JP2008129673A - User authentication system and method, gateway for use therein, program, and recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a user authentication system excellent in security and user-friendliness for authenticating users who use services over networks. <P>SOLUTION: The user authentication system comprises a user terminal 100 on a first network, a service providing server 300 on a second network (Internet 500), and a gateway 200 for connecting the networks together. The gateway 200 includes a means for generating a key pair, a means for storing the key pair, a means for creating a certificate that matches the public key of the key pair, a means for storing the certificate, and a means for creating user authentication information by means of the secret key of the key pair and the certificate. The service providing server 300, if requested to provide a service from the user terminal 100, requests the creation of authentication information at the gateway 200, verifies the authentication information, and provides the service to the user terminal 100 if the authentication information is valid. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a system and method for authenticating a user (user) when using a service that requires authentication on a network.

Conventionally, as a method of authenticating a user who receives a service via a network and performing an electronic signature, a public key and a public key certificate that certifies the public key and a public key certificate that certifies the public key are used. There is known a ticket system using a ticket issued by a ticket issuing server (Ticket Granting Server, hereinafter referred to as TGS) such as a key infrastructure (Public Key Infrastructure, hereinafter referred to as PKI) or Kerberos. Yes.
However, in the PKI, public keys and public key certificates are usually operated with a long lifetime, so the overhead of certificate revocation management has been a factor in increasing operational costs. In addition, since the user uses the same public key for multiple purposes, it is possible to accumulate a history of services used by the user, and the user's privacy is impaired.

Also, in the ticket system, the TGS needs to manage the master key shared by the service providing side and the service receiving side, so that the master key management becomes complicated and the secrecy is reduced. There has been a problem of lowering.
For example, Patent Document 1 discloses a method of generating a public key certificate and a key pair with a short validity period as an attempt to improve the problem of PKI and ticket systems.
FIG. 14 shows the public key authentication method disclosed in Patent Document 1. The client 10 sends a request message to the key distribution center 20. The key distribution center 20 generates a public-private key pair and a public key certificate with a short validity period in response to the request message, stores the key pair, and delivers the key pair and the public key certificate to the client 10. The client 10 makes a service request to the PK control resource 30 using the obtained public key and its certificate.
By shortening the key validity period, multipurpose use of the same key can be restricted, and key management can be simplified.
JP-T-2002-501218

However, in the conventional technology as described above, since the key pair is sent over the network to deliver the key pair to the client, the man-in-the-middle attack that exchanges information exchanged between the client side and the key distribution center. (Man-in-the-middle attack) and the like, and there is a problem that safety is lowered.
In view of such problems, an object of the present invention is to provide a user authentication system that can improve security against attacks and improve user convenience as compared to the conventional one. .

  According to the present invention, a system for authenticating a user who uses a service on a network includes a user terminal on the first network, a service providing server on the second network, the first network and the second network. A gateway that connects to the network of the gateway, the gateway generating means for key pair, means for storing the generated key pair, means for generating a certificate corresponding to the public key of the key pair, and Means for storing the generated certificate, and means for generating user authentication information using the private key of the key pair and the certificate, and the service providing server is requested to provide the service from the user terminal Request the generation of the authentication information in the gateway, verify the generated authentication information, and if it is valid, service to the user terminal It is configured to provide.

  Furthermore, according to the present invention, a system for authenticating a user who uses a service on a network includes a user terminal on a first network, a service providing server and a certificate issuing server on a second network, and A gateway connecting the first network and the second network, the gateway based on means for generating first authentication information of the user and authentication of the first authentication information in the certificate issuing server; Means for generating a key pair; means for storing the generated key pair; means for storing a certificate corresponding to a public key of the key pair received from a certificate issuing server; and a secret key of the key pair; Means for generating second authentication information of the user using the certificate, and the certificate issuing server receives the first authentication received from the gateway. Means for verifying information, and means for generating a certificate corresponding to the public key received from the gateway. When the service providing server is requested to provide the service, the second authentication in the gateway It is configured to request generation of information, verify the generated second authentication information, and provide a service to the user terminal if it is valid.

