KR20000032097A - Visualizing device and method for digital signature - Google Patents

Abstract

PURPOSE: A visualizing device and method for digital signature is provided to transfer digital signature to easy recognizable form. CONSTITUTION: A visualizing device for digital signature(2) receives an electronic document from a creation device of digital signature. A coding module(12) in the visualizing device for digital signature is composed of an interface module, a QP(Quoted Printable) module, bar coding module, and a user defined module. The coding module(12) receives and codes an open key, a coded signature value, and a tag number following variant coding method. A position selection module(22) visualizes the coded data such as open key, tag value, digital signature value a paper. Also, the position selection module(22) decides the position and the size when the coded data is visualized.

Description

Apparatus and Method For Visualizing Digital Signature

The present invention relates to a digital signature visualization apparatus and a method thereof, and in particular, receives an electronic document processed through an external text editor and a digital signature thereof and receives a digital signature value on a paper document corresponding to the electronic document. The present invention relates to a digital signature visualization apparatus and method for converting the image into a form easily recognized by a user so as to visualize it.

At present, various services such as message handling system (MHS), electronic data interchange (EDI), directory, and e-commerce are required for the development of information society, and these services use digital signature technology for data integrity and user authentication. Required. As such, digital signatures are mainly used for user authentication and message authentication in online services such as the Internet. However, in order to activate digital signatures in such an online environment, users who are familiar with the typed documents should be able to easily use them, and be able to solve problems such as loss of signature information and service interruption due to system error, network error, and the like.

As the Internet becomes more active, the demand for services such as e-commerce on the Internet will increase. If you want to use these services effectively, you need to trust each other between companies that perform commerce services such as purchasing goods, issuing electronic money, and issuing receipts. In other words, intermediaries, such as sellers who provide services, buyers who will make purchases, and banks in charge of intermediary, must trust each other. This trust is achieved by exchanging information that can authenticate each other before all services are started. Digital signature technology is the solution to this problem.

Digital signature technology can be divided into direct signature and indirect signature according to the signature method. Direct signatures include only the communicating party, i.e. the sender and the recipient, and the recipient must have previously obtained the sender's public key. Also, for this structure to be justified, the sender and receiver must be kept secure. If the sender later wishes to deny the transmission of a particular message, the sender may claim that the private key has been lost or stolen, and that a third party has forged the signature. In this case, safety cannot be guaranteed. However, this threat can be solved in an indirect signature manner. The sender sends the signed message with the sender information to the moderator without sending the signed message to the receiver, and after the verification, the moderator sends it to the receiver with the authentication information of the moderator. This method is called an indirect signature, and the legitimacy depends on the mediator.

Through such digital signature methods, data sender authentication and peer entity authentication services are provided. Looking at this signing and verification process, we first compress the message using a hash function because there are usually a lot of messages to send. The compressed message is encrypted with the sender's private key. This encrypted data is the digital signature value. This digital signature value will be sent to the recipient along with the message to be sent. As such, the digital signature value is generated, and this method is called an additive digital signature method. Now look at the verification process, which compresses a message that is part of the received data using a hash function already promised by the sender. The verification process is performed by comparing the compressed data with the identity of the received digital signature value with the data decrypted with the sender's public key.

There are problems that need to be solved technically in order to carry out this process, but in our social environment, we have yet to make use of unprinted documents, certificates issued online, and as evidence of online documents in the event of a dispute. Adoption and the like cannot be easily accepted. In particular, since electronic contracts are performed online only between geographically separated contractors, they are vulnerable to forgery / falsification and denial of service by third parties. Now, when the digital signature law and the e-commerce law go into effect, these vulnerabilities will take a long time to be accepted in our social environment, even if they are not legally problematic.

However, in the related art, such a digital signature generation and verification method exist, but since the method of visualizing the generated digital signature is not presented, a problem that may occur due to the service provided only online, that is, the service system There was a problem that information may be lost due to instability, network service error, and the like.

It is an object of the present invention to receive an electronic document processed through a text editor external to the digital signature and a digital signature thereof, as an input so that the user can easily recognize the digital signature value on the paper document corresponding to the electronic document. The present invention provides a digital signature visualization apparatus and method for converting the image into a visual representation.

1 is a view showing a relationship between a digital signature visualization device and a general digital signature generation device according to an embodiment of the present invention.

2 is a block diagram of a digital signature visualization generating device according to an embodiment of the present invention.

3 is a detailed configuration diagram of an encoding module of FIG. 2.

