JP2012209782A - Authentication system, authentication method and authentication management server - Google Patents

Abstract

PROBLEM TO BE SOLVED: To solve the problem that the design concept of online authentication must be changed.SOLUTION: An authentication system 10 includes: a bank settlement server 14 to which first distributed key information is distributed; a designated credit bureau server 16 to which second distributed key information is distributed; a certificate authority server 18 to which third distributed key information is distributed; and an issue authority server 20. The issue authority server 20 generates secret key information from the first, second and third distributed key information acquired from the bank settlement server 14, designated credit bureau server 16 and certificate authority server 18, and when acquiring an issuance request from a user via the Internet 6, sends an OTP based on the secret key information to the user. When acquiring the OTP from the user via the Internet 6, the certificate authority server 18 acquires the first, second and third distributed key information, generates secret key information therefrom, and verifies the OTP acquired from the user on the basis of the generated secret key information.

Description

  The present invention relates to an authentication system, an authentication method, and an authentication management server.

  Currently, various services such as commercial transactions can be received online due to the penetration of the Internet into society. For example, you can access the online mall from a personal computer or mobile phone and enjoy shopping there. Payment at online malls is usually done electronically, and there is no need to mail cash.

  However, it must be remembered that there is a risk inherent to online in the shadow of such convenience. Among such dangers, one of the recent close-ups is information leakage. In online processing, for example, authentication key information, user ID, and the like are carried from a hard disk drive of one server to a hard disk drive of another server using a wired, wireless, or combination communication path. Such information propagation is repeated many times. Somewhere in these stages, information can be leaked, for example, due to unauthorized duplication of information or interception of communications. If the authentication key information or user ID is leaked, it may be misused in the hands of a malicious third party.

  Conventionally, for example, Patent Document 1 proposes a joint purchase realizing device that facilitates provision of a joint purchase service with improved safety.

JP 2006-157670 A

  The Internet is basically a mechanism that is designed based on a good-natured theory, but this design philosophy is considered to be no longer suitable at the present time when a wide variety of people can connect to the Internet. As for security, symptomatic treatment focused on applications as described in Patent Document 1 is possible, but it will not be a fundamental solution. Therefore, it is necessary to change the design concept of online authentication.

  The present invention has been made in view of these problems, and an object thereof is to provide an authentication technique that realizes authentication that is more difficult to break.

  One embodiment of the present invention relates to an authentication system. This authentication system is an authentication system that uses N distributed key information and secret key information generated from the N distributed key information according to a predetermined rule when N is an integer of 2 or more. N-1 authentication related servers to which N-1 distributed key information is distributed one by one, an authentication unit holding the remaining one distributed key information, and N-1 authentication related servers The secret key information is generated according to the law from the N-1 distributed key information acquired from the network through the network and the distributed key information acquired from the authentication unit, and when the issuance request is acquired from the user through the network And an issuing unit that transmits authentication information based on the secret key information to the user via the network. When the authentication unit is requested to verify the authentication information, the N-1 distributed key information acquired from the N-1 authentication-related servers via the network and the distributed key information held by the authentication unit. Secret key information is generated according to the law, and the authentication information acquired from the user via the network is verified based on the secret key information generated by the authentication unit.

  According to this aspect, authentication information based on secret key information generated from N pieces of distributed key information in a situation where N pieces of distributed key information are distributed one by one to N-1 authentication-related servers and authentication units. Is transmitted to the user, and the authentication information acquired from the user is verified based on the secret key information generated by the authentication unit.

  Another aspect of the present invention is an authentication management server. When N is an integer of 2 or more, the authentication management server includes a distributed key holding unit that holds one of N pieces of distributed key information, and a user in advance according to a predetermined rule from the N pieces of distributed key information. When authentication information based on the generated secret key information is received, the authentication information is received by the authentication information receiving unit that receives the authentication information that the user transmits via the network, and the authentication information receiving unit receives the authentication information. And N-1 distributed keys via the network from N-1 authentication-related servers to which N-1 distributed key information other than the distributed key information held by the distributed key holding unit is distributed one by one. A secret that generates secret key information according to the law from a distributed key acquisition unit that acquires information, and N-1 pieces of distributed key information acquired by the distributed key acquisition unit and distributed key information held by the distributed key holding unit Comprising a generating unit, and a verification unit for verifying, based on the secret key information received authentication information generated by the secret key generation unit by the authentication information receiving unit.

