METHOD FOR MANAGING ELECTRONIC FILE AND ELECTRONIC FILE MANAGEMENT APPARATUS

• US 20140075200A1
• Filed: 08/28/2013
• Published: 03/13/2014
• Est. Priority Date: 09/07/2012
• Status: Abandoned Application

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Tec Corporation (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Tec Corporation (Toshiba Corporation)
• Inventors: UCHIDA, Shigeo
• Application Number:
  US14/012,169
• Publication Number:
  US 20140075200A1
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

In accordance with one embodiment, a method for managing an electronic file include creating an electronic signature of a user who is generating an electronic file by encrypting the electronic file using a private key of the user, and embedding the created electronic signature of the user and a public key certificate of the user, in the electronic file. The public key certificate of the user certifying a public key of the user corresponding to the private key of the user and including a link to a certificate list that shows whether or not the public key certificate of the user is valid.

Claims

1. A method for managing an electronic file, comprising:

creating an electronic signature of a user who is generating an electronic file by encrypting the electronic file using a private key of the user; and

embedding the created electronic signature of the user and a public key certificate of the user, in the electronic file,

the public key certificate of the user certifying a public key of the user corresponding to the private key of the user and including a link to a certificate list that shows whether or not the public key certificate of the user is valid.

2. The method according to claim 1, further comprising:

acquitting the certificate list from the certificate authority; and

storing the acquired certificate list.

3. The method according to claim 1, further comprising:

transmitting the embedded electronic file to a receiver of the electronic file.

4. The method according to claim 1, further comprising:

accessing the certificate list to check whether or not the public key certificate of the user is valid when the electronic file is opened.

5. The method according to claim 4, further comprising:

notifying a person who is opening the electronic file that the public key certificate of the user is not valid.

6. The method according to claim 1, further comprising:

acquiring from a time stamp authority a time stamp of the electronic file and a public key certificate of the time stamp authority, and

embedding the acquired time stamp of the electronic file and the acquired public key certificate of the time stamp authority, in the electronic file, wherein

the public key certificate of the time stamp authority certifies a public key of the time stamp authority corresponding to a private key of the time stamp authority and includes a link to a certificate list that shows whether or not the public key certificate of the time stamp authority is valid.

7. The method according to claim 6, further comprising:

accessing the certificate list of the public key certificate of the time stamp authority to check whether or not the public key certificate of the time stamp authority is valid when the electronic file is opened.

8. The method according to claim 7, further comprising:

notifying a person who is opening the electronic file that the public key certificate of the time stamp authority is not valid.

9. A method for managing an electronic file, comprising:

acquiring from a time stamp authority a time stamp of an electronic file and a public key certificate of the time stamp authority, and

embedding the acquired time stamp of the electronic file and the acquired public key certificate of the time stamp authority, in the electronic file, wherein

the public key certificate of the time stamp authority certifies a public key of the time stamp authority corresponding to a private key of the time stamp authority and includes a link to a certificate list that shows whether or not the public key certificate of the time stamp authority is valid.

10. The method according to claim 9, further comprising:

acquiring the certificate list from a certificate authority that has issued the public key certificate of the time stamp authority; and

storing the acquired certificate list.

11. The method according to claim 9, further comprising:

transmitting the embedded electronic file to a receiver of the electronic file.

12. The method according to claim 9, further comprising:

accessing the certificate list to check whether or not the public key certificate of the time stamp authority is valid when the electronic file is opened.

13. The method according to claim 12, further comprising:

notifying a person who is opening the electronic file that the public key certificate of the time stamp authority being not valid.

14. An electronic file management apparatus comprising:

a controller configured to;

create an electronic signature of a user who is generating an electronic file by encrypting the electronic file using a private key of the user; and

embed the created electronic signature of the user and a public key certificate of the user, in the electronic file,

the public key certificate of the user certifying a public key of the user corresponding to the private key of the user and including a link to a certificate list that shows whether or not the public key certificate of the user is valid.

15. The electronic file management apparatus according to claim 14, wherein

the controller is further configured to acquire the certificate list from the certificate authority, and the apparatus further comprising:

a storage configured to store the certificate list acquired by the controller.

16. The electronic file management apparatus according to claim 14, further comprising:

a network interface through which the electronic file in which the electronic signature of the user and the public key certificate of the user are embedded is transmitted to a receiver of the electronic file.

17. The electronic file management apparatus according to claim 14, wherein

the controller is further configured to access the certificate to check whether or not the public key certificate of the user is valid when the electronic file is opened.

18. The electronic file management apparatus according to claim 17, wherein

the controller is further configured to notify a person who is opening the electronic file that the public key certificate of the user is valid.

19. The electronic file management apparatus according to claim 14, wherein the controller is further configured to

acquire from a time stamp authority a time stamp of the electronic file and a public key certificate of the time stamp authority, and

embed the acquired time stamp of the electronic file and the acquired public key certificate of the time stamp authority, in the electronic file, wherein

the public key certificate of the time stamp authority certifies a public key of the time stamp authority corresponding to a private key of the time stamp authority and includes a link to a certificate list that shows whether or not the public key certificate of the time stamp authority is valid.

20. The electronic file management apparatus according to claim 19, wherein

the controller is further configured to access the certificate list of the public key certificate of the time stamp authority to check whether or not the public key certificate of the time stamp authority is valid when the electronic file is opened.