JP2001147898A - Electronic preserving method and device for guaranteeing originality and computer readable recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent the complication of the procedure of the update or reference of a document in a device for preserving a composite document so that the originality can be guaranteed. SOLUTION: At the time of receiving a plurality of contents files of an original to be newly prepared from the outside, a contents file hash value is calculated (S5). The hash value of data attribute information based on a new original identification number, data information, and contents file information is calculated and recorded (S8). Then, the hash value of the access log of the original is calculated and recorded (S10). Also, the hash value is calculated and enciphered based on hash collection obtained by combining the contents file hash value, the data attribute information hash value, and the access log hash value so that a hash file MAC can be prepared (S11). The hash collection is combined with the hash file MAC, and recorded in a large capacity storage medium (S12). Then, a preserved data list entry is prepared by combining the original identification number, the original attribute, the preparation date information, and the hash file MAC, and added to the large capacity storage medium (S13) to end the processing.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an originality assurance electronic storage method, apparatus, and recording medium for guaranteeing the originality of electronic data stored in a predetermined storage unit. The present invention relates to an originality assurance electronic storage method, apparatus, and recording medium that can efficiently guarantee the originality of a compound document.

[0002]

2. Description of the Related Art With the advancement of advanced information society, there is a demand for electronic storage of documents that have been required to be stored on paper. However, compared to paper documents, electronic documents can be altered without leaving traces, are invisible, and have poor long-term storage characteristics. Preservation is not legally permitted.

[0003] There are three approaches to solving this problem: technical solution (solution utilizing information system technology), organizational solution (operating rules are set, and solution by organizational operation), and institutional solution (misconduct is legal Such as banned by social systems). Combining these three approaches will solve the problem. However, there are problems that it takes time to resolve the system, and it is difficult to find out that the information system has violated the law. Further, in the case of an organizational solution, there is a problem that it is difficult to prove that there is no fraud in operation within the organization.

[0004] In response to this situation, the Japan Information Processing Promotion Agency has implemented the "Development of Originality Assurance Electronic Preservation System" project in 1997 as a part of the creative software development business, A technical solution for preserving the original was developed. The preservation system developed for the project will ensure the authenticity of electronic documents,
This makes it possible to ensure readability and storability at the same level as paper documents.

In order to ensure authenticity, when electronic data has been tampered with, it can be detected, and a history of accesses has been left. In addition, it is possible to distinguish the original from the copy of the electronic data so that the paper document can distinguish the original from the copy. This clarifies which electronic data is treated as having a preservation obligation. It is important to note that the technology for distinguishing originals from copies is different from copy protection or copyright protection. It does not matter how much the content of the original electronic data is copied, but the copy is treated as a copy to prevent uncertainty about the original.

In order to ensure readability, a protocol between a storage device and an external device is standardized so that stored electronic data can be reliably read through the protocol.

[0007] As for the preservability, it is possible to adopt an optical disk capable of long-term storage as compared with a hard disk or the like as a storage medium, and when the storage medium is taken out, the medium can be used. If an illegal process is performed, the process is performed so that it can be detected.

[0008] With this storage system, electronic data can be stored as an original, and the evidential ability (certification power) of electronic data can be enhanced.

Japanese Patent Application No. 11-090212, entitled "Electronic Assurance Method for Preserving Originality" and Japanese Patent Application No. 11-145340, "Prior Art of Electronic Preservation Method for Electronic Original Assurance" Computer-readable recording medium on which a program for causing a computer to execute the method is recorded ", JP-A-10-283262," File system and program storage medium ", Oo et al .: Development of originality assurance electronic preservation system-basic functions Realization-, Medical Imaging Technology, Vol. 16, No. 4,
Proceedings of JAMIT Annual Meeting '98 (199
8) Kanai et al .: Development of an Electronic Preservation System for Originality Guarantee -System Construction-, Medical Imaging Technology, Vol.
6, No.4, Proceedings of JAMIT Annual Meeting'9
8 (1998), Kokubu et al .: Development of an Electronic Preservation System for Originality Assurance, (Special) Published by the Information Processing Promotion Agency of Japan Creative Software Training Business and Electronic Commerce Promotion Business Final Result Presentation Papers Creative Software Training Business ( 1998), Kanai: Originality Assurance Electronic Preservation System, Vol. 34, No. 8, Government & ADP (1998).

