JP2003046499A - Communication system, user terminal, ic card, authentication system, and control system and program for access and communication - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication system that can relieve a load required for checking the validity of a CA(Certificate Authority) certificate of a user, prevent a CA certificate on the way of communication from being stolen, allow users to avoid misuse of an IC card, allow an IC card distributor to distribute a new IC card with enough time in a new/old IC card switching period, easily update an authentication system certificate, respectively use different authentication system certificates from different authentication systems, and update a CA certificate through an updated IC card without making the user care about the valid term of the CA certificate. SOLUTION: The authentication system writes a CA certificate and identification information to an IC card and distributes the resulting IC card to users. The authentication system stores authentication system certificates corresponding to a plurality of identification information items. When a user terminal reads an IC card and informs the authentication system about its identification information, the authentication system issues the authentication system certificate corresponding to the identification information. The user can verify the validity of the authentication system according to the authentication system certificate.

Description

Detailed Description of the Invention

[0001]

TECHNICAL FIELD The present invention is used for server authentication on the Internet or other data communication networks. The present invention relates to a technique in which a user who receives a service via a communication network uses an IC card (Integrated Circuit card) to authenticate the validity of a server connected from the user terminal.

[0002]

2. Description of the Related Art A service in which a user connects to a server by a user terminal via a communication network and receives information provided by the server is widely used. At this time, the user authenticates whether the server connected to receive the service is valid. In addition, the server authenticates whether or not the user who will provide the service is valid.

As one of such mutual authentication methods, when a user tries to access a server to receive a service, first, a certification authority (hereinafter, CA station: Certificate).
CA that is an electronic certificate issued by the e Authority)
The user obtains the certificate and then requests the authentication system that manages the server to provide this authentication system certificate. In this CA certificate, the public key of the CA station is written.

In response to this request, the authentication system sends the authentication system certificate held therein to the user. The user authenticates the authenticity of the authentication system certificate by decrypting the digital signature included in the authentication system certificate with the public key of the CA station and comparing the plaintext data of the authentication system certificate with the hashed result. You can

Next, the user authenticates the authentication system by using the authentication system certificate whose authenticity has been authenticated in this way. As a result, the user can receive the service from the desired server after authenticating the validity of the server.

[0006]

A communication system including such an authentication system requires a user to receive a CA certificate from a CA station. PK used for communication with CA station when CA certificate is obtained by communication
I (Public Key Infrastructure) is required. However, when the CA certificate is acquired online, it is very difficult for the user side to confirm the reliability that the site itself is the expected site. In addition, the user side who has acquired the CA certificate needs a legitimacy check step of checking whether there is any fraudulent activity such as falsification during communication, which increases the burden on the user side.

In order to solve this problem, it can be considered that the issuer of the IC card obtains the CA certificate, records it on the IC card, and distributes it to the users. However, in this case, it takes time to switch the IC card depending on the expiration date of the IC card. That is, since the expiration dates of all CA certificates are the same, the expiration dates of IC cards are all the same. Therefore, with the expiration of the IC card expiration date, a new IC card is issued and all I
It is necessary to switch the C card.

At this time, on the user side, the old IC card cannot be used and the new IC card can be used. For example, if the changeover is performed after midnight on 〇〇〇, the user is notified of that, and after 〇〇〇, the old I
It is necessary to have the C card switch to the new IC card. Such work is a burden on the user, and the expiration date has expired due to forgetting the notification.
When the C card is used, it becomes impossible to connect to the server, which is inconvenient for the user.

Further, since the expiration date of such an IC card is set to be the same for a large number of IC cards, as described above, from the standpoint of the IC card distributing side, a large number of IC cards are issued immediately before the expiration of the effective period. The new IC card will be distributed to the users. This will result in a significant limitation on the distribution schedule, making it difficult to secure distribution personnel, for example. Therefore, it is desirable to carry out the distribution work with a long time before the actual switching, but during that time, the user has two new and old IC cards, which may cause the user to misuse the IC card. Become. Figure 4 shows the new I
It is a figure which shows switching to a C card.

When the authentication system certificate is enclosed in the IC card, the authentication system certificate may need to be renewed due to security reasons regardless of the expiration date. Even in such a case, the above procedure is required. For example, it is desirable from the viewpoint of security that the authentication system certificate held by the authentication system is discarded and updated every time the authentication system is started, but considering the time and effort required to update the IC card each time. , Difficult to achieve.

Further, in a network environment in which a plurality of authentication systems coexist for reasons such as load balancing, a person who performs so-called "spoofing" by making the authentication system certificate different for each authentication system. Is forced to copy a plurality of authentication system certificates, which is desirable from the viewpoint of security, but from the viewpoint of user convenience, the user has a plurality of I / O systems corresponding to a plurality of authentication systems.
Since it is necessary to have a C card and use these differently, it is necessary for the user to manage which IC card corresponds to which authentication system.
This is difficult to achieve.

The present invention has been made against such a background, and saves the burden required for the CA certificate validity check on the user side as compared with the case of acquiring a CA certificate online, and , The present invention is an IC for the user.
It is an object of the present invention to provide a communication system capable of avoiding erroneous use of a card and allowing an IC card distributor to distribute the new IC card with a slack of schedule when switching between the old and new IC cards. Since the present invention sends the authentication system certificate every time, the authentication system certificate can be easily updated, or different authentication system certificates can be used for each authentication system. It is an object of the present invention to provide a communication system capable of improving performance. further,
INDUSTRIAL APPLICABILITY The present invention can improve the convenience of the user by automatically updating the CA certificate when updating the IC card even if the user is not aware of the expiration date of the CA certificate. The purpose is to provide.

[0013]

According to the present invention, a CA certificate is recorded on an IC card and distributed to users.
Compared with the case of acquiring a CA certificate online, the burden of checking the CA certificate on the user side is eliminated, and by recording identification information indicating the attributes of the CA station itself in this IC card, multiple The use of the IC card having the identification information of the IC card is permitted, the user can avoid the misuse of the IC card, and the IC card distributor can use the old and new IC
New IC with a slack schedule when switching cards
The feature is that the card can be distributed.

Further, since the authentication system sends its own certificate each time, the authentication system certificate held in the authentication system is discarded and updated every time the authentication system is started. In a network environment in which a plurality of authentication systems coexist, it is possible to improve security by using different authentication system certificates for each authentication system, and it is possible to improve security.

Further, C including the expiration date of the IC card
By issuing the IC card in which the A certificate is written, the user always has the CA certificate within the valid period, so there is no need to perform the CA certificate update work due to the expiration of the CA certificate. It may be possible to implement PKI.

That is, a first aspect of the present invention is to provide a communication network, a large number of user terminals connectable to the communication network, an IC card in which information held by the user terminals can be safely read and written, A communication system comprising an authentication system connected to the user terminal via a communication network and performing mutual or one-sided authentication, and a connection and communication control system for controlling connection and communication according to the authentication result.

