JP2000312204A - Authentication processing unit, authentication processing method and authentication processing system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To apply authentication processing to a unit making communication at a high-speed. SOLUTION: A set-top box STB 10 stores in advance information relating to a digital signature having authenticated before a memory 16. Upon the receipt of unit data and a digital signature sent from a VTR 20 that is an optional electronic device on an IEEE 1304 network, the STB 10 compares the information stored in the memory 16 with the unit data and the digital signature received from the VTR 20. In the case that the memory 16 stores the information corresponding to the unit data and the digital signature received from the VTR 20, the STB 10 omits a usual authentication processing with respect to the unit data and the digital signature received from the VTR 20 and informs the VTR 20 about that the unit data and the digital signature received from the VTR 20 are proper.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an authentication processing device, an authentication processing method, and an authentication processing system for authenticating an electronic device for communication in a network to which a plurality of electronic devices are connected.

[0002]

2. Description of the Related Art In recent years, various devices such as a set-top box (hereinafter, referred to as STB) and a digital television (hereinafter, referred to as DTV) for digital satellite broadcasting are interconnected to form a network. It is considered to be used.

[0003] When performing communication between devices in such a network system, a receiving device that wants to receive arbitrary data is authenticated in order to have the transmitting device transmit the data. You need to get it.

[0004] Therefore, the receiving device generates a digital signature using, for example, its own secret key and unique device data uniquely generated by itself, and transmits the device data with the digital signature added to the transmitting device. Send to The transmitting device that has received the device data to which the digital signature has been added verifies the received device data to which the digital signature has been added using the public key. That is, the transmitting device uses the public key to decrypt the received device data to which the digital signature has been added, and determines whether the device data to which the digital signature has been added is correct.
If it is determined that the device data to which the digital signature has been added is appropriate, the transmitting device authenticates the receiving device as a target capable of transmitting data, and establishes a state in which communication with the receiving device is possible. And migrate.

[0005]

In the above-described conventional network system, a device such as a transmitting device that performs verification processing on received device data to which a digital signature has been added includes all the received digital signatures and devices. Verification was being performed on the data. That is, the device that performs the verification process often performs the verification process again even when the received digital signature and the device data are exactly the same as those previously verified, and often performs the redundant useless verification process. In addition, since such verification processing requires a long processing time depending on the method, there is also a problem that useless verification processing deteriorates usability.

SUMMARY OF THE INVENTION The present invention has been made in view of such circumstances, and in a network system, a process for verifying a received digital signature and device data can be omitted, so that a device for communication can be quickly authenticated. It is an object of the present invention to provide an authentication processing device and an authentication processing method. It is another object of the present invention to provide an authentication processing system for speeding up the process of verifying a digital signature and device data in a network system and performing communication between arbitrary devices.

[0007]

An authentication processing apparatus according to the present invention for achieving the above-mentioned object is an authentication processing apparatus for authenticating any electronic equipment connected to the same network, and includes a digital authentication apparatus which has been authenticated in the past. Storage means for storing information relating to the signature; receiving means for receiving information relating to the digital signature transmitted from any electronic device on the network; information relating to the digital signature stored in the storage means; Comparing means for comparing the obtained information about the digital signature with the information about the digital signature sent from the electronic device to the information about the digital signature stored in the storage means as a result of the comparison by the comparing means. If there is corresponding information, it will respond to the information on the digital signature transmitted from the electronic device. It is characterized in that a control means for controlling to skip that verification process.

[0010] The authentication processing apparatus according to the present invention configured as described above authenticates the electronic device by omitting the process of verifying the information on the digital signature transmitted from the electronic device that has been authenticated in the past.

Further, an authentication processing method according to the present invention for achieving the above-mentioned object is an authentication processing method for authenticating any electronic device connected to the same network. Receives information about the digital signature transmitted from any electronic device on the network in advance, and stores the information about the digital signature stored in advance and the information about the digital signature transmitted from the electronic device. Compare,
As a result of the comparison, if there is information corresponding to the information on the digital signature transmitted from the electronic device in the information on the digital signature stored in advance, the information on the digital signature transmitted from the electronic device is returned. Is characterized by omitting the verification processing for.

