JP5047766B2 - Certificate issuing processing method, certificate issuing processing system, and certificate data issuing device - Google Patents

Description

The present invention, certificate issuance processing method, certificate issuance processing systems, and relates to the certificate data issuance device, specifically, outputs a certificate issued the authority et al in cooperation with schools and public agencies More particularly, the present invention relates to a technique for outputting a certificate having a function for preventing falsification.

  At present, at a school or local government office, a certificate is issued by requesting the user to issue a public certificate such as a student certificate or a resident certificate, and outputting the certificate information issued by the target organization as a certificate. A document issuing machine is installed. These certificates are output on a dedicated sheet of paper, or tampering is prevented by printing an official seal on the certificate. However, if the dedicated sheet is available, it can be easily falsified by printing false information on a normal printer. Can create a certificate.

  As a means for solving such a problem, for example, a large amount of information is embedded in a printing medium so as not to disturb human vision, or a large amount of information embedded in a printing medium so as not to disturb human vision. An information embedding device that records embedded information by printing a plurality of minute points having a common shape on a printing medium, for example, reading out information on the information, wherein the minute points are the embedding points. An information point indicating information or an area regulation point indicating an area frame surrounding an area where the information point is arranged in the printing medium, and an embedded information input processing unit for inputting the embedded information, and the area An information point group determination processing unit that arranges the information points in the frame, and a first rule that associates the area frame with the line, divides the area frame into lines, and associates the lines with the points. An area regulation point group determination processing unit that arranges the area regulation points on the line of the area frame according to a second rule, and a print output processing unit that prints and outputs the minute dots on the printing medium. A characteristic information embedding device (see Patent Document 1) has been proposed.

Further, for example, a CPU and a memory which are intended to facilitate the association between character string data to be printed visually and another character string data embedded as watermark data related to the character string data The memory includes a plurality of areas for storing watermark data each having a data format of a tint block watermark, and processing realized by executing a program stored in the memory by the CPU Means for converting character code data corresponding to character string data to be visibly printed to the watermark data, and means for setting the areas corresponding to the character string data on the memory, respectively; And means for combining the character string data and the corresponding watermark data and storing them in each of the areas, and the combined sentence Such as string data and the computer and having a means for transferring to the printer to each set of print output of the watermark data (see Patent Document 2) has been proposed.
JP 2006-279640 A JP 2007-134937 A

  By applying the above conventional technology, it is possible to embed information determined by the issuing institution in the background as a digital watermark in association with the contents of the certificate, and a certificate with a tamper-proof function in the state of a paper certificate Can be output. However, there are expiration dates depending on the type of certificate, and there is a case where it is desired to invalidate the period thereafter. In the prior art, the contents of the output certificate can be checked against the contents embedded as a watermark to verify that the certificate contents are authentic, but check whether they are within the validity period. No function was proposed.

  Therefore, the present invention has been made in view of the above problems, and an object of the present invention is to make it possible to confirm whether a certificate in a valid period is valid in addition to whether the certificate is falsified or not. To do.

  The certificate issuance processing method of the present invention includes a certificate data issuance apparatus that generates print data of a certificate by a tint block watermark process, and a certificate issuance machine that prints a certificate by the print data. The certificate data issuing device includes a communication interface for communicating with the certificate issuing machine, a certificate database storing certificate information to be processed, a certificate type, and a certificate printing time. A pattern database storing the background pattern of the background pattern watermark in association with each other, a watermark information database storing the certificate type in association with the data to be watermarked by the background pattern watermark processing on the background pattern, a certificate type, , An encryption key for encrypting data to be watermarked in the background pattern by the background pattern watermark processing, and a decryption key paired with the encryption key; A key database that stores the validity period of the issue key in association with each other, a storage device that stores the key database, and a computing device, and reads out the certificate information from the certificate database, according to the type of the certificate information Read the watermark data from the watermark information database, read the background pattern of the background pattern watermark according to the type of the certificate information from the pattern database, and the information reading process and the encryption key according to the type of the certificate information Among them, an encryption key whose current date and time is within the valid period is read from the encryption key database, and the watermarked data is encrypted with the encryption key, and the encrypted watermark to the read background pattern Embedding data embedding processing, and the background pattern and the combined certificate information processing with the read certificate information And executing a data generation process for generating certificate print data and a transmission process for transmitting the certificate print data to the certificate issuer via a network. A printer that outputs the print data on a predetermined recording medium, a communication interface that communicates with the certificate data issuing device, a storage device, and an arithmetic device. Print processing is performed in which data is received and certificate printing is performed on a recording medium by the printer.

  In the certificate issuance processing method, a certificate confirmation device that confirms the validity of a certificate printed by a certificate issuing machine includes a communication interface that communicates with the certificate data issuing device, and a printed certificate. A scanner device that acquires image data of a document, a storage device that stores the image data, and a computing device, the image data is read from the storage device, and a background based on a tint block watermark process is performed on the image data A data separation process for reading the encrypted watermarked data from the pattern, and a decryption including the current date and time within a valid period among the decryption keys stored in the key database for the certificate data issuing device A decryption key acquisition process for transmitting a key acquisition request and acquiring the corresponding decryption key from the certificate data issuing device; A decoding process for decoding the watermark included data the encrypted by the decryption key has an output process of displaying the watermark included data the decoded output interface, may be executed.