The use of these techniques makes it possible to guarantee the originality of electronic data. This allows
Original documents, which had conventionally been legally required to be stored on paper, can now be stored as originals in the form of electronic data, and it is expected that the productivity of society as a whole will be improved by contributing to the promotion of a highly information-oriented society.

[0011]

The prior arts disclosed so far all assume that the original electronic document is a single file. However, with the spread of WWW technology in recent years, HTML, XML, SG
As seen in the ML, an electronic document is often composed of a plurality of files (hereinafter, an electronic document composed of a plurality of files is called a “composite document”). In order to save such a compound document in a form in which the originality is guaranteed, when using the conventionally disclosed technology, the plurality of files are combined into one file, and then the originality assurance electronic storage is performed. The method of saving the file in the device or saving each file as a separate original in the originality assurance electronic storage has to be adopted.

However, in the case of the former, an external application program using the originality assurance electronic storage device, for example, indicates from where to what corresponds to the data to be the first file and from to where to correspond to the data as the next file. Has to be managed and recorded. Furthermore, when original data is recorded on a removable medium such as a CD-R by the originality assurance electronic storage device, the content is read even when the removable medium is mounted on another common drive device such as a CD-R drive. The person who can output the data can improve the readability of the original data. However, there is a problem in that data that is put together in one lump to be treated as one original is in a special format and is difficult to handle as an external application.

In the latter case, the relationship between the originals becomes unclear even though the respective originals stored are elements that originally constituted one document, and they are separately managed. , There is a problem that it is edited.

In order to solve the above-mentioned problem, Japanese Patent Application No.
No. 173371, "Originality assurance electronic storage device, originality assurance electronic storage method, and computer-readable recording medium storing a program for causing a computer to execute the method", a compound document composed of a plurality of files is stored in one file. There is provided an originality assurance electronic storage method and apparatus having a function of managing the original data and capable of guaranteeing the originality of the original data.

However, Japanese Patent Application No. 11-173371
In the invention of No. 2, since the management of the hash value for each content and each version is complicated, the procedure of updating and referring to the document tends to be complicated.

The present invention has been made in view of the above situation, and has a function of managing a compound document composed of a plurality of files as one original data, and guarantees the originality of the original data. It is an object of the present invention to simplify management of a document hash value in an originality assurance electronic storage method, apparatus, and recording medium that can perform the method.
Another object of the present invention is to provide a processing method, an apparatus, and a recording medium that eliminate the complexity of procedures for updating and referencing a document, and that enhance the security of processing for starting and ending a program in a storage device. With that purpose.

[0017]

According to a first aspect of the present invention, there is provided an originality assurance electronic preservation method for preserving the originality of electronic data stored in a storage medium. All the internal management information recorded in the internal storage medium of the storage device is read, the read internal management information is encrypted with a master encryption key in the storage device, and the encrypted internal management information is stored in the internal storage device. It is characterized by including a program termination method of recording on a medium and terminating the program.

According to a second aspect of the present invention, in the originality assurance electronic storage method for assuring the originality of electronic data stored in a storage medium, when an external program termination request is received from an external storage apparatus, the internal storage medium of the storage apparatus is received. Recorded in the
Read the device encryption key for calculating the falsification detection information of the electronic data and the device decryption key corresponding to the device encryption key,
A program encryption method for encrypting the device encryption key and the device decryption key with a master encryption key in the storage device, recording the encrypted device encryption key and the device decryption key in the internal storage medium, and ending the program; It is characterized by including.

According to a third aspect of the present invention, in the originality assurance electronic storage method according to the first or second aspect, the master encryption key is stored in the program.

According to a fourth aspect of the present invention, in the originality assurance electronic storage method according to the first or second aspect, the master encryption key is stored in hardware in the storage device. is there.

According to a fifth aspect of the present invention, in the originality assurance electronic storage method for assuring the originality of electronic data stored in a storage medium, when a program of the storage device is started, the program is recorded on an internal storage medium of the storage device. Read the internal management information encrypted by the master encryption key, decrypt the encrypted internal management information by the master decryption key corresponding to the master encryption key, and replace the decrypted internal management information with the master decryption key. It is characterized by including a program starting method to be recorded on the internal storage medium.

