JP4175572B2 - Electronic file management system and electronic file management program - Google Patents

Description

  The present invention relates to a technique for managing an electronic file held in a terminal device such as a personal computer, and more particularly, writing of the electronic file from a terminal device to a portable storage device such as a USB (Universal Serial Bus) memory or the like. The present invention relates to a technique for managing transmission to a terminal device.

  When an electronic file containing important information, billable software, etc. is transmitted from one terminal device to another terminal device or written from one terminal device to a portable storage device such as a USB memory, the contents of the electronic file are , Encrypted and then sent or written. This type of technology is described in, for example, Patent Document 1 below.

  As a result, the contents of an electronic file are eavesdropped or leaked during transmission or storage in a portable storage device, or accessed by unauthorized users (users who do not have access rights to the electronic file) Can be prevented.

  The technology disclosed in Patent Document 1 below relates to an encrypted document including encrypted content, and aims to increase the security level when browsing an encrypted document including encrypted content.

Therefore, in this patent document 1, the document browsing key for decrypting the encrypted content in the encrypted document is stored in the management device, and the user device that desires to browse the encrypted document is encrypted with the private key. The user ID and the document identification key of the encrypted document are transmitted to the management apparatus together with the public key to request transmission of the document browsing key. The management apparatus decrypts the user ID and the document identification key with the public key, and based on the user ID Whether or not to authenticate is determined, and the document browsing key searched based on the document identification key is encrypted and transmitted only to the authenticated user with the public key, and the user device transmits the encrypted document browsing key. It decrypts with the private key, decrypts the content encrypted with the decrypted document browsing key, and allows the content to be browsed.
JP 2003-273860 A

  However, the technique disclosed in Patent Document 1 is not preferable because it is possible for anyone to browse the encrypted document using the user device if the user ID and the document identification key are known. Therefore, it is conceivable to use the user's biometric information (fingerprint, iris, palm print, etc.) in order to identify the user himself / herself. In this case, the user device side obtains the biometric information from the sensor or the sensor. It is necessary to add new software for processing the received information.

  Further, when browsing the encrypted document in a terminal device other than the user device (the terminal device of another user) using the technique disclosed in Patent Document 1, the terminal device includes a browsing software. Such as installing software and inputting a document identification key, it is not convenient.

  Furthermore, when the encrypted document is browsed on the terminal device as described above, there is a possibility that the user ID or the document identification key may remain on the terminal device, and in some cases, information such as a password may remain. This is not preferable in terms of security.

The present invention was devised in view of such problems, and by adopting a one-time password, the existing configuration of the terminal device can be obtained without newly adding a sensor or software related to biological information to the terminal device. In addition to making it possible to identify and authenticate the user himself with high accuracy, it is also possible to use encrypted files while ensuring security on other people's terminal devices, thereby greatly improving convenience. It is aimed.

The present invention that achieves the above object is as follows.
(1) According to the first aspect of the present invention, a plurality of terminal devices that are communicably connected to each other, and a terminal device that is communicably connected to the plurality of terminal devices and is one of the plurality of terminal devices. a management server for managing the electronic file to be transmitted to another terminal device, the management server and are communicably connected, and a portable terminal device carried by a user of said another terminal device, the management server Encryption means for transmitting the electronic file encrypted with a predetermined encryption key as an encrypted file to the other terminal device by the one terminal device, and one for generating a one-time password usable only for a predetermined time A time password generating unit, and the one-time password generated by the one-time password generating unit, the encrypted file as the electronic file Password transmitting means transmitted from the one terminal device and transmitted to the portable terminal device in response to reception or opening at the other terminal device, and the other terminal device transmitted from the one terminal device The one-time password, which is input from the other terminal device by the user when the encrypted file is decrypted, transmitted to the mobile terminal device, the user ID of the user, and user authentication information. Authentication information receiving means received from the other terminal device as authentication information, the one-time password included in the authentication information received by the authentication information receiving means, and the one-time password generated by the one-time password generating means And the use included in the authentication information received by the authentication information receiving means Authentication for determining whether or not the user is a valid user by comparing the ID and the user authentication information with a user ID and user authentication information registered in advance in the management server And a decryption key for decrypting the encrypted file when the user is authenticated by the authentication means and authenticating the user to the other terminal device, and sending the decryption key to the other terminal device. An electronic file management system characterized by further comprising decryption key transmission means for executing decryption of an encrypted file.

  (2) The invention according to claim 2 is that the other terminal device receives or opens the encrypted file transmitted from the one terminal device automatically or with the approval of the user. Receiving notification transmitting means for notifying the management server, and when the user decrypts the encrypted file transmitted from the one terminal device in the other terminal device, the one-time password, the use Input request means for requesting the user to input a user ID and the user authentication information, and the one-time password input from the other terminal device by the user in response to an input request by the input request means , The authentication information transmitting means for transmitting the user ID and the user authentication information to the management server as the authentication information, and transmitted from the management server A decryption key receiving means for receiving the decryption key; and a decryption means for decrypting the encrypted file using the decryption key received by the decryption key receiving means. The electronic file management system according to claim 1.

  (3) The invention according to claim 3 further comprises conversion means for converting the electronic file into a completed document file prior to encryption of the electronic file by the encryption means. An electronic file management system according to claim 2.

(4) In the invention according to claim 4, when the user instructs the one terminal device to transmit the electronic file to the other terminal device, a series of processes by the converting unit and the encrypting unit 4. The electronic file management system according to claim 3, wherein is automatically executed, and the encrypted file is transmitted to the other terminal device.

(5) The invention according to claim 5 is the electronic file management system according to claim 3 or 4, wherein the conversion means is provided in the management server.

  (6) In the invention according to claim 6, the password transmission means obtains the mail address of the portable terminal device of the transmission destination user from the registration information of the management server based on the transmission destination user ID of the encrypted file. 6. The electronic file management system according to claim 1, wherein the one-time password is read and transmitted to the portable terminal device by an electronic mail addressed to the mail address.

(7) The invention according to claim 7 is a plurality of terminal devices connected so as to be communicable with each other, and one terminal device among the plurality of terminal devices connected to be able to communicate with the plurality of terminal devices. a management server for managing the electronic file to be transmitted to the other terminal devices are connected to be capable of communicating with the management server, and equipped with a portable terminal device carried by a user of said another terminal device, An electronic file management program for constructing an electronic file management system, wherein the electronic file encrypted with a predetermined encryption key is transmitted as an encrypted file to the other terminal device by the one terminal device , one-time password generation means for generating a usable one-time password only for a predetermined time, said generated by the one-time password generation means Password transmitting means for transmitting the encrypted password to the portable terminal device in response to reception or opening at the other terminal device after the encrypted file is transmitted as the electronic file from the one terminal device; The one-time password transmitted to the mobile terminal device, which is input from the other terminal device by the user when decrypting the encrypted file transmitted from the one terminal device in the terminal device, and the Authentication information receiving means for receiving user ID and user authentication information of the user as authentication information from the other terminal device, the one-time password included in the authentication information received by the authentication information receiving means, and Compare with the one-time password generated by the one-time password generation means, and By comparing the user ID and the user authentication information included in the authentication information received by the information receiving means with a user ID and user authentication information registered in advance in the management server, the user Authentication means for determining whether or not the user is a valid user, and a decryption key for decrypting the encrypted file when the authentication means authenticates that the user is a valid user Electronic file management, characterized in that the computer as the management server functions as a decryption key transmitting means for transmitting the message to the other terminal device and causing the other terminal device to execute decryption of the encrypted file. It is a program.

(8) The invention according to claim 8 notifies the management server that the encrypted file transmitted from the one terminal device has been received or opened automatically or with the approval of the user. A reception notification transmission means for performing the one-time password, the user ID, and the user authentication information when the user decrypts the encrypted file transmitted from the one terminal device in the other terminal device. Input request means for requesting the user to input, the one-time password input from the other terminal device by the user in response to an input request by the input request means, the user ID, and the user Authentication information transmitting means for transmitting authentication information to the management server as the authentication information; a decryption key for receiving the decryption key transmitted from the management server And a program for causing a computer as the other terminal device to function as a decrypting means for decrypting the encrypted file using the decryption key received by the decryption key receiving means. The electronic file management program according to claim 7.

  (9) In the invention according to claim 9, the password transmission means obtains the mail address of the portable terminal device of the transmission destination user from the registration information of the management server based on the transmission destination user ID of the encrypted file. 9. The computer as the management server is caused to function so as to read and transmit the one-time password to the mobile terminal device by e-mail addressed to the e-mail address. An electronic file management program.

