JP4704576B2 - Time information setting device and time certificate verification device - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a time setting and verification method for tangible objects and information. More specifically, the present invention relates to a time setting and verification method for guaranteeing the time when an event such as generation or storage occurs or the time when the event exists for software, data, information, or a product.
[0002]
[Prior art]
FIG. 12 shows a flowchart of a conventional time stamp method shown in, for example, JP-T-6-501571. The operation of the conventional time information setting and verification method will be described with reference to FIG. First, a numerical document (digital data) for which the author is to set time information is prepared (step S1001). Next, a hash of the document is generated (step S1002), and the hash is transmitted to a time stamp organization that sets time information (step S1003). Then, the time stamp organization creates an acceptance document that concatenates the hash and time data (step S1004), and concatenates the acceptance document and the current chain value (step S1005). Next, the time stamp authority generates a hash of data obtained by concatenating the acceptance document and the current chain value to obtain a new chain value (step S1006), and sends a certificate describing the new chain value to the author (step S1007). .
[0003]
In the conventional time information setting and verification method, the time information is set using the chain value as described above. Therefore, it is difficult to alter the order in which the documents are registered, and the document registration order is guaranteed. Become. However, it does not guarantee the validity of the time itself shown in the certificate. In other words, there is a problem in that it is impossible to deny the possibility that the times for documents arranged in chronological order are aligned and greatly shifted back and forth.
[0004]
In addition, since the data representing the time is generally given as a numerical value or a character string representing the time, the user cannot intuitively recognize that the time is accurate. In other words, there is a problem that the underlying clock may be out of order, or there may be a typographical error in the numerical value or character string indicating the time.
[0005]
[Problems to be solved by the invention]
The present invention has been made to solve the above-described problems, and when guaranteeing time, particularly when generating time information, it represents the time after that time at the time when the time information is generated. The purpose is to ensure that time information cannot be generated.
It is another object of the present invention to make it easy for the user to recognize that the time indicated by the time information is the correct time at that time.
This prevents unauthorized time stamps from being displayed and ensures accuracy as time data. For example, production of fresh food, shipping, egg production time, shipping, production of cooked foods, or generation of information Alternatively, it is possible to prevent the time from being falsified with respect to registration or the like.
[0006]
[Means for Solving the Problems]
The time information setting device according to the present invention is a time information setting device connected to an information disclosing organization device that transmits public information about an event that cannot be predicted in advance, and has the following elements.
(1) Information receiving means for receiving target information that is a target of time certification;
(2) Public information receiving means for receiving the public information from the information public agency device,
(3) a data linking means for linking the received target information and the received public information to generate linked data;
(4) Electronic signature means for adding an electronic signature to the concatenated data,
(5) Time certificate output means for outputting time certificate information including the concatenated data and the added electronic signature.
[0007]
In addition to the target information and the public information, the data connection means further connects date and time information indicating a date and time to be certified.
[0008]
The time information setting device according to the present invention is a time information setting device connected to an information disclosing organization device that transmits public information about an event that cannot be predicted in advance, and has the following elements.
(1) Information receiving means for receiving target information that is a target of time certification;
(2) Public information receiving means for receiving the public information from the information public agency device,
(3) Data linking means for reducing the received target information, linking the reduced target information, the received public information, and date / time information indicating the date and time to be certified, and generating linked data;
(4) Electronic signature means for adding an electronic signature to the concatenated data,
(5) Time certificate output means for outputting time certification information including the concatenated data and the added electronic signature;
(6) Information disclosing means for disclosing the linked data.
[0009]
The information disclosing means contracts the linked data and publishes the contracted data.
[0010]
The time information setting device according to the present invention is a time information setting device connected to an information disclosing organization device that transmits public information about an event that cannot be predicted in advance, and has the following elements.