4 is a reference to a position indicating a reference value for a position when a digital signature value, a public key, and a security algorithm related information value (tag value) are selected in a random manner by selecting a position to be visualized on a paper document. Information table too.

FIG. 5 is a position reference indicating a reference value for a position when a position to be visualized on a paper document is selected through a sequence method for a digital signature value, a public key, and a security algorithm related information value (tag value) according to an embodiment of the present invention. Information table too.

6 is a negotiation information table used to easily obtain information on a security algorithm already negotiated with a receiver through a security algorithm related information value (tag value) in an embodiment of the present invention.

7 is a visualized data structure diagram for digital signature value, public key, and security algorithm related information value (tag value) used in the embodiment of the present invention.

8 is a signal flow diagram illustrating a positioning method in a digital signature visualization method according to an embodiment of the present invention.

(Explanation of symbols for the main parts of the drawing)

12: encoding module 22: position selection module

121: interface module 122: hexadecimal coding module

123: base 64 coding module 124: QP module

125: bar coding module 126: user-defined module

The first means for achieving the object of the present invention is the digital signature value, if the externally generated digital signature value, the digital signature creator's public key, and a tag value that is an indicator for the shared security algorithm related information is inputted. After the first process of encoding according to a coding scheme capable of visualizing the public key and the tag value, and determining the position of the encoded digital signature value, public key and tag value on the electronic document when the electronic document is input, And outputting in the form of a paper document that can be viewed, and placing and outputting the digital signature value, public key, and tag value at the position determined in the first step on the output document.

The second means for achieving the object of the present invention according to the coding scheme that can visualize the tag value which is an indicator for the externally generated digital signature value, the digital signature creator's public key and the shared security algorithm related information. A coding module for encoding and determining the positions of the encoded digital signature value, public key and tag value on the electronic document when the electronic document is input, outputting them in the form of a paper document that can be viewed by the user, and placing them on the output document. And a positioning module for positioning and outputting a digital signature value, a public key, and a tag value at a position determined by the encoding module.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

1 illustrates a relationship between a digital signature visualization apparatus and a general digital signature generator according to an embodiment of the present invention. 2 is a block diagram of a digital signature visualization apparatus according to an embodiment of the present invention.

As shown in FIG. 1, the digital signature generation device includes a hash module 11 that compresses an electronic document using a hash function, and encrypts the electronic document compressed by the hash module 11 with a sender's private key. An encryption module 21 for generating a signature value, and a data transmission unit 31 for transmitting the digital signature value and the electronic document generated by the encryption module 21 together.

1 and 2, the digital signature visualization apparatus according to the embodiment of the present invention relates to the digital signature value transmitted to the data transmitter 31, the public key of the digital signature generator, and the shared security algorithm. An encoding module 12 for encoding a tag value, which is an indicator of information, according to a coding scheme capable of visualizing, and a position of the encoded digital signature value, public key, and tag value on the electronic document when the electronic document is input. Then, it is composed of a position selection module 22 for outputting in the form of a paper document that can be viewed by the user, and placing the digital signature value, public key and tag value at the position determined by the encoding module on the output document.

3 illustrates a detailed configuration diagram of an encoding module of FIG. 2.

As shown in FIG. 3, the encoding module includes an interface module 121 for interfacing the digital signature value, the public key, and the tag value, and the digital signature value, the public key, and the interface module 121. A hexadecimal coding module 122 for coding a tag value in hexadecimal, a base 64 coding module 123 for coding the digital signature value, a public key, and a tag value, which are interfaced by the interface module 121, in a 64 hexadecimal notation; A QP coding module 124 for coding the digital signature value, the public key and the tag value interfaced by the interface module 121, and the digital signature value interfaced by the interface module 121; A bar coding module 125 for bar coding a public key and a tag value, and the digital signature value, the public key, and the tag value interfaced by the interface module 121 to a coding scheme defined by a user. Consists of a custom module 126 to code according to.

FIG. 8 is a signal flow diagram illustrating a positioning method in a digital signature visualization method according to an embodiment of the present invention.

Digital signature visualization method according to an embodiment of the present invention, when the generated digital signature value, the public key of the digital signature creator, and a tag value that is an indicator for the shared security algorithm related information is input, the digital signature value, public key and A first process of encoding according to a coding scheme that can visualize a tag value, and after determining the position of the encoded digital signature value, public key, and tag value on the electronic document when the electronic document is input, the user can view the paper. And outputting the document in the form of a document and placing the digital signature value, the public key, and the tag value at the position determined in the first step on the output document.

