JP4668457B2 - Terminal device, procedure system, and storage medium therefor - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a procedure system such as an insurance contract using a network.
[0002]
[Prior art]
Insurance contracts are often made through insurance agents. Conventionally, an insurance agent has a terminal device connected to an insurance company through a dedicated line, and uses the terminal device to perform necessary processing for a contract. That is, when the contractor visits the insurance agent and determines and designates necessary items, the person in charge of the insurance agent operates the terminal device described above to create an application form and a contract document. A copy of the application form and part of the contract are handed over to the contractor. In addition, the original application form and contract are sent to the insurance company by mail or the like, while the application and contract data are sent to the insurance company via a dedicated line and the contract is recorded.
[0003]
[Problems to be solved by the invention]
However, it may happen that the application data and contract data created at the agency are accidentally changed or intentionally falsified before being sent to the insurance company. Also, if it is malicious, it can happen to create a fictitious insurance contract.
[0004]
The present invention has been made in view of the above points, and provides a procedure system capable of checking falsification of procedure data transmitted from an agent or a user to a service provider and checking falsification of a fictitious procedure. With the goal.
[0005]
  In one aspect of the present invention, the terminal device of the procedure system is based on an input unit, a storage unit, and necessary items input through the input unit.Create procedure data for applicantsAnd save in the storage unitProcedure data creation means and the procedure dataA first electronic signature is created by arithmetic processing for the target and stored in the storage unitA first signature means and a first electronic signature by the first signature meansCreateA print means for printing out the procedure data as a contract document only after being printed, and print data indicating the print time and the number of prints by the print meansAnd save in the storage unitPrint data creation means and at least the digital signatureGiveCreates event history data including the contents and time of occurrence of eventsAnd save in the storage unitEvent history creation means, the procedure data, the first electronic signature, the print data, and the event history dataA second electronic signature is created by arithmetic processing for the target and stored in the storage unitA second signature means, the procedure data, the first electronic signature, the print data, the event history data, and the second electronic signature.Read from the storage unit, server as transmission dataTransmitting means for transmitting to the apparatus.
[0006]
  According to the above configuration,Through the input sectionNecessary items regarding the applicant's insurance contract are entered and procedural data is created. Procedure dataBy processing that targetsThe first electronic signatureCreated and saved in storageIs done. The first electronic signatureCreateThe procedure data can be printed out on the condition that it has been done, and the data is printed out as a contract document. When printing, the print time and number of prints are printed as print data.Save to storageIs done. In addition, the contents and occurrence time of a series of events, including the addition of electronic signatures, are recorded as event history data.Save to storageIs done. Procedure data, first electronic signature, print data, and event history dataBy processing that targetsSecond electronic signatureCreated and saved in storageAnd they areServer as send dataSent to the device. As described above, since the electronic signature is attached to the procedure data, unauthorized modification of the procedure data can be prevented. In addition, the event history being processed and the data of the print time / number of times are also recorded, and after adding an electronic signature along with the procedure dataserverSince it is sent to the apparatus, unauthorized alteration can be detected from data such as event history and print time / number of times, and a safe insurance contract can be made.
[0007]
  One aspect of the above terminal device is through the input unit.Reason request means for requesting input of the reason for reprinting when a reprint request for the contract document is input;Through the input sectionEnter the reason for reprinting as reason dataIn the storage unitReason data storage means for storing, wherein the second signature means includes a second signature including the reason data.CreateAnd the transmission meansIn the transmission dataThe reason data is transmitted including the reason data. As a result, the reason for reprinting is the dataserverSince the data is sent to the apparatus, the insurance company or the like can examine the reason for reprinting together with the event history data, print data, and the like to check whether unauthorized reprinting has been performed.
[0008]
  In another aspect of the above terminal device,The printing means prints information indicating the number of times of printing on the contract document. The original printed contract documents are sent to insurance companies by mail. Therefore, the insurance company can compare whether the number of prints shown on the contract document is compared with the number of prints in the transmitted print data to check whether a large number of prints are illegally performed.
[0009]
  In another aspect of the above terminal device,The printing means generates digital watermark data based on at least all or part of the procedure data, inserts the digital watermark data into the procedure data, and prints out a digital watermarked contract document. As a result, the insurance company can check whether or not any alteration has been made on the paper of the contract document by extracting the digital watermark data from the paper of the contract document.
[0010]
  Another aspect of the terminal device described above is through the input unit.Reason request means for requesting input of the reason for reprinting when a reprint request for the contract document is input;Through the input sectionEnter the reason for reprinting as reason dataIn the storage unitReason data storing means for storing, and means for recording at least one of the procedure data, the reason data, and the electronic signature in a non-rewritable state on a recording medium. Thereby, alteration of data transmitted to an external terminal device can be prevented.