  Yet another embodiment of the present invention is also an authentication management server. Regardless of the issuance request from the user, this authentication management server, when N is an integer of 2 or more, from N authentication related servers to which N pieces of distributed key information are distributed one by one via the network A distributed key acquiring unit for acquiring N distributed key information, a secret key generating unit for generating secret key information according to a predetermined rule from the N distributed key information acquired by the distributed key acquiring unit, and a network from the user An issuance request acquisition unit for acquiring an issuance request via the network, and when the issuance request is acquired by the issuance request acquisition unit, authentication information based on the secret key information generated by the secret key generation unit is transmitted to the user via the network. An authentication information transmitting unit. In response to receiving the authentication information transmitted by the authentication information transmitting unit, the user transmits authentication information to one of N authentication-related servers via the network, and the authentication-related server authenticates from the user via the network. When the information is received, the secret key according to the law from the N-1 distributed key information acquired from the other N-1 authentication related servers via the network and the distributed key information distributed to the authentication related server. Information is generated, and the authentication information acquired from the user via the network is verified based on the secret key information generated by the authentication-related server.

  Yet another embodiment of the present invention is also an authentication management server. In this authentication management server, when N is an integer of 2 or more, an authentication unit that holds one of N pieces of distributed key information and N−1 distributed items other than the distributed key information held by the authentication unit In accordance with a predetermined rule, N-1 distributed key information acquired from the N-1 authentication-related servers to which key information is distributed one by one through the network and distributed key information acquired from the authentication unit. And an issuing unit that generates secret key information and transmits authentication information based on the secret key information to the user via the network when an issuance request is obtained from the user via the network. When the authentication unit is requested to verify the authentication information, the N-1 distributed key information acquired from the N-1 authentication-related servers via the network and the distributed key information held by the authentication unit. Secret key information is generated according to the law, and the authentication information acquired from the user via the network is verified based on the secret key information generated by the authentication unit.

  It should be noted that any combination of the above-described constituent elements, and those in which constituent elements and expressions of the present invention are mutually replaced between apparatuses, methods, systems, programs, recording media storing programs, and the like are also aspects of the present invention. It is effective as

  According to the present invention, authentication that is more difficult to break can be realized.

It is a schematic diagram which shows the structure of the authentication system which concerns on embodiment. It is a data structure figure which shows an example of the 1st distribution key management table of FIG. It is a data structure figure which shows an example of the service authentication management table of FIG. It is a data structure figure which shows an example of the utilization judgment entrustment destination table of FIG. It is a data structure figure which shows an example of the 1st availability table of FIG. It is a data structure figure which shows an example of the 2nd distribution key management table of FIG. It is a data structure figure which shows an example of the 2nd availability table of FIG. It is a data structure figure which shows an example of the 3rd distribution key management table of FIG. It is a data structure figure which shows an example of the 1st distribution key acquisition destination table of FIG. FIG. 2 is a data structure diagram illustrating an example of an OTP issue destination table in FIG. 1. It is a data structure figure which shows an example of the private key management table of FIG. It is a data structure figure which shows an example of the authentication destination management table of FIG. It is a block diagram which shows the function and structure of an issuing authority server of FIG. It is a block diagram which shows the function and structure of the certification authority server of FIG. It is a chart which shows an example of a series of processes in the authentication system of FIG. 1 along a time series. FIG. 16 is a continuation chart of FIG. 15. FIG. It is a typical screen figure of a payment screen. It is a typical screen figure of an OTP input screen. It is a flowchart which shows an example of the original authentication process in a former bank settlement server. It is a representative screen figure of an authentication success screen. It is a typical screen figure of a payment screen.

  The present invention will be described below based on preferred embodiments with reference to the drawings. The same or equivalent components, members, and processes shown in the drawings are denoted by the same reference numerals, and repeated descriptions are omitted as appropriate.

  FIG. 1 is a schematic diagram illustrating a configuration of an authentication system 10 according to an embodiment. The authentication system 10 is connected to a user PC (Personal Computer) 2 of a user via a network such as the Internet 6. The authentication system 10 includes a second electronic store server 12, a bank A settlement server 14, a designated credit information institution server 16, a certification authority server 18, and an issuing authority server 20. The electronic store server 12, the bank A settlement server 14, the designated credit information institution server 16, the certification authority server 18, and the issuing authority server 20 are all connected to the Internet 6. The issuing station server 20 is connected to the mobile communication network 8 which is a network different from the Internet 6. The user has a user PC 2 and a user mobile phone 4, the user PC 2 is connected to the Internet 6, and the user mobile phone 4 is connected to a mobile communication network 8.