As shown in FIG. 8, the second process receives an electronic document, receives a public key, a tag value, and a digital signature value encoded in the first step, and sizes, up, down, and down the document through the electronic document. It extracts information about the margins, and extracts information about whether the digital signature value, public key, and tag value are already used by the electronic document among the 8 positions where the digital signature value, public key, and tag value are to be located. A first step of selecting a location selection method after obtaining information about the second step; a second step of selecting an arbitrary index value when the location selection method selected in the first step is an order method; and the first step A third step of determining the position of the digital signature value, the position of the public key, and the position of the tag value on the document if the position selection method selected in the above method is arbitrary; and the selected index or image in the second step. In accordance with the determined information in the third step comprises a fourth step of outputting the position value of a digital signature, the public key and the tag value in the electronic document.

The operation of the digital signature visualization apparatus and its method according to the embodiment of the present invention configured as described above will be described in detail with reference to FIGS. 4 to 7.

First, the digital signature value obtained by the general digital signature generator 1, the tag value which is the information related to the public key of the external user and the security algorithm are respectively passed through the interface module 121 and the hexadecimal coding module 122 and the base 64, respectively. It is input to the coding module 123, the QP coding module 124, the bar coding module 125, and the user-defined module 126. At this time, the interface module reads the coding scheme information already determined and stored by the user and uses only one. This coding scheme may be a scheme already shared with the user to be delivered or a scheme that should be used according to a specific document.

The hexadecimal coding module 122 codes the digital signature value, the public key and the tag value interfaced by the interface module 121 in hexadecimal, and the base 64 coding module 123 is the interface module 121. The digital signature value, the public key, and the tag value interfaced with are coded in 64 digits. The QP coding module 124 performs QP coding on the digital signature value, public key and tag value interfaced on the interface module 121, and the bar coding module 125 is interfaced on the interface module 121. Barcode the digital signature value, public key, and tag value. The user definition module 126 codes the digital signature value, the public key, and the tag value interfaced by the interface module 121 in a user-defined coding scheme. Such modules 122-126 encode public keys, security algorithm related information values (tag values), and digital signature values according to various types of coding schemes that are outputable and convenient for the user to view.

Subsequently, the positioning module 22 inputs an electronic document, a public key encoded by the encoding module of FIG. 3, a security algorithm related information value (tag value), and a digital signature value, and is located at the top left and top of the paper document. Public key, security algorithm related information value and digital signature value encoded at 8 positions such as upper right, middle left, middle right, lower left, lower middle and lower right are visualized. In addition, the position selection module 22 acquires the format of the electronic document itself, the left and right margins, the size information of the entire document, and the like. Accordingly, the position and the size at which the digital signature, the public key, and the security algorithm related information value are visualized Will be determined.

Referring to Figure 8 describes the processing of the positioning module as follows.

In step S1, an electronic document, an encoded public key, a security algorithm related information value, and a signature value are received.

In step S2, information about the size of the document, the left and right and top and bottom margins is extracted from the received data through the electronic document. At this time, in step S2, not only the information about the size of the document, the left and right and top and bottom margins, but also whether the digital signature value, the public key, and the security algorithm related information value are located are already used by the document. Information should also be obtained. This is because the following steps S4 to S7 are affected by this information.

In step S3, it is determined based on the information extracted in step S2 which one of the arbitrary method and the order method is selected.

When the order method is selected in step S3, one of eight index information values shown in FIG. 5 is selected in step S4. The ordering method of step S4 means that the digital signature value, the public key and the information related to the security algorithm are located side by side on the top, bottom, left and right sides. As shown in FIG. 5, one of eight index values is shown. May be selected arbitrarily. However, based on the information on the top, bottom, left, and right obtained in step S2 it should be determined that the document data is not included.

If an arbitrary method is selected in step S3, one of eight positions shown in Fig. 4 is determined at random in the step S5 where the digital signature value encoded on the document is located, and the public key encoded on the document is determined in step S6. After deciding at random one of the seven positions except where the digital signature value is located, select the two places where the digital signature value and the public key are located. Any one of the six positions excluded In this case as well as the above-mentioned arbitrary method, it is necessary to determine where document data is not included on the basis of the information on the upper, lower, left and right sides obtained in step S2.

In step S8, the electronic document is output, and the digital signature value, the public key, and the security algorithm related information value are output on the document in accordance with the result determined in steps S4 and S5 through S7. As shown in Fig. 7, the digital signature value is visualized according to the digital signature output data format consisting of the digital signature indicator (DS), the separator (:), and the signature value. As shown in Fig. 7, the public key is visualized according to a public key output data format consisting of a public key indicator PK, a separator (:), and a public key value area.

