JP6807239B2 - Timestamp management system, timestamp management method, and timestamp management program - Google Patents

Description

The present invention relates to a technique for handling an electronic document, and more particularly to a time stamp management system for managing a time stamp token issued to an electronic document, a time stamp management method, and a technique effective when applied to a time stamp management program. It is a thing.

You may want to prove that a particular electronic document (digitized documents, materials, etc.) exists at the time of its creation and has not been tampered with since then. On the other hand, time authentication information called a time stamp is added to an electronic document file.

In addition, a time stamp token signed with the private key of the time stamp station by combining the hash value of the data related to the electronic document with the time stamp and the time authentication information of the time stamp station (hereinafter referred to as "TST"). There is a service to store as a backup. For example, at the National Center for Industrial Property Information and Training (hereinafter sometimes referred to as "INPIT" (registered trademark)), the TST issued by a time certification business certified business operator is entrusted to the user as a public institution. We are planning to start a time stamp storage service for long-term safe storage (Non-Patent Document 1).

Further, as a technique related to this, for example, Japanese Patent Application Laid-Open No. 2016-170643 (Patent Document 1) relates to the target data which is the basis of the time stamp data issued by the time stamp device and the time stamp data. A technique for storing a hash value in association with a storage ID unique to the hash value issued by a storage device for storing the hash value is described.

JP-A-2016-170643

"About time stamp storage service", [online], INPIT, [Search on January 12, 2017], Internet <URL: http://www.inpit.go.jp/katsuyo/tradesecret/ts.html>

According to the technique described in Patent Document 1, it is possible to link the issuance of time stamp data by the time stamp device and the storage of the hash value by the storage device. However, for example, when considering INPIT's time stamp storage service as a storage device, pre-registering an account with the time stamp storage service, logging in to the time stamp storage service, executing other service menus such as updating the storage period, etc. It is necessary for the user to be aware of such matters and do it independently. That is, it is not possible to provide the entire TST storage service to the user in a one-stop and unified manner together with the time stamp issuing service without showing the user as much as possible. There is also a need to link with the time stamp issuing service in the form of further expanding the time stamp storage service of IMPIT.

Therefore, an object of the present invention is a time stamp management system that realizes a one-stop time stamp management service in cooperation with a time stamp issuing service after further expanding the time stamp storage service by a public institution such as INPIT. The purpose is to provide a time stamp management method and a time stamp management program.

The above and other objects and novel features of the present invention will become apparent from the description and accompanying drawings herein.

A brief outline of the typical inventions disclosed in the present application is as follows.

The time stamp management system according to a typical embodiment of the present invention is a time certified by a time stamp authority for certifying the time when the user's electronic file existed and detecting falsification of the electronic file. A time stamp management system that manages time stamp tokens including information, based on instructions from the time stamp management unit that manages information related to the time stamp token received from the time stamp station and the time stamp management unit. Then, the storage service cooperation unit that sends the time stamp token to the time stamp storage service to request storage, and receives the deposit information returned from the time stamp storage service in response to the storage of the time stamp token. Have.

The present invention can also be applied to a program that operates a computer as the above-mentioned time stamp management system.

Among the inventions disclosed in the present application, the effects obtained by typical ones will be briefly described as follows.

That is, according to a typical embodiment of the present invention, a one-stop time stamp management service is provided in cooperation with a time stamp issuing service after further expanding the time stamp storage service by a public institution such as INPIT. Can be realized.

It is a figure which showed the outline about the structural example of the time stamp management system which is one Embodiment of this invention. It is a figure which showed the outline of the example of the flow of the whole processing which concerns on the issuance of a time stamp in one Embodiment of this invention. It is a figure which showed typically the transition state of the electronic document in one Embodiment of this invention. It is a flowchart which showed the outline about the example of the process flow which concerns on the time stamp issuance in the time stamp management server in one Embodiment of this invention. It is a flowchart which showed the outline about the example of the flow of the TST storage process in the time stamp management server in one Embodiment of this invention. It is a flowchart which showed the outline about the example of the processing flow which concerns on the storage period management of TST in one Embodiment of this invention. It is a figure which showed the outline of the example of the account management of the time stamp storage service in one Embodiment of this invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. In addition, in all the drawings for explaining the embodiment, in principle, the same reference numerals are given to the same parts, and the repeated description thereof will be omitted. On the other hand, the parts described with reference numerals in one figure may be referred to with the same reference numerals in the explanation of other figures, although they are not shown again.

<System configuration>
FIG. 1 is a diagram showing an outline of a configuration example of a time stamp management system according to an embodiment of the present invention. The time stamp management system 1 has a time stamp issuing service that issues a time stamp to the user's electronic document (original), or acquires the TST related to the electronic document by cooperating with an external time stamp issuing service. It is an information processing system with a function. Then, it has a function of storing the acquired TST in cooperation with the time stamp storage service 3 by a public institution. In the present embodiment, it is assumed that the time stamp is issued (issued by TST) in cooperation with the external time stamp station 2, and the issued TST is mainly stored by the time stamp storage service of IMPIT.

The time stamp management system 1 includes, for example, a time stamp management server 10 which is a server system composed of a server device, a virtual server built on a cloud computing service, and the like. The time stamp management server 10 can connect to the time stamp station 2 and the time stamp storage service 3 via a network such as the Internet (not shown), and can cooperate with these processes. Further, the user (s) are connected to the user terminal 4 which is an information processing terminal used by the user terminal 4 via a network (not shown), and use various functions and services provided by the time stamp management system 1. be able to.

The time stamp management server 10 is, for example, an OS (Operating System), a DBMS (DataBase Management System), or a Web server developed on a memory from a recording device such as an HDD (Hard Disk Drive) by a CPU (Central Processing Unit) (not shown). By executing middleware such as programs and software running on it, various functions related to the time stamp management service, which will be described later, are realized.

The time stamp management server 10 has, for example, electronic document processing unit 11, time stamp issuing unit 12, time stamp management unit 13, storage service cooperation unit 14, user management unit 15, and the like implemented as software. It also has data stores (recording units) such as a storage status management database (DB), a user DB 17, and a setting DB 18 implemented by a database, a file table, or the like.

The electronic document processing unit 11 has a function of acquiring the original electronic document 5 transmitted from the user terminal 4 and performing various processing on the acquired electronic document 5. The format and format of the electronic document 5 are not particularly limited, and files of any type and format such as text data, audio data, video data, and data formats dedicated to a predetermined application can be used.

