JP2006127365A - Electronic document storage management system, electronic document storage management method, and electronic document storage management program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To archive an electronic document efficiently, to secure sure originality guarantee of the archived electronic document, and to secure a storage period management of the electronic document. <P>SOLUTION: The system comprises: an object to be archived specifying part 110 for executing retrieval of the electronic document on the basis of the specified retrieval conditions and specifying an electronic document to be a document to be archived in an electronic document data base 125 for storing electronic documents; and a signature imparting part 111 for applying an electronic signature to the document to be archived, performing data transfer from the electronic document data base 125 of the document to be archived to an external medium 150 and storing the data of the electronic signature to a signature data base 126 by tying them to the document to be archived. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an electronic document storage management system, an electronic document storage management method, and an electronic document storage management program.

  Various techniques for guaranteeing originality have been proposed. For example, in order to provide an electronic trail storage technique capable of providing objective evidence for an electronic document posting period on an information network, the first information processing apparatus is provided via the information network. An electronic trail storage method for storing a trail of electronic document data distributed to the second information processing apparatus from the time information when the second information processing apparatus obtained the electronic document data to the third information processing apparatus. And storing the electronic document data at a time specified by the time information stored in the third information processing apparatus (Patent Document 1). Have been proposed).

Another object of the present invention is to provide an originality assurance document management method for assuring the originality of an electronic file, in order to make it easy for the user to check the originality of the electronic file, Is input, includes a step of issuing a certificate stating that the corresponding electronic file has not been tampered with and that the electronic file is the latest version, and a step of outputting the issued certificate. An originality-guaranteed document management method (see Patent Document 2), which is characterized by the above, has been proposed.
JP 2004-5075 A JP 2001-306732 A

  The originality guarantee technique as described above relates to a technique for attaching an electronic signature to an electronic document and storing it. When storing electronic documents by applying such technology, normally, if all documents are stored as they are based on the storage obligation period specified for the document type, there will be a limit to the free space of the database etc. It will be.

  Therefore, a method of transferring the electronic document in the database as an archive to an external medium with a low unit price is assumed. However, an administrator or the like has to select an electronic document to be archived and an electronic document to be left on the database side, and it has been difficult to improve processing efficiency and labor.

  Also, if the originality of the archived electronic document cannot be guaranteed in the same way as the database side, we cannot respond to the requirement for originality assurance, but we propose a technology that guarantees the originality on both the database side and external media. It has not been.

  In addition, if the current time in the electronic document storage destination system has been illegally changed, etc., when deleting an electronic document for which the retention period has elapsed, the electronic document is deleted even if the retention period has not yet elapsed. There was also a problem that would be possible.

  Therefore, the present invention has been made in view of the above problems, and enables efficient archiving of electronic documents, reliable guarantee of the originality of archived electronic documents, and management of the storage period of electronic documents. It is a main object to provide an electronic document storage management system, an electronic document storage management method, and an electronic document storage management program that can be reliably performed.

  An electronic document storage management system of the present invention that solves the above problems is a system for storing and managing electronic documents, in an electronic document database storing electronic documents, searching for electronic documents based on a predetermined search condition The archiving target specifying unit for specifying the electronic document to be archived, and applying an electronic signature to the archiving target document from the electronic document database of the archiving target document to an external medium A signature adding unit that performs data movement and stores the digital signature data in the signature database in association with the archive target document (first invention).

  According to a second invention, in the first invention, the search condition specifies an electronic document with respect to at least one of an access frequency to the electronic document in the electronic document database, a last access date and time, and a data size of the electronic document. The archiving target specifying unit executes a search in the electronic document database based on the search condition, the access frequency is out of the predetermined frequency range, the last access date is out of the predetermined period range, and the data size is predetermined. It is characterized in that at least one electronic document outside the size range is specified as a document to be archived.