According to the present invention described above, the following effects can be obtained.
(1) According to the electronic file management system of the first aspect, an electronic file transmitted from one terminal device to another terminal device is encrypted with a predetermined encryption key managed by the management server. The one-time password generated by the time password generating means is carried by a user of another terminal device when the encrypted file is transmitted from one terminal device as an electronic file and received or opened by the other terminal device. Transmitted to the mobile terminal device. Then, when decrypting the encrypted file transmitted from one terminal device in another terminal device, the user inputs the one-time password transmitted to the mobile terminal device from the other terminal device. The entered one-time password is transmitted as authentication information to the management server, and the management server compares the authentication information from other terminal devices with the one-time password generated by the one-time password generation means on the management server side. If they match, the user is authenticated as a legitimate user, a decryption key for decrypting the encrypted file is transmitted to the other terminal device, and the encrypted file is decrypted in the other terminal device. Is done. By adopting a one-time password in this way, the user himself / herself (owns the portable terminal device by using the existing configuration of the terminal device without adding a sensor or software related to biometric information to the terminal device. The user can identify and authenticate the electronic file (encrypted file) sent to the other person only when the mobile terminal device and the terminal device are located at almost the same location. This terminal device can be used while ensuring security, and the convenience is greatly improved. Further, at the timing of receiving the encrypted file sent from a terminal device in another terminal unit, for one-time password is sent to the mobile terminal device to be carried by a user of another terminal device, the network even if the delay in such as the reception of the encrypted file on another terminal device is delayed, it becomes one-time password arrives at the right time, expired one-time password by the one is delayed Can prevent the situation. Therefore, if it is a legitimate user, it becomes possible to reliably decrypt the encrypted file. Also, since one-time passwords are disposable and can only be used once, even if a malicious third party uses a password left on another terminal device or steals a password with a keylogger, It cannot be used again, and security can be greatly improved.

  (2) According to the invention of the electronic file management system as set forth in claim 2, when the transmission of the electronic file to the other terminal device is instructed by the user in the one terminal device, the conversion means and the encryption means By configuring so that a series of processing is automatically executed and the encrypted file is transmitted to another terminal device, the user is completely unaware of the two operations of the conversion operation and the encryption operation. The conversion process and the encryption process are executed and the encrypted file is transmitted to another terminal device by performing the transmission instruction operation once, and the convenience is greatly improved.

In addition, the management server side has a reception notification transmission function for notifying the management server that another terminal device has received or opened the encrypted file transmitted from one terminal device. The one-time password can be transmitted to the portable terminal device when the encrypted file is received or opened by another terminal device.

In addition, the reception of the encrypted file transmitted from one terminal device is notified to the management server from another terminal device automatically or with the approval of the user that the other terminal device has received or opened the encrypted file. With the notification transmission function, the management server can transmit the one-time password to the mobile terminal device in accordance with the timing at which the encrypted file is actually received or opened by another terminal device. . In other words, that it requires approval for the transmission of acknowledgment (manual), but was received and opened, actually trying to decrypt the encrypted files by entering a one-time password to another opportunity after the use who when are thinking, actually will be able to request a one-time password at the timing that you want to decrypt the encrypted file, it is no longer one-time password is wasted.

  (3) The invention of the electronic file management system according to claim 3 further comprises conversion means for converting the electronic file into a completed document file prior to encryption of the electronic file by the encryption means, and a completed document that is difficult to falsify. Since it is converted into a file and further encrypted, safety against information leakage and the like is further improved.

  (4) In the invention of the electronic file management system according to claim 4, when the user instructs transmission of the electronic file to another terminal device in one terminal device, a series of processing by the conversion means and the encryption means Is automatically executed, and the encrypted file is sent to another terminal device. Therefore, a series of processing by conversion and encryption is automatically executed, and the user performs conversion operation and encryption operation. Therefore, it is only necessary to perform the instruction operation once without being conscious of the two operations, and the convenience is greatly improved.

  (5) In the invention of the electronic file management system according to claim 5, at least one of the conversion means and the encryption means is provided in the management server, and at least one of conversion or encryption is executed on the management server side. Since it is configured, conversion or encryption processing can be performed even if no software is installed on one terminal device side. Also, if the software for conversion or encryption is changed due to version upgrades, etc., only the software on the management server side needs to be updated / changed, and updates or distribution of new software for each terminal device There is no need to perform the maintenance, and the system maintenance can be performed very efficiently.

(6) In the invention of the electronic file management system according to claim 6, the password transmission means existing on the management server side is the mail address of the portable terminal device of the transmission destination user based on the transmission destination user ID of the encrypted file. Is transmitted from the registration information of the management server, and the one-time password is transmitted to the portable terminal device by e-mail addressed to the mail address. Even if is not installed, password transmission processing can be performed. In addition, or distribute it suffices to update or alter only the software of the management server side if the software for the one-time password transmission has been changed by the version-up, etc., the new software or perform the update for each terminal device There is no need to perform the maintenance, and the system maintenance can be performed very efficiently.

(7) According to the electronic file management program of the seventh aspect, an electronic file transmitted from one terminal device to another terminal device is encrypted with a predetermined encryption key managed by the management server. The one-time password generated by the time password generating means is carried by a user of another terminal device when the encrypted file is transmitted from one terminal device as an electronic file and received or opened by the other terminal device. Transmitted to the mobile terminal device. Then, when decrypting the encrypted file transmitted from one terminal device in another terminal device, the user inputs the one-time password transmitted to the mobile terminal device from the other terminal device. The entered one-time password is transmitted as authentication information to the management server, and the management server compares the authentication information from other terminal devices with the one-time password generated by the one-time password generation means on the management server side. If they match, the user is authenticated as a legitimate user, a decryption key for decrypting the encrypted file is transmitted to the other terminal device, and the encrypted file is decrypted in the other terminal device. Is done. By adopting a one-time password in this way, the user himself / herself (owns the portable terminal device by using the existing configuration of the terminal device without adding a sensor or software related to biometric information to the terminal device. The user can identify and authenticate the electronic file (encrypted file) sent to the other person only when the mobile terminal device and the terminal device are located at almost the same location. This terminal device can be used while ensuring security, and the convenience is greatly improved. Further, at the timing of receiving the encrypted file sent from a terminal device in another terminal unit, for one-time password is sent to the mobile terminal device to be carried by a user of another terminal device, the network even if the delay in such as the reception of the encrypted file on another terminal device is delayed, it becomes one-time password arrives at the right time, expired one-time password by the one is delayed Can prevent the situation. Therefore, if it is a legitimate user, it becomes possible to reliably decrypt the encrypted file. Also, since one-time passwords are disposable and can only be used once, even if a malicious third party uses a password left on another terminal device or steals a password with a keylogger, It cannot be used again, and security can be greatly improved.

  (8) According to the invention of the electronic file management program described in claim 8, when the transmission of the electronic file to the other terminal device is instructed by the user in the one terminal device, the conversion means and the encryption means By configuring so that a series of processing is automatically executed and the encrypted file is transmitted to another terminal device, the user is completely unaware of the two operations of the conversion operation and the encryption operation. The conversion process and the encryption process are executed and the encrypted file is transmitted to another terminal device by performing the transmission instruction operation once, and the convenience is greatly improved.

  In addition, the management server side has a reception notification transmission function for notifying the management server that another terminal device has received or opened the encrypted file transmitted from one terminal device. The one-time password can be transmitted to the portable terminal device when the encrypted file is received or opened by another terminal device.

In addition, the reception of the encrypted file transmitted from one terminal device is notified to the management server from another terminal device automatically or with the approval of the user that the other terminal device has received or opened the encrypted file. With the notification transmission function, the management server can transmit the one-time password to the mobile terminal device in accordance with the timing at which the encrypted file is actually received or opened by another terminal device. . In other words, that it requires approval for the transmission of acknowledgment (manual), but was received and opened, actually trying to decrypt the encrypted files by entering a one-time password to another opportunity after the use who when are thinking, actually will be able to request a one-time password at the timing that you want to decrypt the encrypted file, it is no longer one-time password is wasted.

(9) In the invention of the electronic file management program according to claim 9, the password transmission means existing on the management server side is the mail address of the mobile terminal device of the transmission destination user based on the transmission destination user ID of the encrypted file. Is transmitted from the registration information of the management server, and the one-time password is transmitted to the portable terminal device by e-mail addressed to the mail address. Even if is not installed, password transmission processing can be performed. In addition, or distribute it suffices to update or alter only the software of the management server side if the software for the one-time password transmission has been changed by the version-up, etc., the new software or perform the update for each terminal device There is no need to perform the maintenance, and the system maintenance can be performed very efficiently.

Embodiments of the present invention will be described below with reference to the drawings.
[1] Description of First Embodiment FIG. 1 is a block diagram showing the configuration of an electronic file management system as a first embodiment of the present invention. As shown in FIG. 1, the electronic file management system of the first embodiment is shown. 1A includes a plurality of terminal devices 10 and a management server 20A and portable storage devices 30a and 30b. At least each terminal device 10, portable storage device 30a, and management server 20A are connected to a network 50. Are connected so as to be able to communicate with each other. Here, the network 50 includes not only an in-house LAN (Local Area Network) but also the Internet, a public network, and the like.

  The terminal device 10 is a personal computer or the like used by a user. In FIG. 1, the terminal device 10 is written in one terminal device 10a that writes an electronic file in the portable storage devices 30a and 30b and the portable storage devices 30a and 30b. Two other terminal devices 10b for reading out the electronic file (encrypted file) are shown. These portable storage devices 30a and 30b are carried by the user, and are specifically USB (Universal Serial Bus) memories or the like, and are connected to USB terminals (not shown) of the terminal devices 10 (10a and 10b). ) Is attached and connected. In the electronic file management system 1A of the first embodiment, two types of portable storage devices 30a and 30b as described later are used.