In the authentication processing method according to the present invention, in the case of an electronic device that has been authenticated in the past, authentication is performed by omitting the process of verifying the information on the received digital signature.

Further, an authentication processing system according to the present invention that achieves the above-mentioned object has an authentication processing device having a function of authenticating an arbitrary electronic device and a network in which at least one device to be authenticated is connected. An authentication processing system in which an authentication processing device authenticates a device to be authenticated, wherein the device to be authenticated includes: a generation unit that generates information about a digital signature; and a transmission unit that transmits information about a digital signature to the authentication processing device. The authentication processing device includes a storage unit that stores information about the digital signature that has been authenticated in the past, a receiving unit that receives information about the digital signature transmitted from the device to be authenticated, and information about the digital signature that is stored in the storage unit. Comparing means for comparing with the digital signature information transmitted from the device to be authenticated; As a result of the comparison by the step, if the information related to the digital signature transmitted from the device to be authenticated is included in the information related to the digital signature stored in the storage means, the information is transmitted from the device to be authenticated. And control means for performing control so as to omit verification processing for the information relating to the digital signature.

[0012] In the authentication processing system according to the present invention thus configured, the authentication processing device does not perform verification processing of information related to the digital signature transmitted from the device to be authenticated which has been authenticated in the past. Authenticate the authentication device.

[0013]

Embodiments of the present invention will be described below in detail with reference to the drawings.

As shown in FIG. 1, an embodiment to which the present invention is applied is IEEE (The Institute of Electrical Engineering).
I approved by d Electronics Engineers, Inc.)
EEEStd. 1394-1995 IEEE Standard for a High Perform
IEEE 1394 serial bus 30 conforming to the ance serial Bus standard (hereinafter abbreviated as IEEE 1394).
Is a network to which a plurality of electronic devices are connected (hereinafter, referred to as an IEEE 1394 network). Here, a set-top box (hereinafter referred to as STB) on the IEEE 1394 network.
10 and Video Tape Recorder
der; hereinafter, referred to as VTR. ) Data is transmitted from the STB 10 to the VTR 20 for the two electronic devices 20).

The STB 10 is, for example, a so-called integrated receiver decoder (Integrated Receiver Decoder).
It receives and decodes broadcast waves transmitted from a broadcast station (not shown) such as satellite broadcast waves, cable broadcast waves, and terrestrial waves.

As shown in FIG. 2, the STB 10 includes a tuner section 11 for tuning a received broadcast wave signal, an operation section 12 for generating an operation signal, and a control section 13 for controlling each section.
, A video signal reproducing unit 14 for reproducing a video signal, an audio signal reproducing unit 15 for reproducing an audio signal, a memory 16 for storing various data, and a 1394 interface (hereinafter, 1394 I / I) for interfacing external signals. F
Called. ) 17.

The tuner section 11 tunes a broadcast wave signal received by, for example, an antenna (not shown). The tuner unit 11 performs tuning control under the control of the control unit 13. The tuner unit 11 is not limited to whether a receivable broadcast wave is an analog signal or a digital signal, and its configuration is appropriately changed or expanded according to the broadcast wave. The output from the tuner unit 11 is output to the video signal reproducing unit 14 and the audio signal reproducing unit 15
It is supplied to the 1394 I / F17.

The operation unit 12 supplies an operation signal representing the content of the operation performed by the user to the control unit 13 through, for example, a remote control device or operation buttons (not shown) provided on the STB 10.

The control section 13 controls each section,
As described later, authentication of the connected device is performed.

The video signal reproducing section 14 decodes and reproduces only the video signal among the signals tuned by the tuner section 11. The video signal reproducing unit 14 outputs the reproduced video signal to an external monitor 41.

The audio signal reproducing section 15 decodes and reproduces only the audio signal among the signals tuned by the tuner section 11. The audio signal reproducing unit 15 outputs the reproduced audio signal to an external speaker 42.

