E-seal management device, method, and program

Abstract

To provide an e-seal trace generation and management method, device, and program, capable of identifying a participant even when an e-seal automatic creation system is constructed.SOLUTION: An e-seal management device for managing an e-seal using a computing device comprises: first means for storing settings set by a data cooperation setter together with data cooperation setter identification information for identifying the data cooperation setter; second means for storing data created by a data creator and data creator identification information for identifying the data creator together with the data cooperation setter identification information when issuing an e-seal of data as the trace of e-seal issuance; and third means for generating the trace of the e-seal issuance according to an e-seal issuance instruction of data from a browser.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to an e-seal management device, method, and program. [Background technology]

[0002] When exchanging information over the Internet, you can feel safe if you can confirm who the other person is (that they are not impersonating someone else).

[0003] One of the mechanisms for this is the e-seal, which is a measure such as encryption that is taken to identify the organization that issued the electronic document, etc., and is a mechanism that can confirm that the document, etc. has not been tampered with since the measure was taken.

[0004] In relation to e-seals, Patent Document 1 proposes that "in information system 100, web server 101 records web access logs with client terminal C1 outside the LAN. mail server 102 records email sending and receiving logs. DB server 103 records access right operation logs. Business application server 104 records DB access logs. Management server 105 collects logs recorded in web server 101, mail server 102, DB server 103, and business application server 104, as well as operation logs of client terminal C, and uses the collected logs to track the information leaker and the information leak operation history of that client terminal C." with the aim of improving the deterrent effect of information leaks by making it easier to collect and analyze logs that serve as audit trails. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Japanese Patent Application Laid-Open No. 2007-48266 Summary of the Invention [Problem to be solved by the invention]

[0006] In the e-seal system, an e-seal is attached to the data to be shared when information is shared. An audit system for the e-seal is then established, and the parties involved in the e-seal are identified to confirm the appropriateness of the operation of the e-seal, and it is confirmed that the business is being operated appropriately.

[0007] According to Patent Document 1, by collecting operation logs from web servers, mail servers, DB servers, business application servers, and client terminals, it is possible to track operators who have accessed tracking target data in a DB using the collected logs, and calculate the degree of suspiciousness based on the operations performed by the operators on their terminals. This method shows a method for identifying the person in charge of data when identifying the person involved in the access, but does not consider identifying the person who set the data.

[0008] Identifying the data setter is not a problem when creating individual data, where linked data is entered and created each time a data linkage request is made (the linked data creator is also the data setter), but when a system is built that automatically creates linked data at the time of linkage, it becomes impossible or difficult to identify the data setter, because the linked data creator is not the data setter. Since automatic assignment involves multiple parties (linkage staff, data staff, etc.), it is difficult to identify who is responsible and the cause (setting error, fraud).

[0009] In view of the above, the present invention aims to provide an e-seal management device, method, and program that makes it possible to identify participants even when an automatic e-seal creation system is constructed. [Means for solving the problem]

[0010] Based on the above, the present invention is an "e-sticker management device that uses a computer device to manage e-stickers, characterized in that it comprises: a first means for storing the setting contents set by a data linkage setter together with data linkage setter identification information for identifying the data linkage setter; a second means for storing the data created by the data creator and the data creator identification information for identifying the data creator together with the data linkage setter identification information when an e-sticker is issued for the data, thereby creating evidence of the issuance of the e-sticker; and a third means for generating evidence of the issuance of the e-sticker in response to an instruction from a viewer to issue an e-sticker for the data."

[0011] The present invention is also described as "an e-sticker management method for managing e-stickers using a computer device, characterized in that the setting contents set by a data linkage setter are stored together with data linkage setter identification information for identifying the data linkage setter, the data created by the data creator and the data creator identification information for identifying the data creator are stored together with the data linkage setter identification information when an e-sticker is issued for the data, to serve as evidence of the issuance of the e-sticker, and evidence of the issuance of the e-sticker is generated in response to an instruction from a viewer to issue an e-sticker for the data."