[0011]
  In another aspect of the above terminal device, the procedure data creation means receives the necessary items from a contractor terminal connected via a network. Accordingly, the applicant can make an insurance contract using his / her terminal device.
[0012]
  In another aspect of the above terminal device, the procedure data creation means disables changing the contents of the procedure data after the first electronic signature is created by the first signature means. In another aspect, the procedure data creation means disables changing the contents of the procedure data after the time point when a print instruction is input to the printing means. In another aspect, the procedure data creating means disables changing the contents of the procedure data after the time when an instruction to transmit the transmission data to the server device is input. In yet another aspect, the apparatus further comprises means for assigning a procedure number to the procedure data, and the procedure data creating means is unable to change the contents of the procedure data after the time when the procedure number is assigned to the procedure data. To do. As a result, unauthorized modification after the procedure data is confirmed can be prevented.
[0013]
  In a preferred example, the procedure data creation means disables the content change by making the input field of the procedure data unwritable. In another preferred example, the procedure data creation means disables the content change by converting the procedure data into image data.
[0014]
  Another aspect of the present invention is a procedural system comprising the above terminal device and a server device, wherein the server device receives receiving means for receiving the transmission data via a network, and the second electronic signature. And first detection means for detecting whether or not the procedure data, the first electronic signature, the print data, and the event history data are altered by decryption. Thereby, alterations such as print data and event history data can be automatically detected.
[0015]
  In one aspect of the above-described procedure system, the server device includes a second detection unit that detects whether or not the procedure data has been altered by decrypting the first signature. Thereby, the modification to the procedure data can be detected.
[0016]
  In another aspect of the present invention, an input unit and a storage unit are provided.The computer-readable storage medium is the computer,Based on the necessary information input through the input unit,Create procedure data for applicantsAnd save in the storage unitProcedure data creation means, the procedure dataA first electronic signature is created by arithmetic processing for the target and stored in the storage unitThe first electronic signature is obtained by the first signature means and the first signature means.CreatePrint data that prints out the procedure data as a contract document only after being printed, and print data indicating the printing time and the number of times of printing by the printing meansAnd save in the storage unitPrint data creation means, at least with the digital signatureGiveCreates event history data including the contents and time of occurrence of eventsAnd save in the storage unitEvent history creation means, the procedure data, the first electronic signature, the print data, and the event history dataA second electronic signature is created by arithmetic processing for the target and stored in the storage unitSecond signature means, the procedure data, the first electronic signature, the print data, the event history data, and the second electronic signatureRead from the storage unit, server as transmission dataA program for operating as transmission means for transmitting to the apparatus is stored.
[0017]
Therefore, by reading the storage medium into a computer such as a terminal device, the terminal device can be operated as the procedure system of the present invention.
[0018]
DETAILED DESCRIPTION OF THE INVENTION
Preferred embodiments of the present invention will be described below with reference to the drawings.
[0019]
  Figure 1 shows the bookEmbodimentShows the schematic configuration of the procedure system. In the present embodiment, it is assumed that the contractor 6 visits an agency of an insurance company to make a contract for overseas travel accident insurance. An agency terminal 2, a printer 3, and a write-once medium 4 are arranged at an agency of the insurance company. The agency terminal 2 can be configured by a general-purpose personal computer, and functions as an agency terminal of the procedure system by executing an insurance contract program stored in a storage medium 9 such as a CD-ROM. The printer 3 is used for printing out application forms and contracts. The write-once medium 4 is a medium that can be written only once (for example, data that has been written cannot be rewritten), such as a CD-R. The agency terminal 2 is connected to the insurance company server 5 via the network 7 and the company A server 1, and one suitable example of the network 7 is the Internet. The company A server 1 receives contract data and the like performed using the agency terminal, manages backup, etc., and sends it to the insurance company.
[0020]
First, the flow of the contract procedure is outlined. The contractor (applicant) 6 visits the store of the agency and makes an insurance contract according to the guidance of the store clerk. That is, the contractor 6 informs the store clerk of matters necessary for the contract, and the store clerk operates the agency terminal 2 to input the necessary items and create application data. The application data is output to paper by the printer 3 and becomes an application form. The contractor signs and seals this application form and gives it to the store clerk. The store clerk gives one part of the application form to the contractor as a copy for the contractor. Next, the store clerk operates the agency terminal 2, creates contract data based on the application data, and outputs it as a contract from the printer. A copy of the contract is given to the contractor. In this way, the contractor receives a copy of the application form and the contract, and finishes the procedure at the agency. Note that the contract data includes the contents of the application data.