The memory 16 is, for example, a hard disk or an R
The storage unit is configured by an AM (Random Access Memory) or the like, and stores unique device data and a digital signature uniquely generated by the connected device, and various data as necessary, as described later. The memory 16 includes a controller 13
Under the control of, these pieces of information are stored and these pieces of information are read out.

The 1394 I / F 17 processes the signal tuned by the tuner unit 11 under the control of the control unit 13 to form a packet, and transmits the packet to the outside via the IEEE 1394 serial bus 30. 1394 I / F17
Outputs a signal to the VTR 20 as described above. The 1394 I / F 17 is compatible with IEEE13.
It also functions as a receiving means for receiving a packetized signal transmitted from the VTR 20 via the 94 serial bus 30.

Such an STB 10 is based on IEEE139
(4) The device connected via the serial bus 30 is authenticated, and it is determined whether or not to transmit a broadcast wave signal tuned by the tuner unit 11 to the device.

On the other hand, the VTR 20 is, for example, a so-called digital video home system (Digital Video Home System).
Home System (D-VHS) system, in which input video signals and audio signals are recorded on a tape, which is a recording medium (not shown), and data recorded on the tape are reproduced to reproduce external data (not shown). Output to a monitor or the like.

As shown in FIG. 3, the VTR 20 has a 1394 I / F 21 for interfacing signals with the outside.
And a signal processing unit 22 for modulating and / or demodulating a signal
A recording / reproducing unit 23 for recording and / or reproducing data on / from a tape, which is a recording medium (not shown); an equalizer 24 for compensating frequency and phase characteristics of an input signal; a demodulating unit 25 for demodulating a signal; And a control unit 26 that performs the operation.

The 1394 I / F 21 exchanges a signal supplied from the outside under the control of the control unit 26.
Here, the 1394 I / F 21 is, as described above,
The packetized signal is received from the STB 10 via the IEEE 1394 serial bus 30, the signal is processed to depacketize the signal, and the signal is supplied to the signal processing unit 22 in the subsequent stage. In addition, the 1394 I / F 21 is an IEEE
It also serves as a transmitting means for transmitting a packetized signal to the outside via the E1394 serial bus 30.

The signal processing unit 22 demodulates the signal supplied from the 1394 I / F 21 under the control of the control unit 26, and converts the signal into a format that can be recorded on a tape as a recording medium (not shown). Perform modulation processing.

The recording / reproducing section 23 has a head section and the like for recording and / or reproducing on and from a tape which is a recording medium (not shown). The recording and reproducing unit 23 records the signal input from the signal processing unit 22 on a tape, which is a recording medium (not shown), under the control of the control unit 26, amplifies the reproduced RF signal, and sends the amplified RF signal to the equalizer 24 at the subsequent stage. Supply.

Under the control of the control section 26, the equalizer 24 reproduces and amplifies the RF reproduced and amplified by the recording / reproducing section 23.
A signal is input, and the frequency characteristics and phase characteristics of the RF signal are compensated.

The demodulation unit 25 demodulates the RF signal supplied from the equalizer 24 under the control of the control unit 26, and applies, for example, high-frequency attenuation processing and noise processing to the obtained video signal and audio signal. Appropriate reduction processing and the like are performed, and the video signal and the audio signal are amplified and output to a monitor or a speaker (not shown).

The control unit 26 records signals supplied from the outside on a tape, which is a recording medium (not shown), and controls each unit when reproducing an RF signal from the tape. And a generating means for generating a digital signature.

Such a VTR 20 is based on IEEE 139
When trying to receive a signal held by a device connected via the 4 serial bus 30, the device is authenticated, so that the signal held by the device can be received.

In the IEEE 1394 network, when the STB 10 and the VTR 20 are connected via the IEEE 1394 serial bus 30, the VTR 20 as a device receiving data is authenticated by the STB 10 as a device transmitting data. In this case, VTR2
0 generates a digital signature using the private key held by the device itself and unique device data uniquely generated by the device itself, and stores the device data with the digital signature attached to the ST.
Transmit to B10. Note that the VTR 20 does not limit the type of digital signature generation method here, for example, so-called RSA (Rivest, S
hamir and Adleman) and DSA (DigitalSignature)
Algorithm) signature or the like can be applied. On the other hand, STB10
Generally, upon receiving device data to which a digital signature has been added, the device verifies the received device data to which the digital signature has been added using a public key. And STB
After authenticating the VTR 20, the 10 supplies the received broadcast wave signal to the VTR 20.

