Method, device and system for managing electronic fingerprints of electronic documents

Abstract

The invention provides a method, equipment and a system for managing electronic fingerprints of electronic files. The method of managing an electronic fingerprint of an electronic document includes receiving an original electronic fingerprint of an original electronic document in a separate manner from the original electronic document via a communication network from an original electronic document generation device that generates the original electronic document, receiving at least one of a first identifier of an original electronic file generation device, original storage path information of an original electronic file and original meta-information of the original electronic file, and an original electronic fingerprint from the original electronic file generation device; and storing at least one of the first identifier of the original electronic file generation device, the original storage path information of the original electronic file, and the original meta-information of the original electronic file in the storage unit to map to the original electronic fingerprint, and wherein the original electronic fingerprint of the original electronic file is received while the original electronic fingerprint of the original electronic file is received. The original electronic file is not received.

Description

[0001] This application is a divisional application of a Chinese invention patent application filed on November 21, 2018, with application number 2018800760877 (PCT / KR2018 / 014320), and invention name “Methods, devices and systems for managing electronic fingerprints of electronic files”. Technical Field

[0002] The present disclosure relates to methods, devices and systems for managing electronic fingerprints of electronic files. Background Art

[0003] Conventionally, there is a system that generates an electronic fingerprint such as a hash value of an image generated by hardware such as an image information processor, and manages the electronic fingerprint together with the image information processor or in combination with the image to verify the authenticity and integrity of the image. However, there has not yet been introduced a system that is capable of managing an electronic fingerprint such as a hash value of an image in an integrated manner separately from the image information processor or the image that generates the image, and is therefore suitable for protecting personal privacy related to the image while verifying the authenticity and integrity of the image.

[0004] In addition, conventional systems that generate and manage electronic fingerprints of images are able to manage the electronic fingerprints of images generated by an image information processor to verify the authenticity of the image, or are able to support digital forensics processing to use the image as evidence in a court of law, etc., but cannot generate and manage the electronic fingerprints of the image in conjunction with the image information processor that generates the image.

[0005] In addition, there is fundamentally no technical basis provided for not only generating and managing electronic fingerprints of hash values ​​of image files such as those generated by software such as an image generating program to verify the authenticity and integrity of the image files, but also for managing hash values ​​in an integrated manner separately from the software and the image files to verify the authenticity of the image files generated by the image generating program and to track the illegal collection of images or the use of images for purposes other than the original purpose.

[0006] Accordingly, there is a need for a method that can manage the electronic fingerprint of an image in an integrated manner separately from the image information processor or the image processing software that generates the image to verify the authenticity and integrity of the image or fundamentally prevent the infringement of personal privacy caused by the image. Summary of the invention

[0007] Technical issues

[0008] Embodiments of the present disclosure relate to methods, devices, and systems for managing electronic fingerprints of electronic files, which are capable of managing the electronic fingerprints of electronic files in an integrated manner separately from the electronic files, thereby improving management efficiency compared to directly managing electronic files in an integrated manner, ensuring that the public has confidence in the verification of the authenticity and integrity of electronic files, and effectively preventing the illegal collection, alteration, and use of electronic files, thereby providing a basis for ensuring that personal information is managed objectively and transparently, for example in compliance with international norms such as the General Data Protection Regulation (GDPR) formulated to enhance the privacy of EU citizens.

[0009] Aspects of the present disclosure are not limited thereto, and other aspects not mentioned herein will be clearly understood by a person of ordinary skill in the art from the following description.

[0010] Solutions to the Problem

[0011] According to an embodiment of the present disclosure, a method for managing an original electronic fingerprint of an original electronic file includes: receiving the original electronic fingerprint of the original electronic file from an original electronic file generating device that generates the original electronic file via a communication network in a manner separate from the original electronic file; receiving original storage path information and the original electronic fingerprint of the original electronic file from the original electronic file generating device; and receiving a first identifier of the original electronic file generating device and at least one of the original meta-information of the original electronic file and the original electronic fingerprint from the original electronic file generating device, wherein, when the original electronic fingerprint of the original electronic file is received, the original electronic file is not received.

[0012] Here, the original electronic fingerprint may be generated when the original electronic file is generated or when at least a portion of the original electronic file is backed up.

[0013] Here, the method may further include: storing at least one of the first identifier of the original electronic file generating device and the original meta information of the original electronic file received from the original electronic file generating device in the storage unit to be mapped to the original electronic fingerprint.

[0014] Here, the first identifier may include at least one of an Internet Protocol (IP) address, a Media Access Control (MAC) address, an identification, an installation location, an installation purpose, and a model name of the original electronic file generating device.

[0015] Here, the method may further include: requesting the original electronic file generating device to provide the original electronic file based on the original storage path information of the original electronic file received from the original electronic file generating device.

[0016] Here, the original electronic fingerprint may include a first original electronic fingerprint generated by an original electronic file generating device during generation of the original electronic file; and a second original electronic fingerprint generated when the original electronic file generated by the original electronic file generating device is altered or deleted.

[0017] Here, the method may further include: receiving a derived electronic fingerprint of a derived electronic file from a derived electronic file generating device that generates the derived electronic file via a network in a manner separate from the derived electronic file, wherein the derived electronic file is derived from the original electronic file; and outputting a result of comparing the original electronic fingerprint and the derived electronic fingerprint with each other.

[0018] According to another embodiment of the present disclosure, an apparatus for managing an original electronic fingerprint of an electronic device includes a communication unit and a storage unit, wherein the communication unit is configured to receive an original electronic fingerprint of an original electronic file from an original electronic file generating device that generates the original electronic file via a communication network in a manner separate from the original electronic file, and the storage unit is configured to store the original electronic fingerprint. The communication unit is also configured to receive original storage path information and the original electronic fingerprint of the original electronic file from the original electronic file generating device, and receive at least one of a first identifier of the original electronic file generating device and original meta information of the original electronic file and the original electronic fingerprint from the original electronic file generating device, wherein when the original electronic fingerprint of the original electronic file is received, the original electronic file is not received.

