JP2003304240A - Method for signing electronic data and information processing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent electronic certificates from being illegally used due to the movement of staff or by old staff in an organization and to prevent the issue of an electronic certificate invalidation list (CRL) in a system being engaged in inter-organization contracts or the like using electronic certificates. <P>SOLUTION: Certificates are divided into staff organization certificates to be used among organizations and securely managed and staff certificates to be used among the organizations and to be managed by respective persons, and an access right checking means for checking access right to the staff organization certificates by a certain staff certificate and a changing/updating means for changing/updating a staff certificate having access right are provided. <P>COPYRIGHT: (C)2004,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention is based on public key infrastructure technology acquired from a certification authority when electronic data such as contracts are exchanged between different organizations using a computer equipped with signature and encryption processing. The present invention relates to prevention of revocation of a work-based electronic certificate used between organizations in a computer system that implements a non-repudiation prevention, wiretapping prevention, and tampering detection function using an electronic certificate.

[0002]

2. Description of the Related Art With the spread of the Internet, contracts between different organizations such as companies have come to be made on the Internet. As a method of proving your identity on the Internet, X. A 509 format digital certificate is generally used, but if the digital certificate is revoked due to changes in the certification body, compromise of the private key of the digital certificate, etc. Create a certificate revocation list (CRL) and distribute it to digital certificate users across organizations. The CRL published by the certification authority is also acquired for the digital certificate user. However, C
Regardless of the means used to create, distribute, and acquire the RL, there are many problems such as a time lag until the CRL is distributed to all digital certificate users. Regarding the distribution of revocation information, efficiency improvement regarding distribution of revocation information has been studied as described in Japanese Patent Laid-Open No. 2000-41034, but it is necessary to construct a dedicated system and the cost burden is large. How to prevent the revocation of digital certificates is important.

[0003] Conventionally, regarding the change of the certification body of a professional electronic certificate used between organizations, the personal information of the staff is not described in the digital certificate, and when the staff within the organization moves, the new electronic certificate is taken over by the professional electronic certificate. To avoid reissuing the electronic digital certificate. With regard to the compromise of the occupational electronic certificate private key, the compromise of the occupational electronic certificate private key was prevented by storing it in a medium having tamper resistance such as an IC card.

[0004]

When the IC card storing the work-based electronic certificate (and the work-based electronic certificate private key) used between the organizations when the staff in the organization is moved is transferred between the old and new staff, Access code (PIN, etc.)
If a new employee loses his IC card and is picked up by an old employee, the old employee may use the illegal IC card, and the employee electronic certificate stored in the lost IC card will be revoked. Therefore, it was necessary to distribute the digital certificate revocation list (CRL) across organizations.

[0005]

[Means for Solving the Problems] The electronic certificate is divided into an organizational electronic certificate that is used between organizations and has a certification body as a job system, and a staff electronic certificate that is used in an organization and has a certification body as a staff, Build a table that stores access right confirmation information that defines the employee electronic certificate that can access the employee electronic certificate and the employee electronic certificate private key. When a staff member accesses a system electronic certificate and a system electronic certificate private key, he / she will be authorized to confirm the access right to the system electronic certificate and the system electronic certificate private key using the staff electronic certificate. Only the staff member who owns it can use the official digital certificate and private key of the official digital certificate.

[0006] Further, when changing the official authority by moving the staff within the organization, a new employee electronic certificate that can access the official electronic certificate and the private electronic certificate private key in the table storing the access right confirmation information is newly added. By changing to the staff electronic certificate that has acquired the authority of the work system, only the staff with the proper authority can transfer the work code electronic certificate and the work electronic certificate It is possible to use the key. Similarly, when the employee electronic certificate private key is compromised, the employee electronic certificate in the table storing the access right confirmation information and the employee electronic certificate that can access the employee electronic certificate private key are reissued. By changing to a certificate, it is possible to prevent the use of the official electronic certificate and private key of the official electronic certificate in the compromised employee electronic certificate, and prevent the expiration of the official electronic certificate.

[0007]

BEST MODE FOR CARRYING OUT THE INVENTION An embodiment of the present invention will be described below with reference to the drawings.

FIG. 1 shows the configuration of the network system of this embodiment. A LAN 3 and another organization LAN 7 are connected to a wide area network 6 such as the Internet. The LAN 3 includes a staff electronic certificate issuing organization 1, a staff electronic certificate issuing organization 2, a staff A client computer 11, and a staff B client computer 1.
2. The business server computer 13 is connected through the firewall 5 installed in the secure zone 4. The other organization business server computer 14 is connected to the other organization LAN 7.