According to a sixth aspect of the present invention, in the originality assurance electronic storage method for assuring the originality of electronic data stored in a storage medium, when a program of a storage device is started, the program is recorded on an internal storage medium of the storage device. A device encryption key for calculating tampering detection information of electronic data, encrypted by the master encryption key, and a device decryption key corresponding to the device encryption key, and reading a master decryption key corresponding to the master encryption key. Decrypting the encrypted device encryption key with a key, as a device encryption key, decrypting the encrypted device decryption key with the master decryption key, as a device decryption key, and decrypting the decrypted device encryption key and device decryption. A key is recorded on the internal storage medium, and a medium authentication code list for authenticating the storage medium, which is recorded on the internal storage medium, is read out. Reads the tampering detection code recorded with, for detecting the falsification of the medium authentication code list by using the device decryption key with the alteration detection code is obtained by comprising a program startup method.

According to a seventh aspect of the present invention, in the originality assurance electronic storage method according to the fifth or sixth aspect, the master encryption key and the master decryption key are held in the program. It is.

The invention of claim 8 is the originality assurance electronic storage method according to claim 5 or 6, wherein the master encryption key and the master decryption key are stored in hardware in the storage device. It is what it was.

According to a ninth aspect of the present invention, in the originality assurance electronic storage method for guaranteeing the originality of electronic data stored in a storage medium, when the storage medium is mounted on a storage device,
A medium identification number for identifying the storage medium recorded on the storage medium is read, and a falsification detection code (1) recorded together with a storage data list file of the storage medium is read. A medium authentication code list for authenticating the storage medium, which is recorded on a storage medium, is read, and a medium authentication code entry corresponding to the medium identification number is extracted from the medium authentication code list. Verify whether the falsification detection code matches the falsification detection code (1). If they do not match, release the mount. If they match, read the stored data list file from the storage medium. Using the falsification detection code (1) and the device decryption key to detect falsification of the stored data list file; Residual releases the mount when it is detected, the mount when tampering is not detected, it is obtained by comprising a storage medium mounting method.

According to a tenth aspect of the present invention, in the originality assurance electronic storage method for assuring the originality of electronic data stored in a storage medium, when a request for newly saving a plurality of content files as one original is received from outside. If the storage medium is not already mounted, an error is returned and the process is terminated.If the storage medium is mounted, attribute information corresponding to a new original is created, and the attribute information is received. Calculate a hash value (compression code) for each of the plurality of content files, create a hash list summarizing the calculated plurality of hash values,
Using the device encryption key stored inside the storage device, calculate a falsification detection code (1) for the hash list,
Storing the attribute information, the plurality of content files, the hash list, and the tamper detection code (1) in the storage medium of the storage device, creating a storage data entry including the tamper detection code (1), The stored data entry is added to the stored data list, a falsification detection code (2) is calculated for the stored data list using the device encryption key, and the falsification detection code (2) is stored together with the stored data list. A medium authentication code entry including the falsification detection code (2) is recorded on the storage medium, and the medium authentication code list for authenticating the storage medium in the internal storage medium of the storage device is included in the medium authentication code list. A code entry is added, a falsification detection code (3) is calculated for the medium authentication code list using the device encryption key, and the falsification detection is performed. Recording encoding (3) on the internal storage medium in both the medium authentication code list is obtained by comprising a method for storing an original to new.

According to an eleventh aspect of the present invention, in the originality assurance electronic storage method for assuring the originality of electronic data stored in a storage medium, a content read request for electronic data as original data stored in a storage device from outside is provided. Upon receipt,
If the storage medium is not already mounted,
Returning an error and terminating, if the storage medium is mounted, reads a storage data list file from the storage medium, and retrieves a storage data entry corresponding to an original specified externally from the storage data list file. Acquisition, taking out the falsification detection code (1) in the stored data entry, reading out the hash list recorded in the storage medium together with the electronic data corresponding to the original specified from the outside, and attaching to the hash list The falsification detection code (2) is taken out, and the falsification detection code (2) is compared with the falsification detection code (1). If the values are not the same, an error is returned in response to the content read request and the processing is terminated. If the value is a value, the falsification of the hash list is detected using the falsification detection code (2) and the device decryption key, When the remaining is detected exits with a failure to the content read request,
If no tampering is detected, the externally designated content data is read from the storage medium, and a hash value (1) corresponding to the read content data is read.
Is obtained from the hash list, a hash value (2) is calculated for the content data, and the hash value (2) is compared with the hash value (1). The method is characterized by including a method for referencing the original, which returns an error and terminates, and if the values are the same, returns the content data in response to the content read request and terminates.