  The OT electronic store that manages the OT electronic store server 12 entrusts the KO bank that manages the OB bank settlement server 14 to provide an online settlement function on an EC (Electronic Commerce) site provided by the OT electronic store server 12. The Bank A settlement server 14 provides the EC site with a network settlement function via the Internet 6. Bank A entrusts the use authentication in the Internet payment to a security service company that manages both the certificate authority server 18 and the issuing authority server 20.

  “Usage authentication” is, for example, determining whether or not the user may use online payment. “Usage authentication” may be user authentication for determining the authenticity of a user, or may include user authentication as a part thereof.

Bank A entrusts credit authentication based on credit information to a designated credit information organization that manages the designated credit information organization server 16.
"Credit authentication" is built into the usage authentication process as part of usage authentication. For example, online payment may be used based on the user's age, gender, predecessor (sex crime history, etc.), self-bankruptcy history, etc. It is to determine whether or not.

  In the authentication system 10, three distributed key information distributed to the first bank settlement server 14, the designated credit information institution server 16, and the certificate authority server 18 one by one, and a predetermined combination rule from the three distributed key information. Accordingly, use authentication is performed using the secret key information generated.

  Therefore, the certificate authority server 18 alone does not complete the use authentication in the net settlement, and the bank A participates in the process of the use authentication, so the bank can control the risk of the authentication. As a result, even if one or more of Sakai Security Service Company, Designated Credit Information Agency, or Party Bank itself leaks information and a malicious third party obtains the information, there is a possibility that usage authentication may be broken. Lower. Therefore, a more secure option other than the fact that the Bank fully trusts Sakai Security Service and “round-throws” the usage authorization there, that is, a more secure option based on the sex theory that neither operator trusts each other. An authentication system can be provided.

For example, when the secret key information is expressed as SS (Shared Secret) 4 and the three distributed key information is expressed as SS1, SS2, SS3, SS4 is generated from SS1, SS2, SS3 according to the following formula 1. It is to be.
SS4 = F (SS1, SS2, SS3) (Formula 1)
Here, F (x, y, z) is a function having values x, y, and z as variables. According to this rule, SS4 cannot be obtained unless SS1, SS2, and SS3 are all available.
Alternatively, the predetermined combination rule may be based on a known threshold encryption algorithm.

In the authentication system 10 according to the present embodiment, three pieces of distributed key information and secret key information are set for each user. That is, a combination of three pieces of distributed key information and secret key information generated from the three pieces of distributed key information is set for one user, and a different combination is set for each of a plurality of users. ing.
In addition, the number of distributed key information is set for each Internet payment service, for example, for each type of Internet payment service. For example, three pieces of distributed key information are used in normal payment, and two pieces are used in simple payment. This makes it possible to freely set the security strength, the labor and time required for authentication, which are in a trade-off relationship, for each service.

  The electronic store server 12 is a server that provides a predetermined service, here EC, to the user via the Internet 6. The electronic store server 12 includes a processing unit and a holding unit (both not shown), and the holding unit holds the authentication destination management table 22. The processing unit of the electronic shopping server 12 displays the EC site in which the Internet settlement function provided by the Bank A settlement server 14 is incorporated on the display of the user PC 2 via the Internet 6. The processing unit of the electronic shopping server 12 redirects the user PC 2 to the certificate authority server 18 for use authentication when net payment is designated on the EC site.

  The certificate authority server 18 and the issuing authority server 20 are servers that perform use authentication in Internet payment via the Internet 6 and the mobile communication network 8. The certificate authority server 18 includes a processing unit 114 and a holding unit 116 (both shown in FIG. 14). The holding unit 116 includes third distributed key information 40, a third distributed key management table 42, and a first distributed key. The acquisition destination table 44 and the OTP issue destination table 46 are held. The issuing authority server 20 includes a processing unit 102 and a holding unit 104 (both shown in FIG. 13). The holding unit 104 has secret key information 48, a secret key management table 50, and a second distributed key acquisition destination table 52. And hold.