  According to a third invention, in the first or second invention, the signature assigning unit includes a hash value of the previous generation electronic signature data applied to the archive target document prior to the electronic signature scheduled to be provided at the present time. The digital signature data is generated by encrypting the hash value of the archiving target document with a secret key, and the electronic signature data is generated by giving the electronic signature data to the archiving target document. The generated electronic signature data is associated with the archive target document in the signature database and is stored in order of generation.

  According to a fourth invention, in any one of the first to third inventions, an expiration date of an electronic certificate assigned to the archiving target document stored in the electronic document database or an external medium, a predetermined institution terminal A certificate verification unit that confirms whether or not the certificate is revoked in the certificate revocation list and whether or not it has been tampered with, and obtains the hash value of the archive target document, and is assigned to the hash value and the archive target document A hash value verification unit that verifies a hash value of an archive target document included in the electronic signature data and verifies a hash value of the archive target document, and obtains a hash value of the data of the electronic signature target in the archive target document The public key in the hash value and the signature value included in the digital signature data attached to the archived document Apply and compares the hash value obtained by decoding, performs signature value verification archiving target document and a signature value verifying unit, comprising: a.

  According to a fifth aspect, in the third aspect, electronic signature data after a predetermined generation is searched from the electronic signature data of an archiving target document to be verified for originality in the signature database, and the electronic data after the predetermined generation is searched. The hash value of the previous generation electronic signature data included in the signature data is extracted, and the hash value is compared with the hash value obtained from the previous generation electronic signature data stored in the signature database. A signature integrity verification unit is provided that performs a process of confirming the originality of the document to be archived by recognizing the consistency of the digital signature data between generations if they match.

  According to a sixth aspect, in the fifth aspect, the signature integrity verification unit includes a digital signature data between an electronic signature data of an archiving target document to be an originality confirmation target and the electronic signature data after the predetermined generation. For the generation of electronic signature data, the originality confirmation process is sequentially repeated in the order of going back to the generation of the electronic signature data, and all the consistency of the electronic signature data between the generations is confirmed.

  According to a seventh invention, in any one of the first to sixth inventions, a time stamp issuance request is transmitted to a time stamp server that manages the current time with a predetermined accuracy or more, and the time stamp is received from the time stamp server. A time stamp acquisition unit to acquire is provided, and information related to the current time included in the time stamp acquired from the time stamp server is used for processing related to date and time.

  In an eighth aspect based on the seventh aspect, in the electronic document database storing the electronic document, the electronic document is searched based on a predetermined search condition, and the electronic document to be deleted is identified. The storage date and time of the deletion target document is recognized from the target specifying unit and the time stamp included in the electronic signature data attached to the deletion target document, and the storage date and time stamp acquisition unit is received from the time stamp server. The current time based on the acquired time stamp is compared, a storage period calculation unit for calculating a storage period, and whether or not the storage period exceeds a predetermined storage duty period, and the storage period is a predetermined storage A deletion determination unit that executes a deletion process of the deletion target document in the electronic document database when the duty period is exceeded. And butterflies.

  According to a ninth aspect of the present invention, there is provided a method for performing storage management of an electronic document by a computer, performing an electronic document search based on a predetermined search condition in an electronic document database storing the electronic document, and performing archiving An electronic document to be a document is specified, an electronic signature is given to the archive target document, data of the archive target document is transferred from the electronic document database to an external medium, and the electronic signature data is It is stored in a signature database in association with the archive target document.

  A tenth aspect of the invention is a program that causes a computer to execute a method for managing and storing electronic documents, and executes an electronic document search based on a predetermined search condition in an electronic document database storing the electronic document. A step of identifying an electronic document to be archived, and applying an electronic signature to the archived document to move data of the archived document from the electronic document database to an external medium, And storing the electronic signature data in a signature database in association with the document to be archived.

  In addition, the problems disclosed by the present application and the solutions thereof will be clarified by the embodiments of the present invention and the drawings.

  According to the present invention, it is possible to efficiently archive an electronic document and ensure the originality of the archived electronic document, and to reliably manage the storage period of the electronic document.