According to a twelfth aspect of the present invention, in an originality assurance electronic storage device for assuring the originality of electronic data stored in a storage medium, external communication is performed via a network with a storage medium for storing electronic data. Port, an internal storage medium for storing parameters required to execute various programs, a program storage medium for storing various programs, and reading various programs stored in the program storage medium And a processor for executing the program having the function according to any one of claims 1 to 11 in the program storage medium.

A thirteenth aspect of the present invention functions to execute the originality assurance electronic storage method according to any one of the first to eleventh aspects or as an originality assurance electronic storage apparatus according to the twelfth aspect. It is characterized by a computer-readable recording medium that stores a program for causing the program to be executed.

[0030]

FIG. 1 is a diagram showing the configuration of an originality assurance electronic storage device (hereinafter abbreviated as "original storage device") according to the present invention.
A device which stores original electronic data and is accessed from the host computer 110 via a network. The device has a large-capacity storage medium 101, a communication port 102, a program storage medium 103, an internal storage medium 104, a timer 1
05 and a processor 106. The external system stores and reads electronic data from the host computer 110 to the original storage device 100 via a network (which may be a general communication path). Communication port 102
Is an interface unit for performing communication with the host computer 110 via a network, and comprises, for example, a communication modem such as a LAN card.

The large-capacity storage medium 101 is, for example, a magneto-optical disk or a CD-R, and the medium itself is the original storage device 1.
Although the other blocks may be removable from 00, the other blocks are physically integrated as the original storage device 100, and there is no external access other than via the communication port 102. It is a tamper-resistant device that has no direct access to each block. The level to ensure tamper resistance can be considered from a level that sticks a seal so that the housing can not be opened, to a level where the device will not operate if the housing is opened to a higher degree, Utilize such existing technologies. Since the processor processes only specified commands, it is impossible to make illegal access to the inside through the communication port 102.

The program storage medium 103 is a memory that stores various programs such as a main control program, a hash program, a key generation program, an encryption program, and a decryption program.
It comprises a PROM or a read-only ROM.

The internal storage medium 104 is a memory such as an EEPROM for storing parameters required for executing various programs. Specifically, the internal storage medium 104 includes an apparatus encryption key, an apparatus decryption key, a medium authentication code list, and a latest data identification. A number, a timer setting history file, an account management list, and the like are stored. The timer 105 includes a processor 106
Is a timer that counts the time that is acquired when the program is executed.

The processor 106 is a control device that reads and executes various programs stored in the program storage medium 103, such as a main control program, a hash program, a key generation program, an encryption program, and a decryption program.

In the example of the original storage device 100, a key generation program, an encryption program,
Although the system stores the decryption program and the like and executes the program by the processor, other hardware modules for performing the cryptographic processing, for example, a cryptographic LSI board, are incorporated in the original storage device 100, and the hardware module The key generation, encryption, and decryption processes may be performed by using. As an example of such hardware, for example, CSA7000 of ERACOM (Australia) is known. When using the hardware exemplified here, the key can be securely stored inside the hardware,
The master encryption key and the master decryption key used in the following description may be stored in the hardware.

The original storage device 100 records data requested to be stored by an external system in the large-capacity storage medium 101. At this time, in order to detect falsification of the data later, the original data is stored in the original data. A message authenticator (a digital signature when using a public key cryptosystem) is added using the secret key of the storage device 100 itself. Further, in order to detect unauthorized deletion of the data itself, a large-capacity storage medium 101 is required.
Also, a message authentication code (MAC: Message Authentication Code) is added to the list of data recorded in. Further, in order to detect unauthorized replacement of the large-capacity storage medium 101 (return to a past state, etc.), a pair of a medium identification number of the large-capacity storage medium 101 and a message authenticator for a data list of the medium is stored as an original. Apparatus 10
0 and recorded and managed. Also, the current time is obtained from the timer 105 built in the original storage device 100 so as to prevent the data creation date from being fraudulent, and is given as an attribute of the data.