  Further, in the certificate issuance processing method, the certificate data issuance apparatus embeds the encrypted watermarked data in the background pattern and the attribute information of the encryption key used for the encryption in the data generation processing. Embedded image processing, and the background pattern and the read certificate information are combined by copy-forgery-inhibited pattern watermark processing to generate certificate print data, and the certificate confirmation device performs the image separation in the data separation processing. Read the encrypted watermarked data and encryption key attribute information from the background pattern based on the copy-forgery-inhibited pattern watermark processing for the data, and in the decryption key acquisition processing, the key database Of the decryption key stored in the field, the attribute matches the attribute information of the encryption key, and the decryption key is acquired including the current date and time within the valid period. It sends a request to obtain the relevant decryption key from the certificate data issuance device may be.

  The certificate issuance processing system according to the present invention includes a certificate data issuance apparatus that generates certificate print data by a tint block watermark process, and a certificate issuer that prints a certificate using the print data. A certificate issuance processing system in which the certificate data issuance apparatus communicates with the certificate issuing machine, a certificate database storing certificate information to be processed, and a certificate type And a pattern database that stores the background pattern of the background pattern watermark at the time of certificate printing in association with each other, and a watermark information database that stores the certificate type and the data to be watermarked by the background pattern watermark processing in association with the background pattern; , A certificate type, an encryption key for encrypting data to be watermarked in the background pattern by watermark processing, and the encryption A key database that stores the decryption key that is paired with the validity period of the encryption key, and a storage device that stores the key database, and reads out the certificate information from the certificate database, and sets the type of the certificate information The corresponding watermarking data is read from the watermarking information database, the background pattern of the background pattern watermark corresponding to the type of the certificate information is read from the pattern database, and the information reading process and the encryption corresponding to the type of the certificate information Among the keys, an encryption key whose current date is within the validity period is read from the encryption key database, and the watermarked data is encrypted with the encryption key, and the encryption to the read background pattern is performed The embedded watermark data is embedded and the background pattern and the read certificate information are combined. A processing unit that executes a data generation process for generating certificate print data and a transmission process for transmitting the certificate print data to the certificate issuing machine via a network. An issuing machine outputs a print of certificate print data on a predetermined recording medium, a communication interface for communicating with the certificate data issuing device, a storage device, and the certificate print data from the certificate data issuing device. And an arithmetic unit that executes a printing process for performing certificate printing on a recording medium by the printer.

  The certificate data issuing device according to the present invention is a certificate data issuing device that generates print data of a certificate by a tint block watermark process, and communicates with a certificate issuing machine that prints a certificate using the print data. A communication database; a certificate database storing certificate information to be processed; a pattern database storing a certificate type and a background pattern of a background pattern watermark at the time of certificate printing; and a certificate type and the background A watermarking information database that stores data to be watermarked in a background pattern watermark process in association with a pattern, a certificate type, an encryption key for encrypting data to be watermarked in a background pattern watermark process, and the key A storage that stores a decryption key that is paired with an encryption key and a key database that stores the validity period of the encryption key in association with each other. And reading the certificate information from the certificate database, reading the watermark data according to the type of the certificate information from the watermark information database, and setting the background pattern of the background pattern watermark according to the type of the certificate information. Among the encryption keys corresponding to the information reading process and the type of the certificate information read from the pattern database, an encryption key whose current date is within the validity period is read from the encryption key database, and the watermark is read with the encryption key. An encryption process for encrypting embedded data, an embedding process of the encrypted watermarked data in the read background pattern, and a combining process of the background pattern and the read certificate information Data generation processing for generating certificate print data and the certificate print data on a network. Characterized in that it and a calculation unit for executing a transmission process of transmitting the certificate issuing machine via.

  The certificate data issuing device periodically transmits only the decryption key within the validity period to the certificate confirmation device, while the certificate confirmation device transmits only the decryption key within the validity period. It may be assumed that the data is stored in a storage device. In addition, the certificate data issuing device monitors the validity period of each decryption key in the key database, and for the decryption key that has passed the validity period, issues a collection instruction or deletion instruction to the certificate confirmation apparatus. Sending and maintenance of the decryption key in the certificate confirmation apparatus may be performed. As a result, a character string or the like extracted from the background pattern as watermarked data is decrypted by the decryption key of the certificate checking device if it is within the valid period, and decryption is not performed because the decryption key does not originally correspond if it is outside the valid period. become unable.

  In addition, the problems disclosed by the present application and the solutions thereof will be clarified by the embodiments of the present invention and the drawings.

  According to the present invention, it is possible to confirm whether or not a paper certificate is within the validity period, in addition to whether or not the certificate has been tampered with.

--- System configuration ---
Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 is a configuration diagram of a certificate issuance processing system 10 in the present embodiment. A certificate issuance processing system 10 (hereinafter, system 10) according to the present embodiment includes a certificate data issuance apparatus 100 that generates certificate print data by a tint block watermark process, and a certificate that prints a certificate using the print data. The computer system includes an issuing machine 200 and a certificate checking apparatus 300 that checks the validity of the certificate printed by the certificate issuing machine.

