JP2009253394A - Electronic authentication system and electronic authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an electronic authentication system and an electronic authentication method which are capable of surely proving the genuineness of not only the creation date of a document or the like but also contents of the document or the like using an electronic notary service. <P>SOLUTION: The electronic authentication system includes a user terminal U, a first authentication terminal C1, and a second authentication terminal C2. The user terminal U stores an object to be authenticated and an authentication application into one folder and transmits this folder to the first authentication terminal C1, and the first authentication terminal C1 receives the folder from the user terminal U and generates first random numbers on the basis of the object to be authenticated and the authentication application in the folder and generates second random numbers on the basis of the authentication application and generates third random numbers on the basis of an authentication application transmitted from the second authentication terminal C2, and first random numbers generated by the user terminal U and those generated by the first authentication terminal C1 are compared with each other, and third random numbers generated by the first authentication terminal C1 and those generated by the second authentication terminal C2 are compared with each other. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an electronic authentication system and an electronic authentication method capable of assuring the authenticity of a document or the like as well as the authenticity of a document, a drawing or the like (hereinafter referred to as a document or the like) using an electronic notary system. .

  When a document or the like is created, it is often important to prove the creation date and time of the document or the like together with the content of the document or the like. For example, it is necessary to prove the creation date and time of a document or the like when it is proved that the user has a normal license by prior use or when the existence of the prior art is proved.

As a method for proving the creation date and time of a document or the like, a method for proving the document or the like by the creator of the document or the like can be mentioned. However, the proof by the creator itself is generally low in proof ability. In addition, although the date of creation or editing is recorded in the electronic data such as a document, the date corresponds to the date of the clock of the computer. Since the date and time of the computer clock can be easily changed, the certification ability is low.
Further, when verifying the authenticity of a document, it is necessary not only to verify the creation date of the document, but also to verify that the contents have not been tampered with since that date.

Therefore, there can be mentioned a method of using the electronic notary system to have a “designated notary” designated by the Minister of Justice certify the authenticity of a document or the like (for example, see Patent Document 1 below). The electronic notary system is a service provided by the Japan Notary Public Federation. Data that satisfies certain conditions (capacity, format, etc.) has the same effect as a regular notary (an official proof of the final date and content). ). In other words, it can be ensured that there is an authenticated document or the like at least at the date and time authenticated by the electronic authentication system.
However, data that can be authenticated by the electronic notary system is only data that satisfies certain conditions. Therefore, for data that does not satisfy certain conditions, an authentication application form is created based on a document or the like, and an electronic signature of a designated notary is attached to the authentication application form. Thereby, it is possible to have the designated notary prove the authenticity of the certification application. That is, the authentication application form is a document that proves the authenticity of the document.

  However, when a document or the like is authenticated by this method, only the authentication application form is authenticated by the designated notary. That is, the document or the like is not directly authenticated. For this reason, even if the document or the like is tampered with after the electronic signature is attached, there are many cases where tampering cannot be detected, and it cannot be said that the authenticity can be sufficiently guaranteed.

JP 2005-122483 A

  The present invention has been made in view of the above-mentioned problems, and electronic authentication that can reliably verify the authenticity of the contents of a document, etc., as well as the authenticity of the creation date of the document, etc., using an electronic notary system. It is an object of the present invention to provide a system and an electronic authentication method.

  The invention according to claim 1 is an electronic authentication system for authenticating an object to be authenticated provided by a user, comprising a user terminal, a first authentication terminal, and a second authentication terminal, wherein the user terminal is the object to be authenticated. And a user terminal side first random number generating means for generating a first random number by a first function based on the object to be authenticated, the authentication application, and the folder, respectively, There is a user terminal side transmission means for transmitting the authentication object and the folder storing the authentication application to the first authentication terminal, and the first authentication terminal receives the folder transmitted from the user terminal. A first authentication terminal side first random number that creates a first random number by the first function based on one authentication terminal side receiving means, the folder, the authentication object stored in the folder, and the authentication application Generating means, first authentication terminal side second random number creating means for creating a second random number by a second function based on the authentication application, and transmitting the authentication application to the second authentication terminal, A first authentication terminal side transmitting / receiving means for receiving an authentication application transmitted from the second authentication terminal, and a third random number generated by a third function based on the authentication application transmitted from the second authentication terminal; An authentication application form having a third random number generating means on one authentication terminal side, wherein the second authentication terminal receives the authentication application form transmitted from the first authentication terminal and authenticates using the electronic notary system A second authentication terminal side transmitting / receiving means for transmitting the first authentication terminal to the first authentication terminal, and a second authentication terminal side for generating a second random number by a second function based on the authentication application transmitted from the first authentication terminal The second random number generator and the certification application form A third random number generating means on the second authentication terminal side for generating a third random number by a third function based on an authentication application form authenticated using the system and an electronic notary system; In the communication of data between the user terminal and the first authentication terminal, the terminal further compares a first random number comparison unit that compares the first random number created by each terminal, the first authentication terminal, and the second authentication In communication of terminal data, it has a third random number comparison means for comparing the third random number created in each terminal, the second authentication terminal is further connected between the first authentication terminal and the second authentication terminal The present invention relates to an electronic authentication system comprising second random number comparison means for comparing second random numbers created in respective terminals in data communication.