As a process for the electronic document 5, specifically, for example, as will be described later, another electronic file to which one or a plurality of electronic documents 5 are attached is created. This electronic file is created, for example, as a PDF (Portable Document Format) file 111 to which the electronic document 5 is attached. This electronic file is directly covered by the original warranty. By creating the PDF file 111 to which the original electronic document 5 is attached in this way, the original guarantee for various types of electronic documents 5 can be performed collectively.

If the original electronic document 5 is a single PDF file, the PDF file itself of the electronic document 5 is directly covered by the original guarantee instead of creating the PDF file 111 with the original PDF file attached. It may be 111. That is, in the present embodiment, the concept of "PDF file to which the original electronic document 5 is attached" also includes "a single PDF file which is the original electronic document 5".

In the electronic document processing unit 11, as processing for the electronic document 5, a hash value 113 is further applied to the electronic file (that is, the PDF file 111 to which the electronic document 5 is attached) subject to the original guarantee by a predetermined hash algorithm. Is calculated and output to the time stamp issuing unit 12 described later. Then, the TST21 output from the time stamp issuing unit 12 is stored in a predetermined area (for example, a signature line) of the PDF file 111. Further, the deposit information acquired when the TST 21 is stored in the time stamp storage service 3 by the time stamp management unit 13 or the like described later is also stored in a predetermined area (for example, a file name) of the PDF file 111. Even if the TST21 is stored in the signature line or the file name is changed, the hash value 113 of the PDF file 111 (electronic file) does not change.

The PDF file 111 in which the TST 21 is stored is transmitted to the user terminal 4 as an electronic file to which a time stamp is added and the original is guaranteed. At this time, the original electronic document 5 first acquired from the user terminal 4 by the electronic document processing unit 11 and the transmitted PDF file 111 should not be deleted and left based on, for example, the user's settings. Alternatively, it may be stored in association with the information related to TST21.

As processing for the electronic document 5, the electronic document processing unit 11 predicts in advance the time information given when the time stamp station 2 issues the TST 21, and the predicted time information (predicted time), as will be described later. Information) may be described in the PDF file 111. For example, the predicted time information is described at a position that is easily visible to the user, such as a predetermined position in the first page displayed when the created PDF file 111 is opened.

In this way, the predicted time information is described in the PDF file 111, and when the predicted time information and the time information given at the time of issuing TST21 at the time stamp station 2 match, the PDF file is concerned. It can be determined that the genuine time information is described in 111. Then, only in this case, the TST21 may be stored in a predetermined area of the PDF file 111. By writing the genuine time information in the PDF file 111 in this way, the user can easily confirm the time information when the authentication is performed by the time stamp station 2.

When the predicted time information described in the PDF file 111 and the time information of the TST21 do not match, that is, when the predicted time information described in the PDF file 111 is not genuine, the PDF file 111 is recreated and a time stamp is added. May be re-executed. For example, the predicted time information is changed so as to be close to the acquired time information of TST21, and a new PDF file 111 describing this is created. Then, the hash value 113 of the created PDF file 111 is calculated and passed to the time stamp issuing unit 12. As a result, the TST 21 corresponding to the new hash value 113 is generated by the time stamp station 2, and this is acquired via the time stamp issuing unit 12.

When the electronic document processing unit 11 determines whether or not the predicted time information described in the PDF file 111 and the time information of the TST 21 match, it is determined whether or not they match in a predetermined unit rather than a strict match. You may. For example, it may be determined whether or not they match in units such as date (day) and time (hour).

The time stamp issuing unit 12 has a function of acquiring the hash value 113 calculated by the electronic document processing unit 11, transmitting the hash value 113 to the time stamp station 2, and receiving the TST 21 generated by the time stamp station 2. The time stamp station 2 generates the TST 21 by combining the received hash value 113 and the authentication time information and signing with the private key. Further, the time stamp issuing unit 12 delivers the TST21 received from the time stamp station 2 to the electronic document processing unit 11 for storing in the PDF file 111, and the time described later for storing in the time stamp storage service 3. It is also handed over to the stamp management unit 13.

The time stamp management unit 13 has a function of storing the TST 21 acquired from the time stamp issuing unit 12 in the time stamp storage service 3 via the storage service cooperation unit 14 described later. If there is a TST 21 that the user has already acquired and possesses, the TST 21 may be received from the user terminal 4 and stored in the time stamp storage service 3 in the same manner.

Further, it has a function of managing the storage status of the TST 21 by the time stamp storage service 3, the deposit information about the TST 21, and the like in association with the bibliographic information and the like of the original electronic document 5 by the storage status management DB 16 and the like. By managing in this way, the user can use the time stamp management system 1 to obtain, for example, the file name of the original electronic document 5 or PDF file 111, the storage date (storage period) of TST21, the name of the person in charge, and the like. You can search as a key, refer to the PDF file 111 or the like related to the extracted record, or check the storage status of TST21.

Further, the time stamp management unit 13 acquires (pays) the TST21 stored in the time stamp storage service 3 via the storage service cooperation unit 14 in response to a request from the user via the user terminal 4, and the user It also has a function of transmitting to the terminal 4.

The TST21 stored by the time stamp storage service 3 is specified by the deposit information transmitted from the time stamp storage service 3. The timing at which the time stamp storage service 3 transmits the deposit information may be any timing. For example, it may be transmitted each time immediately after receiving the TST21 to be stored, or the deposit information to be transmitted may be stored for a predetermined period and transmitted collectively. Alternatively, it may be transmitted each time in response to a request from the user.

The deposit information can be obtained from various media such as files, data, and screens for providing information to the user that the time stamp storage service 3 has stored (deposited), for example. Various media include, for example, a deposit certificate, a CSV (Comma-Separated Values) file containing the list information of TST21 stored, a deposit completion screen output by the time stamp storage service 3, and a predetermined mail described later. Includes deposit completion notification emails sent to the address.

For example, for a deposit certificate (eg, configured as a PDF file), data can be obtained from the included text information. Further, regarding the list information of TST21, data can be acquired from the CSV file downloaded from the time stamp storage service 3. Further, regarding the deposit completion screen, data can be acquired from the HTML (HyperText Markup Language) file of the screen when the deposit certificate is output by the time stamp storage service 3. In addition, for deposit notification emails, data can be obtained from the subject and / or body of the email.