[0021]
The clerk transmits the created contract data to the insurance company server 5 via the company A server 1 through the network 7. In addition, the clerk of the agency gives the printed out application form and contract (hereinafter referred to as “contract document”) to the insurance company as an original. This is done by mail or by hand. The insurance company collates the contents of the contract documents with the contents of the contract data received via the network 7 and confirms whether any changes or alterations have been made after the contract. If the two match, it is processed as an appropriate contract.
[0022]
  BookEmbodimentIn this case, intentional or unintentional changes or fraudulent alterations (hereinafter collectively referred to simply as “modification”) that may occur during the period from when the contract documents and contract data are created at the agency until they are received by the insurance company. ) Is detected. Therefore, some preventive measures are taken to prevent such modification when the contract documents and contract data are created in the agency. Modifications that can occur at agents are broadly divided into cases in which the actual contracts are tampered with and then recorded to the insurance company (type 1), and when fictitious contracts that do not actually exist are created ( Type 2) is considered. BookEmbodimentThen, prevention measures are taken for each type of modification. In addition to the modifications made as described above due to the processing of the store clerk in the agency, the modifications made to the contract data while being transmitted on the network 7 can be considered. Any modificationEmbodimentIt is possible to detect by this method.
[0023]
Next, a technique for attaching an electronic signature, which is mainly a preventive measure for Type 1, will be outlined with reference to FIG. Electronic signatures are generally performed as follows. The signer processes the data to be signed with a hash function and encrypts the resulting hash value with the signer's private key (in the case of a public key cryptosystem) or a common key (in the case of a common key cryptosystem). Data obtained as a result of this encryption is called an electronic signature and is transmitted together with the target data. Note that “electronic signature” generally refers only to data encrypted by public key cryptography, and may not include data obtained by common key cryptography. Call. The receiving side has in advance the signer's public key (in the case of public key cryptography) or a common key (common key cryptography), and decrypts the received electronic signature with the key to obtain a hash value. Also, the signature target data received at the same time is processed with the same hash function to calculate a hash value, and is compared with the hash value obtained by decrypting the electronic signature. If they match, it is confirmed that the data from the signer has not been altered.
[0024]
Now, referring to FIG. 2A, when the store clerk inputs necessary information to the agency terminal 2 with the applicant, contract data is created. When the applicant's confirmation about the contents of the contract data is obtained, the store clerk performs an electronic signature. In other words, a unique value (ID, securities number, etc.) generated from the time etc. is added to the contract data, and an electronic signature is created, added to both sets of data, and stored. To do. Thereafter, the contract data, ID, and electronic signature are transmitted to the insurance company by the counting process. On the insurance company side, the digital signature is decrypted with the key it has to obtain a hash value. Next, a hash value for the set of contract data and ID transmitted together is calculated and compared with the hash value obtained by decrypting the electronic signature. If they match, it is confirmed that the contract data has not been altered.
[0025]
  What is important here is to prevent the salesclerk at the agency from accessing the key used when the digital signature is made at the agency. BookEmbodimentSince one of the purposes is to prevent alteration at the agency, if the person at the agency can access the key, the contract data can be falsified. Therefore, for example, in the insurance contract program executed in the agency terminal 2, when the clerk instructs the electronic signature, the electronic signature is automatically performed using a predetermined key. It is necessary to prevent electronic signatures from being made. If this requirement is satisfied, the key used for the electronic signature in the agency may be a common key or a secret key of the agency.
[0026]
  In addition, bookEmbodiment, An event history is recorded for procedures and processes (hereinafter referred to as “events”) performed at the agency terminal 2 at the time of contract. This outline is shown in FIG. For example, the time when the contract data is stored in the agency terminal 2, the printout time of the original contract document, the time when the contract data is transmitted to the insurance company, and the like are recorded as event history data. That is, the event ID indicating the content of the event and the event execution time are recorded as event history data. Then, an electronic signature is created and added to the contract data and the event history data according to the insurance contract program of the agency terminal 2. Those data are transmitted to the insurance company through the network 7 and the company A server 1. The insurance company decrypts the electronic signature, acquires the contents of the contract data and event history data, and investigates the contents. For example, it is checked whether each event is performed in the correct order or whether the event is illegally performed a plurality of times. Thereby, an unauthorized modification can be detected. The company A server stores predetermined data such as a backup of contract data as will be described later. The event history data is also stored and used for subsequent certification.