  According to a second aspect of the present invention, the first authentication terminal further provides a means for providing the object to be authenticated and the authentication application to the user terminal, and the object to be authenticated and the authentication provided by the providing means. The electronic authentication system according to claim 1, further comprising verification means for verifying the application form.

  The invention according to claim 3 is characterized in that one or more of the first random number, the second random number, and the third random number are visibly written in the authentication application. Relates to the electronic authentication system.

  The invention according to claim 4 is an electronic authentication method for authenticating an object to be authenticated provided from a user terminal using a first authentication terminal and a second authentication terminal, wherein the user terminal and the authentication object are authenticated by the user terminal. An application form is stored in the same folder, a first random number is created by a first function based on the object to be authenticated, the authentication application form, and the folder, respectively, and the object to be authenticated and the authentication application form are stored Transmitting the folder to the first authentication terminal; receiving the folder transmitted from the user terminal by the first authentication terminal; and receiving the folder, the object to be authenticated and the authentication stored in the folder Based on each application, creating a first random number by the first function, comparing the first random number created by the user terminal and the first random number created by the first authentication terminal, in front A step of creating a second random number by a second function based on the authentication application by the first authentication terminal, and transmitting the authentication application to the second authentication terminal; Receiving the authentication application transmitted from one authentication terminal, creating a second random number by a second function based on the authentication application, and the second random number generated by the first authentication terminal and the first The step of comparing the second random number created by two authentication terminals, and the authentication by authenticating the authentication application received by the second authentication terminal using an electronic notary system and using the electronic notary system Based on the application form, a third random number is created by a third function and the authentication application form authenticated using the electronic notary system is transmitted to the first authentication terminal; and The authentication sent from the second authentication terminal Receive an application, create a third random number by the third function based on the authentication application, the third random number created by the second authentication terminal and the first authentication terminal The present invention relates to an electronic authentication method comprising a step of comparing a third random number.

The invention according to claim 1 is an electronic authentication system for authenticating an object to be authenticated provided by a user, comprising a user terminal, a first authentication terminal, and a second authentication terminal, wherein the user terminal is the object to be authenticated. And a user terminal side first random number generating means for generating a first random number by a first function based on the object to be authenticated, the authentication application, and the folder, respectively, There is a user terminal side transmission means for transmitting the authentication object and the folder storing the authentication application to the first authentication terminal, and the first authentication terminal receives the folder transmitted from the user terminal. A first authentication terminal side first random number that creates a first random number by the first function based on one authentication terminal side receiving means, the folder, the authentication object stored in the folder, and the authentication application Generating means, first authentication terminal side second random number creating means for creating a second random number by a second function based on the authentication application, and transmitting the authentication application to the second authentication terminal, A first authentication terminal side transmitting / receiving means for receiving an authentication application transmitted from the second authentication terminal, and a third random number generated by a third function based on the authentication application transmitted from the second authentication terminal; An authentication application form having a third random number generating means on one authentication terminal side, wherein the second authentication terminal receives the authentication application form transmitted from the first authentication terminal and authenticates using the electronic notary system A second authentication terminal side transmitting / receiving means for transmitting the first authentication terminal to the first authentication terminal, and a second authentication terminal side for generating a second random number by a second function based on the authentication application transmitted from the first authentication terminal The second random number generator and the certification application form A third random number generating means on the second authentication terminal side for generating a third random number by a third function based on an authentication application form authenticated using the system and an electronic notary system; In the communication of data between the user terminal and the first authentication terminal, the terminal further compares a first random number comparison unit that compares the first random number created by each terminal, the first authentication terminal, and the second authentication In communication of terminal data, it has a third random number comparison means for comparing the third random number created in each terminal, the second authentication terminal is further connected between the first authentication terminal and the second authentication terminal In communication of data, by having a second random number comparison means for comparing the second random number created in each terminal, because the random number is compared in communication between each terminal, the same as the data of the transmission source Make sure the data reaches the destination It is guaranteed that Therefore, it is ensured that the object to be authenticated and the authentication application provided from the user terminal are not leaked out of the electronic authentication system. In addition, since the authenticity of the third application is guaranteed by the electronic notary system, the authenticity of the object to be certified provided with the third application is also guaranteed.
Further, since the certification application is certified using the electronic notary system, it has the effect of a fixed date by the electronic notary system. Therefore, it can be assured that an object to be authenticated exists at least at the date and time when it was authenticated by the electronic authentication system.

