KR20040076045A - Method for Signing Document by Using Code Image - Google Patents

Abstract

PURPOSE: A method for attaching a signature to a document through a code image is provided to enable a client and/or a server to process a code image as a signature for a written document, and to prevent a malicious forgery or a piracy. CONSTITUTION: A client drags and drops a code image generation module and/or program(200), and requests a generated code image to be printed by attaching the client's signature to a document(205). The code image generation module and/or program is automatically executed, and at least more than one authorized certification is extracted(210). If the extracted certification is valid(240), at least more than one piece of authentication information is extracted(245), and at least more than one piece of document information is extracted(250). Digital signature information is generated(255), and the digital signature information is transmitted to a code generation server(260). A code image generated based on the digital signature information is transmitted to the client, and is inserted into a document signature position(270). A word processor prints the document inserted with the code image(275).

Description

Method for signing document by using code image}

The present invention relates to a method of signing a document through a code image. When the client and / or the server creates a document and inputs at least one document signing command, the client and / or the server selects at least one. After extracting the public certificate distributed by the above certification authority, the digital signature information including at least one or more authentication information and document information included in the extracted public certificate is transmitted to the code generation server on the network, and the code generation server is When the code image generated based on the digital signature information is transmitted to the client and / or server, the client and / or server provide a method of processing the code image as a signature on the created document.

Most organizations dealing with office-related affairs, including schools, businesses, government offices, and research institutes, prepare at least one document in the course of each task. Generally, documents created in the office-related business process are classified into documents printed on paper and electronic documents stored in digital media. Most documents are electronically documented by the development of office automation and network infrastructure. have.

However, due to customary business procedures and / or security issues in digital media, most organizations deal with the use of electronic documents and paper documents, or the process of using electronic documents and paper documents. have. For example, internal documents such as draft bills and reports, which are fast payment processing and confidentiality, use electronic documents, and external documents related to accounting such as orders and quotations are processed using paper documents.

In particular, many organizations have introduced quality standards, such as the ISO-9000 series, established by the International Standardization Organization (ISO) as a means of quality certification and quality management. Quality standards document and certify and manage each work flow and procedure. In some cases, dozens of documents can be created from simple tasks that are conventionally practiced. By the way, most institutions which have introduced the above quality standards have created most of the documents to be produced as paper documents, or paper documents and electronic documents in parallel.

Typically, documents contain signatures for clarity of responsibility and authority. For paper documents, they include customary signing tools, such as handwritten signatures or stamps, and for electronic documents, publicly available certificates from at least one certification authority. Electronic signatures are included. Of course, the electronic document is automatically processed through the signing process of the public certificate, but the paper document is very inconvenient because it must be handwritten, signed or stamped. In addition, when outputting an electronically signed electronic document in the form of a paper document, there is a disadvantage in that the electronic signature cannot be intuitively verified.

Therefore, some organizations process handwritten signatures and / or stamps in a form that can be stored on digital storage media and include them in each paper document. However, in most quality standards including the ISO-9000 series, Do not accept signature. In addition, a signature stored arbitrarily on a digital storage medium as described above includes a fatal disadvantage that it may be stolen or maliciously forged.

An object of the present invention to solve the above problems is to create a document in the client and / or server for a code image signing system consisting of a client and / or server for creating a document and a certificate authority and code generation server, etc. Inputting (or requesting) at least one document signing command for signature on the created document, extracting a public certificate distributed by at least one certification authority from the client and / or server, and the client and / or server. In the step of transmitting the digital signature information including at least one or more authentication information included in the extracted public certificate and the created document information to the code generation server on the network and the code generation server based on the digital signature information Generate the code image above Providing a signature method of a document through a code image including transmitting to a client and / or server, and processing the code image as a signature by the client and / or server. Is in.

1 is a simplified diagram of a code image signature system for processing code images generated through digital signature information into document signatures on a client.

2 is a simplified diagram of a process of processing a code image generated through digital signature information into a document signature on a client.

3 is a simple diagram of document creation, public certification and printing through digital signature information.

4 is a simplified diagram of a code image signing system for processing code images generated through digital signature information into document signatures on a groupware server.

5 is a simple diagram of a process of processing a code image generated through digital signature information into a document signature on a groupware server.

Fig. 6 is a simple diagram of updating a document created through digital signature information.