The deposit information includes, for example, items such as a time stamp token management number and a deposit date and time. The time stamp token management number is information that makes the TST21 stored in the time stamp storage service 3 uniquely identifiable, and may be a management number assigned to each TST21, or is assigned for each deposit. It may be a rubber stamp. It may be a number associated with an ID or the like that identifies the user. The deposit date and time may be the date and time when the TST21 was stored in the time stamp storage service 3, or the time associated with the time information (time stamp time information) included in the TST21 transmitted from the storage service cooperation unit 14 described later. Or information. Further, it may be a numerical value obtained by performing a predetermined operation (including a random number operation) on these numbers, times, information and the like. Further, the number is not limited to a number, and may be a number in which any character is combined.

The deposit information can identify the target TST21 from a large number of stored TST21s when the user intends to utilize the TST21 stored as a backup in the time stamp storage service 3 in the future. Any form of information may be used as long as it is information. In addition, information on other related items may be added. Not all items included in the deposit information can be obtained from only a specific medium (for example, the deposit certificate contains information on the items to be certified such as the deposit date, but the management number, sequence number, etc. Internal management information may not be included). Therefore, the various information included in the deposit information is not limited to the case where all the information is acquired from one of the plurality of media as described above, and the data partially acquired from each of the plurality of media is integrated to form the whole. It may be satisfied as.

If the deposit information is time information, it is assumed that a plurality of TST21s are stored at the same time, and the same deposit information may be given to the plurality of TST21s. Even in such a case, by using the deposit information, it is possible to identify (narrow down the target) a plurality of TST21s having at least the same time information from a large number of stored TST21s. After that, the user who wants to confirm the stored TST21 can confirm the desired TST21 by referring to the user information or the like stored in the time stamp storage service 3 in relation to the TST21, for example. ..

As described above, the deposit information obtained when the TST 21 is stored in the time stamp storage service 3 is stored in a predetermined area of the PDF file 111 by the electronic document processing unit 11. It is desirable that the predetermined area is an area (for example, a file name) in which the hash value of the PDF file 111 does not change even if the deposit information is stored. The file name is stored in the area managed by the OS, and the hash value of the file does not change even if the file name is changed. Therefore, in the present embodiment, the deposit information is included in the file name of the PDF file 111 (for example, added or replaced).

The file name is an area that is highly visible to the user. Therefore, even if the electronic file changes, if the original guarantee of the time information becomes necessary in the future, the user can check whether the TST21 is stored in the time stamp storage service 3 simply by checking the file name. It can be easily judged. In the electronic document processing unit 11, the deposit information may be added at the beginning or the end of the file name, or may be added in the middle of the file name. The existing file name may be replaced with the deposit information. That is, a part or all of the file name of the PDF file 111 may be changed or modified. The file name may include an extension, and the extension may be changed to a predetermined extension when including the deposit information.

As the area for storing the deposit information, instead of or in addition to the file name, an area having a signature appearance for storing an image, characters, etc. for displaying a "watermark" (signature) in PDF may be used. Even if the deposit information is included in this area, the hash value of the PDF file 111 does not change as well as the file name.

The storage service cooperation unit 14 has a function of providing an interface for cooperation with the time stamp storage service 3. For example, in order to access the time stamp storage service 3, the API (Application Programming Interface) provided by the time stamp storage service 3 is called, or the access to the website (web scraping) by HTTP (HyperText Transfer Protocol) is used. To do.

If the time stamp storage service 3 does not provide or permit the use of these external interfaces, the service such as the storage request of TST21 cannot be used automatically. In this case, for example, the user directly accesses the time stamp storage service 3 and manually stores the TST21, and after the storage, the CSV file of the list information of the storage TST21 acquired from the time stamp storage service 3 by downloading or the like is stored. Upload to the time stamp management server 10. In the time stamp management server 10, the storage status of the target TST21 can be included in the management target by importing the uploaded CSV file data by the tom stamp management unit 13 or the like and recording it in the storage status management DB 16. .. Instead of the CSV file containing the list information of TST21, a deposit completion notification mail notifying the user that the TST21 has been stored (deposited) may be used.

When linking with the time stamp storage service 3, the account information in the time stamp storage service 3 for the target user and various setting information in the account can be acquired from the setting DB 18 and used. In the setting DB 18, these information are registered in association with the user information of the time stamp management system 1 managed by the user management unit 15 and the user DB 17, which will be described later.

The storage service cooperation unit 14 can automatically access the time stamp storage service 3 and use the service provided by the time stamp storage service 3. That is, by logging in to the time stamp storage service 3, for example, the TST21 delivered from the time stamp management unit 13 is stored (deposited) as a backup, or acquired (paid out) and responded to the time stamp management unit 13. The function can be provided without making the user aware of the existence of the time stamp storage service 3. This makes it possible to seamlessly and one-stop provide the service of issuing a time stamp for the electronic document 5 and storing the TST 21 to the user.

In such a cooperation function for the time stamp storage service 3, for example, the time stamp storage service 3 performs two-step authentication such that the user is required to enter a one-time password in response to a processing request such as storage (deposit). In some cases. At that time, the one-time password is sent to, for example, the e-mail address registered in the target account information.

In such a case, for example, the user can directly access the time stamp storage service 3 via the user terminal 4 and enter the one-time password. Alternatively, the user inputs a one-time password to the screen provided to the user terminal 4 by a Web server program or the like not shown by the time stamp management server 10, and the input one-time password is stored in the time. You may make a proxy input for the stamp storage service 3. As a result, the service provided by the time stamp management service 3 can be used semi-automatically.

Further, it is also possible to automatically perform the process related to the input of the one-time password. Specifically, for example, in the time stamp management system 1, it is possible to set a management user and a representative user for a plurality of users such as corporations, departments, and groups, and the data is sent to the e-mail addresses associated with these management users and the like. The time stamp management system 1 can receive and refer to the contents of the e-mail. Then, the account of the time stamp storage service 3 is acquired in association with the management user or the like, and the corresponding e-mail address is registered. Then, when each ordinary user represented by the management user or the like uses the service provided by the time stamp storage service 3, the management user or the like executes the service on behalf of each user. That is, the access to the time stamp storage service 3 is performed centrally on behalf of the management user and the like. As a result, no matter which user tries to use the service provided by the time stamp storage service 3, the one-time password is sent to the e-mail address associated with the management user or the like, and the time stamp management system 1 refers to this. Then, it can be automatically input by the storage service cooperation unit 14. In this case, the user may log out each time the corresponding process is completed for the subsequent user process.