  The invention according to claim 2 is characterized in that the first authenticating unit further provides providing means for providing the authentication object and the authentication application to the user terminal, and the authentication object provided by the providing means and the authentication. By having a verification means for verifying the application form, the user can easily use the object to be authenticated.

  According to the invention of claim 3, the object to be authenticated is used by visually writing one or more of the first random number, the second random number, and the third random number on the authentication application form. The person can easily determine whether or not the object to be authenticated is authenticated.

The invention according to claim 4 is an electronic authentication method for authenticating an object to be authenticated provided from a user terminal using a first authentication terminal and a second authentication terminal, wherein the user terminal and the authentication object are authenticated by the user terminal. An application form is stored in the same folder, a first random number is created by a first function based on the object to be authenticated, the authentication application form, and the folder, respectively, and the object to be authenticated and the authentication application form are stored Transmitting the folder to the first authentication terminal; receiving the folder transmitted from the user terminal by the first authentication terminal; and receiving the folder, the object to be authenticated and the authentication stored in the folder Based on each application, creating a first random number by the first function, comparing the first random number created by the user terminal and the first random number created by the first authentication terminal, in front A step of creating a second random number by a second function based on the authentication application by the first authentication terminal, and transmitting the authentication application to the second authentication terminal; Receiving the authentication application transmitted from one authentication terminal, creating a second random number by a second function based on the authentication application, and the second random number generated by the first authentication terminal and the first The step of comparing the second random number created by two authentication terminals, and the authentication by authenticating the authentication application received by the second authentication terminal using an electronic notary system and using the electronic notary system Based on the application form, a third random number is created by a third function and the authentication application form authenticated using the electronic notary system is transmitted to the first authentication terminal; and The authentication sent from the second authentication terminal Receive an application, create a third random number by the third function based on the authentication application, the third random number created by the second authentication terminal and the first authentication terminal By including the step of comparing the third random number, since the comparison of the random numbers is performed by communication between the terminals, it is ensured that the same data as the transmission source data is surely delivered to the transmission destination. Therefore, it is ensured that the object to be authenticated and the authentication application provided from the user terminal are not leaked out of the electronic authentication system. In addition, since the authenticity of the third application is guaranteed by the electronic notary system, the authenticity of the object to be certified provided with the third application is also guaranteed.
Furthermore, since the certification application is certified by the electronic notary system, it has the effect of a fixed date by the electronic notary system. Therefore, it can be assured that an object to be authenticated exists at least at the date and time when it was authenticated by the electronic authentication system.

Hereinafter, embodiments of an electronic authentication system and an electronic authentication method according to the present invention will be described with reference to the drawings.
FIG. 1 is a system configuration diagram showing an embodiment of an electronic authentication system according to the present invention.
FIG. 2 is a data flow diagram in the embodiment of the electronic authentication system according to the present invention.

  An electronic authentication system (100) shown in FIG. 1 is a system for authenticating an object to be authenticated (21) provided by a user, and includes a user terminal (U), a first authentication terminal (C1), a second authentication terminal ( C2), consisting of a designated notary terminal (N).

The user terminal (U) is a terminal of a person who has the right of access to the first authentication terminal (C1), and includes a user terminal side transmission means (1) and a user terminal side first random number generation means (2).
Examples of the user terminal (U) include a terminal of a person who actually created the object to be authenticated (21) and a terminal of the owner of the object to be authenticated (21).

The user terminal side transmission means (1) is a means for transmitting the authentication object (21) requiring authentication to the first authentication terminal (C1). Specifically, the authentication target (21) is stored together with the authentication application form (22) in one folder (A) and transmitted to the first authentication terminal (C1). At this time, the first random number (231) (described later) created by the user terminal side first random number creating means (2) is also transmitted together with the authentication object (21).
The authentication application form (22) describes information on the object to be authenticated (21), and receives the object to be authenticated (21) from the information of the creator of the object to be authenticated, the creation date and time, and the user terminal (U). Date and time, a summary of the contents of the object to be authenticated (21), and the like. In addition, because the certification application form (22) is certified using the electronic notary system in a later process, it satisfies certain conditions (capacity, format, etc.) to be able to authenticate using the electronic notary system. Must be data.
In addition, examples of the object to be authenticated (21) include electronic data such as documents and drawings (hereinafter referred to as documents). Since the object to be certified (21) is not certified by the electronic notary system, it is not necessary to satisfy certain conditions necessary for the certification by the electronic notary system. Therefore, the file type is not limited.

  The user terminal side first random number generating means (2) generates a specific function (hereinafter referred to as the first function) based on the authentication target (21), the authentication application form (22), and the folder (A). Used to create a random number (hereinafter referred to as a first random number) (231). The first random number (231) created based on the object to be authenticated (21) is the first random number (231a), and the first random number (231) created based on the authentication application form (22) is the first random number. (231b) The first random number (231) created based on the folder (A) is set as the first random number (231c). In addition, when the to-be-authenticated object (21) consists of a plurality of data, the first random number (231a) is created based on each data.