Here, a feature of the present invention is that the IC card is distributed to each user, and the IC card is IC card identification information in its tamper resistant area and an electronic certificate issued by CA. A means for holding at least a required part of the certificate and IC card expiration date information included in the expiration date of this CA certificate is provided, and the CA certificate includes the CA public key and the CA certificate itself. CA certificate identification information indicating attributes is written, and / or C
The expiration date of the A certificate itself is written, and the user terminal reads the CA public key and the CA certificate identification information or the IC card identification information and the IC card expiration date written in the IC card. Means for securely transmitting the CA certificate identification information or the IC card identification information and an authentication system certificate request read by the reading means to the authentication system via the communication network, the authentication The system and the connection and communication control system include an authentication system private key and means for holding an authentication system certificate issued by the CA for the authentication system private key. The authentication system public key corresponding to the authentication system private key and the first plaintext data and the CA public key are paired. A first digital signature obtained by encrypting a result obtained by hashing the first plaintext data with the CA private key is written, and the authentication system certificate corresponding to the CA certificate identification information according to the authentication system certificate request. And second plaintext data and means for sending a second digital signature obtained by hashing the result of the second plaintext data with an authentication system secret key to the user terminal, wherein the user terminal is the authentication system. And a result of hashing the first plaintext data included in the authentication system certificate sent from the connection and communication control system and the first digital signature by the CA public key included in the CA certificate. A means for verifying the authenticity of the authentication system certificate by comparing the decrypted result with the authentication system. System and the result of hashing the second plaintext data sent from the connection and communication control system and the result of decrypting the second digital signature using the authentication system public key included in the authentication system certificate. And means for verifying the authenticity of the authentication system by comparing with.

Here, the tamper resistant area of the IC card is
It is an area where physical and logical techniques are provided to make it difficult to steal or tamper with confidential information and to make it difficult to carry out unauthorized actions by unauthorized procedures from the outside.
This technology makes it very difficult for the IC card to directly access the memory and read the information.
Physically, special processing of the chip surface, adoption of memory that is difficult to read, addition of a dummy circuit, etc. prevent modification, alteration, and falsification that would damage the chip itself. Access rights are set as logical security to prevent unauthorized access.

The authentication system holds a plurality of authentication system certificates, and the IC card identification information or the CA certificate identification information among the plurality of authentication system certificates held by the holding means. And a means for sending the authentication system certificate corresponding to the above to the user terminal in response to the authentication system certificate request, or the authentication system has means for holding a plurality of authentication system certificates. And a means for sending all of the plurality of the authentication system certificates held by the holding means to the user terminal in response to the authentication system certificate request, wherein the user terminal is The C corresponding to the IC card identification information or the CA certificate identification information from the authentication system certificate
It is possible to adopt a configuration including means for selecting the A certificate and using it for authentication.

The user terminal is provided with means for safely sending the read IC card expiration date information to the authentication system, and the authentication system is means for safely holding accurate time and receiving from the user terminal. Said IC
The card expiration date information is compared with the accurate time, and the IC
It is desirable to provide means for rejecting authentication or connection to the user terminal if the card expiration date information is after the accurate time.

The user terminal compares the IC card expiration date information with the accurate time by means for reading the IC card expiration date information, means for securely holding the accurate time, and comparing the IC card expiration date with the accurate time. It is desirable to provide means for rejecting an authentication request or a connection request to the authentication system if the information is after the accurate time.

The above-mentioned authentication system can be used collectively or
The C card identification information may be configured to have a means for converting and comparing the accurate time and / or the IC card expiration date by a predetermined method.

Further, the user terminal converts and / or compares accurate time and / or IC card expiration date in a batch or in a predetermined method corresponding to the IC card identification information. It is also possible to adopt a configuration including a means for doing so.

For example, when it is desired to expire the IC card before the IC card expiration date for security reasons,
Perform the operation to shift the expiration date. That is equivalent to "conversion in a certain way" here. Alternatively, if the delivery of the IC card is delayed, an operation of extending the expiration date of the IC card is performed. That is equivalent to "conversion in a certain way" here. According to this, the degree of freedom of comparison can be improved more than in the case where the comparison is performed only with the IC card expiration date initially determined, and the convenience of the IC card distributor can be improved.

Alternatively, when authenticating, the expiration date is confirmed and the authentication is performed, but once mutual authentication is established, a service mode is realized in which the IC card can be used without considering the expiration date. In this case, the operation is performed to invalidate the expiration date after mutual authentication is established. That is equivalent to "conversion in a certain way" here. In this way, the degree of freedom of service can be improved.

The user terminal comprises a plurality of the IC cards in which different IC card expiration date information is written, and when the expiration date of the CA certificate expires, the CA
It is desirable to provide a means for invalidating the CA certificate and the IC card corresponding to the CA certificate without performing a certificate update operation.

The user terminal is provided with means for safely reading the IC card identification information and securely transmitting it to the authentication system, and the authentication system is provided with a plurality of the IC card identification information distributed to the same user. With respect to the IC card, information on whether the IC card is usable or not and information on the order in which the IC card can be used are accumulated, and the IC card identification information transmitted from the user terminal and the accumulation means are accumulated. Means for rejecting the authentication request or the connection request if the information is compared and collated with the usable or unusable information, and authentication is performed by the authentication request and the connection request from the user terminal using the IC card. When there is usable information of the IC card preceding the IC card stored in the storing means when the connection is successful It is desirable to have a means for disabling use by removing it from or authenticated change its usable information.

According to this, when the user possesses a plurality of IC cards, once the latest IC card is used, thereafter, the IC card whose expiration date is older than that of the latest IC card is used. It becomes impossible and is effective in preventing illegal use of the IC card.

A second aspect of the present invention is applied to the communication system of the present invention, and the IC card identification information and at least a necessary part of a CA certificate which is an electronic certificate issued by a CA are provided in the tamper resistant area. A means for holding the IC card expiration date information included in the expiration date of the CA certificate is provided, and the CA certificate includes CA public key and CA certificate identification information indicating attributes of the CA certificate itself. It is an IC card characterized in that the expiration date of the CA certificate itself is written therein.

A third aspect of the present invention is applied to the communication system of the present invention, and the CA written in the IC card is
A means for reading the public key and the CA certificate identification information or the IC card identification information and the IC card expiration date, and the CA certificate identification information or the IC card identification information and the authentication system certificate read by the reading means Means for securely sending a request to the authentication system via the communication network, and hashing the first plaintext data contained in the authentication system certificate sent from the authentication system and the connection and communication control system Means for verifying the authenticity of the authentication system certificate by comparing the result obtained by decrypting the first digital signature with the CA public key included in the CA certificate; The second plaintext data sent from the connection and communication control system is And a result of decrypting the second digital signature using the authentication system public key included in the authentication system certificate to verify the authenticity of the authentication system. It is a user terminal characterized by the above.

It is preferable to provide a means for selecting the IC card identification information or the CA certificate corresponding to the CA certificate identification information from a plurality of the sent CA certificates and using the selected CA certificate for authentication.

Further, it is desirable to provide means for safely sending the read IC card expiration date information to the authentication system.

The IC card expiration date information is obtained by comparing the IC card expiration date information with the accurate time, and means for reading the IC card expiration date information. It is desirable to provide means for rejecting an authentication request or connection request to the authentication system if the time is later than the correct time.

Further, it is provided with means for converting and comparing both an accurate time and / or an IC card expiration date in a batch or in a predetermined method corresponding to the IC card identification information. Is desirable.

Further, the plurality of IC cards in which different IC card expiration date information is written are provided, and when the expiration date of the CA certificate has expired, the CA certificate is renewed without performing the CA certificate update operation. It is desirable to provide a means for invalidating the certificate and the IC card corresponding to the CA certificate.