--- System configuration ---
Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 is a network configuration diagram including an electronic document storage management system according to this embodiment. The electronic document storage management system 100 (hereinafter, system 100) of the present invention can assume an originality assurance device. Such a system 100 reads a program 102 stored in a program database 101 such as a rewritable memory into a memory 103 and executes it by a CPU 104 as an arithmetic unit so as to realize a function for executing the electronic document storage management method of the present invention.

  In addition, the system 100 includes an input / output interface 105 such as various keyboards and buttons generally provided in a computer device, and a communication unit 106 that handles data exchange with an existing document management system 160 and an external medium 150. Have.

  The system 100 is connected to the external medium 150 via the network 130 such as the Internet, a LAN, or a serial interface communication line by the communication means 106, and stores data of a document to be archived. An instruction for archiving an electronic document is received from the document management system 160. Between the various functional units of the system 100 and the communication means 106, the I / O unit 107 executes data buffering and various mediation processes.

  Next, functional units that are configured and held by the system 100 based on the program 102 will be described. The system 100 includes an archive target specifying unit 110 that performs an electronic document search based on a predetermined search condition in the electronic document database 125 storing the electronic document, and specifies an electronic document to be archived. .

  The archive target specifying unit 110 specifies the electronic document with respect to at least one of the access frequency to the electronic document in the electronic document database 125, the last access date and time, and the data size of the electronic document. If there is, the electronic document database 125 is searched based on the search condition, and the access frequency is outside the predetermined frequency range, the last access date / time is out of the predetermined period range, and the data size is out of the predetermined size range. Such an electronic document is preferably specified as a document to be archived.

  In addition, the system 100 applies an electronic signature to the archiving target document, moves data of the archiving target document from the electronic document database 125 to the external medium 150, and converts the electronic signature data into the electronic signature data. A signature assigning unit 111 is provided that stores the signature database 126 in association with the archive target document.

  The signature attaching unit 111 applies the hash value of the previous generation electronic signature data applied to the archiving target document before the electronic signature scheduled to be provided at present and the hash value of the archiving target document. The electronic signature data is generated by performing encryption with a private key, and the electronic signature data is generated by giving the electronic signature data to the archive target document, and the generated electronic signature data is stored in the signature database 126. It is preferable to store the documents in order of generation in association with the archive target document.

  In addition, the system 100 determines the validity period of the digital certificate assigned to the archive target document stored in the electronic document database 125 or the external medium 150, whether or not to register the certificate in the certificate revocation list of a predetermined institution terminal, It is preferable to provide a certificate verification unit 112 that checks whether or not tampering has occurred.

  Further, the system 100 obtains a hash value of the archiving target document, collates the hash value with the hash value of the archiving target document included in the digital signature data attached to the archiving target document, It is preferable to provide a hash value verification unit 113 that performs hash value verification of the conversion target document.

  In addition, the system 100 obtains a hash value of data to be digitally signed in the archive target document, and applies a public key to the hash value and the signature value included in the digital signature data given to the archive target document It is preferable to provide a signature value verification unit 114 that compares the decrypted hash value and verifies the signature value of the archive target document.

  Further, the system 100 searches the signature database 126 for electronic signature data after a predetermined generation from the electronic signature data of the document to be archived that is the target of originality confirmation, and before the electronic signature data after the predetermined generation includes the electronic signature data. The hash value of the generation electronic signature data is extracted, and this hash value is compared with the hash value obtained from the previous generation electronic signature data stored in the signature database 126, and both hash values match. In this case, it is preferable to include a signature integrity verification unit 115 that performs the process of confirming the originality of the document to be archived by recognizing the consistency of electronic signature data between generations.

  The signature integrity verification unit 115 applies an electronic signature to all generations of electronic signature data between the electronic signature data of an archiving target document to be verified for originality and the electronic signature data after the predetermined generation. It is preferable that the originality confirmation process is sequentially repeated in the order of going back the generation of data to confirm all the consistency of the electronic signature data between the generations.

