JP2003242035A - Security system for electronic document, security management plug-in program, and security management method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a security system for electronic document, a security management plug-in program, and a security management method in which setting of password and authentication of user can be automatically performed without using man-bower. <P>SOLUTION: A user accessing the electronic document 131 is automatically authenticated based on the user information of an information terminal unit 2a, a password which is automatically generated based on the specific electronic information included in the object electronic document and registered in an authentication server 1 is received by the information terminal unit 2a from the authentication server 1, and thereby, the electronic document 131 can be browsed by releasing the security. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a security system for electronic documents, a security management plug-in program, and a security management method.

[0002]

2. Description of the Related Art In recent years, digitization of various documents has progressed, and a huge amount of electronic documents have been handled. In many companies, a method has been adopted in which confidential electronic documents inside are collectively stored and managed so that they can be used for viewing and editing from each terminal on the in-house LAN. In order to protect the security of the electronic document, we have set up a barrier to prevent access to the in-house LAN from the outside, but in many cases it is possible for anyone to access it from the in-house terminal, and security is often insufficient. . Therefore, in recent years, measures have been taken such as restricting the users who can use the terminal by a registration system, and providing security protection for each electronic document.

Generally, in order to ensure the security of an electronic document, the target electronic document is encrypted and then locked. Even if the electronic document is accessed by a browsing application or the like, it cannot be opened as it is, and it is necessary to enter the password set in advance for the electronic document. By inputting this password, the lock is unlocked and the encryption is released, and the electronic document can be viewed and edited.

[0004]

However, although the security of the electronic document can be ensured by this method, there are the following problems. (1) The security administrator needs to set a password for each electronic document, and needs to store the password for each electronic document after setting the password. It takes a lot of time to manage passwords for huge electronic documents. (2) The electronic document user must know the password of the electronic document to be used. For that purpose, the security administrator needs to inform the user of the password, and it is necessary to consider the security at the time of password contact. In addition, the user had to keep the password informed while keeping security in mind. (3) An electronic document user must input a password when using an electronic document. When processing an enormous amount of electronic documents, it is necessary to confirm the password for each electronic document and input the password, which is a considerable effort.

The present invention has been made in view of the above problems in the prior art, and is a security system for electronic documents and a security system in which the setting and input of a password and the authentication of a user are automatically performed without human intervention. The purpose is to provide a management plug-in program and a security management method.

[0006]

In order to ensure security, the inventor has set a password for unlocking an encrypted electronic document, inputting at the time of use, and authenticating a user who uses the electronic document. Is an indispensable element, paying attention to the fact that each person has human hands, and keenly considering automating each, and by providing the authentication server with the functions of user authentication and password management, the present invention Came to make.

That is, a security system for an electronic document according to the first invention of the present application, which is provided to solve the above-mentioned problems, includes a server including a user information storage means, a password storage means, and a user authentication means, and a security. There are provided at least one or more information terminal devices including a management unit and an electronic document browsing unit having a function of canceling the security of a secured electronic document, and an electronic document storage unit in which the secured electronic document is stored. A user registration function for registering user information unique to each of the information terminal devices in the user information storage means, connected to a network so that they can communicate with each other, and each of the security protected electronic documents. Automatically generate a password for unlocking the security A password generation / registration function for registering in the password storage means together with the document information, and user information of an information terminal device in which the electronic document browsing means is installed when a secured electronic document is accessed by the electronic document browsing means. Is automatically transmitted to the user authenticating means together with the secured electronic document information, and a communication function of receiving the password transmitted from the user authenticating means and notifying the electronic document browsing means is provided. The person authenticating means collates the user information received from the information terminal device with the user information registered in the user information storing means, and if they match, the electronic document registered in the password storing means is checked. A function to send the corresponding password to the security management means of the information terminal device of the user information transmission source was provided. And it features.

