TW201342869A - Digital content cloud storage and authentication method - Google Patents
Digital content cloud storage and authentication method Download PDFInfo
- Publication number
- TW201342869A TW201342869A TW101112934A TW101112934A TW201342869A TW 201342869 A TW201342869 A TW 201342869A TW 101112934 A TW101112934 A TW 101112934A TW 101112934 A TW101112934 A TW 101112934A TW 201342869 A TW201342869 A TW 201342869A
- Authority
- TW
- Taiwan
- Prior art keywords
- digital
- file
- digital content
- information
- certificate server
- Prior art date
Links
Landscapes
- Storage Device Security (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
Description
本發明係有關於數位內容雲存儲技術，特別是指一種數位內容數位資料傳輸與保全方法。The invention relates to a digital content cloud storage technology, in particular to a digital content digital data transmission and preservation method.
現今，數位內容檔案被越來越多領域所應用，但由於其容易被篡改、偽造，人們無法辨認其存在時間及其真實性、可靠性。在數位版權保護、智慧財產權保護等領域，如何證明數位內容檔案的原創性與時間性，是個必須嚴肅面對的議題。Nowadays, digital content files are used in more and more fields, but because they are easily falsified and forged, people cannot recognize their existence time and their authenticity and reliability. In the fields of digital copyright protection and intellectual property protection, how to prove the originality and timeliness of digital content files is an issue that must be seriously faced.
目前常見的數位內容檔案保護方式，是將數位內容檔案完整上傳至伺服器，再透過伺服器將數位內容檔案加密後同時記錄上傳的時間，以證明數位內容檔案的原創性及時間性。At present, the common digital content file protection method is to completely upload the digital content file to the server, and then encrypt the digital content file through the server and record the uploading time at the same time to prove the originality and timeliness of the digital content file.
然而，上述的應用需要將原始數位內容檔案上傳到伺服器，如果檔案較大且網路頻寬不足，則將嚴重影響上傳時間，使數位內容檔案的存證生成困難。However, the above application needs to upload the original digital content file to the server. If the file size is large and the network bandwidth is insufficient, the uploading time will be seriously affected, and the storage of the digital content file is difficult.
此外，還有另一種保護數位內容檔案的方式，是將數位內容檔案上傳至伺服器，透過伺服器端生成一個檔案指紋，再將檔案指紋與原始數位內容檔案保存在數位終端裝置的電腦中。In addition, there is another way to protect the digital content file by uploading the digital content file to the server, generating an image fingerprint through the server, and then storing the file fingerprint and the original digital content file in the computer of the digital terminal device.
此種應用除了前述上傳數位內容檔案需要足夠的網路頻寬之外，將檔案指紋及數位內容檔案保存在數位終端裝置中，檔案指紋會有被篡改的可能性，因此檔案指紋無法有效且公正的證明檔案指紋及數位內容檔案的可靠性。In addition to the above-mentioned uploading of the digital content file, the application requires sufficient network bandwidth to store the file fingerprint and digital content files in the digital terminal device, and the file fingerprint may be tampered with, so the file fingerprint cannot be effective and fair. Proof of file fingerprint and digital content file reliability.
為了改善上述現有技術的缺陷，本發明提供一種數位內容雲存儲與存證方法，用以對數位內容檔案進行存證，以確保數位內容檔案存在時間的可靠性及原創性，同時具有資料傳輸量少、頻寬使用量少的優點，能達到傳輸速率快與高效率的功效。In order to improve the above-mentioned defects of the prior art, the present invention provides a digital content cloud storage and deposit method for depositing digital content files to ensure the reliability and originality of the digital content files, and has the data transmission amount. The advantages of less bandwidth and less bandwidth can achieve fast transmission speed and high efficiency.
本發明所提供的一種數位內容雲存儲與存證方法，供使用在一個數位內容整合式存證設備，用以對數位內容檔案進行存證。數位內容整合式存證設備包括至少一個數位終端裝置、至少一個數位存證伺服器裝置、以及連接數位終端裝置與數位存證伺服器裝置的網路裝置。數位內容雲存儲與存證方法包括下列步驟：The invention provides a digital content cloud storage and depositing method for use in a digital content integrated storage device for depositing digital content files. The digital content integrated storage device comprises at least one digital terminal device, at least one digital certificate server device, and a network device connected to the digital terminal device and the digital certificate server device. The digital content cloud storage and deposit method includes the following steps:
a)數位存證伺服器裝置通過網路裝置在數位終端裝置取得一個數位內容檔案並將其儲存；a) the digital certificate server device obtains a digital content file on the digital terminal device through the network device and stores it;
b)數位存證伺服器裝置通過網路裝置在數位終端裝置取得相應於數位內容檔案的第一屬性信息並將其儲存，第一屬性信息包括數位內容檔案的使用者信息與位置識別信息，位置識別信息包含地理信息及/或機器信息，地理信息為數位終端裝置的地理位置，機器信息為數位終端裝置的裝置身分碼；b) the digital certificate server device obtains and stores the first attribute information corresponding to the digital content file in the digital terminal device through the network device, and the first attribute information includes user information and location identification information of the digital content file, and the location The identification information includes geographic information and/or machine information, the geographic information is a geographical location of the digital terminal device, and the machine information is a device identity code of the digital terminal device;
c)數位存證伺服器裝置對數位內容檔案通過壓縮加密程序，生成一個檔案金鑰並將其儲存；c) the digital certificate server device digital content file is generated by a compression encryption program, and an archive key is generated and stored;
d)數位存證伺服器裝置生成相應於檔案金鑰的第二屬性信息並將其儲存，第二屬性信息包括數位存證伺服器裝置生成檔案金鑰的時間信息，其中時間信息包含第一時間信息及/或第二時間信息，第一時間信息是數位存證伺服器裝置的本地時間，第二時間信息是數位終端裝置與數位存證伺服器裝置以外的第三方所提供給數位存證伺服器裝置的時間；d) the digital certificate server device generates second attribute information corresponding to the file key and stores it, and the second attribute information includes time information of the file certificate server generating the file key, wherein the time information includes the first time Information and/or second time information, the first time information is the local time of the digital certificate server device, and the second time information is provided to the digital certificate server by a third party other than the digital terminal device and the digital certificate server device Time of the device;
e)數位存證伺服器裝置將第一屬性信息與第二屬性信息加載至檔案金鑰以形成一個憑證檔案並將其儲存；e) the digital certificate server device loads the first attribute information and the second attribute information into the file key to form a voucher file and stores it;
f)數位存證伺服器裝置將憑證檔案編譯生成一個憑證識別碼並將其儲存；以及f) the digital certificate server device compiles the voucher file to generate a voucher identification code and stores it;
g)數位存證伺服器裝置通過網路裝置將憑證識別碼發送至數位終端裝置。g) The digital certificate server device transmits the voucher identification code to the digital terminal device via the network device.