A fourth aspect of the present invention is applied to the communication system of the present invention, and comprises means for holding an authentication system private key and an authentication system certificate issued by the CA for the authentication system private key. In the authentication system certificate, a result obtained by hashing the first plaintext data with the authentication system public key corresponding to the authentication system private key and the first plaintext data and the CA private key corresponding to the CA public key is obtained. The encrypted first digital signature is written and the CA is compliant with the certification system certificate request.
Means for sending to the user terminal an authentication system certificate corresponding to the certificate identification information, second plaintext data, and a second digital signature obtained by hashing the result of hashing the second plaintext data with the authentication system private key. It is an authentication system characterized by having.

Means for holding a plurality of authentication system certificates, and the authentication corresponding to the IC card identification information or the CA certificate identification information from among the plurality of authentication system certificates held by the holding means And a means for sending a system certificate to the user terminal in response to the authentication system certificate request, or
Configuration comprising means for holding a plurality of authentication system certificates, and means for sending all of the plurality of authentication system certificates held by the holding means to the user terminal in response to the authentication system certificate request Can be

In addition, the IC card expiration date information received from the user terminal is compared with the accurate time, and the IC card expiration date information is later than the accurate time. In that case, it is desirable to provide means for rejecting authentication or connection to the user terminal.

Further, it is provided with means for converting and comparing both the accurate time and / or the IC card expiration date in a batch or in a predetermined method corresponding to the IC card identification information. Is desirable.

Further, means for accumulating information on whether or not the IC cards can be used and information on the usable order of the IC cards for a plurality of the IC card identification information distributed to the same user. Means for comparing and collating the IC card identification information transmitted from the user terminal with the usable or unusable information stored in the storing means, and rejecting the authentication request or connection request if unusable And the use of an IC card preceding the IC card stored in the storing means when a connection is established after successful authentication by the authentication request and the connection request using the IC card from the user terminal. When the information exists, it is desirable to provide a means for making it unusable by changing the usable information or deleting it from the authentication target.

A fifth aspect of the present invention is applied to the communication system of the present invention, and comprises means for holding an authentication system private key and an authentication system certificate issued by the CA for the authentication system private key. In the authentication system certificate, a result obtained by hashing the first plaintext data with the authentication system public key corresponding to the authentication system private key and the first plaintext data and the CA private key corresponding to the CA public key is obtained. The encrypted first digital signature is written and the CA is compliant with the certification system certificate request.
Means for sending to the user terminal an authentication system certificate corresponding to the certificate identification information, second plaintext data, and a second digital signature obtained by hashing the result of hashing the second plaintext data with the authentication system private key. And a control system for connection and communication.

According to a sixth aspect of the present invention, when the information processing apparatus applied to the communication system of the present invention is installed, the information processing apparatus writes in the IC card as a function corresponding to the user terminal. And a function for reading the CA public key and the CA certificate identification information or the IC card identification information and the IC card expiration date, and the CA certificate identification information or the IC card identification information read by the reading function, A function of securely sending an authentication system certificate request to the authentication system via the communication network, and the first authentication system certificate included in the authentication system certificate sent from the authentication system and the connection and communication control system. The result of hashing the plaintext data and the first digital signature are the C
A function of verifying the authenticity of the authentication system certificate by comparing the result of decryption with the CA public key included in the A certificate, and the function sent from the authentication system and the connection and communication control system. By comparing the result of hashing the second plaintext data with the result of decrypting the second digital signature using the authentication system public key included in the authentication system certificate, the authenticity of the authentication system can be verified. It is a program that realizes a verification function.

It is desirable to realize a function of selecting the IC card identification information or the CA certificate corresponding to the CA certificate identification information from a plurality of the sent CA certificates and using it for authentication.

Further, it is desirable to realize a function of safely sending the read IC card expiration date information to the authentication system.

Further, a function of reading the IC card expiration date information, a function of safely holding accurate time, and comparing the IC card expiration date information with the accurate time, the IC card expiration date information is It is desirable to realize a function of rejecting an authentication request or connection request to the authentication system if it is later than the correct time.

Further, it is desirable to realize a function of collectively comparing the accurate time with the IC card expiration date information converted by a predetermined method corresponding to the IC card identification information.

Further, the plurality of IC cards in which different IC card expiration date information is written are provided, and when the expiration date of the CA certificate has expired, the CA certificate is updated without performing the CA certificate update operation. It is desirable to realize a function of invalidating the certificate and the IC card corresponding to the CA certificate.

Alternatively, by installing it in an information processing apparatus applied to the communication system of the present invention, the information processing apparatus has a function corresponding to the authentication system, which corresponds to the authentication system secret key and the authentication system secret key. The function of holding the authentication system certificate issued by the CA is realized, and the authentication system certificate includes the authentication system public key corresponding to the authentication system private key, the first plaintext data, and the CA public key. A first digital signature obtained by encrypting the result of hashing the first plaintext data with the corresponding CA private key is written, and the authentication system certificate corresponding to the CA certificate identification information is issued according to the authentication system certificate request. Certificate and the second plaintext data and the result of hashing this second plaintext data is the authentication system private key Is a program, characterized in that to realize the function of sending a second digital signature encrypted with the user terminal.

A function for holding a plurality of authentication system certificates, and the authentication corresponding to the IC card identification information or the CA certificate identification information among the plurality of authentication system certificates held by the held function A function of sending a system certificate to the user terminal in response to the authentication system certificate request, or a function of holding a plurality of the authentication system certificates and a plurality of functions held by the holding means. The function of sending all of the authentication system certificates to the user terminal in response to the authentication system certificate request can be realized.

In addition, the function of safely holding an accurate time and the IC card expiration date information received from the user terminal are compared with the accurate time so that the IC card expiration date information is later than the accurate time. In that case, it is desirable to realize a function of rejecting authentication or connection to the user terminal.

Also, a function of converting and comparing both an accurate time and / or an IC card expiration date by a predetermined method in batch or in correspondence with IC card identification information is realized. Is desirable.

A function of accumulating information on whether or not the IC card can be used and information on the usable order of the IC card with respect to a plurality of the IC card identification information distributed to the same user. , A function of comparing and collating the IC card identification information transmitted from the user terminal with the information on availability or impossibility accumulated by the accumulating function, and rejecting the authentication request or connection request if unusable And the use of the IC card preceding the IC card accumulated by the accumulating function when the connection is established after successful authentication by the authentication request and the connection request using the IC card from the user terminal. When the information exists, it is possible to realize the function to make it unusable by changing the usable information or deleting it from the authentication target. Masui.

[0053]

BEST MODE FOR CARRYING OUT THE INVENTION A communication system according to an embodiment of the present invention will be described with reference to FIGS. FIG. 1 is an overall configuration diagram of a communication system according to an embodiment of the present invention. FIG. 2 is a diagram showing switching of the authentication method of the embodiment of the present invention from the current IC card to the new IC card. FIG. 3 is a diagram showing an authentication procedure according to the embodiment of the present invention.

