TW561408B - Authorization method for reading electronic file - Google Patents

Abstract

An authorization method for reading electronic file utilizes the exclusive serial number of computer as identification code for restraining the connected computer to read electronic file, and generates read authorization code, encrypts electronic file and creates encrypted file along with the password of electronic file. Meanwhile, based on the system time in opening electronic file, coding and generating a read time limit code for restraining read time and count in reading electronic file. The connected client computer must follow personal identification code and externally inputted file open password to generate read authorization code and decrypt the encrypted file. Client end computer must correctly decrypt code within read time limit to be able to read electronic file.

Description

561408 V. Description of the invention 0) This is about the only way to use an electronic w to use a computer, and to discuss the methods, especially better protection. The time and frequency of the case can be provided with the development of information and network technology, and the use of e-mail function to deliver; "Number: the main office uses the computer host to obtain electronic files from the Internet, and ten: 2 and It does not involve reading and reading ΐ = full, once the owner of the building case leaves office, still feel comfortable Figure 1 shows the conventional electronic file password protection system computer host 11, computer host 14, computer host, map, including: ,, The cipher device handles the project A2 based on the encryption operation of the password 13 and is stored in the computer host uu ^ is an electronic file (using the end computer). The computer host 14 inputs \ ^ = electricity, the same machine, the cipher device 15 can decrypt, The electronic cable f and password 13 are readable data. The electronic file holder "job: f into A1, or other users who know the password 13, as long as you open a company, through the LAN or the Internet Connect to the host computer 11 host computer 1, host computer 14, host computer 14, enter the password 19 of the computer host computer 17 is confidential, or the computer can easily restore the electronic file A2 into an electronic filer. The same, that is, the conventional password protection is not perfect. Once the file holder is in place or leaves the company, it can still be freely read to open the original post or file password 0506-6773TWF; MRS90-〇13; R1iu.ptd Page 561408 V. Description of the invention (2) Waimao, you can open, ~ to more • secure access to authorized parties include: provide--brain 9 has the requirement to read the computer to read open and open the file encryption J to generate the above encryption The file time limit code is such that computer J has the second read authorization to generate a read code, and read 5 otherwise it is prohibited to restrict the selection of file protection for electronic files ^ It is not a safe method. Whether the host is authorized: and: f = the number of computers that want to read the file # to prevent unlimited reading solutions; protection. The electronic file can be obtained more securely. Here, the present invention is connected to the server computer. It is necessary to set the password for opening the broadcast by the external input. File code and identification code; the server-side computer generates a first read authorization password to file the second file of the electronic file based on the identification code: open the code, and generates a read time limit code to limit = generation File read deadline; server computer sends encrypted file and read: encrypted file used computer; external input password to open file at user ^ code to make data identification code and open file password for calculation, generating a second S ' The root password is used to decrypt the encrypted file, and the read time limit code L = authorization time limit flag; and 1, the read method, the above electronic file has: second file I: when the authorized party's sub-label is taken, the outside If the second read authorization password is equal to the first read authorization password, and the time limit flag is enabled, the encrypted file can be decrypted and read, and read. Ancient rules are forbidden

〇506-6773TW; MRS90-013; Rliu.ptd 561408 V. Description of the invention (3) Figure 1 shows the structure of a conventional electronic file password protection system. Figure 2 shows the architecture of the electronic file password protection system according to the embodiment of the present invention. [3] Figure 3 shows the flowchart of the electronic file encryption according to the embodiment of the present invention. FIG. 4 shows a read authorization circuit in the embodiment of the present invention. FIG. 5 shows a read = check case flow chart in the embodiment of the present invention. Traditional architecture diagram. Figure 6 shows the flow chart of electricity in the embodiment of the present invention. How to deal with the reading deadline of the cadmium case Figure 7 shows the time relationship. Correspondence of time interval within reading time limit Figure 8_1〇 [Symbol Description] Correspondence between private data and time zone door step ^ cpu.

