file system developed in-house to improve the security of important electronic documents. For reference, 'Ascan' represents Alligator Scan Co., Ltd., the applicant of this application.

Regarding the need for ASFS (2000) to improve the security of important electronic documents, when scanning important electronic documents is recorded locally as a general image file, the computer is physically exposed to the outside or the hard disk is replaced due to aging. When exposed, information may be leaked to the outside because important electronic documents are not encrypted.

Additionally, because malicious programs can easily access important electronic documents, there is a high possibility that information will be leaked.

ASFS (2000) uses thumbnail images and cache files as the main objects of storage in order to increase loading speed, and in order to check whether important electronic documents have been forged or altered and to increase their legal status as evidence, important electronic documents are stored in the cloud from the scanner 20. It is a real-time encryption and decryption virtual file system optimized for images to prevent any damage until they are stored in storage. By combining ASFS (2000) with the electronic document management system (1000), the security of important electronic documents was improved.

Figure 2 is a flowchart to explain an example of managing keys used in ASFS.

Referring to FIG. 2, the user side 100 requests authentication with an identifier (ID) and a password (Password) from the authentication server 1100 (S110).

The authentication server 1100 may be a server included in the electronic document management system 1000, or may be a server that exists separately from the electronic document management system 1000.

If authentication is successful, the authentication server 1100 delivers the seed value of the key to be used for real-time encryption and decryption on the user side (S120). The seed value of the key to be used for real-time encryption and decryption may be named “Cache Seed Key.”

When the user side (100) receives the "Cache Seed Key", it can combine it with the "Hash (ID+Password)" value used for authentication to generate a key to be used in ASFS (2000) (S130).

The processes (S110, S120, and S130) described with reference to FIG. 2 all operate on memory and no information is recorded in the local storage area. When generating a key to be used in ASFS (2000) using the method described with reference to FIG. 2, the initial value for generating a key to be used for encryption and decryption without going through the authentication server (1100), which is not operated by the user side (100), is Can't get "Cache Seed Key". In addition, even if the "Cache Seed Key" is exposed, the key used for encryption and decryption is not leaked because it is combined with the password known to the user (100).

In addition, even after generating a key to be used in the ASFS (2000), the ASFS (2000) has a mechanism that allows it to be opened only under specified circumstances. This mechanism will be described with reference to FIG. 3.

Figure 3 is a flowchart showing an example of a process for ASFS to determine whether access is by an authorized program.

ASFS (2000) can be developed and installed as a File Filter Driver on top of the Raw DISK driver area within the kernel area of the operating system.

ASFS (2000) creates its own separate file system structure in the log disk area and encrypts all data in real time using the AES algorithm.

ASFS (2000) can include a security function that opens files only to designated processes in addition to protecting them with encryption keys in the process of opening files to processes and handing over file handles.

The electronic document management system 1000 receives a PKI certificate to be used for code signing from a global public certification authority, etc., and signs the electronic document management S/W 1300 executable file before distributing it (S210). This signature value is distributed and installed together with electronic document management S/W (1300).

When the electronic document management S/W (1300) requests a file handle from the ASFS (2000) filter driver to access important electronic documents (S220), ASFS (2000) determines whether the requested program is an authorized program based on the signature value. Confirm (S230). ASFS (2000) blocks access if the program is not authorized as a result of verification based on the signature value (S240).

The electronic document management S/W 1300 may be a computer program that implements all or part of the functions of the electronic document management system 1000.

As a result of checking based on the signature value, ASFS (2000) transmits the “Cache Seed Key” received from the authentication server (1100) if access is by an authorized program (S250).

Since all important electronic documents are encrypted even after access by an authorized program, data can be decrypted only through a password known only to the user 100, as described with reference to FIG. 1.

The in-house cloud storage can be an archive server that ultimately stores important electronic documents collected through the electronic document management system 1000.

The in-house cloud storage and electronic document management system 1000 may provide a synchronization function for sending and receiving files related to electronic documents.