  When the user PC 2 is redirected, the certificate authority server 18 notifies the user via the Internet 6 to transmit an issue request from the user mobile phone 4 to the issuing authority server 20. When the issuing station server 20 obtains an issuance request from the user via the mobile communication network 8, the issuing station server 20 specifies secret key information corresponding to the user, and provides authentication information based on the specified secret key information, for example, secret key information. A one-time password (hereinafter referred to as OTP) generated by a predetermined generation algorithm as input is transmitted to the user via the mobile communication network 8. The certificate authority server 18 acquires an OTP from the user via the Internet 6 and verifies it. The issuance request is information requesting issuance of OTP in use authentication, for example.

The Bank A settlement server 14 is a server that provides a predetermined resource and service, in this case, a net settlement function, to the electronic store server 12 via the Internet 6. If it is determined as a result of verification in the certificate authority server 18 that the user may use net payment, the bank A payment server 14 displays a predetermined payment site on the display of the user PC 2 via the Internet 6.
The Bank A settlement server 14 has a processing unit and a holding unit (both not shown), and the holding unit uses the first distributed key information 24, the first distributed key management table 26, the service authentication management table 28, and the use The determination entrustee table 30 and the first availability table 32 are held.

  The designated credit information institution server 16 is a server that performs credit authentication as part of usage authentication. The designated credit information agency server 16 has a processing unit and a holding unit (both not shown), and the holding unit includes a second distributed key information 34, a second distributed key management table 36, a second availability table 38, and the like. Hold.

  FIG. 2 is a data structure diagram showing an example of the first distributed key management table 26. The first distributed key management table 26 includes a user ID that identifies a user, a service ID that identifies a net payment service provided by the Bank settlement server 14, a first distributed key ID that identifies first distributed key information, Are stored in association with each other. In FIG. 2, the service ID for specifying the online payment service for normal payment on the EC site provided by the electronic store server 12 is “Ko Bank normal payment @EC”, and the service ID for specifying the simple payment online payment service. Is “Simple settlement @ EC”. The first distributed key ID is an ID for identifying first distributed key information corresponding to the user ID and service ID in the bank settlement server 14, and is, for example, a name of the first distributed key information, an address in the holding unit, or the like.

  FIG. 3 is a data structure diagram showing an example of the service authentication management table 28. The service authentication management table 28 includes a service ID, an ID for identifying an issuing authority server managed by a business operator entrusted with use authentication for the Internet settlement service identified by the bank A, and the business operator. An ID that identifies the certificate authority server to be managed is stored in association with each other. The ID that identifies the server is, for example, the URL (Uniform Resource Locator) of the server. In FIG. 3, the URL of the certificate authority server 18 is “www.ninshou1...” And the URL of the issuing authority server 20 is “www.hakkou...

  FIG. 4 is a data structure diagram illustrating an example of the usage determination entrustment destination table 30. The use determination entrustment destination table 30 holds a service ID and a URL of a server managed by an institution that entrusts credit authentication for the Internet settlement service specified by the bank A with the service ID in association with each other. In FIG. 4, the URL of the designated credit information institution server 16 is “www.ninshou2... The use determination entrustment destination table 30 is used to update the acquisition destination of the distributed key information by being transmitted to the certificate authority server 18 and the issuing authority server 20 or being referred to by the certificate authority server 18 and the issuing authority server 20. May be.

  FIG. 5 is a data structure diagram illustrating an example of the first availability table 32. The first availability table 32 is a so-called black list set by the Bank, and stores a service ID, a user ID, and information on availability in association with each other. The information regarding availability is set to “permitted” if the bank accepts the use of the user specified by the user ID for the online settlement service specified by the service ID, and “not permitted” otherwise. .

  FIG. 6 is a data structure diagram showing an example of the second distributed key management table 36. The second distributed key management table 36 holds a user ID, a service ID, and a second distributed key ID that specifies the second distributed key information in association with each other. The second distributed key ID is an ID for specifying the second distributed key information corresponding to the user ID and the service ID in the designated credit information institution server 16.

  FIG. 7 is a data structure diagram showing an example of the second availability table 38. The second availability table 38 is a so-called black list set by the designated credit information organization, and stores a service ID, a user ID, and information on availability in association with each other. Information regarding availability is set to “Yes” if the designated credit information organization allows the use of the user specified by the user ID for the online payment service specified by the service ID, and to “No” if not allowed. Is done.