3 ~ RAM 5 ~ ROM 7 ~ I / O interface; 8 ~ reading time limit horse; 9 ~ electronic construction; 11 12 10 shells / bit ± bus stop; 17 ~ computer host; password 1 qj, 1 8 ~ Password; 1 3, 1 6, 1 9 2 0 ~ system;

0506-6773TWF; MRS90-013; Rliu.ptd 561408 5. Description of the invention (4) 22 ~ external bus; 3 0 ~ external memory IC; TD1-TDN ~ time interval code; ADI-ADN ~ memory block address ; SEIM ~ server computer; iism ~ using computer; NTX ~ transmission interface. The embodiment is a user-end computer that restricts reading of electronic files. The present invention: The characteristics of the computer are used to identify the computer and generate an electronic broadcast case 2: The password, such as LAN and IEEE 1 3 94 transmission interface, has a GUID (glObally unique identifier), which is the unique identifier of the domain. It has a unique correspondence with the computer. Even if the computer changes °, M (distinguished name), or moves the location, this number changes, so it can be used as a basis for reading authorization. [Funct i⑽ can know the end-user computer (senal number) to read the electronic file, use this serial number identification, < read the electronic file. In order to achieve this method, at least two electricity months are needed to achieve this method. As shown in Figure 2, one is a feeding computer SER1, which stores all electronic files. The interface N interface for SER1 requires authorization to read the electronic file, A j electronic shame 如 such as the flute q ISI Ping-both parties restrict the authorization to read the electronic file / the third page, the electronic file authorization flowchart. First, in step S1 ', the end-use computer_1 is connected to the server-side computer 0506-6773TWF; MRS90-013; Rliu.ptd M1408 through the transmission interface Nτχ. 5. Description of the invention (5) ______ USRi ^ ask for an electronic file, The server computer SER1 must input the user identification code. On the step, use the end-user computer to transfer the interface NTX, read the end-user computer us] to serve the computer SEm with the domain identification code (GU ID), and use u pp Μ # Λ, such as the whole area:. In step S3, the time for the server-side computer to connect with the right brain of the m broadcast; = terminal = R = R1 according to the use of the terminal: code 'It is used to limit the use of the computer USR1 = time 1 = =, know the computer USR1 can only be read with authorization ^ Can read the system time of the electronic computer USR1 in the-period of time, and the helmet method is heavy ^ < Mainly adjusted for use: 2 The time limit code can provide a more complete Protection from electricity: Someone continues to read the electronic case after leaving their original duties. "Tian", = cut according to the identification code of the end-use computer: and electronic construction = open the file password 'after operation to generate a read authorization code. In step% "the server-side computer SERI uses the read authorization code to encrypt the electronic file, Xiao Z interface NTX sends the encrypted electronic file to the user computer usri. The user computer USR1 receives the encrypted electronic building through the transmission interface NTX. The flow chart of the method for reading the electronic file is shown in Figure 4. At ^ S11 'The user computer USR1 asks the user to enter the password for opening the file 1 At step S12' The user computer USR1 reads the identification code of the user computer. At step S13 'the user computer USR1 according to the password and identification code of the open file After the decoding operation, a read authorization code is generated. When the file encryption disc is opened and the identification code is correct, the read authorization code can be used for electronic construction.