There are problems with the network speed for sending and receiving encrypted files using only a general external cloud server, so to compensate for this and increase efficiency, an in-house cloud storage can be installed in the in-house environment. In-house cloud storage can basically be configured to respond to problems with physical hard disks through RAID configuration. However, even if the in-house cloud storage is configured to respond to problems with the physical hard disk, there is a possibility of damage due to unexpected situations, so a secondary backup may be necessary.

In order to reduce network transmission and reception traffic when synchronizing files for secondary backup, files can be cut to a certain size and only the changed area can be transmitted.

Specifically, the process of synchronizing files for secondary backup while reducing network transmission and reception traffic is broadly divided into five processes. The process of synchronizing files for secondary backup may be performed by the first computing device 200 and the second computing device 300. The first computing device 200 and/or the second computing device 300 operates an electronic document management system 1000, a device operating an in-house cloud storage, a device connected to the in-house cloud storage, and a storage for secondary backup. It may be a device connected to storage and/or storage for secondary backup.

Figure 4 is a flowchart illustrating an example of synchronizing files for secondary backup while reducing network transmission and reception traffic.

Referring to FIG. 4, in the first process, the first computing device 200 may split file B into fixed-size blocks of S bytes in length that do not overlap in the file (S310). Therefore, the size of the last block is less than or equal to S.

In the second process, the first computing device 200 may calculate a checksum for each block (S320). The first computing device 200 may calculate a weak 32-bit rolling checksum and a strong 128-bit MD4 checksum.

In the third process, the first computing device 200 transmits this checksum to the second computing device 300 (S330).

In the fourth process, the second computing device 300 uses pairs of checksums for file B (e.g., rolling checksum and MD4 checksum) received from the first computing device 200 to block files from file A to file B. All blocks of length S bytes with the same checksum pair can be found (S340). The process of finding blocks of all S bytes in file A that have the same checksum pair as one of the blocks in file B can be done quickly in a single pass by exploiting the special properties of rolling checksums.

In the fifth process, the second computing device 300 transmits a command string for making a copy of file A to the first computing device 200 (S350). Each command in the command string can be a reference to a block in file B, or it can be string data for sections of file A that do not match any blocks in file B.

The result of this series of processes is that the first computing device 200 has a copy of file A, but only specific parts of file A that are not found in file B are actually transmitted through the link. Therefore, this series of processes requires only one round trip, and this single round trip can minimize the impact on link delay.

After receiving the checksum list of blocks of file B, the second computing device 300 can find whether there is a block matching the checksum in the received block for all offsets and all blocks of file A (S340).

For example, the second computing device 300 may sequentially calculate a 32-bit rolling checksum in blocks of length S for each byte of file A and search for matching checksums in the list. This search can be specifically performed in a three-step process. A total of three steps may be performed by the second computing device 300, and the checksum may be searched through another process.

In detail, step S340 will be described with reference to FIG. 5.

Figure 5 is a flowchart showing a specific example of step S340.

Referring to Figure 5f, the first step of checksum search uses a 16-bit hash of a 32-bit rolling checksum and a hash table of 216 entries. The list of checksum values (checksums calculated from File B blocks) can be ordered along a 16-bit hash of the 32-bit rolling checksum.

Each item in the hash table points to the first element of the list for that hash value, or contains a NULL value if there is no element in the list with that hash value.

A 32-bit rolling checksum and its 16-bit hash are calculated at each offset of the file, and if the hash table entry for the hash value is not NULL, the checksum search proceeds to the second stage (S341).

The second step of checksum search finds the 32-bit rolling checksum that matches the current value in the sorted checksum list pointed to by the hash table entry (S343).

The checksum search ends when the 16-bit hash reaches another entry, and when a matching entry is found, a third-stage checksum check is performed.

The third step of checksum retrieval calculates a strong checksum (128-bit MD4 checksum) at the offset of the current file (S345). The result is compared with the strong checksum in the current list entry (S347). If they match, it is considered that the block in file A that matches the block in file B has been found (S349).