A hash value can be used as the first random number (231).
Here, the hash value refers to a value calculated by a hash function.
The hash function is a function having one-way property, and the same hash value cannot be obtained from different values.
That is, the first random number (231) is a unique value for each authentication target (21), authentication application form (22), and folder (A). In other words, the same hash value is not created from different objects (21) or authentication applications (22). The electronic authentication system (100) verifies the authenticity of the object to be authenticated (21) using a hash value (random number), but the same hash value is not created from different objects to be authenticated (21), etc. The authenticity of the object (21) or the like can be reliably verified.
In addition, the original value cannot be obtained from the hash value. For this reason, the authentication target (21) and the authentication application form (22) cannot be estimated from the first random number (231).

  Note that storage means (not shown) may be provided in the user terminal (U) to store the authentication object (21), the authentication application form (22), the first random number (231), and the like. Moreover, you may preserve | save what wrote the first random number (231) in the authentication application form (22) (the same data as the 1st application form (24) mentioned later).

The first authentication terminal (C1) is connected to the user terminal (U) and the second authentication terminal (C2) via a network.
The first authentication terminal (C1) includes a first authentication terminal side receiving means (3), a first authentication terminal side first random number creating means (4), a first random number comparing means (5), and a first random number writing means (6 ), First authentication terminal side transmission / reception means (7), first authentication terminal side second random number generation means (8), first authentication terminal side third random number generation means (9), third random number comparison means (10), It has a storage means (11).
Each means may be constituted by a single computer or may be constituted by a plurality of computers distributed on a network.

  The first authentication terminal side receiving means (3) is means for receiving the folder (A) (the authentication object (21) and the authentication application form (22) are stored) transmitted from the user terminal (U). It is.

The first authentication terminal side first random number generating means (4) uses the first function based on the object to be authenticated (21), the authentication application form (22), and the folder (A) to obtain the first random number (232). It is a means for creating.
In the following description, the first random number (232) created based on the authentication target (21) is the first random number (232a), and the first random number (232) created based on the authentication application form (22). ) Is the first random number (232b), and the first random number (232) created based on the folder (A) is the first random number (232c).
The first authentication terminal side first random number generating means (4) is means for generating a random number using the same function (first function) as the user terminal side first random number generating means (2) of the user terminal (U). is there. Therefore, the first random number (231) created by the user terminal side first random number creating means (2) and the first random number (232) created by the first authentication terminal side first random number creating means (4) are the same. Value. Specifically, the first random number (231a) and the first random number (232a), the first random number (231b) and the first random number (232b), and the first random number (231c) and the first random number (232c) are the same. .

The first random number comparison means (5) includes a first random number (231) transmitted from the user terminal (U) and a first random number (232) created by the first authentication terminal side first random number creation means (4). It is a means for comparing. Specifically, the first random number (231a) and the first random number (232a), the first random number (231b) and the first random number (232b), the first random number (231c) and the first random number (232c) are respectively compared. , Confirm that each is the same.
If the first random number (231) and the first random number (232) are the same, it is determined that the data transmitted from the user terminal (U) and the data received by the first authentication terminal (C1) are the same. Then, communication between the user terminal (U) and the first authentication terminal (C1) is permitted. If the first random number (231) and the first random number (232) are not the same, communication is not permitted. Thereby, it can be assured that the same data as the data sent by the user terminal (U) has reached the first authentication terminal (C1).

  The first random number writing means (6) is means for visually writing the first random number (232) in the authentication application form (22). The user using the object to be authenticated (21) easily determines that the authentication application form (22) has already been authenticated by confirming that the first random number (232) has been written. can do. Moreover, since the first random number can be easily recognized, the authenticity of the authentication target (21) can be easily verified. Hereinafter, for convenience, the authentication application form (22) in which the first random number (232) is written is referred to as a first application form (24).

  The first authentication terminal side transmission / reception means (7) is means for performing data communication with the second authentication terminal (C2). Specifically, the first application (24) is transmitted to the second authentication terminal (C2), and the third application (26) (described later) is received from the second authentication terminal (C2).

  The first authentication terminal side second random number creating means (8) uses a specific function (hereinafter referred to as a second function) different from the first function based on the first application form (24), and uses a random number (hereinafter referred to as a second function). , Referred to as a second random number) (241). A hash value can be given as the second random number.

  The first authentication terminal side third random number generation means (9) is a specific function different from the first function and the second function based on a third application (described later) transmitted from the second authentication terminal (C2). This is a means for creating a random number (hereinafter referred to as a third random number) (272) using a function (hereinafter referred to as a third function).