0506-6773TWF; MRS90-013; Rliu.ptd Page 8 561408 V. Description of the invention (6) The code 'generates a readable electronic file. In step S14, use No. 2. According to the reading time limit code, it is used to detect the reading time of the electronic file β. The time limit for forest access, if the reading time limit is exceeded, then step S1 is performed. Step S14: The method of using the terminal USR1 according to the reading time limit code and determining whether the time of the electronic file exceeds the reading time limit, as shown in the following principle 2 f 5 tries to represent the memory block within the reading time limit in the embodiment of the present invention. Office: two = composition. In the architecture shown in FIG. 5, the electronic document storage system ^ SR1 20 includes: ㈣1, Ram3, 55, ι / 〇sphere:?, Reading time code 8 and electronic file 9. In this implementation, the code 8 and the electronic file 9 are stored in the system 20, and the reading time limit of the electronic file is divided into a plurality of time intervals according to the system time and the reading time code 8 of the loaded electronic file 9. The code TM-TDN compiles the ghost address AD 1 ADN corresponding to the interval code TIH-TDN memory area according to the hidden block of external memory 1 (: 30), and CPU1 passes the data / address bus 丨〇 Load the memory block address AD1-ADN into RAM3. This external memory IC 3〇 can be a simple memory ic, such as flash memory (flash memory) or electronic wipe PR 〇M (electrically erasable programmable read-only memory), can also be a single-chip computer (system 〇 n ch lp SOC) or the internal memory of the microcontroller. The external memory 丨 c 3 〇 uses the electronic file 9 to read Take the time limit code 8 for detection and read the electronic file 9. The CPU1 obtains the time interval code tdx for reading the electronic file 9 and the corresponding memory block aADX, cpul through the data from the RAM3 according to the system time.

0506-6773TWF; MRS90-013; Rliu.ptd Page 9 561408

/ Address bus 10 and I / O interface 7, read whether the memory block of the memory block address ADX in the external memory 1 (: 30 has been written with a mark, and if the mark has been written, it will stop opening For the electronic file 9, if the memory block at the memory block address AM has not been written with a mark, write a mark in this memory block and start reading the electronic file 9.

Fig. 6 is a flowchart showing a method for processing an electronic file reading deadline according to an embodiment of the present invention. First, in step S21, it is judged whether the electronic file 9 is opened for the first time. If so, step S22 is performed, and the plural time interval codes TD1-TDN are compiled according to the system time TO and the software use period LD loaded in the electronic file 9, as shown in section 7. As shown in the figure, the time interval code TD1 corresponds to the system time T0 ~ T0 + LD / N 'The time interval code TD2 corresponds to the system time T0 + LD / N ~ T0 + 2 * LD / N, and so on, the time interval code TDN Corresponds to the system time T0 + (N-1) * LD / N ~ T0 + LD. 'In step S23, the CPU 1 detects the memory blocks in the external memory IC 30 through the data / address bus 10 and the 1/0 interface 7 to determine the memory blocks required to record the reading time limit of the electronic file 9. In step S24, compile the Jiji block address aj) 1 — aj) n corresponding to the time interval code TD1-TDN, the external memory crypto IC 3 0, as shown in FIG. 8, and The corresponding relationship between the time interval code TD and TDN and the memory block address AIH-AND has been written into RAM3, that is, the tag memory. If it is not turned on for the first time, or step s24 has been completed, step S25 'is performed. According to the system time m of opening the electronic file 9, cpu 1 obtains the time interval code TDXi from the time interval codes TD1-TDN in RAM3. In step S26, the CPU 1 uses the time interval code TD1_TDN and the memory in the RAM 3 according to the TDX1.

0506-6773TW; MRS9〇.〇13; Rliu.ptd Page 10 561408 V. Description of the invention (8) Correspondence between block address AD and ADN, as shown in Figure 8, read out memory block address ADX1 The flag data is in the di sabl e state. Stop opening the electronic file9. According to the system time TX2 of opening the electronic file 9, the CPU 1 obtains the time interval code TDX2 from the time interval codes TD1-TDN in the RAM 3. In step S26, according to TDX2, CPU1 associates the time interval code TD1-TDN in RAM3 with the corresponding correspondence between the memory block address AD and ADN. As shown in FIG. 8, the memory block address ADX 2 is read, and the flag is read. The target data is not set to the non-enabled state, and step S27 is performed to set the TDX2 flag data to the non-enabled state in RAM3 and the internal memory IC, that is, the flag memory, as shown in FIG. 9, and set All related data before TDX2 in RAM3, the external memory 1 (: 30th memory block flag data is non-enabled, as shown in Figure 丨 0. There are memory blocks before ADX2 (including ADX2) m After time TDX2, the time zone mnY9 is so painful to recognize ± 疋 and then used the time zone with vh «pull: Γ time zone all time intervals are used as a dagger. Then, proceed to step S28 to read the electronic file. :: When the mark is written, 'Can't read the electricity 9 anymore ;: The time will expire. Although the time limit of the present invention has been disclosed as above with a preferred embodiment, it is wonderful to limit the invention, anyone who is familiar with this technique纟 ： 同 合 1 丨