[0019] Here, the original electronic fingerprint may be generated when the original electronic file is generated or when at least a portion of the original electronic file is backed up.

[0020] Here, the apparatus may further include a processor, wherein the processor is configured to store the first identifier of the original electronic file generating device received from the original electronic file generating device in the storage unit to map to the original electronic fingerprint.

[0021] Here, the first identifier may include at least one of an Internet Protocol (IP) address, a Media Access Control (MAC) address, an identification, an installation location, an installation purpose, and a model name of the original electronic file generating device.

[0022] Here, the device may further include a processor, wherein the processor is configured to request the original electronic file generating device to provide the original electronic file based on the original storage path information of the original electronic file received from the original electronic file generating device.

[0023] Here, the original electronic fingerprint may include a first original electronic fingerprint generated by an original electronic file generating device during generation of the original electronic file; and a second original electronic fingerprint generated when the original electronic file generated by the original electronic file generating device is altered or deleted.

[0024] Here, the communication unit may also be configured to receive a derived electronic fingerprint of a derived electronic file from a derived electronic file generating device that generates the derived electronic file via a network in a manner separate from the derived electronic file, wherein the derived electronic file is derived from the original electronic file. The storage unit may also be configured to store the derived electronic fingerprint. The device may also include a processor configured to output a result of comparing the original electronic fingerprint with the derived electronic fingerprint.

[0025] According to another embodiment of the present disclosure, a system for managing an original electronic fingerprint of an electronic device includes an original electronic file generation device and an electronic fingerprint management device, wherein the original electronic file generation device is configured to generate an original electronic file and an original electronic fingerprint of the original electronic file, and the electronic fingerprint management device is configured to receive the original electronic fingerprint via a communication network in a manner separate from the original electronic file. The electronic fingerprint management device is also configured to receive original storage path information and the original electronic fingerprint of the original electronic file from the original electronic file generation device, and the electronic fingerprint management device is also configured to receive at least one of a first identifier of the original electronic file generation device and original meta-information of the original electronic file and the original electronic fingerprint from the original electronic file generation device, wherein when the original electronic fingerprint of the original electronic file is received, the original electronic file is not received.

[0026] Advantageous Effects of the Invention

[0027] The method, device, and system for managing the electronic fingerprints of electronic files according to the embodiments of the present disclosure are capable of managing the electronic fingerprints of electronic files in an integrated manner separately from the electronic files, thereby improving management efficiency compared to directly managing electronic files in an integrated manner, ensuring that the public has confidence in the verification of the authenticity and integrity of electronic files, and effectively preventing the illegal collection, alteration, and use of electronic files, thereby providing a basis for ensuring that personal information is managed objectively and transparently, for example in compliance with international norms such as the General Data Protection Regulation (GDPR) formulated to enhance the privacy of EU citizens.

[0028] The effects of the present disclosure are not limited thereto, and other effects not mentioned herein will be clearly understood by those of ordinary skill in the art from the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Figure 1is a block diagram of a device for managing electronic fingerprints of electronic files according to an embodiment of the present disclosure.

[0030] Figure 2 is a diagram illustrating a method of managing electronic fingerprints of electronic files according to an embodiment of the present disclosure.

[0031] Figure 3 is a diagram illustrating a method of managing electronic fingerprints of electronic files according to another embodiment of the present disclosure.

[0032] Figure 4 is a diagram illustrating a method of managing electronic fingerprints of electronic files according to another embodiment of the present disclosure. DETAILED DESCRIPTION

[0033] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the accompanying drawings. However, it is obvious to those skilled in the art that the accompanying drawings are only provided to help understand the present disclosure, and therefore the scope of the present disclosure is not limited thereto.

[0034] The terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the present disclosure.As used herein, the singular forms "a", "an" and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.

[0035] It should also be understood that the terms “comprise” and / or “comprising” when used in the present specification indicate the presence of stated features, integers, steps, operations, elements, components or combinations thereof, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components or combinations thereof.

[0036] Hereinafter, an apparatus and method for managing electronic fingerprints of electronic files according to embodiments of the present disclosure will be described with reference to the accompanying drawings.

[0037] Figure 1 FIG. 1 shows an electronic fingerprint management device 100 for managing electronic fingerprints of electronic files according to an embodiment of the present disclosure. Figure 1 As shown in FIG. 1 , the electronic fingerprint management device 100 according to an embodiment of the present disclosure may include a bus 102 or another communication mechanism for transmitting information.

[0038] The bus 102 or other communication mechanism connects the processor 104, a storage unit RM as a computer-readable recording medium, a communication unit 112 including a local area network (e.g., Bluetooth or near field communication (NFC)), a network interface or a mobile communication module, a display 114 (e.g., a video adapter, a cathode ray tube (CRT) or a liquid crystal display (LCD)), an input unit 118 (e.g., a keyboard, a keypad, a virtual keyboard, a mouse, a trackball, a stylus or a touch sensing device), and / or subsystems.

[0039] The storage unit RM includes a volatile memory 106 (eg, RAM), a nonvolatile memory 108 (eg, ROM), and a disk drive 110 (eg, HDD, SSD, optical disk, or flash drive), but is not limited thereto.

[0040] In this case, the disk drive may be a non-temporary recording medium. The optical disk may be a CD, a DVD, or a Blu-ray disk, but is not limited thereto. The electronic fingerprint management device 100 according to an embodiment of the present disclosure may include one or more disk drives 110 .

[0041] like Figure 1 As shown in , the disk drive 110 may be included with the processor 104 in the housing 120, but may be mounted remotely from the processor 104, and remote communication may be established between the disk drive 110 and the processor 104. One or more disk drives 110 may store a database.

[0042] The storage unit RM may store an operating system, a driver, an application program, data, a database, etc. required to operate the electronic fingerprint management device 100 according to an embodiment of the present disclosure.

[0043] The display 114 may display an operation interface and a user interface of the electronic fingerprint management device 100 according to an embodiment of the present disclosure.