The third random number comparison means (10) is created by the third random number (271) (described later) transmitted from the second authentication terminal (C2) and the third random number creation means (9) on the first authentication terminal side. Means for comparing the third random number (272).
If the third random number (271) and the third random number (272) are the same, the data transmitted from the second authentication terminal (C1) and the data received by the first authentication terminal (C1) are the same. It is judged that there is, and communication from the second authentication terminal (C2) to the first authentication terminal (C1) is permitted. If the first random number (231) and the first random number (232) are not the same, the communication is not permitted.

The storage means (11) is for appropriately storing the data created by each means.
Specifically, the folder (A) received by the first authentication terminal side receiving means (3) (stores the authentication object (21) and the authentication application form (22)), the first application form (23), the second An application form (25), a third application form (26) (described later), a first random number (232), a second random number (241), a third random number (272), and the like are stored. Note that only the third application (26) may be stored in the storage means (11), and the authentication application (22), the first application (23), and the second application (25) may be discarded. . In addition, in order to distinguish data related to a certain authentication application form (22) from data related to other authentication application forms (22), the data is stored in folders according to which authentication application form (22) is related. Also good.
Examples of the storage means (11) include a hard disk, MO, CD-RW, and DVD-RW. Further, the storage means (11) may be configured by a plurality of media by providing a storage medium for each information to be stored.

The second authentication terminal (C2) is a terminal different from the first authentication terminal (C1), and is connected to the first authentication terminal (C1) via a network. Further, the user terminal (U) cannot access the second authentication terminal (C2).
The second authentication terminal (C2) includes a second authentication terminal side transmission / reception unit (12), a second authentication terminal side second random number generation unit (13), a second random number comparison unit (14), and a second random number writing unit (15). ), Second authentication terminal side third random number generation means (16), and storage means (17).

  The second authentication terminal side transmission / reception means (12) is means for performing data communication with the first authentication terminal (C1). Specifically, the first application form (23) transmitted from the first authentication terminal (C1) is received, and a third application form (26) described later is transmitted to the first authentication terminal (C1).

  The second authentication terminal side second random number creating means (13) uses the second function based on the first application form (24) transmitted from the first authentication terminal (C1) to obtain the second random number (242). It is a means for creating. That is, the second random number (241) transmitted from the first authentication terminal (C1) and the second random number (242) created by the second authentication terminal side second random number creation means (13) have the same value.

The second random number comparison means (14) includes a second random number (241) transmitted from the first authentication terminal (C1) and a second random number (2) created by the second authentication terminal side second random number creation means (13). 242).
If the second random number (241) and the second random number (242) are the same, the data transmitted from the first authentication terminal (C1) and the data received by the second authentication terminal (C2) are the same. It is judged that there is, and communication from the first authentication terminal (C1) to the second authentication terminal (C2) is permitted. If the second random number (241) and the second random number (242) are not the same, the communication is not permitted.

  The second random number writing means (15) is means for writing the second random number (242) created by the second random number creating means (14) to the first application form (23). Hereinafter, the first application form (24) in which the second random number (242) is written is referred to as a second application form (25).

The second authentication terminal side third random number creating means (16) authenticates the second application form (25) with the designated notary terminal (N) (hereinafter referred to as the third application form) (26). Is a means for generating a third random number (271) using a function (hereinafter referred to as a third function) different from the first function and the second function. A hash value can be given as the third random number (271).
Here, the designated notary terminal (N) is a “designated notary” terminal designated by the Minister of Justice based on the electronic notary system, and is provided in a notary office or the like.

The storage means (17) is for appropriately storing the data created by each means.
Specifically, a first warranty (23), a second warranty (25), a third warranty (26), and the like are stored. In addition, the first random number (232) written in the second application form (23), the second random number (242) created by the second authentication terminal side second random number creation means (13), the second authentication terminal The third random number (271) created by the side third random number creating means (16) may be stored.
Examples of the storage means (17) include a hard disk, MO, CD-RW, and DVD-RW. Further, the storage means (17) may be configured by a plurality of media by providing a storage medium for each information to be stored.