由於上述數位內容雲存儲與存證方法將儲存在雲端的數位內容檔案壓縮加密生成檔案金鑰，檔案金鑰具有不可逆的保全特性，檔案小、且無法被還原工程破解。同時，由於將檔案金鑰結合各屬性信息形成憑證檔案儲存在數位存證伺服器裝置，加以加密儲存，因此可降低檔案金鑰被竄改的可能性，增加了憑證檔案的可靠度。在進一步的優選實施例中，兼具保密與識別特性的憑證識別碼從數位存證伺服器裝置發送至數位終端裝置，數位終端裝置的使用者可以適時將憑證識別碼對外公開，以宣告其數位內容檔案已經得到第三方認證，起到人人重視智慧財產權的積極作用。Since the above-mentioned digital content cloud storage and deposit method compresses and encrypts the digital content file stored in the cloud to generate an archive key, the file key has an irreversible security feature, the file is small, and cannot be solved by the restoration project. At the same time, since the file key is combined with the attribute information to form the voucher file and stored in the digital certificate server device, and stored and encrypted, the possibility of the file key being falsified can be reduced, and the reliability of the voucher file is increased. In a further preferred embodiment, the voucher identification code having both the secret and identification characteristics is transmitted from the digital certificate server device to the digital terminal device, and the user of the digital terminal device can publicly disclose the voucher identification code to announce the digit. The content file has been certified by a third party and plays an active role in the importance of intellectual property rights.
由於本發明主要係揭露一種數位內容雲存儲與存證方法，用以對數位內容檔案進行存證，其中所提及之數位內容檔案的格式、結構、種類等，已為相關技術領域具有通常知識者所能明瞭，故以下文中之說明，不再作完整描述。同時，以下文中所對照之圖式，係表達與本發明特徵有關之結構示意，並未亦不需要依據實際尺寸完整繪製，合先敘明。The present invention mainly discloses a digital content cloud storage and deposit method for authenticating a digital content file, wherein the format, structure, and type of the digital content file mentioned have common knowledge in the related technical field. The person can understand, so the description below will not be fully described. At the same time, the drawings in the following texts express the structural schematics related to the features of the present invention, and do not need to be completely drawn according to the actual size, which is described first.
本發明中，數位內容檔案可以是各種格式的靜態數位文檔，例如WORD檔、EXCEL檔、PPT檔、設計圖、數位照片/圖片等，也可以是動態數位文檔，例如數位錄影、數位錄音、數位動畫等，更可以是軟體、程式等。In the present invention, the digital content file may be a static digital document in various formats, such as a WORD file, an EXCEL file, a PPT file, a design drawing, a digital photo/picture, or a dynamic digital document, such as a digital video, a digital recording, and a digital position. Animation, etc., can be software, programs, etc.
請先參考圖2，本發明所提出的第一較佳實施例，為一種數位內容雲存儲與存證方法，供使用在如圖1所示的數位內容整合式存證設備(500)中，用以對數位內容檔案(15)進行存證。數位內容整合式存證設備(500)如圖1所示，包括多個數位終端裝置(510)、至少一個數位存證伺服器裝置(520)、以及連接數位終端裝置(510)與數位存證伺服器裝置(520)的網路裝置(530)。為便於說明，以下僅以一個數位終端裝置(510)對應一個數位存證伺服器裝置(520)的實施例進行解說，但並不以此為限。本發明之內容亦適用於多個數位終端裝置(510)對應一個數位存證伺服器裝置(520)的實施方式；同時亦適用於多個數位終端裝置(510)對應一個伺服器組成的實施方式，其中此伺服器組成包含同步運作且互相備份的數個數位存證伺服器裝置(520)。Referring to FIG. 2, a first preferred embodiment of the present invention is a digital content cloud storage and storage method for use in a digital content integrated storage device (500) as shown in FIG. Used to deposit digital content files (15). The digital content integrated depository device (500), as shown in FIG. 1, includes a plurality of digital terminal devices (510), at least one digital certificate server device (520), and a digital terminal device (510) and a digital certificate. Network device (530) of the server device (520). For convenience of explanation, the following is only an example in which one digital terminal device (510) corresponds to one digital certificate server device (520), but is not limited thereto. The content of the present invention is also applicable to an embodiment in which a plurality of digital terminal devices (510) correspond to one digital certificate server device (520); and is also applicable to an embodiment in which a plurality of digital terminal devices (510) correspond to one server. , wherein the server comprises a plurality of digital certificate server devices (520) that operate synchronously and back up each other.