At this time, the STB 10 performs a series of processes as shown in FIG. 4 to authenticate the VTR 20.

First, as shown in FIG.
In step S1, it waits to receive device data and a digital signature from each device on the IEEE 1394 network.

Subsequently, the STB 20 is connected to the IEEE 1394
When the device data and the digital signature are transmitted from any device on the network, in step S2, the device data and the digital signature are received by the receiving unit 1
It is received by the 394 I / F 17 and is temporarily stored in a buffer (not shown). That is, in this case, the VTR 20 generates the device data and the digital signature by the control unit 26 as the generating unit, and transmits the device data and the digital signature to the STB via the 1394 I / F 21 as the transmitting unit.
Send to 10. In response, STB 10 sets VT
The device data and the digital signature from R20 are received by the 1394 I / F 17, which is a receiving means, and are temporarily stored in a buffer (not shown).

The device data to which the digital signature has been added is stored in, for example, an IEEE 1394 asynchronous packet by the 1394 I / F 21 of the VTR 20, as shown in FIG. 5, and transmitted by asynchronous transmission.

Then, the STB 10 executes step S in FIG.
In step 3 and step S4, the information stored in advance in the memory 16,
The device data and the digital signature received from the TR 20 are compared with each other, and a match is found.

Here, the information stored in the memory 16 in advance includes all or one of the device data and the digital signature of the devices on the IEEE 1394 network that have been authenticated in the past. Information stored in the memory 16 in advance includes information obtained by performing predetermined lossless or irreversible compression on device data and digital signatures of devices on the IEEE 1394 network that have been authenticated in the past,
For example, "0" or "FF" as seen in the device ID, etc.
There is information obtained by removing information commonly attached to any data from the device data and the digital signature.

As described above, by performing a predetermined compression process on the device data and the digital signature and removing redundant information to reduce the data capacity, the STB 10
The required capacity of the memory 16 can be reduced,
The amount of data to be compared is small.

It should be noted that the information subjected to the predetermined compression processing is
When comparing the device data received from the VTR 20 and the digital signature, the STB 10 controls the VTR 2 under the control of the control unit 13 by a compression processing unit (not shown).
0 to perform predetermined compression processing to convert the received device data and digital signature into comparable information,
A predetermined decompression process is performed on information stored in the memory 16 in advance by a decompression processing unit (not shown).

As a method of comparing the information stored in the memory 16 with the device data and the digital signature received from the VTR 20, a method of comparing each information stored in the memory 16 in advance from the head of the data is as follows. There are those that compare sequentially and those that compare from any unique information in the data. If the information stored in advance in the memory 16 includes information commonly attached to any of the above-described data, different information or information having a high possibility of being different is preferentially compared, By comparing the accompanying information at the end, the STB10
Is information stored in the memory 16 in advance and the VTR 20
Can be efficiently compared with the device data and the digital signature received from the device.

In step S3, the STB 10 controls the memory 16 by the control unit 13 functioning as comparing means.
Is compared with the device data and the digital signature received from the VTR 20. as a result,
In step S4, the information corresponding to the device data and the digital signature received from the VTR 20 is stored in the memory 16
STB10, when it is determined that the
Under the control of the control unit 13 functioning as control means, V
The normal verification process for the device data and the digital signature received from the TR 20 is omitted, and the process proceeds to step S9.

In step S9, the STB 10 notifies the controller 13 that the device data and the digital signature received from the VTR 20 are appropriate, and repeats the processing from step S1 again.

Here, the notification means that the STB 10 recognizes that it can communicate with the VTR 20,
A transition to a state in which communication can be started. If necessary, a response indicating that communication is possible is transmitted to the VTR 20 or a broadcast wave signal tuned by the tuner unit 11 is transmitted. It is to start.

