How to Use the Japan Patent Office E-signature Publication File Verification program (Version 2.0)
Japan Patent Office
Contents
1. Preface ...................................................................................................................................... 1
2. Installation ................................................................................................................................. 3
3. Settings...................................................................................................................................... 5
4. E-signature Publication File Verification and Creating Archived Publication File....................11
5. E-Certificate Verification.......................................................................................................... 19
<> - Microsoft and Windows are the trademarks or registered trademarks of Microsoft Corporation in the U.S.A. and other countries. - Java and J2SE are the trademarks or registered trademarks of Sun Microsystems, Inc. in the U.S.A. and other countries. - Other names of corporations and products described in this document are the trademarks or registered trademarks of respective corporations.
1. Preface 1.1 Overview The Japan Patent Office will begin issuing publication files with e-signatures for Internet applf ie cr ate Publication File) in January 2006. This id o t no ( as h t e h r e e “ i n E-signature af t e r r e r document describes how to use the E-signature Publication File Verification program(Version 2.0) that verifies the e-signatures of publication files and fetches archived publication file. In addition, it becomes essential to use the E-signature Publication File Verification program(Version 2.0) to verifies the e-signatures of publication files published after January, 2007.
1.2 Environment It has already been confirmed that the E-signature Publication File Verification program(Version 2.0) operates normally in the environment described below. Note that verification processing may take several tens of minutes depending on the personal computer environment or size of the E-signature Publication File. (1) OS (a) Windows 2000 Professional SP4 (b) Windows XP Professional SP2 (2) Hardware environment (a) CPU: Pentium 4® 1.8 GHz or higher level recommended (at least Pentium III® 700 MHz required) (b) Memory: 512 MB or more recommended (at least 128 MB required) (c) Display: 1,024 dots by 768 dots or higher resolution required (d) Hard disc: More than 3 times of total capacity of E-signature Publication File (3) Prerequisite software (a) OpenSSL (b) Java (c) Microsoft .NET Framework
1.3 Restrictions (1) Some software programs prerequisite for the E-signature Publication File Verification program(Version 2.0) are open source software. You can use open source software free of charge, but without any guarantee of proper operation or any support should an error occur during software operation. For support regarding error recovery and guaranteed operation, you should purchase a commercially available library software product that has an E-signature Publication File Verification function using PKCS#7 format. The Japan Patent Office does not respond to inquiries about how to use the prerequisite software or provide any support concerning errors caused by said prerequisite software. 1
(2) The E-signature Publication File Verification program(Version 2.0) is only intended to verify the e-signatures of publication files. Program operation is not guaranteed when using this program for other purposes or by methods other than those described in this document. The E-signature Publication File Verification program(Version 2.0) or related procedure manuals must not be altered, reproduced, or redistributed in any form in part or whole. (3) OpenSSL uses strong cryptography. The export, import, or use of strong cryptography software, providing cryptography hooks, or communicating technical details about cryptography software may be illegal in some countries. When you download OpenSSL, be sure to comply with all applicable laws of the relevant country. Also confirm the details of this restriction on the official website of the OpenSSL Project (http://www.openssl.org). The Japan Patent Office is not liable for any illegal actions on your part as a result of using OpenSSL.
2
2. Installation 2.1 Downloading the E-signature Publication File Verification program(Version 2.0) and Prerequisite Software (1) E-signature Publication File Verification program(Version 2.0): Download the program from the website below. http://www.publication.jpo.go.jp/html/verification_en.htm (2) Prerequisite software (a) OpenSSL (software having a PKCS#7 signature verification function) - Download the binary version of OpenSSL for Windows (Win32 OpenSSL v0.9.8e, which is "recommended by the creators of OpenSSL") of Shining Light Productions. This version of OpenSSL can be downloaded from the website of Shining Light Productions (http://www.slproweb.com/products/Win320openSSL.html) introduced on the Binary Distributions web page (http://www.openssl.org/related/binaries.html) of the official website of the OpenSSL Project. Download the program file named "Win32OpenSSL-v0.9.8e.exe", store the file in an arbitrary folder, and then double-click the file icon to install the OpenSSL program. To perform installation, follow the instructions given by the installer. (b) Java - Download the Java 2 Platform, Standard Edition (J2SE) Version 5.0 update 11 JRE from a Java download website (e.g., http://java.sun.com/products/archive/). The program file named " jre-1_5_0_11-windows-i586-p-iftw.exe " can be downloaded (when selecting "Windows Offline Installation, Multi-language"). Store the downloaded file in an arbitrary folder, and then double-click the file icon to install the Java program. To perform installation, follow the instructions given by the installer. (c) Microsoft .NET Framework Please install Microsoft .NET Framework Version 2.0. Choose "a developer tool" of "a product group" in Microsoft download center in a HP of Microsoft company (http://www.microsoft.com/downloads/Browse.aspx?langid=13&displaylang=ja), a download is possible from a displayed download page. You download "2.0 .NET Framework Version 2.0 Redistributable package (x86)" and ".NET Framework Language Pack (x86)" in this page. You click " .NET Framework Version 2.0 Redistributable package (x86)" and can download a file named dotnetfx.exe when you click "a download" button of a displayed page. Please download these files with a Japanese thing. After storage, you double-click a file, and please install a program in an arbitrary folder each. In addition, please carry out installation according to instructions of an installer.