According to the user authentication system of the present invention, the secret key for generating the user authentication information is not transmitted from the gateway to the network, but is stored in the gateway. Improvements can be made.
In addition, the generation of a key pair necessary for performing authentication using a key that is valid for each purpose and for a short period of time, acquisition of a certificate, and generation of user authentication information using a certificate and a private key are performed with a gateway or gateway. This is performed by the certificate issuing server. When an external device such as a USB token is used to generate authentication information, complicated work such as driver installation is required on the user terminal side. On the other hand, in this invention, the convenience of the user can be improved in that such work is not required.

Embodiments of the present invention will be described below with reference to the drawings.
<Embodiment 1>
FIG. 1 shows a configuration of a first embodiment of a user authentication system according to the present invention. In this embodiment, a gateway 200 includes a LAN (first network, not shown) and the Internet (second network) 500. The service providing server 300 exists on the Internet 500. The LAN is a home LAN, for example, and is connected to a plurality of user terminals 100-1, 100-2, 100-3. These user terminals 100 are, for example, information home appliances and personal computers.

FIG. 2 shows a configuration of the gateway 200. The gateway 200 is controlled by a control unit 210 including a ROM that stores a program, a CPU that executes the program, and a RAM that stores data used by the CPU. The operation of each means of the function block 220 is controlled to realize its function.
The gateway 200 includes, in addition to the network interface 230 that connects the LAN and the Internet 500, a key generation unit 221 that generates an asymmetric key pair using an algorithm such as RSA or DCSA, and a key storage unit that stores the generated key pair. 222, a certificate generation unit 223 that generates a public key certificate (hereinafter simply referred to as a certificate) corresponding to the public key of the generated key pair, and a certificate storage unit 224 that stores the generated certificate , An authentication information generation unit 225 that generates authentication information indicating the validity of the user using a certificate and a corresponding private key, and a determination unit 226. The key storage unit 222 stores an initial key (secret key) as information for proving the validity of the gateway 200 by a key generation unit provider that generates an asymmetric key pair using an algorithm such as RSA or DCSA. Has been.

The gateway 200 can be configured by a computer device, and a program stored in a storage means (not shown) such as a ROM or a hard disk device includes a program for executing an operation in the user authentication system described below. It is. This program can be recorded on a recording medium such as a CD-ROM.
The service providing server 300 is a server operated by a provider that provides a service that requires user authentication, such as content distribution and online commerce, via the Internet 500, and is based on, for example, a pre-contract with the provider of the gateway 200 An initial key (public key) corresponding to the initial key (private key) is acquired, a signature added to information sent using the initial key is verified, and the information is transmitted from a valid gateway 200. It is characterized in that it can be determined.
FIG. 3 is a sequence diagram showing the procedure of the authentication procedure executed by the user authentication system shown in FIG. 1, and the procedure will be described below with reference to FIG.

(1) When using the service, the user requests the service providing server 300 to provide the service using the user terminal 100 (step S1).
(2) When the target service requires user authentication, the service providing server 300 that has received the service request responds to the user terminal 100 to acquire user authentication information from the gateway 200 (step S2). More specifically, a URL such as the browser on the user terminal 100 is generated by adding the IP address of the gateway 200 to the IP address of the service providing server 300 and information necessary for generating authentication information such as an identifier of the request. An instruction is sent to the application to redirect to the URL. Note that the IP address of the gateway 200 is determined based on information that is difficult to misrepresent, such as a source IP address of a service request.

(3) The user terminal 100 that has received the response requests authentication information from the gateway 200 (step S3). More specifically, a client application such as a browser on the user terminal 100 accesses the URL specified from the service providing server 300.
(4) The gateway 200 that has received the authentication information request determines whether there is a valid certificate (step S4). This determination is performed by the determination unit 226 determining whether or not a valid certificate that has not expired is stored in the certificate storage unit 224, for example.
If there is no valid certificate, the gateway 200 generates a key pair in the key generation unit 221 and stores the generated key pair in the key storage unit 222 (step S5). Further, a certificate corresponding to the public key of the key pair is generated in the certificate generation unit 223, and the generated certificate is stored in the certificate storage unit 224 (step S6).
If there is a valid certificate, steps S5 and S6 are not executed. Note that a signature with an initial key (private key) is added to the certificate in order to indicate that the certificate is information generated by a valid gateway 200. The certificate includes the issuance date and validity period as essential information. The secret key of the generated key pair can be reduced in risk of leakage by using means such as storage in a tamper-resistant storage medium or encryption.
Further, the gateway 200 uses the generated certificate and the corresponding private key to generate authentication information indicating the legitimacy of the user in the authentication information generating means 225 (step S7), and the authentication information is transmitted to the user terminal 100. Is sent to the service providing server 300 (step S8). More specifically, a URL in which information necessary for transmitting authentication information such as an identifier of a request corresponding to the authentication information is added to the IP address of the service providing server 300 is generated, and a client application such as a browser on the user terminal 100 is generated. An instruction is sent to redirect to the URL. The request identifier corresponding to the IP address of the service providing server 300 is acquired from the authentication information request.