  In addition, the system 100 includes a time stamp acquisition unit 116 that transmits a time stamp issue request to the time stamp server 200 that manages the current time with a predetermined accuracy or higher and acquires the time stamp from the time stamp server 200. In the processing related to the date and time, it is preferable to use information on the current time included in the time stamp acquired from the time stamp server 200.

  In addition, the system 100 executes a search for an electronic document based on a predetermined search condition in the electronic document database 125 that stores the electronic document, and includes a deletion target specifying unit 117 that specifies the electronic document to be deleted. If provided, it is preferable.

  Further, the system 100 recognizes the storage date / time of the deletion target document from the time stamp included in the digital signature data attached to the deletion target document, and the time stamp acquisition unit 116 determines the storage date / time and the time stamp acquisition unit 116. It is preferable to provide a storage period calculation unit 118 that compares the current time based on the time stamp acquired from the server 200 and calculates the storage period.

  Further, the system 100 determines whether or not the retention period exceeds a predetermined retention obligation period, and when the retention period exceeds a predetermined retention obligation period, the electronic document database of the document to be deleted It is preferable to provide a deletion determination unit 119 that executes the deletion process at 125.

  Note that each of the functional units 110 to 119 in the system 100 described so far may be realized as hardware, or may be realized as a program stored in an appropriate storage device such as a memory or an HDD (Hard Disk Drive). Good. In this case, the CPU 104 reads the corresponding program from the storage device into the memory 103 and executes it in accordance with the execution of the program.

  The network 130 is not limited to the Internet, LAN, ATM line, dedicated line, WAN (Wide Area Network), power line network, wireless network, public line network, mobile phone network, serial interface communication line, etc. A network can also be adopted. If a virtual private network technology such as VPN (Virtual Private Network) is used, communication with improved security is established when the Internet is adopted. The serial interface is a serial transmission that sends data one bit at a time using a single signal line, and refers to an interface for connecting to external devices. Communication methods include RS-232C, RS-422, IrDA, USB, IEEE1394, fiber channel, etc. can be assumed.

--- Database structure ---
Next, the structure of the database used by the system 100 in this embodiment will be described. FIG. 2 is a diagram showing examples of data structures of (a) the electronic document database and (b) the signature database in the present embodiment.

  The electronic document database 125 is a database that stores electronic documents to be stored and managed in the electronic document according to this embodiment. The electronic document database 125 is a collection of records in which data such as storage date / time, average access frequency, last access date / time, and data size are associated with each other using, for example, a document ID as a key.

  The signature database 126 is a database that stores electronic signatures assigned to archived documents in order of generation. For example, the signature database 126 is a collection of records in which data such as an ID of a target electronic document, a signature date / time, a hash value of an electronic document, a hash value of a hysteresis signature, and a signature value are associated with each other using a signature ID as a key. The electronic signature data stored here will be described in detail later.

--- Outline of hysteresis signature ---
Next, a hysteresis signature, which is a signature verification technique applied when performing the process of guaranteeing the originality of an archiving target document in the present embodiment, will be described. FIG. 3 is a schematic diagram showing a processing flow of hysteresis signature in the present embodiment. Hysteresis signature is a technique in which a chain structure is provided between electronic signatures, and the security and validity of the signature can be maintained for a long period of time (see JP 2001-331104 A).

  As shown in FIG. 3, the hysteresis signature generation method includes (1) acquisition of an electronic document to be signed, and (2) electronic signature data of the previous generation related to the signature data of the previous generation from the signature database 126. Information such as the identifier of the first signature and the hash value of the electronic signature data of the previous generation (obtained by applying a hashing algorithm to the electronic signature data of the previous generation), (3) other information (the electronic signature object shown in FIG. 4) (4) create a hysteresis signature using the signature generation algorithm for the data obtained so far, and (5) newly create the created hysteresis signature in the signature database 126. It is the procedure of adding to.

  The information on the electronic signature target group includes a hysteresis signature version, an identifier of current electronic signature data, and current time information as shown in FIG. The information outside the range of the electronic signature target group includes information such as a certificate.