  In the terminal device 10a, in a state where the portable storage device 30a or 30b is mounted and connected to the USB terminal, a desired electronic file to be written is designated by the user, and the designated electronic file is carried from the terminal device 10a. When an instruction (one-click operation) to write to the type storage device 30a / 30b is performed, the terminal device is used to convert the electronic file into an encrypted file in the management server 20A (the conversion unit 22 and the encryption unit 23 described later). 10a instructs the management server 20A to perform the electronic file and a series of processes (a PDF conversion process and an encryption process described later) by the conversion unit 22 and the encryption unit 23 described later on the electronic file. Send processing request. The function of transmitting an electronic file and a processing request to the management server 20A as described above in response to a write instruction is that a predetermined program installed in advance in the terminal device 10a is a CPU (Central Processing Unit; not shown) constituting the terminal device 10a. It is realized by executing with.

  The encrypted file converted by the management server 20A is transmitted from the management server 20A to the terminal device 10a by the encrypted file transmission means 24 described later, and when the encrypted file is received by the terminal device 10a, it is carried from the terminal device 10a. It is written in the type storage device 30a / 30b. The function of receiving the encrypted file by the terminal device 10a as described above is also realized by executing the predetermined program by the CPU. In this way, the user can write the designated electronic file as an encrypted file in the portable storage device 30a / 30b without giving the user's awareness only by giving the above write instruction.

Note that the conversion means 22 and the encryption means 23 described later may be provided not in the management server 20A but in the terminal device 10a. In this case, the function of transmitting the electronic file and the processing request to the management server 20A as described above is provided. There is no need to provide the terminal device 10a, and the terminal device 10a may be configured to execute a series of processes by the conversion unit 22 and the encryption unit 23 in response to a write instruction. In this case, instead of the predetermined program, a program for realizing the conversion means 22 and the encryption means 23 is installed in the terminal device 10a in advance, and the conversion means 22 and the program are executed by the CPU. The function as the encryption unit 23 is realized in the terminal device 10a.

  The management server 20A manages an electronic file written to one of the storage units 31 of the portable storage devices 30a and 30b from one terminal device 10a among the plurality of terminal devices 10 as described above. Electronic file receiving means 21, conversion means 22, encryption means 23, encrypted file transmission means 24, one-time password generation means 25, password transmission means 26, authentication information reception means 27, authentication means 28, and decryption key transmission means 29 It is composed. The functions as these means 21 to 29 are realized by executing a predetermined program (electronic file management program) previously installed in the management server 20A by a CPU (not shown) constituting the management server 20A.

The electronic file receiving means 21 receives the electronic file to be written and the processing request from the terminal device 10a as described above.
The converting means 22 converts the electronic file received by the electronic file receiving means 21 into a completed document file [here, a PDF (Portable Document Format) file that is difficult to tamper with]. The PDF conversion process by the changing means 22 is executed by starting the PDF driver included in the electronic file management program in the management server 20A. The PDF conversion process converts the electronic file into a PDF and generates a PDF file. It has become so.

  The encrypting means 23 encrypts the PDF file obtained by the converting means 22 with a predetermined encryption key managed by the management server 20A, and creates an encrypted file. At this time, in addition to the encryption operation, the user who accesses the encrypted file has access authority to the encrypted file (for example, in addition to viewing, annotation, printing, copying, the file stored in the PDF file). The right to execute the one selected from the access such as fetching, editing of the fetched file, and attachment is set. In the present embodiment, the setting is automatically performed without the intention of the sender who is the user of the terminal device 10a. Here, for example, only the necessary minimum access authority (for example, viewing authority) is set.

  The encrypted file transmitting unit 24 transmits the encrypted file created by the encrypting unit 23 to the terminal device 10a. The encrypted file transmitted by the encrypted file transmitting unit 24 is the terminal device as described above. Received at 10a and written to portable storage device 30a / 30b.

  At this time, in the first embodiment, the terminal device 10a sends the management server 20A the user identification information (hereinafter referred to as the user ID) for identifying the user of the terminal device 10a (the user of the service of the system 1A). And device identification information (hereinafter referred to as device ID) for specifying the portable storage device 30a / 30b in which the encrypted file is written are transmitted together with the electronic file to be written and the processing request, and the electronic file is received. Received by means 21. Then, in the storage unit [RAM (Random Access Memory), hard disk, etc .; not shown] of the management server 20A, at least the user ID, the device ID, and the encrypted file (electronic file) to be written are specified. File identification information (hereinafter referred to as file ID) is stored in association with user authentication information (such as normal password and biometric information) that is set and registered in advance in the management server 20A by the user.

The one-time password generating means 25 generates a one-time password (disposable password) that can be used only once. For example, the one-time password generator 25 uses a pseudo-random number generator to generate a predetermined one every predetermined time (for example, 1 to several minutes). A password with a number of digits (for example, 8 digits) may be generated and output, or when a one-time password generation / transmission request is received from outside, a pseudo-random number generator is used to generate a password with a predetermined number of digits (for example, 8 digits). A password may be generated and output.

  As will be described later, the one-time password generation unit 25 generates a one-time password synchronized with the password generation unit 35 of the portable storage device 30b, and a plurality of one-time password generation units 25 are provided in the management server 20A. If provided, the device ID of the portable storage device 30b can be specified in the storage unit of the management server 20A so that it can be specified which one-time password generation means 25 is compatible (synchronized) with the portable storage device 30b. And identification information for specifying the one-time password generation means 25 for generating a one-time password synchronized with the portable storage device 30b is stored in association with each other.

  The password transmission unit 26 transmits the one-time password generated by the one-time password generation unit 25 to the portable storage device 30a. At this time, the one-time password generation unit 25 performs a predetermined time (as described above). For example, every time a new password is generated, the password may be transmitted. Management from the portable storage device 30a is triggered by the fact that the portable storage device 30a is attached to the terminal device 10b, or that the encrypted file of the portable storage device 30a is designated as a read target in the terminal device 10b. The portable storage device 30a is configured to transmit a one-time password generation / transmission request to the server 20A, and the one-time password generated by the one-time password generation means 25 when the generation / transmission request is received. The password transmission unit 26 may transmit the password. At this time, when a plurality of one-time password generation means 25 are provided in the management server 20A, the management server can identify which one-time password of the one-time password generation means 25 is transmitted to the portable storage device 30a. In the storage unit 20A, the device ID of the portable storage device 30a is associated with the identification information for specifying the one-time password generation means 25 that has generated the one-time password transmitted to the portable storage device 30a. Saved.

  The authentication information receiving unit 27 reads the encrypted file from the portable storage device 30a / 30b (a storage unit 31 described later) in the other terminal device 10b different from the terminal device 10a and decrypts it (the user When the encrypted file of the portable storage device 30a / 30b is designated as a read target), the portable information input from the terminal device 10b by the user referring to the display unit 32 (described later) of the portable storage device 30a / 30b The authentication information including the one-time password displayed on the display unit 32 (described later) of the type storage device 30a / 30b is received from the terminal device 10b. In addition to the one-time password, this authentication information includes a user ID and user authentication information input by the user from the terminal device 10b as described later.

Based on the authentication information received by the authentication information receiving means 27, the various information stored in the storage unit, and the one-time password generated by the one-time password generating means 25, the authentication means 28 uses the terminal device 10b. An authentication determination is made as to whether or not the user who is trying to read the encrypted file is a valid user. At that time, the device ID and the user authentication information corresponding to the user ID included in the authentication information are read from the storage unit, and the identification information corresponding to the device ID (identifying the one-time password generating means 25) Is read from the storage unit. Then, the authentication unit 28 compares the user authentication information included in the authentication information received by the authentication information receiving unit 27 with the user authentication information read from the storage unit, and the authentication information receiving unit 27. When the one-time password included in the authentication information received by the management server 20A is compared with the one-time password generated by the device ID corresponding one-time password generation means 25 of the management server 20A when the authentication information is received, Authenticate that the user is a legitimate user.

  The decryption key transmission unit 29 transmits a decryption key for decrypting the encrypted file to the terminal device 10b when the authentication unit 28 authenticates that the user is a valid user, and the terminal device 10b (described later). The decryption means 14) is made to decrypt the encrypted file. However, if at least one of the comparison result of the user authentication information and the comparison result of the one-time password does not match in the authentication unit 28, it is determined that the user is not a valid user, and the decryption key The transmission means 29 is configured to notify the terminal device 10b of an error instead of transmitting the decryption key.

The portable storage device 30a includes a storage unit 31, a display unit 32, a display control unit 33, and a password reception unit 34.
The storage unit 31 stores the encrypted file written from the terminal device 10a as described above, and also serves as an input request unit 11, an authentication information transmission unit 12, a decryption key reception unit 13, and a decryption unit 14 to be described later. This program is automatically stored when the user specifies an encrypted file to be read while the portable storage device 30a is connected to the USB terminal in the terminal device 10b. The data is read out to the terminal device 10b (RAM) and automatically activated / executed.

  The password receiving unit 34 receives the one-time password transmitted from the management server 20A (password transmission unit 26) as described above, and the display unit 32 is configured by a liquid crystal panel, for example, and is displayed by the display control unit 33. The state is controlled, and the one-time password received by the password receiving means 34 is displayed. That is, the one-time password is displayed on the display unit 32 in synchronization with the one-time password generation means 25 of the management server 20A.