[0012] The present invention also provides an e-sticker management program for managing e-stickers using a computer device, comprising: a first program that stores the setting contents set by a data linkage setter together with data linkage setter identification information for identifying the data linkage setter; a second program that stores the data created by the data creator and the data creator identification information for identifying the data creator together with the data linkage setter identification information when an e-sticker is issued for the data, thereby creating evidence of the issuance of the e-sticker; and a third program that generates evidence of the issuance of the e-sticker in response to an instruction from a viewer to issue an e-sticker for the data. [Effects of the Invention]

[0013] According to the present invention, it is possible to provide a method, device and program for generating and managing e-seal evidence that makes it possible to identify those involved even when an automatic e-seal creation system is constructed. [Brief explanation of the drawings]

[0014] [Figure 1] 1 is a diagram showing an example of the overall schematic configuration of an e-seal trail generation and management device 100.

[0023] FIG. [Figure 2] 1 is a diagram showing an example of a usage scene of the e-seal trail generation and management device 100. FIG. [Figure 3] FIG. 1 is a diagram showing an example of the device configuration of an e-seal generating device 1. [Figure 4] FIG. 2 shows an example of the device configuration of a trail management device 2. [Figure 5] FIG. 2 is a diagram showing an example of the device configuration of a data providing device 3. [Figure 6] FIG. 2 is a diagram showing an example of the device configuration of an authentication and authorization device 6. [Figure 7] FIG. 2 is a diagram showing an example of setting information D1 stored in a setting information storage unit DB1a. [Figure 8] FIG. 10 is a diagram showing an example of e-seal trail information D2a stored in an e-seal trail storage unit DB2a. [Figure 9] FIG. 10 is a diagram showing an example of audit support rule information D2b stored in an audit support rule storage unit DB2a. [Figure 10] FIG. 10 is a diagram showing an example of user information D6 stored in a user information storage unit DB6a. [Figure 11] FIG. 10 is a diagram showing an example of authentication and authorization information D6 stored in an authentication and authorization information storage unit DB6b. [Figure 12] FIG. 10 is a diagram showing the inter-device processing process in a preparation stage St1 by a data linkage setter M1. [Figure 13] FIG. 10 is a diagram showing the inter-device processing process at the viewing stage St2 by a viewer M3. [Figure 14] FIG. 10 is a diagram showing the inter-device processing process at audit stage St3 by auditor M4. [Figure 15] FIG. 10 is a diagram showing an example of a screen configuration for displaying search results during an audit. DETAILED DESCRIPTION OF THE INVENTION

[0015] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. [Example]

[0016] Fig. 1 is a diagram showing an example of the overall schematic configuration of an e-seal trail generation and management device 100. The e-seal trail generation and management device 100 is configured by connecting an e-seal generation device 1, a trail management device 2, a data provision device 3, a data creation device 4, multiple terminal devices 5, an authentication and authorization device 6, etc. to a data acquisition device 8 via a network 7. These devices in Fig. 1 are configured using computer devices, but it is preferable that the trail management device 2 and the authentication and authorization device 6 be servers.

[0017] The users of the e-seal trail generation and management device 100 are a data linkage setter M1, a data creator M2, a viewer M3, and an auditor M4, and they access the e-seal trail generation and management device 100 using a terminal device.

[0018] The scenarios in which the e-seal trail generation and management device 100 is used by users are as follows: Scenario 1 of the use of the e-seal trail generation and management device 100 is the preparation stage St1 in which, for example, a data linkage setup person M1 and a data creator M2 belonging to parts manufacturer A use a data providing device 3 and a data creating device 4 to create e-seal attachment data (hereinafter referred to as linked data) for parts manufactured by their company and store it in the e-seal generation device 1. In the present invention, the e-seal setting process is performed in the preparation stage St1, and is characterized in that the timing of e-seal attachment is set for the search and response system and the e-seal generation device 1.

[0019] The second usage scenario of the e-seal trail generation and management device 100 is the viewing stage St2, in which a viewer M3, who is, for example, a person in charge at assembly manufacturer B that purchases parts manufactured by parts manufacturer A and applies them to products, accesses the e-seal generation device 1 using the data acquisition device 8 to obtain linked data regarding A's parts. The viewing stage St2 is the e-seal execution stage, and when the e-seal is granted, the information required for the audit (e-seal setter, data creator) is obtained and stored as a trail in the trail management device 2.

[0020] Usage scenario 3 of the e-seal trail generation and management device 100 is the audit stage St3, in which an auditor M4, for example, belonging to a public institution, uses the authentication and authorization device 6 to audit whether the e-seal is being properly operated. During the audit, the auditor M4 searches for and identifies the involved parties (data linkage setup person M1 and data creator M2) from the e-seal-attached document. In these usage scenarios, the user can access the e-seal trail generation and management device 100 using an appropriate terminal device 5 and receive appropriate information on the content.