  Next, verification processing for the hysteresis signature will be described. FIG. 5 is a diagram showing a single verification example of a hysteresis signature in the present embodiment. There are two types of hysteresis signature verification processing: single verification and chain verification.

  The unit verification is a normal electronic signature verification method, which verifies three types: an electronic certificate, a hash value of an electronic document, and a signature value. In this single verification, (1) obtain the electronic document to be signed, check the validity of the electronic certificate, check the CRL (Certificate Revocation List), check whether the electronic certificate has been tampered with, (2) Verification of the hash value of the document: Using the hashing algorithm included in the electronic signature data, the electronic document is converted to the “document hash value”, the “document hash value” in the electronic signature data is obtained, and the “document hash” "Values" are compared, (3) signature value verification: a digital signature target group (see Fig. 4) is converted to "signature target hash value" using a hashing algorithm, and a public key is used as a signature value The procedure is such that “signature target hash value” is combined and “signature target hash value” is compared with each other.

  Next, the chain verification will be described. FIG. 6 is a diagram showing a chain verification example of a hysteresis signature in the present embodiment. The chain verification is a process of verifying the consistency between generations of electronic signatures in the signature database 126.

  This chain verification processing is performed in the signature database 126 by using a digital signature data (for example, verification) after a predetermined generation (that is, in the future direction of the archived document) from the electronic signature data of the archived document to be verified. Public signature data for the chain (which is publicly available for verification of the chain and cannot be tampered with) and extracts the hash value of the previous generation electronic signature data included in the electronic signature data after the predetermined generation. The hash value is compared with the hash value obtained from the previous generation electronic signature data stored in the signature database 126, and when the two hash values match, the consistency of the electronic signature data between the generations is recognized. The procedure is to do.

  In addition, with respect to the electronic signature data of all generations between the electronic signature data of the archiving target document to be verified for originality and the electronic signature data after the predetermined generation, the original data in the order of going back the generation of the electronic signature data It is assumed that the integrity confirmation process is sequentially repeated to confirm all the consistency of the electronic signature data between the generations.

---- Archiving electronic documents ---
The actual procedure of the electronic document storage management method will be described below with reference to the drawings. Various operations corresponding to the electronic document storage management method described below are realized by a program 102 that the system 100 reads into the memory 103 and executes. And this program 102 is comprised from the code | cord | chord for performing the various operation | movement demonstrated below.

  FIG. 7 is a flowchart showing an actual procedure 1 of the electronic document storage management method in the present embodiment. First, an electronic document archiving process will be described. In this process, the system 100 receives an archiving instruction from, for example, the existing document management system 160 (s1000), and extracts a search condition from the archiving instruction (s1001). In addition, the archive target specifying unit 110 searches the electronic document database 125 storing the electronic document based on the search condition, and specifies the electronic document to be archived (s1002). .

  The archive target specifying unit 110 specifies the electronic document with respect to at least one of the access frequency to the electronic document in the electronic document database 125, the last access date and time, and the data size of the electronic document. If there is, execute a search in the electronic document database 125 based on the search condition, and at least the access frequency is out of the predetermined frequency range, the last access date is out of the predetermined period range, and the data size is at least out of the predetermined size range. One of the electronic documents is specified as an archiving target document.

  Subsequently, the signature adding unit 111 of the system 100 searches the signature database 126 for the previous generation electronic signature data applied to the archive target document before the electronic signature scheduled to be provided at present, and converts it into a hash value. (S1003). Further, hash value conversion of the document to be archived is executed (s1004), and both the hash values are encrypted with the secret key of the system 100 to generate electronic signature data (s1005).

  The system 100 associates the generated electronic signature data with the archive target document in the signature database 126 and stores them in order of generation (s1006). Further, an electronic signature is performed by giving the electronic signature data to the archiving target document (s1007). The document to be archived with the electronic signature is moved from the electronic document database 125 to the external medium 150 (s1008), and the process ends.