With this system, (1) the security administrator does not need to set a password for each electronic document, and the password for each electronic document is automatically saved in the authentication server, so the number of electronic documents is restricted. Without password management. (2) The electronic document user can use the electronic document without knowing the password of the electronic document to be used. In addition, there is no need to worry about security that has been associated with password management. (3) The electronic document user does not need to confirm and enter the password one by one when using the electronic document, which improves convenience.

In the electronic document security system according to the second invention of the present application, which is provided for solving the above-mentioned problems, in the first invention, the user information is terminal information unique to each information terminal device, and an information terminal. It is characterized in that any one or a combination of the registry information unique to each security management means installed for each device and the user information set at the time of installing the electronic document browsing means.

Thus, information for distinguishing and authenticating a plurality of information terminal devices (client terminals) connected to the network can be easily and automatically set. Further, the reliability of the user information can be enhanced by combining the terminal information, the registry information of the security management means, and the user information set when the electronic document browsing means is installed. Here, the user information includes network information (computer name, IP address, MAC address, etc.) of the information terminal device, registry information (user name, company name, serial number, etc.) at the time of security management means (plug-in) installation, and so on. Any one of the user information set at the time of installing the browsing application (or the editing application) or information on the combination thereof may be used.

An electronic document security system according to a third invention of the present application, which is provided for solving the above-mentioned problems, is the unique electronic document in which the password is included in the target electronic document in the second or third invention. It is characterized in that it is automatically generated based on information.

As a result, the password for unlocking and decrypting the encrypted electronic document is uniquely generated based on the electronic information such as binary information unique to the target electronic document. Passwords can be set without restrictions on the quantity and without human intervention.

An electronic document security management plug-in program according to a fourth aspect of the present invention provided to solve the above-mentioned problems is a user information storage means and a password storage means for canceling the security of a protected electronic document. And a server having a user authentication means for performing user authentication based on the user information and transmitting the password of the target electronic document, and an electronic document browsing means having a function of releasing the security of the protected electronic document. It is used in a network system in which at least one or more information terminal devices provided and an electronic document storage means for storing a secure electronic document are network-connected so that they can communicate with each other. Installed corresponding to each of the electronic document browsing means In a security management plug-in program for electronic documents, a user registration function for registering user information unique to each of the information terminal devices in the user information storage means, and a security canceling function for each security-protected electronic document. A password generation and registration function for automatically generating a password and registering the password together with the electronic document information in the password storage means;
When a secured electronic document is accessed by the electronic document browsing means, the user information of the information terminal device in which the electronic document browsing means is installed is sent to the user authentication means together with the secured electronic document information. And a communication function of automatically transmitting, receiving the password transmitted from the user authentication means, and notifying the electronic document browsing means.

With this plug-in program, (1) the security administrator does not need to set a password for each electronic document, and since the password for each electronic document is automatically saved in the authentication server, the number of electronic documents is increased. Password management is possible without restrictions. (2) The electronic document user can use the electronic document without knowing the password of the electronic document to be used. In addition, there is no need to worry about security that has been associated with password management. (3) The electronic document user does not need to confirm and enter the password one by one when using the electronic document, which improves convenience.

In the electronic document security management plug-in program according to the fifth invention of the present application, which is provided for solving the above-mentioned problems, in the fourth invention, the user information is terminal information unique to each information terminal device. , One of a combination of registry information unique to each security management means installed for each information terminal device and user information set at the time of installing the electronic document browsing means, or a combination thereof. And

Thus, information for distinguishing and authenticating a plurality of information terminal devices (client terminals) connected to the network can be easily and automatically set. Further, the reliability of the user information can be enhanced by combining the terminal information, the registry information of the security management means, and the user information set when the electronic document browsing means is installed. Here, the user information includes network information (computer name, IP address, MAC address, etc.) of the information terminal device, registry information (user name, company name, serial number, etc.) at the time of security management means (plug-in) installation, and so on. Any one of the user information set at the time of installing the browsing application (or the editing application) or information on the combination thereof may be used.