[0021] 2 shows the connection relationships among the various devices that make up the e-seal trail generation and management device 100. According to this diagram, the data linkage setup person M1 accesses the e-seal generation device 1, the authentication and authorization device 6, etc. via the data providing device 3, and executes the data linkage setup / API ID process S11 and the e-seal assignment setup process S12 as part of the processing in the preparation stage St1. Furthermore, the data creator M2 accesses the e-seal generation device 1, the trail management device 2, the authentication and authorization device 6, etc. from the data creating device 4 via the data providing device 3, thereby performing data creation processing at an appropriate timing as part of the processing in the preparation stage ST1. The created data is stored in a temporary database DB, matching the user (creator) with the data, and then transferred to the data providing device 3 for storage.

[0022] The viewer M3 accesses the e-seal generation device 1, the trail management device 2, the data provision device 3, the authentication and authorization device 6, etc. from the data acquisition device 8 via the data provision device 3, thereby performing data acquisition request processing S21 and data acquisition processing S22 as processing in the viewing stage St2. The auditor M4 accesses the trail management device 2 and performs e-seal document designation processing S31 and participant acquisition processing S32 as processing in the audit stage St3.

[0023] 3 to 6 show examples of device configurations of the e-seal trail generation device 1, trail management device 2, data provision device 3, and authentication / authorization device 6, which are the main functions that make up the e-seal trail generation / management device 100. These devices are composed of computer devices, and each has main components such as a processing unit CPU (CPU1, CPU2, CPU3, CPU6), memory unit DB (DB1, DB2, DB3, DB6), communication unit TR (TR1, TR2, TR3, TR6), and input / output unit I / O (I / O1, I / O2, I / O3, I / O6) connected via a bus BUS (BUS1, BUS2, BUS3, BUS6).

[0024] The main processing functions of the calculation unit CPU1 in the e-seal generation device 1 in Figure 3 are, as will be described in detail later, an e-seal setting unit 11, an e-seal participant identification unit 12, an e-seal generation unit 13, a trail generation unit 14, and a trail transmission unit 15.

[0025] 7 is stored as a setting information storage unit DB1a in the storage unit DB1 in the e-seal generating device 1. The setting information D1 is the setting information D1 of FIG. 7 that is generated by the e-seal setting unit 11 in response to the data linkage setting person M1 executing the data linkage setting / API ID process S11 as a process of the preparation stage St1.

[0026] The setting information D1 includes an interface ID (D11), a configurator ID (D12), a setting date and time D13, and setting contents D14, and therefore records which data linkage configurator M1 configured what, when, and from which terminal device 5. It is preferable that the setting contents D14 include a search expression for the memory unit DB in addition to the input / output names.

[0027] The main processing functions of the processor CPU2 in the trail management device 2 in FIG. 4 are a participant search unit 21, a trail receiving unit 22, an audit support unit 23, an audit support rule management unit 24, and the like, which will be described in detail later.

[0028] The storage unit DB2 in the trail management device 2 is provided with an e-seal trail storage unit DB2a and an audit support rule storage unit DB2b, and is provided with e-seal trail information D2a and audit support rule information D2b shown in FIGS.

[0029] The e-seal trail information D2a in Figure 8 includes the e-seal execution date and time D2a1, interface ID (D2a2), setter ID (D2a3), data creator ID (D2a4), target data D2a5, and DB search formula D2a6. According to this, the data creator M2 and the target data to be created have been added to the setting information D1 in Figure 7 by the data linkage setter M1, and are recorded linked to the e-seal execution date and time D2a1. The data creator ID (D2a4) and target data D2a5 are assumed to be transferred and stored in the e-seal trail storage unit DB2a at the timing of the e-seal execution date and time D2a1 from the contents of the database DB in Figure 2. Furthermore, since the API may be updated for the DB search formula D2a6, it is advisable to also include the setter ID search formula as evidence.

[0030] 9 includes a rule ID (D2b1) and a rule D2b2. Specific examples of rule D2b2 include "the data creator or setter ID is changed and then immediately restored to its original state" and "the DB search formula is the same but the target data is different."