<Description of main parts of drawing>

100: client 105: code generation server

110: authentication server 115: printer

The present invention relates to a document signature method through a code image. The present invention relates to a client and / or server for creating a document, and a code image signature system including a certification authority and a code generation server. And / or creating a document on the server, entering (or requesting) at least one document signing command to sign the written document, and extracting a public certificate distributed by at least one certificate authority on the client and / or server. And transmitting digital signature information including at least one or more authentication information included in the public certificate extracted as described above from the client and / or server and the created document information to a code generation server on a network, and the code generation server. Generated by the user based on the digital signature information Sending a load image to the client and / or server, the client and / or server processing the code image as a signature on the created document, and the like.

In the present invention, a code image is an image content including code visually processed by encoding digital signature information, and includes at least one or more authentication information extracted from a public certificate and a document created by a client and / or server. Digital signature information including at least one document information includes image content included in an encoded code.

According to the present invention, a code image is characterized by visually recognizing a document signature on a paper document and / or an electronic document, and digital signature information included in the code image through a series of code image interpretation devices. It includes.

In the present invention, the digital signature information is information including at least one or more authentication information included in the public certificate and at least one document information on the created document. The digital signature information includes a copy of the certificate, an electronic signature key, an encryption public key, and the like. It includes the same authentication information, and includes document information such as header information and author information of the created document, and document summary.

According to the present invention, the authentication information of the digital signature information is extracted from a public certificate distributed by at least one certification authority, and the document information is extracted from a document creation program and operating system of the client and / or server on which the document is created. do.

In the present invention, the code generation server is a server on a network that generates code images based on digital signature information transmitted from at least one client and / or server, and includes at least one authentication information and / or at least one document information. A code image is generated and the code image generated as described above is transmitted to a client and / or a server in which a document is created.

According to the invention, the code generation server shares a certificate authority that has distributed at least one or more publicly available certificates distributed to the client and / or server on which the document was created, wherein digital signature information is transmitted from the client and / or server to the code generation server. Digital signature information transmitted over the network as described above by encrypting the step of transmitting the code image from the code generation server to the client and / or server via a public key infrastructure (PKI) through the authentication server. And / or provide confidentiality, authentication, integrity, and nonrepudiation of the code image.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout the present title.

According to a preferred embodiment of the present invention, the document is created on at least one or more clients and / or at least one or more servers. In general, a document created on a client includes a document in a form that can be immediately printed through printing and / or a document in a form that can be sent and printed through a network from a client. Documents that can be printed and / or documents in a form that can be printed and transmitted over a network at a server.

According to a preferred embodiment of the present invention, a two-dimensional barcode obtained by encoding at least one piece of authentication information and at least one piece of document information and processing them into codes is used as a code image. However, the two-dimensional bar code is only a representative code image that may include at least one or more authentication information and / or document information, and the embodiment of the present invention is not limited to the two-dimensional bar code only. For example, a three-dimensional barcode and / or color code, which may include at least one piece of authentication information and / or document information, may also be used as a preferred method of the present invention.

The first preferred method is to share resources with the code image generation module and / or the word processor plugged into the word processor in the step of printing through a printer a document created through at least one word processor at the client. The code image generation program is executed to extract digital signature information, and then generates a code image through a code generation server on a network and processes the document created on the client as a signature.

1 is a simplified diagram of a code image signature system for processing code images generated through digital signature information into document signatures on a client.

Referring to FIG. 1, a code image signature system includes a code generation server generating a code image based on a digital signature information transmitted from a client 100 and a client 100 including at least one word processor for writing a document ( 105), distributing an authorized certificate providing authentication information included in the digital signature information, authenticating server 110 providing encrypted communication between client 100 and code generation server 105, and signing via code image And a printer 115 capable of outputting the document to paper.

The client 100 is equipped with at least one word processor for creating a document, and create a document through the word processor, and a public certificate that is distributed to a hard disk, a removable disk, an integrated circuit (IC) card, a virtual card, or the like. After extracting at least one piece of authentication information from the device, a code image generation module capable of generating a code image to be used as a signature through a code generation server 105 on a network is plugged in, or the resource is shared with the word processor for authentication. After extracting at least one piece of authentication information from an authorized certificate distributed by the institution, a code image generation program or the like capable of generating a code image used as a signature through a code generation server 105 on a network is mounted.