In the electronic document security management plug-in program according to the sixth invention of the present application, which is provided for solving the above-mentioned problems, the password is included in the target electronic document in the fourth or fifth invention. It is characterized in that it is automatically generated based on unique electronic information.

As a result, the password for unlocking and decrypting the encrypted electronic document is uniquely generated based on the electronic information such as the binary information unique to the target electronic document. Passwords can be set without restrictions on the quantity and without human intervention.

The electronic document security management method according to the seventh invention of the present application provided to solve the above-mentioned problems is a server provided with a user information storage means, a password storage means and a user authentication means, and security protection. At least one information terminal device having an electronic document browsing unit having a function of canceling the security of the stored electronic document, and an electronic document storage unit storing the protected electronic document, and communicating with each other. User information unique to each of the information terminal devices connected to the network is registered in the user information storage means, and a password for releasing security for each protected electronic document is stored in the password storage means together with the electronic document information. It is registered and stored in the electronic document storage means by the electronic document browsing means of the information terminal device. When the existing electronic document is accessed, the user information is automatically notified from the information terminal device to the user authentication means, and the user authentication means is provided with the user information notified from the information terminal device. It collates with the user information registered in the user information storage means, and if they match, the password registered in the password storage means corresponding to the electronic document is transmitted to the electronic document browsing means of the information terminal device, The electronic document browsing means releases the security of the electronic document protected by the password and displays it.

According to this security management method, (1) the security administrator does not need to set a password for each electronic document, and since the password for each electronic document is automatically saved in the authentication server, the number of electronic documents is increased. Password management is possible without restrictions. (2) The electronic document user can use the electronic document without knowing the password of the electronic document to be used. In addition, there is no need to worry about security that has been associated with password management. (3) The electronic document user does not need to confirm and enter the password one by one when using the electronic document, which improves convenience.

The electronic document security management method according to the eighth invention of the present application, which is provided for solving the above-mentioned problems, is the same as the seventh invention, wherein the user information is terminal information unique to each information terminal device, and information. One or a combination of registry information unique to each electronic document browsing means installed for each terminal device and user information set when the electronic document browsing means is installed. To do.

By this method, information for distinguishing and authenticating a plurality of information terminal devices (client terminals) connected to the network can be easily and automatically set. Further, the reliability of the user information can be enhanced by combining the terminal information, the registry information of the security management means, and the user information set when the electronic document browsing means is installed. Here, the user information includes network information (computer name, IP address, MAC address, etc.) of the information terminal device, registry information (user name, company name, serial number, etc.) at the time of security management means (plug-in) installation, and so on. Any one of the user information set at the time of installing the browsing application (or the editing application) or information on the combination thereof may be used.

A security management method for an electronic document according to a ninth invention of the present application, which is provided for solving the above-mentioned problems, is the method of the seventh or eighth invention, wherein the password is unique to the target electronic document. It is characterized in that it is automatically generated based on electronic information.

According to this method, the password for unlocking and decrypting the encrypted electronic document is uniquely generated based on the electronic information such as the binary information unique to the target electronic document. It is possible to set a password without human intervention, without being restricted by the quantity.

[0025]

BEST MODE FOR CARRYING OUT THE INVENTION A configuration of an embodiment of an electronic document security system according to the present invention will be described below with reference to the drawings. Here, as an example, a PDF (Portable Document) is used as an electronic document.
A description will be given of a case where a browsing application such as Acrobat Reader is used as a browsing means of the electronic document of the nt Format) format, but the present invention is limited to a specific format of the electronic document and the type of the browsing application. is not.

(Example 1) 1. System Configuration FIG. 1 is an overall configuration diagram showing a configuration of an embodiment of an electronic document security system according to the present invention.
The system includes an authentication server 1 and a plurality of client terminal groups 2
And are connected via the network 3, and can communicate with each other.