(5) The user terminal 100 that has received the response transmits authentication information to the service providing server 300 (step S9). More specifically, a client application such as a browser on the user terminal 100 accesses the URL specified from the gateway 200.
(6) The service providing server 300 that has received the authentication information uses the signature verification of the certificate using a preset initial key (public key), and further performs verification using the public key certified by the certificate. The validity of the authentication information is confirmed (step S10), and if the content matches the policy set in the service providing server 300, the service is provided to the user terminal 100 (step S11).

<Embodiment 2>
FIG. 4 shows a configuration of a second embodiment of the user authentication system according to the present invention. In the second embodiment, a certificate issuing server 400 is present on the Internet 500 in addition to the configuration of the first embodiment. Yes.
FIG. 5 shows the configuration of the gateway 200 ′ in FIG. 4. The gateway 200 ′ has the certificate generation means 223 deleted from the configuration of the first embodiment shown in FIG. 2 (certificate generation means). 223).
FIG. 6 shows a configuration of the certificate issuing server 400. The certificate issuing server 400 includes a ROM that stores a program, a CPU that executes the program, and a RAM that stores data used by the CPU. The operation of each means of the function block 420 is controlled by the control means 410 to realize the function.

  In addition to the network interface 430, the certificate issuing server 400 includes a user information storage unit 421 for storing information such as an identifier of a user who has an account with the server, attribute information, a certificate related to the user, and the above-described user. The authentication information verification means 422 for verifying the authentication information received from the other device using the information and specifying the correctness and the target user, and the public key received from the other device as the public key Certificate generating means 423 for generating a certificate including information for restricting the contents proved by the authentication information generated by the corresponding private key.

In this embodiment, the service providing server 300 trusts the user guaranteed by the certificate issued by the certificate issuing server 400 based on the prior agreement with the business operator who operates the certificate issuing server 400 and provides the service. It is characterized by. It is assumed that the operator of the certificate issuing server 400 also serves as the operator of the service providing server 300.
FIG. 7 is a sequence diagram showing the procedure of the authentication procedure executed by the user authentication system shown in FIG. 4. Hereinafter, the procedure will be described with reference to FIG.

(1) When using the service, the user requests the service providing server 300 to provide the service using the user terminal 100 (step S1).
(2) The service providing server 300 that has received the service request, when the target service requires user authentication, receives user authentication information (second authentication information, hereinafter, authentication) from the gateway 200 ′ to the user terminal 100. A response is made to obtain information 2 (step S2). More specifically, a URL is generated by adding information necessary for generating authentication information 2 such as the IP address of the service providing server 300 and the identifier of the request to the IP address of the gateway 200 ′, and a browser on the user terminal 100. The client application is instructed to redirect to the URL. Note that the IP address of the gateway 200 ′ is determined based on information that is difficult to be spoofed, such as a service request source IP address.

(3) The user terminal 100 that has received the response requests the authentication information 2 from the gateway 200 ′ (step S3). More specifically, a client application such as a browser on the user terminal 100 accesses the URL specified from the service providing server 300.
(4) The gateway 200 ′ that has received the authentication information 2 request determines whether there is a valid certificate (step S4). This determination is made by the determination unit 226 determining whether a valid certificate is stored in the certificate storage unit 224.
If there is no valid certificate, the gateway 200 ′ uses authentication information (first authentication information) that proves the validity of the user to the certificate issuing server 400 using information such as a preset password and key. Hereinafter, the authentication information 1 is generated (step S21), and the generated authentication information 1 is transmitted to the certificate issuing server 400 (step S22). The generation of the authentication information 1 is performed by the authentication information generation means 225.
(5) Upon receiving the authentication information 1, the certificate issuing server 400 verifies the received authentication information 1 based on information such as a preset password and key in the authentication information verification unit 422 (step S23). The user is specified, and the result (authentication result) is transmitted to the gateway 200 ′ (step S24).