The code generation server 105 is a digital signature transmitted from a code image generation module plugged into a word processor mounted on the client 100 and / or a code image generation program sharing resources with a word processor mounted on the client 100. It generates a code image such as a two-dimensional bar code based on the information, and transmits the generated code image to the code image generation module and / or code image generation program executed in the client 100.

In particular, the code generation server 105 uses the document information extracted from the document created by the client 100 among the digital signature information encoded and included in the code image, and the confidentiality, authentication, integrity, and Guarantee non repudiation.

The code image generated by the code generation server 105 is an image content encoding at least one or more authentication information extracted from a public certificate distributed by a certification authority and at least one document information about a created document, and printed on paper. It can be recognized through human vision at the stage of being displayed or displayed on a monitor, and it satisfies the feature of confirming digital signature information included in a code image through a series of code interpretation image devices.

The authentication server 110 is a server that distributes a public certificate to the client 100 and the code generation server 105, and provides an encryption communication service between the client 100 and the code generation server 105. The authentication server 110 guarantees confidentiality, authentication, integrity, and nonrepudiation of the document on which the code image is signed through authentication information extracted from an authorized certificate among digital signature information encoded and included in the code image.

2 is a simple diagram of a process of processing a code image generated through digital signature information into a document signature on the client 100.

According to a preferred embodiment of the present invention, the client 100 creates a document through at least one word processor, and the word processor generates a code image in association with the code generation server 105 and processes the document as a signature on the document. At least one code image generating module may be plugged in, or interworking with at least one mode image generating program and an internal process capable of generating a code image in cooperation with the code generation server 105 and processing the signature as a signature on a document. It is interworked through Inter Process Communication (IPC). For example, in the case of Hangeul Hangul, a representative Korean word processor in Korea, at least one external object can be plugged in through Object Linking and Embedding (OLE), or dynamic data is available since Hangul 97. You can share resources with at least one external process via Dynamic DataExchange (DDE) .In the case of Microsoft Word, Microsoft Word plugs in at least one external object through Object Linking and Embedding (OLE). In this case, resources may be shared with at least one external process through automation.

According to a preferred embodiment of the present invention, the code image generation module and / or program which is plugged into at least one word processor mounted in the client 100 or linked to share resources as described above is illustrated in FIG. It can be represented by the icon of the word processor toolbox. In addition, the code image generation module and / or the program represented by the icon of the word processor toolbox as shown in (a) of FIG. 3 may drag the icon and drop it to the position where the code image is to be inserted. Through this, a task for generating a code image on a word processor may be started, or a task for generating a code image in conjunction with a specific task may be initiated by the word processor.

Referring to FIG. 2, a process of dragging and dropping a code image generation module and / or a program represented by an icon of a word processor tool box mounted on a client 100 to a position where a code image is to be inserted The code image generation module and / or the program is automatically driven on a word processor, and the code image generation module and / or the program is generated through an event of initiating a printer command through at least one printer 115 through a document created through the word processor. The process of generating a code image and inserting it as a signature on a document is performed.

That is, after the client 100 creates the document through the word processor and / or the document is completed, the signature is inserted into the code image generation module and / or the program represented by the icon of the word processor toolbox. When dragging and dropping to position 200, the code image generation module and / or program is automatically driven to temporarily wait until a code image generation start command, such as a document print command, occurs from the word processor.

If the client 100 drives the code image generation module and / or program on the word processor as described above, the word processor causes the code image generation module and / or program to execute the code generation server 105 on the network. When the code image is generated, and the code image generated as described above is requested to be signed and printed on the document (205), the code image generation module and / or the program is automatically executed to execute the document signature of FIG. At least one public certificate distributed by the at least one authentication server 110 is extracted from the client 100 as shown in FIG. 210.

When at least one public certificate is extracted from the client 100 as shown in (b) of FIG. 3, the client 100 authenticates the validity of the public certificate through a series of processes of inputting a certificate password into the public certificate. .

If validation of the public certificate extracted by the code image generation module and / or the program fails (215), the code image generation module and / or the program extracting the public certificate from the word processor terminates the public certificate extraction process, and the word Automatically removed from the processor (220), the signature location to which the code image generation module and / or program has been dragged and dropped on the document written by the word processor is treated as blank (225).