  The certificate data issuing device 100, the certificate issuing device 200, and the certificate checking device 300 constituting the system 10 are storage devices such as a non-volatile memory so as to realize a function for executing the certificate issuing processing method of the present invention. The program stored in is read into the memory and executed by the CPU as the arithmetic unit. In addition, each device configuring the system 10 includes various buttons generally provided in the computer device, an input interface such as a keyboard, and an output interface such as an LED and a display, as necessary. Each of the devices has a communication interface responsible for communication with other devices.

  In the present embodiment, for example, a situation is assumed in which the system 10 is used for the purpose of issuing a certificate relating to a student in cooperation with the academic affairs office system 20 in a school. Certificates issued by the academic affairs office system 20 include those that do not require time limit management such as a graduation certificate and those that require time limit management such as a student enrollment certificate. In the present embodiment, it is assumed that, for the certificate that requires the latter term management, for example, a certificate issuance process that is valid only in the issuance year is performed.

  In this situation, the system 10 includes an academic affairs office system 20 serving as a certificate issuing institution, a certificate data issuing device 100 that obtains necessary information from the academic affairs office system 20 and generates certificate print data, It comprises a certificate issuing machine 200 for printing / issuing a certificate based on the print data, a certificate checking apparatus 300 for checking the validity of the printed certificate, and a certificate maintenance terminal 500.

  Among these, the academic affairs office system 20, the certificate data issuing device 100, and the certificate maintenance terminal 500 are installed in a school or a facility that manages school information, and the certificate issuing device 200 and the certificate checking device. It can be assumed that a plurality of 300 are installed in the school and in places outside the school set by the school. Further, the certificate issuing machine 200 may have the function of the certificate checking apparatus 300.

  Hereinafter, each device configuration will be described. First, the academic affairs office system 20 comprises a server 11 for performing predetermined academic affairs administrative processing and an academic affairs database 125. The information in this academic affairs database 125 is the basis of the certificate information (the academic affairs database 125 will be described later).

  Next, the certificate data issuing apparatus 100 is a computer that generates certificate print data by the copy-forgery-inhibited pattern watermark process, and includes a CPU 104, a memory 103, a communication interface 107, a database management apparatus 108, and a storage apparatus 101. In the storage device 101, a certificate database 128 storing certificate information to be processed (in this embodiment, a certificate type and a background pattern of a background pattern watermark at the time of certificate printing are stored in association with each other). Also included in this certificate database 128 is a pattern database 132, and a watermark information database 133 that stores the certificate type and the data to be watermarked by the background pattern watermark processing on the background pattern). A key database 131 is provided which stores an encryption key for encrypting data to be watermarked in the background pattern watermark processing on the background pattern, a decryption key paired with the encryption key, and an effective period of the encryption key in association with each other. Yes. Further, the storage device 101 includes functional units 110 to 113 configured and held based on the program 102.

  Next, the functional units that are configured and held by the certificate data issuing device 100 configuring the system 10 based on the program 102 will be described. The certificate data issuing device 100 reads certificate information from the certificate database 128, reads watermarked data corresponding to the type of the certificate information from the watermarked information database 133, and sets the type of the certificate information. An information reading unit 110 that reads the background pattern of the corresponding background pattern watermark from the pattern database 132 is provided.

  Further, the certificate data issuing device 100 reads an encryption key whose current date and time is within the valid period from among the encryption keys corresponding to the type of the certificate information from the encryption key database 131, and uses the encryption key to read the encryption key. An encryption unit 111 that encrypts watermarked data is provided.

  Further, the certificate data issuing device 100 performs a tint block watermark process including an embedding process of the encrypted watermarked data in the read background pattern and a synthesis process of the background pattern and the read certificate information. And a data generation unit 112 for generating certificate print data.

  In addition, the certificate data issuing device 100 includes a transmission unit 113 that transmits the certificate print data to the certificate issuing machine 200 via the network 140.

  Next, the certificate issuing machine 200 will be described. The certificate issuing machine 200 includes a CPU 204, a memory 203, an input device 205, a display device 206, a communication interface 207, a printer 208, and a storage device 201. The storage device 201 includes a printer driver 213 and a function unit 210 configured and held based on the program 202. The functional unit becomes the printing unit 210 that receives the certificate print data from the certificate data issuing device 100 and prints the certificate on a recording medium (paper for certificate printing) by the printer 208.

  Further, it is the certificate checking apparatus 300 that checks the validity of the certificate printed by the certificate issuing machine 200. The certificate checking apparatus 300 includes a CPU 304, a memory 303, a display device 306, a communication interface 307, a scanner device 308, and a storage device 301. The storage device 301 includes a scanner driver 316 and functional units 310 to 313 configured and held based on the program 302.

  Next, the functional unit configured and held by the certificate checking apparatus 300 based on the program 302 will be described. The certificate checking device 300 reads the image data from the storage device 301 and reads the encrypted watermarked data from the background pattern based on the background pattern watermark processing for the image data. Is provided.

  Further, the certificate checking apparatus 300 transmits a request for obtaining a decryption key including the current date and time within a valid period among the decryption keys stored in the key database 131 to the certificate data issuing apparatus 100, A decryption key acquisition unit 311 that acquires the corresponding decryption key from the certificate data issuing device 100 is provided.