Further, in the original storage device 100, attributes such as "temporary original", "original" and "copied" are added to the data and managed so that the original and the copy can be distinguished. When an external copy is requested for data to which the attribute of “original” is added, the attribute of “copied copy” is added to the copied data. This attribute is managed by the original storage device 100 itself and cannot be changed from outside. Remove the mass storage medium 101,
Even if the attribute is falsified externally, the original
When the large-capacity storage medium 101 is attached to the storage medium 0, tampering is detected.

FIG. 2 and FIG. 3 are diagrams showing the concept of an example of data stored in the originality assurance electronic storage device according to the present invention while guaranteeing the original. A data attribute information file in which one version is composed of a plurality of content files, and the plurality of versions and document attribute information are recorded;
One stored data is configured and managed by an access log file that records an access history and a hash file that manages a hash value of each file configuring the document.

In FIG. 2, the content has two contents at the version 1 stage, and the third and fourth contents increase when the version 2 is reached. This conceptually shows a state in which the th content has been deleted. The light-colored content means that only the content attribute information exists, and the content data file itself refers to the previous version of the content data file.

A processing sequence for guaranteeing the originality will be described below. (Outline of Processing) When the internal program of the original storage device 100 is activated, the validity of the internal management information is verified to confirm that the authentication code of each large-capacity storage medium 101 is correct.
Then, when mounting the large-capacity storage medium 101, the validity of the stored data list recorded in the large-capacity storage medium 101 is verified, and it is confirmed that the hash file MAC for each stored data is correct. Then, when actually accessing the original recorded on the large-capacity storage medium 101, the content, the attribute information, and the
Verify the validity of the access log.

Conversely, when the original is created or updated, a hash file MAC for verifying the validity of the original is calculated, and not only recorded with the original, but also stored in the mass storage medium 101. The hash file MAC is also recorded in the list. When dismounting, calculate the list MAC to verify the validity of the stored data list to protect the stored data list,
In addition to recording the list MAC together with the stored data list, the list MAC is also recorded in the medium authentication code list inside the original storage device 100. When the internal program of the original storage device 100 is terminated, a medium authentication code list MAC for verifying the medium authentication code list is calculated to protect the medium authentication code list, and is recorded together with the medium authentication code list. At the same time, the device encryption key used for the calculation of the medium authentication code list MAC is encrypted by the master encryption key incorporated in the program and recorded on the internal storage medium 104.

(Program Start Process) When the internal program of the storage device is started, the consistency of the internal management information is verified. The storage service technician may stop the program and perform internal maintenance.However, in order to confirm that no unauthorized tampering has been performed on the inside while the program was stopped, the internal storage medium The medium authentication code list is read from 104, and the medium authentication code list MAC attached thereto is verified. Before the verification, since the device encryption key and the device decryption key are encrypted by the master encryption key, they are decrypted by the master decryption key embedded in the program. If the verification fails, the program terminates without starting because there is a possibility that unauthorized tampering has been performed. If the verification is successful, the medium authentication code list is reliable, and the program starts normally.

(Program End Process) At the end of the program, the unmount process is executed for the mounted large-capacity storage medium 101. Then, the internal storage medium 10
4 is read out, its hash value is calculated and encrypted with the device encryption key to obtain a medium authentication code list MAC. The medium authentication code list MAC is added to the medium authentication code list and recorded in the internal storage medium 104. Further, the device encryption key and the device decryption key recorded in the internal storage medium 104 are encrypted with the master encryption key embedded in the internal program, and the process ends.

(Format processing of large-capacity storage medium) In order to make the large-capacity storage medium 101 usable, formatting processing is required. A medium identification number is assigned to the new large-capacity storage medium 101, and the medium identification number is recorded on the large-capacity storage medium 101 as a medium identification number file. Create an empty saved data list, calculate the list MAC for the saved data list and add it to the saved data list,
Large-capacity storage medium 101 as a saved data list file
To record. Then, the set of the list MAC and the medium identification number is added to the medium authentication code list of the internal storage medium 104 as a new entry of the medium authentication code list.
Medium authentication code list M for medium authentication code list
The AC is calculated, added to the medium authentication code list, and recorded in the internal storage medium 104. The process of adding the MAC to the medium authentication code list may be executed only in the program termination process. The structure of the media authentication code list is shown in the table below.