[0027]
  Next, a book containing the above measuresEmbodimentThe insurance contract procedure will be described with reference to FIGS. 1 and 3 to 8. FIG. 3 is a flowchart showing the flow of the insurance contract procedure, and FIGS. 4 and 5 conceptually show the structure of the contract data created during the insurance contract procedure. 6 to 8 are examples of screens displayed on the display of the agency terminal 2 during the insurance contract procedure.
[0028]
In FIG. 3, reference numeral 20 denotes a data mark, and the configuration of the contract data at each time point (D1 to D5) indicated by the data mark is shown in FIGS. 4 and 5 with the corresponding reference signs D1 to D5. Reference numerals 22 to 31 denote event history recording timings. That is, in the insurance contract procedure of the agency terminal 2, the processing contents performed at each step denoted by reference numerals 22 to 31 and the execution time of the processing are sequentially recorded as an event history. Reference numeral 32 indicates a step for performing digital watermark processing, and reference numeral 34 indicates a step for performing write-once recording processing, which will be described in detail later.
[0029]
First, the contractor (applicant) 6 visits the agency and makes a contract after discussing with the store clerk. The store clerk operates the agency terminal 2 to display the input screen shown in FIG. Then, the contractor 6 is asked about necessary items, and necessary items on the input screen are input (step S2). When the store clerk specifies that the input of this screen has been completed by clicking the item [Next], the insurance premium calculation screen shown in FIG. 6B is displayed, and the input is continued. Then, when the entry of matters relating to insurance premiums is completed, the store clerk designates [Next] in the state of FIG. 6B and instructs the termination of entry relating to insurance premiums. As a result, the contents of the contract data are determined, and only the contract data shown in FIG. 4A exists at this point. Further, when the store clerk specifies [Next] on the insurance premium calculation screen shown in FIG. 6B, the fact that the input step of necessary items as event contents is completed and the time is recorded as event history data (FIG. 6). 3 reference 22). As for the event contents, an event ID is previously assigned to an event whose history is to be recorded, and the event ID and completion time are recorded as event history data.
[0030]
When the input of the matters illustrated in FIGS. 6A and 6B is completed in this way, the contract content confirmation screen shown in FIG. 7A is displayed and presented to the applicant (step S4). The applicant confirms the contents, and if there is an error, asks the store clerk to correct it. When the confirmation of the applicant is obtained, the store clerk designates [electronic signature] (step S6). Thereby, first, an ID indicating the contract (becomes a securities number) is generated. At the same time, the input field on the input screen can be locked so that no further input is possible. This prevents unauthorized modification of the contract contents after the electronic signature is given. When it is necessary to change the contents after the input field is locked due to the electronic signature, the input field is unlocked by pressing a “change contents” button or the like (not shown), for example. be able to.
[0031]
In addition, when adopting a method in which the timing of giving an electronic signature is different from that of giving an ID, the input field can be locked at the timing when the contract ID is given.
[0032]
Thus, as described above, an electronic signature is generated and attached to a set of contract data and ID using a key prepared in advance. As shown in FIG. 4B, the data after the electronic signature includes contract data, an ID, and an electronic signature. Further, as shown by reference numeral 24, an event history about the generation of contract data and the generation / giving of an electronic signature is recorded.
[0033]
  When the electronic signature is performed, a [PRINT] button is displayed as shown in FIG. 7B (the [PRINT] button is not yet displayed in the state of FIG. 7A), and the contract is printed out. It becomes possible. Conversely, booksEmbodimentThe insurance contract program is designed so that the contract cannot be printed out before the electronic signature is completed. This is to prevent the store clerk from making an illegal recording by printing out the contents of the contract before the electronic signature and delivering it to the contractor, and then modifying the contents and attaching the electronic signature.
[0034]
If the input field is not locked when the electronic signature is given (step S6) as described above, the input field can be locked when the [PRINT] button is pressed. This ensures that the content of the data matches the content of the printed paper contract.
[0035]
The store clerk presses the [Print] button to print out the contract (step S8), passes a part of the contract to the contractor as a copy of the contractor, and temporarily stores a part as the original. Here, as indicated by reference numeral 26, an event history regarding the print processing is recorded. Further, data of the printing time and the number of times of printing are generated, and as a result, the data at this time is as shown in FIG. The number of prints is also written on the printed contract. For example, numbers, symbols, bar codes, and the like indicating the number of times of printing are printed on a portion of the contract. This allows the insurance company to check how many times the contract is printed later.
[0036]
If the contract contents need to be changed for some reason, the store clerk gives an instruction to change the contents, and the process returns to step S2 to perform the process from the beginning as another new contract. At this time, the contract made so far becomes invalid. An event history for this content change instruction is recorded.