[0031] The main processing functions of the calculation unit CPU3 in the data providing device 3 in Fig. 5, which will be described in detail later, include a data provision setting unit 31, a data provision management unit 32, a data search unit 33, and an e-seal request unit 34. The storage unit DB3 in the data providing device 3 also stores the same information as the setting information D3 shown in Fig. 7 as a setting information storage unit DB3.

[0032] The main processing functions of the processor CPU1 in the authentication and authorization device 6 in FIG. 6 are a user management unit 61, an authentication unit 62, an authorization unit 63, and the like, the details of which will be described later.

[0033] In addition, the memory unit DB6 in the authentication and authorization device 6 stores user information D6 shown in FIG. 10 as a user information storage unit DB6a, and stores authentication and authorization information D6 shown in FIG. 11 as an authentication and authorization information storage unit DB6b.

[0034] The user information D6a includes information on the user ID (D6a1), name D6a2, and department D6a3, and the authentication and authorization information D6b includes information on the credential type D6b2 (IC card or password) and access permission system D6b3. The information on the access permission system D6b3 indicates the scope of permission authority, i.e., which functions of the overall functions of the e-seal trail generation and management device 100 a user is permitted to access. The user information D6a and authentication and authorization information D6b are set from the start of operation of the equipment and are updated as appropriate according to the actual usage situation.

[0035] 12 is a diagram showing the inter-device processing process in the preparation stage St1 by a data linkage setter M1. In this usage scenario, the data linkage setter M1 accesses the e-seal generation device 1, the authentication and authorization device 6, etc. via the data providing device 3, and executes the data linkage setting / API ID process S11 and the e-seal assignment setting process S12 as processing in the preparation stage St1.

[0036] Specifically, first, the data linkage setter M1 accesses the data providing device 3 in processing step S101, and the data providing device 3 performs redirect processing to transfer this to the authentication and authorization device 6 (processing step S102).

[0037] In the authentication and authorization device 6, the user management unit 61 compares the information about the terminal device 5A and the operator M1 included in this access process with information D6a in the user information storage unit DB6a. The authentication unit 62 certifies that the access is a valid access using a preset operator and terminal device. The authorization unit 63 also refers to the authentication and authorization information storage unit DB6b and issues an authorization signal regarding the credential type and the range of accessible systems.

[0038] In processing step S103, the authentication and authorization conditions regarding the usage permission of the e-seal trail generation and management device 100 at the preparation stage St1 are displayed on the terminal device 5A, and thereafter the data integration setting by the data integration setting person M1 is performed under the authentication and authorization constraints.

[0039] In addition, the issuance of e-seals in the e-seal trail generation and management device 100 of the present invention is not carried out individually, but is pre-set and is issued by automatic response in response to subsequent specification requests.

[0040] Therefore, in the next processing step S104, the data linkage setting person M1 performs a setting process for an automatic response from the terminal device 5A to the data providing device 3. In the automatic response setting, data regarding the "setting contents" and "use of e-seal" is input.

[0041] At this time, in the data providing device 3 of Figure 5, the data providing management unit 32 manages the setting information D3 in the setting information storage unit DB3, and upon receiving the input processing in processing step S904, the data providing setting unit 31 executes a process of writing the received data to the setting information storage unit DB3, thereby generating the setting information D3.

[0042] Thereafter, in the data providing device 3, the information D3 (interface ID, setter ID) stored by the data providing management unit 32 is transferred to the e-sticker generation device 1 in processing step S105. In the e-sticker generation device 1 of Fig. 3, the e-sticker setting unit 11 copies the received setting information D3 and registers the setting information D1 in the setting information storage unit DB1a (processing step S106).

[0043] After registration in the e-sticker generation device 1, the e-sticker generation device 1 reports the registration result to the data provision management unit 32 (processing step S107), and the data provision management unit 32 then sequentially reports the registration to the terminal device 5A (processing step S108), thereby completing the setting process for automatic response by the data linkage setting person M1.

[0044] Furthermore, as part of the processing of the preparation stage St1, data creation processing is performed by the data creator M2 for the parts manufactured by the parts manufacturer A. Although this part of the processing is not shown in Fig. 12, data creation is executed at an appropriate timing via the data creation system 4, and the data creator M2 and the created data are stored in the database DB as a pair. The database DB can be referenced from the data providing device 3 side.