(1) Public information receiving means for receiving the public information from the information public agency device,
(2) a data linking means for linking the received public information and date / time information indicating the date / time to be certified to generate linked data;
(3) Electronic signature means for adding an electronic signature to the concatenated data,
(4) Time proof format generation means for generating a print form representing the concatenated data and the added electronic signature;
(5) Printing means for printing the generated printing form.
[0011]
The printing means prints on a sticker that cannot be replaced.
[0012]
The printing means prints directly on an article that is a subject of time certification.
[0013]
The time certification verification apparatus according to the present invention has the following elements.
(1) Reading means for reading a print form representing public information about an event that cannot be predicted in advance, concatenated data concatenated with date / time information indicating the date and time to be certified, and an electronic signature added to the concatenated data;
(2) Verification means for verifying the linked data and the electronic signature represented in the read print form;
(3) Output means for outputting the verification result.
[0014]
The output means prints the price information of the product to be verified and the name of the product together with the verification result.
[0015]
DETAILED DESCRIPTION OF THE INVENTION
Embodiment 1 FIG.
FIG. 1 is a block diagram according to the first embodiment.
In FIG. 1, 1 is a time stamp organization (time information setting device) that generates and issues time certification information for information requested in response to a time certification information setting request from a user, and 2 is a time stamp. A user terminal that requests time certification information for certain information to the stamp organization 1, an information disclosure organization (apparatus) that issues public information to be used when the time stamp organization 1 creates time certification information, 4 Is information received from the user terminal 2 and is information receiving means for receiving information (target information) for which time guarantee information is issued (target information). The received public information receiving means 6 is a data linking means for linking the information received by the information receiving means 4 and the public information received by the public information receiving means 5, and 7 is the data linked by the data linking means 6. An electronic signature means for adding a child signature, 8 is a time certification output means for outputting a time certificate including the electronic signature obtained by the electronic signature means 7 and the contracted data to the user terminal 2, and 9 is An information transmission medium (including a network such as the Internet) for exchanging information among the time stamp organization 1, the user terminal 2, and the information disclosure organization (device) 3.
[0016]
Next, the operation will be described. First, a user who wants to obtain time certification for certain information sends information or a time stamp request accompanied by a message contraction from the user terminal 2 to the time stamp organization 1 through the information transmission medium 10.
[0017]
Upon receiving the time stamp request, the time stamp organization 1 creates a time certificate using the public information received from the information disclosure organization 3 and transmits it to the user terminal 2.
[0018]
Among the above operations, the details of the operations in the time stamp engine 1 will be described with reference to flowcharts.
FIG. 2 is a flowchart showing the operation of the time stamp engine in the first embodiment. First, the information receiving means 4 obtains information d that is the subject of time certification from the user (step 101). The information that is subject to time certification is binary data representing documents, moving images, still images, audio, and the like.
[0019]
Immediately thereafter or simultaneously, the public information receiving means 5 acquires the public information p issued by the information public organization 3 (step 102). The public information is binary data representing documents, moving images, still images, audio, etc., and is associated with natural and social phenomena that change from moment to moment, and is information that cannot be anticipated in advance. For example, it is data representing breaking news from a news agency, stock price information, exchange rate, TV broadcast, radio broadcast, weather information, cloud images from a weather satellite, and the condition is that the date and time can be specified. In other words, the date and time t of the event represented by the public information p is known, or the date and time t can be immediately obtained from the public information p, for example, the date and time t can be referred to the information disclosure organization 3. Of such public information, the latest information is received and used.
[0020]
Next, the data obtained in Step 1 and Step 2 are concatenated by the data concatenation means 6 (Step 103), and the electronic signature means 7 generates the electronic signature St (d + p) of the time stamp authority 1 for the data (d + p) ( Step 104). The electronic signature method is based on taking a hash value of data by an algorithm such as MD2 or MD5 and encrypting the value with a private key of the RSA public key cryptosystem.
[0021]
Then, a time certificate Ct (d) at time t for the information d including the concatenated data (d + p) and the electronic signature St (d + p) is generated / output (step 105).