[0037]
On the other hand, it may be necessary to reprint the contract instead of changing the contents. For example, there is a case where the paper in the printer 3 is clogged, that is, the contract is broken, or the store clerk accidentally breaks the contract. In this case, reprint processing is performed. An event history is also recorded for reprint instructions. In the reprint process, first, it is requested to input the reason for reprint (step S12). This is because the insurance company later examines the reason for reprinting and detects that the contract has been illegally printed. When the clerk inputs the reprint reason, reprint reason data is generated. In addition, an event history about the reason inquiry and reprint reason input is recorded. At this point, the data is as shown in FIG. Then, the process returns to step S8, and the contract is printed out again. After reprinting, the contents of the printing time and the number of printings in the data shown in FIG. 4D are updated.
[0038]
In this way, when the contract is output and delivered to the contractor, the subsequent processing is between the agent and the insurance company server. The store clerk adds the event history data up to that point to the data created in the process so far and saves it as accounting data (step S10). At this time, an electronic signature is attached to the entire data, and an event history is also recorded (reference numeral 31). Therefore, the accounting data to be saved is as shown in FIG. 5A when reprinting is not performed, and as shown in FIG. 5B when reprinting is performed.
[0039]
Next, the accounting data is transmitted through the network 7 to the insurance company server 5 via the company A server 1 (step S14). In addition, when the shape data including the procedure data is transmitted to the insurance company server 5 in this way, the procedure data input field may be locked. This process may be transmitted one by one depending on the contents of the insurance contract program executed by the agency terminal 2, or may be transmitted in one day. An example of a display screen on the agency terminal 2 during the counting process is shown in FIG. In this state, the store clerk designates either “individual recording” or “collective recording” and performs the recording process.
[0040]
Next, the store clerk sends the original contract printed out in step S8 to the insurance company by mail or the like (step S16). The insurance company examines the contents by comparing the contract data sent through the network 7 in step S14 with the contract documents sent by mail (step S18). The survey is conducted as follows.
[0041]
First, as shown in FIG. 5, the hash value obtained by decrypting the digital signature data attached to the entire contract data (including the event history, print time, number of times, etc.) and obtaining the hash value, is calculated from the entire contract data. Compare with value. If the two match, it can be confirmed that no alteration has been made in the agency or on the network after the accounting data is saved. Next, the contents of the event history included in the contract data are examined to check whether the event sequence and the number of events are appropriate. Further, the portion of the number of times printed on the contract document mailed is read by OCR or the like and compared with the number of times printed data. If they do not match, it can be found that reprinting has been performed illegally.
[0042]
Furthermore, the digital signature attached to the contract data and the ID is decrypted to obtain a hash value, and compared with the hash value calculated from the contract data, it is confirmed whether the content of the contract data has been altered. Further, the contents of the contract data are compared with the description contents of the contract document. By the above inspection, unauthorized modification can be detected with high reliability.
[0043]
If an unauthorized modification is found, the insurance company invalidates the contract (step S22). On the other hand, if it is not found, the contract is processed as valid. The insurance contract processing is thus completed.
[0044]
The company A server 1 that performs business such as delivery of contract data can manage data in various forms after the contract. For example, the company A server 1 can store the original contract data. Alternatively, only backup data of the contract data can be stored and the original can be sent to the insurance company. Further, it is possible to store only the attached electronic signature data without storing the original and backup data. Furthermore, all or any combination thereof can be stored. The company A server can certify the data stored in this way when requested by a contractor or an insurance company later.
[0045]
Next, a modification detection method using digital watermark will be described with reference to FIG. Digital watermarking is a method of inserting watermark data by changing some of the values of data such as images. By using this, it is applied to the paper of contract documents after printing. Alterations can be detected.
[0046]
In the above example, contract data, ID (securities number), print time, and hash value of the number of prints are calculated at the time of printout in step S8, and this is used as invisible watermark data as part of the contract document or the entire background image data. Insert into. Then, the image with the digital watermark inserted is included in a part of the contract and printed out. The contract is sent by post to the insurance company. The insurance company detects watermark data (hash value) from the received contract. Further, the data on the received contract document is read by OCR or the like, a hash value is calculated, and both are compared. If they match, it is determined that there is no change on the contract paper. If, for example, the insurance premium number is modified on the contract document, the hash value of the modified contract data should be different from the hash value inserted in the watermark, and the modification can be detected.