[0045] 13 is a diagram showing the inter-device processing process in the viewing stage St2 by viewer M3. In this usage scenario, viewer M3 accesses the e-seal generation device 1, the trail management device 2, the data creation device 4, etc. from the data acquisition device 8 via the data provision device 3 to obtain linked data as part of the processing in the viewing stage St2, and when the e-seal is granted, obtains the information necessary for the audit (e-seal setter, data creator) and stores it as evidence in the trail management device 2.

[0046] Specifically, first, in processing step S201, viewer M3 requests data from data providing device 3 as processing in viewing stage St2. Data providing device 3 creates a search instruction for the requested data in data search unit 33 and transfers this to data creating device 4 (processing step S202). Here, the data requested from data providing device 3 is data about parts manufactured by parts manufacturer A created by data creator M2, and is information stored in database DB in pairs with the data creator M2 and the data content.

[0047] The data creation device 4 searches for data in the database DB in response to the search instruction for the requested data (processing step S203), and returns the corresponding data set (data paired with the data creator M2 and the data content) to the data providing device 3 (processing step S204).

[0048] Upon receiving the data response, the data providing device 3 generates an e-seal request signal in the e-seal request unit 34 and transmits this to the e-seal generating device 1 (processing step S205).

[0049] In the e-seal generation device 1, the e-seal generation unit 13 performs a confirmation process such as checking the interface information by referring to the setting information storage unit DB1 (processing step S206: in this case, it is confirmed that there is no unauthorized access by checking the terminal device that sent the data request), then generates an e-seal, generates a trail of the issuance of the e-seal in the evidence generation unit 14, and sends the trail information to the evidence management device 2 via the evidence transmission unit 15 (processing step S207).

[0050] In the evidence management device 2, the evidence receiving unit 22 receives the evidence information and records it in the e-seal evidence storage unit DB2a (processing step S208).The evidence management device 2 then sends a response that the evidence has been recorded, and sends the e-seal attached data back to the data acquisition device 8 from the e-seal generation device 1 via the data providing device 3 (processing steps S209, S210, S211).

[0051] 14 is a diagram showing the inter-device processing process at audit stage St3 by auditor M4. In this usage scenario, auditor M4 accesses trail management device 2 from terminal device 5C, obtains information necessary for the audit (participants: e-seal setter, data creator, etc.), and performs audit processing of the trail.

[0052] In this case, the auditor M4 inputs the e-seal document for which the participant is to be identified from the terminal device 5C (processing step S301). In response to this, the participant search unit 21 in Fig. 4 searches for information on the specified document name by referring to the e-seal trail storage unit D2a. According to the e-seal trail information shown in Fig. 8, data such as the data linkage setter M1 as the participant, the data creator for each individual document, and the e-seal execution date can be viewed.

[0053] Furthermore, the audit support unit 23 supports various operations in response to instructions from the auditor M4, and the audit support rule management unit 24 manages and executes the support rules of Fig. 9. For example, according to the audit support rules of Fig. 9, the audit support rule information D2b includes a rule ID (D2b1) and rule D2b2, and specific examples of rule D2b2 include "the data creator or setter ID is changed and immediately returns to the original state" and "the DB search formula is the same but the target data is different," and so these are executed in the execution of the audit support rule (processing step S302).

[0054] As a result of processing such as a search in the trail management device 2, a trail search is performed (processing step S302), the audit support rules are executed (processing step S302), and finally an audit screen like that shown in Figure 15 is displayed on the monitor screen of the terminal device 5C used by auditor M4.

[0055] The audit screen in Figure 15 displays various information about documents with e-seals instructed by auditor M4. The top row displays the search target file name, the middle row displays information about Data1 and Data3 extracted as a search result for documents with e-seals for which the parties involved are to be identified, and the bottom row displays cases extracted when access to the same interface ID is specified as audit support information. When displaying the audit support information in the bottom row, it is a good idea to highlight items that are likely to require checking by an auditor according to predefined audit support rules, as in the case in the second row from the top. This is because audit rules have been set in advance, and cases that violate the rules are extracted as cases requiring attention.

[0056] As described above, the present invention can provide a method, device, and program for generating and managing e-seal evidence that enables the identification of involved parties even when an automatic e-seal creation system is constructed.