As shown in FIG. 6, the tag value determines a location for a security algorithm related information value indicating a security algorithm that is already negotiated and shared with a system that will verify the digital signature. Also, as shown in FIG. 7, the security algorithm related information value includes a security algorithm related information value indicator (TA), a separator (:), and a security algorithm related information value (tag value) area. Visualized according to the output data format of the relevant information value.

4 is a character string corresponding to a position on a document used in steps S5 to S7 according to an arbitrary method, and includes an upper left TL, an upper center TC, an upper right TR, and a middle left ML. There are eight places, right middle (MR), bottom left (BL), bottom middle (BC), and bottom right (BR). Each is also mapped to an integer from 1 to 8.

On the other hand, Figure 5 refers to a pair of strings corresponding to the position on the document used to perform the step S4 according to the order method, digital signature value, public key and security algorithm-related information values are present in pairs. Each pair corresponds to an integer index value.

6 is a diagram of a negotiation information table including information on a hash function, an encryption and signature algorithm, and a security mode corresponding to a security algorithm related information value visualized on a document. This table is information that must be shared and negotiated between the digital signature generation system and the digital signature verification system before the digital signature visualization system is used. When stored in the form of a database, this information can be easily found.

The present invention is to facilitate the recognition of users by placing the digital signature value generated according to various encoding methods in a proper position on the document, to prevent the loss of information that may occur due to instability of the service system, network service error, etc. The role of backup information to prevent and has the advantage that can be used easily and familiar to the user. Through this, the same effect as handwritten signature on the document can be obtained, and the effect of accommodating the advantages of the existing digital signature on the online can be accommodated.

In addition, the present invention will be able to safely issue the documents issued by the person in person when issuing the complaint documents in public institutions from the risk of system error and network loss through the environment such as the Internet. If the same application service requests the electronic payment related information and uses the document output as the backup information in parallel with the online service, it can be easily accepted by users who are not familiar with the online document.

Claims (22)