[0045]

[Table 1]

(Mounting Process) When the large-capacity storage medium 101 storing the original is mounted, the large-capacity storage medium 101 is mounted.
And reads the medium identification number file from the server to obtain the medium identification number. In the medium authentication code list recorded in the internal storage medium 104 of the storage device 100, the list MAC is acquired by referring to the entry corresponding to the attached large-capacity storage medium 101. The list MAC is compared with the list MAC assigned to the saved data list file recorded on the large-capacity storage medium 101, and it is verified whether the values are the same. If the values are not the same, the mount process fails because the saved data list file is invalid. If the values are the same, the stored data list file is read from the large-capacity storage medium 101, and it is verified whether the list MAC of the stored data list file is correct. If not, the mount process will fail. If correct, the stored data list is reliable and the mounting process is successful.

(Unmount Processing) Mass Storage Medium 10
When the mount of No. 1 is released, a hash value is calculated based on the saved data list file, and the hash value is encrypted with the device encryption key to obtain a list MAC. List MAC
Is added to the saved data list file and recorded on the large-capacity storage medium 101. Then, the medium authentication code list is read from the internal storage medium 104, the list MAC is updated for the medium authentication code entry corresponding to the medium identification number of the large-capacity storage medium 101 to be unmounted, and the list is stored in the internal storage medium 104. Record.

(Refer to the original) After the mounting process is successful,
When a reference to the original recorded in the large-capacity storage medium 101 is requested (specifically, the storage device receives a reference request specifying the original identification number), the entry of the corresponding original in the stored data list is deleted. Refer to the hash file MA
Get C. It is verified whether the hash file MAC and the hash file MAC assigned to the hash file of the corresponding document recorded on the large-capacity storage medium 101 have the same value. Since the validity of the stored data list has been confirmed at the time of the mounting process, if the values are not the same, the hash file is invalid and the reference process of the original fails. If the values are the same, the hash file of the document is read from the mass storage medium 101, and it is verified whether the hash file MAC of the hash file is correct. If it is not correct, the original reference processing fails. If correct, the hash file will be reliable. If, for example, reference to the first content file is requested from the designated original, a hash value corresponding to the first content file is extracted from the hash file, and the hash value is calculated from the content file. Verify that it matches the hash value. Since the validity of the hash file has already been verified, if they do not match, the content file is invalid and the original reference processing fails. If they match, the read content file is passed to the request source, and the original reference processing is successful.

(Original Original Creation Process) FIG. 4 is a flowchart for explaining a new original creation method in the embodiment of the present invention. When a new original is newly created (stored) from outside the original storage device 100, the following processing is performed.

First, a plurality of original content files to be newly created are received from the outside (step S1). It is determined whether the mounting process of the large-capacity storage medium 101 has been completed (step S2). If the mounting process has not been completed, an error process is performed and the process ends. If the processing is completed, the latest original identification number of the internal storage medium 104 is read. One is added to the read number to obtain a new latest original identification number, which is recorded in the internal storage medium 104 (step S3). Thereafter, the new latest original identification number is used as the original identification number of this original, a directory name is determined based on the number, and a directory is created in the mass storage medium 101 (step S).
4). Calculate a hash value for each received content file, and use it as a content file hash value.
The received content file is recorded under the created directory (step S5).

Next, the current time is calculated by the internal timer 105,
The latest timer ID is obtained from the internal storage medium 104, and date and time information is created from the current time and the latest timer ID (step S6). Data attribute information is created based on the new original identification number, date and time information, and content file information (step S7). A hash value is calculated based on the data attribute information, and is set as a data attribute information hash value. Large-capacity storage medium 1 using data attribute information as a data attribute information file
01 (step S8).

An access log of the original is created including the name of the user who has requested creation of the original (step S).
9). A hash value is calculated based on the access log, and is set as an access log hash value. The access log is recorded on the large-capacity storage medium 101 as an access log file (step S10). Content file hash value,
The data attribute information hash value and the access log hash value are combined to form a hash collection, a hash value is calculated based on the hash collection, the hash value is encrypted with the device internal encryption key, and a hash file MAC is obtained (step S11). . Here, the large-capacity storage medium 1 includes the hash collection and the hash file MAC.
01 as a hash file (step S1).
2). The configuration of the hash file is shown in the table below.