The staff digital certificate issuing organization 1 is an organization which issues a staff digital certificate to the staff A client computer 11 and the staff B client computer 12. The organization electronic certificate issuing organization 2 is an organization that issues an organization electronic certificate to the business server computer 13.
The staff A client computer 11 and the staff B client computer 12 are client computers operated by each staff member, and request the business server computer 13 to create a contract or the like. Secure zone 4
Is a facility that physically blocks access to the business server computer 13, and is a section whose entry and exit is managed by an IC card or the like. The firewall 5 is for limiting network access to the business server computer 13 to business such as creation of a contract from the staff A client computer 11 and staff B client computer 12. The electronic data such as the contract created by the business server computer 13 is signed by the private key of the work electronic certificate, and the business server computer 14 of another organization is signed.
Sent to. The other organization business server computer 14 verifies the received electronic data by using the public key of the job electronic certificate.

FIG. 2 shows a system configuration in an organization. Business server computer 13
Has a processing unit 50 and a storage unit 51. Storage unit 5
1 includes a web server program 22, a business program 31 for performing business such as creation of a contract, an access confirmation program 32 for confirming an access right from a client computer, and electronic data processed or created by the business program 31. A signature program 33 for signing and a change program 34 for changing the access right registered in the database are stored. Further, the database 23 connected to the business server computer 13 has a job attribute table 24 for each job,
This table stores a staff electronic certificate, a job electronic certificate, and a job electronic certificate private key. The processing unit 50 executes the program stored in the storage unit 51.

Each of the client computers 11 and 12 also has a processing unit 52 and a storage unit 53, and the storage unit 53 stores a program of the web browser 21, a staff electronic certificate, and a staff electronic certificate private key. The storage unit 53 may store a business program that performs other business. The processing unit 52 executes the program stored in the storage unit 53.

In such a system, the client computers 11 and 12 and the business server computer 13
Between the web browser 21 and the web server 22.
To communicate. An authentication method using a digital certificate (for example, W
It is possible to communicate with the standard web browser authentication method such as SSL v3 protocol when using an eb browser and a web server.

FIG. 3 is a diagram showing the processing of the client computer and the business server.

First, the case where the staff electronic certificate is used as access right confirmation information for the employee electronic certificate will be described. When the authority of the organization a is the staff A, the staff A logs in from the staff A client computer 11 to the business program 31 as the authority of the organization a (10
1). At this time, the client computer 11 transmits the execution instruction of the business program 31, the staff A electronic certificate, and the information on the job system a to the business server 13. The business program 31 inquires of the access confirmation program 32 whether the employee A electronic certificate 41, which is the client certificate acquired from the Web server 22, has the authority of the system a (10
2). The access confirmation program 32 acquires the employee electronic certificate registered in the attribute table 24 of the organization a from the database based on the information of the organization a notified from the business program 31 (103), and is notified from the business program 31. Compare with the employee e-A certificate of the client. If they match, the access confirmation program 32 notifies the business program 31 that the client has a valid access right (104). The business program 31 is
Process and generate electronic data. For example, if the business program 31 is a program for creating a contract document, electronic data of the contract is created. The business program 31 that created the electronic data is the signature program 33.
Request a signature from the client (105). The signature program 33 is
Acquires the job a electronic certificate 43 and the job a electronic certificate private key 53 set in the job a attribute table 24 (1
06, 107), the signature value of the electronic data is generated and notified to the business program 31 (108). Business program 3
1 generates electronic data 61 with a signature based on the electronic data and the notification from the signature program 33. When the business server 13 receives a command from the client computer 11 of the staff member A to the business server computer 14 of another organization, it sends the signed electronic data 61 and the job a electronic certificate to the business server 14. The business server 14 verifies the sent electronic data 61 with the title by the electronic certificate of the organization a.

Next, a case will be described in which the employee attribute table is changed by the movement of staff.

When the authority of the employee system a is changed from the employee A to the employee B due to the movement of the employee in the organization, the right to access the electronic certificate private key 53 of the employee system a stored in the attribute table 24 of the employee system a immediately. Staff A stored as information
Change the electronic certificate 41 to the employee B electronic certificate 42 (1
10). The employee B logs in from the employee B client computer 12 to the business program 31 such as the contract as the authority of the organization a (111). The contract work service program 31 inquires of the access confirmation program 32 whether the employee B electronic certificate 42, which is the client certificate acquired from the Web server 22, has the authority of the system a (1
12). The access confirmation program 32 acquires the employee B electronic certificate 42 registered in the job a attribute table 24 (113), and compares it with the client certificate notified from the business program 31. If they match, the client has the right to access the business program 31.
(114). Thereby, the staff B operates the staff B client computer 12 so that the access confirmation program 32 is assigned to the business program 31 such as the contract document.
It becomes possible to confirm that the employee B is in the system a when he / she logs in with the authority of. Other than this, it is the same as the description of the access by the staff member A.