The first aspect of the present invention is, as shown in FIG. 1, a communication network N, a large number of user terminals U1 to Un connectable to the communication network N, and the holding by the user terminals U1 to Un. An authentication system C1 that is connected to the user terminals U1 to Un via the communication network N and the IC card for safely reading and writing the information to be executed and performs mutual or one-sided authentication
.About.Cm and a connection and communication control system P that controls connection and communication based on the authentication result (n = m may be used).

Here, the feature of the present invention is that the IC card is distributed to each user, and the IC card is the IC card identification information in the tamper resistant area and the electronic certificate CA issued by the CA. A memory area for holding at least a necessary part of the certificate and IC card expiration date information included in the expiration date of this CA certificate is provided,
In the A certificate, the CA public key and the CA certificate identification information indicating the attribute of the CA certificate itself are written, or the expiration date of the CA certificate itself is written, and the user terminals U1 to Un are An IC for reading the CA public key and the CA certificate identification information written in the IC card, or the IC card identification information and the IC card expiration date
A card reader R is provided, and the CA certificate identification information read by the IC card reader R or the IC card identification information and an authentication system certificate request is safely sent to the authentication system via the communication network. The authentication systems C1 to Cm and the connection and communication control system P hold an authentication system private key and an authentication system certificate issued by the CA for the authentication system private key. A first digital signature obtained by encrypting the result of hashing the first plaintext data with the authentication system public key and the first plaintext data corresponding to the authentication system secret key and the CA private key corresponding to the CA public key. And the authentication system corresponding to the CA certificate identification information according to the authentication system certificate request. The certificate and the second plaintext data, and a second digital signature obtained by encrypting the result of hashing the second plaintext data with the authentication system secret key are sent to the user terminals U1 to Un, and the user terminals U1 to Un The result of hashing the first plaintext data included in the authentication system certificate sent from the authentication systems C1 to Cm and the connection and communication control system P and the first digital signature are included in the CA certificate. The authenticity of the authentication system certificate is verified by comparing the result decrypted with the CA public key, and the authentication system C
1-Cm and the result of hashing the second plaintext data sent from the connection and communication control system P and the second digital signature are decrypted using the authentication system public key included in the authentication system certificate. The validity of the authentication system is verified by comparing the result with the above.

The authentication systems C1 to Cm hold a plurality of authentication system certificates, and the authentication corresponding to the IC card identification information or the CA certificate identification information among the held plurality of authentication system certificates. The system certificate is sent to the user terminals U1 to Un in response to the authentication system certificate request.

Alternatively, the authentication systems C1 to Cm hold a plurality of authentication system certificates and send all of the held plurality of authentication system certificates to the authentication system certificate request, and the user terminal U1 ~ Un is the IC from the plurality of the authentication system certificates sent.
The CA certificate corresponding to the card identification information or the CA certificate identification information is selected and used for authentication.

The user terminals U1 to Un can safely use the read IC card expiration date information in the authentication systems C1 to C.
m, and the authentication systems C1 to Cm safely hold the accurate time, compare the IC card expiration date information received from the user terminals U1 to Un with the accurate time, and obtain the IC card expiration date information. If it is later than the accurate time, authentication or connection to the user terminals U1 to Un is rejected.

Further, the user terminals U1 to Un read the IC card expiration date information with the IC card reader R, safely and accurately hold the time, and compare the IC card expiration date information with the accurate time. However, if the IC card expiration date information is after the accurate time, the authentication request or connection request to the authentication systems C1 to Cm is rejected.

The authentication systems C1 to Cm convert the accurate time and / or the IC card expiry date either collectively or by a predetermined method for the IC card identification information for comparison. .

Further, the user terminals U1 to Un convert the accurate time and / or the IC card expiration date either collectively or in a predetermined method corresponding to the IC card identification information. And compare.

For example, when it is desired to expire the IC card before the IC card expiration date for security reasons,
Perform the operation to shift the expiration date. That is equivalent to "conversion in a certain way" here. Alternatively, if the delivery of the IC card is delayed, an operation of extending the expiration date of the IC card is performed. That is equivalent to "conversion in a certain way" here. According to this, the degree of freedom of comparison can be improved more than in the case where the comparison is performed only with the IC card expiration date initially determined, and the convenience of the IC card distributor can be improved.

Alternatively, at the time of authentication, a service form is realized in which the expiration date is confirmed and authentication is performed, but once mutual authentication is established, the IC card can be used without considering the expiration date. In this case, the operation is performed to invalidate the expiration date after mutual authentication is established. That is equivalent to "conversion in a certain way" here. In this way, the degree of freedom of service can be improved.

The user terminals U1 to Un have different I
A plurality of IC cards in which C card expiration date information is written are provided, and when the expiration date of the CA certificate expires, the C certificate is renewed without performing the work of updating the CA certificate.
The IC card corresponding to the A certificate and the CA certificate is invalidated.

The user terminals U1 to Un are connected to the IC
The card identification information is safely read and safely transmitted to the authentication system, and the authentication systems C1 to Cm enable or disable the IC card for a plurality of the IC card identification information distributed to the same user. Information and the information on the usable order of the IC card are accumulated, and the user terminal U1
~ Un comparing and collating the IC card identification information and the stored information indicating whether the IC card is usable or impossible, and if the IC card is not usable, the authentication request or the connection request is rejected, and the user terminals U1 to Un When there is available information of the IC card preceding the IC card accumulated when the authentication is successful and the connection is made by the authentication request and the connection request using the IC card, the available information is changed. Alternatively, it can be disabled by deleting it from the certification target.

According to this, when the user has a plurality of IC cards, once the latest IC card is used, thereafter, the IC card whose expiration date is older than that of the latest IC card is used. It becomes impossible and is effective in preventing illegal use of the IC card.

In this embodiment, the CA station, the server, and the IC card issuer belong to the same organization. Therefore, the CA certificate written in the IC card needs to be checked by the user for its validity. Instead, as compared with the case where the CA certificate is acquired online, the burden on the user for the validity check is reduced.

The user terminals U1 to Un are the authentication system C.
1 to Cm in the access processing step, the identification information and / or the authentication system certificate request
To Cm, the authentication systems C1 to Cm send the authentication system certificate to the user terminals U1 to Un in the access processing process with the user terminals U1 to Un.

As a result, there is an advantage that it is not necessary to provide a new signal transmitting / receiving step. For example, the authentication system C1
In the process of transmitting and receiving ID information for access processing between Cm and user terminals U1 to Un, user terminals U1 to U1
Un sends the authentication system certificate request to the authentication systems C1 to Cm, and the authentication systems C1 to Cm send the authentication system certificate to the user terminals U1 to Un. There is no need to provide a transmitting / receiving process.

Further, there are a plurality of types of sets of the CA certificate and the private key whose expiration dates are different at the same time, and the identification information for identifying each of them is described in the CA certificate. Since the CA certificate containing the expiration date of the IC card is written, the CA certificate within the valid period always exists in the user terminal. Therefore, the CA certificate update work due to the expiration of the CA certificate is required. Enables implementation of PKI without performing.

A second aspect of the present invention is applied to the communication system of the present invention, and the IC card identification information and at least a necessary part of a CA certificate which is an electronic certificate issued by CA in the tamper resistant area. IC card expiration date information included in the expiration date of the CA certificate is held, and the CA certificate is written with CA public key and CA certificate identification information indicating attributes of the CA certificate itself. And / or an IC characterized by the expiration date of the CA certificate itself being written
It's a card.