--- Verification of originality ---
Next, the verification process of the originality of the document to be archived will be described. FIG. 8 is a flowchart showing the actual procedure 2 of the electronic document storage management method according to this embodiment. In this process, the certificate verification unit 112 of the system 100 determines the validity period of the given electronic certificate and the certificate of a predetermined institution terminal for the archive target document stored in the electronic document database 125 or the external medium 150. The presence / absence of registration in the revocation list and the presence / absence of falsification are confirmed (s1100).

  Further, the hash value verification unit 113 of the system 100 obtains the hash value of the archive target document and extracts the hash value of the archive target document included in the digital signature data attached to the archive target document (s1101). ). Furthermore, these hash values are collated, and hash value verification of the archive target document is performed (s1102).

  In addition, the signature value verification unit 114 of the system 100 obtains a hash value of data to be digitally signed in the archive target document, and uses a public key as a signature value included in the digital signature data attached to the archive target document. The hash value is decrypted by applying (s1103). These hash values are collated to verify the signature value of the archive target document (s1104).

  Next, the chain verification for confirming the consistency of electronic signature data between generations will be described. FIG. 9 is a flowchart showing an actual procedure 3 of the electronic document storage management method according to the present embodiment. In this processing, the signature integrity verification unit 115 of the system 100 uses the signature database 126 to generate an electronic signature after a predetermined generation from the electronic signature data (generation: na) of the archiving target document that is the target of the originality confirmation. Data (generation: n) is searched (s1200).

  Further, the hash value of the previous generation electronic signature data (generation: n−1) included in the electronic signature data (generation: n) after the predetermined generation is extracted (s1201). Then, this hash value is compared with the hash value obtained from the previous generation electronic signature data stored in the signature database 126, and it is determined whether or not both hash values match (s1203, s1204).

  If the two hash values do not match (s1204: NO), the system 100 cannot maintain the consistency of the electronic signature data between generations, that is, the digital signature data has been tampered with, for example, falsification between generations. Is recognized and an error is output (s1205), and the process is terminated.

  On the other hand, if the hash values match (s1204: YES), the system 100 recognizes the consistency of the electronic signature data between generations. Here, the signature integrity verification unit 115 calculates the digital signature data (generation: na) of the archiving target document that is the target of originality confirmation and the electronic signature data (generation: n) after the predetermined generation. For the electronic signature data of all generations (generation a), for example, a process of replacing electronic signature data (n) after a predetermined generation with the previous generation electronic signature data (generation: n−1) in step s1200 Signature data generations are sequentially repeated in the order of going back to check all the consistency of electronic signature data between generations (s1207: NO → s1200 to s1206).

  Consistency of electronic signature data of all generations (a generation) between the electronic signature data (generation: na) of the archiving target document and the electronic signature data (generation: n) after the predetermined generation Is completed (s1207: YES), the system 100 determines that the originality of the document to be archived has been confirmed (s1209), and ends the process.

  The time stamp acquisition unit 116 of the system 100 transmits a time stamp issuance request to the time stamp server 200 that manages the current time with a predetermined accuracy or more at a time corresponding to each of the above processes, and the time stamp server It is assumed that the time stamp is acquired from 200. In this case, the system 100 uses information on the current time included in the time stamp acquired from the time stamp server 200 in processing related to date and time.

---- Deletion of electronic document ---
Finally, a deletion process corresponding to the electronic document storage obligation period will be described. FIG. 10 is a flowchart showing the actual procedure 4 of the electronic document storage management method according to this embodiment. In this processing, the deletion target specifying unit 117 of the system 100 is based on predetermined search conditions (eg, document category, access frequency, last access date, data size, etc.) in the electronic document database 125 storing the electronic document. The electronic document is searched (s1300), and the electronic document to be deleted is specified (s1301).