請參考圖2、並適當參酌圖3，本發明第一較佳實施例的數位內容雲存儲與存證方法，包括下列步驟：Referring to FIG. 2 and referring to FIG. 3 as appropriate, the digital content cloud storage and deposit method of the first preferred embodiment of the present invention includes the following steps:
(801)數位存證伺服器裝置(520)通過網路裝置(530)在數位終端裝置(510)取得一個數位內容檔案(15)並將其儲存；(801) the digital certificate server device (520) obtains a digital content file (15) from the digital terminal device (510) via the network device (530) and stores it;
(802)數位存證伺服器裝置(520)通過網路裝置(530)在數位終端裝置(510)取得相應於數位內容檔案(15)的第一屬性信息(410)並將其儲存，第一屬性信息(410)包括數位內容檔案(15)的使用者信息(411)與位置識別信息(412)，位置識別信息(412)包含地理信息(4121)及/或機器信息(4122)，地理信息(4121)為數位終端裝置(510)的地理位置，機器信息(4122)為數位終端裝置(510)的裝置身分碼；(802) The digital certificate server device (520) obtains, by the network device (530), the first attribute information (410) corresponding to the digital content file (15) at the digital terminal device (510) and stores it, first The attribute information (410) includes user information (411) and location identification information (412) of the digital content file (15), and the location identification information (412) includes geographic information (4121) and/or machine information (4122), geographic information. (4121) is the geographic location of the digital terminal device (510), and the machine information (4122) is the device identity code of the digital terminal device (510);
(803)數位存證伺服器裝置(520)對數位內容檔案(15)通過壓縮加密程序，生成一個檔案金鑰(151)並將其儲存；(803) The digital certificate server device (520) generates a file key (151) by storing the encrypted content program (15) and storing it;
(804)數位存證伺服器裝置(520)生成相應於檔案金鑰(151)的第二屬性信息(420)並將其儲存，第二屬性信息(420)包括數位存證伺服器裝置(520)生成檔案金鑰(151)的時間信息(421)，其中時間信息(421)包含第一時間信息(4211)及/或第二時間信息(4212)，第一時間信息(4211)是數位存證伺服器裝置(520)的本地時間，第二時間信息(4212)是數位終端裝置(510)與數位存證伺服器裝置(520)以外的第三方所提供給數位存證伺服器裝置(520)的時間；(804) The digital certificate server device (520) generates and stores the second attribute information (420) corresponding to the file key (151), and the second attribute information (420) includes the digital certificate server device (520). Generating time information (421) of the archive key (151), wherein the time information (421) includes first time information (4211) and/or second time information (4212), the first time information (4211) being a digital memory The local time of the server device (520), the second time information (4212) is provided to the digital certificate server device (520) by a third party other than the digital terminal device (510) and the digital certificate server device (520). )time;
(805)數位存證伺服器裝置(520)將第一屬性信息(410)與第二屬性信息(420)加載至檔案金鑰(151)以形成一個憑證檔案(18)並將其儲存；(805) The digital certificate server device (520) loads the first attribute information (410) and the second attribute information (420) to the archive key (151) to form a voucher file (18) and stores it;
(806)數位存證伺服器裝置(520)將憑證檔案(18)編譯生成一個憑證識別碼(181)並將其儲存；以及(806) the digital certificate server device (520) compiles the voucher file (18) to generate a voucher identification code (181) and stores it;
(807)數位存證伺服器裝置(520)通過網路裝置(530)將憑證識別碼(181)發送至數位終端裝置(510)。(807) The digital certificate server device (520) transmits the credential identification code (181) to the digital terminal device (510) via the network device (530).
在圖2中，步驟(803)的壓縮加密程序對數位內容檔案(15)進行壓縮加密轉換，得到唯一對應的檔案金鑰(151)。特別的是，只要數位內容檔案(15)的內容不相同，檔案金鑰(151)的內容就不會相同，且同一個數位內容檔案(15)，不管經過多久，其壓縮加密轉換所得到的檔案金鑰(151)會永遠相同。在一種實施方式中，檔案金鑰(151)是指藉由散列演算法對數位內容檔案(15)進行轉換所生成的編碼資料。這種編碼資料的檔案大小遠小於數位內容檔案(15)的檔案大小，例如可以採用MD5演算法對數位內容檔案(15)進行檔案金鑰(151)轉換，得到的檔案金鑰(151)是128位元的資料，檔案小，便於儲存與利用。此外，採用如MD5等散列演算法，可以得到與數位內容檔案(15)唯一對應的檔案金鑰(151)，進而可以證明數位內容檔案(15)的唯一性。也就是說，如果數位內容檔案(15)有任何修改，那麼藉由散列演算法對數位內容檔案(15)轉換所得到的檔案金鑰(151)將發生變化，即，修改前的數位內容檔案(15)轉換得到的檔案金鑰(151)不同於修改後的數位內容檔案(15)轉換得到的檔案金鑰(151)，且將數位內容檔案(15)轉化成檔案金鑰(151)是一個非可逆程序，無法透過任何還原工程對檔案金鑰(151)反推出數位內容檔案(15)的內容，從而確保在散佈檔案金鑰(151)的過程中，數位內容檔案(15)不會洩漏。需注意的是，採用MD5演算法進行檔案金鑰(151)轉換只是本發明的一種實施例，除了MD5演算法以外，還可以採用如MD4、SHA-1、SHA-225、SHA-256、SHA-384、SHA-512等散列演算法來生成檔案金鑰(151)。In FIG. 2, the compression encryption program of step (803) performs compression encryption conversion on the digital content file (15) to obtain a unique corresponding file key (151). In particular, as long as the content of the digital content file (15) is different, the content of the file key (151) will not be the same, and the same digital content file (15), no matter how long, the compression encryption conversion is obtained. The file key (151) will always be the same. In one embodiment, the archive key (151) refers to the encoded material generated by the conversion of the digital content file (15) by a hash algorithm. The file size of the encoded data is much smaller than the file size of the digital content file (15). For example, the MD5 algorithm can be used to convert the file key (151) to the digital content file (15), and the obtained file key (151) is 128-bit data, small file size, easy to store and use. In addition, by using a hash algorithm such as MD5, an archive key (151) uniquely corresponding to the digital content file (15) can be obtained, thereby further demonstrating the uniqueness of the digital content file (15). That is, if there is any modification to the digital content file (15), the file key (151) obtained by the hash algorithm for the conversion of the digital content file (15) will change, that is, the digital content before the modification. The file key (151) obtained by the file (15) conversion is different from the converted file key (151) of the modified digital content file (15), and the digital content file (15) is converted into the file key (151). Is a non-reversible program, can not reverse the content of the digital content file (15) on the file key (151) through any restoration project, thus ensuring that the digital content file (15) is not in the process of distributing the file key (151). Will leak. It should be noted that the file key (151) conversion using the MD5 algorithm is only one embodiment of the present invention. In addition to the MD5 algorithm, it is also possible to adopt, for example, MD4, SHA-1, SHA-225, SHA-256, and SHA. A hash algorithm such as -384, SHA-512, etc. is used to generate an archive key (151).
