Non-transitory computer readable medium storing program, information processing apparatus, and information processing method

• US 8,499,162 B2
• Filed: 01/14/2011
• Issued: 07/30/2013
• Est. Priority Date: 07/14/2010
• Status: Expired due to Fees

• Current Assignee: Fuji Xerox Company Limited (Fujifilm Holdings Corporation)
• Original Assignee: Fuji Xerox Company Limited (Fujifilm Holdings Corporation)
• Inventors: Yokoe, Kyoko
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): Nobahar, Abdulhakim
• Application Number:
  US13/007,180
• Publication Number:
  US 20120017092A1
• Time in Patent Office: 928 Days
• Field of Search: None
• US Class Current: 713/178
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

A non-transitory computer readable medium storing a program causing a computer to execute a process including: accepting an instruction for verifying an electronic signature added to information; verifying the electronic signature on the basis of an electronic certification corresponding to the electronic signature in accordance with the accepted instruction; calculating, when it is determined that the information has not been tampered with, a hash value of a combination of the information, the electronic signature, and validity-period information indicating a validity period of the electronic certification; adding a time stamp to the calculated hash value; outputting the information, the electronic signature, the hash value, and the validity-period information to a storage device; and outputting, when it is determined that the information has not been tampered with, a verification result including information indicating that the information has not been tampered with.

Claims

1. A non-transitory computer readable medium storing a program causing a computer to execute a process, the process comprising:

accepting an instruction for performing verification of an electronic signature which is added to information;

determining whether the electronic signature has been verified in the past;

if it is determined that the electronic signature has not been verified in the past;

verifying the electronic signature on the basis of an electronic certification corresponding to the electronic signature in accordance with the accepted instruction;

calculating, when it is determined that the information to which the verified electronic signature is added has not been tampered with, a hash value of a combination of the information, the electronic signature which is added to the information, and validity-period information indicating a validity period of the electronic certification corresponding to the electronic signature;

adding a time stamp to the calculated hash value;

outputting, to a storage device, the information to which the verified electronic signature is added, the electronic signature, the hash value to which the time stamp has been added, and the validity-period information so that the information, the electronic signature, the hash value, and the validity-period information correspond to one another; and

outputting a verification result, the verification result indicating that the information has not been tampered with; and

if it is determined that the electronic signature has been verified in the past;

determining whether the electronic signature is within a validity period indicated by the validity-period information;

outputting a verification of the electronic signature without verifying the electronic signature if it is determined that the electronic signature is within the validity period indicated by the validity-period information; and

if it is determined that the electronic signature is not within the validity period indicated by the validity-period information;

verifying the electronic signature on the basis of the electronic certification corresponding to the electronic signature in accordance with the accepted instruction;

calculating, when it is determined that the information to which the verified electronic signature is added has not been tampered with, a hash value of a combination of the information, the electronic signature which is added to the information, and validity-period information indicating a validity period of the electronic certification corresponding to the electronic signature;

adding a time stamp to the calculated hash value;

outputting, to a storage device the information to which the verified electronic signature is added, the electronic signature, the hash value to which the time stamp has been added, and the validity-period information so that the information, the electronic signature the hash value and the validity-period information correspond to one another; and

outputting a verification result, the verification result including information indicating that the information has not been tampered with.

2. The non-transitory computer readable medium according to claim 1,

wherein, when the electronic certification includes a plurality of electronic certifications, the hash value is calculated, in the calculating of the hash value, using validity-period information indicating the shortest validity period among validity periods of the plurality of electronic certifications.

3. An information processing apparatus comprising:

a processor that functions as;

an acceptance unit that accepts an instruction for performing verification of an electronic signature which is added to information;

a verification unit that determines the electronic signature has not been verified in the past and, if it is determined that the electronic signature has not been verified in the past, verifies the electronic signature on the basis of an electronic certification corresponding to the electronic signature in accordance with the instruction which has been accepted by the acceptance unit;

a hash-value calculation unit that calculates, when it is determined that the information to which the electronic signature verified by the verification unit is added has not been tampered with, a hash value of a combination of the information, the electronic signature which is added to the information, and validity-period information indicating a validity period of the electronic certification corresponding to the electronic signature;

a time-stamp addition unit that adds a time stamp to the hash value which has been calculated by the hash-value calculation unit;

an output unit that outputs, to a storage device, the information to which the verified electronic signature is added, the electronic signature, the hash value to which the time stamp has been added by the time-stamp addition unit, and the validity-period information so that the information, the electronic signature, the hash value, and the validity-period information correspond to one another; and

a verification-result output unit that outputs a verification result the verification result including information indicating that the information has not been tampered with,

wherein the acceptance unit accepts a second instruction for performing verification of the electronic signature, the verification unit determines whether the electronic signature has been verified in the past and determines the electronic signature is within a validity period indicated by the validity-period information and the output unit outputs a verification of the electronic signature without verifying the electronic signature if the verification unit determines that the electronic signature is within the validity period indicated by the validity-period information, and

wherein if the verification unit determines that the electronic signature is not within the validity period indicated by the validity-period information, the hash-value calculation unit calculates the hash value of the combination of the information, the electronic signature which is added to the information, and the validity-period information indicating the validity period of the electronic certification corresponding to the electronic signature, the time-stamp addition unit adds a time stamp to the hash value which has been calculated by the hash-value calculation unit, the output unit outputs, to the storage device, the information to which the verified electronic signature is added the electronic signature, the hash value to which the time stamp has been added by the time-stamp addition unit, and the validity-period information so that the information, the electronic signature, the hash value, and the validity-period information correspond to one another, and the output unit outputs the verification result indicating that the information has not been tampered with.

4. An information processing method comprising:

accepting an instruction for performing verification of an electronic signature which is added to information;

determining whether the electronic signature has been verified in the past;

if it is determined that the electronic signature has not been verified in the past;

verifying the electronic signature on the basis of an electronic certification corresponding to the electronic signature in accordance with the accepted instruction;

calculating, when it is determined that the information to which the verified electronic signature is added has not been tampered with, a hash value of a combination of the information, the electronic signature which is added to the information, and validity-period information indicating a validity period of the electronic certification corresponding to the electronic signature;

adding a time stamp to the calculated hash value;

outputting, to a storage device, the information to which the verified electronic signature is added, the electronic signature, the hash value to which the time stamp has been added, and the validity-period information so that the information, the electronic signature, the hash value, and the validity-period information correspond to one another; and

outputting a verification result, the verification result indicating that the information has not been tampered with; and

if it is determined that the electronic signature has been verified in the past;

determining whether the electronic signature is within a validity period indicated by the validity-period information;

outputting a verification of the electronic signature without verifying the electronic signature if it is determined that the electronic signature is within the validity period indicated by the validity-period information; and

if it is determined that the electronic signature is not within the validity period indicated by the validity-period information;

verifying the electronic signature on the basis of the electronic certification corresponding to the electronic signature in accordance with the accepted instruction;

calculating, when it is determined that the information to which the verified electronic signature is added has not been tampered with, a hash value of a combination of the information the electronic signature which is added to the information, and validity-period information indicating a validity period of the electronic certification corresponding to the electronic signature;

adding a time stamp to the calculated hash value;

outputting, to a storage device, the information to which the verified electronic signature is added, the electronic signature, the hash value to which the time stamp has been added, and the validity-period information so that the information, the electronic signature, the hash value, and the validity-period information correspond to one another; and

outputting a verification result, the verification result including information indicating that the information has not been tampered with.