FIG. 3 is a diagram illustrating a configuration of the time certificate Ct (d) according to the third embodiment.
[0022]
The time certificate Ct (d) may be a pointer or an identifier for each piece of data that can be used by the user, instead of the linked data (d + p) itself. In other words, if the information at the tip of the pointer is strictly managed and managed so that it cannot be tampered with later, by replacing (d + p) in the data structure with (pointer to d + pointer to p) , Resources can be saved.
[0023]
As described above, since the time certificate includes the electronic signature St (d + p) of the time stamp organization 1, the time stamp organization 1 guarantees the relationship between the information d and the public information p. Since the public information p is known that the date and time when the event occurred is t, or the third party information disclosure organization 3 guarantees the generation date and time t of the public information p, it is simply a numerical value. It is easier to grasp the date and time intuitively than attaching the date and time as data.
In addition, since information that cannot be anticipated in advance is used, the time stamp organization 1 cannot give a time t ′ after the time t at the time of time certificate creation t. That is, it can be ensured that the date and time when the time certificate is created is not before the date and time indicated by the time certificate.
[0024]
Embodiment 2. FIG.
In the above embodiment, the time certification information and public information are used when creating the time certificate. However, in this embodiment, the time information is further included in the time certificate.
FIG. 4 is a block diagram according to the second embodiment. In the figure, 1 to 9 are the same as those in FIG. 1, and 10 is a time data generating means for generating data indicating time information.
[0025]
Next, the operation will be described.
The basic operation is the same as in the first embodiment. The difference is that in step 2 and step 3 in FIG. 2, the time data generating means 10 generates data t indicating the date and time, and the data linking means 6 converts the time data t into the information d to be subject to time certification and the public information p. To generate a time certificate including information on time t. Thus, the time certificate Ct (d) for the time t of the information d includes the electronic signature St (t + d + p) of the time stamp organization 1.
FIG. 5 is a diagram showing the configuration of the time certificate Ct (d) in the second embodiment.
[0026]
As described above, the date and time can be directly recognized from the time certificate by including the time data t. Moreover, the correctness of the date and time indicated by the time data can be confirmed by checking with the date and time indicated by the public information as necessary.
[0027]
Embodiment 3 FIG.
In the above embodiment, the time stamp organization does not particularly disclose information to the outside. However, in this embodiment, the time stamp organization discloses information to the outside.
[0028]
FIG. 6 is a block diagram according to the third embodiment. In FIG. 6, 1 to 10 are the same as those in FIG. 4, and 11 is an information disclosing means for disclosing time certification information and its partial information.
[0029]
Next, the operation will be described.
FIG. 7 is a flowchart showing the operation in the third embodiment. The basic operation is the same as that of the second embodiment except for a part, and only the part corresponding to step 103 and subsequent steps in FIG. 2 is different.
First, in step 111, information d is received from the user by the user information receiving means 4. Next, in step 112, the public information receiving means 5 receives the public information p. Next, in step 113, the time information property means 10 generates data t representing the time. Next, in step 114, the data linking means 6 calculates the hash value H (d) of the information d and links it to the time t and the public information p. In step 115, the electronic signature unit 7 generates an electronic signature St (t + H (d) + p). Next, in step 116, the time certificate output means 8 generates / outputs the time certificate Ct (d) for the information d including the data (t + H (d) + p) concatenated with the electronic signature St (t + H (d) + p). .
FIG. 8 is a diagram showing the configuration of the time certificate Ct (d) in the third embodiment.
[0030]
Next, the information disclosing means 11 discloses the information including the concatenated data (t + H (d) + p) or the hash value H (t + H (d) + p). The means for publishing such information includes, for example, storing and distributing on a CD-ROM, printing on periodicals, publishing in major newspapers, and sending to customers and advisory lawyers by e-mail. is there.