請參考圖3，一種實施方式中，第一屬性信息(410)中的使用者信息(411)可以由數位存證伺服器裝置(520)提供。使用者信息(411)可以是數位終端裝置(510)的使用者登錄數位存證伺服器裝置(520)時所使用的身分信息(4111)、或是使用者對數位內容檔案(15)的備註說明信息(4112)。其中，使用者的身分信息(4111)可以是使用者帳戶暱稱、或是使用者的證件號(例如：身分證號、駕照號、社會保險號)，更以用者帳戶暱稱與使用者證件號兩者同時具備為佳。Referring to FIG. 3, in an embodiment, the user information (411) in the first attribute information (410) may be provided by the digital certificate server device (520). The user information (411) may be identity information (4111) used by the user of the digital terminal device (510) to log in to the digital certificate server device (520), or a comment of the user on the digital content file (15). Description information (4112). The user identity information (4111) may be a user account nickname or a user's ID number (eg, an identity card number, a driver's license number, a social security number), and a user account nickname and a user ID number. Both are better at the same time.
請繼續參考圖3，一種實施方式中，第一屬性信息(410)中的位置識別信息(412)包含地理信息(4121)，此地理信息(4121)可以由數位終端裝置(510)提供。例如：在附加有GPS定位功能的行動裝置（如附加有GPS定位功能的智慧型手機等）之情況下，數位終端裝置(510)的地理信息(4121)可以由行動裝置的GPS模組提供。再者，數位終端裝置(510)的地理信息(4121)可以由數位終端裝置(510)發送後，再由數位存證伺服器裝置(520)進行判讀。例如：在數位終端裝置(510)是電腦的情況下，數位存證伺服器裝置(520)可以根據終端發送的IP位址來判斷數位終端裝置(510)的位置識別信息(412)，如此，位置識別信息(412)便能有助於證明數位內容檔案(15)的上傳地理位置。With continued reference to FIG. 3, in one embodiment, the location identification information (412) in the first attribute information (410) includes geographic information (4121), which may be provided by the digital terminal device (510). For example, in the case of a mobile device to which a GPS positioning function is attached (such as a smart phone with a GPS positioning function, etc.), the geographic information (4121) of the digital terminal device (510) can be provided by the GPS module of the mobile device. Furthermore, the geographic information (4121) of the digital terminal device (510) can be transmitted by the digital terminal device (510) and then interpreted by the digital certificate server device (520). For example, in the case where the digital terminal device (510) is a computer, the digital certificate server device (520) can determine the location identification information (412) of the digital terminal device (510) according to the IP address transmitted by the terminal, and thus, The location identification information (412) can help to prove the geographic location of the digital content archive (15).
請繼續參考圖3，一種實施方式中，位置識別信息(412)包含機器信息(4122)，機器信息(4122)為數位終端裝置(510)的裝置身分碼，通過對數位終端裝置(510)的裝置身分碼進行辨認，也可以知道數位終端裝置(510)的位置，即數位內容檔案(15)的上傳位置。With continued reference to FIG. 3, in one embodiment, the location identification information (412) includes machine information (4122), and the device information (4122) is a device identity code of the digital terminal device (510), through the digital terminal device (510). The device identity code is recognized, and the location of the digital terminal device (510), that is, the upload position of the digital content file (15), can also be known.
請參考圖3，第二屬性信息(420)中的時間信息(421)包含第一時間信息(4211)、或第二時間信息(4212)、或為兩者的結合。第一時間信息(4211)是數位存證伺服器裝置(520)通過壓縮加密程序生成的檔案金鑰(151)之本地時間，可用於證明檔案金鑰(151)的存在時間。而由於檔案金鑰(151)是唯一對應於數位內容檔案(15)，因此時間信息(421)能夠證明與上傳的檔案金鑰(151)唯一對應的數位內容檔案(15)之存在時間。由此可知，檔案金鑰(151)與數位內容檔案(15)的屬性信息相結合能夠證明與檔案金鑰(151)唯一對應的數位內容檔案(15)在特定時間存在的事實。第二時間信息(4212)可以由數位終端裝置(510)及數位存證伺服器裝置(520)以外的第三方提供給數位存證伺服器裝置(520)。例如，數位存證伺服器裝置(520)可以與國家授權的時間驗證機構或者其他可提供標準時間(例如格林威治時間、中原標準時間)的機構建立連接，由可提供標準時間的機構向數位存證伺服器裝置(520)提供標準的時間信息(421)或進行數位存證伺服器裝置(520)的時間校正，如此讓時間信息(421)更加準確和更具可靠性。Referring to FIG. 3, the time information (421) in the second attribute information (420) includes first time information (4211), or second time information (4212), or a combination of the two. The first time information (4211) is the local time of the file key (151) generated by the digital certificate server (520) by compressing the encryption program, and can be used to prove the existence time of the file key (151). Since the file key (151) is uniquely corresponding to the digital content file (15), the time information (421) can prove the existence time of the digital content file (15) uniquely corresponding to the uploaded file key (151). It can be seen that the combination of the archive key (151) and the attribute information of the digital content file (15) can prove the fact that the digital content file (15) uniquely associated with the archive key (151) exists at a specific time. The second time information (4212) may be provided to the digital certificate server device (520) by a third party other than the digital terminal device (510) and the digital certificate server device (520). For example, the digital certificate server device (520) can establish a connection with a state-authorized time verification authority or other organization that can provide standard time (eg, Greenwich Mean Time, Central Plains Standard Time), from a mechanism that can provide standard time to a digital location. The deposit server device (520) provides standard time information (421) or time correction for the digital certificate server device (520), thus making the time information (421) more accurate and more reliable.
請參考圖3，一種實施方式中，第二屬性信息(420)更包含數位存證伺服器裝置(520)對檔案金鑰(151)的補充說明信息(422)，藉以使數位存證伺服器裝置(520)的管理員、數位內容檔案(15)的使用者更容易記憶與理解檔案金鑰(151)的相關來龍去脈。Referring to FIG. 3, in an embodiment, the second attribute information (420) further includes supplementary description information (422) of the file key (151) by the digital certificate server (520), so that the digital certificate server is provided. The administrator of the device (520) and the user of the digital content file (15) are more likely to memorize and understand the context of the file key (151).