  At this time, the storage period calculation unit 118 of the system 100 recognizes the storage date and time of the deletion target document from the time stamp included in the digital signature data given to the deletion target document (s1302). Further, the time stamp acquisition unit 116 transmits a time stamp request to the time stamp server 200 to acquire a time stamp (s1303).

  The storage period calculation unit 118 recognizes the current time based on the time stamp (s1304), compares the current time with the storage date and time, and calculates the storage period (s1305).

  Subsequently, the deletion determination unit 119 of the system 100 determines whether or not the storage period exceeds a predetermined storage duty period (s1306), and if the storage period does not exceed the predetermined storage duty period, (S1306: NO), the process is terminated. On the other hand, if the retention period exceeds a predetermined retention obligation period (s1306: YES), the deletion process of the document to be deleted in the electronic document database 125 is executed (s1307), and the process ends.

  According to the present invention, by automatically determining the electronic document to be archived on the system side, it is possible to reduce the burden on the registrant or administrator of the electronic document and to archive the document most suitable for the desired condition. it can. In addition, since an electronic signature can be verified in the archived electronic document according to the history of archiving, the originality equivalent to the electronic document managed on the system side can be ensured.

  In addition, in the present invention, processing related to the time is executed based on the time stamp obtained from the time stamp server, so even if the system date or the like is falsified, management of the electronic document storage duty period is ensured, It becomes possible to suppress illegal disposal of electronic documents.

  Further, since there is no problem even if the system date deviates from the current time, it is not necessary to strictly operate the system time management. Therefore, it is possible to reduce the maintenance cost for keeping the system date accurate and the cost for taking a separate procedure for preventing unauthorized time changes.

  Therefore, it is possible to efficiently archive the electronic document and ensure the originality of the archived electronic document, and it is possible to reliably manage the storage period of the electronic document.

  As mentioned above, although embodiment of this invention was described concretely based on the embodiment, it is not limited to this and can be variously changed in the range which does not deviate from the summary.

It is a network block diagram including the electronic document preservation | save management system in this embodiment. It is a figure which shows each data structure example of (a) electronic document database and (b) signature database in this embodiment. It is a schematic diagram which shows the processing flow of a hysteresis signature in this embodiment. It is a figure which shows the example of a specification of a hysteresis signature in this embodiment. It is a figure which shows the single verification example of a hysteresis signature in this embodiment. It is a figure which shows the chain verification example of a hysteresis signature in this embodiment. It is a flowchart which shows the actual procedure 1 of the electronic document preservation | save management method in this embodiment. It is a flowchart which shows the actual procedure 2 of the electronic document preservation | save management method in this embodiment. It is a flowchart which shows the actual procedure 3 of the electronic document preservation | save management method in this embodiment. It is a flowchart which shows the actual procedure 4 of the electronic document preservation | save management method in this embodiment.

Explanation of symbols

100 System 101 Program Database 102 Program 103 Memory 104 CPU
105 I / O interface 106 Communication means 107 I / O unit 110 Archive target specifying unit 111 Signature giving unit 112 Certificate verification unit 113 Hash value verification unit 114 Signature value verification unit 115 Signature integrity verification unit 116 Time stamp acquisition unit 117 Deletion target Identification unit 118 Retention period calculation unit 119 Deletion determination unit 125 Electronic document database 126 Signature database, signature chain database 130 Network 150 External medium 160 Document management system 200 Time stamp server

Claims (10)