[0047]
Next, a modification detection method using the write-once medium 4 will be described. A write-once medium is a medium on which data can be written only once, such as a CD-R. In the insurance contract procedure shown in FIG. 3, when an instruction to reprint the contract is issued, at least one of the contract data, the reason data, and the electronic signature is recorded on the write-once medium. That is, data is created as shown in FIGS. 4 and 5 along with the progress of the insurance contract procedure, and is recorded in the write-once medium 4 as well. Also, the input reason for reprinting is recorded. The write-once media 4 is collected by an insurance company when a predetermined amount of data is recorded. The insurance company collates the contract data recorded in the write-once media 4 with the contract data received through the network 7 and the contents of the contract documents sent by mail. If the contract data recorded on the write-once medium 4 is different or contradictory, it can be inferred that the modification has been made.
[0048]
Specifically, first, it is checked whether or not the contents of the contract data transmitted through the network 7 or the contract document by mail match with the contents recorded in the write-once medium. If there is a match, then the contents are checked for consistency. Since the contents recorded on the write-once medium 4 cannot be rewritten, it can be regarded as correct contents. Thus, for example, if the contract document is modified after being printed out, or modified before being transmitted to the insurance company through the network 7 or during transmission, the modified content is the content of the write-once media 4 Does not match. As a result, it is possible to detect changes to the contract documents and contract data transmitted through the network. Further, as shown in FIG. 9B, when reprinting is being performed, there is a possibility that the contract data contents before and after reprinting are inconsistent with the reason for reprinting. .
[0049]
It should be noted that instead of using a structurally rewritable recording medium such as a CD-R, a medium that is structurally rewritable but has been subjected to a process of making rewritable (for example, rewritable It is also possible to use an IC card that has been processed in the above.
[0050]
Next, a type 2 modification, that is, a method for detecting the creation of a fictitious contract will be described.
[0051]
First, as one method, a method of attaching a contractor's electronic signature to contract data will be described with reference to FIG. This method uses a public key cryptosystem, and the contractor creates his own public key and secret key. Also, this public key can be registered in advance with a certificate authority to obtain a public key certificate. In step S6 of the insurance contract procedure shown in FIG. 3, an electronic signature is performed on the contract data with a secret key by a method such as inserting a medium such as an IC card or a recording disk into the agency terminal 2. This electronic signature is sent to the insurance company via the network 7 together with the contract data. In addition, the electronic signature is written on the sheet of the contract document to be printed out. The insurance company receives the contract data, obtains and decrypts the contractor's public key, and compares the hash values to confirm that the contractor himself / herself has agreed to the contract. It is also possible to confirm that the contractor has surely contracted by receiving the contract document and detecting the signature written on the paper. If the contractor has registered with the certificate authority in advance and has a public key certificate, it can be confirmed that the contractor actually exists by attaching it to the insurance company and sending it to the insurance company. Can detect contracts.
[0052]
Here, when the contractor performs an electronic signature with a secret key, it is necessary to perform processing so that the data does not remain in the agency terminal 2. This is because if the copy data of the contractor's private key remains in the agency terminal 2, the person of the agency can make a fictitious contract using the secret key. As one method, for example, a secret key can be recorded in the IC card of the contractor, the contract data can be read and encrypted on the IC card side, and only the electronic signature obtained as a result can be sent to the agency terminal 2. . As will be described later, when the agency terminal 2 is connected to the contractor's terminal through a network such as the Internet, the contractor can create an electronic signature on his / her terminal and send it to the agency terminal. it can.
[0053]
If the contractor cannot use the public key cryptosystem, the presence of the contractor can be confirmed by the telephone number. As shown in FIG. 11 (A), the agency informs the contractor of the contract number after the contract is established, and calls the insurance company with the telephone number registered with the telephone company to tell the contract number or is registered. Request to send the contract number by calling from the terminal. When the contractor calls the insurance company, the insurance company can obtain the sender information. Therefore, the telephone company is inquired about the person registered for the telephone number. If the registered person does not match the contractor, it is determined that the contract is an unauthorized contract by a person other than the contractor. Similarly, when a contract number is transmitted from a contractor's terminal, an illegal contract can be detected.
[0054]
As still another method, a method for confirming the identity using image data will be described with reference to FIG. After the contract is finalized and the contract is printed out, the store clerk takes a picture of the contractor's face with a digital camera, etc. with the contractor holding his / her ID with a photo of his / her face. Record along with contract data on write-once media. The insurance company opens this image, matches the contractor information in the contract data with the information on the identification card in the image, and further compares the face photo of the contractor in the image with the face photo on the identification card. By checking, it can be confirmed that the contract is indeed made by the contractor. In addition, instead of recording the image data on the write-once medium, the image data can be directly transmitted to the insurance company via the network.
[0055]
In the above embodiment, a program for executing a process associated with the contract is prepared in advance in the agency terminal, and the contract data and the event history data are sent to the company A server 1 after the contract process. . Instead, a program for contract processing is prepared in the company A server 1, and contract data and event history data are stored while performing necessary communication processing between the agency terminal 2 and the company A server 1 at the time of contract processing. It can also be configured to create.