(1) Authentication Server 1 The authentication server 1 registers an authentication application 11 that authenticates a client terminal that has accessed a PDF file protected by security, and user information of a client terminal that is permitted to connect to the network. A user information storage device 12 that is stored therein, a PDF file storage device 13 that stores a PDF file encrypted by an editing application, and a password storage device 14 that stores a password corresponding to the PDF file encrypted by the editing application. And an editing application 15 that creates and edits a PDF file, and encrypts and decrypts the PDF file, and a security management plug-in application 16 that is incorporated in the editing application 15 as a part of the function and has unique registry information. (Hereinafter referred to as a plug-in). Of these, the editing application 15 and the plug-in 16 may be omitted. Also,
The PDF file storage device 13 may be connected to the outside of the authentication server 1 in a communicable manner as an external storage device capable of storing a PDF file.

(2) Client Terminal Group 2 Each of the client terminals 2a to 2i includes a display device (not shown) such as a liquid crystal display, and browsing applications 22a to 22i (22a only such as Acrobat Reader capable of browsing PDF files). Corresponding to each of the applications 22a to 22i, and plug-ins 24a to 24i (only 24a is shown) incorporated as a part of the functions and individually having registry information. Of these, the browsing application 22
a to 22i may be editing applications. Further, the client terminals 2a to 2i are information terminal devices, and may be mobile communication terminal devices such as mobile phones in addition to personal computers having a communication function.

(3) Plug-in 16, 24a to 24i Authentication server 1 and / or client terminals 2a to 2i
plug-ins 16, 24a-24 installed on i
i is a client terminal registration function having the following functions; when a certain client terminal (for example, 2a) is newly connected to the network 3, the plug-in (2
4a) registers the user information of the client terminal in the user information storage device 12. Here, the user information is the network information (computer name,
Any one of these (IP address, MAC address, etc.), registry information (user name, company name, serial number, etc.) at the time of plug-in installation, or user information set at the time of installation of the browsing application (or editing application) or these This is information on the combination, and is used to authenticate the client terminal (user) by the authentication application 11 of the authentication server 1.

Password generation / registration function; when incorporated as part of the function of the editing application,
In addition, when the PDF file is created or edited by the editing application, and the PD file is encrypted and locked.
A password is automatically generated from the binary information of the F file and stored in the password storage device 14 together with the PDF file information.

Communication function: -1: PD with security protection stored in the PDF file storage device 13
When the F file is accessed by the browsing application (22a) of the client terminal (for example, 2a) and is to be opened, the plug-in (24a) incorporated in the browsing application (22a) is the user of the terminal (2a). The information is automatically transmitted to the authentication application 11 of the authentication server 1 together with the information of the PDF file. -2: Receive the password transmitted from the authentication application 11 of the authentication server 1 and notify the browsing application (22a) or the editing application.
The information stored in the authentication server and the communication information between the client terminal group 2 and the authentication server 1 are all encrypted.

2. Operation Flowchart Next, a method of using the security system of the present invention will be described based on the operation flow chart of FIG. Here, based on the configuration shown in FIG. 1, it is assumed that the user information of the client terminal group 2 is registered and stored in the user information storage device 12 of the authentication server 1. (S1) When the client terminal 2a is newly connected to the network 3, the plug-in 24a installed in that terminal displays a registration screen for the authentication server 1 on the display device of the terminal 2a, and the screen is displayed. The system administrator authenticates based on the information entered in. Then, only the authenticated terminal outputs the user information of the terminal to the authentication server 1
Can be stored in the user information storage device 12.