If the client 100 tries to forcibly print the document even after the document signature is processed as blank as described above (230), the client 100 is configured to print at least one or more printers 115 through the word processor. Print through On the other hand, if the document signature does not print the blank document as described above, the word processor terminates the process of printing the document (235).

On the other hand, if the validity authentication of the public image extracted by the code image generation module and / or the program is successful (240), the code image generation module and / or the program obtains a copy of the certificate, a digital signature key, an encryption public key, etc. And extract at least one authentication information to be included in the digital signature information for document signing (245).

In addition, the code image generation module and / or the program may be linked to a digital processor for signing a document, including header information, document creator information, document summary, and the like, of a document file for a document created by the client 100 in conjunction with a word processor. Extract at least one document information to be included (250).

If the at least one authentication information and / or at least one document information to be included in the digital signature information is extracted through the above process, the code image generation module and / or the program generates the code through the authentication information and / or document information generated as described above. The generation server 105 generates digital signature information capable of generating the code image (255).

According to a preferred embodiment of the present invention, the digital signature information includes at least one authentication information extracted from a public certificate and at least one document information extracted from a word processor, and the like. It is processed and generated in the form of encoded code information that can be encoded and included in the code image through the agreement promised between 105.

When digital signature information is generated in the client 100 through the above process, the code image generation module and / or program transmits the digital signature information to the code generation server 105 on the network (260).

According to a preferred embodiment of the present invention, the digital signature information generated by the code image generation module and / or program of the client 100 is transmitted to the code generation server 105 via a public key infrastructure. That is, the digital signature information generated by the client 100 is digitally signed through the digital signature key extracted from the public certificate, encrypted with the public key of the client 100, and transmitted to the code generation server 105 on the network. In addition, the code generation server 105 extracts the digital signature information encrypted and encrypted through the public key infrastructure from the digital signature information transmitted as described above.

When the digital signature information is transmitted from the client 100 through the above process, the code generation server 105 generates a code image that can be inserted into the document based on the digital signature information. According to a preferred embodiment of the present invention, the code image generated by the code generation server 105 based on the digital signature information is generated in the form of a two-dimensional bar code.

When a code image is generated from the code generation server 105 based on the digital signature information, the code generation server 105 transmits the code image generated as described above to the client 100 through a network, thereby generating a document on a word processor. Insert at signature location (270).

According to a preferred embodiment of the present invention, the code image generated by the code generation server 105 is transmitted to the word processor mounted on the client 100 and / or the client 100 via a public key infrastructure. That is, the code image generated by the code generation server 105 is electronically signed through the digital signature key extracted from the public certificate of the code generation server 105, and encrypted by the public key of the code generation server 105 to be client over the network. Is sent to 100. In addition, the word processor mounted on the client 100 and / or the client 100 extracts a possible code image visually confirmed through the public key infrastructure of the code image transmitted as described above.

When the code image generated by the code generation server 105 based on the digital signature information is inserted into the signature position on the document prepared by the word processor, the word processor displays the document into which the code image is inserted. Printing through the printer 115 as shown in (c) (275). Of course, as shown in (c) of FIG. 3, the code image is inserted into the document signature so that the code image on the printed document can be checked through the series of code image analysis devices such as a two-dimensional barcode reader to check the digital signature information included in the code image. Can be.

In the following second preferred method, the client 100 connects to the groupware server, creates a document, and updates it to pay for the written document. The code image generation module and / or the groupware plugged into the groupware are provided. The code image generation program sharing a resource with the user is executed to extract digital signature information, and then generates a code image through the code generation server 105 on the network to process the document created on the server as a signature.

4 is a simplified diagram of a code image signature system for processing code images generated through digital signature information into document signatures on a groupware server.

Referring to FIG. 4, the code image signing system signs through a client 100 accessing the groupware server 400 to create a document, at least one groupware and a code image from which the client 100 can access and create a document. Code generation for generating a code image based on the digital signature information transmitted from the groupware server 400, the client 100, and / or the groupware server 400, including the document D / B 405, etc., which stores the stored document. A certificate that distributes the server 105, a public certificate that provides authentication information included in the digital signature information, and provides encrypted communication between the client 100 and / or the groupware server 400 and the code generation server 105. Server 110 or the like.