In addition, if you have not yet acquired an account for the time stamp storage service 3, and if possible due to the specifications of the time stamp storage service 3, there is a function to automatically or semi-automatically acquire an account on your behalf and then log in. You may be doing it.

For example, the time stamp storage service 3 is provided on the screen provided by the time stamp management server 10 to the user terminal 4 by a Web server program or the like (not shown) for issuing a time stamp for the electronic document 5 and receiving a request for storage of the TST 21. A field for inputting the items necessary for creating an account may be provided, and the account may be automatically acquired by proxy using the value input by the user. The input field may be newly provided, or a field in which general-purpose information can be input, such as a memo field on an existing input screen, may be appropriately substituted. For example, if you need to enter your e-mail address twice, you can have it entered twice in the memo field. If the items required for account acquisition have not been entered, an error may be returned to the user terminal 4.

The process of acquiring an account in the time stamp storage service 3 requires user operations such as displaying the terms of use and inputting consent, and processing in two stages of temporary registration and main registration. In this case, if necessary, the user may directly access the time stamp storage service 3 via the user terminal 4 to perform these operations.

As described above, the acquired account information (ID, password, etc.) is stored in the user DB 17 or the setting DB 18, for example, the identification information such as the user ID in the time stamp management system 1 of the target user, and the name, e-mail address, etc. Record it in association with the attribute information of. Reference information such as account acquisition date, usage, and acquisition purpose may be associated and recorded.

In the present embodiment, the storage service cooperation unit 14 further has various functions that complement and expand the functions of the time stamp storage service 3. At this time, for example, it may be linked with other units such as the electronic document processing unit 11, the time stamp issuing unit 12, and the time stamp management unit 13 (and the user terminal 4).

Specifically, for example, as described above, the storage status of TST21 in the time stamp storage service 3 and the deposit information acquired from the time stamp storage service 3 are stored in association with the bibliographic information and user information of the electronic document 5. It is managed by the status management DB 16. As a result, for example, even if the original electronic document 5 is changed and the owner's history is unknown, the target electronic document can be obtained without accessing the time stamp storage service 3 and performing a search or the like. It can be confirmed whether or not the TST 21 according to 5 is stored as a backup in the time stamp storage service 3.

Further, for example, when the account hierarchy can be divided into two layers, primary and secondary, as in the time stamp storage service 3 of IMPIT, the user management system of the time stamp management system 1 will be described later. It is also possible to virtually form a hierarchical structure of three or more layers in association with.

In addition, when accessing various menus, functions, and services provided by the time stamp storage service 3, including not only account creation but also storage of TST21, the service provided by the time stamp storage service 3 is not 24 hours 365 days. In addition, the available time of the service may be managed. That is, when the available time of the time stamp storage service 3 is limited by the date, day of the week, time zone, etc., the information such as the calendar, schedule, and timetable disclosed by the time stamp storage service 3 is retained. By doing so, the availability of each service is determined in advance.

For example, when trying to access the time stamp storage service 3 in order to use services such as account creation and storage of TST21, whether or not the service can be used in advance by referring to a calendar, a timetable, or the like. If the service is stopped, the usage request is suspended until the service is restarted (use is reserved internally when the service is restarted). Then, the usage request is made at the same time as the service is restarted. As a result, unnecessary access can be eliminated, and processing that is desirable to be executed as soon as possible, such as storage of TST21, can be executed quickly.

If the available time differs for each menu, function, or service in the time stamp storage service 3, the availability is managed in units of the menu or the like. For example, if the TST21 storage menu is not available at this time, but you can use it to create an account, you can create an account on your behalf and execute it more quickly when the TST21 storage menu is restarted. It becomes possible to do.

In addition, in the time stamp storage service 3, when the stored TST21 is transferred between accounts (including the case where it is deleted from the transfer source account and newly stored in the transfer destination account), the transfer is performed between accounts. It is also possible to manage the history in association with the user information of the time stamp management system 1 in the storage status management DB 16. This makes it possible to easily track even when the custodians of the TST 21 are changed one after another. For example, at least identification information that can identify an account (account ID, etc.), identification information that can identify storage (storage ID, hash value, etc.), and identification information that identifies transfer (serial number, etc.) are stored for tracking. Then, by extracting the record using the identification information that can identify the storage as a key, it is possible to display the identification information that can identify the past account in the order of history.

Further, instead of storing the TST 21 in the time stamp storage service 3 each time the TST 21 is issued by the time stamp station 2 for the electronic document 5, the plurality of electronic documents 5 are subjected to the instructions from the user. A plurality of issued TSTs 21 may be collectively stored in the time stamp storage service 3.

At this time, if the number of TST21s to be stored exceeds the upper limit of the number of TST21s that can be collectively stored in the time stamp storage service 3, it may be automatically divided into a plurality of times and collectively stored. However, a warning may be output to the user terminal 4 before storage. In the case of batch storage by dividing into a plurality of times, each storage request may be sequentially executed synchronously (waiting for a response of normal processing from the time stamp storage service 3 to make the next request) or asynchronously. (Multiple processing requests are made simultaneously or substantially simultaneously without waiting for a response from the time stamp storage service 3).

Further, in the time stamp storage service 3, when the TST 21 is stored, free input information such as a memo for facilitating the identification of the TST 21 can be usually added, and the input of the memo information is performed by the time stamp. It may be indirectly accepted as an input of memo information in the management system 1. For example, in the time stamp management system 1, the input displayed on the user terminal 4 when receiving a request for issuing a time stamp for the electronic document 5 from the user or when receiving a request for storing the TST 21 in the time stamp storage service 3. In the memo field on the screen, the memo information input to the time stamp storage service 3 can also be input.

Further, it is possible to extend the function of updating the storage period of the TST 21 of the time stamp storage service 3 to realize a longer storage period more easily and flexibly. For example, if the time stamp storage service 3 has a limitation on the storage period of TST21 and can renew it only within a predetermined renewal period before the expiration of the storage period, the user desires it as described later. If the storage period is longer than this, the storage period may be automatically renewed by proxy during the renewal period. On the other hand, if the expiration date of the TST21 itself is shorter than the storage period desired by the user, the expiration date of the TST21 is updated (or a time stamp is issued again), and this is stored in the time stamp storage service 3. It may be.