[0056]
In the above description, as shown in FIG. 1, the contractor makes a contract with an agent. However, as shown in FIG. 12, the agency terminal 2 and the contractor terminal 10 can communicate with each other via the network 7 to perform contract processing on the network. In this case, the agency terminal device 2 transmits input data of necessary items to the contractor terminal 10, and the contractor himself inputs necessary items and creates contract data. After creating the contract data, it is possible to proceed with the contract procedure by performing a necessary electronic signature or the like as in the case of FIG. Also, the contractor can attach an electronic signature using the contractor terminal device instead of the signature / seal.
[0057]
The present invention can also be applied when a contractor directly accesses an insurance company's website or the like and performs a contract procedure without going through an agent. In that case, the terminal device of the user who is a contractor executes the same function as that of the agency terminal 2.
[0058]
In addition, in the above description, in order to prevent unauthorized modification of the contract data, a method of locking the input field of the electronic form of the contract is cited, but instead, the contract data itself is converted to image data. Thus, it is possible to prevent subsequent modification.
[0059]
【The invention's effect】
As described above, according to the procedure system of the present invention, it is possible to detect unauthorized modification of contract data and contract documents.
[Brief description of the drawings]
FIG. 1 is a diagram showing a schematic configuration of a procedure system according to an embodiment of the present invention.
FIG. 2 is a diagram illustrating a method for detecting unauthorized modification of contract data.
FIG. 3 is a flowchart showing a flow of an insurance contract procedure.
4 is a diagram showing a configuration of contract data shown in FIG. 3. FIG.
FIG. 5 is another diagram showing the configuration of the contract data shown in FIG.
6 shows an example of a screen displayed on the agency terminal during the insurance contract procedure of FIG.
7 shows another screen example displayed on the agency terminal during the insurance contract procedure of FIG.
8 shows still another example of a screen displayed on the agency terminal during the insurance contract procedure of FIG.
FIG. 9 shows a method for detecting fraudulent processing of contract documents and contract data.
FIG. 10 shows another method for detecting fraudulent processing of contract documents and contract data.
FIG. 11 shows yet another method for detecting fraudulent processing of contract documents and contract data.
FIG. 12 is a diagram showing another schematic configuration of the procedure system according to the present invention.
[Explanation of symbols]
1 ... Company A server
2 ... Agency terminal
3. Printer
4 ... Write-once media
5 ... Insurance company server
6 ... Contractor
7 ... Network
9 ... Storage media
10. Contractor terminal

Claims (26)

A terminal device of a procedural system,
An input section;
A storage unit;
Procedure data creation means for creating the applicant's procedure data based on the necessary items input through the input unit and storing it in the storage unit ;
A first signature means for creating a first electronic signature by arithmetic processing for the procedure data and storing the first electronic signature in the storage unit ;
Printing means for printing out the procedure data as a contract document only after the first electronic signature is created by the first signature means;
Print data creating means for creating print data indicating the printing time and the number of times of printing by the printing means, and storing the print data in the storage unit ;
And event history creation means the content and the time of occurrence of an event created as event history data, is stored in the storage unit containing the grant at least of the electronic signature,
A second signature means for creating a second electronic signature by arithmetic processing for the procedure data, the first electronic signature, the print data, and the event history data , and storing the second electronic signature in the storage unit ;
Transmission means for reading out the procedure data, the first electronic signature, the print data, the event history data, and the second electronic signature from the storage unit and transmitting them as transmission data to a server device. A terminal device of a characteristic procedural system. Reason request means for requesting input of the reason for reprinting when a reprint request for the contract document is input through the input unit ;
Reason data storage means for storing the reason for reprinting input through the input unit as reason data in the storage unit, and
The second signing means creates a second signature including the reason data,
The terminal device of the procedural system according to claim 1, wherein the transmission unit transmits the transmission data including the reason data. The terminal device of the procedural system according to claim 1, wherein the printing unit prints information indicating the number of times of printing on the contract document. 3. The print means generates digital watermark data based on at least all or part of the procedure data, inserts the digital watermark data into the procedure data, and prints out the digital watermarked contract document. A terminal device of the procedure system described in 1. Reason request means for requesting input of the reason for reprinting when a reprint request for the contract document is input through the input unit ;
Reason data storage means for storing the reason for reprinting input through the input unit as reason data in the storage unit;