The portable storage device 30b includes a storage unit 31, a display unit 32, a display control unit 33, and a one-time password generation unit 35.
The storage unit 31, the display unit 32, and the display control unit 33 are the same as the storage unit 31, the display unit 32, and the display control unit 33 in the above-described portable storage device 30a, but in this portable storage device 30b. The display unit 32 controls the display state by the display control means 33 and displays the one-time password generated by the one-time password generation means 35 described later.

  The one-time password generation unit 35 generates a one-time password synchronized with the one-time password generation unit 25 of the management server 20A, and is configured by a pseudo random number generator, for example, as with the one-time password generation unit 25. . When configured by a pseudo random number generator, the one-time password generation means 35 and the one-time password generation means 25 are configured to generate and output the same one-time password using the same encryption key and synchronized clock. In order to synchronize the operations of the one-time password generation unit 35 and the one-time password generation unit 25, a function of exchanging some synchronization information between the management server 20A and the portable storage device 30b may be provided. Thereby, also on the display part 32 of the portable storage device 30b, the one-time password is displayed in synchronization with the one-time password generating means 25 of the management server 20A.

In the electronic file management system 1A of the first embodiment, the user uses at least one of the portable storage devices 30a and 30b as described above, and uses the desired electronic file as an encrypted file from the terminal device 10a to the terminal device 10b. It can be transported. In addition, the system 1A is configured to be able to use both of the two types of portable storage devices 30a and 30b. However, only one of the two types of portable storage devices 30a and 30b can be used. It may be configured. The functions of the display control means 33, the password receiving means 34, and the one-time password generation means 35 in the portable storage devices 30a and 30b are programmed by a CPU (not shown) included in the portable storage devices 30a and 30b. It is realized by executing.

  Further, in the electronic file management system 1A of the first embodiment, the terminal device 10b is assumed as a terminal device that reads the encrypted file written by the terminal device 10a from the portable storage devices 30a / 30b (storage unit 31). Therefore, in this terminal device 10b, as described above, the CPU constituting the terminal device 10b executes the program read from the portable storage device 30a / 30b (storage unit 31), so that the input request means 11 , Authentication information transmission means 12, decryption key reception means 13 and decryption means 14.

  The input request means 11 is used when the user reads out and decrypts the encrypted file from the storage unit 31 of the portable storage device 30a / 30b in the terminal device 10b (the user encrypts the encrypted file in the portable storage device 30a / 30b). The user is requested to input the above-described user ID and user authentication information, and the one-time displayed on the display unit 32 of the portable storage device 30a / 30b. It prompts for a password. The input request is made, for example, by displaying a pop-up screen or the like on the display of the terminal device 10b.

  The authentication information transmitting unit 12 transmits the user ID, the user authentication information, and the one-time password input from the terminal device 10b by the user in response to the input request from the input request unit 11 to the management server 20A as authentication information. is there. Note that the user ID and the one-time password are input by the user operating the keyboard, and the user authentication information is also input by the user operating the keyboard if it is a normal password.

  The decryption key receiving unit 13 receives the decryption key transmitted from the management server 20A (decryption key transmission unit 29) when the management server 20A (authentication unit 28) authenticates that the user is a valid user. Is. However, when it is determined that the user is not a valid user, the decryption key receiving unit 13 receives an error notification from the management server 20A (decryption key transmitting unit 29). The decrypting unit 14 decrypts the encrypted file using the decryption key received by the decryption key receiving unit 13.

  Next, the operation of the electronic file management system 1A according to the first embodiment configured as described above will be described with reference to FIGS. 2 to 4 are flowcharts for explaining the operation of the electronic file management system 1A of the first embodiment.

  First, according to the flowchart shown in FIG. 2 (steps S11 to S15 and S21 to S24), the electronic file write operation to the portable storage device 30a / 30b in the electronic file management system 1A (terminal device 10a) of the first embodiment. Will be described.

  When writing an electronic file in the portable storage device 30a or 30b in the terminal device 10a, the user attaches / connects the portable storage device 30a / 30b to the USB terminal and designates the electronic file to be written (step S11). Then, an instruction to write the electronic file from the terminal device 10a to the portable storage device 30a / 30b is made by a one-click operation with a mouse or the like (step S12). In response to this instruction, the terminal device 10a transmits the electronic file to the management server 20A along with the processing request described above via the network 50 (step S13).

In the management server 20A, when the electronic file receiving means 21 receives the electronic file to be written and the processing request from the terminal device 10a (step S21), the electronic file is converted into a PDF file by the converting means 22 ( In step S22), the PDF file is further encrypted with a predetermined encryption key by the encryption means 23 to create an encrypted file (step S23). Thus, in the present embodiment, a series of processing (PDF conversion processing and encryption processing) for the electronic file to be written is performed on the management server 20A side in response to a write instruction (one-click operation) on the terminal device 10a. Done automatically.

  At this time, as described above, from the terminal device 10a to the management server 20A, the user ID for identifying the user of the terminal device 10a (the user of the service of the system 1A) and the portable file in which the encrypted file is written. The device ID for specifying the type storage device 30a / 30b is transmitted together with the electronic file to be written and the processing request, and the user ID, device ID, file ID and usage are stored in the storage unit of the management server 20A. Is stored in association with the user authentication information.

  The encrypted file created by the encryption unit 23 is transmitted to the terminal device 10a via the network 50 by the encrypted file transmission unit 24 (step S24), and the encrypted file from the management server 20A is stored in the terminal device 10a. When received (step S14), the encrypted file is written from the terminal device 10a to the storage unit 31 of the portable storage device 30a / 30b (step S15). In this way, the user can write the designated electronic file as an encrypted file in the portable storage device 30a / 30b without giving the user's awareness only by giving a write instruction.

  Then, according to the flowchart shown in FIG. 3 (steps S31 to S38, S41 to S43, and S51 to S55), the encrypted file from the portable storage device 30a in the electronic file management system 1A (terminal device 10b) of the first embodiment. The read operation will be described.

  When the terminal device 10b reads the encrypted file written in the portable storage device 30a (storage unit 31) from the portable storage device 30a (storage unit 31) in the terminal device 10b, the user 30a is attached and connected to the USB terminal (steps S31 and S41), an encrypted file to be read is specified, and reading of the encrypted file is instructed (step S32).

  When such a read instruction is issued, in the terminal device 10b, a program for causing the terminal device 10b to function as the input request unit 11, the authentication information transmission unit 12, the decryption key reception unit 13, and the decryption unit 14 is stored in the portable storage device. It is read from the storage unit 31 of 30a and executed (step S33). In response to this, first, in the terminal device 10b, a pop-up screen or the like is displayed on the display by the input requesting means 11, and the user is requested to input a user ID and user authentication information, and the portable device The input of the one-time password displayed on the display unit 32 of the type storage device 30a is requested (step S34).

  On the other hand, in the management server 20A, a one-time password is generated by the one-time password generator 25 (step S51), and the password is transmitted to the portable storage device 30a via the network 50 by the password transmitter 26. (Step S52). The password transmitted to the portable storage device 30a is received by the password receiving unit 34 (step S42) and displayed on the display unit 32 by the display control unit 33 (step S43).

The user refers to the one-time password displayed on the display unit 32 of the portable storage device 30a and inputs the one-time password to the terminal device 10b by operating the keyboard. User authentication information (here, a normal password) is input to the terminal device 10b by operating the keyboard (step S35). Then, the inputted one-time password, user ID, and user authentication information are transmitted as authentication information to the management server 20A as authentication information via the network 50 by the authentication information transmitting means 12 (step S36).

  In the management server 20A, when the authentication information receiving unit 27 receives the authentication information from the terminal device 10b (step S53), the authentication unit 28 receives the authentication information received by the authentication information receiving unit 27 and the storage unit. The user who is trying to read the encrypted file by the terminal device 10b based on the various information stored in the password and the one-time password generated by the one-time password generation means 25 is as follows. An authentication determination is made as to whether or not (step S54).

  That is, the device ID and the user authentication information corresponding to the user ID included in the authentication information are read from the storage unit in the management server 20A, and the identification information corresponding to the device ID (one-time password generating means 25 is stored). Specified) is read from the storage unit. Then, the authentication unit 28 compares the user authentication information (password) included in the authentication information received by the authentication information receiving unit 27 with the user authentication information read from the storage unit, and also performs authentication. The one-time password included in the authentication information received by the information receiving unit 27 is compared with the one-time password generated by the device ID corresponding one-time password generating unit 25 of the management server 20A when the authentication information is received. If they match, it is authenticated that the user is a valid user. If at least one of the comparison result of the user authentication information and the comparison result of the one-time password does not match, it is determined that the user is not a valid user.

  When the authentication unit 28 authenticates that the user is a valid user (OK), the decryption key transmitting unit 29 obtains a decryption key for decrypting the encrypted file via the network 50. On the other hand, when the authentication means 28 determines that the user is not a valid user (NG), the decryption key transmission means 29 transmits the decryption key via the network 50. Instead, an error notification is made to the terminal device 10b (step S55).

  In the terminal device 10b, when the decryption key receiving unit 13 receives the decryption key from the management server 20A (step S37), the decryption unit 14 decrypts the encrypted file into the original electronic file using the decryption key ( In step S38), the electronic file is in a state where it can be browsed and accessed on the terminal device 10b. On the other hand, in the terminal device 10b, when an error notification is received from the management server 20A by the decryption key receiving means 13 (step S37), the error notification is popped up on, for example, a display (step S38).