[0044] The processor 104 may be a central processing unit (CPU), an application processor (AP), a microcontroller, a digital signal processor (DSP), or the like, but is not limited thereto, and controls the operation of the electronic fingerprint management device 100 according to an embodiment of the present disclosure.

[0045] The processor 104 controls the operation of the electronic fingerprint management device 100 according to an embodiment of the present disclosure by connecting to the storage unit RM and executing instructions or one or more logic sequences stored in the storage unit RM, which will be described below.

[0046] Instructions may be read from a computer-readable recording medium such as nonvolatile memory 108 or disk drive 110 to volatile memory 106. In other implementations, hard-wired circuits may be used instead of software instructions or included in hardware in combination with software instructions to implement the present disclosure.

[0047] Logic may refer to the medium that participates in providing instructions to the processor 104 and may be encoded in the memory unit RM.

[0048] The processor 104 may communicate with a hardware controller for the display 114 to display operations of the electronic fingerprint management device 100 and user interface operations on the display 114 .

[0049] Transmission media including the wiring of bus 102 may include coaxial cables, copper wire and fiber optics. For example, transmission media may be in the form of acoustic or light waves generated during radio wave communications or infrared data communications.

[0050] Examples of storage unit RM may include floppy disks, flexible disks, hard disks, magnetic tapes, various types of magnetic media, CD-ROMs, various types of optical media, punched cards, paper tapes, various types of physical media with hole patterns, RAM, PROM, EPROM, flash EPROM.

[0051] In various embodiments of the present disclosure, the execution of the instruction sequence for implementing the present disclosure can be performed by the electronic fingerprint management device 100 according to the embodiment of the present disclosure. In various other embodiments of the present disclosure, the instruction sequence for implementing the present disclosure can be performed in cooperation with multiple computing devices connected via a communication link (e.g., LAN, WLAN, PTSN and / or other wired networks or wireless networks including telecommunications, mobile and cellular phone networks).

[0052] The electronic fingerprint management device 100 according to an embodiment of the present disclosure may transmit and receive instructions including messages, data, information, and one or more programs (ie, application codes) via a communication link and a communication unit 112 .

[0053] The communication unit 112 may include a separate antenna or an integrated antenna for transmitting and receiving via a communication link. The communication unit 112 may include at least one of a local area communication module, a network interface, and a mobile communication module. The local area communication module may be a Bluetooth communication module, an NFC module, or an infrared communication module, but is not limited thereto. The mobile communication module may be connected to a mobile communication network of a specific generation (e.g., a 2G to 5G mobile communication network).

[0054] The program code may be executed by processor 104 as it is received, and / or may be stored in disk drive 110 or other non-volatile storage for execution of the program code.

[0055] Figure 2 1 is a diagram showing a method for managing electronic fingerprints of electronic files according to an embodiment of the present disclosure. Although the method for managing electronic fingerprints of electronic files according to an embodiment of the present disclosure will be described below as being performed by the electronic fingerprint management apparatus 100 according to an embodiment of the present disclosure, the method is not limited thereto.

[0056] The original electronic fingerprint of the original electronic file is received via a network from an original electronic file generating device 200 that generates the original electronic file. In the embodiment of the present disclosure, the original electronic file generating device 200 may be a network camera, a network video recorder (NVR), a digital video recorder (DVR), a black box for a vehicle, a smart phone, a desktop computer, a laptop computer, or a tablet computer, but is not limited thereto.

[0057] The original electronic files and the derived electronic files described below may include video files, image files, document files (e.g., PDF files, Microsoft Word files, Korean files, etc.), design files (e.g., 3dmax files or Auto CAD files), but are not limited to these.

[0058] The original electronic file generating device 200 can generate an original electronic fingerprint of an original electronic file.

[0059] For example, the original electronic file generating device 200 may generate a hash value of the original electronic file through a hash function, and thus the original electronic fingerprint may include the hash value of the original electronic file.

[0060] When the electronic file is a video, its hash value can be generated in units of files or frames (a group of videos) storing the video, or can be generated in units of certain time. In this case, information about the file, frame or time unit, such as image size, file name and time correction value, can be additionally generated in association with the hash value.

[0061] If the original electronic file generating device 200 is a camera, the hash value may be generated when capturing a video. If the original electronic file generating device 200 is a storage device, the hash value may be generated when generating and storing the electronic file and / or when backing up at least a portion of the stored electronic file to an external device.

[0062] When the original electronic file generating device 200 is an NVR, the NVR may receive the captured original image file from the network camera and store the original image file in real time. The original hash value of the original image file may be generated per electronic file. When multiple original image files are generated, the original hash values ​​corresponding to the multiple original image files may be generated, and the original hash values ​​are transmitted to the electronic fingerprint management device 100.

[0063] When an investigation agency or the like backs up an entire specific original image file among a plurality of original image files stored in an NVR through the derived electronic file generating device 300, the derived electronic file generating device 300 may generate a derived hash value of the backed-up derived image file and transmit the derived hash value to the electronic fingerprint management device 100. The electronic fingerprint management device 100 may verify the authenticity of the derived image file by checking whether the derived hash value transmitted to the electronic fingerprint management device is the same as the original hash value stored therein.

[0064] When an investigation agency or the like backs up only a portion of an image of a specific original image file that has been stored in the NVR through the derived electronic file generating device 300, the NVR may newly generate an original hash value of the backed-up image of the portion of the specific original image file, and transmit the newly generated original hash value to the electronic fingerprint management device 100. The derived electronic file generating device 300 may generate a derived hash value of the backed-up derived image file, and before using the backed-up derived image file as evidence hereinafter, transmit the derived hash value to the electronic fingerprint management device 100. The electronic fingerprint management device 100 may verify the authenticity of the derived image file by checking whether the original hash value of the image of the portion of the original image file received from the NVR and the derived hash value of the derived image file received from the derived electronic file generating device 300 are identical to each other.