When a tag value, which is an indicator for the generated digital signature value, the digital signature generator's public key, and information about the shared security algorithm, is input, the digital signature value, the public key, and the tag value are encoded according to a coding scheme that can visualize the value. A first process of doing; When the electronic document is input, the position of the encoded digital signature value, public key and tag value is determined on the electronic document, and then output in the form of a paper document that can be viewed by the user, and the position determined in the first process on the output document. And a second step of placing and outputting a digital signature value, a public key, and a tag value in the digital signature value. The method of claim 1, The coding method in the first process is any one of a hexadecimal coding method, a base 64 coding method, a bar coding method, and a user-defined coding method. The method of claim 1, In the second process, an electronic document is input, a public key, a tag value, and a digital signature value encoded in the first step are received, and the information about the size and left and right margins of the document is extracted through the electronic document. After extracting information on whether the digital signature value, public key, and tag value are already used by the electronic document among the eight positions, the information on the upper, lower, left and right sides of the electronic document is retrieved. A first step of selecting a positioning method; A second step of selecting an arbitrary index value when the position selection method selected in the first step is an order method; A third step of determining a position of a digital signature value, a position of a public key, and a position of a tag value when the position selection method selected in the first step is any method; And a fourth step of placing and outputting the digital signature value, the public key, and the tag value in the electronic document according to the selected index value in the second step or the determined information in the third step. . The method of claim 3, wherein When selecting an arbitrary index value in the second step, selecting an index value corresponding to a place where document data is not included based on information on the top, bottom, left and right sides of the electronic document obtained in the first step. Digital signature visualization method characterized in that. The method of claim 3, wherein The determination of the position of the digital signature value, the position of the public key, and the position of the tag value in the third step does not include document data based on the information on the top, bottom, left and right sides obtained in the first step. Digital signature visualization method characterized in that the decision to place. The method of claim 3, wherein In the third step, a first sub is used to determine an arbitrary position among eight positions, that is, the upper left, upper middle, upper right, upper left, middle middle, lower left, lower center and lower right of the digital signature value. Steps; A second substep of arbitrarily determining a location where a public key is to be located among seven positions except the determined one; And a third substep of selecting one position of the tag value from six positions except for the position of the digital signature value determined in the first substep and the location of the public key determined in the second substep. Digital signature visualization method. The method of claim 3, wherein In the fourth step, when an arbitrary index value is selected in the second step, the electronic document is output, and the position of the digital signature value, the position of the public key, and the tag value corresponding to the selected index value are displayed on the electronic document. And displaying the digital signature value, the public key, and the tag value at a position of the digital signature. The method of claim 3, wherein In the fourth step, when the position of the digital signature value, the position of the public key, and the position of the tag value are determined in the third step, an electronic document is output, and the digital signature value is disclosed and disclosed at the determined position in the electronic document. A digital signature visualization method comprising positioning and outputting a key and a tag value. The method of claim 3, wherein And the digital signature value output in the fourth step is output in a digital signature output data format consisting of a digital signature indicator, a separator, and a signature value area. The method of claim 3, wherein And the public key output in the fourth step is output in a public key output data format consisting of a public key indicator, a separator, and a public key area. The method of claim 3, wherein And the tag value output in the fourth step is output in a tag value output data format consisting of a tag value indicator, a separator, and a tag value area. An encoding module for encoding a digital signature value, a public key of a digital signature generator, and a tag value, which is an indicator for shared security algorithm related information, according to a coding scheme capable of visualizing; When the electronic document is input, the position of the encoded digital signature value, public key and tag value is determined on the electronic document, and then output in the form of a paper document that can be viewed by the user, and the position determined by the encoding module on the output document. And a positioning module for positioning and outputting a digital signature value, a public key, and a tag value in the digital signature visualization apparatus. The method of claim 12, The encoding module includes an interface unit for interfacing the digital signature value, the public key and the tag value; A hexadecimal coding unit for encoding the digital signature value, the public key, and the tag value interfaced by the interface unit in hexadecimal; A base 64 coding unit for coding the digital signature value, the public key, and the tag value, which are interfaced by the interface unit, in a 64 binary system; A QP coding unit for QP coding the digital signature value, the public key, and the tag value interfaced at the interface unit; A bar coder for encoding the digital signature value, the public key, and the tag value interfaced at the interface unit; And a user-defined coding unit for coding the digital signature value, the public key, and the tag value interfaced by the interface unit in a user-defined coding scheme. The method of claim 12, The location selection module receives an electronic document from the outside, receives a public key, a tag value, and a digital signature value encoded by the encoding module, and extracts information about the size and left and right margins of the document through the electronic document. Obtain information about the top, bottom, left and right side of the electronic document by extracting information about whether the digital signature value, public key and tag value are already used by the electronic document among the 8 positions where Means; First selecting means for selecting a positioning method; Second selection means for selecting an arbitrary index value when the position selection method selected by the selection means is an order method; Determining means for determining the position of the digital signature value, the position of the public key, and the position of the tag value when the position selection method selected by the first selecting means is any method; And output means for positioning and outputting a digital signature value, a public key, and a tag value in an electronic document according to the information selected by the second selecting means and the information determined by the determining means. The method of claim 12, When an arbitrary index value is selected by the second selecting means, an index value corresponding to a place where document data is not included based on information on the upper, lower, left, and right sides of the electronic document obtained by the obtaining means is selected. Digital signature visualization method characterized in that the selection. The method of claim 12, And the determining means determines a place where document data is not included based on information on the top, bottom, left and right sides obtained by the obtaining means. The method of claim 12, The determining means includes means for determining any one of eight positions: an upper left, an upper middle, an upper right, a left middle, a lower left, a lower middle, and a lower right where the digital signature value is to be located; Means for arbitrarily determining where the public key is to be located among seven positions except one determined by the means; And means for selecting any one of the six positions except for the position of the digital signature value determined by the means and the position of the public key determined by the means. The method of claim 12, The output means outputs an electronic document when an arbitrary index value is selected by the second selecting means, and the position of the digital signature value, the position of the public key, and the tag corresponding to the selected index value on the electronic document. And displaying the digital signature value, the public key, and the tag value at the position of the value. The method of claim 12, The output means outputs an electronic document when the position of the digital signature value, the position of the public key and the position of the tag value are determined by the determining means, and outputs the digital signature value and the public key at the determined position in the electronic document. And positioning and outputting a tag value. The method of claim 12, And the digital signature value output by the output means is output in a digital signature output data format consisting of a digital signature indicator, a separator, and a signature value area. The method of claim 12, And the public key output by the output means is output in a public key output data format consisting of a public key indicator, a separator, and a public key area. The method of claim 12, And a tag value output from the output means is output in a tag value output data format consisting of a tag value indicator, a separator, and a tag value area.