[0031]
As described above, since (t + H (d) + p) is made public, well-known information (t + H (d) + p) is used to prove that the information d exists at time t. Can be explained by using. While maintaining the confidentiality of the information d, it is guaranteed that at least the information d existed before the time t1 when (t + H (d) + p) was released.
[0032]
Also, using this public information, the time certificate can be generated by itself or another time stamp organization. In this case, the information d included in the used public information can be described as being located earlier than the information d1 included in the time certificate generated using the public information. By repeatedly using the public information, it becomes difficult to falsify the context between the information, and it is possible to guarantee that the information d, d1, d2,.
[0033]
Embodiment 4 FIG.
In the above embodiment, the object of time certification is information that is an intangible object, but in this embodiment, a mode of attaching time certification to a tangible object will be described.
FIG. 9 is a block diagram according to the fourth embodiment. In FIG. 9, reference numerals 1, 3, 5 to 7, 9, and 10 are the same as those in FIG. 1, and reference numeral 12 denotes data including public information and time information concatenated and a signature for the data. A time proof format generating means for generating a print form (for example, a numerical string, a barcode, or a graphic), and 13 is a print means for printing the print form generated by the time proof format generating means 12 for a target tangible object. It is.
[0034]
Next, the operation will be described.
Until the electronic signature St (t + p) is generated by the electronic signature means 7 from the public information p and the time data t that change with time, the information d from the user terminal 2 is not included in the subject of concatenation or electronic signature. The same applies except for the above.
[0035]
Next, the time certification format generation means 12 creates a format (numeric string, barcode, graphical representation, etc.) that can be read by humans or machines from the public information p, the time data t, and the electronic signature St (t + p).
[0036]
Finally, the printing unit 13 prints the target tangible object to which time certification is to be attached. At this time, it is desirable to print by a method that cannot be easily erased or tampered with. In addition, the time certificate may not be printed directly on the tangible object, but may be printed on a sticker that cannot be replaced or easily detected and pasted on the target tangible object.
[0037]
As described above, since the time certification information including the public information that changes with time is printed on the object, the person who gives the time certification cannot give the future time to the object in advance. For example, it is not possible to misunderstand that a customer is fresh by pretending the date of manufacture, date and time of manufacture, and attaching a future time to fresh food.
In addition, since the format is readable by a machine, it is possible to easily realize an apparatus that reads a time certificate, performs a tampering check by verifying a signature, and displays a verification result.
[0038]
Embodiment 5 FIG.
Embodiment 4 shows a means for generating a time certificate and attaching it to a tangible object. In this embodiment, an apparatus for verifying a time certificate attached to a tangible object is shown.
[0039]
FIG. 10 is a block diagram showing a time certification verification apparatus. 14 is a time proof verification device, 15 is a reading means for reading time proof data printed in a form that can be read by a machine (numeric string, bar code, other graphical expressions, etc.), and 16 verifies the read time proof. The verification unit 17 is a display / printing unit that displays or prints the verification result.
[0040]
Next, the operation will be described.
First, the reading means 15 reads time certification data printed in a format (numerical string, bar code, other graphical representation, etc.) that can be read by a machine attached to a tangible object. The read data includes public information p, time data t, and electronic signature St (t + p). Next, the verification means 16 performs electronic signature verification using data (t + p) obtained by concatenating the time data t and the public information p and the electronic signature St (t + p). The public key used for the electronic signature verification is stored separately in a database by the inspecting institution or is issued as a certificate by a third party institution.
[0041]
The verification unit 16 acquires the generation time of the public information p before or after the electronic signature verification, and compares it with the time data t. The generation time of the public information p is obtained by making an online inquiry to an organization that publishes the public information p. Public information p is sent at the time of inquiry. In addition, when the occurrence time obtained from the time data t and the public information p has a difference equal to or larger than a preset threshold value, the time certificate itself is not trusted and the verification fails.