If a matching block is found through the third step of the checksum search, the second computing device 300 transmits data between the current offset of file A and the most recently last matched location to the first computing device 200. After transmission, the block index of file B corresponding to the matched block is transmitted. The point of transmission is the moment when the matching target is discovered. If a match is not found, the search continues with the rolling checksum of the next offset. If there was a previously matched block, the search can proceed from the end of that block.

[How to improve the legal evidence of electronic documents]

Several documents may be admitted as evidence in legal disputes. However, in order for an electronic document to be recognized as legal evidence, it must be proven to be identical to the original.

Therefore, the electronic document management system 1000 according to an embodiment of the present invention scans the paper document 10 containing important content, and in the process of creating and storing the important electronic document, the important electronic document is separated from the paper document 10. Be able to prove the same.

Specifically, the electronic document management system 1000 may provide a point-in-time confirmation function that indicates that electronic documentation has been made at some point.

Additionally, the electronic document management system 1000 can provide an electronic signature function that can prove that no forgery or alteration has occurred during the process of creating, transmitting, and storing electronic documents.

Specifically, in order to improve the legal evidence of important electronic documents, the electronic document management system 1000 is implemented in accordance with the TWAIN protocol to communicate with a number of general-purpose scanners 20, but the electronic data is stored according to the ASFS (2000) described above. Data input from the scanner 20 is prevented from being tampered with by the user 100.

Additionally, the electronic document management system 1000 can extract a digest or hash value from electronic data and transmit it to a server for point-in-time management.

The server for point-in-time management can manage information regarding at what point electronic documentation was made and at what point transmission occurred using digest or hash values extracted from electronic data.

The server for viewpoint management may be a server included in the electronic document management system 1000 or may be a server that exists separately from the electronic document management system 1000.

Specifically, the server for time management can create a hash value by connecting it to the current time and sign it with a certified certificate to create a stamp with guaranteed integrity. Using the stamp information created in this way, the electronic document management system 1000 can store electronic data including signature information and time information. Therefore, it can be proven that the electronic data stored by the electronic document management system 1000 has not been forged or altered and is identical to the original using signature information and time information.

Although the operations shown in the drawings of FIGS. 2 to 5 are shown in a specific order, it is understood that the operations must be performed in the specific order shown, in sequential order, or all the shown operations must be executed to obtain the desired result. It shouldn't be. In certain situations, multitasking and parallel processing may be advantageous. Moreover, the separation of the various components in the embodiments described above should not be construed as necessarily requiring such separation, and the program components and systems described may generally be integrated together into a single software product or packaged into multiple software products. You must understand.

In FIG. 1, ASFS 2000 may refer to software or hardware such as a field-programmable gate array (FPGA) or an application-specific integrated circuit (ASIC). However, the above components are not limited to software or hardware, and may be configured to reside in an addressable storage medium or to execute one or more processors. The functions provided within the above components may be implemented by more detailed components, or multiple components may be combined to form a single component that performs a specific function.

Although embodiments of the present invention have been described above with reference to the attached drawings, those skilled in the art will understand that the present invention can be implemented in other specific forms without changing its technical idea or essential features. You will be able to understand it. Therefore, the embodiments described above should be understood in all respects as illustrative and not restrictive.

delete

Claims (1)

In the electronic document management system including ASFS (Ascan Secure File System), a real-time encrypted file system that receives scanned paper document data from a scanner and temporarily stores the received data,
In ASFS, an ASFS key is used for security when handing over a file handle,
The ASFS key is,
Requesting authentication from the user's device to an authentication server using an identifier (ID) and a password (Password); If the authentication is successful, the authentication server transmits a seed value (Cache Seed Key) of a key to be used for real-time encryption and decryption on the user's device; and generating a key to be used in ASFS using the Cache Seed Key, identifier, and password.
The steps of requesting authentication, transmitting the seed value, and generating the key are all performed in memory and are not recorded in the local storage area,
The electronic document management system is characterized in that data temporarily stored in the ASFS is stored in a private cloud storage through a security protocol.
Electronic document management system.