2. The terminal device of the procedure system according to claim 1, further comprising: a unit that records at least one of the procedure data, the reason data, and the electronic signature on a recording medium in a non-rewritable state. The procedure data generation unit, the terminal device procedure system according to subscriber terminal connected via the network to one of claims 1 to 5, characterized in that receiving the necessary information. The terminal of the procedure system according to any one of claims 1 to 6 , wherein the procedure data creation means disables changing the contents of the procedure data after the time when the first electronic signature is created by the first signature means. Equipment . The procedure data generation unit, the terminal device procedure system according to any one of claims 1 to 6, disable the content change of the procedure data after the time when the print instruction is input to said printing means. The terminal of the procedure system according to any one of claims 1 to 6 , wherein the procedure data creation means disables the content change of the procedure data after the time when an instruction to transmit the transmission data to the server device is input. Equipment . Further comprising means for applying the procedure number to the procedure data, the procedure data generation unit, according to claim 1 to 6, disable the content change of the procedure data since the time of the procedure number to the procedure data has been granted The terminal device of the procedure system in any one of. The terminal device of the procedure system according to any one of claims 7 to 10 , wherein the procedure data creation means disables the content change by disabling writing of an input field of the procedure data. The terminal device of the procedure system according to any one of claims 7 to 10 , wherein the procedure data creation means disables content change by converting the procedure data into image data. A procedure system comprising the terminal device according to claim 1 and a server device,
The server device
Receiving means for receiving the transmission data via a network;
First detection means for detecting whether the procedure data, the first electronic signature, the print data, and the event history data are altered by decrypting the second electronic signature. Procedures system shall be the. The procedural system according to claim 13 , wherein the server device includes a second detection unit that detects whether or not the procedural data has been modified by decrypting the first signature. A computer-readable storage medium including an input unit and a storage unit , the computer being
Procedure data creation means for creating the applicant's procedure data based on the necessary items input through the input unit and storing it in the storage unit,
A first signature means for creating a first electronic signature by arithmetic processing for the procedure data and storing the first electronic signature in the storage unit;
Printing means for printing out the procedure data as a contract document only after the first electronic signature is created by the first signature means;
Print data creation means for creating print data indicating the print time and the number of prints by the print means, and storing the print data in the storage unit;
Create the content and the time of occurrence of events, including grant of at least the electronic signature as the event history data, event history creation means stores in the storage unit,
A second signature means for creating a second electronic signature by arithmetic processing for the procedure data, the first electronic signature, the print data, and the event history data , and storing the second electronic signature in the storage unit;
Transmitting means for reading the procedure data, the first electronic signature, the print data, the event history data, and the second electronic signature from the storage unit, and transmitting them as transmission data to a server device;
A storage medium storing a program for operating as a computer. Reason request means for requesting input of a reason for reprinting when a reprint request for the contract document is input;
Reason data storage means for storing the reason for reprinting input through the input unit as reason data in the storage unit, further causing the computer to function,
The second signing means creates a second signature including the reason data;
The storage medium according to claim 15, wherein the transmission unit transmits the transmission data including the reason data. The storage medium according to claim 15 or 16, wherein the printing unit prints information indicating the number of times of printing on the contract document. 17. The print means generates digital watermark data based on at least all or part of the procedure data, inserts the digital watermark data into the procedure data, and prints out the digital watermarked contract document. The storage medium described in 1. Reason request means for requesting input of the reason for reprinting when a request for reprinting the contract document is input through the input unit;
Reason data storage means for storing the reason for reprint input through the input unit as reason data in the storage unit;
16. The storage medium according to claim 15, further causing the computer to function as means for recording at least one of the procedure data, the reason data, and the electronic signature on a recording medium in a non-rewritable state. 20. The storage medium according to claim 15, wherein the procedure data creation means receives the necessary items from a contractor terminal connected via a network. The storage medium according to any one of claims 15 to 20, wherein the procedure data creation means disables changing the contents of the procedure data after the time point when the first electronic signature is created by the first signature means. The storage medium according to any one of claims 15 to 20, wherein the procedure data creating means disables changing the contents of the procedure data after a point in time when a print instruction is input to the printing means. The storage medium according to any one of claims 15 to 20, wherein the procedure data creation means disables changing the contents of the procedure data after a time point when an instruction to transmit the transmission data to the server device is input. Further causing the computer to function as means for assigning a procedure number to the procedure data;
The storage medium according to any one of claims 15 to 20, wherein the procedure data creating means disables changing the contents of the procedure data after the time when the procedure number is assigned to the procedure data. The storage medium according to any one of claims 21 to 24, wherein the procedure data creation means disables content change by disabling writing of an input field of the procedure data. The storage medium according to any one of claims 21 to 24, wherein the procedure data creation means disables content change by converting the procedure data into image data.

Images