[0053]

[Table 2]

Here, when the version number is 0 and the content number is 1, it means a data attribute information file. When the version number is 0 and the content number is 2, it means an access log file.

Finally, a storage data list entry is created by combining the original identification number, the original attribute, the creation date and time information, and the hash file MAC, and the previous storage data list entry is added to the storage data list file of the large-capacity storage medium 101. Then (step S13), the process ends.

(Original Content Update Processing) When updating the original content, the validity of the original stored is basically verified by the procedure described in the original reference processing, and then the original is updated. The content is updated in the same procedure as the new creation process, and a falsification detection code for verifying the validity of the original is calculated, recorded, and managed.

[0057]

According to the originality assurance electronic preservation method and apparatus of the present invention, the management of the hash value of the document can be simplified, and the complicated procedure of updating and referring to the document can be eliminated. Also,
It is also possible to enhance the security of the process of starting and ending the program of the storage device.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of an original storage device according to the present invention.

FIG. 2 is a diagram showing the concept of an example of data stored in the original storage device according to the present invention while guaranteeing the original.

FIG. 3 is a diagram showing the concept of an example of data stored in the original storage device according to the present invention while guaranteeing the original.

FIG. 4 is a flowchart for explaining a method of newly creating an original in the embodiment of the present invention.

[Explanation of symbols]

100: Original storage device, 101: Large-capacity storage medium, 10
2 communication port 103 program storage medium 104
... internal storage medium, 105 ... timer, 106 ... processor, 110 ... host computer.

 ──────────────────────────────────────────────────続 き Continued on the front page F term (reference) 5B017 AA08 BA05 BA07 BB02 BB03 CA09 CA16 5B076 AB09 FA14 FA15 FA16 5B085 AE29

Claims (13)