  FIG. 8 is a data structure diagram showing an example of the third distributed key management table 42. The third distributed key management table 42 holds a user ID, a service ID, and a third distributed key ID that specifies the third distributed key information in association with each other. The third distributed key ID is an ID for specifying third distributed key information corresponding to the user ID and the service ID in the certificate authority server 18.

FIG. 9 is a data structure diagram illustrating an example of the first distributed key acquisition destination table 44. The first distributed key acquisition destination table 44 holds the service ID and the URL of the server from which the distributed key information is acquired in the use authentication of the net settlement service specified by the service ID, in association with each other. It can be said that the first distributed key acquisition destination table 44 holds the number of distributed key information used and the distribution destination of the distributed key information for each net settlement service. In FIG. 9, the URL of the bank A settlement server 14 is “www.koubank....”
The configuration of the second distributed key acquisition destination table 52 is the same as the configuration of the first distributed key acquisition destination table 44.

  FIG. 10 is a data structure diagram showing an example of the OTP issue destination table 46. The OTP issue destination table 46 holds the service ID and the URL of the issuing authority server that issues the OTP in the use authentication of the net settlement service specified by the service ID in association with each other.

  FIG. 11 is a data structure diagram showing an example of the secret key management table 50. The secret key management table 50 holds a user ID, a service ID, and a secret key ID that specifies secret key information in association with each other. The secret key ID is an ID for specifying secret key information corresponding to the user ID and the service ID in the issuing authority server 20.

  FIG. 12 is a data structure diagram showing an example of the authentication destination management table 22. The authentication destination management table 22 holds a service ID and a URL of a redirect destination server for performing use authentication of the net settlement service specified by the service ID in association with each other.

FIG. 13 is a block diagram showing the function and configuration of the issuing authority server 20. Each block shown here can be realized in hardware by an element or a mechanical device such as a CPU (central processing unit) of a computer, and is realized by a program in software. Describes functional blocks realized by collaboration. Therefore, it is understood by those skilled in the art who have touched this specification that these functional blocks can be realized in various forms by a combination of hardware and software.
For clarity of explanation, the secret key information 48 is not shown in FIG.

  The issuing station server 20 includes a processing unit 102 and a holding unit 104. The processing unit 102 includes a first distributed key acquisition unit 106, a first secret key generation unit 108, an issue request acquisition unit 110, and an OTP transmission unit 112.

The processing unit 102 periodically updates the secret key information, for example, regardless of the acquisition request from the user.
The first distributed key acquisition unit 106 periodically acquires distributed key information from the distribution key distribution destination via the Internet 6 for each user and for each net payment service. For example, once a day, the first distributed key acquisition unit 106 refers to the second distributed key acquisition destination table 52 and specifies the distribution destination of distributed key information for a user and a certain net settlement service. The first distributed key acquisition unit 106 inquires of the specified distribution destination server for distributed key information via the Internet 6. The first distributed key acquisition unit 106 receives the distributed key information transmitted in response to the inquiry.

  The first secret key generation unit 108 generates secret key information from the distributed key information acquired by the first distributed key acquisition unit 106 according to the combination rule. The first secret key generation unit 108 causes the holding unit 104 to hold the generated secret key information for each user and for each net payment service, and registers it in the secret key management table 50.

  The issue request acquisition unit 110 acquires an issue request from the user's user mobile phone 4 via the mobile communication network 8. This issuance request includes the service ID of the net settlement service that is the object of use authentication.

  When the issuance request acquisition unit 110 obtains the issuance request, the OTP transmission unit 112 obtains the secret key ID corresponding to both the user ID of the user who transmitted the issuance request and the service ID included in the issuance request from the secret key management table 50. Extract. The OTP transmission unit 112 acquires the secret key information specified by the extracted secret key ID from the holding unit 104. The OTP transmission unit 112 generates an OTP using a generation algorithm that receives the acquired secret key information, and transmits the generated OTP to the user mobile phone 4 via the mobile communication network 8.

FIG. 14 is a block diagram showing the function and configuration of the certificate authority server 18. Each block shown here can be realized in hardware by an element such as a CPU of a computer or a mechanical device, and in software it is realized by a program or the like. Draw functional blocks. Therefore, it is understood by those skilled in the art who have touched this specification that these functional blocks can be realized in various forms by a combination of hardware and software.
For the sake of clarity, the third distributed key information 40 is not shown in FIG.