[0065] When an original electronic file is transmitted to another device connected by communication, the other device receiving the original electronic file can generate an original electronic fingerprint of the original electronic file. For example, when an image file generated by a surveillance camera is stored in an image storage device, or when a stored image file is backed up to an external device, an original electronic fingerprint of the image file can be generated.

[0066] The original electronic file generating device 200 generates an original electronic fingerprint of the original electronic file, and transmits the original electronic fingerprint to the electronic fingerprint management device 100 via the network. Therefore, the original electronic fingerprint can be managed separately from the original electronic file, thereby ensuring the reliability of the verification of the authenticity and integrity of the original electronic file, and effectively preventing the unauthorized collection, change and use of the original electronic file. Therefore, it is possible to provide a basis for ensuring that the flow of personal information is managed objectively and transparently, for example in accordance with international norms such as the General Data Protection Regulation (GDPR) formulated to strengthen the privacy of EU citizens. When the original electronic fingerprint is managed in a combined manner with the original electronic file, the original electronic fingerprint is independently managed to be generated, changed and stored together with the original electronic file. Therefore, the objectivity of the original electronic fingerprint is low, and when the original electronic file is deleted, the original electronic fingerprint is deleted, thereby hindering the verification of the authenticity of the electronic file derived from the original electronic file. In contrast, if the original electronic fingerprint is managed separately from the original electronic file by a device such as a server that enjoys public trust, the objectivity of the original electronic fingerprint can be ensured even if the original electronic file is deleted, and the authenticity of electronic files derived from the original electronic file can be objectively verified.

[0067] In addition, if the original electronic fingerprint is generated and managed separately from the original electronic file during the generation or deletion of the original electronic file, the change in the life cycle of the original electronic file can be verified based on the original electronic fingerprint. Accordingly, when the same type of electronic file is changed inversely to the change in the life cycle, it can be determined whether the electronic file is abused, and thus the electronic file can be effectively managed.

[0068] The network for transmitting the original electronic fingerprint of the original electronic file may be a closed network, an internal network, a public network, a local area network, the Internet, a mobile communication network or a combination thereof, but is not limited thereto.

[0069] The derived electronic file generating device 300 may receive the original electronic file from the original electronic file generating device 200. In this case, the derived electronic file generating device 300 may be a device for verifying or investigating the original electronic file, such as a digital forensics collection device, a CCTV control server, a server of the National Forensic Service, or the like, but is not limited thereto.

[0070] The derived electronic file generation device 300 can generate a derived electronic file as a copy of the original electronic file from the original electronic file. In addition, the derived electronic file generation device 300 generates a derived electronic fingerprint of the derived electronic file, and the electronic fingerprint management device 100 receives the derived electronic fingerprint of the derived electronic file via the network. In this case, the derived electronic fingerprint can be stored in a manner associated with the original electronic fingerprint or the original meta information of the original electronic file.

[0071] For example, the derived electronic file generating device 300 may generate a derived hash value of the derived image file through a hash function, and thus the derived electronic fingerprint may include the derived hash value of the derived image file. The derived electronic fingerprint may also include the original hash value or original meta information of the original image file.

[0072] Multiple derived electronic fingerprints can be generated for the same specific original electronic file by multiple derived electronic file generating devices 300. For example, the digital forensic collection device of the investigation agency that generates the first derived electronic file for the specific original electronic file can be a first derived electronic file generating device, and the derived electronic fingerprint generated by the first derived electronic file generating device is the first derived electronic fingerprint. The collection device of the judicial agency that generates the second derived electronic file for the same specific original electronic file can be a second derived electronic file generating device, and the derived electronic fingerprint generated by the second derived electronic file generating device is the second derived electronic fingerprint. The first derived electronic file generating device and the second derived electronic file generating device can transmit their identification information together with the first derived electronic fingerprint and the second derived electronic fingerprint to the electronic fingerprint management device 100. Therefore, the electronic fingerprint management device 100 can manage the history of multiple derived electronic files provided about the specific original electronic file in an integrated manner.

[0073] As described above, the electronic fingerprint management device 100 may receive the original electronic fingerprint of the original electronic file from the original electronic file generation device 200 and receive the derived electronic fingerprint of the derived electronic file from the derived electronic file generation device 300. The original electronic fingerprint and the derived electronic fingerprint may be stored in a database in the storage unit RM.

[0074] In this case, the electronic fingerprint management device 100 generates a result of comparing the original electronic fingerprint and the derived electronic fingerprint with each other. For example, the original electronic file generation device 200 can transmit the original electronic fingerprint for the corresponding original image file generated periodically or based on a specific file to the electronic fingerprint management device 100.

[0075] The electronic fingerprint management device 100 may be any of various types of devices capable of receiving the original electronic fingerprint and the derived electronic fingerprint from the original electronic file generation device 200 and the derived electronic file generation device 300. For example, the electronic fingerprint management device 300 may be a cloud-based server. That is, when the network that transmits the original electronic fingerprint and the derived electronic fingerprint is a public network such as the Internet, the electronic fingerprint management device 100 may be a public cloud server, and when the network is a closed network such as a private network, the electronic fingerprint management device 100 may be a private cloud server. When the network that transmits the original electronic fingerprint and the derived electronic fingerprint is a hybrid network that is a combination of a closed network and a public network, the electronic fingerprint management device 100 may be a hybrid cloud server, for example, a combination of a private cloud server included in a CCTV control center and an external public cloud server. In this case, the electronic fingerprint may be mainly collected by the private cloud server, and then secondary collected and finally collected by the public cloud server.

[0076] Even if the original electronic fingerprint is stored and managed separately from the original electronic file generating device 200, the original electronic fingerprint cannot be reliably verified when it is processed by an unknown electronic fingerprint management device. Accordingly, the electronic fingerprint management device 100 is preferably operated and managed in an integrated manner by a reputation agency such as a national agency to systematize the authentication process for generating video evidence.