(6) When receiving the authentication result indicating that the authentication is completed, the gateway 200 ′ that has received the authentication result generates the key pair in the key generation unit 221 and stores the generated key pair in the key storage unit 222 ( Step S25). Then, the public key of the generated key pair is transmitted to the certificate issuing server 400, and a certificate issuance is requested (step S26).
It is assumed that the transmission of authentication information 1 in step S22 and the certificate issuance request in step S26 are in a state where the identity of the sender can be determined on the receiving side by including session information such as cookies in the message. ing.
Also, in the certificate issuance request, for example, the expiration date of the certificate, the type of user attribute included in the certificate, the type of user identifier included in the certificate, and the user described in the certificate The conditions for the certificate such as the type of authority authorized and the identifier of the service providing server 300 to which the authentication information generated with the corresponding private key should be applied can be included. The secret key of the generated key pair can be reduced in risk of leakage by using means such as storage in a tamper-resistant recording medium or encryption.

(7) Upon receiving the certificate issuance request, the certificate issuance server 400 generates a certificate indicating the validity of the received public key in the certificate generation unit 423 (step S27), and the generated certificate is sent to the gateway 200 ′. It transmits to (step S28).
When generating a certificate, refer to the conditions for the certificate included in the certificate issuance request. For example, general information such as information on the public key that is the target of the certificate, expiration date, certificate identifier, etc. In addition to the information, the user identifier managed by the certificate issuing server 400, the user identifier shared in advance between the certificate issuing server 400 and the service providing server 300, and the temporary generated by the certificate issuing server 400 Service providing server 300 to which a unique identifier, user attribute information for which certificate issuing server 400 guarantees its validity, the type of authority authorized to the user, and authentication information generated with the corresponding private key should be applied By including information such as the identifier of the service provision server 300, additional information can be acquired.
At this time, it is assumed that information indicating the identity of the user targeted by the certificate and information relating to the user's privacy are encrypted using, for example, the public key of the asymmetric key pair held by the service providing server 300. The Further, for the purpose of preventing tampering, for example, it is assumed that tampering is prevented by adding a signature using a secret key of an asymmetric key pair held by the certificate issuing server 400. In addition, the certificate issuing server 400 stores information identifying the certificate such as a certificate or a certificate identifier in association with the target user information, so that the service providing server 300 can inquire about the user later. In this case, the certificate issuing server 400 can specify the user using the information as a key.

(8) The gateway 200 ′ that has received the certificate stores the acquired certificate in the certificate storage unit 224 in association with the corresponding key pair (step S29). Then, authentication information 2 indicating the validity of the user is generated in the authentication information generation means 225 using the certificate and the corresponding private key (step S7), and the authentication information 2 is sent to the service providing server 300 for the user terminal 100. Is transmitted (step S8). More specifically, a URL such as a browser on the user terminal 100 is generated by adding the information necessary for transmitting the authentication information 2 such as a request identifier corresponding to the authentication information 2 to the IP address of the service providing server 300. An instruction is sent to the application to redirect to the URL. The identifier of the request corresponding to the IP address of the service providing server 300 is acquired from the authentication information 2 request. If it is determined in step S4 that there is a valid certificate, steps S21 to S29 are not executed.
(9) The user terminal 100 that has received the response transmits the authentication information 2 to the service providing server 300 (step S9). More specifically, a client application such as a browser on the user terminal 100 accesses the URL specified from the gateway 200 ′.
(10) The service providing server 300 that has received the authentication information 2 authenticates the authentication information 2 by performing signature verification using the public key of the certificate issuing server 300 set in advance, verification using the public key certified by the certificate, and the like. Is confirmed (step S10), and if the content matches the policy set in the service providing server 300, the service is provided to the user terminal 100 (step S11).

