JP2007060595A - Encryption decoding system, encryption apparatus, decoding apparatus, encryption method, decoding method, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an encryption decoding apparatus, capable of encrypting and decoding final decision history information, such as drawing up of a plan, permission, nonpermission, circulation, comments, while encrypting and storing the information, without accessing the server. <P>SOLUTION: This encryption apparatus 101 receives an input file by an input unit 102 and performs its encryption in an encryption portion 103. History information, held by an encrypted file, is encrypted by a sanction history information encryption portion 104. Concurrently with final decision history information encrypted by the encryption portion 104, the file encrypted by the encryption portion 103 is outputted as an output file of the encryption apparatus 101 by an output unit 105. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an encryption / decryption system suitable for encrypting and decrypting information, an encryption device, a decryption device, an encryption method, a decryption method, and a program for realizing these on a computer. .

  Conventionally, in the field of cryptographic technology, various technologies have been proposed to prevent information leakage. For example, a technology that encrypts information leakage prevention data in a shared file server using a hybrid encryption method that allows only a specific person to decrypt information using public key cryptography and common key cryptography. is there.

In addition, there is a so-called electronic settlement system that manages decision information for encryption / decryption operations on the client side in a server / client system.

  However, it is needless to say that new techniques are always required for preventing information leakage. In addition, in the case of an urgent decision-making case, the person on the decision-making route is on a business trip and cannot access the server, so the server client type electronic payment system in which normal decision-making information is recorded on the server side cannot be used. The problem of delayed approval occurs in large organizations. In addition, it is desirable that only the drafter and the finalist who can follow the specific approval route can view the settlement information as in the case of a company or government office.

  By the way, in the known technology, such approval information is encrypted, and the approval history information is encrypted with the approval information itself, and the approval history information is not necessarily transmitted to the server in the encryption / decryption exchange. A safe settlement could not be made without saving.

In other words, if there is a technology that enables encryption / decryption of decision information while encrypting and storing decision history information in the exchange of data with a third party, in order to solve the above problem It can be said that it is desired.

  The present invention solves the problems as described above, and is an encryption / decryption system, an encryption device, a decryption device, an encryption method, a decryption method suitable for encrypting and sharing information, An object of the present invention is to provide a program for realizing these on a computer.

  In order to achieve the above object, the following invention is disclosed in accordance with the principle of the present invention.

  An encryption / decryption system according to a first aspect of the present invention includes an encryption device and a decryption device, and is configured as follows.

  That is, the encryption device includes an input unit, an encryption unit, an approval history information encryption unit, and an output unit.

  Here, the input unit inputs a file to be encrypted into the encryption device.

  The encryption unit encrypts the file, data, or signal input to the input unit.

  On the other hand, the approval history information encryption unit encrypts the approval history information held in the file encrypted by the encryption unit.

  The output unit stores the file encrypted by the encryption unit and the decision history information encrypted by the decision history information encryption unit.

  Here, the encrypted approval history information is temporarily decrypted only by the decryption apparatus.

  The decryption apparatus includes an input reception unit, a decision history information browsing unit, and a decryption unit.

  Here, the input reception unit receives an encrypted file to be decrypted by the decryption device.

The approval history information browsing unit temporarily decrypts only the encrypted approval history information in the encrypted file input to the input receiving unit.

The decryption unit decrypts a portion of the encrypted file input to the input receiving unit, excluding the encryption decision history information.

  Further, in the encryption / decryption system of the present invention, the decision history information encrypted by the decision history information encryption unit includes all of the draft, and the operation types of permission, disapproval, and circulation for the input file to be encrypted. Or it can be characterized by being comprised from comment information and the time which those operated.

  An encryption device according to another aspect of the present invention is an encryption device in the above-described encryption / decryption system.

  A decryption apparatus according to another aspect of the present invention is a decryption apparatus in the above-described encryption / decryption system.

  An encryption method according to another aspect of the present invention is a method executed in the above encryption apparatus.

  A decoding method according to another aspect of the present invention is a method executed in the above decoding apparatus.

  A program according to another aspect of the present invention causes a computer to function as the above-described encryption device or decryption device, and causes the computer to execute the above-described encryption method or decryption method.

  The program can be recorded on a computer-readable information recording medium (including a compact disk, flexible disk, hard disk, magneto-optical disk, digital video disk, magnetic tape, or semiconductor memory).

  The information recording medium can be distributed and sold independently of the computer, and the program itself can be distributed and sold via a computer communication network such as the Internet.

  According to the present invention, an encryption / decryption system suitable for encrypting and sharing information, an encryption device, a decryption device, an encryption method, a decryption method, and a program for realizing these on a computer Can be provided.

  Embodiments of the present invention will be described below. The embodiments described below are for illustrative purposes and do not limit the scope of the present invention. Accordingly, those skilled in the art can employ embodiments in which each or all of these elements are replaced with equivalent ones, and these embodiments are also included in the scope of the present invention. .

  FIG. 1 is an explanatory diagram showing a schematic configuration of an embodiment of an encryption device of an encryption / decryption system according to the present invention. Hereinafter, a description will be given with reference to FIG.