(S2) When saving the PDF file edited by the editing application 15 of the authentication server 1, the editing application 15 encrypts and locks the PDF file, and the plug-in 16 issues a password for releasing the PDF file. Generate automatically. The encrypted PDF file (hereinafter, referred to as an encrypted PDF file) is stored in the PDF file storage device 13, and its password is stored in the password storage device 14 together with the PDF file information. It should be noted that this work is performed by using the unencrypted PDF stored in the PDF file storage device.
You may call the file. Further, when the editing application is installed in the client terminal, this work may be performed in the client terminal. The encryption algorithm may be a general method such as EDE triple encryption.

Here, the method of assigning the password to the PDF file may be any method that is uniquely determined from the binary information of the PDF file. This eliminates the need for the administrator to manage the password. A specific example will be described below. As shown in FIG. 3, as the binary information of the PDF file, the file names (0101110
01011), date (01011000101000
0), ... In addition, the password generation method uses 3 bits as a unit, and 000 is a decimal number 7
, 001 is a decimal number 5, 010 is a decimal number 3, 011 is a decimal number 1, 100 is a decimal number 8 and 101 is a decimal number 6. The 110
It is assumed that the decimal number 4 is assigned to the above and the decimal number 2 is assigned to the corresponding 111. The operation of the plug-in under the above conditions will be described below. First, the plug-in reads the binary information of the PDF file by 3 bits in order from the beginning. Next, the above-mentioned decimal number is assigned to the read 3 bits. Therefore, "01011111001011010110 shown in FIG.
For the "00" information, "3286617" is automatically generated, and this becomes the password of the target PDF file.

(S3) Next, the user selects the plug-in 24.
Among the encrypted PDF files stored in the PDF file storage device 13 of the authentication server 1, using the browsing application 22a of the client terminal 2a in which a is incorporated, the encrypted PDF file 13 that the user desires to browse.
Access 1.

(S4) When the encrypted PDF file 131 is accessed, the plug-in 24a incorporated in the browsing application 22a sends the information of the encrypted PDF file 131 and the user information of the terminal 2a to the authentication server 1.

(S5) When the authentication server 1 receives the information of the encrypted PDF file 131 and the user information of the terminal 2a, the authentication application 11 of the authentication server 1 stores the user information stored in the user information storage device 12. Is searched for, and authentication and non-authentication are performed based on whether or not the user information of both parties matches.

[Authentication] (S6) If the user information of the terminal 2a received by the authentication server 1 matches the user information stored in the user information storage device 12, the authentication application 11
Retrieves the password corresponding to the encrypted PDF file 131 from the password storage device 14 and sends it to the client terminal 2a. Plug-in 2 of client terminal 2a
4a uses the received password as a browsing application 22
Then, the browsing application 22a releases the security of the encrypted PDF file 131 by the notified password, decrypts it, and displays it on the display device.

[In case of non-authentication] (S7) If there is no information that matches the user information of the terminal 2a received by the authentication server 1 in the user information stored in the user information storage device 12. The authentication application 11 sends a non-authentication signal to the client terminal 2a. The plug-in 24a of the client terminal 2a displays the password input screen on the display device based on the received non-authentication signal. At this time, the user is the target PD
Know that the F file is secure.

(S8) The user who confirms the password input screen displayed on the display device has the encryption P
Enter the password for the DF file 131. If the entered password is correct, plug-in 24a
Removes the security of the encrypted PDF file 131 by the password, decrypts it, and displays it on the display device.

Further, the encrypted PDF file 131 is illegally connected to the network 3 from the outside like the terminal 5 of FIG.
When the browsing application 52 is accessed, since the plug-in that mediates the user authentication does not exist, the process after the step (S4) is not performed and the browsing cannot be performed.

Further, when the plug-in 54 is installed, the registration screen for the plug-in 54 to the authentication server 1 is displayed on the display device of the terminal 5, and only the user authenticated by the system administrator registers. It is possible to carry out security checks by people.

In addition, the PDF file creation or editor can set the usage authority for each PDF file and each user at the stage of encrypted storage for security protection. Specifically, "read display", "print", "paste annotation", "copy", "take out",
Whether or not "attachment takeout" and "screenshot" can be used. It is also possible to set the expiration date.