[0042]
Next, when the verification is successful by the display / printing means 17, the time data t is displayed on the display or printed on paper. The apparatus may be incorporated in a POS terminal that is used by merchandise retailers when selling merchandise. At this time, the reading unit 15 reads merchandise data together with time certification data, and displays or prints the verification result. At this time, the time data may be displayed together with the name and price data of the corresponding product extracted from the database managed by the retail store, and printed on the receipt.
[0043]
As described above, the time proof data attached to the tangible object is read, verified, displayed and printed, so the time when the proof data is attached to the tangible object is determined from the time of occurrence of the accompanying public information. Can guarantee that it is later and show it to the user. FIG. 11 shows the concept of time passage. In addition, since the time signature data is accompanied by the electronic signature of the person who attached the time certification data, other people cannot falsely attach different time certification data. Thus, for example, for the production of fresh food, shipping, egg production time, shipping, manufacturing of cooked food, etc., attach a future time in advance or attach a new time certificate at a retail store. Can be prevented.
[0044]
Finally, it supplements about the verification using a time certificate. As verification, signature verification, time verification, and information verification are performed as follows.
Verification of electronic signature St of signature verification time certification information Ct (d) (Embodiments 1, 2, and 3)
-Obtaining time t of time verification time certification information Ct (d) (only Embodiments 2 and 3).
The generation time of the public information p in the time certification information Ct (d) is confirmed by the public information source (Embodiments 1, 2, and 3).
Obtain information d of information verification time certification information Ct (d) (only Embodiments 1 and 3).
The hash value H (d) of the information in the time certification information Ct (d) is collated with the information d (only Embodiment 2).
By performing the above verification, it is possible to confirm that the information d already exists at the confirmed time t.
[0045]
Note that the above-mentioned time is a concept including a date in principle, but may be effective even if the date is not included if the proof cycle is short.
[0046]
The time information setting device and the time certification verification device described above are computers, and each element can execute processing by a program. Further, the program can be stored in a storage medium so that the computer can read the program from the storage medium.
[0047]
【The invention's effect】
According to the present invention, when generating time information, it is possible to ensure that time information representing a time after that time cannot be generated at the time when the time information is generated.
In addition, it is possible to make the user easily recognize that the time represented by the time information is the correct time at that time.
[Brief description of the drawings]
FIG. 1 is a block diagram in a first embodiment.
FIG. 2 is a flowchart showing the operation of the time stamp engine in the first embodiment.
FIG. 3 is a diagram showing a configuration of a time certificate Ct (d) in the first embodiment.
FIG. 4 is a block diagram in a second embodiment.
FIG. 5 is a diagram showing a configuration of a time certificate Ct (d) in the second embodiment.
FIG. 6 is a block diagram in a third embodiment.
FIG. 7 is a flowchart showing an operation in the third embodiment.
FIG. 8 is a diagram showing a configuration of a time certificate Ct (d) in the third embodiment.
FIG. 9 is a block diagram in a fourth embodiment.
FIG. 10 is a block diagram showing a time certification verification apparatus.
FIG. 11 shows the concept of time passage.
FIG. 12 shows a flowchart of a conventional time stamp method shown in JP-T-6-501571.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 Time stamp organization, 2 User terminal, 3 Information disclosure organization, 4 Information receiving means, 5 Public information receiving means, 6 Data connection means, 7 Electronic signature means, 8 Time certification output means, 9 Information transmission medium, 10 Time data Generation means, 11 information disclosure means, 12 time certification format generation means, 13 printing means, 14 time certification verification apparatus, 15 reading means, 16 verification means, 17 display / printing means.