A third aspect of the present invention is applied to the communication system of the present invention, and the CA written in the IC card is recorded.
The public key and the CA certificate identification information or the IC card identification information and the IC card expiration date are read by the IC card reader R, and the IC card reader R
The CA certificate identification information or the IC card identification information and the authentication system certificate request read by are securely sent to the authentication systems C1 to Cm via the communication network, and the authentication systems C1 to Cm and connection and communication A result of hashing the first plaintext data included in the authentication system certificate sent from the control system P, and a result of decrypting the first digital signature with the CA public key included in the CA certificate. By verifying the authenticity of the authentication system certificate, and hashing the second plaintext data sent from the authentication systems C1 to Cm and the connection and communication control system P with the second digital data. Compare the result of decrypting the signature with the authentication system public key included in the authentication system certificate. The authentication system C1~ by
User terminal U characterized by verifying the correctness of Cm
1 to Un.

The CA certificate corresponding to the IC card identification information or the CA certificate identification information is selected from the plurality of CA certificates sent and used for authentication. Further, the read IC card expiration date information is safely sent to the authentication systems C1 to Cm. In addition, the IC card expiration date information is read by the IC card reading device R, the accurate time is held safely, and the IC card expiration date information is compared with the accurate time to confirm that the IC card expiration date information is accurate. If it is later than this time, the authentication request or connection request to the authentication systems C1 to Cm is rejected. Further, the accurate time is collectively compared with the IC card expiration date information converted by a predetermined method corresponding to the IC card identification information. In addition, a plurality of the IC cards in which different IC card expiration date information is written are provided, and when the expiration date of the CA certificate expires, the CA certificate and the CA certificate are updated without updating the CA certificate. The IC card corresponding to the CA certificate is invalidated.

A fourth aspect of the present invention is applied to the communication system of the present invention, which holds an authentication system private key and an authentication system certificate issued by the CA for the authentication system private key, and carries out this authentication. The system certificate includes the authentication system public key corresponding to the authentication system private key, the first plaintext data, and the CA corresponding to the CA public key.
A first digital signature obtained by encrypting the result of hashing the first plaintext data with the private key is written, and the authentication system certificate corresponding to the CA certificate identification information and the first digital signature according to the authentication system certificate request are written. An authentication system C1 to Cm characterized in that the second plaintext data and a result of hashing the second plaintext data are encrypted with an authentication system secret key and a second digital signature is sent to the user terminals U1 to Un. .

A plurality of authentication system certificates are held, and the I
The authentication system certificate corresponding to the C card identification information or the CA certificate identification information is sent in response to the authentication system certificate request, or a plurality of authentication system certificates are held and the held plurality of authentication system certificates are stored. All of the authentication system certificates are sent to the user terminals U1 to Un in response to the authentication system certificate request.

In addition, the IC card expiration date information that is safely held at a correct time is compared with the IC card expiration date information received from the user terminals U1 to Un, and the IC card expiration date information is later than the accurate time. If so, the user terminals U1 to U1
Deny authentication or connection to Un.

Further, either one of the accurate time and the IC card expiration date is converted and compared in a batch or by a predetermined method corresponding to the IC card identification information.

Further, with respect to a plurality of pieces of IC card identification information distributed to the same user, information on whether or not the IC card can be used and information on the order in which the IC cards can be used are stored. The IC card identification information transmitted from the terminals U1 to Un and the stored information indicating whether the card is usable or impossible are compared and collated, and if the information is unusable, the authentication request or the connection request is rejected, and the user terminals U1 to Un. When the available information of the IC card preceding the IC card accumulated when the authentication is successful and the connection is made by the authentication request and the connection request using the IC card from It is made unusable by changing or deleting it from the certification target.

A fifth aspect of the present invention is applied to the communication system of the present invention, which holds an authentication system private key and an authentication system certificate issued by the CA for the authentication system private key, and carries out this authentication. The system certificate includes the authentication system public key corresponding to the authentication system private key, the first plaintext data, and the CA corresponding to the CA public key.
A first digital signature obtained by encrypting the result of hashing the first plaintext data with the private key is written, and the authentication system certificate corresponding to the CA certificate identification information and the first digital signature according to the authentication system certificate request are written. A connection and communication control system P characterized in that the second plaintext data and the result of hashing the second plaintext data are sent to the user terminals U1 to Un by encrypting the second digital signature encrypted with the authentication system secret key. Is.

According to a sixth aspect of the present invention, by installing the computer apparatus as an information processing apparatus applied to the communication system of the present invention, the computer apparatus has functions corresponding to the user terminals U1 to Un. A function of reading the CA public key and the CA certificate identification information written in the IC card or the IC card identification information and the IC card expiration date, and the CA certificate identification information read by the reading function or the function A function of securely sending the IC card identification information and the authentication system certificate request to the authentication systems C1 to Cm via the communication network, and the authentication system certificate sent from the authentication systems C1 to Cm and the connection and communication control system P. The result of hashing the first plaintext data included in the book and the first A function of verifying the authenticity of the authentication system certificate by comparing the result obtained by decrypting the digital signature with the CA public key included in the CA certificate, and the control of the authentication systems C1 to Cm and connection and communication. Authentication by comparing the result of hashing the second plaintext data sent from the system P with the result of decrypting the second digital signature using the authentication system public key included in the authentication system certificate It is a program that realizes the function of verifying the validity of the system.

A function of selecting the CA certificate corresponding to the IC card identification information or the CA certificate identification information from the plurality of sent CA certificates and realizing the function to be used for authentication is realized. Further, it realizes a function of safely sending the read IC card expiration date information to the authentication systems C1 to Cm. Further, a function of reading the IC card expiration date information, a function of safely holding an accurate time, and comparing the IC card expiration date information with the accurate time, the IC card expiration date information shows the accurate time. After that, the function of rejecting the authentication request or the connection request to the authentication systems C1 to Cm is realized. Also,
The function of comparing the accurate time with the IC card expiration date information converted in a predetermined method in a batch or corresponding to the IC card identification information is realized.
In addition, a plurality of the IC cards in which different IC card expiration date information is written are provided, and when the expiration date of the CA certificate expires, the CA certificate and the CA certificate are updated without updating the CA certificate. A function of invalidating the IC card corresponding to the CA certificate is realized.

Alternatively, by installing in an information processing apparatus applied to the communication system of the present invention, the information processing apparatus has a function corresponding to the authentication systems C1 to Cm, and the authentication system secret key and the authentication system secret key On the other hand, the function of holding the authentication system certificate issued from the CA is realized, and the authentication system certificate includes the authentication system public key and the first plaintext data corresponding to the authentication systems C1 to Cm private keys and A first digital signature, which is an encrypted result of hashing the first plaintext data with the CA private key corresponding to the CA public key, is written, and corresponds to the CA certificate identification information according to the authentication system certificate request. Authentication system Certificate and second plaintext data and the result of hashing this second plaintext data is the authentication system. Is a program, characterized in that to realize the function of sending a second digital signature encrypted with the secret key to the user terminal U1-Un.

A function for holding a plurality of authentication system certificates, and the authentication corresponding to the IC card identification information or the CA certificate identification information from among the plurality of authentication system certificates held by the held function The system certificate is sent to the user terminal U in response to the authentication system certificate request.
1-Un to send the function, or,
A function of holding a plurality of authentication system certificates and a function of sending all of the plurality of authentication system certificates held by the holding means to the user terminals U1 to Un in response to the authentication system certificate request. It can be realized.