The client 100 accesses the groupware server 400 equipped with at least one groupware for document creation, creates a document through the groupware mounted on the groupware server through at least one web browser, hard disk, and removable. After extracting at least one authentication information from a public certificate distributed in a disk, integrated circuit (IC) card, virtual card, etc., the at least one authentication information included in the public certificate is passed through the groupware server 400, or directly It transmits to the code generation server 105 on the network to request to generate a code image.

The groupware server 400 provides an interface through which the client 100 can access a document through at least one web browser to create a document through at least one groupware, and is equipped with a document D / B 405 for storing the created document. As a server on a network, the client 100 accesses the groupware server 400 through a web browser, creates at least one document through an interface provided by the groupware mounted on the groupware server 400, and then Extract at least one or more authentication information from a hard disk, a removable disk, an IC card, or a virtual card and / or a public certificate distributed in the groupware server 400 interworking with the 100, and the client 100 uses a web browser. After extracting at least one document information, etc. from the document created by accessing through The digital signature information including the authentication information and the document information is transmitted to the code generation server 105 to generate a code image.

The document D / B 405 of the groupware server 400 is stored in a document created by the client 100 through a web browser and stored in a document processed by a code generation server 105 as a signature. As a D / B, every document stored in the document D / B 405 includes a code image including a two-dimensional barcode as a signature on the document.

The code generation server 105 generates a code image such as a two-dimensional bar code based on the digital signature information transmitted from the client 100 and / or the groupware server 400, and generates the code image generated as described above using the groupware server ( 400) to include as a document signature.

In particular, the code generation server 105 uses the document information extracted from the document created by the groupware server 400 among the digital signature information encoded and included in the code image, and the confidentiality, authentication, integrity, And non-repudiation.

The code image generated by the code generation server 105 is an image content encoding at least one or more authentication information extracted from a public certificate distributed by a certification authority and at least one document information about a created document, and printed on paper. It can be recognized through human vision at the stage of being displayed or displayed on a monitor, and it satisfies the feature of confirming digital signature information included in a code image through a series of code interpretation image devices.

The authentication server 110 distributes the public certificate to the client 100 and / or the groupware server 400, and the code generation server 105, and the code with the client 100 and / or the groupware server 400. A server for providing an encryption communication service between the generation server 105, wherein the authentication server 110 is a digital signature information coded in the code image included in the document signed by the code image through the authentication information extracted from the public certificate Ensure confidentiality, authentication, integrity, and nonrepudiation.

5 is a simple diagram of a process of processing a code image generated through digital signature information into a document signature on a groupware server.

According to a preferred embodiment of the present invention, the client 100 accesses the groupware server 400 on the network through at least one or more web browsers, and then, via the groupware capable of writing at least one document on the groupware server 400. Create a document (500).

According to a preferred embodiment of the present invention, the web browser mounted on the client 100 has at least one code image generation module that can generate a code image in association with the code generation server 105 and process it as a signature on a document. Or at least one mode image generation program capable of processing a code image as a signature on a document in conjunction with the code generation server 105, or interworking through internal interprocess communication (IPC), or the groupware server 400. Groupware mounted on the) has at least one code image generation module that can be linked to the code generation server 105 to generate a code image to be processed as a signature on the document, or in conjunction with the code generation server 105 At least one code that can be treated as a signature on the document Mode may be operatively coupled, via a communication (IPC) between an image generation program and internal processes. Accordingly, the code image generation module and / or program may be mounted on the client 100 and / or the groupware server 400.

According to a preferred embodiment of the present invention, a code image generation module and / or program linked to share a plug-in and / or a resource to at least one or more web browsers mounted on the client 100 as described above, or a groupware server as described above. The code image generation module and / or the program linked to share the plug-in and / or resources to at least one or more groupware mounted on the 400 may be configured in response to an event updating the document created by the client 100 through the groupware. Start creating an image.

That is, the client 100 accesses the groupware server 400 as shown in (a) of FIG. 6 to create a document through the groupware and / or after the document is completed, and generates a code image to sign the document. If it is requested to be replaced after insertion (505), the code image generation module plugged into at least one or more web browsers mounted on the client 100 and / or the code image generation program linked to the web browser by sharing resources The code image generation module and / or the groupware linked to the groupware of the groupware server 400 to which the client 100 is connected or the client 100 is connected to the groupware (not necessarily sharing resources at this time). 하면 Groupware is called] The code image generation program is driven, and requests to select a public certificate to use for signing a document as shown in (6) of FIG. 6 (510).