<Embodiment 3>
In the third embodiment, confirmation information is requested from the user through the user terminal 100 prior to the generation of the authentication information 1 by the gateway 200 ′ in the second embodiment.
FIG. 8 shows the procedure of the authentication procedure according to the third embodiment. In this embodiment, when the gateway 200 ′ receives the authentication information 2 request from the user terminal 100, the user terminal 100 is requested to obtain a certificate and perform a service. The contents of the operation such as use are notified and user confirmation information is requested (step S31). The request for confirmation information is, for example, a request for confirmation of user permission and presentation of information for authenticating the user, such as a PIN code.
The user terminal 100 that has received the confirmation information request notifies the user of the operation to be performed using an output device such as a display or a speaker, and uses an input device such as a keyboard, a mouse, a fingerprint authentication device, or an IC card. Information for authenticating the user, such as the willingness of permission from the user and the PIN code, is acquired and transmitted to the gateway 200 ′ (step S32).
The gateway 200 ′ that has received the confirmation information identifies the user based on the received information, and confirms the validity and intention of permission (step S33). Then, after confirming the validity and intention of permission, the authentication information 1 is generated. In this embodiment, steps S31 to S33 described above are executed between steps S3 and S4 in the second embodiment. Note that the confirmation information requested from the user may be, for example, only an intention of permission, or only authentication information such as a PIN code.

<Embodiment 4>
The fourth embodiment relates to a plurality of secret keys stored in the gateway 200 ′ for the user via the user terminal 100 before the generation of the authentication information 2 by the gateway 200 ′ in the second embodiment. The information is presented and the selection of the secret key desired to be used when generating the authentication information 2 is requested.
FIG. 9 shows an authentication procedure according to the fourth embodiment. In this embodiment, when the gateway 200 ′ receives the authentication information 2 request from the user terminal 100, the gateway 200 ′ stores the authentication information 2 request in the user terminal 100. Information related to multiple private keys, such as user identifiers and attribute information described in corresponding certificates, names of services licensed for use, user rights authorized on those services, etc. A character string, image information, etc. are transmitted to the user terminal 100 (step S41), and the user is requested to select one of them or make a certificate issuance request to generate a new secret key. To instruct.

The user terminal 100 that has received the private key information list notifies the user of the list and information for requesting the user to issue a new certificate using an output device such as a display or a speaker. Information related to the selected secret key or a request for certificate issuance from the user using the input device is acquired, and the identifier or certificate issuance request for the secret key is transmitted to the gateway 200 ′ (step S42).
When the gateway 200 ′ receives the certificate issuance request (step S43), the authentication information 1 is generated (step S21), and the same procedure as that of the second embodiment is executed. On the other hand, when the private key identifier is received, the private key selected by the user is identified based on the received information, and authentication information 2 is generated using the private key and a certificate corresponding to the private key. (Step S7). In this embodiment, steps S41 to S43 described above are executed between steps S3 and S4 in the second embodiment.

<Embodiment 5>
The fifth embodiment is the same as the third embodiment except that the gateway 200 ′ confirms the validity and intention of permission of the user prior to the generation of the authentication information 1 (step S 33), and then the gateway 200 ′ sends the user pseudonym to the certificate issuing server 400. Requesting an identifier (step S51), receiving the user pseudonym identifier transmission (step S52), the gateway 200 ′ generates the authentication information 1 (step S21), and then the same procedure as in the third embodiment is executed. FIG. 10 shows the procedure of the authentication procedure according to the fifth embodiment.
The fifth embodiment is based on the assumption that there is a request to control the contents of the authentication information 2 issued by the gateway 200 ′ by the certificate issuing server 400. As a mechanism for this, a list of user pseudonym identifiers that the gateway 200 'is allowed to issue in the certificate and a list of identifiers of the service providing server 300 that is the subject of the certificate are described. By confirming that its own identifier is described in the certificate, and confirming that the user pseudonym identifier specified by the authentication information 2 is described in the certificate, authentication is performed by the certificate issuing server 400. Confirm that the policy has been completed in a satisfactory manner.

The user pseudonym identifier is a user identifier for linking the certificate issuing server user identifier and the service providing server user identifier, and is used in advance by the operator that operates the certificate issuing server 400 and the operator that operates the service providing server 300. Shared by agreement. Coordination using kana makes it difficult for each service provider to grasp the user's behavior, which is effective from the viewpoint of privacy protection in the user's online service.
In the above, the certificate issuance server user identifier is an identifier for the certificate issuance server 400 to identify the user. Assume that you have an account. The service providing server user identifier is an identifier for the service providing server 300 to identify the user, and the user has an account with the service providing server 300 by, for example, a prior contract with a business operator who operates the service providing server 300. Assuming that

<Embodiment 6>
In the sixth embodiment, when the service providing server 300 requests to add a user attribute to the authentication information, the gateway 200 may obtain permission to include the requested user attribute for the user terminal 100 in the authentication information. A sequence is added.
FIG. 11 shows the procedure of the authentication procedure according to the sixth embodiment. In this embodiment, between steps S3 and S4 in the first embodiment, the gateway 200 sends user attribute information to the user terminal 100 as authentication information. A confirmation request for inclusion is made (step S61), and the user terminal 100 responds to the attribute information confirmation request (step S62).