3
You need not change any option settings when installing the software program above. The websites and web pages for downloading, methods of downloading, and names of downloadable files described above are those as of July 4, 2006, but are subject to change in the future for upgrading or other reasons. 2.2 Setting Up the E-signature Publication File Verification program (Version 2.0) （1）Uninstall of the E-signature Publication File Verification program(Version 1.0) When the E-signature Publication File Verification program (Version 1.0) is installed before, please uninstall this. A procedure is as follows. ・Please delete the folder which you installed a E-signature Publication File Verification program(Version 1.0) in together with a folder. But please confirm that there are only three files of Verify.exe, p7verify.jar and setting.config in the folder concerned. 【note】Because a E-signature Publication File Verification program (Version 2.0) maintain backward compatibility, the E-signature Publication File Verification program (Version 2.0) can verify the e-signatures of publication files about a registered utility model for publication in 2006. (2)install of the E-signature Publication File Verification program (Version 2.0) Double-click the icon for the file (VerifyPublication_20.exe) downloaded via the Internet from "Official Publication via the Internet" to uncompress the file into a folder ("C:¥ procedure). VerifyPublication" in this The following two files are stored in the folder: ①verify.exe (E-signature Publication File Verification GUI program) ②p7verify.jar (E-signature Publication File Verification program library)
3. Settings (1) Double-click the icon for the E-signature Publication File Verification GUI program (verify.exe) to start up the program. When the program is started for the first time or the setting file (setting.config) doesn’ t exist, 4
the message shown below appears. message box.
In either case, click the "OK" button to close the
(2) Japan Patent Office Official E-signature Publication File Verification window opens as shown below.
Note:
E-signature Publication File Verification can only be performed after setting the Settings.
5
(3) Select "Settings" from the Menu on the menu bar.
(4) The Settings window opens as shown below. Set the necessary settings as instructed below.
<1> <2>
<3>
<4>
<5>
6
(a) Selecting the output folder Click the "Browse" button (<1>) in the Settings window to open the dialog box shown below. Select the folder ("C:¥this procedure) to which the archived publication verification_result" in file is to be output, and then click the OK button.
(b) Selecting the OpenSSL.exe file Click the "Browse" button (<2>) in the Settings window to open the dialog box shown below. Select the OPENSSL.exe file stored in the bin folder under the folder where OpenSSL has been installed, and then click the "Open" button.
7
(c) Selecting the p7verify.jar file Click the "Browse" button (<3>) in the Settings window to open the dialog box shown below. Select the p7verify.jar file stored in the folder ("C:¥ procedure) where VerifyPublication" in this the p7verify.jar file has been stored, and then click the "Open" button.
(d) After the settings above have been set, the Settings window shows the set information as shown below.
8
(e) Click the "Save" button (<4>) in the Settings window to save the set settings. The message shown below appears when the settings is valid. Click the "OK" button in the message box to close it. The Settings is now completed.
If any settings is invalid, one of the error messages shown below appears. Click the "OK" button in the message box, and then repeat steps (a) to (e) to set valid settings. (For incorrect selection of the output folder)
(For incorrect selection of the OPENSSL.exe file)
9
(For incorrect selection of the p7verify.jar file)
10
4. E-signature Publication File Verification and Creating Archived Publication File Here explain a publication after January, 2007 for an example. (1) Double-click the icon for the verify.exe file (E-signature Publication File Verification GUI program) to start up the program.
<1>
<2>
<3>
11
(2) Click the "Browse" button (<1>) in the Japan Patent Office Official E-signature Publication File Verification window to open the window shown below. Select the E-signature Publication File downloaded via the Internet from "Official Publication via the Internet", and then click the "Open" button. （Note 1）Please store a file with all signatures in the same folder.