Further, the IC card expiration date information received from the user terminals U1 to Un is compared with the accurate time, and the IC card expiration date information is compared with the accurate time. After that, a function of rejecting authentication or connection to the user terminals U1 to Un is realized.

In addition, a function of converting either one of the accurate time and the IC card expiration date by a predetermined method for the IC card identification information collectively or collectively is realized.

Further, a function of accumulating information on whether or not the IC card can be used and information on the usable order of the IC card for a plurality of the IC card identification information distributed to the same user. , Compare and collate the IC card identification information transmitted from the user terminals U1 to Un with the usable or unusable information accumulated by the accumulating function, and reject the authentication request or connection request if unusable And the IC from the user terminals U1 to Un
When there is usable information of the IC card preceding the IC card stored by the storing function when the authentication is successful and the connection is made by the authentication request and the connection request using the card, the available information And the function to make it unusable by changing or deleting from.

The embodiments of the present invention will be described in more detail below.

As shown in FIG. 1, the communication system of the embodiment of the present invention includes a communication network N and a large number of user terminals U1 to Un connectable to the communication network N. The user terminals U1 to Un are connected to the authentication systems C1 to Cn via the communication network N. When the user terminal Ui (i is one of 1 to n) is connected to the authentication system Cj (j is one of 1 to m), mutual authentication is performed between the user terminal Ui and the authentication system Cj. The user terminal Ui uses a digital signature to authenticate the authentication system Cj. An IC card is used to make a digital signature. Therefore, the IC card reader R is mounted on the user terminals U1 to Un.

In the flow in which the user terminal Ui authenticates the authentication system Cj, the user terminal Ui verifies the authentication system certificate sent by the authentication system Cj using the CA certificate, and the authentication system Cj authenticates the plaintext data by hashing it. It is necessary to verify the signature encrypted with the system private key using the authentication system certificate. For this purpose, it is necessary to obtain the CA certificate by some method. When the online is used for the CA certificate acquisition, it is necessary to perform a step of checking the legitimacy such as confirmation as to whether the site is really a legitimate site, which imposes a heavy burden on the user.

Therefore, in the present invention, the CA certificate is enclosed in the IC card. That is, the user terminal Ui obtains the authentication system certificate from the authentication system Cj, the user terminal Ui verifies the authentication system certificate with the CA certificate enclosed in the IC card, and the CA station that can trust the authentication system certificate. Make sure it is certified by.

The user terminal Ui is the authentication system Cj.
The plaintext data is hashed and the signature encrypted with the authentication system secret key is obtained, and the user terminal Ui verifies the signature with the verified authentication system certificate to confirm the authenticity of the authentication system.

As a result, for example, it is possible to discard and update the authentication system certificate held by the authentication system every time the authentication system is activated, and the security strength is improved.

There are a plurality of types of CA certificates and CA private keys having different expiration dates at the same time, and the CA certificate describes the identification information for identifying each, and this is enclosed in an IC card. As a result, it is necessary to update the CA certificate according to the expiration date of the CA certificate, which reduces the convenience of the user. Therefore, as shown in FIG.
The IC card is issued before the expiration date of the IC card, and a new CA certificate is issued when the expiration date of the IC card to be updated exceeds the expiration date of the CA certificate. Here, the CA certificate enclosed in the IC card is the CA certificate obtained by enclosing the new CA certificate.
The CA certificate renewal work due to the expiration of the certificate expires.

In this way, the CA certificate revocation confirmation,
It is possible to realize an authentication method using PKI without forcing the user to perform a complicated work such as updating a CA certificate due to expiration of the validity period.

In this embodiment, the authentication systems C1 to Cn hold authentication system certificates corresponding to a plurality of CA certificates, and the user terminal Ui is a C card enclosed in an IC card.
When the identification information of the A certificate is notified to the authentication system side, the authentication system Cj sends the authentication system certificate corresponding to the CA certificate of the identification information to the user terminal Ui.
As a result, the CA certificate can be updated with a wide range, and the load of the update work due to the expiration of the CA certificate expiration date can be reduced. Also, CA certificate and I
It is not necessary to synchronize the update of the C card, which improves the convenience of the user.

The operation of the process of verifying the authentication system Cj by the user terminal Ui when connecting from the user terminal Ui to the authentication system Cj will be described with reference to FIG. For verification, the CA certificate enclosed in the IC card of the identification information (β) is used, and the authentication system certificate # managed by the authentication system Cj #
Verify 2. Also, the authentication system Cj is verified using the verified system certificate # 2. However, the IC card issues a new IC card before the expiration date expires, and issues a new CA certificate when the expiration date of the IC card to be updated exceeds the expiration date of the CA certificate. For this reason, since a plurality of CA certificates are used, a plurality of authentication system certificates corresponding to them are managed by the authentication system Cj.

The user terminal Ui receives the identification information (β) of the CA certificate in order to receive the authentication system certificate corresponding to the CA certificate enclosed in the IC card.
to j. The authentication system Cj searches for the authentication system certificate # 2 corresponding to the received identification information (β),
It is sent to the user terminal Ui. At the user terminal Ui, the digital signature in the received authentication system certificate # 2 is C
It is decrypted using the public key of the CA station in the A certificate and compared with the hash value of the plaintext data in the authentication system certificate # 2. This is the verification for the authentication system certificate # 2.

Further, at the user terminal Ui, the digital signature obtained by encrypting the result of hashing the plaintext data sent from the authentication system Cj with the authentication system private key corresponding to the authentication system certificate # 2 is used as the public key of the authentication system. It is decrypted by using and compared with the hash value of the plaintext data to verify the authentication system Cj. Thereby, the user terminal Ui can verify the authentication system Cj.

In the above description, the CA certificate identification information (β) is sent to the authentication system Cj.
Authentication system C without sending the identification information (β) of the certificate
authentication system certificates # 1, # 2, # 3, which are held from j.
May be sent, and the user terminal Ui may select the authentication system certificate # 2 that matches the identification information (β) and verify this authentication system certificate # 2.

[0100]

As described above, according to the present invention,
Compared with a normal PKI, it is possible to save the burden of checking the validity of the CA certificate on the user side, and improve the convenience of the user regarding the acquisition of the CA certificate. In addition, the user can avoid misuse of the IC card, and the IC card distributor can distribute the new IC card at the time of switching the old and new IC cards with a slack of schedule. As a result, it is possible to easily update the authentication system certificate, or it is possible to use different authentication system certificates for each authentication system, thereby improving security. Further, even if the user is not aware of the expiration date of the CA certificate, the CA certificate is automatically updated when the IC card is updated, so that the convenience of the user can be improved.

[Brief description of drawings]

FIG. 1 is an overall configuration diagram of a communication system according to an embodiment of the present invention.

FIG. 2 is a diagram showing switching from a current IC card to a new IC card in the communication system according to the embodiment of the present invention.

FIG. 3 is a diagram showing an operation procedure of an authentication method according to the embodiment of the present invention.

FIG. 4 is a diagram showing switching from a current IC card of a conventional authentication method to a new IC card.