[0077] In this case, the derived electronic file generating device 300 may receive an original electronic file corresponding to evidence of a criminal case or written evidence of a contract generated at a specific time point in the past from the original electronic file generating device 200. The person or institution managing the derived electronic file generating device 300 should verify the authenticity of the received original electronic file, and thus may transmit its derived electronic fingerprint for use in verifying the original electronic file.

[0078] Therefore, the electronic fingerprint management device 100 can verify the authenticity of the original electronic file by comparing the derived electronic fingerprint with the original electronic fingerprint previously stored in the electronic fingerprint management device. In this case, when the derived electronic fingerprint is related to the original electronic fingerprint or original meta information of the original electronic file, the original electronic fingerprint or original meta information can be used to verify the authenticity of the original electronic file.

[0079] Although the electronic fingerprint management device 100 receives the original electronic fingerprint and the derived electronic fingerprint from the original electronic file generating device 200 and the derived electronic file generating device 300 respectively, after receiving the original electronic fingerprint and the derived electronic fingerprint, the original electronic fingerprint and the derived electronic fingerprint can be managed independently of the original electronic file generating device 200 and the derived electronic file generating device 300.

[0080] In addition, the electronic fingerprint management device 100 may have various additional functions. For example, the electronic fingerprint management device 100 may issue the identification (ID) of all devices that transmit the original electronic fingerprint, so that the authenticity of the electronic file can be verified only for the device with the ID.

[0081] In the electronic fingerprint management method according to an embodiment of the present disclosure, the original electronic file generation device 200 can generate a first identifier for the device and an original electronic fingerprint of the original electronic file, and transmit the first identifier together with the original electronic fingerprint to the electronic fingerprint management device 300. The electronic fingerprint management device 300 can receive the original electronic fingerprint and multiple first identifiers, and store the original electronic fingerprint and the first identifier in the storage unit RM to be mapped to each other. In this case, the first identifier may include an Internet Protocol (IP) address, a Media Access Control (MAC) address and identification information, such as an ID of the original electronic file generation device 200, a device name or model name (for example, a CCTV camera, a black box camera, a wearable camera, a smartphone camera, or a drone camera), an installation location, and an installation purpose.

[0082] The original electronic fingerprint can be generated and collected in an electronic file having a standard format together with the first identifier. In particular, when the standard format is applied to image capture devices installed for general purposes, the image, the image capture device (e.g., CCTV camera, black box camera, wearable camera, smartphone camera, or drone camera), the installation location of the image capture device, and the time when the image was generated or backed up can be objectively and easily identified only by checking the electronic file.

[0083] Based on the IP address of the original electronic file generating device 200, it can be verified whether the site where the device that captured the original image is installed or the image file stored in the cloud server has been damaged. For example, when the original electronic fingerprint of the original CCTV image captured by the CCTV installed at the crime scene has been transmitted and stored in the electronic fingerprint management device, it can be verified whether the original CCTV image has been damaged in the following way: before collecting (backing up) CCTV images that may be clues to the crime, by generating an electronic fingerprint of the CCTV image (corresponding to the derived electronic file) stored in the image capture device with the corresponding IP address and comparing the electronic fingerprint with the original electronic fingerprint. If the original CCTV image is damaged, the insider who destroyed the video evidence can be investigated.

[0084] The derived electronic file generating device 300 may generate a second identifier for the device and a derived electronic fingerprint of the derived electronic file, and transmit the second identifier together with the derived electronic fingerprint to the electronic fingerprint management device 100. The electronic fingerprint management device 100 may receive the derived electronic fingerprint and the second identifier, and store the derived electronic fingerprint and the second identifier in the storage unit RM to be mapped to each other. Similarly, the second identifier may include at least one of an IP address, a MAC address, and an ID of the derived electronic file generating device 300.

[0085] Accordingly, multiple original electronic fingerprints generated by multiple original electronic file generating devices 200 can be effectively managed using the first identifier, and multiple derived electronic fingerprints generated by multiple derived electronic file generating devices 300 can be compared with the multiple original electronic fingerprints and the first identifier by using the second identifier to effectively identify whether the multiple derived electronic fingerprints are the same as the multiple original electronic fingerprints.

[0086] The original electronic file generation device 200 may generate original meta information of the original electronic file, and transmit the original meta information together with the original electronic fingerprint of the original electronic file to the electronic fingerprint management device 100. The electronic fingerprint management device 100 may store the original electronic fingerprint and the original meta information in the storage unit RM to be mapped to each other. In this case, the original meta information may include the date and time of generating the original image file, the date and time of generating the original electronic fingerprint, the title or ID of the original image file, the type of the original image file, the file size, the file generation coordinates (GPS coordinates, GLONASS coordinates or the like), etc.

[0087] The derived electronic file generating device 300 may generate derived meta information of the derived electronic file, and transmit the derived meta information together with the derived electronic fingerprint of the derived electronic file to the electronic fingerprint management device 100. The electronic fingerprint management device 100 may store the derived electronic fingerprint and the derived meta information in the memory unit RM to be mapped to each other. In this case, the derived meta information may include the date and time when the derived image file is generated, the date and time when the derived electronic fingerprint is generated, the title or ID of the derived image file, the type of the derived image file, the title or ID of the original image file corresponding to the derived image file, the type of the original image file, the first identifier of the original image file corresponding to the derived image file, etc.

[0088] Accordingly, the multiple original electronic fingerprints generated by the original electronic file generating device 200 can be effectively managed using the original meta-information, and the multiple derived electronic fingerprints generated by the derived electronic file generating device 300 can be compared with the multiple original electronic fingerprints and the original meta-information using the derived meta-information to effectively identify whether the multiple derived electronic fingerprints are the same as the multiple original electronic fingerprints.

[0089] In addition, the original electronic file generating device 200 may generate a first identifier for the device and an original electronic fingerprint of the original electronic file, generate original meta information of the original electronic file, and transmit the first identifier and the original meta information together with the original electronic fingerprint to the electronic fingerprint management device 300. The electronic fingerprint management device 300 may store the first identifier and the original meta information in the memory unit RM to be mapped to the original electronic fingerprint.