FIG. 4 is a diagram showing the processing of the client computer and the business server. This figure shows a case where the employee A electronic certificate private key 51 is compromised by some factor and is updated to a newly reissued employee electronic certificate from the employee electronic certificate issuing institution 1. The time chart before the employee A digital certificate private key 51 is compromised is the explanation of the access by the employee A shown in FIG. 3 (101
To 108). Staff A Digital Certificate Private Key 5
When 1 is compromised due to some factor and is updated to the staff A electronic certificate newly reissued by the staff electronic certificate issuing organization 1, the office a electronic certificate private key stored in the office a information table 24 immediately. The employee A electronic certificate stored as the access right information to 53 is changed to a new employee A electronic certificate (120). From the staff A client computer 11 by the staff A, the business program 31
Is logged in as an authority of job system a (121). The business program 31 inquires of the access confirmation program 32 whether the new employee A electronic certificate, which is the client certificate acquired from the Web server 22, has the authority of the system a (122). The access confirmation program 32 obtains the new employee A electronic certificate registered in the attribute table 24 of the organization a (123) and compares it with the client certificate notified from the business program, and the employee A has the organization a. Make sure that. If they match, the client notifies the business program 31 that it has a valid access right (124). As a result, the access confirmation program 32
Is a staff A client computer 11 by a staff A.
Therefore, when the user logs in to the business program 31 such as the contract with the authority of the organization a, it is possible to confirm that the employee A has the organization a. Even if someone obtains the employee A electronic certificate and the employee A electronic certificate private key that have been compromised, and logs in to the access confirmation program 32 with the authority of the organization a, it is already stored in the organization a information table 24. Personnel A who has new access right information to the electronic certificate private key
Since it has been changed to the electronic certificate 44, the access confirmation program 32 can reject this as an invalid request. As a result, the access right confirmation information for the employee electronic certificate private key can be updated to the employee electronic certificate newly reissued by the employee electronic certificate issuing organization.

FIG. 5 shows an example of the job management information table. FIG. 6A shows an example of a job system information table. This is a job system name that stores the job system, a staff electronic certificate that stores a staff electronic certificate having the authority of the job system, and access. Login comparison information that stores the hash value of the staff electronic certificate that the verification program 32 uses to compare the electronic certificates, a job electronic certificate that stores the job electronic certificate, and a job electronic that stores the job electronic certificate private key It has a field of a certificate private key. In this way, the employee electronic certificate, login comparison information, job electronic certificate, and job electronic certificate private key are stored in association with each job system. The login comparison information is a hash value of the staff electronic certificate so that the comparison can be performed quickly. From the client computer, the hash value of the staff electronic certificate may be sent to the business server, or the staff electronic certificate may be sent and converted into the hash value by the business server and compared with the login comparison information stored in this table. To do. Further, the staff electronic certificate itself may be used as the comparison information at the time of login.

FIG. 5 (b) shows an example of the staff A electronic certificate. In this way, the staff A digital certificate is the digital certificate serial number, digital certificate issuer information, staff A
Information, electronic certificate expiration date, and employee A electronic certificate public key.

FIG. 5C shows an example of login comparison information.

FIG. 5 (d) shows an electronic certificate of a job system a. The job a electronic certificate has a digital certificate serial number, electronic certificate issuer information, job a information, digital certificate expiration date, and job a electronic certificate public key.

FIG. 6 is a diagram showing processing by the access confirmation program.

[0023] The job attribute table matching the job information sent from the client computer is searched, and the staff electronic certificate of the job is read (step 60).
1). The extracted staff electronic certificate is compared with the staff electronic certificate sent from the client computer (step 602). If the employee electronic certificates match, it is determined whether the current date and time is within the valid period of the employee electronic certificate (step 603). As a result of the determination, if it is within the valid period, the job electronic certificate stored in the job table is read, and it is determined whether the current date and time is within the valid period of the job electronic certificate (step 604). If it is within the valid period, the job electronic certificate private key is read from the job attribute table (step 605) and sent to the business program.

If the employee electronic certificates do not match in step 602, and if the employee electronic certificates are not within the valid period in steps 603 and 604, the business program is notified that the employee electronic certificates do not match and that the electronic certificate is not within the valid period.

In addition, when changing the employee electronic certificate that is designed to correspond to the employee electronic certificate and the employee electronic certificate private key, the administrator of the business server 13 asks the client computer to send the employee electronic certificate to be changed. , Change job attribute table.

Here, a method of changing the employee electronic certificate and the employee electronic certificate associated with the employee electronic certificate private key by another method will be described.

FIG. 7 is a diagram showing a process of changing the employee electronic certificate associated with the employee electronic certificate and the employee electronic certificate private key.

