JP3454187B2 - Electronic seal system and personal identification method for imprint and seal - Google Patents

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic seal stamp technique for embedding an identity certificate by utilizing an electronic watermarking technique, and in particular, is capable of simultaneously displaying a seal imprint and printing a document with a seal imprint which are indispensable for the current Japanese government office work. In addition, the present invention relates to an electronic seal stamp system and a seal imprint / imprint identity verification method that realizes the personal imprint of a seal imprint that electronically proves that the approver himself / herself has imprinted with his / her seal.

[0002]

2. Description of the Related Art With the progress of multimedia information processing technology using computers, so-called protection of digital works has become more important. To protect digital works, as a means to prevent unauthorized use of the works,
There is digital watermark technology (Reference: Nikkei Electronics, "Digital watermark protects multimedia age",
no. 683, 1997, 2-24, p. 99-p. 1
24, Nikkei BP).

As a conventional technique of a digital watermark for embedding or reading digital watermark information of an author or a user in such a digital image, for example, Japanese Patent Laid-Open No. 11-41453 (first prior art) is known. ) Are listed. That is, the first conventional technique is to enable the embedded digital watermark information to be read out reliably and relatively quickly even if the digital image in which the digital watermark information is embedded is edited by cutting and pasting. A digital watermark embedding and reading method for embedding digital watermark information in a digital image and reading digital watermark information from the digital image, wherein the digital watermark is embedded when the digital watermark information is embedded in the digital image. Embedding digital watermark information so that a process of analyzing an original image in which no information is embedded and extracting an object in the image and a block in which the object and the digital watermark information are embedded have a positional relationship according to a certain rule. The process of determining the position of the block,
Embedding digital watermark information in a block, and at the time of reading digital watermark information from a digital image, the image including at least a part of the digital image in which the digital watermark information is embedded is analyzed, and an object in the image is extracted. And a step of deciding the position of the block from which the digital watermark information is read so that the object and the block from which the digital watermark information is read have a positional relationship according to a certain rule, and a step of reading the digital watermark information from the block. And a digital watermark embedding read processing method. According to such a digital watermark embedding read processing method, even if the digital image in which the digital watermark information is embedded is edited by cutting and pasting,
It becomes possible to reliably read the embedded digital watermark information from a specific position. Also, without embedding the digital watermark information in unnecessary parts such as a uniform background,
An effect is disclosed in that it can be embedded only in a portion that is characteristic of an image and that actually needs to be protected as a literary work.

Another conventional technique is described in, for example, Japanese Patent No. 2762909 (second prior art). That is, in the second conventional technique, a means for inputting the signature image of the signer, a means for inputting the signature target document, a means for inputting the secret information of the signer, and the hashing of the signature target document to generate a hash value. Means, a means for converting a signature image using a hash value, a means for converting the converted signature image using secret information to generate a signature text,
A means for outputting the signature text, a means for inputting the signature text, a means for inputting the signer's public information, a means for inputting the signature target document, and a means for converting the signature text using the public information. And means for hashing the signature target document to generate a hash value, means for further converting the converted signature text using the hash value to generate a signature image, and means for outputting the signature image. It is a digital signature device that does. According to such an electronic signature device, only the signer can create the electronic signature, which is difficult to divert to a document other than the target document and confirms the signature verification result as an image, and the verifier can easily confirm the validity. Above, the effect that it is also effective when printing is disclosed.

[0005]

[Problems to be Solved by the Invention] In the decision-making work of government offices,
An approver's seal (paper stamp) is used to indicate that a document has been approved. Recently, it has become possible to perform electronic approval processing by digitizing documents and using the workflow function of groupware.
As shown in the above-mentioned prior art, there are some which can display the seal imprint (electronic seal) of the approver. However, the above-mentioned prior art has the following problems. First, the first problem is that there is no mechanism for certifying that the electronic seal stamp in the above-mentioned conventional technology is really the seal stamp of the person (person), that is, there is no personal seal proof technology. And the second
The problem with is that there is no mechanism for proving that the person who imprinted the person is who he / she is (the person himself), that is, there is no technology to prove the person who imprints the person.