[0057] The present invention links the logs of participants with the logs of the settings made and data created by the participants and manages them as a log. Specifically, when the e-seal is set, the timing for assigning the e-seal is set for the search and response system and the e-seal generation device, and when the e-seal is executed and assigned, information necessary for the audit (e-seal setter, data creator) is obtained from each system and stored as evidence, so that during the audit, the auditor can search for and identify participants from the e-seal-attached documents. This allows the auditor to easily obtain information on the participants who are the subject of consideration for responsibility and cause, making work more efficient.

[0058] A specific example of the configuration for this is "an e-sticker management device 100 that uses a computer device to manage e-stickers, characterized in that it comprises: first means 3 for storing the setting content D14 set by the data linkage setter M1 together with data linkage setter identification information (D11, D12, D13) for identifying the data linkage setter M1; second means 2 for storing the data created by the data creator M2 and the data creator identification information (D2a4, D2a5) for identifying the data creator M2 together with the data linkage setter identification information at the time of issuing an e-sticker for the data (D2a1) to serve as evidence of the issuance of the e-sticker; and third means 1 for generating evidence of the issuance of the e-sticker in response to an instruction from a viewer M3 to issue an e-sticker for the data."

[0059] Also, from the perspective of the programs executed by each computer device, it can be said that this is equipped with a group of programs consisting of "a first program that stores the setting contents set by the data linkage setter together with data linkage setter identification information for identifying the data linkage setter; a second program that stores the data created by the data creator and the data creator identification information for identifying the data creator together with the data linkage setter identification information when an e-seal is issued for the data, thereby creating evidence of the issuance of the e-seal; a third program that generates evidence of the issuance of the e-seal in response to an instruction from a viewer to issue an e-seal for the data; and a fourth program that searches for evidence of the issuance of the e-seal in response to an audit instruction from an auditor." [Explanation of symbols]

[0060] 100: e-seal trail generation and management device 1: e-seal generating device 2: Evidence management device 3: Data providing device 4: Data creation device 5: Terminal device 6: Authentication and authorization device 7: Network 8: Data acquisition device M1: Data integration configurator M2: Data creator M3: Viewer M4: Auditor

Claims

1. An e-seal management device that manages e-seals using a computer device, An e-seal management device characterized by comprising: a first means for storing the setting contents set by a data linkage setter together with data linkage setter identification information for identifying the data linkage setter; a second means for storing the data created by a data creator and data creator identification information for identifying the data creator together with the data linkage setter identification information when an e-seal is issued for the data, thereby serving as evidence of the issuance of the e-seal; and a third means for generating evidence of the issuance of the e-seal in response to an instruction from a viewer to issue an e-seal for the data.

2. The e-seal management device according to claim 1, An e-seal management device characterized by comprising a fourth means for searching the contents stored in the second means in response to an inspection instruction from an inspector.

3. The e-seal management device according to claim 1, An e-seal management device that manages access permissions for users who use the computer device.

4. The e-seal management device according to claim 2, An e-seal management device characterized in that rules for auditing are set in advance and cases violating the rules are extracted as cases requiring attention.

5. An e-seal management method for managing e-seals using a computer device, comprising: An e-seal management method characterized by storing the setting contents set by a data linkage setter together with data linkage setter identification information for identifying the data linkage setter, storing the data created by a data creator and the data creator identification information for identifying the data creator together with the data linkage setter identification information when an e-seal is issued for the data, thereby serving as evidence of the issuance of the e-seal, and generating evidence of the issuance of the e-seal in response to an instruction from a viewer to issue an e-seal for the data.

6. The e-seal management method according to claim 5, An e-seal management method characterized by searching for evidence of the issuance of the e-seal in response to an auditor's instructions.

7. An e-seal management program for managing e-seals using a computer device, a first program for causing the computer device to function so as to store configuration details configured by a data linkage setter together with data linkage setter identification information for identifying the data linkage setter; a second program for causing the computer device to function so that the data created by the data creator and data creator identification information for identifying the data creator are stored together with the data linkage setter identification information when an e-seal is issued for the data, and the stored data serve as evidence of the issuance of the e-seal; a third program for causing the computer device to function to generate evidence of e-seal issuance in response to an e-seal issuance instruction from a viewer for the data; An e-seal management program comprising:

8. 8. The e-seal management program according to claim 7, An e-seal management program characterized by comprising a fourth program that causes the computer device to function to search for evidence of the issuance of the e-seal in response to an auditor's audit instructions.

Images