<Embodiment 7>
In the seventh embodiment, when the service providing server 300 verifies the authentication information and confirms the validity of the user, a user account is created in the requested service. FIG. It is shown. FIG. 12 shows a case where the present invention is applied to the procedure of the first embodiment shown in FIG.
In this embodiment, the service providing server 300 that has finished the verification of the authentication information (step S10) creates a user account based on the information obtained from the certificate when the validity of the user is confirmed (step S71). Then, the user terminal 100 is notified that the account creation has been completed (step S72).

<Modified Embodiment>
In this embodiment, the gateway 200 does not perform a series of procedures such as key pair generation, certificate generation, and authentication information generation in response to an authentication information request from the service providing server 300. The document is obtained in advance, and FIG. 13 shows the procedure. FIG. 13 is a modification of the procedure of the first embodiment shown in FIG.
In this mode, the user requests the gateway 200 to obtain a certificate using the user terminal 100 as preparation for using the service. The certificate generation request is transmitted from the user terminal 100 to the gateway 200 (step S81). Note that this procedure may be implemented so as to be periodically executed by software such as an Internet browser of the user terminal 100.
Upon receiving the certificate generation request, the gateway 200 generates a key pair, stores the generated key pair (step S82), generates a certificate corresponding to the public key, and stores the generated certificate ( Step S83). Then, the user terminal 100 is notified that the certificate generation has been completed (step S84).

In this embodiment, since the certificate is generated and stored in advance, when the user requests the service providing server 300 to provide the service using the user terminal 100 (step S1), the gateway 200 starts from the service providing server 300. In response to the authentication information request (steps S2 and S3), user authentication information is generated using the generated certificate and the corresponding private key (step S7).
Although various embodiments have been described above, in the user authentication system according to the present invention, generation of a key pair necessary for performing authentication using a key that is valid for each purpose and for a short period of time, acquisition of a certificate, and use of a secret key The authentication information generation function is performed by a gateway existing in the LAN.

Conventionally, for the purpose of using authentication information generation in a plurality of user terminals, for example, a function such as authentication information generation has been implemented in an external device such as a USB token. While there is a merit that it is easy to establish a safe communication path between the user terminal and the external device, there is a demerit that user settings such as driver installation and device replacement are necessary on the user terminal side.
On the other hand, the present invention has an advantage that no complicated setting such as installation is required in the user terminal because all the communication between the user terminal and the gateway is performed based on a standard protocol.

The figure which shows the structure of Embodiment 1 of the user authentication system by this invention. The figure for demonstrating the principal part structure of the gateway in FIG. The sequence diagram for demonstrating operation | movement of Embodiment 1 of the user authentication system by this invention. The figure which shows the structure of Embodiment 2 of the user authentication system by this invention. The figure for demonstrating the principal part structure of the gateway in FIG. The figure for demonstrating the principal part structure of the certificate issuing server in FIG. The sequence diagram for demonstrating operation | movement of Embodiment 2 of the user authentication system by this invention. The sequence diagram for demonstrating operation | movement of Embodiment 3 of the user authentication system by this invention. The sequence diagram for demonstrating operation | movement of Embodiment 4 of the user authentication system by this invention. The sequence diagram for demonstrating operation | movement of Embodiment 5 of the user authentication system by this invention. The sequence diagram for demonstrating operation | movement of Embodiment 6 of the user authentication system by this invention. The sequence diagram for demonstrating operation | movement of Embodiment 7 of the user authentication system by this invention. The sequence diagram for demonstrating operation | movement of the deformation | transformation embodiment of the user authentication system by this invention. The figure for demonstrating the conventional public key authentication method.