  According to the flowchart shown in FIG. 4 (steps S31 ′, S32 to S38, S41 ′, S42 ′, S43 and S51 to S55), the portable storage device 30b in the electronic file management system 1A (terminal device 10b) of the first embodiment. The operation of reading the encrypted file from the will be described.

The portable storage device 30b does not receive a one-time password from the management server 20A as in the portable storage device 30a, but, as described above, a one-time password synchronized with the one-time password generation means 25 on the management server 20A side. Only the point which is generated by the one-time password generation means 35 is different from the portable storage device 30a. Therefore, basically, the read operation of the encrypted file from the portable storage device 30b is also executed in the same manner as in the example shown in FIG. 3, as shown in FIG. However, in the operation shown in FIG. 4, the process of step S52 shown in FIG. 3 is omitted, and the processes of steps S31 ′, S41 ′, and S42 ′ are performed instead of the processes of steps S31, S41, and S42 shown in FIG. Executed.

  When the terminal device 10b reads the encrypted file written in the portable storage device 30b (storage unit 31) from the portable storage device 30b (storage unit 31) in the terminal device 10b, the user 30b is attached and connected to the USB terminal (steps S31 'and S41'), the encrypted file to be read is designated, and reading of the encrypted file is instructed (step S32).

  When such a read instruction is issued, in the terminal device 10b, a program for causing the terminal device 10b to function as the input request unit 11, the authentication information transmission unit 12, the decryption key reception unit 13, and the decryption unit 14 is stored in the portable storage device. It is read from the storage unit 31 of 30a and executed (step S33). In response to this, first, in the terminal device 10b, a pop-up screen or the like is displayed on the display by the input requesting means 11, and the user is requested to input a user ID and user authentication information, and the portable device The input of the one-time password displayed on the display unit 32 of the type storage device 30a is requested (step S34).

  On the other hand, in the management server 20A, a one-time password is generated by the one-time password generation unit 25 (step S51), but the same one-time password is generated by the one-time password generation unit 35 of the portable storage device 30b. The password is generated (step S42 '), and the password is displayed on the display unit 32 by the display control means 33 (step S43). Note that the one-time password generated by the one-time password generation means 25 of the management server 20A is used for the authentication process in step S54.

  The user refers to the one-time password displayed on the display unit 32 of the portable storage device 30b and inputs the one-time password to the terminal device 10b by operating the keyboard. User authentication information (here, a normal password) is input to the terminal device 10b by operating the keyboard (step S35). The subsequent steps S36 to S38 and S53 to S55 are the same as those shown in FIG.

  Thus, according to the electronic file management system 1A as the first embodiment of the present invention, by adopting the one-time password in addition to the normal user authentication, the terminal device 10 (10a, 10b) is provided with the biological information. High accuracy of the user himself (person who owns the portable storage devices 30a and 30b) using the existing configuration of the terminal device 10 (10a and 10b) without newly adding such sensors and software In addition, the user can use the electronic file (encrypted file) written in the portable storage devices 30a and 30b while ensuring security in the terminal device 10b of another person. Is greatly improved.

  In addition, since the one-time password is disposable and can be used only once, even if a malicious third party uses the password left in the terminal device 10b or steals the password with a keylogger or the like, it will never be used again. It cannot be used, and security can be greatly improved. In the present embodiment, since the one-time password is matched within a predetermined time (for example, 1 minute to several minutes) after the new one-time password is generated by the generation means 25 and 35, the encrypted file Decryption is possible, but if the predetermined time is exceeded, decryption of the encrypted file becomes impossible.

At this time, a program for causing the terminal device 10b to function as the input request unit 11, the authentication information transmission unit 12, the decryption key reception unit 13, and the decryption unit 14 is stored in the portable storage device 30a.
, 30b (storage unit 31), when the user reads the encrypted file from the portable storage devices 30a, 30b (storage unit 31) and decrypts them in the other terminal device 10b, the terminal The terminal device 10b executes the program of the portable storage devices 30a and 30b (storage unit 31) without installing a special program on the device 10b side, whereby the input request unit 11, the authentication information transmission unit 12, and the decryption key It will function as the receiving means 13 and the decrypting means 14, and the one-time password authentication can be realized using the existing configuration without newly adding software to the terminal device 10b.

  In the portable storage device 30a, the one-time password generated by the one-time password generation means 25 in the management server 20A is received from the management server 20A and displayed on the display unit 31, while in the portable storage device 30b, The one-time password synchronized with the one-time password generation unit 25 of the management server 20A is generated by the one-time password generation unit 35 and displayed on the display unit 31. In either case, the terminal device 10 (10a, 10b) On the side, the electronic file management system 1A can be constructed without newly adding software related to the one-time password.

  Further, in the terminal device 10a, when the user instructs to write the electronic file to the portable storage devices 30a and 30b by a one-click operation, a series of processes by the conversion means 22 and the encryption means 23 on the management server 20A side. Is automatically executed and the encrypted file is written in the portable storage devices 30a and 30b (storage unit 31). Therefore, the user can perform two operations of the conversion operation and the encryption operation. The conversion process and the encryption process are executed and the encrypted file is written in the portable storage devices 30a and 30b (storage unit 31) by performing the write instruction operation once without being conscious of it. improves.

  At this time, the conversion means 22 and the encryption means 23 are provided in the management server 20A, and both the conversion process and the encryption process are executed on the management server 20A side. Therefore, the conversion means 22 and the encryption means on the terminal device 10a side. If the software for the conversion means 22 and the encryption means 23 is changed due to version upgrade or the like, the conversion process and the encryption process can be performed even if the software for the conversion means 22 is not installed. Only the software on the management server 20A side needs to be updated / changed. There is no need to update or distribute new software for each terminal device 10, and there is an advantage that the maintenance of the system 1A can be performed very efficiently. .

[2] Description of Second Embodiment FIG. 5 is a block diagram showing the configuration of an electronic file management system 1B as a second embodiment of the present invention. As shown in FIG. 5, the electronic file management of the second embodiment is shown. The system 1B is configured to include a management server 20B and a mobile terminal device 40 in addition to a plurality of terminal devices 10, and the terminal device 10, the mobile terminal device 40, and the management server 20B can communicate with each other via the network 50. The terminal devices 10 (10a, 10b) are connected to each other via the network 50 so that they can communicate with each other. That is, as a component in the electronic file management system 1B of the second embodiment, a portable terminal device 40 is provided instead of the portable storage devices 30a and 30b of the first embodiment, and the management server 20A of the first embodiment. Instead, a management server 20B is provided. In FIG. 5, the same reference numerals as those already described in FIG. 1 denote the same or substantially the same parts.

The management server 20B in the second embodiment manages an electronic file transmitted from one terminal device 10a among the plurality of terminal devices 10 to the other terminal device 10b. Is carried by a user who accesses an encrypted file (to be described later) received by the terminal device 10b of, for example, a mobile phone, a PDA (Personal Digital
Assistant).

  When an electronic file is transmitted from the terminal device 10a to the terminal device 10b (for example, when an electronic file is attached to an e-mail and transmitted), a desired electronic file to be transmitted (attached object) is specified by the user and specified. When an instruction (one-click operation) for transmitting (attaching) the electronic file is made, the terminal device is used to convert the electronic file into an encrypted file in the management server 20B (the conversion unit 22 and the encryption unit 23). 10a sends to the management server 20B the electronic file and a processing request for instructing the electronic file to undergo a series of processing (PDF conversion processing and encryption processing) by the conversion unit 22 and the encryption unit 23. Send. The function of transmitting an electronic file and a processing request to the management server 20B as described above in response to a write instruction is similar to the first embodiment in that a predetermined program installed in advance in the terminal device 10a is transferred to a CPU ( This is realized by executing in a not-shown manner.

  As in the first embodiment, the encrypted file converted by the management server 20B is transmitted from the management server 20B to the terminal device 10a by the encrypted file transmission unit 24, and the encrypted file is received by the terminal device 10a. The terminal device 10a transmits to the terminal device 10b (actually, it is transmitted as an attachment to an e-mail). The function of receiving the encrypted file by the terminal device 10a as described above is also realized by executing the predetermined program by the CPU. In this way, the user can transmit the designated electronic file as an encrypted file to the terminal device 10b without giving any consideration to the user simply by giving the transmission instruction.

  The conversion unit 22 and the encryption unit 23 may be provided in the terminal device 10a instead of the management server 20B. In this case, the terminal device has a function of transmitting an electronic file and a processing request to the management server 20B as described above. The terminal device 10a may be configured to execute a series of processes by the conversion unit 22 and the encryption unit 23 in response to a transmission instruction. In this case, instead of the predetermined program, a program for realizing the conversion means 22 and the encryption means 23 is installed in the terminal device 10a in advance, and the conversion means 22 and the program are executed by the CPU. The function as the encryption unit 23 is realized in the terminal device 10a.