The user management unit 15 has a function of holding information of a user who uses the time stamp management system 1 in the user DB 17 and performing user authentication, access control, and the like. It may have a function of linking the information of the user DB 17 with an external personnel database or the like. Further, the input of the personal setting for each user may be accepted and recorded in the user DB 17 or the setting DB 18. Further, as described above, in order to extend the hierarchical structure of the account of the time stamp storage service 3 to virtually form a hierarchical structure of three or more layers, the user information in the time stamp management system 1 and the time stamp storage service 3 It may have a function of recording the information related to the association with the account information in the user DB 17 or the setting DB 18.

<Processing sequence (whole)>
FIG. 2 is a diagram showing an outline of an example of an overall processing flow related to time stamp issuance in the present embodiment. Further, FIG. 3 is a diagram schematically showing a transition state of the electronic document 5 in the present embodiment. In the following, the overall processing sequence will be described with reference to FIGS. 2 and 3.

First, the user transmits (uploads) the original electronic document 5 to the time stamp management server 10 by the user terminal 4 (S01). The file name and format of the electronic document 5 are not particularly limited, but in the example of FIG. 3, the file name of the electronic document 5 is "ABC.txt". As described above, in the present embodiment, a plurality of electronic documents 5 can be collectively handled as one set.

In the time stamp management server 10, the electronic document processing unit 11 creates a PDF file 111 to which the received electronic document 5 is attached (S02). In the example of FIG. 3, the file name of the PDF file 111 is "ABC.pdf". At this time, as described above, the time stamp station 2 predicts the time information to be given when the TST 21 is issued later, and the obtained predicted time information 112 is also described in the PDF file 111. After that, the hash value 113 of the PDF file 111 is calculated, and this is transmitted to the time stamp station 2 by the time stamp issuing unit 12 (S03).

The time stamp station 2 generates a TST 21 including the received hash value 113 and the time information 22 obtained by performing time authentication, and transmits this to the time stamp management server 10 (S04). In the time stamp management server 10, whether or not the predicted time information 112 described in the PDF file 111 and the time information 22 included in the TST 21 are matched by the electronic document processing unit 11 (or the time stamp issuing unit 12). Is confirmed (S05). If they match, the predicted time information 112 described in the PDF file 111 becomes the true authentication time.

When the predicted time information 112 described in the PDF file 111 and the time information 22 included in the TST 21 match, the electronic document processing unit 11 transfers the acquired TST 21 to a predetermined area (for example, a signature) of the PDF file 111. It is stored in the column) (S06). At this point, the file name of the PDF file 111 remains "ABC.pdf", as shown in the example of FIG. Further, since there is no change on the surface of the PDF file 111, the hash value 113 does not change either.

After that, the time stamp management unit 13 transmits the TST 21 to the time stamp storage service 3 via the storage service cooperation unit 14 (S07). The time stamp storage service 3 stores the received TST 21 (S08), creates deposit information 31 related to the TST 21, and transmits the deposit information 31 to the time stamp management server 10 (S09). In the time stamp management server 10, the time stamp management unit 13 (or the storage service cooperation unit 14) associates the received deposit information 31 with the bibliographic information related to the electronic document 5 and sets the storage status of the TST 21 in the storage status management DB 16. Record (S10).

Then, the electronic document processing unit 11 inserts the deposit information 31 into the file name of the PDF file 111 (S11). In the example of FIG. 3, for example, when the deposit information 31 is the character string "XXXXXX", this is inserted into the file name of the PDF file 111 to be "ABC_XXXXXX.pdf". In this case, as described above, since there is no change other than the file name of the PDF file 111, the hash value of the PDF file 111 does not change. In the actual deposit information 31, for example, identification information such as a time stamp token management number that can identify the TST 21 stored in the time stamp storage service 3 is set.

After that, the electronic document processing unit 11 transmits the PDF file 111 to the user terminal 4 (S12). As a result, in the user terminal 4, the original electronic document 5 is attached, the authentic authentication time (estimated time information 112) is described, the TST 21 is stored, and the deposit information 31 is added to the file name. 111 can be acquired (S13).

In the example of FIG. 3, the deposit information 31 is inserted into the file name of the PDF file 111. However, as described above, the deposit information 31 may be stored in the signature appearance area. Further, as described above, the authentication time (estimated time information 112) may not be described in the PDF file 111.

<Processing flow (time stamp issuance>
FIG. 4 is a flowchart showing an outline of an example of a processing flow related to time stamp issuance on the time stamp management server 10 in the present embodiment. First, the electronic document processing unit 11 receives the original electronic document 5 from the user terminal 4 (S21). Then, the received electronic document 5 is attached, and a PDF file 111 (electronic file) in which the predicted time information 112 is described is created (S22). Then, the hash value 113 of the created PDF file 111 is calculated and passed to the time stamp issuing unit 12 (S23). The time stamp issuing unit 12 transmits the acquired hash value 113 to the time stamp station 2 (S24), and receives the TST21 returned from the time stamp station 2 (S25). The reception of TST21 may be synchronous / asynchronous with the transmission of the hash value 113 in step S24.

After that, the electronic document processing unit 11 (or the time stamp issuing unit 12) determines whether or not the predicted time information 112 described in the PDF file 111 and the time information 22 included in the TST 21 match ( S26). As described above, in this determination, it may be determined whether or not there is a match in a predetermined unit instead of a strict match. If the predicted time information 112 and the time information 22 do not match (S26: No), the electronic document processing unit 11 changes the predicted time information 112 (S27), returns to step S22, and repeats the process again. It should be noted that a limit number of times for this iterative process is set, and when the iterative process is performed beyond the limit number of times, for example, the process may be temporarily stopped and an error may be notified to the user terminal 4. Good.

When the predicted time information 112 and the time information 22 match in step S26 (S26: Yes), the electronic document processing unit 11 stores the acquired TST21 in a predetermined area (for example, a signature line) of the PDF file 111 (for example, a signature line). S28). Further, the time stamp management unit 13 performs a TST storage process of transmitting the acquired TST 21 to the time stamp storage service 3 via the storage service cooperation unit 14 (S29). The contents of the unique processing in the TST storage processing will be described later.