[0090] The derived electronic file generating device 300 may generate a second identifier for the device and a derived electronic fingerprint of the derived electronic file, generate derived meta information of the derived electronic file, and transmit the second identifier and the derived meta information together with the derived electronic fingerprint to the electronic fingerprint management device 300. The electronic fingerprint management device 300 may store the second identifier and the derived meta information in the memory unit RM to be mapped to the derived electronic fingerprint.

[0091] Therefore, multiple original electronic fingerprints generated by multiple original electronic file generating devices 200 can be effectively managed using the first identifier and original meta-information, and multiple derived electronic fingerprints generated by multiple derived electronic file generating devices 300 can be compared with the multiple original electronic fingerprints, the first identifier and the original meta-information by using the second identifier and the derived meta-information to effectively identify whether the multiple derived electronic fingerprints are the same as the multiple original electronic fingerprints.

[0092] The electronic fingerprint management device 300 can store the first and second identifiers, the original meta information and the derived meta information collected from the original electronic file generation device 200 and the derived electronic file generation device 300 in a standard format. Accordingly, the collected information can be efficiently collected and managed.

[0093] In addition, during the process of the original electronic file generating device 200 and the derived electronic file generating device 300 registering with the electronic fingerprint management device 100 , the first identifier and the second identifier may be stored in the electronic fingerprint management device 100 .

[0094] The electronic fingerprint management method according to an embodiment of the present disclosure may further include: receiving original storage path information and original electronic fingerprint of the original electronic file from the original electronic file generating device 200 storing the original electronic file; and requesting the original electronic file generating device 200 to provide the original electronic file based on the original storage path information.

[0095] In this case, the original storage path information may include uniform resource locator (URL) information of the original electronic file. The original electronic fingerprint may be linked to the original electronic file stored in the original electronic file generating device 200 according to the URL information.

[0096] Accordingly, it is checked whether there is an electronic file linked to the electronic fingerprint management device 100, and when there is an electronic file linked to the electronic fingerprint management device 100, the authenticity of the electronic file can be quickly verified by generating an electronic fingerprint of the linked electronic file and comparing the electronic fingerprint with the electronic fingerprint stored in the electronic fingerprint management device 100. For example, when the electronic file linked to the electronic fingerprint management device 100 is an electronic file of a contract image, the authenticity of the contract image of the linked electronic file can be quickly verified by generating a hash value of the contract image and comparing the hash value with the hash value stored in the electronic fingerprint management device 100.

[0097] The electronic fingerprint management method according to an embodiment of the present disclosure may further include: receiving derived storage path information and derived electronic fingerprint of the derived electronic file from the derived electronic file generating device 300 storing the derived electronic file; and requesting the derived electronic file generating device 300 to provide the original electronic file based on the derived storage path information.

[0098] Similarly, the derived storage path information may include URL information of the derived electronic file. The derived electronic fingerprint may be linked to the derived electronic file stored in the derived electronic file generating device 300 according to the URL information.

[0099] As described above, in the electronic fingerprint management method according to the embodiment of the present disclosure, the original electronic file or the derived electronic file may not be stored in the electronic fingerprint management device 100. Accordingly, there may be a large number of original electronic file generating devices 200, and thus, it is possible to prevent the excessive increase in the storage capacity of the electronic fingerprint management device 100 caused when the original electronic file is received from the original electronic file generating device 200 and stored in the electronic fingerprint management device 100.

[0100] The original electronic file or the derived electronic file may be protected by copyright or be confidential data, so the person or organization that owns the original electronic file or the derived electronic file may not be willing to store the original electronic file or the derived electronic file in the electronic fingerprint management device 100. Therefore, the original electronic file or the derived electronic file can be linked only after obtaining the permission of the owner or his organization.

[0101] like Figure 3 As shown in , the electronic fingerprint management method according to another embodiment of the present disclosure may also include: in response to receiving a request from the derived electronic file analysis device 400 to verify whether the derived electronic file is forged or tampered with, transmitting the result of comparing the original electronic fingerprint and the derived electronic fingerprint to the derived electronic file analysis device 400.

[0102] The derived electronic file analysis device 400 may be a forensic analysis server belonging to an organization, group or individual that needs to verify the integrity of a derived electronic file, and may be primarily configured to analyze the derived electronic file for use as evidence.

[0103] The derived electronic file analyzing device 400 may receive the derived electronic file from the derived electronic file generating device 300. In this case, the derived electronic file analyzing device 400 may receive the meta information of the derived electronic file and the second identifier of the derived electronic file generating device 300 that generated the meta information and the derived electronic file.

[0104] It is important to verify whether the derived electronic file has been forged or tampered with so that the derived electronic file analysis device 400 can identify whether the derived electronic file can be used as evidence. Therefore, the derived electronic file analysis device 400 can request the electronic fingerprint management device 100 to verify whether the derived electronic file has been forged or tampered with.

[0105] To this end, the derived electronic file analysis device 400 may transmit the received meta information of the derived electronic file to the electronic fingerprint management device 100, and the electronic fingerprint management device 100 may verify whether the derived electronic file is forged or tampered with by comparing the derived electronic fingerprint of the derived electronic file corresponding to the meta information of the derived electronic file with the original electronic fingerprint of the original electronic file in response to the request, and notify the derived electronic file analysis device 400 of the verification result. The derived electronic fingerprint may be related to the original electronic fingerprint or the original meta information of the original electronic file. In this case, the original electronic fingerprint or the original meta information related to the derived electronic fingerprint may be used to determine whether the derived electronic file is forged or tampered with.

[0106] like Figure 4As shown in , the electronic fingerprint management method according to another embodiment of the present disclosure may further include: in response to a request for verifying the authenticity of a derived electronic file received from the derived electronic file authenticity confirmation device 500 , transmitting the original confirmation certificate to the derived electronic file authenticity confirmation device 500 .

