Electronic Document Signature Tracking Without Private Key Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic signature systems require management of private keys, making authentication cumbersome and prone to key leakage, and lack efficient methods to distinguish between document alterations and corrections.
Innovation Solution
A management device and program that generate unique character information and time stamps for electronic documents, calculate hashes, and store these in a management file without using private keys, allowing easy authentication and differentiation between alterations and corrections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If private keys are used for electronic signatures, then authentication security is improved, but key management complexity increases
Solution Approach 1:
The patent extracts the private key from the authentication process and replaces it with a public key infrastructure. The signature verification is performed using a public key stored in the management device, eliminating the need for private key management while maintaining authentication security. This extraction of the sensitive private key element resolves the contradiction by removing the management burden while preserving security.
Solution Approach 2:
The patent introduces a management device as an intermediary that handles the signature verification process. Instead of requiring the user to manage private keys, the management device acts as a mediator that stores public keys and performs verification operations. This intermediary approach transfers the management complexity from the user to a centralized system, resolving the contradiction between security and management complexity.
2Reliability
If private keys are used for electronic signatures, then authentication capability is improved, but ease of operation deteriorates
Solution Approach 1:
The patent implements self-service authentication where the management device automatically handles the verification process without requiring user intervention in key management. The system self-manages the public key storage and verification operations, making authentication transparent and easy to use. Users simply need to provide the document for verification, and the management device handles the technical details automatically.
Solution Approach 2:
The management device serves as an intermediary that simplifies the authentication process for users. Instead of requiring users to manage private keys or understand cryptographic operations, the management device handles all verification tasks automatically. This intermediary approach maintains authentication capability while significantly improving ease of operation by abstracting away the technical complexity.
3Measurement precision
If hash comparison is performed to detect alteration, then detection precision is improved, but processing time increases
Solution Approach 1:
The patent applies preliminary action by pre-calculating and storing the hash value of the digital data along with the public key in the management device before authentication is needed. When verification is required, the system only needs to compare the stored hash with the calculated hash rather than performing complex verification operations from scratch. This preliminary storage of critical data reduces processing time during actual authentication while maintaining detection precision.
Data Source
AI summary
The present invention provides a management device and a program with which it is possible to easily discriminate between the alteration and correction of an electronic document. A management device 1 for managing a user's electronic documents, the management device 1 comprising: a document acquisition unit 11 for acquiring an electronic document; an indication acquisition unit 12 for acquiring an indication to create a signature for the acquired electronic document; a generation unit 14 for generating unique text information on the basis of the acquired indication to create; a write unit 15 for writing signature information that includes the generated text information and time information that includes a signing time-of-day into the electronic document; a calculation unit 18 for calculating the hash value of the electronic document; a holding unit 16 for holding with respect to the signature information, time information and hash value in a management file that manages the electronic document; and an output unit 19 for outputting the electronic document that includes the written-in signature information and time information.