請繼續參考圖2，第一較佳實施例的一種衍生實施方式中，在步驟(807)之後，可以進一步包括步驟(808)：在該數位終端裝置(510)將該憑證識別碼(181)反向解析而生成其相應的憑證檔案(18)。With continued reference to FIG. 2, in a derivative implementation of the first preferred embodiment, after step (807), step (808) may be further included: the voucher identification code (181) is received at the digital terminal device (510). Reverse parsing generates its corresponding credential file (18).
較佳地，憑證識別碼(181)為二維條碼(QR Code)，但並不以此為限。憑證識別碼(181)的用意是讓數位終端裝置(510)的使用者可以將憑證識別碼(181)公開發佈給其他人，其他人(或是數位終端裝置(510)的使用者本人)只要通過簡易的掃描解析裝置掃描此憑證識別碼(181)，便能夠閱讀憑證檔案(18)的內容，得知數位終端裝置(510)的使用者，已經把數位內容檔案(15)在特定時間與特定地點取得檔案金鑰做第三方存證，因此數位內容檔案(15)必須經過合理的授權使用，不得隨意盜用。藉此，提高智慧財產的保護與運作效率。Preferably, the voucher identification code (181) is a QR Code, but is not limited thereto. The purpose of the voucher identification code (181) is to allow the user of the digital terminal device (510) to publicly distribute the voucher identification code (181) to other persons, as well as other persons (or the user of the digital terminal device (510)) as long as By scanning the voucher identification code (181) by a simple scanning and analyzing device, the contents of the voucher file (18) can be read, and the user of the digital terminal device (510) has already recorded the digital content file (15) at a specific time. The file key is obtained as a third-party deposit certificate at a specific location, so the digital content file (15) must be used with reasonable authorization and must not be stolen. In this way, improve the protection and operational efficiency of intellectual property.
請繼續參考圖2，第一較佳實施例的另一種衍生實施方式中，在步驟(805)之後，進一步包括：(8051)數位存證伺服器裝置(520)對憑證檔案(18)通過壓縮加密程序，生成一個憑證金鑰(182)並將其儲存。藉此可使得憑證檔案(18)的內容，包括第一屬性信息與第二屬性信息都得到存證與保全。With continued reference to FIG. 2, in another derivative implementation of the first preferred embodiment, after the step (805), the method further includes: (8051) the digital certificate server device (520) compresses the voucher file (18). Encrypt the program, generate a credential key (182) and store it. Thereby, the content of the voucher file (18), including the first attribute information and the second attribute information, can be verified and preserved.
請繼續參考圖2，一種實施方式中，在上述實施例中的步驟(803)與步驟(804)之間，可以進一步包含步驟(8031)：在數位存證伺服器裝置(520)內，搜尋並比對是否存在相同的檔案金鑰(151)。Referring to FIG. 2, in an implementation manner, between step (803) and step (804) in the foregoing embodiment, step (8031) may be further included: searching in the digital certificate server device (520) And compare whether there is the same file key (151).
根據本實施方式，能夠辨認在數位存證伺服器裝置(520)內是否已經儲存過與當前前生成的檔案金鑰(151)相同的檔案金鑰(151)，並能夠根據辨認的結果來執行檔案金鑰(151)的屬性信息之載入及儲存，提供警示信息，進而可以減少儲存於數位存證伺服器裝置(520)中的憑證檔案(18)與數位內容檔案(151)之數量，提高管理效能與資源利用率。According to the present embodiment, it is possible to recognize whether or not the same file key (151) as the currently generated file key (151) has been stored in the digital certificate server device (520), and can be executed based on the result of the recognition. The loading and storing of the attribute information of the file key (151) provides warning information, thereby reducing the number of the voucher file (18) and the digital content file (151) stored in the digital certificate server device (520). Improve management efficiency and resource utilization.
上述實施例的更進一步，當在搜尋數位存證伺服器裝置(520)中是否已存有包含相同的檔案金鑰(151)時，可以根據其相應的第一屬性信息(410)中的使用者信息優先搜尋，當搜尋到相同使用者信息之後，再進行檔案金鑰(151)的搜尋比對，從而可以減少比對時間，提高效率。Further, in the above embodiment, when the same file key (151) is already stored in the search digital certificate server device (520), it can be used according to its corresponding first attribute information (410). The information is preferentially searched, and after searching for the same user information, the search key comparison of the file key (151) is performed, thereby reducing the comparison time and improving the efficiency.
一種實施方式中，如果數位存證伺服器裝置(520)辨認已存有相同的檔案金鑰(151)，則數位存證伺服器裝置(520)可以通知數位終端裝置(510)放棄當前上傳的數位內容檔案(15)。在這種情況下，由於已經存在相同的檔案金鑰(151)，則可以辨認數位存證伺服器裝置(520)先前曾經為使用者將同一份數位內容檔案(15)壓縮加密生成檔案金鑰(151)，且在先前已經為檔案金鑰(151)載入了第一屬性信息(410)及第二屬性信息(420)，記載了檔案金鑰(151)先前的生成時間。由於先前保存的檔案金鑰(151)之時間早於現在生成的檔案金鑰(151)，因此可以選擇放棄當前檔案金鑰(151)的儲存，這樣可以保證在數位存證伺服器裝置(520)中所儲存的憑證檔案(18)中的檔案金鑰(151)及其時間信息(421)能夠代表檔案金鑰(151)先前生成的時間信息(421)，進而能夠進一步表明檔案金鑰(151)所對應的數位內容檔案(15)所存在的較早時間。In one embodiment, if the digital certificate server device (520) recognizes that the same file key (151) is stored, the digital certificate server device (520) can notify the digital terminal device (510) to abandon the currently uploaded Digital content file (15). In this case, since the same file key (151) already exists, it can be recognized that the digital certificate server device (520) has previously compressed and encrypted the same digital content file (15) for the user to generate the file key. (151), and the first attribute information (410) and the second attribute information (420) have been previously loaded for the archive key (151), and the previous generation time of the archive key (151) is recorded. Since the previously saved file key (151) is earlier than the currently generated file key (151), it is optional to abandon the storage of the current file key (151), thus ensuring the digital certificate server device (520). The file key (151) and its time information (421) in the voucher file (18) stored in the file can represent the time information (421) previously generated by the file key (151), thereby further indicating the file key ( 151) The earlier time of the corresponding digital content file (15).