  The certificate checking apparatus 300 further includes a decryption unit 312 that decrypts the encrypted watermarked data using the acquired decryption key.

  In addition, the certificate checking apparatus 300 includes an output unit 313 that displays the decrypted watermarked data on the display device 306 serving as an output interface.

  The data generation unit 112 in the certificate data issuing device 100 embeds the encrypted watermarked data into the background pattern and the attribute information of the encryption key used for the encryption, and the background pattern. The certificate print data may be generated by executing a combination process with the read certificate information by a tint block watermark process. In this case, the data separation unit 310 in the certificate confirmation apparatus 300 reads the encrypted watermarked data and encryption key attribute information from the background pattern based on the background pattern watermark processing for the image data, and The decryption key acquisition unit 311 decrypts the certificate data issuing apparatus 100 with the attribute matching the attribute information of the encryption key among the decryption keys stored in the key database 131 and including the current date and time within the valid period. A key acquisition request is transmitted, and the corresponding decryption key is acquired from the certificate data issuing device 10.

  The academic administration system 20 or the certificate data issuing device 100 includes a user management DB (stores user authentication information) and a user authentication function unit, or the certificate issuing device 200 and the certificate checking device 300. In this case, a recording medium reading device that acquires user authentication information from an IC card or the like may be provided.

  The certificate data issuing device 100 may include the functional units 310 to 313 included in the certificate checking device 300.

  The certificate maintenance terminal 500 includes a CPU 504, a storage device 501, a communication interface 507, an input device 505, and a certificate maintenance function 511 and a key maintenance function 512 in the storage device, as with other devices. The certificate maintenance terminal 500 executes addition / deletion / update processing of information in the certificate database 128 and the key database 131 of the certificate data issuing apparatus 100 by the certificate maintenance function 511 and the key maintenance function 512. For example, when updating the certificate format of the certificate database 128, the administrator creates the corresponding certificate format in the CVS format. Using the certificate maintenance function 511, the certificate maintenance terminal 500 accesses the certificate data table 129 of the certificate database 128 to obtain the certificate code of the certificate to be updated, and the CSV to which the code name is assigned. The file is overwritten and registered in the certificate database 128. At the same time, when the information in the certificate data table 129 needs to be changed, the managers select the changed portion and instruct to change the information on a predetermined interface presented by the certificate maintenance terminal 500 or the certificate data issuing device 100. I do. The certificate maintenance terminal 500 registers information at the changed location according to the instruction.

  Similarly, for the update / change of background pattern data (created as a dot pattern), the certificate maintenance terminal 500 uses the certificate maintenance function 511 to overwrite and register the corresponding background pattern data in the pattern database. . When updating the key information, for example, the administrator creates an encryption key / public key pair as key data. Then, the certificate maintenance terminal 500 accesses the key database 131 by the key maintenance function 512 and performs the update process of the created key data.

  The function units 110 to 113, 210, 310 to 313 in the certificate data issuing device 100, the certificate issuing device 200, and the certificate confirmation device 300 that constitute the system 10 described so far are hardware. It may be realized, or may be realized as a program stored in an appropriate storage device such as a memory or an HDD (Hard Disk Drive). In this case, the CPU of each device reads the corresponding program from the storage device into the memory in accordance with the execution of the program, and executes it.

--- Example of table structure ---
Next, the structure of various databases and the like used by each device constituting the system 10 in the present embodiment will be described. FIG. 2 is a diagram showing the data structures of (a) the master table 126 and (b) the student ID basic information table 127 that constitute the academic affairs database 125.

  The academic affairs database includes a master table 126 and a student ID basic information table 127. The master table 126 uses a student attribute code (indicating the department) as a key, a department code, an attribute name such as “Faculty of Economics”, “Master of Law”, its abbreviation, and a certificate according to each attribute. It is an aggregate of records associated with the seal code to be stamped on the. In addition, the student basic information table 127 includes a record in which student basic information such as a student name (kanji, kana, English), an attribute code (indicating a department), a department code, and the like is associated with the student ID number as a key. It is an aggregate. This table 127 may include information such as the student's entrance year and the current school year.

  FIG. 3 is a diagram showing each data structure of (a) the certificate data table 129 and (b) the certificate information table 130 constituting the certificate database 128. The certificate database 128 is a database that stores certificate information to be processed, and includes a certificate data table 129 and a certificate information table 130. In the present embodiment, in such a certificate database 128, a pattern database 132 in which a certificate type and a background pattern of a background pattern watermark at the time of certificate printing are stored in association with each other, and the certificate type and the background pattern are subjected to a background pattern watermark process. And a watermark information database 133 that stores the data to be watermarked in association with each other.

  The certificate data table 129 includes a set of records in which attribute code (indicating department) is used as a key, a certificate code indicating a certificate type, presence / absence of a certificate validity period, and validity period information. It has become. The certificate information table 130 uses the certificate type (certificate code) as a key, the certificate issuance unit price, the certificate name (kanji, kana), the certificate issuance condition code, and the certificate It is a collection of records in which information such as a background pattern and watermarked data corresponding to the type is associated.