  The certificate authority server 18 includes a processing unit 114 and a holding unit 116. The processing unit 114 includes an OTP input request unit 118, an OTP reception unit 120, a second distributed key acquisition unit 122, a second secret key generation unit 124, and a verification unit 126.

  When the user PC 2 is redirected by the electronic store server 12, the OTP input request unit 118 displays the URL of the issuing authority server that issues the OTP in the use authentication of the net settlement service that causes the redirect to the OTP issue destination table 46. To determine. The OTP input request unit 118 displays the determined URL of the issuing station server on the display of the user PC 2 via the Internet 6 and requests input of OTP.

  The user inputs the URL displayed on the display of the user PC 2 into the browser of the user mobile phone 4. The user mobile phone 4 accesses the issuing station server, in this case, the issuing station server 20, via the mobile communication network 8. When the user mobile phone 4 receives the OTP from the issuing station server 20 via the mobile communication network 8, the user views the received OTP and inputs the OTP to the user PC 2. The user PC 2 transmits the OTP to the certificate authority server 18 via the Internet 6. The OTP receiving unit 120 receives the OTP transmitted as described above.

  When the OTP is received by the OTP receiver 120, the second distributed key acquisition unit 122 sends the Internet 6 from the distribution key distribution destination to the user who transmitted the OTP and the Internet payment service that is the subject of the usage authentication. To obtain distributed key information. The second distributed key acquisition unit 122 refers to the first distributed key acquisition destination table 44 and identifies the distribution destination of the distributed key information for the net settlement service that is the object of use authentication. The second distributed key acquisition unit 122 inquires of the specified distribution destination server about the distributed key information via the Internet 6. The second distributed key acquisition unit 122 receives the distributed key information transmitted in response to the inquiry. When one of the distribution destinations is the certificate authority server 18 itself, the second distributed key acquisition unit 122 acquires the corresponding third distributed key information from the holding unit 116.

  The second secret key generation unit 124 generates secret key information from the distributed key information acquired by the second distributed key acquisition unit 122 according to the combination rule. It can be said that the second secret key generation unit 124 dynamically generates secret key information in response to the OTP reception by the OTP reception unit 120.

  The verification unit 126 verifies the OTP received by the OTP reception unit 120 based on the secret key information generated by the second secret key generation unit 124. In particular, the verification unit 126 generates an OTP by a generation algorithm that receives the secret key information generated by the second secret key generation unit 124, and the generated OTP matches the OTP received by the OTP reception unit 120. It is determined whether or not. The generation algorithm used here is the same as the generation algorithm used in the OTP transmission unit 112. If they match, the verification unit 126 determines that the user may use online payment, and if they do not match, the verification unit 126 determines that the user cannot use. If it is determined that the verification unit 126 may use the signature, the signature key information corresponding to the verification key information owned by the electronic store server 12 is transmitted to the user PC 2 via the Internet 6.

  After the verification, the verification unit 126 discards the OTP used for verification and the generated secret key information. Thereby, the risk of leakage of OTP and secret key information can be reduced.

The operation of the authentication system 10 having the above configuration will be described.
FIG. 15 is a chart illustrating an example of a series of processes in the authentication system 10 along a time series. FIG. 16 is a continuation chart of FIG. The first distributed key acquisition unit 106 of the issuing authority server 20 periodically inquires about the distributed key information for, for example, the user ID “A001” and the service ID “Kou Bank Normal Settlement @EC”. The first distributed key acquisition unit 106 refers to the second distributed key acquisition source table 52, specifies the bank A settlement server 14, the designated credit information institution server 16 and the certificate authority server 18 as inquiry destinations, and uses the user ID “A001” and First SS inquiry signals S1, S2 and S3 including service ID “Bank A normal settlement @EC” are transmitted to each inquiry destination via the Internet 6 (S202).