更進一步，數位內容檔案(15)在儲存至數位內容伺服資料庫(325)的過程中，可以再經過一個加密的程序，使數位內容檔案(15)有更好的保密安全性，起到一個雲端保險箱的作用。Further, the digital content file (15) can be subjected to an encrypted program in the process of storing the digital content servo database (325), so that the digital content file (15) has better security and security. The role of the cloud safe.
本發明中，網路裝置(530)可以是網際網路，也可以是數據通信網路，也可以是這兩種混和的網路；可以是企業防火牆內部的內網，也可以是內網與外網的複合網路。數位終端裝置(510)可以是桌上型電腦、筆記型電腦、智慧型手機、平板電腦等。數位終端裝置(510)甚至可以是另一部儲存有大量數位內容檔案的伺服器，藉此使得伺服器內的大量數位內容檔案都得到存儲與存證。In the present invention, the network device (530) may be an internet network, a data communication network, or a network of the two types; the internal network of the enterprise firewall may be an intranet or an intranet. A composite network of external networks. The digital terminal device (510) may be a desktop computer, a notebook computer, a smart phone, a tablet computer, or the like. The digital terminal device (510) may even be another server that stores a large number of digital content files, thereby causing a large number of digital content files in the server to be stored and verified.
本發明所提供的數位終端裝置(510)可以進一步設置數位攝像/錄像頭(未圖示)，藉由攝像而取得數位照片而作為數位內容檔案(15)，也可以藉由錄影而取得視頻而作為數位內容檔案(15)。本發明所提供的數位終端裝置(510)可以進一步設置數位錄音裝置(未圖示)，藉由錄音而取得數位音頻而作為數位內容檔案(15)。The digital terminal device (510) provided by the present invention may further be provided with a digital camera/video head (not shown), and obtain a digital photo by imaging to be used as a digital content file (15), or may acquire a video by video recording. As a digital content file (15). The digital terminal device (510) provided by the present invention may further be provided with a digital recording device (not shown) for acquiring digital audio as a digital content file (15) by recording.
另一方面，儲存在數位終端裝置(510)的數位內容檔案(15)，可以是藉由上述的數位攝像/錄像頭、數位錄音裝置取得的數位內容檔案；也可以是通過拷貝；有線/無線的網路傳輸(例如藍芽、或網路分享、電子郵件等)由其他裝置取得的數位內容檔案；也可以是通過數位終端裝置(510)內部設置的辦公軟件(例如：MS OFFICE WORD、MS OFFICE EXCEL、MS OFFICE POWERPOINT、MS FRONTPAGE、MS OUTLOOK)所產生的數位內容檔案(15)；也可以是通過數位終端裝置(510)內部設置的專業/專用軟體(例如：PRO-E、SOLID WORKS、AUTOCAD、會計專用軟體等)所產生的數位內容檔案；也可以是通過網路瀏覽器在瀏覽畫面時擷取的網路畫面檔案等。On the other hand, the digital content file (15) stored in the digital terminal device (510) may be a digital content file obtained by the above-mentioned digital camera/video head or digital recording device; or may be copied; wired/wireless Network transmission (such as Bluetooth, or network sharing, email, etc.) digital content files obtained by other devices; or office software set by digital terminal device (510) (for example: MS OFFICE WORD, MS) Digital content file generated by OFFICE EXCEL, MS OFFICE POWERPOINT, MS FRONTPAGE, MS OUTLOOK) (15); it can also be professional/dedicated software (such as PRO-E, SOLID WORKS, which is set internally by the digital terminal device (510). Digital content files generated by AUTOCAD, accounting software, etc.; or network image files captured by a web browser while browsing the screen.
如此，根據本發明所實施的數位內容雲存儲與存證方法(500)，藉由將數位內容檔案(15)轉化成檔案金鑰(151)，可降低檔案的大小，便於保存與利用。此外，更進一步將各屬性信息加載至檔案金鑰(151)所形成的憑證檔案(18)保存在數位存證伺服器裝置(520)中可以證明數位內容檔案(15)在特定時間已存在的事實，並且確保憑證檔案(18)存在時間的可靠性。更進一步地，由於憑證檔案(18)優先儲存在於數位存證伺服器裝置(520)中，而且被壓縮加密生成憑證金鑰(182)，因此更可以避免憑證檔案(18)中的資料被篡改，進而確保憑證檔案(18)的公正效力。As such, the digital content cloud storage and deposit method (500) implemented in accordance with the present invention can reduce the size of the file and facilitate storage and utilization by converting the digital content file (15) into the file key (151). In addition, the credential file (18) formed by further loading each attribute information into the archive key (151) is stored in the digital certificate server device (520) to prove that the digital content file (15) already exists at a specific time. The fact, and to ensure the reliability of the voucher file (18) time. Further, since the voucher file (18) is preferentially stored in the digital certificate server device (520), and the voucher key (182) is generated by compression encryption, the data in the voucher file (18) can be prevented from being tampered with. To ensure the fairness of the voucher file (18).
再者，必須提醒的是，根據TRIZ理論(Theoria Resheneyva Isobretatelskehuh Zadach，創新問題解決理論)之TRIZ之父：Genrich Altshuller曾經提出的五級創新理論，從第一級創新到第五級創新其中創新等級越高者，創新程度越大，而跨領域知識的轉用為第四級創新，屬於高度創新。本發明通過壓縮加密程序產生檔案金鑰使用的是“密碼學原理”，國際專利分類號為G09C，體現的具體裝置為“用於傳輸保密數位資訊之裝置”，國際專利分類號為H04L9/00，提供的人、時、地、事/物的第三方公正憑證功能又屬於“保險印鑑”的領域，國際專利分類號為G09F。因此，本發明實整合了多種不同技術與不同行業，為跨領域的整合型技術，具有高度新穎性與進步性。Furthermore, it must be reminded that according to TRIZ theory (Theoria Resheneyva Isobretatelskehuh Zadach, the theory of innovative problem solving), the father of TRIZ: Genrich Altshuller has proposed a five-level innovation theory, from the first level of innovation to the fifth level of innovation. The higher the degree, the greater the degree of innovation, and the shifting of cross-domain knowledge to the fourth level of innovation is highly innovative. The invention uses the compression encryption program to generate the file key using the "cryptographic principle", the international patent classification number is G09C, and the specific device embodied is "the device for transmitting the confidential digital information", and the international patent classification number is H04L9/00. The third-party fair voucher function of the person, time, place, and thing/object provided is also in the field of “insurance seal”, and the international patent classification number is G09F. Therefore, the present invention integrates a plurality of different technologies and different industries, and is a cross-domain integrated technology, which is highly novel and progressive.