If the selected public certificate exists on the client 100 side (the location of the public certificate regardless of whether it is a client 100 code image module or a server side module) (515), the client 100 web browser and / or as described above At least one code image generation module and / or program that is plugged into and / or interworked with the groupware of the groupware server 400 may be used to sign documents on a hard disk, a removable disk, or an IC chip card on the client 100 side. Extract the certificate (520).

On the other hand, if the selected public certificate exists on the groupware server 400 side (the location of the public certificate regardless of the client 100 code image module or the server side module) (525), the client 100 web browser and / Alternatively, at least one code image generation module and / or program plugin and / or linked to the groupware of the groupware server 400 extracts an authorized certificate to be used for signing the groupware document (530).

If the public certificate distributed by the at least one authentication server 110 to be used for signing the document is extracted through the above process, the plug-in and / or interworking with the groupware of the client 100 web browser and / or the groupware server 400 may be performed. At least one code image generation module and / or program authenticates the validity of the public certificate through a series of processes for inputting a certificate password in the public certificate as shown in (b) of FIG.

If validation of the public certificate extracted by the at least one code image generation module and / or the program which is plugged and / or linked with the groupware of the client 100 web browser and / or the groupware server 400 fails (535) ), The groupware server 400 requests the client 100 to determine whether to sign and renew through a conventional document signing method such as a scanned bitmap image without processing the code image as a document signature. (540).

If the client 100 determines to renew through the existing document signing method (545), the groupware renews the signed document through the existing document signing method. On the other hand, if the client 100 decides not to update through the existing document signing method (550), the groupware generates a code image, inserts it as a signature on the document, and repeats the process of updating the created document.

On the other hand, if the validity authentication for the public certificate extracted by at least one or more code image generation modules and / or programs that are plugged in and / or linked to the groupware of the client 100 web browser and / or the groupware server 400 succeeds (555) The code image generation module and / or the program extracts at least one piece of authentication information to be included in the digital signature information for document signing, including a certificate copy, an electronic signature key, an encryption public key, and the like, from the authorized certificate (560). .

In addition, at least one code image generation module and / or program plug-in and / or linked to a groupware of the client 100 web browser and / or the groupware server 400 may be a document created in conjunction with the groupware of the groupware server 400. At least one document information to be included in the digital signature information for document signature is extracted, including header information, document creator information, document summary, and the like, of the document file for 565.

If the at least one authentication information and / or at least one document information to be included in the digital signature information is extracted through the above process, the plug-in and / or are linked with the webware of the client 100 and / or the groupware of the groupware server 400. The at least one code image generation module and / or program generates 570 digital signature information through which the code generation server 105 can generate a code image through the authentication information and / or document information generated as described above.

According to a preferred embodiment of the present invention, the digital signature information includes at least one authentication information extracted from a public certificate and at least one document information extracted from a word processor, and the like. It is processed and generated in the form of encoded code information that can be encoded and included in the code image through the agreement promised between 105.

When the digital signature information is generated in the client 100 through the above process, at least one code image generating module and / or linked with a plug-in and / or linked with the groupware of the client 100 web browser and / or the groupware server 400, etc. The program transmits the digital signature information to the code generation server 105 on the network (575).

According to a preferred embodiment of the present invention, digital signature information generated by at least one code image generation module and / or program that is plugged in and / or linked to a groupware of a client 100 web browser and / or a groupware server 400 or the like. Is transmitted to the code generation server 105 via the public key infrastructure.

That is, the digital signature information generated by the at least one code image generation module and / or the program which is plugged in and / or linked to the client 100 web browser is an electronic signature key extracted from the public certificate in the client 100. Digitally signed, encrypted with the client 100 public key, and transmitted to the code generation server 105 on the network

In addition, the digital signature information generated by the at least one code image generation module and / or program that is plugged in and / or linked to the groupware of the groupware server 400 may be electronically extracted from the public certificate by the groupware server 400. Digitally signed through the key, encrypted with the client 100 public key and transmitted to the code generation server 105 on the network

When digital signature information is transmitted to the code generation server 105 on the network as described above, the code generation server 105 extracts the digital signature and encrypted digital signature information through the public key infrastructure. .