After that, the electronic document processing unit 11 transmits the deposit information 31 related to the target TST21 transmitted from the time stamp storage service 3 to a predetermined area of the PDF file 111 (for example, an area where the hash value 113 does not change, such as a file name). Store in (S30). Then, the PDF file 111 is transmitted to the user terminal 4 (S31), and the process ends.

<Processing flow (TST storage)>
FIG. 5 is a flowchart showing an outline of an example of the flow of the TST storage process in the time stamp management server 10 in the present embodiment. The series of processes here corresponds to the process in step S29 in the example of FIG.

When the time stamp management unit 13 passes the TST 21 to be stored to the storage service cooperation unit 14 and instructs the time stamp storage service 3 to store the TST 21, the storage service cooperation unit 14 first receives the time stamp storage service 3. Check the service time (S41). For example, information such as a schedule, a calendar, and a timetable held in advance may be referred to, or the time stamp storage service 3 may be actually accessed and confirmed. As described above, depending on the service provision status of the time stamp storage service 3, the execution of all or part of the processing using the service may be suspended until the service is restarted.

When the service is available, it is determined whether or not there is an account of the time stamp storage service 3 related to the target user by referring to the user DB 17 and the setting DB 18 (S42). If an account already exists (S42: Yes), the target account information is acquired from the user DB 17 or the setting DB 18 and the process proceeds to step S47.

On the other hand, when the account does not exist yet (S42: No), the input items required for acquiring the account are acquired (S43). For example, as described above, on the screen provided by the time stamp management server 10 to the user terminal 4 by a Web server program or the like (not shown) for issuing a time stamp for the electronic document 5 and receiving a request for storage of the TST 21. A field for inputting items necessary for acquiring an account of the time stamp storage service 3 is provided, and the value input here is acquired. The input field may be newly provided, or a field in which general-purpose information can be input, such as a memo field on the existing input screen, may be appropriately substituted. Information that can be diverted from the user information in the time stamp management system 1 may be acquired from the user DB 17 or the like (S44).

When the information necessary for acquiring the account can be acquired, the storage service cooperation unit 14 accesses the time stamp storage service 3 and acquires the account on behalf of the acquired information (S45). Then, the acquired account information is associated with the user information of the time stamp management system 1 and recorded in the user DB 17 or the setting DB 18 (S46). In the example of FIG. 5, the account acquisition request is automatically made to the time stamp storage service 3 to acquire the account. However, as described above, the time stamp storage service 3 acquires the account. If it is a process that sometimes requires an operation by the user, the user may be made to perform an operation on the time stamp storage service 3 via the user terminal 4 as needed.

After that, using the existing or newly acquired account information associated with the target user, the time stamp storage service 3 is automatically or semi-automatically logged in on behalf of the user (S47). Then, the TST21 to be stored is transmitted to the time stamp storage service 3 to request storage (S48). Then, the deposit information 31 related to the storage of the target TST21 transmitted from the time stamp storage service 3 is received (S49), and the deposit information 31 received by the time stamp management unit 13 (or the storage service cooperation unit 14) is received. The bibliographic information related to the electronic document 5 is associated with the storage status of the TST 21 and recorded in the storage status management DB 16 (S50).

If an error occurs in the time stamp storage service 3 in response to the request for storage of TST21 in step S48, the time stamp storage service 3 sends an e-mail notifying the fact to the e-mail address registered for the target account. If the specification is to send to, the user can recognize that an error has occurred. On the other hand, in the case where the time stamp storage service 3 does not send an e-mail and only displays the fact that an error has occurred on the screen, for example, the storage service cooperation unit 14 grasps the screen contents and time stamps. An e-mail notifying that an error has occurred may be sent to the e-mail address registered for the target user in the management system 1.

<Processing flow (storage period management)>
FIG. 6 is a flowchart showing an outline of an example of a processing flow related to storage period management of TST21 in the present embodiment. As described above, for example, the time stamp storage service 3 has a limitation on the storage period of TST21 (for example, 10 years from the deposit) and is within a predetermined renewal period before the expiration of the storage period (for example, 6 months before the expiration of the storage period). ) May be able to update this. On the other hand, it is assumed that the user desires storage for a longer period than the storage period (including the updated storage period) in the time stamp storage service 3. In addition, the expiration date may be set in the TST21 itself issued by the time stamp station 2. Therefore, in the present embodiment, management such as automatically performing the process of extending the storage period for the time stamp storage service 3 is performed so as to realize the storage period desired by the user.

First, the time stamp management server 10 receives a notification from the time stamp storage service 3 that the stored TST 21 has entered the renewal period before the expiration of the storage period (S51). The notification is made, for example, by e-mail or the like to the account (user) who owns the target TST21. Instead of or in addition to the notification from the time stamp storage service 3, a notification given based on the storage period information independently managed by the time stamp management system 1 may be used.

After that, the time stamp management unit 13 refers to the storage status management DB 16 or the setting DB 18 to acquire information on the storage period set by the user (desired by the user) for the target TST 21 and the expiration date set in the TST 21. (S52). Then, it is determined whether or not it is necessary to update the expiration date of the TST 21 in order to realize the storage period set by the user (S53). That is, it is determined whether or not the expiration date set in TST21 is insufficient for the storage period set by the user.

When it is necessary to update the expiration date of the TST21 (S53: Yes), the time stamp station 2 updates (extends) the expiration date of the TST21 via the time stamp issuing unit 12 (S54). If the expiration date cannot be renewed, the time stamp may be issued again for the electronic document 5 related to the TST21 to obtain the TST21 having a new expiration date. Then, the TST21 having a new expiration date is newly stored in the time stamp storage service 3 by the same process as the process shown in the example of FIG. 5 (S55), and the process proceeds to step S62.

On the other hand, when it is not necessary to update the expiration date of the TST 21 (S53: No), it is next determined whether or not the storage period of the time stamp storage service 3 needs to be updated (extended) (S56). That is, it is determined whether or not the current storage period in the time stamp storage service 3 is insufficient for the storage period set by the user. When it is not necessary to update the storage period (S56: No), the process ends as it is. That is, the current storage period in the time stamp storage service 3 expires as it is, and the storage of the TST 21 ends.