以上所述僅為本發明之較佳實施方式及其實施例，並非用以限定本發明之權利範圍；同時以上的描述，對於相關技術領域之專門人士應可明瞭及實施，因此其他未脫離本發明所揭示之精神下所完成的等效改變或修飾，均應包含在申請專利範圍中。The above description is only the preferred embodiment of the present invention and its embodiments, and is not intended to limit the scope of the present invention. The above description should be understood and implemented by those skilled in the relevant art, so that the other Equivalent changes or modifications made by the spirit of the invention should be included in the scope of the patent application.
(500)．．．數位內容整合式存證設備(500). . . Digital content integrated storage device
(510)．．．數位終端裝置(510). . . Digital terminal device
(520)．．．數位存證伺服器裝置(520). . . Digital certificate server
(530)．．．網路裝置(530). . . Network device
(15)．．．數位內容檔案(15). . . Digital content file
(151)．．．檔案金鑰(151). . . File key
(18)．．．憑證檔案(18). . . Voucher file
(181)．．．憑證識別碼(181). . . Voucher ID
(182)．．．憑證金鑰(182). . . Credential key
(410)．．．第一屬性信息(410). . . First attribute information
(411)．．．使用者信息(411). . . User information
(4111)．．．使用者的身分信息(4111). . . User identity information
(4112)．．．備註說明信息(4112). . . Remarks information
(412)．．．位置識別信息(412). . . Location identification information
(4121)．．．地理信息(4121). . . Geographic information
(4122)．．．機器信息(4122). . . Machine information
(420)．．．第二屬性信息(420). . . Second attribute information
(421)．．．時間信息(421). . . Time information
(4211)．．．第一時間信息(4211). . . First time information
(4212)．．．第二時間信息(4212). . . Second time information
(422)．．．補充說明信息(422). . . Supplementary information
(801,802,803,804,805,806,807,808,8031,8051)．．．數位內容存證步驟(801,802,803,804,805,806,807,808,8031,8051). . . Digital content verification step
圖1為一種數位內容整合式存證設備。Figure 1 shows a digital content integrated depository device.
圖2為本發明提出之數位內容雲存儲與存證方法之第一較佳實施例。2 is a first preferred embodiment of a digital content cloud storage and deposit method according to the present invention.
圖3為本發明提出之第一屬性信息、第二屬性信息、時間信息、位置識別信息與使用者信息的示意圖。3 is a schematic diagram of first attribute information, second attribute information, time information, location identification information, and user information proposed by the present invention.
(500)．．．數位內容整合式存證設備(500). . . Digital content integrated storage device
(510)．．．數位終端裝置(510). . . Digital terminal device
(520)．．．數位存證伺服器裝置(520). . . Digital certificate server
(530)．．．網路裝置(530). . . Network device
(15)．．．數位內容檔案(15). . . Digital content file
(151)．．．檔案金鑰(151). . . File key
(18)．．．憑證檔案(18). . . Voucher file
(181)．．．憑證識別碼(181). . . Voucher ID
(182)．．．憑證金鑰(182). . . Credential key
(410)．．．第一屬性信息(410). . . First attribute information
(420)．．．第二屬性信息(420). . . Second attribute information
(801,802,803,804,805,806,807,808,8031,8051)．．．數位內容存證步驟(801,802,803,804,805,806,807,808,8031,8051). . . Digital content verification step
Claims (8)
(801)該數位存證伺服器裝置(520)通過該網路裝置(530)在該數位終端裝置(510)取得一個數位內容檔案(15)並將其儲存；
(802)該數位存證伺服器裝置(520)通過該網路裝置(530)在該數位終端裝置(510)取得相應於該數位內容檔案(15)的第一屬性信息(410)並將其儲存，該第一屬性信息(410)包括該數位內容檔案(15)的使用者信息(411)與位置識別信息(412)，該位置識別信息(412)包含地理信息(4121)及/或機器信息(4122)，該地理信息(4121)為該數位終端裝置(510)的地理位置，該機器信息(4122)為該數位終端裝置(510)的裝置身分碼；
(803)該數位存證伺服器裝置(520)對該數位內容檔案(15)通過壓縮加密程序，生成一個檔案金鑰(151)並將其儲存；
(804)該數位存證伺服器裝置(520)生成相應於該檔案金鑰(151)的第二屬性信息(420)並將其儲存，該第二屬性信息(420)包括該數位存證伺服器裝置(520)生成該檔案金鑰(151)的時間信息(421)，其中該時間信息(421)包含第一時間信息(4211)及/或第二時間信息(4212)，該第一時間信息(4211)是該數位存證伺服器裝置(520)的本地時間，該第二時間信息(4212)是該數位終端裝置(510)與該數位存證伺服器裝置(520)以外的第三方所提供給該數位存證伺服器裝置(520)的時間；
(805)該數位存證伺服器裝置(520)將該第一屬性信息(410)與該第二屬性信息(420)加載至該檔案金鑰(151)以形成一個憑證檔案(18)並將其儲存；
(806)該數位存證伺服器裝置(520)將該憑證檔案(18)編譯生成一個憑證識別碼(181)並將其儲存；以及
(807)該數位存證伺服器裝置(520)通過該網路裝置(530)將該憑證識別碼(181)發送至該數位終端裝置(510)。A digital content cloud storage and deposit method for use in a digital content integrated storage device (500) for depositing a digital content file (15), the digital content integrated storage device (500) comprising At least one digital terminal device (510), at least one digital certificate server device (520), and a network device (530) connecting the digital terminal device (510) and the digital certificate server device (520), The digital content cloud storage and deposit method includes the following steps:
(801) the digital certificate server device (520) obtains a digital content file (15) at the digital terminal device (510) through the network device (530) and stores it;
(802) the digital certificate server device (520) obtains, by the network device (530), first attribute information (410) corresponding to the digital content file (15) at the digital terminal device (510) and The first attribute information (410) includes user information (411) and location identification information (412) of the digital content file (15), the location identification information (412) including geographic information (4121) and/or machine Information (4122), the geographic information (4121) is a geographic location of the digital terminal device (510), and the machine information (4122) is a device identity code of the digital terminal device (510);
(803) the digital certificate server device (520) generates an archive key (151) and stores the digital content file (15) by compressing the encryption program;
(804) the digital certificate server device (520) generates and stores second attribute information (420) corresponding to the file key (151), the second attribute information (420) including the digital certificate server The device (520) generates time information (421) of the file key (151), wherein the time information (421) includes first time information (4211) and/or second time information (4212), the first time The information (4211) is the local time of the digital certificate server device (520), and the second time information (4212) is a third party other than the digital terminal device (510) and the digital certificate server device (520). The time provided to the digital certificate server device (520);
(805) the digital certificate server device (520) loads the first attribute information (410) and the second attribute information (420) to the file key (151) to form a voucher file (18) and Its storage;
(806) the digital certificate server device (520) compiles the voucher file (18) to generate a voucher identification code (181) and stores it;
(807) The digital certificate server device (520) transmits the credential identification code (181) to the digital terminal device (510) via the network device (530).