When the digital signature information is transmitted from the client 100 through the above process, the code generation server 105 generates a code image that can be inserted into the document based on the digital signature information. According to a preferred embodiment of the present invention, the code image generated by the code generation server 105 based on the digital signature information is generated in the form of a two-dimensional bar code (580).

When the code image is generated based on the digital signature information from the code generation server 105, the code generation server 105 transmits the generated code image to the groupware server 400 through the network, and is authorized on the groupware. The certificate corresponding client 100 is inserted (585) in the signature position on the document being created.

According to a preferred embodiment of the present invention, the code image generated by the code generation server 105 is transmitted to the groupware server 400 and / or groupware through the public key infrastructure. That is, the code image generated by the code generation server 105 is digitally signed through the digital signature key extracted from the public certificate of the code generation server 105, and encrypted by the public key of the code generation server 105 to be groupware through the network. Sent to server 400 and / or groupware. In addition, the groupware server 400 and / or the groupware extracts possible code images visually confirmed through the public key infrastructure of the transmitted code images.

When the code image generated by the code generation server 105 based on the digital signature information is inserted into the signature position on the document created by the client 100 accessing the groupware through the above process, the groupware inserts the code image as described above. After updating the old document (590), the result of the renewal is output as shown in FIG. Of course, the document renewed as shown in (c) of FIG. 6 may be printed as a paper document through at least one or more clients 100 having access to the document, and the code image on the printed document is a two-dimensional barcode reader. The digital signature information included in the code image may be confirmed through a series of code image analysis devices such as the above.

According to the present invention, a code image signing system comprising a client and / or server for creating a document, a certification authority, a code generation server, and the like, generates a document at the client and / or server, and at least signs the created document. Inputting (or requesting) one or more document signing instructions; extracting a public certificate distributed by at least one certification authority on the client and / or server; and a public certificate extracted as such on the client and / or server. Transmitting digital signature information including at least one or more authentication information and the written document information to a code generation server on a network; and generating a code image generated by the code generation server based on the digital signature information. And / or sending it to the server and The client and / or server provides a method of signing a document through a code image including a step of processing the code image as a signature on the created document, and optionally storing the code image in a digital storage medium. There is an advantage that a safer and more convenient signature can be obtained by preventing unauthorized theft and malicious forgery.

Claims (7)

Creating a document at the client and / or server and entering (or requesting) at least one document signing command; Extracting a public certificate distributed by at least one certification authority in the client and / or server; Transmitting, at the client and / or server, digital signature information including at least one or more authentication information included in the public certificate extracted as described above and the created document information to a code generation server on a network; Transmitting, by the code generation server, the code image generated based on the digital signature information to the client and / or server; And Processing the code image by the client and / or server as a signature on the created document. The method of claiming a document through a code image. The method of claim 1, wherein the code image (Code Image), At least one piece of authentication information extracted from a public certificate, And at least one document information on a document created at the client and / or server. The method of claim 1, wherein the code image (Code Image), Method for signing a document through a code image, characterized in that the digital signature information consists of the image content included in the code code. The method of claim 1, wherein the code image (Code Image), A method of signing a document through a code image, comprising a two-dimensional barcode and / or a three-dimensional barcode and / or a color code. The method of claim 1, wherein the digital signature information, A copy of the certificate included in the public certificate, Authentication information including a digital signature key and / or an encryption public key, And at least one document information including at least one of header information, author information, and document summary information of the created document. The method of claim 1, wherein the digital signature information and / or code image, Transmitting digital signature information including at least one or more authentication information included in the public certificate extracted as described above from the client and / or the server and the created document information to a code generation server on a network; In the step of transmitting the code image generated based on the signature information to the client and / or server, Method for signing a document through a code image, characterized in that the transmission through the authentication server encrypted. The method of claim 1, wherein the document, A document that is typically created on a client and can be printed via print, and / or Documents in a form that can be transmitted and printed over a network at a client, and / or Documents that can be created on the server, stored on the server, and then printed, and / or A method of signing a document through a code image, characterized in that it comprises at least one document in a form that can be transmitted and printed through a network at a server.