The first authentication terminal (C1) includes a providing unit (17) and a verification unit (18).
The providing means (17) is a means for providing the authentication object (21) and the third application form (26) to the user terminal (U). The providing means (17) is not only the user who provided the object to be authenticated (21) but also other users who have access rights in the electronic authentication system (100) and are permitted to use the object to be authenticated (21). In addition, the certified product (21) and the third application form (26) are provided.
In the electronic authentication system (100), since the comparison of random numbers is performed in communication between terminals, it is guaranteed that the same data as the transmission source data has surely arrived at the transmission destination. Therefore, it is guaranteed that the authentication target (21) and the authentication application form (22) provided from the user terminal (U) have not flowed out of the electronic authentication system (100) (first application). (23), second application (25), third application (26)). In addition, since the authenticity of the third application (26) is guaranteed by the designated notary's terminal (N), the authenticity (21) provided with the third application (26) is also authentic. It will be guaranteed. Further, the third application form (26) can guarantee that the object to be authenticated exists at least at the date and time when it is authenticated by the designated notary public terminal (N).
Furthermore, since the first random number (232) and the second random number (241) are written in the second application form (25) authenticated by the designated notary public terminal (N), the second random number (232) and The authenticity of the second random number (241) is also guaranteed at the same time.
Further, it is preferable that the object to be authenticated (21) and the third application form (26) are provided by being stored in one folder. Thereby, the to-be-authenticated object (21) and the third application form (26) authenticated by the designated notary public terminal (N) are stored in the same folder. Therefore, authenticity is more reliably guaranteed.
Further, a certificate uniquely created by the first authentication terminal (C1) may be stored in the folder.

  The verification unit (18) is a unit for verifying whether the authentication target (21) and the third application form (26) provided to the user terminal (U) have been tampered with. Specifically, the first random number (232) and the second random number (241) written in the third application (26), and the first random number (232) and the second random number stored in the storage means (11). Two random numbers (241) are compared. If these random numbers are the same, it can be determined that the third application form (26) has received an official proof of the confirmation date and contents from the designated notary's terminal (N). In addition, the authenticity of the authentication object (21) provided at the same time as the third application (26) can be guaranteed.

Next, the operation method of the electronic authentication system (100) will be described, and the authentication method according to the present invention will also be described.
3 and 4 are flowcharts showing an operation method in the authentication system (100). For convenience of illustration, the flowchart is divided into FIGS. 3 and 4, but FIGS. 3 and 4 show a series of steps. Step 1 is a step in the user terminal (U), steps 2 to 5 and 11 to 14 are steps in the first authentication terminal (C1), and steps 6 to 10 are steps in the second authentication terminal (C2).
In the following description, FIG. 2 will be used together with FIGS.

As shown in FIG. 3, first, the object to be authenticated (21) whose authenticity is to be guaranteed is transmitted to the first authentication terminal (C1) by the user terminal side transmission means (1) (step 1). Specifically, the object to be authenticated (21) and the authentication application form (22) are stored in the same folder (A) and transmitted. At that time, a first random number (231) is created by the user terminal side first random number creating means (2). Specifically, the first random number (232a) is based on the object to be authenticated (21), the first random number (232b) is based on the authentication application form (22), and the first random number (232) is based on the folder (A). 232c).
Then, the first random number (232) is transmitted to the first authentication terminal (C1) together with the folder (A).

  The first authentication terminal side receiving means (first authentication terminal (C1)) receives the folder (A) transmitted from the user terminal (U) (the authentication object (21) and the authentication application form (22) are stored). 3) (Step 2). At that time, based on the folder (A), the object to be authenticated (21) and the authentication application form (22) stored in the folder (A), the first authentication terminal side first random number generating means (4) One random number (232) is created.

Then, the first random number (231) transmitted from the first authentication terminal (C1) is compared with the first random number (232) created by the first authentication terminal side first random number creation means (4) (step 3). . Specifically, the first random number (231a) and the first random number (232a), the first random number (231b) and the first random number (232b), and the first random number (231c) and the first random number (232c) are compared.
As a result of comparison, if the first random number (231) and the first random number (232) are the same, the data transmitted from the user terminal (U) and the data received by the first authentication terminal (C1) are the same. And the communication between the user terminal (U) and the first authentication terminal (C1) is permitted. If the first random number (231) and the first random number (232) are not the same, communication is not permitted. Thereby, it can be assured that the same data as the data sent by the user terminal (U) has reached the first authentication terminal (C1).

  Next, the first random number (232) is written in the authentication application form (22) to create the first application form (23) (step 4). Then, the first application terminal (23) is transmitted from the first authentication terminal side transmission / reception means (7) to the second authentication terminal side transmission / reception means (12) (step 5). At that time, a second random number (241) is created using the second function based on the first application form (24). Then, the second random number (241) is transmitted to the second authentication terminal (C2) together with the first application form (23).

The data transmitted from the first authentication terminal (C1) is received by the second authentication terminal side transmission / reception means (12) (step 6). And based on the received 1st application (23), a 2nd random number (241) is produced by the 2nd authentication terminal side 2nd random number preparation means (13).
Next, the second random number comparison unit (14) generates the second random number (241) transmitted from the first authentication terminal (C1) and the second random number generation unit (13) generated by the second authentication terminal side second random number generation unit (13). The random numbers (242) are compared (step 7). If the second random number (241) and the second random number (242) are the same, the data transmitted from the first authentication terminal (C1) and the data received by the second authentication terminal (C2) are the same. It is judged that there is, and communication from the first authentication terminal (C1) to the second authentication terminal (C2) is permitted. If the second random number (241) and the second random number (242) are not the same, the communication is not permitted.