[0107] In this case, the derived electronic file authenticity confirmation device 500 can be based on the above reference Figure 3 The derived electronic file analysis device 400 receives a notification of using the derived electronic file as evidence based on the comparison result described. In this case, the derived electronic file authenticity confirmation apparatus 500 may transmit the meta information and the second identifier of the derived electronic file from the derived electronic file analysis device 400.

[0108] The derived electronic file analysis device 400 may be a prosecution server, a police server, or a court server belonging to an organization, institution, or individual that needs to verify the integrity of the derived electronic file.

[0109] When the prosecutor, the police or the court receives a notification from the derived electronic file analysis device 400 that the derived electronic file is used as evidence, the prosecutor, the police or the court may request the electronic fingerprint management device 100 to provide an original confirmation certificate proving the authenticity of the derived electronic file. In this case, the derived electronic file authenticity confirmation device 500 may transmit the second meta information and the second identifier to the electronic fingerprint management device 100.

[0110] Accordingly, the electronic fingerprint management device 100 may transmit the original confirmation certificate including the result of comparing the derived electronic fingerprint with the original electronic fingerprint to the derived electronic file authenticity confirmation apparatus 500 .

[0111] The electronic fingerprint management device 100 according to an embodiment of the present disclosure includes a communication unit 112 , a storage unit RM, and a processor 104 .

[0112] The communication unit 112 receives the original electronic fingerprint of the original electronic file from the original electronic file generating device 200 that generates the original electronic file via the network, and receives the derived electronic fingerprint of the derived electronic file derived from the original electronic file from the derived electronic file generating device 300 that generates the derived electronic file via the network. The derived electronic fingerprint may be related to the original electronic fingerprint.

[0113] The memory unit RM stores the original electronic fingerprint and the derived electronic fingerprint. The memory unit RM and the processor 104 may be included in one housing 120, but may be included in different housings that are spatially separated.

[0114] The processor 104 outputs a result of comparing the original electronic fingerprint and the derived electronic fingerprint with each other. When the processor 104 and the storage unit RM are included in different housings, the processor 104 may be connected to the storage unit RM via the communication unit 112 .

[0115] The original electronic fingerprint may include a hash value of the original electronic file, and the derived electronic fingerprint may include a hash value of the derived electronic file. The original electronic fingerprint, the derived electronic fingerprint and their hash values ​​have been described in detail above, so they will not be repeated here.

[0116] The processor 104 may receive a first identifier of the original electronic file generating device 200, store the first identifier in the storage unit RM to map to the original electronic fingerprint, receive a second identifier of the derived electronic file generating device 300, and store the second identifier in the storage unit RM to map to the derived electronic fingerprint. The first identifier, the second identifier, and the meta-information have been described in detail above, so they will not be repeated here.

[0117] The processor 104 may receive original storage path information and an original electronic fingerprint of the original electronic file from the original electronic file generating device 200 storing the original electronic file, and may request the original electronic file generating device 200 to provide the original electronic file based on the original storage path information.

[0118] In addition, the processor 104 may receive derived storage path information and derived electronic fingerprints of the derived electronic file from the derived electronic file generating device 300 storing the derived electronic file, and may request the derived electronic file generating device 300 to provide the derived electronic file based on the derived storage path information.

[0119] Accordingly, the electronic fingerprint management device 100 according to an embodiment of the present disclosure does not need to store the original electronic file and the derived electronic file in the storage unit RM, and thus can prevent the capacity of the storage unit RM from excessively increasing and can satisfy copyright or security conditions.

[0120] As mentioned above Figures 2 to 4 As described, the system for managing electronic fingerprints of electronic files according to an embodiment of the present disclosure includes an original electronic file generating device 200 , a derived electronic file generating device 300 , and an electronic fingerprint managing device 100 .

[0121] The original electronic file generating device 200 generates an original electronic file and an original electronic fingerprint of the original electronic file.

[0122] The derived electronic file generating device 300 generates a derived electronic file derived from an original electronic file and a derived electronic fingerprint of the derived electronic file. The derived electronic fingerprint can be connected with the original electronic fingerprint or the original meta information of the original electronic file.

[0123] The electronic fingerprint management device 100 receives the original electronic fingerprint and the derived electronic fingerprint via the network, and outputs the result of comparing the original electronic fingerprint and the derived electronic fingerprint with each other. In this case, when the derived electronic fingerprint is connected with the original electronic fingerprint or the original meta information of the original electronic file, the original electronic fingerprint or the original meta information can be used to compare the derived electronic fingerprint with the original electronic fingerprint.

[0124] like Figure 3 As shown in , the system for managing the electronic fingerprint of an electronic file according to an embodiment of the present disclosure may further include a derived electronic file analysis device 400, wherein the derived electronic file analysis device 400 requests the electronic fingerprint management device 100 to verify whether the derived electronic file is forged or tampered with. The electronic fingerprint management device 100 may transmit the result of comparing the original electronic fingerprint with the derived electronic fingerprint to the derived electronic file analysis device 400.

[0125] In addition, if Figure 4 As shown in , the system for managing electronic fingerprints of electronic files according to an embodiment of the present disclosure may also include a derived electronic file authenticity confirmation device 500, wherein, upon receiving a notification from the derived electronic file analysis device 400 that a derived electronic file will be used as evidence, the derived electronic file authenticity confirmation device 500 requests the electronic fingerprint management device 100 to verify the authenticity of the derived electronic file.

[0126] In this case, the electronic fingerprint management device 100 may transmit the original confirmation certificate to the derived electronic file authenticity confirmation apparatus 500 according to the comparison result.

[0127] Although the embodiments of the present disclosure have been described above, it is obvious to those skilled in the art that the present disclosure is not limited thereto and can be implemented in many different forms without departing from the spirit or scope of the present disclosure. Therefore, the above embodiments should be considered illustrative rather than restrictive, and therefore, the present disclosure is not limited to the above description, and the present disclosure can be changed within the scope of the attached claims and their equivalents.

[0128] Industrial Applicability

[0129] The present disclosure is applicable to a method, device and system for managing electronic fingerprints of electronic files.