Claims (13)

A system for authenticating a user who uses a service on a network,
A user terminal on the first network, a service providing server on the second network, and a gateway connecting the first network and the second network;
The gateway generates a key pair; means for storing the generated key pair; means for generating a certificate corresponding to the public key of the key pair; means for storing the generated certificate; Means for generating user authentication information using the private key of the key pair and the certificate;
When the service providing server is requested to provide a service from the user terminal, the service providing server requests generation of the authentication information in the gateway, and verifies the generated authentication information. A user authentication system configured to provide a service. A system for authenticating a user who uses a service on a network,
A user terminal on the first network, a service providing server and a certificate issuing server on the second network, and a gateway connecting the first network and the second network;
The gateway generates first authentication information of the user, means for generating a key pair based on authentication of the first authentication information in the certificate issuing server, and means for storing the generated key pair And means for storing a certificate corresponding to the public key of the key pair received from the certificate issuing server, and generating second authentication information of the user using the private key of the key pair and the certificate And means for
The certificate issuing server comprises means for verifying the first authentication information received from the gateway; and means for generating the certificate corresponding to the public key received from the gateway;
When the service providing server is requested to provide a service from the user terminal, the service providing server requests generation of the second authentication information in the gateway, verifies the generated second authentication information, and is valid. A user authentication system characterized in that a service is provided to the user terminal. The user authentication system according to claim 1,
The means for storing the certificate stores a plurality of certificates corresponding to each public key of a plurality of key pairs,
The means for generating the authentication information generates the authentication information by using a secret key designated by the user terminal and the certificate corresponding to the secret key. The user authentication system according to claim 2, wherein
The means for storing the certificate stores a plurality of certificates corresponding to each public key of a plurality of key pairs,
The means for generating the second authentication information generates the second authentication information by using a secret key designated by the user terminal and the certificate corresponding to the secret key. Authentication system. A user terminal on the first network, a service providing server on the second network, and a gateway connecting the first network and the second network, and authentication of the service providing server is required from the user terminal A user authentication method when using the service
When the service providing server is requested to provide a service from the user terminal, the service providing server requests user authentication information from the gateway,
When the authentication information is requested, the gateway generates a key pair, generates a certificate corresponding to the public key of the key pair, and further uses the private key of the key pair and the certificate. Generating authentication information and sending the authentication information to the service providing server;
When the service providing server receives authentication information, the service providing server verifies the authentication information, and if valid, provides a service to the user terminal. A user terminal on the first network, a service providing server and a certificate issuing server on the second network, and a gateway for connecting the first network and the second network, and providing the service from the user terminal A user authentication method when using a service that requires server authentication,
When the service providing server is requested to provide a service from the user terminal, the service providing server requests second authentication information of the user from the gateway,
When the gateway is requested for second authentication information, the gateway generates user first authentication information and sends it to the certificate issuing server;
When the certificate issuing server receives the first authentication information, the certificate issuing server verifies the first authentication information and sends the result to the gateway;
If the received result indicates successful authentication, the gateway generates a key pair and sends the public key of the key pair to the certificate issuing server.
The certificate issuing server generates a certificate corresponding to the received public key, sends the certificate to the gateway,
The gateway generates user second authentication information using the secret key of the key pair and the certificate, and transmits the second authentication information to the service providing server,
The service providing server, when receiving the second authentication information, verifies the second authentication information and, if valid, provides the service to the user terminal. The user authentication method according to claim 5, wherein
The gateway requests the user terminal for confirmation information, confirms the confirmation information, and then generates the authentication information. The user authentication method according to claim 6, wherein
The gateway requests confirmation information from the user terminal, and after confirming the confirmation information, generates the first authentication information. The user authentication method according to claim 5, wherein
The gateway transmits an identifier of a secret key managed by the gateway and information indicating the characteristic to the user terminal, a secret key corresponding to the identifier specified by the user terminal, and the secret key corresponding to the secret key A user authentication method, wherein the authentication information is generated using a certificate. The user authentication method according to claim 6, wherein
The gateway transmits an identifier of a secret key managed by the gateway and information indicating the characteristic to the user terminal, a secret key corresponding to the identifier specified by the user terminal, and the secret key corresponding to the secret key A user authentication method, wherein the second authentication information is generated using a certificate. A gateway connecting the first network and the second network,
Means for generating a key pair;
Means for storing the generated key pair;
Means for generating a certificate corresponding to the public key of the key pair;
Means for storing the generated certificate;
Using the private key of the key pair and the certificate, user authentication information necessary for the user terminal on the first network to use the service of the service providing server on the second network is generated. And a gateway.   A program for causing a computer to function as the gateway according to claim 11.   A computer-readable recording medium on which the program according to claim 12 is recorded.

Images