  As shown in the figure, the encryption apparatus 101 accepts an input file by the input unit 102 and encrypts it by the encryption unit 103. The approval history information held by the encrypted file is encrypted by the approval history information encryption unit 104. The file encrypted by the encryption unit 103 and the decision history information encrypted by the decision history information encryption unit 104 are output together as an output file of the encryption device 101 by the output unit 105.

For example, when the input file is first encrypted by the encryption apparatus 101, “draft” and the date / time thereof are recorded as the approval history information, and the approval history information encryption unit 104 encrypts the approval history information.

  FIG. 2 is an explanatory diagram showing a schematic configuration of an embodiment of the decryption apparatus of the encryption / decryption system of the present invention. Hereinafter, a description will be given with reference to FIG.

As shown in this figure, the decryption apparatus 201 is composed of an input reception unit 202, a decryption unit 203, and an approval history information browsing unit 204. The input reception unit 202 receives an encrypted file to be decrypted and encrypts it. The part of the approved approval history information is temporarily decrypted by the approval history information browsing unit 204, and the decryption unit 203 excludes the encrypted approval history information from the encrypted file received by the input receiving unit 202. Is decrypted and output as a decrypted file.

  In this case, the history information encrypted by the approval history information browsing unit 204 is temporarily decrypted because the secret key is shared by the device that encrypted first and the secret key by some means. Only the decryption apparatus 201 is used, and not only the original file but also the approval history information can be safely shared.

  In order to obtain the encryption history information from the encrypted file received by the input receiving unit 202, the encrypted decision history information or the file's The part from the back to a specific bit can be determined as encryption decision history information.

  After the approval history information browsed by the approval history information browsing unit 204 is browsed, the history information is completely erased. That is, since the approval history information is accompanied by only an encrypted file in an encrypted form, extremely safe approval history management is realized.

  As described above, according to the present invention, an encryption / decryption system suitable for encrypting and sharing information, an encryption device, a decryption device, an encryption method, a decryption method, and a computer The program realized above can be provided and can be applied to the field of cryptographic communication.

  It is a schematic diagram which shows schematic structure of the encryption apparatus of the encryption / decryption system which concerns on embodiment of this invention.   It is a schematic diagram which shows schematic structure of the decoding apparatus of an encryption / decryption system.

Explanation of symbols

DESCRIPTION OF SYMBOLS 101 Encryption apparatus 102 Input part 103 Encryption part 104 Decision history information encryption part 105 Output part 201 Decryption apparatus 202 Input reception part 203 Decryption part 204 Decision history information browsing part

Claims (10)

An encryption / decryption system comprising an encryption device and a decryption device,
The encryption device is:
An input part for inputting the file to be encrypted,
An encryption unit for encrypting a file input to the input unit;
A decision history information encryption unit for encrypting decision history information held in the file encrypted by the encryption unit;
An output unit that outputs the file encrypted by the encryption unit and the decision history information encrypted by the decision history information encryption unit;
The decoding device
An input receiving unit for receiving an encrypted file;
An approval history information browsing unit for temporarily decrypting only encrypted approval history information among the encrypted files input to the input receiving unit;
Of the encrypted file input to the input receiving unit, comprising a decryption unit for decrypting the portion excluding the encryption decision history information,
The approval history information encrypted by the approval information history encryption unit of the encryption device can be temporarily decrypted only by the approval history information browsing unit of the decryption device. . The encryption / decryption system according to claim 1,
The approval history information encrypted by the approval history information encryption unit is composed of a draft, permission, disapproval, return, all or part of comment information for the input file, and the time at which they are operated. It is characterized by that.   The encryption apparatus in the encryption / decryption system of any one of Claim 1 to 2.   The decryption apparatus in the encryption / decryption system according to claim 1. An encryption method executed by an encryption device paired with a decryption device,
An input process for inputting a file to be encrypted,
An encryption step for encrypting the file input in the input step;
An approval history information encryption step for encrypting the approval history information held in the file encrypted by the encryption step;
An output step of outputting the encrypted file encrypted by the encryption step together with the decision history information encrypted by the decision history information encryption step,
The method, wherein the approval history information encrypted by the approval history information encryption step can be temporarily decrypted only by the decryption device. The encryption method according to claim 5, comprising:
The approval history information encrypted by the approval history information encryption step is composed of a draft, permission, disapproval, retraction, all or part of comment information for the input file, and the time at which they are operated. A method characterized by that. A decryption method executed by a decryption device paired with an encryption device,
An input receiving process for receiving an encrypted file;
A decision history information browsing step for temporarily decrypting decision history information encrypted by the encryption device;
A method comprising a decrypting step of decrypting a portion obtained by removing the encrypted decision history information from an encrypted file in the previous period. The decoding method according to claim 7, comprising:
In the approval history information browsing process, the approval history information to be temporarily decrypted is the draft, the permission, disapproval, return, all or part of the comment information for the file to be encrypted, and the time at which they were operated A method comprising:   A program causing a computer to function as the encryption device according to claim 3.   A program for causing a computer to function as the receiving device according to claim 4.

Images