The present invention has been made in view of the above problems, and an object of the present invention is to simultaneously enable the display of a seal imprint and the printing of a document with a seal imprint which are indispensable for the current Japanese government office work. The point is to provide an electronic seal stamp system and a seal imprint / imprint identity verification method that realizes the identity verification of the seal imprint that electronically proves that the approver himself / herself has imprinted with the seal imprint of the approver.

[0007]

Means for Solving the Problems The gist of the invention according to claim 1
Allows the server and client to send and receive information via HTTP
An electronic seal stamp system connected to Noh, said server
Is the imprint file storage that stores the imprint image file
Means and document to be approved in a fixed Web page description language format
Approval target document storage means for storing the
Hash value from file by message digest
By generating and encrypting it with the approver's private key
The signature of the generated imprint itself is applied to the
Means for embedding in shadow image file and said approval target sentence
Hash value from message by message digest
It is generated by encrypting it with the approver's private key.
The signature image of a document that has been stamped using a digital watermark technology
A method of embedding in the file separately from the signature of the imprint itself.
And a client, wherein the client is
Means for receiving a file and the received imprint image file.
Extract the signature of the imprint itself from the file and
A hash value generated by decrypting with the public key,
Message message from the received seal imprint image file
Compare the hash value generated by the
Means for displaying the result and the received imprint image file
Extract the signature of the document from the
The hash value generated by decryption and the reception
Message digest from the created imprint image file
Compare the hash value generated by and display the result
Electronic seal stamp system characterized by comprising:
Exist in. The gist of the invention according to claim 2 is that the approval
An elephant document is used instead of the prescribed Web page description language format.
The data is described in XML format.
It exists in the electronic seal stamp system described in. Claim 3
The gist of the invention is that the server and client use HTTP for information
An electronic seal stamp system connected so that information can be sent and received,
The server stores a seal imprint file that stores a seal imprint image file.
File storage process and a predetermined Web page description language format
An approval target document storing step of storing the approval target document, and
From the message image from the imprint image file
Generate a hash value (step) and use it for the approver
Generated by encrypting with a private key (step)
The signature of the seal imprint itself is applied to the imprint image by digital watermark technology.
Embedding in the file (step) and the approval
Hash value by message digest from target document
By generating and encrypting it with the approver's private key
The signature of the generated document is applied to the seal imprint by digital watermark technology.
Embedded in the image file separately from the signature of the imprint itself
And the client imprints the imprint image.
Receiving the image file and the received imprint image.
Extract the signature of the imprint itself and accept it.
Hash generated by decrypting with the public key of the authorizer
Value and the message from the received imprint image file
Compare with the hash value generated by Digest,
A step of displaying the result and the received imprint image
Extract the signature of the document from the file and publish it to the approver
The hash value generated by decrypting with the open key and the previous
Message message from the received imprint image file
The hash value generated by the test
A seal imprint / imprint characterized by having a step of displaying
It exists in the personal identification method. Summary of the invention according to claim 4
Is a predetermined Web page description language
Characterized by being described in XML format instead of format
According to the method of certifying the imprint / imprint of claim 3,
To do. The gist of the invention according to claim 5 is the server side.
Before embedding a seal imprint in an XML document to be approved,
The hash value from the document to be approved in XML format is
The hash value is encrypted by the
Up) to prevent document tampering and denial of document confirmation
Signature of the document in XML format for the purpose of guaranteeing
Embed the sentence in the signature part of the imprint itself in the above (step)
The seal imprint according to claim 4, further comprising:
・ These are the personal identification method of the seal.

[0008]

BEST MODE FOR CARRYING OUT THE INVENTION The feature of each embodiment described below is that a message digest generated from an electronic imprint is
It is to give the imprint itself by digital watermark technology.
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

(First Embodiment) First, a first embodiment will be described with reference to the drawings. FIG. 5 is a system configuration diagram for explaining the electronic seal stamp system 100 according to the first embodiment of the present invention. In FIG. 5, 12 is an imprint image file, 16 is a document to be approved in XML format,
18 is a seal imprint, 20 is a signature part of the seal imprint itself, 22 is a signature sentence of a sentence, 50 is a server, 52 is a seal imprint file storage means,
Reference numeral 54 is an approval target document storage means, 56 is a style definition storage means, 58 is a seal imprint display applet, 60 is a client, 70 is an applet, and 100 is an electronic seal stamp system. Referring to FIG. 5, the electronic seal stamp system 100 according to the present embodiment includes a seal imprint file storage unit 52 that stores the seal imprint image file 12 on the server 50 side, and an XML.
Approval target document storage means 54 for storing the approval target document 16 (XML document) in the format, style definition storage means 56 for storing the style definition data in the XML format, and an applet for executing the seal imprint (seal imprint display applet 5
8), server 50 and HTTP (HyperTex)
The client 60 side that can be connected by t Transfer Protocol) is equipped with a browser that displays an imprint with an applet 70.