God and the range β, can be made a little. The scope of protection of the present invention should be treated as the attached application _ 4 decoration, so the scope of the present invention 4 Jia Ming patent scope shall prevail.

Claims (1)

JUIH-UO patent application scope ΐ · An electronic file reading authorization to open the file password, which includes: 'The above electronic file has a server computer provided, a user computer provided on the storage, a sub file, connected to The above server-side computer requires the 誃 f code, through a transmission interface: enter the above-mentioned open file password, and upload :::: the file password from the external file and the above-mentioned identification code; the server must obtain the above to open the above-mentioned server. The computer generates a secret broadcast case according to the above-mentioned first read authorization password, and the file password is opened, and the electronic building case is encrypted, and the generation-addition period is limited; the 5 t code is used to restrict the electronic file from reading the server computer. Send the above and add it to the above-mentioned end-use computer; enter the open file password in the brown case and the above reading time limit code from the outside; use the electronic code according to the above identification code and upload; the second read the iA μ said open file code for calculation , Produces a second Ff second product: = code is used to decrypt the above encrypted file, and by reading the time limit code, generating one, taking the time limit flag; and g When ten c ,, S diglycidyl continuation Ϊ take the license key is equal to the first read license key, and the '[deg.] Shu mesh can be moved southward ί T flag Peugeot' then decrypt the encrypted file can be read, reading is prohibited. 2 Make the above-mentioned identification code of the authorized reader of the electronic file as described in item i of the patent application scope "'" the serial number of the above-mentioned end-use computer. 3) The electronic file authorization reading method described in item 1 of Shenjing's patent scope, wherein the above-mentioned transfer interface is IEEE 1394. 6. Law on the scope of applying for patents, in which the above transmission :: 2. The electronic file authorized reading method described in 5: 2: the second ::::: /: / the identification code of the end-user computer authorized by the electronic slot . Hungary and Japan; The above MIDs yielded the above-mentioned enactments, t ί:: ί: f The electronic file authorized readers * supply-method described in item 1 above, including the time limit flag for reading; 、-The plural time zone in the time limit code of the item is equal to the time slot of the above electronic slot; the time limit flag corresponding to the interval is read; Electronic file: L: and the sundial flag are not enabled, reading is prohibited Take the above limit flag soft: Set the above reading time method, the electronic broadcast authorization described in item 7 above is authorized to read the flag of the party's memory, and it saves the reading time limit of the above multiple time intervals. The plural time interval and the above-mentioned reading 8 Gan = the electronic file authorization reading described in item 6 of the patent application scope It detects the reading time limit flag of turning on the above electronic time interval page 13_ 0506-6773TWF; MRS90-013; Rliu.ptd 561408 6. The patent application scope detects the tag memory, and obtains the reading time limit flag for opening the electronic file time interval according to the related data of the electronic file time interval. 9. The electronic file authorized reading method according to item 6 of the scope of patent application, wherein setting the read time limit flag to a non-enabled state includes: setting the above-mentioned associated data of the tag memory to a non-enabled state; And the read time limit flag of the flag memory is set to a non-enabled state. 0506-6773TWF; MRS90-013; Rliu.ptd Page 14