Here, in the configuration shown in FIG. 1, a management client computer for changing the staff electronic certificate is further connected, the staff A electronic certificate is registered in the job attribute table, and the staff B electronic certificate. An example of changing to a book is shown.

The management client computer receives the staff A electronic certificate and the staff B electronic certificate from the staff A client computer and the staff B client computer (701, 702). The management client computer signs the staff A electronic certificate, the staff B electronic certificate, and the information of the organization A to be changed using the private key of the management client computer. In this case, the data generated in the order of the electronic certificate before the change, the electronic certificate after the change, and the information on the organization A is signed.

The signed data, the change program execution command, and the certificate for the signed private key are sent from the management client computer to the business server (70).
3).

The business server executes the change program according to the change program execution instruction. The change program verifies the sent data with the public key included in the certificate, and changes the job attribute table.

When the change of the job attribute table is completed, the change program notifies the management client computer of the change (704).

FIG. 8 is a diagram showing the processing of the change program.

The change program verifies the received data with the public key of the certificate (step 801). If the verification is successful, the employee electronic certificate is read from the attribute table of the job organization A included in the data (step 803). The extracted employee electronic certificate is compared with the employee electronic certificate included in the sent data (step 804). Here, the staff electronic certificate before the change is the staff A from the order of the data.
It is a digital certificate. Here, if the employee electronic certificates match, the employee B electronic certificate included in the data is registered in the attribute table a of the organization a and the employee A electronic certificate is deleted (step 805). Next, a change end notification is issued (step 806), and the process ends. If the staff electronic certificates do not match, a notice to the effect that the staff electronic certificates do not match is issued (step 807), and the process ends.

In this embodiment, one employee electronic certificate is associated with the employee electronic certificate and the employee electronic certificate private key, but it may be associated with a plurality of employee electronic certificates.

As described above, according to the present invention, there is an effect that the expiration of the occupational electronic certificate used outside the organization or the transfer of the access confirmation information for the occupational electronic certificate between the old and new staff does not occur. In addition, when the employee electronic certificate and the employee electronic certificate private key storage medium are lost or damaged, the electronic certificate revocation list (CRL) across the organizations will not be distributed when the employee electronic certificate is revoked. Have an effect.

[0037]

As described above, according to the present invention, it is possible to prevent the revocation of a work-based electronic certificate and improve the reliability of electronic contracting between organizations.

[Brief description of drawings]

FIG. 1 is a diagram showing a configuration of a network system.

FIG. 2 is a diagram showing a block diagram of each device constituting a network.

FIG. 3 is a diagram showing processing of a client computer and a business server.

FIG. 4 is a diagram showing processing of a client computer and a business server.

FIG. 5 is a diagram showing an example of data.

FIG. 6 is a diagram showing processing of an access confirmation program.

FIG. 7 is a diagram showing processing of a client computer and a business server.

FIG. 8 is a diagram showing processing of a change program.

[Explanation of symbols] 1 staff electronic certificate issuance organization 2 Organization for issuing electronic certificates 3 LAN 4 Secure zone 5 firewall 6 Wide area network 7 Other organization LAN 11 Staff A client computer 12 Staff B client computer 13 Business server computer 14 Other organization business server computer

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) H04L 9/00 675Z

Claims (4)

[Claims] 1. An electronic data signature method for signing electronic data to be transmitted in a system in which a plurality of computers are connected, wherein a staff electronic certificate given to a staff member who uses a computer is transmitted. The computer that received the certificate, from the storage unit in which the employee electronic certificate assigned to each organization and the employee electronic certificate private key and the employee electronic certificate are stored in association with each other, An electronic data signing method, characterized in that a job-based electronic certificate private key is read out on the basis of the job-based electronic certificate and the electronic data to be transmitted is signed using the read job-based electronic certificate private key. 2. An information processing system having a client computer and a server computer transmitting electronic data signed in response to a request from the client computer, wherein the client computer is a staff electronic certificate assigned to a staff member. And a business execution instruction to the server computer, and the server computer stores a job electronic digital certificate assigned to each organization, a job electronic digital certificate private key, and a staff electronic certificate in association with each other. From the employee electronic certificate, the electronic signature generated by the employee electronic certificate is read, and the electronic data generated by the received business execution instruction is signed by the read electronic certificate private key of the employee. Information processing system. 3. The information processing system according to claim 2, wherein the server computer newly creates a staff electronic certificate stored in the storage unit in association with the office electronic certificate and the private key for the office electronic certificate. An information processing system characterized by changing to the staff electronic certificate sent. 4. An electronic data signing program for signing electronic data executed by a computer, wherein an employee electronic certificate private key assigned to each organization and an employee electronic certificate are stored in association with each other. An electronic data signature program, which reads a job-based electronic certificate private key from a storage unit based on an input staff digital certificate and signs electronic data with the read private key for a job-based electronic certificate.