(808)在該數位終端裝置(510)將該憑證識別碼(181)反向解析而生成其相應的憑證檔案(18)。The digital content cloud storage and deposit method according to claim 1 of the patent application scope, wherein after step (807), further comprising:
(808) The digital terminal device (510) reversely parses the voucher identification code (181) to generate its corresponding voucher file (18).
(8031)在該數位存證伺服器裝置(520)內，搜尋並比對是否存在相同的檔案金鑰(151)。The digital content cloud storage and deposit method according to Item 1 of the patent application scope, wherein after step (803), further comprising:
(8031) Within the digital certificate server device (520), the same file key (151) is searched for and compared.
(8051)該數位存證伺服器裝置(520)對該憑證檔案(18)通過壓縮加密程序，生成一個憑證金鑰(182)並將其儲存。The digital content cloud storage and deposit method according to claim 1 of the patent application scope, wherein after step (805), further comprising:
(8051) The digital certificate server device (520) generates a voucher key (182) for the voucher file (18) by compressing the encryption program and storing it.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| TW101112934A TW201342869A (en) | 2012-04-12 | 2012-04-12 | Digital content cloud storage and authentication method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| TW101112934A TW201342869A (en) | 2012-04-12 | 2012-04-12 | Digital content cloud storage and authentication method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| TW201342869A true TW201342869A (en) | 2013-10-16 |
Family
ID=49771616
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| TW101112934A TW201342869A (en) | 2012-04-12 | 2012-04-12 | Digital content cloud storage and authentication method |
Country Status (1)
| Country | Link |
|---|---|
| TW (1) | TW201342869A (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| TWI643086B (en) * | 2016-02-23 | 2018-12-01 | 遊戲橘子數位科技股份有限公司 | Method for binding by scanning two-dimensional barcode |
| DE102021129282A1 (en) | 2021-11-10 | 2023-05-11 | EPLAN GmbH & Co. KG | Flexible management of resources for multiple users |
-
2012
- 2012-04-12 TW TW101112934A patent/TW201342869A/en unknown
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| TWI643086B (en) * | 2016-02-23 | 2018-12-01 | 遊戲橘子數位科技股份有限公司 | Method for binding by scanning two-dimensional barcode |
| DE102021129282A1 (en) | 2021-11-10 | 2023-05-11 | EPLAN GmbH & Co. KG | Flexible management of resources for multiple users |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11323272B2 (en) | Electronic identification verification methods and systems with storage of certification records to a side chain | |
| US11907406B2 (en) | Computer-implemented method and system of tamper-evident recording of a plurality of service data items | |
| US20200097733A1 (en) | Securely Authenticating a Recording File from Initial Collection Through Post-Production and Distribution | |
| CN107483181B (en) | Contract management method and device and terminal | |
| CN110351239B (en) | Block chain-based electronic contract storage method and device and electronic equipment | |
| NL2012439C2 (en) | A method and system for authenticating and preserving data within a secure data repository. | |
| US20200372184A1 (en) | Method and arrangement for detecting digital content tampering | |
| EP3570549B1 (en) | Non-deterministic time systems and methods | |
| CN110958319B (en) | Method and device for managing infringement and evidence-based block chain | |
| JP6543743B1 (en) | Management program | |
| CN101359989A (en) | Method, apparatus and mobile communication terminal generating safe digital photograph | |
| WO2017063465A1 (en) | Innovation and creativity data processing method, device and system and certificate storage device | |
| TW201325179A (en) | Method and system for proving a digital file | |
| EP3803670A1 (en) | A software application and a computer server for authenticating the identity of a digital content creator and the integrity of the creator's published content | |
| KR20200055410A (en) | Contract apparatus and method of blockchain using digital contents orginal key | |
| US20230066630A1 (en) | System and method for ensuring document integrity with non-fungible tokens | |
| TW201342869A (en) | Digital content cloud storage and authentication method | |
| TW201344487A (en) | Digital authentication control medium and digital terminal device having network communication function | |
| CN106254341A (en) | Data fingerprint extracting method and system for centralized electronic data safety system | |
| TW201344486A (en) | Digital content security control medium, digital memory card, USB disk, and digital authentication terminal | |
| KR101727582B1 (en) | Evidence system and method to determine whether digital file is forged or falsified by using smart phone | |
| US9633228B1 (en) | Verifiable media system and method | |
| JP2013157777A (en) | Information processing system and information processing method | |
| CN103838986A (en) | Multimedia file encryption method and device | |
| TW201342081A (en) | Digital content cloud storage and authentication method |