As described above, when information corresponding to the device data and the digital signature received from the VTR 20 is stored in the memory 16, the STB 10 determines that the device data and the digital signature are appropriate. The verification process is omitted, and the VTR 20 is authenticated as a device capable of communication.

On the other hand, in step S4, the VTR 20
If it is determined that the information corresponding to the device data and the digital signature received from the VTR 20 is not stored in the memory 16, the process proceeds to steps S5 and S6, and the process proceeds to steps S5 and S6. Perform normal verification processing. That is, STB
In step S5 and step S6, the control unit 13 verifies the device data and the digital signature received from the VTR 20 using the public key, and determines whether or not the device data and the digital signature are appropriate. Is determined.

Note that the STB 10 is not limited to the method of the verification process here, and for example, the VTR 20 such as the above-described RSA signature or DSA signature.
Performs a verification process according to the type of digital signature generated by.

STB 10 determines in step S5 that V
The device data and the digital signature received from the TR 20 are verified. If it is determined in step S6 that the device data and the digital signature are not proper, the process proceeds to step S7. STB10 is
In step S7, the control unit 13 causes the VTR 2
0, a notification that the received device data and digital signature are not appropriate is given, and the processing from step S1 is repeated again.

Here, the notification means that the STB 10 recognizes that communication with the VTR 20 is impossible, and that the STB 10 cannot communicate with the VTR 20 if necessary. Is transmitted.

On the other hand, in step S6, the VTR 20
If the STB 10 determines that the device data and the digital signature received from the STB are proper, the STB 10 proceeds to the process of step S8, and under the control of the control unit 13,
Information on the device data and the digital signature received from the TR 20 is stored in the memory 16. That is, STB
Reference numeral 10 denotes the device data and the digital signature received from the VTR 20 which have been subjected to various compression processings and the like, as necessary, as one piece of information to be compared in step S3. Information about the digital signature is stored in the memory 16.

The STB 10 authenticates the VTR 20 as a new communicable device. In step S9, the control unit 13 notifies the control unit 13 that the device data and the digital signature received from the VTR 20 are appropriate. The processing from step S1 is repeated.

Through such a series of processing, when the STB 10 authenticates the VTR 20, the STB 10 can transmit the signal tuned by the tuner unit 11 to the VTR 20. Then, the VTR 20 sets the STB1
The signal from 0 can be recorded on a tape which is a recording medium (not shown).

As described above, in the IEEE 1394 network shown as the embodiment of the present invention, the STB 10 stores the device data of the device authenticated in the past and the information on the digital signature, so that the VTR 20 can be stored in the past. If you have been authenticated,
The verification process of the device data and the digital signature received from the VTR 20 can be omitted, and the authentication can be speeded up.

The present invention is not limited to the above-described embodiment. For example, not only an IEEE1394 network but also a so-called Ethernet or USB
(Universal Serial Bus) and the like, and can also be applied to networks constructed with digital serial buses.
That is, the present invention can be applied to devices on the same network, and can be applied to, for example, a case in which a host computer to which a plurality of terminals are connected is logged in from any terminal. .

The device to be authenticated may be any device that can transmit the stored data. In the present invention, in addition to the STB 10, for example, a tuner device or a so-called MD (Mini Disk) And so on. Similarly, the device to be authenticated may be any device that receives data from the outside. In the present invention, in addition to the VTR 20, for example, a recording device such as an MD or a digital television may be used.

Further, according to the present invention, the STB 10
VTR 20 not only authenticates
It is needless to say that 0 can be authenticated, and that other modifications can be made as appropriate without departing from the spirit of the present invention.

[0059]

As described in detail above, the authentication processing device according to the present invention is an authentication processing device for authenticating any electronic device connected to the same network, and relates to a digital signature that has been authenticated in the past. Storage means for storing information; receiving means for receiving information relating to a digital signature transmitted from any electronic device on the network; information relating to the digital signature stored in the storage means; Comparing means for comparing the information on the digital signature with the information on the digital signature, and as a result of the comparison, the information on the digital signature stored in the storage means corresponds to the information on the digital signature transmitted from the electronic device. When there is information,
And control means for performing control so as to omit a verification process for the information relating to the digital signature transmitted from the electronic device.