Claims

1. A method for managing an original electronic fingerprint of an original electronic file, the method comprising: receiving an original electronic fingerprint of the original electronic file from an original electronic file generating device that generates the original electronic file via a communication network in a manner separate from the original electronic file, wherein the original electronic fingerprint comprises: a first original electronic fingerprint generated by the original electronic file generating device during the generation of the original electronic file; and a second original electronic fingerprint generated when the original electronic file generated by the original electronic file generating device is altered or deleted, receiving a first identifier of the original electronic file generating device, at least one of original storage path information of the original electronic file and original meta information of the original electronic file, and the original electronic fingerprint from the original electronic file generating device; and storing at least one of the first identifier of the original electronic file generating device, the original storage path information of the original electronic file, and the original meta information of the original electronic file in a storage unit to map to the original electronic fingerprint, wherein, when receiving the original electronic fingerprint of the original electronic file, the original electronic file is not received, and Among them, the first identifier of the original electronic file generating device, the original storage path information of the original electronic file, the original metadata of the original electronic file and the original electronic fingerprint are generated, received and stored when the original electronic file is generated, modified, backed up and deleted, so that the abuse of the original electronic file and the changes in the life cycle of the original electronic file can be identified based on the original electronic fingerprint.

2. The method according to claim 1, wherein: The original electronic fingerprint is generated when the original electronic file is generated or when at least a portion of the original electronic file is backed up.

3. The method according to claim 1, wherein: The first identifier includes at least one of an Internet Protocol (IP) address, a Media Access Control (MAC) address, an identification, an installation location, an installation purpose, and a model name of the original electronic document generating device. 4 . The method according to claim 1 , further comprising requesting the original electronic file generating device to provide the original electronic file based on the original storage path information of the original electronic file received from the original electronic file generating device.

5. The method according to claim 1, further comprising: receiving a derived electronic fingerprint of the derived electronic file from a derived electronic file generating device that generates the derived electronic file via the network in a manner separate from the derived electronic file, wherein the derived electronic file is a copy of the original electronic file; and The result of comparing the original electronic fingerprint and the derived electronic fingerprint with each other is output.

6. A device for managing an original electronic fingerprint of an electronic device, the device comprising: a communication unit configured to receive an original electronic fingerprint of an original electronic file from an original electronic file generating device that generates the original electronic file via a communication network in a manner separate from the original electronic file, wherein the original electronic fingerprint comprises: a first original electronic fingerprint generated by the original electronic file generating device during generation of the original electronic file; and a second original electronic fingerprint generated when the original electronic file generated by the original electronic file generating device is altered or deleted; and a storage unit, the storage unit being configured to store the original electronic fingerprint, wherein, when receiving the original electronic fingerprint of the original electronic file, the original electronic file is not received, The communication unit is further configured to receive a first identifier of the original electronic file generating device, at least one of original storage path information of the original electronic file and original meta information of the original electronic file, and the original electronic fingerprint from the original electronic file generating device. The apparatus for managing the original electronic fingerprint of the electronic device further comprises a processor, the processor being configured to store the at least one of the first identifier of the original electronic file generating device, the original storage path information of the original electronic file, and the original meta information of the original electronic file in a storage unit to map to the original electronic fingerprint; and Among them, the first identifier of the original electronic file generating device, the original storage path information of the original electronic file, the original metadata of the original electronic file and the original electronic fingerprint are generated, received and stored when the original electronic file is generated, modified, backed up and deleted, so that the abuse of the original electronic file and the changes in the life cycle of the original electronic file can be identified based on the original electronic fingerprint.

7. The device according to claim 6, wherein: The original electronic fingerprint is generated when the original electronic file is generated or when at least a portion of the original electronic file is backed up.

8. The device according to claim 6, wherein: The first identifier includes at least one of an Internet Protocol (IP) address, a Media Access Control (MAC) address, an identification, an installation location, an installation purpose, and a model name of the original electronic document generating device.

9. The device according to claim 6, wherein: The processor is configured to request the original electronic file generating device to provide the original electronic file based on the original storage path information of the original electronic file received from the original electronic file generating device.

10. The device according to claim 6, wherein: The communication unit is further configured to receive a derived electronic fingerprint of the derived electronic file via the network in a manner separate from the derived electronic file from a derived electronic file generating device that generates the derived electronic file, wherein the derived electronic file is a copy of the original electronic file; The storage unit is further configured to store the derived electronic fingerprint, and The device also includes a processor configured to output a result of comparing the original electronic fingerprint and the derived electronic fingerprint with each other.

11. A system for managing an original electronic fingerprint of an electronic device, the system comprising: An original electronic file generating device, the original electronic file generating device is configured to generate an original electronic file and an original electronic fingerprint of the original electronic file; as well as An electronic fingerprint management device, the electronic fingerprint management device is configured to receive the original electronic fingerprint via a communication network in a manner separate from the original electronic file, wherein the original electronic fingerprint includes: a first original electronic fingerprint generated by the original electronic file generation device during the generation of the original electronic file; and a second original electronic fingerprint generated when the original electronic file generated by the original electronic file generation device is altered or deleted, wherein, when receiving the original electronic fingerprint of the original electronic file, the original electronic file is not received, The electronic fingerprint management device is further configured to receive a first identifier of the original electronic file generation device, at least one of the original storage path information of the original electronic file and the original meta information of the original electronic file, and the original electronic fingerprint from the original electronic file generation device. The electronic fingerprint management device further includes a processor configured to store at least one of the first identifier of the original electronic file generating device, the original storage path information of the original electronic file, and the original meta information of the original electronic file in a storage unit to map to the original electronic fingerprint; and Among them, the first identifier of the original electronic file generating device, the original storage path information of the original electronic file, the original metadata of the original electronic file and the original electronic fingerprint are generated, received and stored when the original electronic file is generated, modified, backed up and deleted, so that the abuse of the original electronic file and the changes in the life cycle of the original electronic file can be identified based on the original electronic fingerprint.

Images