Next, the operation of the electronic seal stamp system 100 (personal identification method for seal imprint / seal) will be described. FIG. 1 is a process chart for explaining a message digest creation process that is normally performed, and FIG. 2 is a process chart for explaining a process of embedding a seal imprint 18 in a document. Referring to FIG. 2, first, the sender's side (server 50 side) uses a scanner or the like to create the seal imprint image file 12 of the approver. Subsequently, a tampering prevention hash value (message digest) is generated from the created seal imprint image file 12 (step S12). FIG. 1 shows a message digest creation process which is usually performed. Next, in order to guarantee repudiability for the hash value created in step S12, sign (encrypt) with your own private key.
Is executed (step S13: digital signature processing). Subsequently, in order to prove the identity of the stamp imprint 18 itself, a signature is embedded in the stamp imprint image file 12 by a digital watermark technique (step S14: identity verification processing of the stamp imprint 18 itself).

Next, the process on the receiver side will be described with reference to FIGS. 2 and 8. FIG. 8 is a process diagram for explaining the hash value comparison process. On the other hand, on the receiver side, as shown in FIG. 2, the signature portion 20 of the seal imprint itself is extracted and separated from the seal imprint image file 12 and decrypted with the public key of the approver (step S21). Then, a hash value (message digest) is generated from the seal imprint image file 12 after separating the signature portion 20 of the seal imprint itself in step S21 (step S22). Step S2
The hash value generated in 1 and the hash value generated in step 22 are used to detect document tampering and confirm the imprint of the person at step S23, which will be described later, as shown in FIG. Next, the hash value decrypted in step S21 and the hash value generated in step S22 are compared. If there is a tampering act on the way from the sender side to the recipient side (indicated as “mattering act” in the figure), the two hash values compared in step S23 do not match and the tampering is identified. This will be the case (displayed as "rat detection" in the figure).

FIG. 3 is a process diagram for explaining a process of generating a hash value from the imprint image file 12 and embedding it as the signature portion 20 of the imprint itself. Referring to FIGS. 2 and 3, for example, the imprint 18 on the sender side (server 50 side)
When the signature portion 20 of the seal imprint itself is embedded in the seal imprint, a hash value is generated from the seal imprint image file 12 of the seal imprint 18 (step S12), the hash value is encrypted (step S13: digital signature processing), and the document is prevented from being tampered with. And the signature portion 20 of the imprint itself to ensure the denial of document confirmation.
(Step S14: identity verification processing of the seal imprint 18 itself).

FIG. 4 shows a process of generating a hash value from the seal imprint image file 12 and embedding the hash value as the signature portion 20 of the seal imprint itself, as well as the approval target document 16 (XM) in XML format.
FIG. 6 is a process diagram for explaining a process of embedding a signature text 22 of (L document) in a seal image 18. The process of generating a hash value from the seal imprint image file 12 and embedding it as the signature portion 20 of the seal imprint itself is the same as in FIG. Referring to FIGS. 2 and 4, for example, the sender side (server 50 side) of the approval target document 16 (X
When embedding the signature text 22 of (ML document) in the seal imprint 18, X
A hash value is generated from the hash generation / verification range of the approval target document 16 (XML document) in the ML format (step S1).
2 '), the hash value is encrypted (step S1)
3 ': digital signature processing), to prevent falsification of the document and to guarantee denial of document confirmation, the document to be approved 1 in XML format
The signature sentence 22 of 6 (XML document) is embedded in the seal imprint 18 (step S14 ′: identity verification processing of the seal imprint 18 itself).