Next, the configuration of another embodiment of the electronic document security system according to the present invention will be described below with reference to the drawings. (Example 2) 1. System Configuration FIG. 4 shows a security management information device 6 in one embodiment of the electronic document security system according to the present invention.
FIG. 1 is a configuration diagram of one unit (hereinafter referred to as a PC). PC
6 is a display device such as a liquid crystal display (not shown)
And an authentication application 61 for authenticating a user who has accessed a secured PDF file.
A user information storage device 62 for registering and holding user information of a user who is permitted to use a PDF file; a PDF file storage device 63 for storing a PDF file encrypted by an editing application; and an editing application. A password storage device 64 for storing a password corresponding to the encrypted PDF file,
Create and edit PDF files, encrypt and decrypt,
Browsing and editing application 65 that can be browsed
And security management plug-in applications 66a to 66h (hereinafter referred to as plug-ins) that are installed for each user (including the administrator) and are installed as a part of the functions in the browsing / editing application 65 and have unique registry information. Equipped with. Further, the PDF file storage device 63 may be connected to the outside of the PC 6 in a communicable manner as an external storage device capable of storing a PDF file.

(2) Plug-ins 66a-66h Plug-ins 66a-66h installed on the PC 6
Is a user registration function having the following functions; when a plug-in (for example, 66a) is newly installed in a PC 6 for a certain user, the plug-in (66a) itself has a user information storage device 62.
Register the user information of the plug-in in. Here, the user information is any one of the registry information (user name, company name, serial number, etc.) at the time of installing the plug-in or the combination of these, and the authentication application 61 allows the user (user) To obtain the certification of.

Password generation / registration function; when the password is incorporated as a part of the function of the browsing / editing application 65 and the PD is used by the browsing / editing application 65.
When the F file is created or edited and then encrypted and locked, a password is automatically generated from the binary information of the PDF file and stored in the password storage device 64 together with the PDF file information.

2. Operation Flowchart Next, a method of using the security system in the PC 6 will be described. The operation flow at this time is a flow obtained by rereading the operation flowchart of FIG. (S61) When the plug-in 66a is newly installed on the PC 6, the plug-in 66a itself displays the user registration screen on the display device of the PC 6, and the system administrator permits the user registration screen based on the information input on the screen. Only the user can be authenticated. Then, only the authenticated user can store the user information of the plug-in 66a in the user information storage device 62.

(S62) When the PDF editor saves the PDF file edited by the viewing / editing application 65, the viewing / editing application 65 saves the PDF file.
The F file is encrypted and locked, and the password for unlocking the F file is automatically generated by the plug-in 66a.
The encrypted PDF file (hereinafter referred to as an encrypted PDF file) is stored in the PDF file storage device 63, and its password is stored in the password storage device 64 together with the PDF file information. In addition, this work is P
An unencrypted PDF file stored in the DF file storage device may be called up. The encryption algorithm may be a general method such as EDE triple encryption.

Here, the method of assigning the password to the PDF file may be any method that is uniquely determined from the binary information of the PDF file. This eliminates the need for the administrator to manage the password.

(S63) Next, when the user uses the browsing / editing application 65, the user calls the plug-in 66a unique to the user, and the PDF file storage device 63 is called.
Of the encrypted PDF files stored in, the user accesses the encrypted PDF file 631 desired to be browsed. The user can call his or her plugin by confirming with the password for the plugin.

(S64) When the encrypted PDF file 631 is accessed, the plug-in 66a notifies the authentication application 61 of the information of the encrypted PDF file 631 and the user information of the plug-in 66a.

(S65) The authentication application 61 uses the information of the encrypted PDF file 631 and the plug-in 66.
Upon receiving the notification of the user information of a, the authentication application 61 searches the user information stored in the user information storage device 62, and performs authentication and non-authentication depending on whether the user information of both users matches or does not match.