[Claims] 1. An originality assurance electronic preservation method for preserving the originality of electronic data stored in a storage medium, wherein when an external program termination request is received from an external storage apparatus, the program is recorded in an internal storage medium of the storage apparatus. Reading all the internal management information, encrypting the read internal management information with a master encryption key in the storage device, recording the encrypted internal management information in the internal storage medium, and terminating the program. An originality assurance electronic preservation method comprising a termination method. 2. An originality assurance electronic preservation method for preserving the originality of electronic data stored in a storage medium, wherein when an external program termination request is received from an external storage apparatus, the program is recorded in an internal storage medium of the storage apparatus. Reading a device encryption key for calculating falsification detection information of electronic data and a device decryption key corresponding to the device encryption key, encrypting the device encryption key and the device decryption key with a master encryption key in the storage device, An originality assurance electronic storage method, comprising: recording the encrypted device encryption key and device decryption key in the internal storage medium and terminating the program. 3. The originality assurance electronic storage method according to claim 1, wherein the master encryption key is held in the program. 4. The originality assurance electronic storage method according to claim 1, wherein the master encryption key is stored in hardware in the storage device. 5. An originality assurance electronic preservation method for preserving the originality of electronic data stored in a storage medium, wherein when a program of a storage apparatus is started, a master program stored in an internal storage medium of the storage apparatus is used. Reading the internal management information encrypted with the encryption key, decrypting the encrypted internal management information with a master decryption key corresponding to the master encryption key, and storing the decrypted internal management information in the internal storage medium; An originality assurance electronic preservation method characterized by recording and including a method of starting a program. 6. An originality assurance electronic preservation method for preserving the originality of electronic data stored in a storage medium, wherein, when a program of the storage apparatus is started, a master program stored in an internal storage medium of the storage apparatus is activated. A device encryption key for calculating falsification detection information of electronic data and a device decryption key corresponding to the device encryption key, which are encrypted with the encryption key, are read out, and the encryption is performed using the master decryption key corresponding to the master encryption key. Decrypting the decrypted device encryption key as a device encryption key, decrypting the encrypted device decryption key with the master decryption key as a device decryption key, and storing the decrypted device encryption key and device decryption key in the internal storage. A medium authentication code list for authenticating the storage medium recorded on the internal storage medium is read out and recorded on the medium, and recorded together with the medium authentication code list. An originality assurance electronic storage method, comprising: reading out a falsification detection code that has been written, and detecting falsification of the medium authentication code list using the falsification detection code and the device decryption key. 7. The originality assurance electronic preservation method according to claim 5, wherein the master encryption key and the master decryption key are stored in the program. . 8. The originality assurance electronic storage method according to claim 5, wherein the master encryption key and the master decryption key are stored in hardware in the storage device. Electronic preservation method. 9. An originality assurance electronic storage method for assuring the originality of electronic data stored in a storage medium, wherein the storage medium is recorded in the storage medium when the storage medium is mounted on a storage device. A falsification detection code (1) recorded together with a saved data list file of the storage medium, and reads the storage medium recorded on an internal storage medium of the storage device. A medium authentication code list for authentication is read, a medium authentication code entry corresponding to the medium identification number is extracted from the medium authentication code list, and the tampering detection code in the medium authentication code entry is the same as the tampering detection code (1). Verifies whether they match, if not, unmounts. Reading the stored data list file from the medium, detecting the falsification of the stored data list file using the falsification detection code (1) and the device decryption key, and dismounting the mount if the falsification is detected; An originality assurance electronic preservation method, which includes a method of mounting a storage medium when not detected. 10. An originality assurance electronic preservation method for preserving the originality of electronic data stored in a storage medium, wherein when a request to newly store a plurality of content files as one original is received from the outside, the storage medium has already been received. If the file is not mounted, the process returns with an error.If the storage medium is mounted, attribute information corresponding to the new original is created. , A hash list in which the calculated plurality of hash values are put together is created, and a tampering detection code (1) is applied to the hash list using the device encryption key stored in the storage device. Calculating the attribute information, the plurality of content files, the hash list, and the falsification detection code (1). A storage data entry including the tampering detection code (1); adding the storage data entry to a storage data list of the storage medium; and storing the storage data entry using the device encryption key. Calculate a falsification detection code (2) for the data list, record the falsification detection code (2) together with the stored data list on the storage medium, and create a medium authentication code entry including the falsification detection code (2) Adding the medium authentication code entry to a medium authentication code list for authenticating the storage medium in an internal storage medium of the storage device, and falsifying the medium authentication code list using the device encryption key. Calculate a detection code (3) and record the falsification detection code (3) together with the medium authentication code list in the internal storage medium. Originality ensuring electronic storage method which comprises a method for. 11. An originality assurance electronic preservation method for preserving the originality of electronic data stored in a storage medium. In the originality preservation electronic preservation method, when a content read request of the original electronic data stored in a preservation device is received from outside, the content read request is already received. If the storage medium is not mounted, an error is returned and the process is terminated.If the storage medium is mounted, the storage data list file is read from the storage medium, and the storage data list file is read from the outside. A stored data entry corresponding to the specified original is obtained, and a falsification detection code (1) in the stored data entry is taken out and recorded on the storage medium together with the electronic data corresponding to the externally specified original. Reads the hash list, and detects a falsification detection code (2) assigned to the hash list The falsification detection code (2) is compared with the falsification detection code (1). If the values are not the same, an error is returned in response to the content read request and the processing is terminated. If the values are the same, the falsification detection is performed. Falsification of the hash list is detected using the code (2) and the device decryption key. If tampering is detected, an error is returned in response to the content read request, and the process ends. If tampering is not detected, Externally designated content data is read from the storage medium, a hash value (1) corresponding to the read content data is obtained from the hash list, and a hash value (2) is calculated for the content data. Comparing the hash value (2) with the hash value (1);
If it is not the same value, an error is returned to the content read request and the process ends. If the value is the same, the content data is returned to the content read request and the process ends. An originality assurance electronic preservation method, characterized in that: 12. An originality assurance electronic storage device for assuring the originality of electronic data stored in a storage medium, the storage medium storing the electronic data and an interface for communicating with the outside via a network. A communication port, an internal storage medium for storing parameters required for executing various programs, a program storage medium for storing various programs, a processor for reading and executing various programs stored in the program storage medium, and An originality assurance electronic storage device, comprising: a program having a function according to any one of claims 1 to 11 stored in the program storage medium. 13. A program for executing the originality assurance electronic storage method according to any one of claims 1 to 11, or for functioning as the originality assurance electronic storage device according to claim 12. A computer-readable recording medium that has been recorded.