Next, the outline of the processing of the applet 70 (see FIG. 5) will be described with reference to FIGS. 4, 6 and 7. Figure 6
FIG. 7 is a process chart for explaining a process for generating a hash value from the seal image file 12 in FIG. 4, and FIG. 7 is a process diagram for explaining a process for extracting the verification range shown in FIG. 4 and generating a hash value. . Referring to FIGS. 4 and 6, on the receiver side (client 60 side), first, the approval target document 16 in the XML format is received from the seal imprint image file 12.
The signature sentence 22 of (XML document) is extracted and separated, and the message digest is decrypted with the public key of the approver to generate a hash value (step S21 ′). In this case,
The applet 70 needs to know where in the imprint image file 12 the signature is stored.
As will be described later, the hash value generated in step S21 ′ and the hash value generated in step 22 ′ are used to detect document tampering and confirm the imprint of the person in step S23 ′ described later.

Subsequently, as shown in FIGS. 4 and 7, a verification range is taken out from the approval target document 16 (XML document) in the XML format to generate a hash value (step S22 ').

Then, the hash value extracted in step S21 'is compared with the hash value extracted in step S22' (step S23 '). As a result, the imprint 1 of the person
It can be confirmed that it is 8 and that the imprint 18 that has been imprinted has not been tampered with.

In the present embodiment, the seal image image display is generally displayed by the <IMG> tag. Below, HTM
L (Hyper Text Markup Langu
The example of age) is shown.

<TABLE><TR><TD> Approval mark </ TD></TR><TR><TD><IMG SRC = "" ./ Images / st
amp / uemu001. gif "BORDER = 0>
</ TD></TR></TABLE>

In this embodiment, the imprint 18 is displayed by the applet 70. When an image of the seal imprint 18 of the approver is displayed on the applet 70 and an event such as a mouse click is generated on the image of the seal imprint 18, information on the seal imprint proof and the seal imprint proof possessed by the seal imprint 18 is displayed. The example is shown below.

<TABLE><TR><TD> Approval mark </ TD></TR><TR><TD><APPLET CODE = "" DispInkan.c
"lass" WIDTH = 40 HEIGHT = 60><PARAM NAME = "image_file_n"
ame "? VALUE ="". / Images / sta
mp / uemu001. gif ”></APPLET></TD></TR><TABLE>

As described above, according to the first embodiment, the following effects can be obtained. The first effect is
That is, it is possible to confirm the personal identification of the seal imprint 18 and the personal identification of the imprint on the browser while using the current imprint 18 that is easy to be familiar with government office work. The second effect is that even if a fraudulent act such as falsification or spoofing is performed on the data flowing through the network, the fact that such a fraudulent act is not performed is the end point of communication by the browser. This can be visually confirmed by the seal imprint 18 above.

(Second Embodiment) Next, a second embodiment will be described. The same parts as those already described in the first embodiment are designated by the same reference numerals, and the duplicated description will be omitted. In the present embodiment, instead of displaying the image of the seal imprint 18 simply read by a scanner in HTML and displaying the electronic seal stamp, the present embodiment is effective for proof of identity of the seal imprint 18 and identity verification of the seal. The feature is that information is superimposed on the image of the seal imprint 18 read by the scanner. Note that the idea of having proof information of the seal stamp itself is not limited to the seal stamp, and can be applied to images such as photographs and voice information (image data and voice data created by myself). As described above, according to the second embodiment, the same effect as the effect described in the first embodiment can be obtained.

It should be noted that the present invention is not limited to the above-described embodiments, and it is obvious that each embodiment can be appropriately modified within the scope of the technical idea of the present invention. Further, the number, positions, shapes, etc. of the above-mentioned constituent members are not limited to those in the above-mentioned embodiment, and the number, positions, shapes, etc. suitable for carrying out the present invention can be adopted. Moreover, in each figure, the same components are denoted by the same reference numerals.

[0024]

Since the present invention is configured as described above, it has the following effects. Firstly, the first effect is that it is possible to confirm the personal identification of the imprint and the personal identification of the imprint on the browser while using the current imprint that is easy to be familiar with government office work. The second effect is that even if a fraudulent act such as falsification or spoofing is performed on the data flowing through the network, the fact that such a fraudulent act is not performed is the end point of communication by the browser. It can be visually confirmed by the imprint above.

[Brief description of drawings]

FIG. 1 is a process diagram for explaining a message digest creation process that is normally performed.

FIG. 2 is a process diagram for explaining a process of embedding a seal image in a document.