[Authentication] (S66) If the user information of the plug-in 66a received by the authentication application 61 matches the user information stored in the user information storage device 62, the authentication application 61 retrieves the password corresponding to the encrypted PDF file 631 from the password storage device 64 and notifies the plug-in 66a. The plug-in 66a notifies the browsing / editing application 65 of the received password, and the browsing application 65 unlocks and decrypts the security of the encrypted PDF file 631 by the notified password and displays the decrypted PDF file 631 on the display device.

[In case of non-authentication] (S67) When there is no information in the user information stored in the user information storage device 62 that matches the user information of the plug-in 66a received by the authentication application 61. First, the authentication application 61 notifies the plug-in 66a of a non-authentication signal. The plug-in 66a displays the password input screen on the display device based on the received non-authentication signal. At this time, the user knows for the first time that the target PDF file is protected.

(S68) The user who confirms the password input screen displayed on the display device inputs the password of the encrypted PDF file 631 desired to be browsed. If the entered password is correct, the browsing / editing application 65 unlocks and decrypts the security of the encrypted PDF file 631 with the password and displays it on the display device.

Even if an outsider illegally accesses the encrypted PDF file 631 with the browsing / editing application 65, the process after step (S64) is not performed because there is no plug-in for mediating user authentication. Can not do it.

【The invention's effect】

According to the present invention, the security of an electronic document can be automatically secured without human intervention. Therefore, the user only has to specify the encrypted PDF file he / she wants to browse, does not have to enter the password, and can browse without having to be aware that the PDF file is encrypted. . In other words, the user does not even notice that the PDF file is encrypted. The user knows that the PDF file has been encrypted for the first time when the encrypted PDF file is brought out of the closed environment such as the intranet to the open environment. That is, there is no room for the user to know in advance the existence of the password given to the encrypted PDF file, and therefore the encrypted PDF file cannot be opened outside the network where the security system is established, and the confidentiality of the encrypted PDF file is kept. Can be held. Further, the system administrator is freed from the trouble of setting a password for each electronic document and the trouble of password management.

[Brief description of drawings]

FIG. 1 is an overall configuration diagram of an embodiment of an electronic document security system according to the present invention.

FIG. 2 is an operation flowchart diagram in the embodiment of the electronic document security system according to the present invention.

FIG. 3 is a conceptual diagram of automatic password generation of an electronic document in an embodiment of the electronic document security system according to the present invention.

FIG. 4 is an overall configuration diagram of another embodiment of the electronic document security system according to the present invention.

[Explanation of symbols]

1 ... Authentication server 2 ... Registered client terminal group 3 ... Network 5 ... Unregistered client terminal 6 ... Security management information device 11, 61 ... Authentication application 12, 62 ... User information storage device 13, 63 ... PDF file Storage device 14, 64 ... Password storage device 15 ... Editing application 16, 24a ... 24f, 24g, 24h, 24
i, 66a ... 66f, 66g, 66h ... Security management plug-in application 2a ... 2f, 2g, 2h, 2i ... Client terminal 22a ... 22f, 22g, 22h, 22i, 52
... Browsing application 65 ... Browsing and editing applications 131, 631 ... Encrypted PDF file

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) H04L 9/00 673A F term (reference) 5B009 SA00 TB13 VC01 5B017 AA03 BA05 CA16 5B082 GA11 HA08 5B085 AE02 AE03 AE23 BA07 BC02 BE04 BG02 BG03 BG07 CA02 CA04 5J104 AA07 EA01 EA03 KA01 MA01 NA05 PA14

Claims (9)