  As described above, the management server 20B manages an electronic file transmitted from the terminal device 10a to the terminal device 10b. Similar to the management server 20A of the first embodiment, the management server 20B converts the electronic file reception unit 21, the conversion unit 22, and the encryption. Means 23, encrypted file transmission means 24, one-time password generation means 25, password transmission means 26, authentication information reception means 27, authentication means 28, and decryption key transmission means 29 are provided. The functions of these means 21 to 29 are the same as the management server 20A of the first embodiment. A predetermined program (electronic file management program) preinstalled in the management server 20B is replaced with a CPU (not shown) constituting the management server 20B. It is realized by executing with.

  Since each means 21-29 in this management server 20B functions in substantially the same way as each means 21-29 in the management server 20A of the first embodiment, detailed description thereof will be omitted.

  However, the encrypted file transmitting unit 24 in the management server 20B transmits the encrypted file created by the encrypting unit 23 to the terminal device 10a, and the encrypted file transmitted by the encrypted file transmitting unit 24 is As described above, it is received by the terminal device 10a, attached to an electronic mail, and transmitted to the terminal device 10b.

At this time, in the second embodiment, the terminal device 10a transmits to the management server 20B the user ID for identifying the user of the terminal device 10a (the user of the service of the system 1B) and the encrypted file. The user ID for specifying the previous user (which may be the same as or different from the user of the terminal device 10a) is transmitted together with the electronic file to be written and the processing request, and the electronic file receiving means 21 Has been received by. Then, in the storage unit (RAM, hard disk, etc .; not shown) of the management server 20B, the transmission destination user ID, the file ID for specifying the encrypted file to be transmitted (electronic file), and the transmission destination user The destination user authentication information (normal password, biometric information, etc.) fixedly registered in advance in the management server 20B is associated with the mail address of the mobile terminal device 40 carried by the destination user. Saved. In the second embodiment, the users of the terminal devices 10a and 10b may be the same or different, but either user is registered in advance as a user of the service of the system 1B, and the registration is performed. Thus, it is assumed that the user ID, user authentication information, and mail address are stored in advance in the management server 20B.

Further, the one-time password generation means 25 in the management server 20B generates a one-time password that can be used only once, as in the first embodiment.
Here, the password transmission unit 26 in the management server 20B transmits the encrypted file (electronic file) from the terminal device 10a to the terminal device 10b, and the terminal device 10b, with the one-time password generated by the one-time password generation unit 25. In response to the receiving operation or the opening operation, the data is transmitted to the portable terminal device 40 at the same time or almost simultaneously with these operations and operations.

  For this reason, the management server 20B transmits a one-time password addressed to the mobile terminal device 40 with reference to a reception notification addressed to the management server 20B from the terminal device 10b indicating that the encrypted file has been received or opened.

  Here, based on the transmission destination user ID, the mail address of the mobile terminal device 40 of the transmission destination user is read from the registration information, and the password transmission means 26 transmits the one-time password by the electronic mail addressed to the mail address. It has become. Therefore, in the mobile terminal device 40 that has received this e-mail, the one-time password is displayed on a display (not shown) in the mobile terminal device 40.

  The transmission / reception means in the terminal device 10b automatically or automatically obtains approval from the user when receiving the encrypted file (electronic file) transmitted from the terminal device 10a. As a reception notification, it has a function as a reception notification transmission means 15 for notifying the management server 20B. Further, this function in the terminal device 10b may be realized by the CPU executing a predetermined program. Then, the management server 20B refers to the receipt notification from the terminal device 10b and transmits the one-time password. As a result, the encrypted file (electronic file) is transmitted from the terminal device 10a to the terminal device 10b. Depending on the receiving operation or the opening operation in the terminal device 10b, the portable terminal device 40 is simultaneously or almost simultaneously with these operations and operations. The function to transmit to is realized. In this embodiment, reception includes a case where the electronic file is received but not opened or viewed. Moreover, opening in this embodiment means displaying or browsing the received electronic file.

Note that the one-time password may be transmitted directly from the password transmission unit 26 of the management server 20B to the portable terminal device 40, or once transmitted from the password transmission unit 26 of the management server 20B to the terminal device 10a. It may be transmitted from 10a to the mobile terminal device 40 by e-mail or the like. In the latter case, the mail address of the mobile terminal device 40 of the destination user may be read from the storage unit and returned to the terminal device 10a together with the one-time password.

  The authentication information receiving means 27 in the management server 20B reads out and decrypts the encrypted file received by the terminal device 10b by the user (the destination user designates the encrypted file as a read target in the terminal device 10b). The authentication information including the one-time password displayed on the display of the mobile terminal device 40, which is input from the terminal device 10b by the transmission destination user who refers to the display of the mobile terminal device 40, is received from the terminal device 10b. To do. In addition to the one-time password, the authentication information includes a transmission destination user ID and transmission destination user authentication information input by the transmission destination user from the terminal device 10b, as in the first embodiment. .

  The authentication unit 28 in the management server 20B is based on the authentication information received by the authentication information receiving unit 27, the various information stored in the storage unit, and the one-time password generated by the one-time password generation unit 25. The terminal device 10b determines whether or not the user who is trying to read the encrypted file is a valid user. At that time, transmission destination user authentication information corresponding to the transmission destination user ID included in the authentication information is read from the storage unit. The authentication unit 28 compares the user authentication information included in the authentication information received by the authentication information receiving unit 27 with the user authentication information read from the storage unit, almost the same as in the first embodiment. In addition, when the one-time password included in the authentication information received by the authentication information receiving unit 27 is compared with the one-time password generated by the one-time password generating unit 25 when the authentication information is received, all of them match. Authenticate that the user is a valid user.

  In the electronic file management system 1B of the second embodiment, the terminal device 10b is assumed as a terminal device that transmits an encrypted file (attached to an e-mail) from the terminal device 10a. The CPU constituting the terminal device 10b executes a program preinstalled in the terminal device 10b, so that input request means 11, authentication information transmission means 12, and decryption key reception means that are substantially the same as those in the first embodiment. 13 and decoding means 14 function.

  However, the input request unit 11 in the second embodiment is configured such that when the transmission destination user reads and decrypts the encrypted file transmitted from the terminal device 10a in the terminal device 10b (the user sets the encrypted file as a reading target). When specified, the transmission destination user is requested to input the above-described user ID and user authentication information, and the one displayed on the display of the transmission destination user's portable terminal device 40 as described above. It requires the input of a time password. The input request is made, for example, by displaying a pop-up screen or the like on the display of the terminal device 10b.

  Further, the authentication information transmitting unit 12 in the second embodiment is substantially the same as in the first embodiment. The transmission destination user ID input from the terminal device 10b by the transmission destination user in response to the input request by the input request unit 11 is transmitted. The prior user authentication information and the one-time password are transmitted as authentication information to the management server 20B. The transmission destination user ID and the one-time password are input by operating the keyboard by the transmission destination user of the terminal device 10b. If the transmission destination user authentication information is also a normal password, the transmission destination user It is input by operating the keyboard.

The decryption key receiving means 13 in the second embodiment is substantially the same as in the first embodiment. When the management server 20B (authentication means 28) authenticates that the user is a valid user, the decryption key receiving means 13 (decryption key) The decryption key transmitted from the transmitting means 29) is received. However, when it is determined that the transmission destination user is not a valid user, the decryption key receiving unit 13 receives an error notification from the management server 20B (decryption key transmitting unit 29). The decrypting unit 14 decrypts the encrypted file using the decryption key received by the decryption key receiving unit 13 in substantially the same manner as in the first embodiment.

  Next, the operation of the electronic file management system 1B according to the second embodiment configured as described above will be described with reference to FIGS. 6 and 7 are flowcharts for explaining the operation of the electronic file management system 1B of the second embodiment.

  First, according to the flowchart shown in FIG. 6 (steps S11 ′ to S15 ′, S16 ′, and S21 to S26), an electronic file transmission operation in the electronic file management system 1B (terminal device 10a) of the second embodiment will be described.

  When transmitting an electronic file to the terminal device 10b in the terminal device 10a, the user designates an electronic file to be transmitted (step S11 ′), and an instruction to transmit the electronic file from the terminal device 10a to the terminal device 10b (electronic The instruction to attach to the mail) is performed by a one-click operation with the mouse (step S12 '). In response to this instruction, the terminal device 10a transmits the electronic file to the management server 20B via the network 50 together with the processing request described above (step S13 ′).

  In the management server 20B, when the electronic file receiving means 21 receives the electronic file to be transmitted and the processing request from the terminal device 10a (step S21), the electronic file is converted into a PDF file by the converting means 22 ( In step S22), the PDF file is further encrypted with a predetermined encryption key by the encryption means 23 to create an encrypted file (step S23). Thus, in the present embodiment, a series of processing (PDF conversion processing and encryption processing) for the electronic file to be written is performed on the management server 20B side in response to a transmission instruction (one-click operation) at the terminal device 10a. Done automatically.

  At this time, as described above, from the terminal device 10a to the management server 20B, the user ID of the transmission source for specifying the user of the terminal device 10a (the user of the service of the system 1A), and the encrypted file The transmission destination user ID for specifying the transmission destination user is transmitted together with the electronic file to be transmitted and the processing request, and the user ID and the transmission destination user ID are stored in the storage unit of the management server 20B. , The file ID, the destination user authentication information, and the email address of the destination user's portable terminal device 40 are stored in association with each other.