FIG. 3 is a process diagram for explaining a process of generating a hash value from a seal imprint image file and embedding it as a signature portion of the seal imprint itself.

FIG. 4 is a process diagram for explaining a process of embedding a seal imprint in an XML document to be approved.

FIG. 5 is a system configuration diagram for explaining the electronic seal stamp system according to the first embodiment of the present invention.

6A to 6C are process diagrams for explaining a process of generating a hash value from the seal image file of FIG.

FIG. 7 is a process diagram for explaining a process of extracting the verification range shown in FIG. 4 and generating a hash value.

FIG. 8 is a process diagram for explaining a hash value comparison process.

[Explanation of symbols]

12 ... Imprint image file 16 ... Document to be approved in XML format 18 ... Imprint 20 ... Signature part of the imprint itself 22 ... Signature text of XML document for approval 50 ... server 52 ... Seal imprint file storage means 54 ... Approval Target Document Storage Means 56 ... Style definition storage means 58 ... Imprint display applet 60 ... Client 70 ... Applet 100 ... Electronic seal stamp system

─────────────────────────────────────────────────── ─── Continuation of the front page (58) Fields surveyed (Int.Cl. ⁷ , DB name) G06F 17/60 140 G09C 1/00 640 H04L 9/32 H04N 1/387

Claims (5)

(57) [Claims] 1. A server and a client use HTTP for information.
An electronic seal stamp system connected so as to be capable of transmitting and receiving, wherein the server stores a seal imprint image file.
And a document to be approved in a predetermined Web page description language format is stored
Approval target document storage means and message digest from the imprint image file
Generate a hash value and encrypt it with the approver's private key
The signature of the imprint itself generated by converting
Means for embedding in the imprint image file by technology
And a message digest from the document to be approved.
Generate a hash value and encrypt it with the approver's private key.
The signature of the document generated by
The signature imprint image file contains a different signature from that of the imprint itself.
And means for embedding the individual, the client includes means for receiving the seal impression image file, from the imprint image file the reception of the print image itself
To extract the signature and decrypt it with the approver's public key
Generated hash value and the received imprint image
A file generated from a file by a message digest
Means for comparing the result with the hash value and displaying the result, and the signature of the document from the received imprint image file.
By extracting and decrypting it with the approver's public key
The generated hash value and the received imprint image file
Hash generated from message by message digest
And the means for displaying the result.
An electronic seal stamp system featuring. 2. The approval target document is a predetermined Web page.
It is described in XML format instead of J description language format
The electronic seal stamp system according to claim 1, wherein: 3. A server and a client use HTTP for information
An electronic seal stamp system connected so that information can be transmitted and received, wherein the server stores a seal impression file file.
And a document to be approved in a predetermined Web page description language format is stored
Approval target document storage process and message digest from the imprint image file
Generate a hash value by (step) and approve it
Generated by encrypting with the private key of the person (step)
The signature of the imprint itself is applied by the digital watermark technology.
The step of embedding in the image file and the message digest from the approval target document.
Generate a hash value and encrypt it with the approver's private key.
The signature of the document generated by
The signature imprint image file contains a different signature from that of the imprint itself.
Embedding into individual pieces, the client receives the seal imprint image file, and the client imprints the seal imprint itself from the received seal imprint image file.
To extract the signature and decrypt it with the approver's public key
Generated hash value and the received imprint image
A file generated from a file by a message digest
Comparing the result with a hash value and displaying the result, and the signature of the document from the received imprint image file.
By extracting and decrypting it with the approver's public key
The generated hash value and the received imprint image file
Hash generated from message by message digest
The process of comparing the measured value with the measured value and displaying the result.
A method of proof of identity of a seal imprint / seal, characterized by 4. The approval target document is a predetermined Web page.
It is described in XML format instead of J description language format
The personal identification of the imprint / seal of claim 3, characterized in that
Ming method. 5. The XML-based authorization pair on the server side.
When embedding a seal imprint in an elephant document, the XML-based authorization pair
Generate a hash value from the elephant document in the above (step),
Hash value encryption is executed in the above (step)
In order to prevent falsification of documents and guarantee denial of document confirmation,
The signature text of the XML-approved document to be approved is described above (step
) Embedding in the signature part of the imprint itself
5. A method of proof of identity of a seal imprint / seal according to claim 4,
Law.