On the other hand, when it is necessary to update the storage period (S56: Yes), the time stamp storage service 3 determines whether or not the storage period can be updated (S57). That is, it is determined whether or not the constraint condition such as the upper limit of the number of updates of the storage period in the time stamp storage service 3 is satisfied. When the storage period cannot be updated (S57: No), for example, the target TST21 is acquired by receiving a payment from the time stamp storage service 3, and this is performed by the same processing as that shown in the example of FIG. It is newly stored in the time stamp storage service 3 (S55).

On the other hand, when the storage period can be updated (S57: Yes), after confirming the service time of the time stamp storage service 3 (S58), the time stamp is stored using the account information associated with the target user. Log in to service 3 automatically or semi-automatically on your behalf (S59). Then, it requests the update of the storage period for the target TST21 (S60), and receives the new deposit information 31 after the storage period update for the target TST21 transmitted from the time stamp storage service 3 (S61). Then, the time stamp management unit 13 (or the storage service cooperation unit 14) updates the bibliographic information related to the electronic document 5 recorded in the storage status management DB 16 by the received deposit information 31 (S62).

After that, when the TST 21 is newly stored in step S55, the new deposit information 31 acquired from the time stamp storage service 3 is stored or updated in a predetermined area of the PDF file 111 (S63), and the process is completed. To do. If the deposit information 31 is not changed even if the storage period is updated in the time stamp storage service 3, that is, if the management is continued with the same deposit information 31, the subsequent processing related to the deposit information 31 is unnecessary. ..

Through the above series of processes, it is possible to extend the function of updating the storage period of the TST 21 of the time stamp storage service 3 to realize a longer storage period more easily and flexibly.

<Account management>
In the present embodiment, as described above, the user information such as the user ID in the time stamp management system 1 and the account information in the time stamp storage service 3 are managed in association with each other. As a result, it is possible to automatically access the time stamp storage service 3 on behalf of the target user by using the account information corresponding to the target user.

Here, for example, when the user information in the time stamp management system 1 has a multi-layered structure of three or more layers according to the hierarchical structure of the department or the like in cooperation with the personnel database or the like, the time stamp of IMPIT is stored. When the hierarchical structure of the account can only support up to two layers as in service 3, the hierarchical structure cannot be appropriately mapped as it is. The hierarchical structure of users and accounts means that lower-level users (general users) can operate and browse only information related to themselves, while higher-level users (master users) can operate and browse information. It means that you can operate and browse information related to all users under your control in addition to related information. In addition, operations such as registration / update of user information and account information related to subordinate users are also possible.

In the present embodiment, when the time stamp storage service 3 supports only two layers of primary (upper) and sub (lower) as the hierarchical structure of accounts, unique information for identifying each account (for example, "name"). And "email address") are appropriately set and managed in association with the user information in the time stamp management system 1, thereby virtually realizing a hierarchical structure of three or more layers. In the present embodiment, the time stamp storage service 3 can create a plurality of accounts by changing the "email address" even if the same "name" is used.

FIG. 7 is a diagram showing an outline of an example of account management of the time stamp storage service 3 in the present embodiment. In the figure, the hierarchical structure (three layers) of users in the time stamp management system 1 is schematically shown, and the account information (“name”, “email address”) in the time stamp storage service 3 assigned to each user is shown. ") Is also shown.

In the example of FIG. 7, in the time stamp storage service 3, a plurality of accounts in which different "email addresses" are set for the same "name" are created, and these accounts are mainly set as sub-accounts for each. By doing so, an example of virtually three layers is shown. Here, the accounts assigned to each user in the first and second layers at the top level have the same "name" as "AAAA", but are different because their "email addresses" are different. It is an account.

Here, the account assigned to each user in the second layer is used as the main account, and the sub-account created in the time stamp storage service 3 is assigned to each user in the third layer. As a result, a hierarchical structure can be formed between the second layer and the third layer.

On the other hand, although the first layer and the second layer are different accounts, the time stamp storage service 3 does not have a hierarchical structure. On the other hand, for example, only for the users in the first layer, authentication information such as account IDs and passwords related to all accounts having the same "name" can be associated and recorded in the user DB 17 and the setting DB 18 internally. The account assigned to each user in the second layer can also be used. As a result, the account assigned to the user in the first layer can be virtually treated like the administrator of the account assigned to the user in the second layer. In this case, it is appropriate that the content of the "name" (for example, "AAAA") is treated as information that identifies a set of users such as a department or an organization, not as information that identifies an individual user.

As described above, according to the time stamp management system 1 according to the embodiment of the present invention, the TST21 issued by the time stamp station 2 is acquired for the user's electronic document 5, and this is impIT. It can be stored in cooperation with the time stamp storage service 3 provided by a public institution such as. Then, after further expanding the function of the time stamp storage service 3, it is possible to realize a one-stop time stamp management service in cooperation with the time stamp issuing service by the time stamp station 2.

Although the invention made by the present inventor has been specifically described above based on the embodiments, the present invention is not limited to the above embodiments and can be variously modified without departing from the gist thereof. Needless to say. For example, the above-described embodiment has been described in detail in order to explain the present invention in an easy-to-understand manner, and is not necessarily limited to the one including all the described configurations. Further, it is possible to add / delete / replace a part of the configuration of the above-described embodiment with another configuration.

Further, each of the above configurations, functions, processing units, processing means and the like may be realized by hardware by designing a part or all of them by, for example, an integrated circuit. Further, each of the above configurations, functions, and the like may be realized by software by the processor interpreting and executing a program that realizes each function. Information such as programs, tables, and files that realize each function can be placed in a memory, a hard disk, a recording device such as an SSD (Solid State Drive), or a recording medium such as an IC card, an SD card, or a DVD.

Further, in each of the above figures, the control lines and information lines are shown as necessary for explanation, and not all the control lines and information lines in the implementation are necessarily shown. In practice, it can be considered that almost all configurations are interconnected.

In the above embodiment, the time stamp storage service 3 receives the TST 21 from the time stamp management server 10, stores the TST 21, creates deposit information 31, and transmits the deposit information 31 to the time stamp management server 10. However, the configuration is not limited to this. For example, after the time stamp storage service 3 stores the TST21, the user can independently access the time stamp storage service 3 to acquire (pay out) the desired TST21. Then, the TST21 acquired from the time stamp storage service 3 is compared with the TST owned by the user to confirm the identity, and when the identity is confirmed, the target electronic device is set at the authentication time at the time stamp station 2. It is possible to more reliably prove that Document 5 existed.