Therefore, the authentication processing device according to the present invention authenticates the electronic device at a high speed by omitting the process of verifying the information related to the digital signature transmitted from the electronic device that has been authenticated in the past. be able to.

Further, the authentication processing method according to the present invention is an authentication processing method for authenticating any electronic device connected to the same network, wherein information on a digital signature that has been authenticated in the past is stored in advance, Receiving information about the digital signature transmitted from any electronic device on the network, comparing the information about the digital signature stored in advance with the information about the digital signature transmitted from the electronic device, and comparing the information. As a result, when there is information corresponding to the information about the digital signature transmitted from the electronic device in the information about the digital signature stored in advance, a verification process for the information about the digital signature transmitted from the electronic device is performed. Is omitted.

Therefore, in the authentication processing method according to the present invention, in the case of an electronic device that has been authenticated in the past, the speed of authentication can be increased by omitting the process of verifying the information on the received digital signature. Can be.

Further, the authentication processing system according to the present invention is characterized in that an authentication processing device having a function of authenticating an arbitrary electronic device and at least one device to be authenticated are connected to each other in a network. An authentication processing system that authenticates a device, wherein the device to be authenticated includes a generation unit that generates information related to a digital signature, and a transmission unit that transmits information related to the digital signature to the authentication processing device. Storage means for storing information related to the digital signature that has been authenticated, receiving means for receiving information related to the digital signature transmitted from the device to be authenticated, information related to the digital signature stored in the storage means, A comparison unit for comparing the transmitted information about the digital signature, and a result of the comparison by the comparison unit, If there is information corresponding to the information on the digital signature transmitted from the device to be authenticated in the information on the digital signature stored in the storage means, if the information on the digital signature transmitted from the device to be authenticated Control means for controlling the verification process to be omitted.

Therefore, the authentication processing system according to the present invention authenticates a device to be authenticated without performing a process of verifying information relating to a digital signature transmitted from the device to be authenticated which the authentication processing device has authenticated in the past. And high-speed authentication between devices can be realized.

[Brief description of the drawings]

FIG. 1 shows an IEEE 139 according to an embodiment of the present invention.
It is a block diagram explaining the structure of 4 networks.

FIG. 2 is a diagram illustrating a configuration of an STB on the IEEE 1394 network.

FIG. 3 is a diagram illustrating a configuration of a VTR on the IEEE 1394 network.

FIG. 4 is a flowchart illustrating a series of steps when the STB authenticates a device that has transmitted device data and a digital signature.

FIG. 5 is a diagram illustrating a state in which device data and a digital signature are transmitted by asynchronous transmission.

[Explanation of symbols]

10 STB, 13 control unit, 16 memory, 1
7 1394 I / F, 20 VTR, 21 1394
I / F, 26 control unit, 30 IEEE1394 serial bus

Claims (15)