[Explanation of symbols]

U1 to Un user terminals C1-Cm authentication system N communication network P connection and communication control system Ric card reader

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) G06K 17/00 G09C 1/00 640B G09C 1/00 640 640Z H04L 9/00 675D 673E 675B (72) Inventor Masao Fujinami 5-7-1 Shiba, Minato-ku, Tokyo NEC Corporation (72) Inventor Takuya Inoue 1-1-6 Uchisaiwaicho, Chiyoda-ku, Tokyo NTT Communications Corporation ( 72) Inventor Junnosuke Yamada 1-1-6 Uchisaiwaicho, Chiyoda-ku, Tokyo NTT Communications Co., Ltd. F-term (reference) 5B058 CA01 KA02 KA04 KA33 KA35 YA20 5B085 AC05 AE12 AE13 AE23 AE29 5J104 AA09 LA01 LA03 LA06 NA02 NA12 NA35 NA36 NA37 NA42 PA07

Claims (35)

[Claims] 1. A communication network, a large number of user terminals connectable to the communication network, an IC (Integrated Circuit) card in which information held by the user terminal can be safely read and written, and the communication network. An authentication system that is connected to the user terminal and performs mutual or one-sided authentication,
In a communication system including a connection and communication control system that controls connection and communication according to the authentication result, the IC card is distributed to each user, and the IC card has IC card identification information and authentication in its tamper resistant area. Institution (CA:
(Certification Authority) is provided with a means for holding at least a necessary part of the CA certificate which is an electronic certificate and the IC card expiration date information included in the expiration date of the CA certificate. Is a CA public key and a CA showing the attributes of the CA certificate itself.
The certificate identification information is written, and / or the expiration date of the CA certificate itself is written, and the user terminal is configured to use the CA public key and the CA written in the IC card.
A means for reading the certificate identification information or the IC card identification information and the IC card expiration date, and the CA certificate identification information or the IC card identification information and the authentication system certificate request read by the reading means for the communication network. Means for securely sending to the authentication system via the authentication system and the connection and communication control system, the authentication system private key and an authentication system issued from the CA to the authentication system private key. The authentication system certificate comprises means for holding the certificate, and the authentication system certificate includes the authentication system public key corresponding to the authentication system private key, the first plaintext data, and the CA private key corresponding to the CA public key. The first digital signature that encrypted the result of hashing the plaintext data of In accordance with the authentication system certificate request, the authentication system certificate corresponding to the CA certificate identification information, the second plaintext data, and the result obtained by hashing the second plaintext data are encrypted by the authentication system private key. A means for sending a digital signature to the user terminal is provided, and the user terminal hashes the first plaintext data included in the authentication system certificate sent from the authentication system and the connection and communication control system. Means for verifying the authenticity of the authentication system certificate by comparing the result with the result obtained by decrypting the first digital signature with the CA public key included in the CA certificate; The result of hashing the second plaintext data sent from the connection and communication control system, and A means for verifying the authenticity of the authentication system by comparing the result of decrypting the second digital signature with the authentication system public key included in the authentication system certificate. Communication system. 2. The authentication system includes a means for holding a plurality of authentication system certificates, and the IC card identification information or the C card among the plurality of authentication system certificates held by the holding means.
The communication system according to claim 1, further comprising means for sending the authentication system certificate corresponding to the A certificate identification information to the user terminal in response to the authentication system certificate request. 3. The authentication system includes means for holding a plurality of authentication system certificates, and all of the plurality of authentication system certificates held by the holding means for the authentication system certificate request. Means for sending to the user terminal, wherein the user terminal selects the authentication system certificate corresponding to the IC card identification information or the CA certificate identification information from the plurality of sent authentication system certificates. The communication system according to claim 1, further comprising means used for authentication. 4. The IC read by the user terminal
The authentication system further comprises means for safely transmitting the card expiration date information to the authentication system, wherein the authentication system safely retains the accurate time, and the IC card expiration date information received from the user terminal for the accurate time. And means for rejecting authentication or connection to the user terminal when the IC card expiration date information is after the accurate time.
The communication system described. 5. The IC card, wherein the user terminal compares the IC card expiration date information with the accurate time, a unit for reading the IC card expiration date information, a unit for safely holding an accurate time. The communication system according to claim 1, further comprising means for rejecting an authentication request or a connection request to the authentication system if the expiration date information is after the accurate time. 6. The authentication system converts and / or compares accurate time and / or IC card expiration date in a batch or in a predetermined method corresponding to IC card identification information. 4. A means for performing
The communication system described. 7. The user terminals are collectively or
6. The communication system according to claim 5, further comprising means for converting and comparing an accurate time and / or an IC card expiration date by a predetermined method corresponding to the C card identification information. 8. The user terminal comprises a plurality of the IC cards in which different IC card expiration date information is written, and when the expiration date of the CA certificate expires, the C
8. The communication system according to claim 1, further comprising means for invalidating the CA certificate and the IC card corresponding to the CA certificate without updating the A certificate. 9. The user terminal comprises means for safely reading the IC card identification information and securely transmitting it to the authentication system, wherein the authentication system is a plurality of the IC cards distributed to the same user. A means for accumulating information on whether or not the IC card is usable for the identification information and information on the usable order of the IC card; and a means for accumulating the IC card identification information transmitted from the user terminal and the means for accumulating. By means of comparing and collating the stored information on availability or impossibility and rejecting the authentication request or connection request if unusable; and an authentication request and a connection request using the IC card from the user terminal. When the usable information of the IC card preceding the IC card stored in the storing means exists when the authentication is successful and the connection is made. Claim and means for unusable by be removed from or authenticated change its available information 4
8. The communication system according to any one of 7 to 7. 10. The IC card identification information applied to the communication system according to claim 1, and at least a necessary part of a CA certificate which is an electronic certificate issued by a CA in a tamper resistant area. The CA certificate includes means for holding IC card expiration date information included in the expiration date of the CA certificate, and the CA certificate includes a CA public key and a CA indicating an attribute of the CA certificate itself.
An IC card in which certificate identification information is written and / or the expiration date of the CA certificate itself is written. 11. The CA public key and the CA written in the IC card, which are applied to the communication system according to claim 1.
A means for reading the certificate identification information or the IC card identification information and the IC card expiration date, and the CA certificate identification information or the IC card identification information and the authentication system certificate request read by the reading means for the communication network. Means for securely sending to the authentication system via, and a result of hashing the first plaintext data contained in the authentication system certificate sent from the authentication system and the connection and communication control system, and the Means for verifying the authenticity of the authentication system certificate by comparing the result obtained by decrypting the one digital signature with the CA public key included in the CA certificate, and the authentication system and the connection and communication. Result of hashing the second plaintext data sent from the control system A means for verifying the authenticity of the authentication system by comparing the result of decrypting the second digital signature with the authentication system public key included in the authentication system certificate. User terminal to 12. A means for selecting the IC card identification information or the CA certificate corresponding to the CA certificate identification information from a plurality of the sent CA certificates and using the selected CA certificate for authentication. 11. The user terminal according to item 11. 13. The user terminal according to claim 11, further comprising means for safely transmitting the read IC card expiration date information to the authentication system. 14. A means for reading the IC card expiration date information, a means for safely holding an accurate time, and the I