  The issuance condition code is set in association with the attribute code in the master table 126 of the academic affairs database 125. For example, a condition is set and stored such that the issue permission code “001” can be set for all attributes, “010” can be set for the A attribute and the B attribute, and “999” can be set for only the Z attribute.

  In the example of this embodiment, the watermarked data to be watermarked into the background pattern is the same character information as the output text of the certificate, and the watermarked position is the print position of the corresponding character string in the certificate format. In order to associate the watermarking position with the watermark data, it is preferable to use the technique of Patent Document 2 for dividing the watermark area.

  FIG. 4 is a diagram showing the data structure of the key database 131. The key database 131 includes a validity period, an encryption key code, and a public key code of a public key for restoring information encrypted with the encryption key.

--- Processing flow example 1 ---
Hereinafter, the actual procedure of the certificate issuance processing method in the present embodiment will be described with reference to the drawings. Note that various operations corresponding to the certificate issuance processing method described below are executed by the certificate data issuing device 100, the certificate issuing device 200, and the certificate checking device 300 that constitute the system 10 by reading them into the memory. It is realized by the cooperation of the program. These programs are composed of codes for performing various operations described below.

  FIG. 5 is a flowchart showing a processing procedure example 1 of the certificate issuance processing method in the present embodiment. Here, the certificate issuing machine 200 has a function (card reader device and its control function) for acquiring information of a personal card possessed by a student, and cooperates with a user authentication function of the academic administration system 20, The personal card information and the academic affairs database 125 are collated to perform student personal authentication processing.

  The left flow in FIG. 5 is the processing flow of the certificate issuing machine 200, and the right flow is the processing flow of the academic affairs office system 20 and the certificate data issuing device 100. When the certificate issuing machine 200 is activated, an operation selection menu (corresponding data is stored in the storage device 201 in advance) is displayed on the display device 206, and a selection input from the input device 205 is accepted (S501). Here, it is assumed that a request for starting a process called “certificate issuance” is accepted.

  Next, the certificate issuing machine 200 acquires the information of the personal card possessed by the student by the recording medium reading function and transmits it to the academic administration system 20 (S502). The information transmitted at this time is the student ID number and name data stored in the recording medium of the personal card, and the personal identification number acquired from the input device 205.

  Next, the academic affairs office system 20 executes student personal authentication processing by collating the personal card information with the academic affairs database 125 using the user authentication function (S503). Further, the academic affairs office system 20 extracts a corresponding attribute code (indicating a faculty) from the student data collated above from the academic affairs database 125 and passes it to the certificate data issuing apparatus 100. On the other hand, the certificate data issuing device 100 specifies the certificate code corresponding to the attribute code in the certificate data table 129 of the certificate database 128 and issues the certificate code corresponding to the certificate code in the certificate information table 130. The certificate type that can be issued is searched by specifying the availability condition information. Further, the type information of the certificate is transmitted to the certificate issuing device 200 (S504).

  On the other hand, the certificate issuing device 200 receives the certificate type information from the certificate data issuing device 100 and displays it as a certificate type selection menu on the display device 206 (S505). The selection information input from the input device 205 is received and acquired, and is transmitted to the certificate data issuing device 100 as a certificate issuance request together with the student ID number and the selection information stored in the personal card (S506). .

  At this time, the certificate data issuing device 100 receives the certificate issuance request such as the student ID number and certificate type selection information. Then, certificate print data is created (S507). Details of this processing will be described later. The transmission unit 113 of the certificate data issuing apparatus 100 transmits the created certificate print data to the certificate issuing machine 200 via the network 140 (S508).

  On the other hand, the printing unit 210 of the certificate issuing machine 200 receives the print data of the certificate (S509). The printing unit 210 prints a certificate using the printer 208 using the printer driver 213 (S510).

--- Processing flow example 2 ---
Details of processing for creating certificate data by the certificate data issuing apparatus 100 will be described. FIG. 6 is a flowchart showing a processing procedure example 2 of the certificate issuance processing method in the present embodiment. The left flow in FIG. 6 corresponds to a processing flow for creating a conventional certificate with a background pattern watermark, and the right flow corresponds to a processing flow for creating a certificate with a background pattern watermark in consideration of the validity period.

  Here, the information reading unit 110 of the certificate data issuing device 100 acquires the student ID number and certificate type selection information included in the certificate issue request, and corresponds to the certificate type selection information in the certificate database 128. Identify and read the certificate information. This certificate information is a certificate type, a background pattern, and watermarked data.

  The information reading unit 110 specifies data such as a student name and a department code corresponding to the student ID in the student ID basic information table 127 in the academic affairs database 125 of the academic affairs office system 20, and the master table 126 In step S601, an attribute code corresponding to the department code is acquired. Here, each item data acquired from the academic affairs database 125 by the information reading unit 110 corresponds to a print item of a certificate, and becomes watermarked data that watermarks the background pattern.

  Next, the information reading unit 110 specifies the valid period set for the certificate type in the certificate data table 129 of the certificate database 128 (S602). When the validity period setting of the certificate data table 129 is “None” (S602: None), the watermark data to be watermarked into the background pattern is synthesized with the background pattern in the same manner as in the technique of Patent Document 1 without encryption. Using the copy-forgery-inhibited pattern watermark image, certificate format, print information, and the copy-forgery-inhibited pattern watermark image are combined to create print data for the certificate (S603). The subsequent processing is processing from S507 in FIG.