[Claims] 1. A server provided with a user information storage means, a password storage means, and a user authentication means, a security management means, and an electronic document browsing means having a function of releasing the security of a protected electronic document. At least one or more information terminal devices provided, and an electronic document storage means for storing a protected electronic document are network-connected so that they can communicate with each other, and the security management means is unique to each of the information terminal devices. A user registration function for registering user information in the user information storage means, a password for security release is automatically generated for each electronic document to be protected, and the password is stored together with the electronic document information in the password storage. Password generation registration function to register in the means, and secure When the electronic document is accessed by the electronic document browsing means, the user information of the information terminal device in which the electronic document browsing means is installed is automatically transferred to the user authentication means together with the secured electronic document information. A communication function of transmitting the password, receiving the password transmitted from the user authenticating means, and notifying the electronic document browsing means, wherein the user authenticating means includes the user information and the user information received from the information terminal device. Collate with the user information registered in the storage means, and if they match, transmit the password corresponding to the electronic document registered in the password storage means to the security management means of the information terminal device of the user information transmission source. An electronic document security system characterized by having a function of 2. The user information is set when the terminal information unique to each information terminal device, the registry information unique to each security management means installed for each information terminal device, and the electronic document browsing means are installed. The electronic document security system according to claim 1, wherein any one of the user information and a combination thereof is used. 3. The electronic document security system according to claim 1, wherein the password is automatically generated based on unique electronic information included in the target electronic document. 4. A user authentication for authenticating a user based on a user information storage means and a password storage means for releasing the security of a protected electronic document and the user information, and transmitting the password of the target electronic document. A server having a means, at least one or more information terminal devices having an electronic document browsing means having a function of releasing the security of a secured electronic document, and an electronic document storage means for storing the secured electronic document. In a security management plug-in program for electronic documents, which is used in a network system configured to be connected to each other so that they can communicate with each other, and is installed corresponding to each of the electronic document browsing means provided for each information terminal device. , User information unique to each of the information terminal devices A user registration function for registering in the user information storage means, a password for security release is automatically generated for each of the electronic documents to be protected, and the password is registered in the password storage means together with the electronic document information. A password generation / registration function and user information of an information terminal device in which the electronic document browsing means is installed when the secured electronic document is accessed by the electronic document browsing means together with the secured electronic document information. A security management plug-in program for an electronic document, comprising a communication function of automatically transmitting to the user authenticating means, receiving a password transmitted from the user authenticating means, and notifying the electronic document browsing means. . 5. The user information is set when the terminal information unique to each information terminal device, the registry information unique to each security management means installed for each information terminal device, and the electronic document browsing means are installed. The security management plug-in program for an electronic document according to claim 4, wherein any one of the user information and a combination thereof is used. 6. A security management plug for an electronic document according to claim 4, wherein the password is automatically generated based on unique electronic information included in the target electronic document. In-program. 7. A server having a user information storage means, a password storage means and a user authentication means, and at least one or more electronic document browsing means having a function of canceling the security of a protected electronic document. The information terminal device and the electronic document storage means for storing a secure electronic document are network-connected so that they can communicate with each other, and user information unique to each of the information terminal devices is stored in the user information storage means. A password for releasing security for each registered and protected electronic document is registered in the password storage means together with the electronic document information, and is stored in the electronic document storage means by the electronic document browsing means of the information terminal device. When a document is accessed, the user information from the information terminal device is used as user authentication means. Automatically notified, the user authentication means collates the user information notified from the information terminal device with the user information registered in the user information storage means, and if they match, the electronic document is added. The password registered in the corresponding password storage means is transmitted to the electronic document browsing means of the information terminal device, and the electronic document browsing means unlocks and displays the security of the electronic document protected by the password. A characteristic electronic document security management method. 8. The user information is set when the terminal information unique to each information terminal device, the registry information unique to each electronic document browsing means installed for each information terminal device, and the electronic document browsing means are installed. 8. The security management method for an electronic document according to claim 7, wherein any one of the user information and the combination thereof is used. 9. The security management method for an electronic document according to claim 7, wherein the password is automatically generated based on unique electronic information included in the target electronic document. .