12
(3) Click the "Verify" button (<2>) in Japan Patent Office Official E-signature Publication File Verification window to start verifying the e-signature and creating the archived publication file. While this processing is in progress, the window shows the information as shown below.
Note:
The processing may take several tens of minutes depending on the personal computer environment or size of the E-signature Publication File.
13
(4) The message shown below appears when all the verification process was completed. Click the "OK" button in the message box to close it. (See items (7) below when the verification process was failed.)
(5) The files shown in the figure below are output to the selected output folder ("C:¥ verification_result" in this procedure). Samples of files output to the output folder
14
The files from (c) to (h) output only the number of files with a signature for publication. Here explains each files output as follows. (a) Archived publication file This file is uncompressed to obtain the Publication file. This file has the same name as the E-signature Publication File except that the file extension of the E-signature Publication File is replaced by ".zip" or ".tar." (b) Processing result file This file logs the information output as the "Output Result". This file has the same name as the E-signature Publication File except that the file extension of the E-signature Publication File is replaced by ".log." (c) Fingerprint file This file has file name "finger.txt" and is used to verify the e-certificate. (d) E-certificate validity verification file This file has file name "verifyresult.txt" and is used to verify the e-certificate. (e) E-certificate information file (PEM format) This file has file name "certs.pem" and contains the source information of the file described in Item (d) above. (f) Root certificate file (DER format) This file has file name "root.der." (g) Root certificate file (PEM format) This file has file name "root.pem." (h) E-signature verification result file This file has file name "verify.txt" and only contains the result of E-signature Publication File Verification. (i) A combination result file A file name is _UNIT.log (an archive file name). It is the file which recorded only a combination result of divided archive group. Note: The files described in items (a) to (i) above are generated each time E-signature Publication File Verification is executed. If these files already exist in the output folder, new files are written over the existing files. The user need not consider the use of the files described in items (e) to (i) above.
15
(6) To exit from the E-signature Publication File Verification program(Version 2.0), click the "Exit" button (<3>) in the Japan Patent Office Official E-signature Publication File Verification window. A confirmation message then appears. Click the "Yes" button in the message box.
(7) If an error is detected in the Settings during E-signature Publication File Verification processing started by clicking the "Verify" button (<2>) in the Japan Patent Office Official E-signature Publication File Verification window, the error message shown below will appear and E-signature Publication File Verification processing will stop.
Set the settings again according to the instructions in steps (1) to (3) in Chapter 3, "Settings."
16
(8) If a problem is found during E-signature Publication File Verification processing started by clicking the "Verify" button (<2>) in the Japan Patent Office Official E-signature Publication File Verification window, the error message shown below will appear. In this case, the archived publication file will not be created.
Check the progress of E-signature Publication File Verification processing shown in the Output Result field of the Japan Patent Office Official E-signature Publication File Verification window.
17
(9) Errors in E-signature Publication File Verification processing may result from the following three causes: (a) The e-certificate has expired. The e-certificate included in the E-signature Publication File is no longer valid when E-signature Publication File Verification is executed. Download the E-signature Publication File that includes a valid e-certificate from "Official Publication via the Internet". (b) The downloaded E-signature Publication File is invalid. The publication file may have been altered or damaged. Download the E-signature Publication File again from "Official Publication via the Internet". Make sure that the size of the downloaded E-signature Publication File matches the file size indicated on said website. (c) Your personal computer environment has a problem. The memory size of your personal computer may be insufficient (128 MB or less). Check the personal computer environment to make sure that it meets the requirements for E-signature Publication File Verification.
18
5. E-Certificate Verification The user of a document with an e-signature appended (e.g., official publication issued via the Internet) should usually perform both E-signature Publication File Verification and e-certificate verification. The e-certificate for an e-signature authenticates the identity of the person who appended the e-signature. (For official publications via the Internet, the Director General of the Patent Office appends the e-signatures.) A reliable organization (known as a "certification authority") issues the e-certificate to be attached to an e-signature. (The certification authority for official publications via the Internet is the Certification Authority of the Ministry of Economy, Trade and Industry or a subordinate certification authority. The e-certificate verification is used to verify the validity of an e-certificate. The E-signature Publication File Verification program(Version 2.0) described in this document is used to perform E-signature Publication File Verification. The procedure for e-certificate verification is summarized separately in "How To Verify an E-certificate" (file name: certificate_en.pdf). Note that e-certificate verification must be performed successively after E-signature Publication File Verification.
19