  On the other hand, when the validity period setting of the certificate in the certificate data table 129 is not “None” and there is some setting (S602: Yes), the encryption unit 111 of the certificate data issuing apparatus 100 The validity period specified in the certificate data table 129 is checked against the key database 131, the encryption key corresponding to the validity period is specified, and the encryption key data is acquired (S604). Here, in order to speed up the processing at the time of certificate verification, an encryption key identification code (such as an encryption key ID) is acquired from the key database 131 in addition to the encryption key data, and the background pattern is watermarked together with the watermarked data. I will do it. In this example, the key data table 131 has a format in which the key data is associated with the valid period. However, a different key may be used depending on the combination of the certificate type and the valid period by adding a certificate type item. Furthermore, an encryption key having a valid period may be used only for a specific area in the background pattern, and a common encryption key having no valid period may be used for the other areas. This may be further associated with a certificate type.

  In addition, the encryption unit 111 watermarks the background pattern by using a copy-forgery-inhibited pattern watermark process (here, each data printed on the certificate; each item such as name and university name) Encrypted character string for each item by key.

  Next, the data generation unit 112 of the certificate data issuing apparatus 100 converts the encrypted character string and the encryption key identification code of the encryption key into a corresponding area in the certificate format (= the certificate corresponding to the item). The copy-forgery-inhibited pattern watermark image is synthesized with the background pattern of the print information area (S605).

  The data generation unit 112 synthesizes the certificate format, the print information for each item, and the generated copy-forgery-inhibited pattern watermark image to generate certificate print data (S606). The subsequent processing is processing from S507 in FIG.

--- Example of printed certificate ---
The printing unit 210 of the certificate issuing machine 200 receives the certificate print data from the certificate data issuing device 100 and prints the certificate on a recording medium (certificate printing paper) by the printer 208. An example of the certificate image is shown in FIG. Here, the name, proof content, and issuing agency items are printed in the student certificate format, and the encrypted character string and encryption key identification code of each item content are watermarked into the predetermined area of the background pattern by the background pattern watermark processing. ing. As shown in Patent Document 1, the background pattern and the print item cannot be separated, and information embedded in the background pattern cannot be identified with the naked eye. Further, since the watermark data to be watermarked into the background pattern can be not only a character string but also image information such as an imprint, the stamp code corresponding to the attribute code is acquired from the master table 126 in the process of step S601. Alternatively, it may be printed on a certificate as an electronic seal, and the imprint image may be watermarked in the background pattern.

  Even when the validity period setting is “None”, in addition to the encryption key / public key having an expiration date registered in advance in the key database 131, the “no expiration date” encryption key / public key pair is registered. The same composition processing may be performed by encrypting watermarked data to be watermarked into the pattern with an encryption key having “no expiration date”.

--- Processing flow example 3 ---
Next, a process for verifying the certificate with the background pattern watermark issued in the above process by the certificate confirmation apparatus 300 will be described. FIG. 8 is a flowchart showing a processing procedure example 3 of the certificate issuance processing method in the present embodiment. Here, it is assumed that the encryption key identification code is embedded in the background pattern, and the certificate confirmation apparatus 300 acquires the decryption key from the key database 131 of the certificate data issuing apparatus 100. In addition to such an assumption, it is also possible to assume a situation in which the currently valid decryption key is distributed and stored in advance in the certificate confirmation apparatus 300 and the processing ends only in the certificate confirmation apparatus 300. When operating the key database 131 in which the certificate type is associated with the key information, the “currently valid” key corresponding to the certificate type is acquired without embedding the encryption key identification code in the background pattern (= background pattern). It is possible to envisage a situation where

  First, the certificate checking apparatus 300 acquires image data of a paper certificate by the scanner device 308 and stores it in the storage device 301 (S801). Further, the data separation unit 310 of the certificate confirmation device 300 reads the acquired image data from the storage device 301, excludes a character / graphic area from the image data by the method disclosed in Patent Document 1, and the watermark A background pattern that is a background pattern including the embedded data is detected (S802).

  Further, the data separation unit 310 detects the encryption key identification code from the background pattern (background pattern) based on the background pattern watermark process (S803).

  Subsequently, the decryption key acquisition unit 311 transmits a request for acquiring a decryption key including the detected encryption key identification code to the certificate data issuing device 100. On the other hand, the certificate data issuing device 100 collates the encryption key identification code with the key database 131 (S804). As a result of the collation, if the encryption key identification code exists in the key database 131, that is, if it is a valid key (S805: Yes), the certificate data issuing device 100 acquires the corresponding decryption key from the key database 131. And transmitted to the certificate checking apparatus 300 (S806). When the encryption key identification code does not exist in the key database 131, that is, when there is no valid key (S805: No), an error code to that effect is transmitted to the certificate confirmation apparatus 300, and this certificate confirmation apparatus 300 displays that the display device 306 does not have a valid key, that is, cannot be restored, and ends the processing.

  Next, the decryption unit 312 of the certificate confirmation apparatus 300 restores watermarked data other than the encryption key identification code from the tint block, and obtains an encrypted character string of certificate information (S807). The decryption unit 312 decrypts the encrypted character string with the decryption key and detects certificate information (S808). The certificate checking apparatus 300 performs verification processing of the detected certificate information (normal certificate verification processing in digital watermark technology) (S809).