[Claims] 1. An authentication processing apparatus for authenticating any electronic device connected to the same network, comprising: storage means for storing information relating to a digital signature that has been authenticated in the past; Receiving means for receiving the transmitted information on the digital signature; comparing means for comparing the information on the digital signature stored in the storage means with the information on the digital signature transmitted from the electronic device; As a result of the comparison by the comparing means, if the information on the digital signature stored in the storage means includes information corresponding to the information on the digital signature transmitted from the electronic device, the information is transmitted from the electronic device. Control to omit the verification process for the information related to the digital signature Authentication processing apparatus, characterized in that it comprises a stage. 2. The information relating to the digital signature transmitted from the electronic device is generated using unique device data uniquely generated by the electronic device, and the device data and a secret key of the electronic device. The authentication processing device according to claim 1, wherein the digital signature is a digital signature. 3. The information relating to the digital signature stored in the storage means has been subjected to a predetermined compression process, and the information relating to the digital signature transmitted from the electronic device is subjected to the compression process. 2. The authentication processing device according to claim 1, further comprising a compression processing unit. 4. The information relating to the digital signature stored in the storage means has been subjected to a predetermined compression processing, and the information relating to the digital signature stored in the storage means which has been compressed by the compression processing is compared with the information relating to the digital signature. 2. The authentication processing apparatus according to claim 1, further comprising an expansion processing unit for performing a predetermined expansion processing for decompressing the compression. 5. The information relating to the digital signature stored in the storage means includes common information attached to any information, and the comparing means includes information relating to the digital signature stored in the storage means. 2. The authentication processing apparatus according to claim 1, wherein when comparing the information with the digital signature transmitted from the electronic device, the common information is compared last. 6. An authentication processing method for authenticating any electronic device connected to the same network, wherein information relating to a digital signature that has been authenticated in the past is stored in advance, and any electronic device on the network Receiving the transmitted information on the digital signature, comparing the information on the digital signature stored in advance with the information on the digital signature transmitted from the electronic device, and as a result of the comparison, If the information related to the digital signature included in the information related to the digital signature transmitted from the electronic device includes the information corresponding to the information related to the digital signature transmitted from the electronic device, omit the verification process for the information related to the digital signature transmitted from the electronic device. Authentication processing method characterized by the above-mentioned. 7. The information relating to a digital signature transmitted from the electronic device is generated using unique device data uniquely generated by the electronic device and the device data and a secret key of the electronic device. 7. The authentication processing method according to claim 6, wherein the digital signature is a digital signature. 8. A predetermined compression process is performed on the information on the digital signature stored in advance, and the compression process is performed on the information on the digital signature transmitted from the electronic device. The authentication processing method according to claim 6, characterized in that: 9. The pre-stored information relating to the digital signature has been subjected to a predetermined compression process, and the pre-stored information relating to the digital signature which has been compressed by the compression process is subjected to the compression. 7. The authentication processing method according to claim 6, wherein a predetermined decompression process is performed to solve the problem. 10. The pre-stored information on a digital signature includes common information attached to any information, and the pre-stored information on a digital signature includes:
7. The authentication processing method according to claim 6, wherein when comparing with the information on the digital signature transmitted from the electronic device, the common information is compared last. 11. An authentication processing system in which an authentication processing device authenticates a device to be authenticated in a network in which an authentication processing device having a function of authenticating an arbitrary electronic device and at least one device to be authenticated are connected. Wherein the device to be authenticated comprises: generating means for generating information relating to a digital signature; and transmitting means for transmitting information relating to the digital signature to the authentication processing device, wherein the authentication processing device has been authenticated in the past. Storage means for storing information about the digital signature; receiving means for receiving information about the digital signature transmitted from the device to be authenticated; information about the digital signature stored in the storage means; Comparing means for comparing the transmitted information about the digital signature, and a result of the comparison by the comparing means If the information on the digital signature stored in the storage means includes information corresponding to the information on the digital signature transmitted from the device to be authenticated, the digital signature transmitted from the device to be authenticated is returned. Control means for performing control so as to omit verification processing for information related to the authentication processing. 12. The generation means generates a unique device data uniquely generated by the device to be authenticated, and a digital signature using the device data and a secret key of the device to be authenticated. The authentication processing system according to claim 11, wherein 13. The information relating to a digital signature stored in the storage means of the authentication processing device has been subjected to a predetermined compression process, and the authentication processing device transmits the digital signature transmitted from the device to be authenticated. 2. A compression processing means for performing the compression processing on information related to a signature.
2. The authentication processing system according to 1. 14. The information relating to a digital signature stored in said storage means of said authentication processing device has been subjected to a predetermined compression process, and said authentication processing device has said storage device compressed by said compression process. 12. The authentication processing system according to claim 11, further comprising a decompression processing unit for performing a predetermined decompression process for decompressing the information on the digital signature stored in the storage device. 15. The information related to a digital signature stored in the storage unit of the authentication processing device includes common information accompanying any information, and the comparison unit is stored in the storage unit. 12. The method according to claim 11, wherein when comparing the information on the digital signature with the information on the digital signature transmitted from the electronic device, the common information is compared last.
Authentication processing system as described.