  The encrypted file created by the encryption unit 23 is transmitted to the terminal device 10a via the network 50 by the encrypted file transmission unit 24 (step S24), and the encrypted file from the management server 20B is transmitted to the terminal device 10a. When received (step S14 '), the encrypted file is transmitted from the terminal device 10a to the terminal device 10b by being attached to an e-mail (step S15'). In this way, the user can transmit the designated electronic file to the terminal device 10b as an encrypted file without giving any consideration to the user simply by giving a transmission instruction.

  At this time, in the second embodiment, when the encrypted file is transmitted from the terminal device 10a to the terminal device 10b (step S15 '), a one-time password is generated by the one-time password generation means 25 (step S25).

Then, the one-time password generated by the one-time password generation means 25 is received or opened by the terminal device 10b when the encrypted file is transmitted from the terminal device 10a (step S16 '). In response, the password transmitting means 26 transmits the information from the management server 20B to the portable terminal device 40 by e-mail or the like (step S26).

  Here, the transmission / reception means (not shown) in the terminal device 10b opens the encrypted file (electronic file) when receiving the encrypted file (electronic file) transmitted from the terminal device 10a. At this time, the reception or opening is notified to the management server 20B as a reception notification (step S16 ').

  It is possible for the user to set whether the terminal device 10b issues a receipt notification upon reception or whether to issue a receipt notification upon actual opening after reception. In addition, setting information as to when the reception notification is transmitted may be attached to the encrypted file (electronic file). In other words, it is desirable for a user who has a high possibility of not opening even if it is received to send a receipt notification when opening rather than receiving.

  In this case, the terminal device 10b displays a display requesting approval for sending the receipt notification on the display unit, and inputs an input indicating approval (such as “Yes” or “OK”) in the operation unit. A notification is transmitted from the terminal device 10b.

  Further, the reception notification may be set to be automatically transmitted from the terminal 10b at the timing of reception or opening, or may be transmitted after obtaining user approval at the time of reception or opening. May be. Also in this case, the setting may be made in the terminal device 10b, or setting data indicating whether automatic or approval is necessary (manual) may be attached to the encrypted file (electronic file).

It should be noted, that it requires approval for the transmission of acknowledgment (manual), but was received and opened, actually trying to decrypt the encrypted files by entering a one-time password to another opportunity after the use who when are thinking, actually will be able to request a one-time password at the timing that you want to decrypt the encrypted file, it is no longer one-time password is wasted.

  Then, the management server 20B refers to the receipt notification from the terminal device 10b and transmits a one-time password (step S26). Thereby, an encrypted file (electronic file) is transmitted from the terminal device 10a to the terminal device 10b, and a function of transmitting to the portable terminal device 40 in response to reception or opening at the terminal device 10b is realized.

  At that time, as described above, the password transmission means 26 reads out the mail address of the mobile terminal device 40 of the transmission destination user from the registration information based on the transmission destination user ID, and uses the one-time password by the e-mail addressed to the mail address. Send. As a result, the one-time password is displayed on a display (not shown) in the mobile terminal device 40.

  Next, encryption in the electronic file management system 1B (terminal device 10b) of the second embodiment is performed according to the flowchart shown in FIG. 7 (steps S25, S26, S31 ″, S32, S34 to S38, S53 to S55, S61 and S62). A file read operation will be described.

After the terminal device 10b receives the encrypted file from the terminal device 10b and sends the above-described receipt notification (step S31 ″ in FIG. 7 (step S16 ′ in FIG. 6)), the user can read the encryption to be read. When the encrypted file is designated and the reading of the encrypted file is instructed (step S32), first, in the terminal device 10b, a pop-up screen or the like is displayed on the display by the input request means 11, and the user is notified of the user. An input of ID and user authentication information is requested, and an input of a one-time password displayed on the display of the portable terminal device 40 is requested (step S34).

  At this time, in the management server 20B, as described with reference to FIG. 6, a one-time password is generated by the one-time password generation means 25 (step S25), and the password is transmitted to the portable terminal device via the network 50 by the password transmission means 26. 40 (step S26), the password is received by the mobile terminal device 40 (step S61) and displayed on the display of the mobile terminal device 40 (step S43).

  The user refers to the one-time password displayed on the mobile terminal device 40 in this manner, inputs the one-time password to the terminal device 10b by operating the keyboard, and also uses the user ID and the user authentication information ( Here, a normal password) is input to the terminal device 10b by operating the keyboard (step S35). Then, the input one-time password, the user ID, and the user authentication information are transmitted as authentication information to the management server 20B as authentication information via the network 50 by the authentication information transmitting means 12 (step S36).

  In the management server 20B, when the authentication information receiving unit 27 receives the authentication information from the terminal device 10b (step S53), the authentication unit 28 receives the authentication information received by the authentication information receiving unit 27 and the storage unit. The user who is trying to read the encrypted file by the terminal device 10b based on the various information stored in the password and the one-time password generated by the one-time password generation means 25 is as follows. An authentication determination is made as to whether or not (step S54).

  That is, the transmission destination user authentication information corresponding to the transmission destination user ID included in the authentication information is read from the storage unit in the management server 20B, and the identification information corresponding to the device ID (one-time password generation means 25). Is specified from the storage unit. Then, the authentication unit 28 compares the user authentication information (password) included in the authentication information received by the authentication information receiving unit 27 with the user authentication information read from the storage unit, and also performs authentication. When the one-time password included in the authentication information received by the information receiving means 27 is compared with the one-time password generated by the one-time password generating means 25 of the management server 20B when the authentication information is received, and they all match It is authenticated that the user is a valid user. If at least one of the comparison result of the user authentication information and the comparison result of the one-time password does not match, it is determined that the user is not a valid user.

  As in the first embodiment, when the authentication unit 28 authenticates that the user is a valid user (OK), the decryption key transmission unit 29 transmits the encrypted file via the network 50. When the decryption key for decrypting is transmitted to the terminal device 10b and the authentication means 28 determines that the user is not a valid user (NG), the decryption key transmitting means 29 causes the network 50 to Thus, instead of transmitting the decryption key, an error notification is made to the terminal device 10b (step S55).

  In the terminal device 10b, when the decryption key receiving unit 13 receives the decryption key from the management server 20B (step S37), the decryption unit 14 decrypts the encrypted file into the original electronic file using the decryption key ( In step S38), the electronic file is in a state where it can be browsed and accessed on the terminal device 10b. On the other hand, when the terminal device 10b receives an error notification from the management server 20B by the decryption key receiving means 13 (step S37), the error notification is displayed as a pop-up on the display, for example (step S38).

  Thus, according to the electronic file management system 1B as the second embodiment of the present invention, by adopting the one-time password in addition to the normal user authentication, the terminal device 10 (10a, 10b) is provided with the biological information. Without newly adding such sensors and software, the user authentication (the person who owns the mobile terminal device 40) is identified with high accuracy using the existing configuration of the terminal device 10 (10a, 10b). In addition, the user can send the transmitted electronic file (encrypted file) to another person's terminal device 10b only when the portable terminal device 40 and the destination terminal device 10b exist in substantially the same place. It can be used while ensuring security, greatly improving convenience.

Further, the encrypted file sent from the terminal device 10a at the timing of receiving or opening in the terminal device 10b, since the one-time password is sent to the portable terminal device 40 which is carried by a user of the terminal device 10b, the network delay and if such delayed reception of the encrypted file in the terminal device side 10b is like, even when received and such that after opening a while, one-time password is to arrive at the right time. For example, the arrival of the encrypted file is delayed by such delay of the network, situation only one-time password to arrive earlier is prevented. As a result, either it is possible to prevent a situation would expired one-time password by the delay. Therefore, if it is a legitimate user, it becomes possible to reliably decrypt the encrypted file.

Moreover, in this way, the encrypted file with the timing of receiving or opening in the terminal device 10b, since the one-time password is sent to the portable terminal device 40 which is carried by a user of the terminal device 10b, the effective of One Time Password The deadline can be limited to a fixed time, and security can be improved.

  In addition, since the one-time password is disposable and can be used only once, even if a malicious third party uses the password left in the terminal device 10b or steals the password with a keylogger or the like, it will never be used again. It cannot be used, and security can be greatly improved. In the second embodiment, the one-time passwords coincide with each other within a predetermined time (for example, 1 minute to several minutes) after the generation unit 25 generates a new one-time password to be transmitted to the mobile terminal device 40. Therefore, the encrypted file can be decrypted, but if the predetermined time is exceeded, the encrypted file cannot be decrypted.

  Further, in the terminal device 10a, when the user instructs transmission of the electronic file to the terminal device 10b by a one-click operation, a series of processing by the conversion means 22 and the encryption means 23 on the management server 20B side is automatically performed. Since the encrypted file is executed and transmitted to the terminal device 10b, the user performs a transmission instruction operation once without being aware of the two operations of the conversion operation and the encryption operation. As a result, the conversion process and the encryption process are executed, and the encrypted file is transmitted to the terminal device 10b, so that the convenience is greatly improved.

  At this time, as in the first embodiment, the conversion unit 22 and the encryption unit 23 are provided in the management server 20B, and both the conversion process and the encryption process are executed on the management server 20B side. The conversion process and the encryption process can be performed even if the software for the conversion unit 22 and the encryption unit 23 is not installed, and the software for the conversion unit 22 and the encryption unit 23 is upgraded. If it is changed by the above, it is only necessary to update / change the software on the management server 20B side, and there is no need to update or distribute new software for each terminal device 10, and the maintenance of the system 1B is extremely efficient. There is also an advantage of being able to do well.