A system for storing and managing electronic documents,
In an electronic document database storing electronic documents, an electronic document database is searched based on a predetermined search condition, and an archive target specifying unit that specifies an electronic document to be archived, and
An electronic signature is applied to the archiving target document, the data of the archiving target document is transferred from the electronic document database to an external medium, and the electronic signature data is linked to the archiving target document. A signature assigning section to be stored in the signature database;
An electronic document storage management system comprising: In claim 1,
The search condition specifies an electronic document for at least one of an access frequency to the electronic document in the electronic document database, a last access date and time, and a data size of the electronic document;
The archiving target specifying unit performs a search in the electronic document database based on the search condition, the access frequency is out of a predetermined frequency range, the last access date is out of a predetermined period, and the data size is out of a predetermined size range. An electronic document storage management system that specifies at least one of the electronic documents as an archiving target document. In claim 1 or 2,
The signature assigning unit uses a secret key for the hash value of the previous generation electronic signature data applied to the archive target document before the electronic signature scheduled to be assigned at present and the hash value of the archive target document The digital signature data is generated by encryption, the electronic signature data is generated by giving the digital signature data to the archive target document, and the generated digital signature data is stored in the signature database in the signature database. An electronic document storage management system characterized by being stored in order of generation linked to a document. In any one of Claims 1-3,
For the archiving target document stored in the electronic document database or the external medium, the expiration date of the granted electronic certificate, the presence or absence of registration in the certificate revocation list of a predetermined institution terminal, and the presence or absence of falsification are confirmed. A certificate validation unit;
A hash value of the archiving target document is obtained by obtaining a hash value of the archiving target document and comparing the hash value with the hash value of the archiving target document included in the digital signature data attached to the archiving target document. A hash value verification unit for performing verification;
A hash value obtained by obtaining a hash value of electronic signature target data in the archive target document and decrypting the hash value and a signature value included in the digital signature data attached to the archive target document by applying a public key A signature value verification unit for verifying the signature value of the document to be archived, and
An electronic document storage management system comprising: In claim 3,
In the signature database, the electronic signature data after a predetermined generation is searched from the electronic signature data of the archiving target document that is the target of originality confirmation, and the hash value of the previous generation electronic signature data included in the electronic signature data after the predetermined generation And the hash value is compared with the hash value obtained from the previous generation electronic signature data stored in the signature database, and if both hash values match, the electronic signature data between generations An electronic document storage management system comprising a signature integrity verification unit that performs originality confirmation processing of the document to be archived by recognizing the integrity of the document. In claim 5,
The signature integrity verification unit generates a generation of electronic signature data for all generations of electronic signature data between the electronic signature data of an archiving target document to be verified for originality and the electronic signature data after the predetermined generation. The electronic document storage management system is characterized in that the originality confirmation processing is sequentially repeated in order of going back to confirm all the consistency of the electronic signature data between the generations. In any one of Claims 1-6,
A time stamp issuance request is transmitted to a time stamp server that manages the current time with a predetermined accuracy or more, and a time stamp is obtained from the time stamp server. An electronic document storage management system characterized by using current time information included in a time stamp acquired from a time stamp server. In claim 7,
In the electronic document database storing the electronic document, the electronic document database is searched based on a predetermined search condition, and the deletion target specifying unit for specifying the electronic document to be the deletion target document;
The storage date and time of the deletion target document is recognized from the time stamp included in the digital signature data given to the deletion target document, and the storage date and time stamp and the time stamp acquired by the time stamp acquisition unit from the time stamp server are used. A storage period calculation unit that compares the current time based on the current time and calculates a storage period;
It is determined whether or not the retention period exceeds a predetermined retention obligation period, and when the retention period exceeds a predetermined retention obligation period, the deletion processing of the document to be deleted in the electronic document database is executed. A deletion determination unit;
An electronic document storage management system comprising: A method of performing storage management of electronic documents by a computer,
In the electronic document database storing the electronic document, the electronic document is searched based on a predetermined search condition, the electronic document to be archived is specified,
An electronic signature is applied to the archiving target document, the data of the archiving target document is transferred from the electronic document database to an external medium, and the electronic signature data is linked to the archiving target document. An electronic document storage management method comprising storing in a signature database. A program for causing a computer to execute a method for managing and storing electronic documents,
Performing an electronic document search based on a predetermined search condition in an electronic document database storing the electronic document, and identifying an electronic document to be archived; and
An electronic signature is applied to the archiving target document, the data of the archiving target document is transferred from the electronic document database to an external medium, and the electronic signature data is linked to the archiving target document. Storing in a signature database;
An electronic document storage management program comprising:

Images