  By the processing so far, it has been verified that the encryption key embedded in the certificate is within the valid period, that is, the certificate is valid. Next, there is a possibility that a third party or the like who illegally obtained the certificate image with the tint block has rewritten the certificate information. In this case, since the background pattern and the print item are not separable, the background pattern information is broken, and there is no character string that can be output, or the encrypted character string is output as a different character string.

  The output unit 313 of the certificate checking device 300 detects a state where there is no character string that can be output by the former as a “no detection information” state (S809: No), and the display device 306 has no character string, that is, a certificate. A display indicating that the information has been greatly altered is output (S810). If it is determined that “there is detection information” (S809: Yes), the detected certificate information is displayed on the display device 306 (S811). Even when there is detection information, the encrypted character string may be output as a different character string, and alteration of this pattern is detected by the user visually checking the display information on the display device 306. This pattern is a case in which when the change of the certificate is slight, the output of the encrypted character string is missing or output as a different character string because the change in the background pattern is slight. The screen output 900 in this case is displayed in a completely garbled form as shown in FIG. 9 or in a form in which information is missing, so that tampering confirmation is easy. On the other hand, in the screen output 1000 when there is no tampering, the certificate information is output with the same contents and the same image as the paper certificate on the display device 306 as shown in FIG.

  According to the present embodiment, it is possible to confirm whether or not a certificate has been tampered with, even if it is a paper certificate. In addition, the certificate issuing authority can easily manage the validity period of the certificate simply by setting an encryption key with a time limit and distributing the corresponding decryption key to the certificate checking devices. .

  Further, in the conventional system, when the watermarked data by the copy-forgery-inhibited pattern watermark is restored, it becomes a readable character / figure, but in this embodiment, the restored character string is a ciphertext encrypted with an encryption key, It is not easily restored and the security strength can be maintained well.

  As mentioned above, although embodiment of this invention was described concretely based on the embodiment, it is not limited to this and can be variously changed in the range which does not deviate from the summary.

1 is an overall configuration diagram of a certificate issuance processing system in the present embodiment. It is a figure shown about each data structure of (a) master table and (b) student basic information table which comprise the academic affairs database in this embodiment. It is a figure shown about each data structure of (a) certificate data table and (b) certificate information table which comprise a certificate database in this embodiment. It is a figure shown about the data structure of the key database in this embodiment. It is a flowchart which shows the process procedure example 1 of the certificate issue processing method in this embodiment. It is a flowchart which shows process sequence example 2 of the certificate issue processing method in this embodiment. It is a figure which shows the example of the certificate printed in this embodiment. It is a flowchart which shows process sequence example 3 of the certificate issue processing method in this embodiment. It is a figure which shows the example of a verification screen output which became garbled of this embodiment. It is a figure which shows the example of a normal verification screen output of this embodiment.

Explanation of symbols

10 Certificate Issuance Processing System 11 Academic Affairs Office Processing Server 20 Academic Affairs Office System 100 Certificate Data Issuance Apparatus 101, 201, 301, 501 Storage Devices 102, 202, 302, 502 Program 103, 203, 303, 503 Memory 104, 204, 304, 504 CPU
105, 205, 305, 505 Input device 106, 206, 306 Display device 107, 207, 307, 507 Communication interface 108 Database management device 110 Information reading unit 111 Encryption unit 112 Data generation unit 113 Transmission unit 125 Academic database 126 Master table 127 Student ID Basic Information Table 128 Certificate Database 129 Certificate Data Table 130 Certificate Information Table 131 Key Database 140 Network 200 Certificate Issuer 208 Printer 210 Printing Unit 213 Printer Driver 300 Certificate Confirmation Device 308 Scanner Device 310 Data Separation Unit 311 Decryption key acquisition unit 312 Decryption unit 313 Output unit 316 Scanner driver 500 Certificate maintenance terminal 511 Certificate maintenance function 512 Key Maintenance function

Claims (5)