Next, the second random number (242) is written in the first application form (23) to create the second application form (25) (step 8).
Then, the second application form (25) is authenticated by the designated notary public terminal (N) to obtain the third application form (26) (step 9). Thereby, since the public authentication is performed on the third application form (26), the authenticity of the third application form (26) is guaranteed. In addition, since the first random number (232) and the second random number (241) are written in the second application form (25) authenticated by the designated notary public terminal (N), the second random number (232) And the authenticity of the second random number (241) is also guaranteed at the same time.

  Next, the third application form (26) is transmitted from the second authentication terminal side transmission / reception means (12) to the first authentication terminal side transmission / reception means (7) (step 10). At this time, based on the third application form (26), the second random number generation means (16) generates the third random number (271). Then, the third random number (271) is transmitted to the first authentication terminal (C2) together with the third application form (26).

The data transmitted from the second authentication terminal (C2) is received by the first authentication terminal side transmitting / receiving means (7) of the first authentication terminal (C1) (step 11). And based on the received 3rd application (26), a 3rd random number (272) is produced by the 1st authentication terminal side 3rd random number preparation means (9).
Next, the third random number comparison means (10) generates the third random number (271) transmitted from the second authentication terminal (C2) and the third random number generation means (9) generated by the first authentication terminal side third random number generation means (9). The random numbers (272) are compared (step 12). If the third random number (271) and the third random number (272) are the same, the data transmitted from the second authentication terminal (C2) and the data received by the first authentication terminal (C1) are the same. It is judged that there is, and communication from the second authentication terminal (C2) to the first authentication terminal (C1) is permitted. If the second random number (241) and the second random number (242) are not the same, the communication is not permitted.

The object to be authenticated (21) is provided to the user (including a user other than the user who provided the object to be authenticated (21)) from the first authentication terminal (C1) together with the third application (26) (step 13).
In the electronic authentication system (100), since the comparison of random numbers is performed in communication between terminals, it is guaranteed that the same data as the transmission source data has surely arrived at the transmission destination. Therefore, it is guaranteed that the authentication target (21) and the authentication application form (22) provided from the user terminal (U) have not flowed out of the electronic authentication system (100) (first application). (23), second application (25), third application (26)). In addition, since the authenticity of the third application (26) is guaranteed by the designated notary's terminal (N), the authenticity (21) provided with the third application (26) is also authentic. It will be guaranteed.

In addition, the verification object (19) can verify whether the object to be authenticated (21) and the third application (26) provided to the user have been tampered with (step 14).
Specifically, the first random number (232) and the second random number (242) written in the third application (26), and the first random number (232) and the second random number stored in the storage means (11). Two random numbers (241) are compared. If these random numbers are the same, it can be determined that the third application form (26) has received an official proof of the confirmation date and contents from the designated notary's terminal (N). In addition, the authenticity of the authentication object (21) provided at the same time as the third application (26) can be guaranteed. Furthermore, since the first random number (232) and the second random number (241) are written in the second application form, authenticity is guaranteed by the designated notary (N). Therefore, the effect of tampering verification using the first random numbers (231, 232) and the second random numbers (241, 242) is more reliably guaranteed.

  When new data is added to the object to be authenticated (21), only the new data needs to be authenticated again. The new data can be clearly distinguished from the already-authenticated data because the effect of the date of confirmation of the designated notary authentication terminal (N) is obtained when the new data is authenticated again.

  In the electronic authentication system (100), the first function, the second function, and the third function have been described as different functions. However, these functions may be the same function. In the electronic authentication system (100), the first random number (232) is written in the authentication application form (22) to become the first application form (23), and the second random number (242) is written in the first application form (23). The second application (25) is obtained, and the second application is authenticated by the electronic notary system to become the third application (26). That is, the authentication application (22), the first application (23), the second application (26), and the third application (26) are all different data. Therefore, even if the first function, the second function, and the third function are the same function, since the original data is different, the first random number created based on the authentication application form (22) and the first application form The second random number created based on (23) and the third random number created based on the second application form (26) have different values. Since different random numbers are generated in this way, each random number can be verified, so that authenticity can be more reliably guaranteed.

Further, the electronic authentication system according to the present invention does not need to provide the writing means (6, 15). In that case, the first function, the second function, and the third function are different from each other. This is because each random number becomes a different value, and authenticity can be reliably guaranteed.
The first function, the second function, and the third function may use different functions for each communication.

  The authentication system and the authentication method according to the present invention verify the existence of documents and drawings for which the authenticity of the date and contents is to be authenticated, for example, a document for demonstrating that the user has normal license by prior use, and the existence of prior art. It is publicly available for documents etc. In addition, it can be suitably used for transaction records, quality records, contracts, and other documents that need to be kept as records.