This identity confirmation may be performed manually by the user, but it can also be performed on the time stamp management system 1. For example, when the user requests the time stamp management server 10 to confirm the identity of the electronic document 5, the corresponding TST21 is acquired from the time stamp storage service 3, and the acquired TST21 and the time stamp management server 10 have the acquired TST21. Confirm the identity by comparing with TST21. Then, the confirmation result may be presented to the user together with the authentication time at the time stamp station 2.

The present invention can be used in a time stamp management system, a time stamp management method, and a time stamp management program that manages time stamp tokens issued for electronic documents.

1 ... Time stamp management system, 2 ... Time stamp station, 3 ... Time stamp storage service, 4 ... User terminal, 5 ... Electronic document,
10 ... Time stamp management server, 11 ... Electronic document processing department, 12 ... Time stamp issuing department, 13 ... Time stamp management department, 14 ... Storage service cooperation department, 15 ... User management department, 16 ... Storage status management DB, 17 ... User DB, 18 ... Setting DB, 21 ... TST, 22 ... Time information, 31 ... Deposit information,
111 ... PDF file, 112 ... Predicted time information, 113 ... hash value

Claims (9)

A time stamp management system that manages time stamp tokens including time information authenticated by a time stamp authority to prove the time when the user's electronic file existed and to detect falsification of the electronic file. ,
A time stamp management unit that manages information related to the time stamp token received from the time stamp station, and
Based on the instruction from the time stamp management unit, the time stamp token is sent to the time stamp storage service to request storage, and the deposit information returned from the time stamp storage service in response to the storage of the time stamp token. Has a storage service cooperation department, and has
The storage service cooperation unit obtains the account information corresponding to the user related to the time stamp token from the information of the association between the user information of each user and the corresponding account information of the time stamp storage service held in advance. Obtained and automatically logged in to the time stamp storage service using the acquired account information to request the storage of the time stamp token.
When the storage service cooperation unit does not have the account information corresponding to the user related to the time stamp token in the association information, the time stamp management unit automatically requests the time stamp storage service to acquire an account. system. In the time stamp management system according to claim 1,
The first hierarchical structure between two accounts in the time stamp storage service is configured by setting a plurality of accounts having the same value of any one of the information identifying the accounts as accounts of a predetermined hierarchy. Each account information in the first hierarchical structure is associated with each user in the second hierarchical structure of three or more layers configured among a plurality of users in the time stamp management system, and the associated information is provided. Recorded as a time stamp management system. A time stamp management system that manages time stamp tokens including time information authenticated by a time stamp authority to prove the time when the user's electronic file existed and to detect falsification of the electronic file. ,
A time stamp management unit that manages information related to the time stamp token received from the time stamp station, and
Based on the instruction from the time stamp management unit, the time stamp token is sent to the time stamp storage service to request storage, and the deposit information returned from the time stamp storage service in response to the storage of the time stamp token. Has a storage service cooperation department, and has
When the storage service cooperation unit receives a notification from the time stamp storage service that the first storage period of the time stamp token has expired, the second storage service cooperation unit desires the user regarding the time stamp token. A time stamp management system that automatically requests the time stamp storage service to update the first storage period when the storage period is longer than the first storage period. In the time stamp management system according to claim 3 ,
It said storage service linkage unit, before Symbol second storage period, storage of said time for long expiration date stamp token, the time stamp token expiration the time stamp management unit has acquired is updated Newly requested time stamp management system. In the time stamp management system according to claim 1,
A time stamp management system that stores the deposit information received by the storage service cooperation unit in an area that is not used for detecting falsification in the electronic file. In the time stamp management system according to claim 5 ,
The time stamp token includes a hash value obtained by hashing the electronic file.
The time stamp management system is an area that is not used for calculating the hash value. A time stamp management system that manages time stamp tokens including time information authenticated by a time stamp authority to prove the time when the user's electronic file existed and to detect falsification of the electronic file. ,
A time stamp management unit that manages information related to the time stamp token received from the time stamp station, and
Based on the instruction from the time stamp management unit, the time stamp token is sent to the time stamp storage service to request storage, and the deposit information returned from the time stamp storage service in response to the storage of the time stamp token. Has a storage service cooperation department, and has
The storage service cooperation unit acquires information related to the service provision time of the time stamp storage service, determines whether or not the predetermined service of the time stamp storage service can be used based on the information related to the service provision time, and determines whether or not the predetermined service of the time stamp storage service can be used. When the predetermined service is unavailable, information on the time when the predetermined service becomes available next is acquired based on the information on the service provision time, and a usage request is made when the time comes. A time stamp management system that does. A time stamp in a time stamp management system that manages a time stamp token including time information authenticated by a time stamp authority to prove the time when the user's electronic file existed and to detect falsification of the electronic file. It ’s a management method,
The time stamp management system
The process of transmitting the time stamp token received from the time stamp station to the time stamp storage service and requesting storage, and
The process of receiving the deposit information returned in response to the storage of the time stamp token from the time stamp storage service is executed .
In the step of requesting the storage, the account information corresponding to the user related to the time stamp token is obtained from the information of the association between the user information of each user and the corresponding account information of the time stamp storage service held in advance. And automatically log in to the time stamp storage service using the acquired account information to request the storage of the time stamp token.
In the step of requesting storage, if the association information does not include the account information corresponding to the user related to the time stamp token, the time stamp automatically requests the time stamp storage service to acquire an account. Management method. It functions as a time stamp management system that manages time stamp tokens including time information authenticated by the time stamp authority to prove the time when the user's electronic file existed and to detect falsification of the electronic file. It is a time stamp management program that lets a computer execute processing.
The process of sending the time stamp token received from the time stamp station to the time stamp storage service and requesting storage, and
The computer is made to execute the process of receiving the deposit information returned from the time stamp storage service in response to the storage of the time stamp token .
In the process of requesting storage, the account information corresponding to the user related to the time stamp token is obtained from the information of the association between the user information of each user and the corresponding account information of the time stamp storage service held in advance. And automatically log in to the time stamp storage service using the acquired account information to request the storage of the time stamp token.
In the process of requesting storage, if the association information does not include the account information corresponding to the user related to the time stamp token, the time stamp automatically requests the time stamp storage service to acquire an account. Management program.

Images