[3] Others The present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention.

  Regarding the reception and opening of the encrypted file in the terminal device described above, not only receiving or opening using the mail software built in the terminal device, but also receiving and opening on the web by connecting the terminal device to the network The above embodiment can also be applied when using a function such as mail.

  The functions (all or some of the functions of the respective means) as the means 11 to 14 and 21 to 29 described above are performed by a computer (including a CPU, an information processing apparatus, and various terminals) by a predetermined application program (electronic file management program). It is realized by executing.

  The program is, for example, a computer such as a flexible disk, CD (CD-ROM, CD-R, CD-RW, etc.), DVD (DVD-ROM, DVD-RAM, DVD-R, DVD-RW, DVD + R, DVD + RW, etc.). It is provided in a form recorded on a readable recording medium. In this case, the computer reads the control program for the distributed storage system from the recording medium, transfers it to the internal storage device or the external storage device, and uses it. Further, the program may be recorded in a storage device (recording medium) such as a magnetic disk, an optical disk, or a magneto-optical disk, and provided from the storage device to a computer via a communication line.

  Here, the computer is a concept including hardware and an OS (operating system), and means hardware operating under the control of the OS. Further, when the OS is unnecessary and the hardware is operated by the application program alone, the hardware itself corresponds to the computer. The hardware includes at least a microprocessor such as a CPU and means for reading a program recorded on a recording medium. The application program as the electronic file management program includes program code for causing the above-described computer to realize the functions as the means 11 to 14 and 21 to 29. Also, some of the functions may be realized by the OS instead of the application program.

  In addition to the above-described flexible disk, CD, DVD, magnetic disk, optical disk, and magneto-optical disk, the recording medium in the present embodiment includes an IC card, ROM cartridge, magnetic tape, punch card, computer internal storage device (RAM). In addition, various computer-readable media such as an external storage device or a printed matter on which a code such as a barcode is printed can be used.

It is a block diagram which shows the structure of the electronic file management system as 1st Embodiment of this invention. It is a flowchart for demonstrating operation | movement (write operation of an electronic file) of the electronic file management system of 1st Embodiment. It is a flowchart for demonstrating operation | movement (reading operation | movement of an encryption file) of the electronic file management system of 1st Embodiment. It is a flowchart for demonstrating operation | movement (reading operation | movement of an encryption file) of the electronic file management system of 1st Embodiment. It is a block diagram which shows the structure of the electronic file management system as 2nd Embodiment of this invention. It is a flowchart for demonstrating operation | movement (transmission operation | movement of an electronic file) of the electronic file management system of 2nd Embodiment. It is a flowchart for demonstrating operation | movement (reading operation | movement of an encryption file) of the electronic file management system of 2nd Embodiment.

Explanation of symbols

1A, 1B Electronic file management system 10 Terminal device 10a One terminal device 10b Other terminal device 11 Input request means 12 Authentication information transmission means 13 Decryption key reception means 14 Decryption means 15 Receipt notification transmission means 20A, 20B Management server 21 Electronic File reception means 22 Conversion means 23 Encryption means 24 Encrypted file transmission means 25 One-time password generation means 26 Password transmission means 27 Authentication information reception means 28 Authentication means 29 Decryption key transmission means 30a, 30b Portable storage device (USB memory)
31 Storage Unit 32 Display Unit 33 Display Control Unit 34 Password Receiving Unit 35 One-Time Password Generating Unit 40 Mobile Terminal Device (Mobile Phone, PDA)
50 network

Claims (9)

A plurality of terminal devices connected so as to communicate with each other;
A management server that is communicably connected to the plurality of terminal devices and manages an electronic file transmitted from one terminal device of the plurality of terminal devices to another terminal device ;
A mobile terminal device that is communicably connected to the management server and is carried by a user of the other terminal device;
The management server is
Encryption means for transmitting the electronic file encrypted with a predetermined encryption key to the other terminal device by the one terminal device as an encrypted file;
One-time password generation means for generating a one-time password that can be used only for a predetermined time ;
In response to the one-time password generated by the one-time password generating means, the encrypted file is transmitted from the one terminal device as the electronic file and received or opened by the other terminal device. A password sending means for sending to the device;
The one-time transmitted to the mobile terminal device, which is input from the other terminal device by the user when the encrypted file transmitted from the one terminal device is decrypted in the other terminal device An authentication information receiving means for receiving a password, the user ID of the user and user authentication information as authentication information from the other terminal device;
The one-time password included in the authentication information received by the authentication information receiving means is compared with the one-time password generated by the one-time password generating means, and the authentication received by the authentication information receiving means Whether the user is a valid user by comparing the user ID and the user authentication information included in the information with a user ID and user authentication information registered in advance in the management server An authentication means for performing such authentication determination;
When the authentication unit authenticates that the user is a valid user, a decryption key for decrypting the encrypted file is transmitted to the other terminal device, and the encrypted file is transmitted to the other terminal device. Further comprising a decryption key transmission means for executing decryption of
An electronic file management system characterized by that. The other terminal device is
Receiving notification transmitting means for notifying the management server that the encrypted file transmitted from the one terminal device has been received or opened, automatically or with the approval of the user,
When the user decrypts the encrypted file transmitted from the one terminal device in the other terminal device, the user inputs the one-time password, the user ID, and the user authentication information. Input request means for requesting to
Authentication information for transmitting, as the authentication information, the one-time password, the user ID, and the user authentication information input from the other terminal device by the user in response to an input request by the input request means A transmission means;
Decryption key receiving means for receiving the decryption key transmitted from the management server;
A decryption unit configured to decrypt the encrypted file using the decryption key received by the decryption key receiving unit;
The electronic file management system according to claim 1. Further comprising conversion means for converting the electronic file into a completed document file prior to encryption of the electronic file by the encryption means;
The electronic file management system according to claim 1 or 2, characterized by the above. When transmission of the electronic file to the other terminal device is instructed by a user in the one terminal device, a series of processing by the conversion unit and the encryption unit is automatically executed, and the encrypted file Is transmitted to the other terminal device,
The electronic file management system according to claim 3. The conversion means is provided in the management server;
The electronic file management system according to claim 3 or 4, characterized by the above. The password transmission means reads out the mail address of the mobile terminal device of the transmission destination user from the registration information of the management server based on the transmission destination user ID of the encrypted file, and the electronic mail addressed to the mail address Sending a one-time password to the mobile terminal device;
The electronic file management system according to any one of claims 1 to 5, wherein A plurality of terminal devices connected so as to communicate with each other;
A management server that is communicably connected to the plurality of terminal devices and manages an electronic file transmitted from one terminal device of the plurality of terminal devices to another terminal device ;
Communicably connected to the management server and configured to include a portable terminal device carried by a user of the other terminal device;
An electronic file management program for constructing an electronic file management system,
Encryption means for transmitting the electronic file encrypted with a predetermined encryption key as an encrypted file to the other terminal device by the one terminal device;
One-time password generation means for generating a one-time password that can be used only for a predetermined time ,
In response to the one-time password generated by the one-time password generating means, the encrypted file is transmitted from the one terminal device as the electronic file and received or opened by the other terminal device. Password sending means to send to the device,
The one-time transmitted to the mobile terminal device, which is input from the other terminal device by the user when the encrypted file transmitted from the one terminal device is decrypted in the other terminal device Authentication information receiving means for receiving a password, the user ID of the user and user authentication information as authentication information from the other terminal device;
The one-time password included in the authentication information received by the authentication information receiving means is compared with the one-time password generated by the one-time password generating means, and the authentication received by the authentication information receiving means Whether the user is a valid user by comparing the user ID and the user authentication information included in the information with a user ID and user authentication information registered in advance in the management server An authentication means for making an authentication determination, and
When the authentication unit authenticates that the user is a valid user, a decryption key for decrypting the encrypted file is transmitted to the other terminal device, and the encrypted file is transmitted to the other terminal device. Decryption key transmission means for executing decryption of
As a function of the computer as the management server,
An electronic file management program characterized by that. Receiving notification transmission means for notifying the management server that the encrypted file transmitted from the one terminal device has been received or opened, automatically or with the approval of the user,
When the user decrypts the encrypted file transmitted from the one terminal device in the other terminal device, the user inputs the one-time password, the user ID, and the user authentication information. Input request means for requesting,
Authentication information for transmitting, as the authentication information, the one-time password, the user ID, and the user authentication information input from the other terminal device by the user in response to an input request by the input request means Transmission means,
Decryption key receiving means for receiving the decryption key transmitted from the management server; and
A program for causing a computer as the other terminal device to function as decryption means for decrypting the encrypted file using the decryption key received by the decryption key receiving means;
8. The electronic file management program according to claim 7, wherein: The password transmission means reads out the mail address of the mobile terminal device of the transmission destination user from the registration information of the management server based on the transmission destination user ID of the encrypted file, and the electronic mail addressed to the mail address Causing the computer as the management server to function so as to transmit a one-time password to the mobile terminal device;
The electronic file management program according to claim 7 or 8, wherein

Images