It is a system configuration figure showing an embodiment of an authentication system concerning the present invention. It is a data flow figure in embodiment of the authentication system which concerns on this invention. It is a flowchart which shows the operation | movement method in embodiment of the authentication system which concerns on this invention. It is a flowchart which shows the operation | movement method in embodiment of the authentication system which concerns on this invention.

Explanation of symbols

U user terminal C1 first authentication terminal C2 second authentication terminal 1 user terminal side transmission means 2 user terminal side first random number generation means 3 first authentication terminal side reception means 4 first authentication terminal side first random number generation means 5 first Random number comparison means 7 First authentication terminal side transmission / reception means 8 First authentication terminal side second random number creation means 9 First authentication terminal side third random number creation means 10 Third random number comparison means 12 Second authentication terminal transmission / reception means 13 Second authentication Terminal second random number creation means 14 Second random number comparison means 16 Second authentication terminal third random number creation means 18 Provision means 19 Verification means 21 Authentication object 22 Authentication application form 231.232 First random number 241.242 First random number 271. 272 First random number

Claims (4)

An electronic authentication system for authenticating an object to be authenticated provided by a user,
It consists of a user terminal, a first authentication terminal, a second authentication terminal,
The user terminal is
The user terminal side first random number generating means for storing the object to be authenticated and the authentication application in the same folder, and generating a first random number by a first function based on the object to be authenticated, the authentication application, and the folder, respectively. When,
A user terminal side transmission means for transmitting the authentication object and the folder storing the authentication application to a first authentication terminal;
The first authentication terminal is
First authentication terminal side receiving means for receiving the folder transmitted from the user terminal;
Based on the folder, the authentication object stored in the folder, and the authentication application, respectively, a first authentication terminal side first random number creation means for creating a first random number by the first function;
Based on the authentication application, the first authentication terminal side second random number creating means for creating the second random number by the second function,
First authentication terminal side transmission / reception means for transmitting the authentication application to the second authentication terminal and receiving the authentication application transmitted from the second authentication terminal;
Based on the authentication application sent from the second authentication terminal, the first authentication terminal side third random number creation means for creating a third random number by a third function,
The second authentication terminal is
A second authentication terminal side transmission / reception means for receiving the authentication application transmitted from the first authentication terminal and transmitting the authentication application to the first authentication terminal after authentication using an electronic notary system;
Based on the authentication application sent from the first authentication terminal, a second random number creation means on the second authentication terminal side for creating a second random number by a second function;
The second authentication terminal side third random number generating means for generating the third random number by a third function based on the authentication application authenticated by using the electronic notary system and authenticating the authentication application using the electronic notary system. Have
The first authentication terminal further includes first random number comparison means for comparing the first random numbers created in the respective terminals in communication of data between the user terminal and the first authentication terminal;
In communication of data between the first authentication terminal and the second authentication terminal, comprising third random number comparison means for comparing the third random number created by each terminal,
The second authentication terminal further includes a second random number comparison unit that compares a second random number created by each terminal in data communication between the first authentication terminal and the second authentication terminal. Electronic authentication system. The first authentication terminal further provides providing means for providing the authentication target and the authentication application to the user terminal;
2. The electronic authentication system according to claim 1, further comprising verification means for verifying the object to be authenticated and the authentication application provided by the providing means.   The electronic authentication system according to claim 1 or 2, wherein one or more of the first random number, the second random number, and the third random number are visibly written in the authentication application. An electronic authentication method for authenticating an object to be authenticated provided from a user terminal using a first authentication terminal and a second authentication terminal,
By the user terminal,
The authentication object and the authentication application are stored in the same folder, and based on the authentication object, the authentication application, and each of the folders, a first random number is created by a first function,
Transmitting the folder storing the authentication object and the authentication application to the first authentication terminal;
By the first authentication terminal,
Receiving the folder transmitted from the user terminal;
Based on the folder, the object to be authenticated stored in the folder, and the authentication application form, the first function creates a first random number,
Comparing the first random number created at the user terminal with the first random number created at the first authentication terminal;
By the first authentication terminal,
Based on the authentication application form, create a second random number using the second function,
Transmitting the authentication application to the second authentication terminal;
By the second authentication terminal,
Receiving the authentication application sent from the first authentication terminal;
Based on the authentication application form, create a second random number using the second function,
Comparing the second random number created at the first authentication terminal and the second random number created at the second authentication terminal;
By the second authentication terminal,
Authenticate the received application for certification using an electronic notary system,
Based on the certification application form certified using the electronic notary system, create a third random number using a third function,
Transmitting the authentication application form authenticated using an electronic notary system to the first authentication terminal;
By the first authentication terminal,
Receiving the authentication application sent from the second authentication terminal;
Based on the authentication application, create a third random number by the third function,
An electronic authentication method comprising a step of comparing the third random number created by the second authentication terminal and the third random number created by the first authentication terminal.

Images