A means for comparing the C card expiration date information with the accurate time, and rejecting the authentication request or connection request to the authentication system if the IC card expiration date information is after the accurate time. Item 11. The user terminal according to item 11. 15. A means for converting and comparing accurate time and / or IC card expiration date by a predetermined method collectively or in correspondence with IC card identification information is provided. The user terminal according to claim 11. 16. A plurality of IC cards in which different IC card expiration date information is written are provided, and when the expiration date of the CA certificate has expired, the CA certificate is renewed without performing the CA certificate update operation. The user terminal according to claim 11, further comprising means for invalidating the certificate and the IC card corresponding to the CA certificate. 17. A means for holding the authentication system private key and the authentication system certificate issued by the CA for the authentication system private key, which are applied to the communication system according to claim 1. Description: The authentication system certificate includes a result obtained by hashing the first plaintext data with the authentication system public key corresponding to the authentication system private key and the first plaintext data and the CA private key corresponding to the CA public key. The first digital signature that is encrypted is written, and the authentication system certificate and the second plaintext data corresponding to the CA certificate identification information and the second plaintext data are hashed in accordance with the authentication system certificate request. And a means for sending a second digital signature obtained by encrypting the result obtained by the authentication system private key to the user terminal. Authentication system to do. 18. A means for holding a plurality of authentication system certificates, and the IC card identification information or the C among the plurality of authentication system certificates held by the holding means.
18. The authentication system according to claim 17, further comprising means for sending the authentication system certificate corresponding to the A certificate identification information to the user terminal in response to the authentication system certificate request. 19. A means for holding a plurality of authentication system certificates, and all of the plurality of authentication system certificates held by the holding means are sent to the user terminal in response to the authentication system certificate request. The authentication system according to claim 17, further comprising means. 20. A means for safely holding an accurate time, and comparing the IC card expiration date information received from the user terminal with the accurate time, so that the IC card expiration date information is later than the accurate time. In that case, means for rejecting authentication or connection to the user terminal is provided.
7. The authentication system described in 7. 21. A means for converting and comparing accurate time and / or IC card expiration date in a batch or in a predetermined method corresponding to IC card identification information is provided. The authentication system according to claim 17. 22. Means for accumulating information on whether or not the IC cards can be used and information on the order of use of the IC cards for a plurality of the IC card identification information distributed to the same user. Means for comparing and collating the IC card identification information transmitted from the user terminal with the usable or unusable information stored in the storing means, and rejecting the authentication request or connection request if unusable And the use of an IC card preceding the IC card stored in the storing means when a connection is established after successful authentication by the authentication request and the connection request using the IC card from the user terminal. When the information exists, the usable information is changed or deleted from the authentication target so as to make it unusable.
7. The authentication system described in 7. 23. A means for applying to the communication system according to claim 1, which holds an authentication system private key and an authentication system certificate issued by the CA for the authentication system private key. The authentication system certificate includes a result obtained by hashing the first plaintext data with the authentication system public key corresponding to the authentication system private key and the first plaintext data and the CA private key corresponding to the CA public key. The first digital signature that is encrypted is written, and the authentication system certificate and the second plaintext data corresponding to the CA certificate identification information and the second plaintext data are hashed in accordance with the authentication system certificate request. And a means for sending a second digital signature obtained by encrypting the result obtained by the authentication system private key to the user terminal. Connection and communication control system. 24. When the information processing apparatus applied to the communication system according to claim 1 is installed, the information processing apparatus has a function corresponding to the user terminal and is written in the IC card. The CA public key and the CA
A function to read the certificate identification information or the IC card identification information and the IC card expiration date, and the CA certificate identification information or the IC card identification information and the authentication system certificate request read by the reading function to the communication network. And a function of securely sending to the authentication system via, and a result of hashing the first plaintext data included in the authentication system certificate sent from the authentication system and the connection and communication control system, and the A function of verifying the authenticity of the authentication system certificate by comparing a result obtained by decrypting one digital signature with the CA public key included in the CA certificate; and a function of verifying the authentication system and the connection and communication. Result of hashing the second plaintext data sent from the control system And a function of verifying the authenticity of the authentication system by comparing the result of decrypting the second digital signature with the authentication system public key included in the authentication system certificate. Program to do. 25. A function of selecting the IC card identification information or the CA certificate corresponding to the CA certificate identification information from a plurality of the sent CA certificates to realize a function to be used for authentication. 24. The program according to 24. 26. The program according to claim 24, which realizes a function of safely sending the read IC card expiration date information to the authentication system. 27. A function of reading the IC card expiration date information, a function of safely and accurately holding time,
A function of comparing the C card expiration date information with the accurate time and realizing a function of rejecting an authentication request or a connection request to the authentication system if the IC card expiration date information is after the accurate time. Item 24. The program according to Item 24. 28. A function for converting and comparing accurate time and / or IC card expiration date information collectively or by a predetermined method corresponding to the IC card identification information. The method according to claim 24, wherein
The listed program. 29. A plurality of IC cards in which different IC card expiration date information is written are provided, and when the expiration date of the CA certificate expires, the CA certificate is updated without performing the CA certificate update operation. The program according to claim 24, which realizes a function of invalidating the certificate and the IC card corresponding to the CA certificate. 30. When installed in an information processing device applied to the communication system according to any one of claims 1 to 9, the information processing device has an authentication system secret key as a function corresponding to the authentication system. A function for holding the authentication system certificate issued by the CA is realized for this authentication system private key, and the authentication system certificate includes the authentication system public key and the first authentication system public key corresponding to the authentication system private key. A first digital signature obtained by encrypting the result of hashing the first plaintext data with the plaintext data and the CA private key corresponding to the CA public key is written, and the CA certificate is issued in accordance with the authentication system certificate request. Authentication system certificate corresponding to the identification information, the second plaintext data, and the result of hashing the second plaintext data. A program that realizes a function of sending a second digital signature encrypted by the authentication system private key to the user terminal. 31. Corresponding to the function of holding a plurality of authentication system certificates, and the IC card identification information or the CA certificate identification information among the plurality of authentication system certificates held in the holding function. The program according to claim 30, which realizes a function of transmitting the authentication system certificate to the user terminal in response to the authentication system certificate request. 32. A function of holding a plurality of authentication system certificates, and sending all of the plurality of authentication system certificates held by the holding means to the user terminal in response to the authentication system certificate request. 31. Realizing a function and
The listed program. 33. A function of safely holding an accurate time, comparing the IC card expiration date information received from the user terminal with the accurate time, and comparing the IC card expiration date information with the accurate time later than the accurate time. 31. The program according to claim 30, which realizes a function of rejecting authentication or connection to the user terminal. 34. Realization of a function of converting the accurate time and / or the IC card expiration date and time either collectively or by a predetermined method for the IC card identification information for comparison. The program according to claim 30, which is executed. 35. A function of accumulating information on whether or not the IC cards can be used and information on the usable order of the IC cards for a plurality of the IC card identification information distributed to the same user. A function of comparing and collating the IC card identification information transmitted from the user terminal with the information of availability or inability stored by the storing function, and rejecting the authentication request or the connection request if unusable And the use of an IC card preceding the IC card accumulated by the accumulating function when the authentication is successful and the connection request is made by the user terminal using the IC card and the connection is established. 4. When the information exists, the usable information is changed or deleted from the authentication target to realize the function of making it unusable. Program described.