Claims (12)

Information receiving means for receiving a subject to target information of the time information setting device (1) time certification characterized by having the elements of the following,
(2) Public information receiving means for receiving public information transmitted from the information public organization apparatus, which is public information representing an event that cannot be predicted in advance and for which the date and time can be specified ;
(3) Data linking means for linking the target information received by the information receiving means and the public information received by the public information receiving means to generate linked data;
(4) Electronic signature means for adding an electronic signature to the linked data generated by the data linking means,
(5) Time certificate output means for outputting time certificate information including the concatenated data generated by the data concatenation means and the electronic signature added by the electronic signature means.   2. The time information setting device according to claim 1, wherein the data connection means further connects date information indicating a date to be verified in addition to the target information and the public information. Information receiving means for receiving a subject to target information of the time information setting device (1) time certification characterized by having the elements of the following,
(2) Public information receiving means for receiving public information transmitted from the information public organization apparatus, which is public information representing an event that cannot be predicted in advance and for which the date and time can be specified ;
(3) The target information received by the information receiving unit is contracted, and the contracted target information, the public information received by the public information receiving unit, and date / time information indicating the date and time of certification are connected. , Data linking means for generating linked data,
(4) Electronic signature means for adding an electronic signature to the linked data generated by the data linking means,
(5) Time certificate output means for outputting time certification information including the concatenated data generated by the data concatenation means and the electronic signature added by the electronic signature means;
(6) Information disclosing means for disclosing the connected data generated by the data connecting means.   4. The time information setting device according to claim 3, wherein the information disclosing means contracts the linked data and discloses the contracted data. The public information receiving means receives data disclosed by the information public means as public information transmitted from the information public organization apparatus.
The time information setting device according to claim 3 or 4, characterized in that A public information sent from the time information setting device (1) Disclosure engine apparatus characterized by having elements follows, public information indicating an event that a phenomenon that can not be anticipated in advance can be specified date Public information receiving means for receiving,
(2) Data linking means for linking the public information received by the public information receiving means and date / time information indicating the date and time to be certified, and generating linked data;
(3) Electronic signature means for adding an electronic signature to the linked data generated by the data linking means,
(4) Time proof format generation means for generating a print form representing the concatenated data generated by the data concatenation means and the electronic signature added by the electronic signature means;
(5) Printing means for printing the printing form generated by the time certification format generation means.   7. The time information setting apparatus according to claim 6, wherein the printing means prints on a sticker that cannot be replaced. 7. The time information setting apparatus according to claim 6, wherein the printing means directly prints on a tangible object that is a target of time certification. The public information represents any of the following events: news bulletins, stock price information, exchange rates, television (TV) broadcasts, radio broadcasts, weather information, and cloud images captured by weather satellites. 9. The time information setting device according to claim 1, wherein the time information setting device is data. Time certification verification device characterized by having the following elements: (1) Public information transmitted from an information disclosure agency device, which is public information that represents an event that cannot be predicted in advance and that can specify the date and time ; reading means for reading the connection data obtained by connecting the date and time information indicating the date and time to prove, the printing form that represents an electronic signature that is added to the connection data from the tangible object the print form is subject to the attached time certification ,
(2) The occurrence time when the public information linked as the linked data represented in the print form read by the reading means is disclosed is acquired from the information disclosure organization apparatus, and the acquired generation time and the linked data are acquired. Find the difference with the linked date and time information, compare the found difference with a preset threshold value, and generate a verification result indicating whether the verification succeeded or failed based on the comparison result Verification means,
(3) Output means for outputting the verification result generated by the verification means. Time certification verification apparatus characterized by having the following elements:
(1) Target information subject to time certification, public information transmitted from the information disclosure organization device, public information representing an event that cannot be predicted in advance and for which the date and time can be specified, and date and time of certification Reading means for reading time certification information including concatenated data obtained by concatenating the date and time information shown, and an electronic signature added to the concatenated data;
(2) The generation time at which the public information linked as the linked data included in the time certification information read by the reading means is published is acquired from the information disclosure organization apparatus, and the acquired generation time and the linked data are linked. Verification that generates a verification result that indicates whether the verification succeeded or failed based on the comparison result by comparing the calculated difference with a preset threshold value. means,
(3) Output means for outputting the verification result generated by the verification means. The said output means prints the date information linked as the said connection data together with the said verification result, when the said verification result represents that verification was successful . Time certificate verification device.

Images