A certificate data issuing device that generates certificate print data by a background pattern watermark process and a certificate issuing machine that prints a certificate by the print data perform certificate issuing processing,
The certificate data issuing device is
A communication interface for communicating with the certificate issuing machine;
A certificate database that stores the certificate information to be processed;
A pattern database that stores the certificate type and the background pattern of the background pattern watermark at the time of certificate printing in association with each other;
A watermarking information database in which the certificate type and the data to be watermarked in the background pattern watermark processing are stored in association with the background pattern;
A certificate type, an encryption key for encrypting data to be watermarked in the background pattern watermark processing on the background pattern, a decryption key paired with the encryption key, and an effective period of the encryption key are stored in association with each other A key database, a storage device storing the key database, and an arithmetic device;
Certificate information is read from the certificate database, watermark data corresponding to the type of the certificate information is read from the watermark information database, and a background pattern of the background pattern watermark corresponding to the type of the certificate information is read from the pattern database Reading from the information reading process,
Among the encryption keys according to the type of certificate information, an encryption process in which the current date and time is within the valid period is read from the encryption key database, and the watermarked data is encrypted with the encryption key;
A certificate print data is generated by executing a process of embedding the encrypted watermarked data in the read background pattern and a process of synthesizing the background pattern and the read certificate information by a background pattern watermark process. Data generation process,
Performing transmission processing for transmitting the certificate print data to the certificate issuing machine via a network;
The certificate issuing machine is
A printer that outputs the print data of the certificate onto a predetermined recording medium;
A communication interface that communicates with the certificate data issuing device, a storage device, and an arithmetic device,
Receiving the certificate print data from the certificate data issuing device and executing a print process for performing certificate printing on a recording medium in the printer;
A certificate issuance processing method characterized by the above. A certificate checking device that checks the validity of the certificate printed by the certificate issuing machine
A communication interface for communicating with the certificate data issuing device;
A scanner device that acquires image data of a printed certificate, a storage device that stores the image data, and an arithmetic device,
A data separation process of reading the image data from a storage device, and reading the encrypted watermarked data from a background pattern based on a tint block watermark process for the image data;
Of the decryption keys stored in the key database, a request for obtaining a decryption key including the current date and time within the valid period is transmitted to the certificate data issuing device, and the corresponding decryption key is obtained from the certificate data issuing device. Decryption key acquisition processing,
Decryption processing for decrypting the encrypted watermarked data with the obtained decryption key;
The certificate issuing processing method according to claim 1, further comprising: an output process for displaying the decrypted watermarked data on an output interface. The certificate data issuing device is
In the data generation process, the process of embedding the encrypted watermarked data into the background pattern and the attribute information of the encryption key used for the encryption, and the synthesis process of the background pattern and the read certificate information To generate certificate print data,
The certificate checking device is
In the data separation process, the image data is read from the encrypted watermarked data and encryption key attribute information from the background pattern based on the background pattern watermark process,
In the decryption key acquisition process, of the decryption keys stored in the key database to the certificate data issuing device, the attributes match the attribute information of the encryption key, and the decryption key includes the current date and time within the valid period. Send an acquisition request and acquire the corresponding decryption key from the certificate data issuing device.
The certificate issuance processing method according to claim 2. A system for performing certificate issuance processing, comprising a certificate data issuance device for generating certificate print data by copy-forgery-inhibited watermark processing, and a certificate issuance machine for printing a certificate by the print data,
The certificate data issuing device is
A communication interface for communicating with the certificate issuing machine;
A certificate database that stores the certificate information to be processed;
A pattern database that stores the certificate type and the background pattern of the background pattern watermark at the time of certificate printing in association with each other;
A watermarking information database in which the certificate type and the data to be watermarked in the background pattern watermark processing are stored in association with the background pattern;
A certificate type, an encryption key for encrypting data to be watermarked in the background pattern watermark processing on the background pattern, a decryption key paired with the encryption key, and an effective period of the encryption key are stored in association with each other A storage device storing a key database;
Certificate information is read from the certificate database, watermark data corresponding to the type of the certificate information is read from the watermark information database, and a background pattern of the background pattern watermark corresponding to the type of the certificate information is read from the pattern database Reading from the information reading process,
Among the encryption keys according to the type of certificate information, an encryption process in which the current date and time is within the valid period is read from the encryption key database, and the watermarked data is encrypted with the encryption key;
A certificate print data is generated by executing a process of embedding the encrypted watermarked data in the read background pattern and a process of synthesizing the background pattern and the read certificate information by a background pattern watermark process. Data generation process,
An arithmetic unit that executes a transmission process for transmitting the certificate print data to the certificate issuing machine via a network;
The certificate issuing machine is
A printer that outputs the print data of the certificate onto a predetermined recording medium;
A communication interface for communicating with the certificate data issuing device, a storage device,
An arithmetic unit that receives the certificate print data from the certificate data issuing device and executes a printing process for performing certificate printing on a recording medium by the printer;
A certificate issuance processing system characterized by the above. A certificate data issuing device that generates print data of a certificate by a background pattern watermark process,
A communication interface that communicates with a certificate issuing machine that prints a certificate based on the print data;
A certificate database that stores the certificate information to be processed;
A pattern database that stores the certificate type and the background pattern of the background pattern watermark at the time of certificate printing in association with each other;
A watermarking information database in which the certificate type and the data to be watermarked in the background pattern watermark processing are stored in association with the background pattern;
A certificate type, an encryption key for encrypting data to be watermarked in the background pattern watermark processing on the background pattern, a decryption key paired with the encryption key, and an effective period of the encryption key are stored in association with each other A storage device storing a key database;
Certificate information is read from the certificate database, watermark data corresponding to the type of the certificate information is read from the watermark information database, and a background pattern of the background pattern watermark corresponding to the type of the certificate information is read from the pattern database Reading from the information reading process,
Among the encryption keys according to the type of certificate information, an encryption process in which the current date and time is within the valid period is read from the encryption key database, and the watermarked data is encrypted with the encryption key;
A certificate print data is generated by executing a process of embedding the encrypted watermarked data in the read background pattern and a process of synthesizing the background pattern and the read certificate information by a background pattern watermark process. Data generation process,
An arithmetic unit that performs a transmission process for transmitting the certificate print data to the certificate issuing machine via a network;
A certificate data issuing device comprising:

Images