  The processing unit of the bank A settlement server 14, the processing unit of the designated credit information agency server 16, and the processing unit 114 of the certificate authority server 18 have their respective holding units in response to the reception of the first SS inquiry signals S1, S2, and S3. First SS response signals S4, S5, and S6 including the corresponding distributed key information are transmitted to the issuing station server 20 via the Internet 6. The first distributed key acquisition unit 106 of the issuing station server 20 receives the first SS response signals S4, S5, and S6 (S204). The first secret key generation unit 108 of the issuing station server 20 uses the three distributed key information included in the received first SS response signals S4, S5, and S6 to obtain the user ID “A001” and the service ID “Kou Bank Normal Settlement @ Secret key information for “EC” is generated, held in the holding unit 104, and registered in the secret key management table 50 (S206). The issuing station server 20 performs the above processing for each user and for each net settlement service.

The user with the user ID “A001” selects a product on an EC site provided by the electronic shop server 12 via the Internet 6 and designates a normal payment network payment service provided by the Bank on the payment screen.
FIG. 17 is a representative screen diagram of the payment screen 300. The payment screen 300 includes a payment information display area 302, a normal payment button 304, a simple payment button 306, a cash on delivery button 308, and a credit card button 310. When the user depresses the normal payment button 304, a normal payment network payment service is designated.

  Returning to FIG. 15, the user PC 2 transmits the designation of the online payment service for the normal payment by the user as the payment request S 7 to the electronic store server 12 via the Internet 6 (S 208). Upon receiving the settlement request S7, the electronic store server 12 determines whether or not it is necessary to update the verification key information for verifying the signature key information issued by the certificate authority server 18, via the Internet 6. (S210). The certificate authority server 18 transmits new verification key information to the electronic store server 12 via the Internet 6 if new update key information is necessary (S212).

  Upon receiving the settlement request S7, the electronic store server 12 refers to the authentication destination management table 22 shown in FIG. 12, and designates the redirect destination corresponding to the net settlement service of the normal settlement designated by the user as the certificate authority server 18. And the user PC 2 is redirected to the URL of the certificate authority server 18 (S214). At the time of this redirection, the user ID “A001” and the service ID “Kou Bank Normal Settlement @EC” are notified from the electronic store server 12 or the user PC 2 to the certificate authority server 18 that is the redirect destination.

  When the user PC 2 is redirected, the OTP input request unit 118 of the certificate authority server 18 refers to the OTP issue destination table 46 shown in FIG. The issuing station server that issues the OTP is determined as the issuing station server 20. The OTP input request unit 118 of the certificate authority server 18 displays the URL “www.hakkou....” Of the determined issuing authority server 20 and displays an OTP input screen for prompting the input of the OTP via the Internet 6 on the display of the user PC 2. To display. In particular, the OTP input request unit 118 of the certificate authority server 18 transmits screen information for displaying the OTP input screen on the display as the OTP input request S8 to the user PC 2 (S216).

  FIG. 18 is a representative screen diagram of the OTP input screen 312. The OTP input screen 312 has a URL display area 314, a service ID display area 316, an OTP input area 318, and an OK button 320. In the URL display area 314, the URL of the issuing authority server 20 determined by the certificate authority server 18 is displayed. In the service ID display area 316, the service ID of the normal payment network payment service designated by the user is displayed. The OTP input area 318 and the OK button 320 will be described later.

  Returning to FIG. 15, the user inputs the URL “www.hakkou....” Displayed in the URL display area 314 in the browser of the user mobile phone 4, and the user mobile phone 4 inputs the input URL “www.hakkou.. The issuing station server 20 is accessed via the mobile communication network 8 based on the above. A predetermined user authentication using a user ID “A001” and a password is performed between the issuing authority server 20 and the user. If the user authentication is successful, the user inputs the service ID “Kou Bank Normal Settlement @ EC” displayed in the service ID display area 316 to the user mobile phone 4, and the user mobile phone 4 sets the service ID “Koh Bank Normal Settlement @ EC”. An issuance request S9 including “EC” is transmitted to the issuing station server 20 via the mobile communication network 8 to request issuance of OTP (S218).

  The issue request acquisition unit 110 of the issuing station server 20 receives the issue request S9. When the issuance request acquisition unit 110 receives the issuance request S9, the OTP transmission unit 112 of the issuing authority server 20 receives the user ID “A001” authenticated by the user authentication from the private key management table 50 shown in FIG. The secret key ID “SS4A” corresponding to the service ID “Extra settlement of bank A @ EC” included in the issue request S9 is extracted (S220). The OTP transmission unit 112 generates an OTP based on the secret key information specified by the extracted secret key ID “SS4A” (S222). The OTP transmission unit 112 transmits an OTP issue signal S10 including the generated OTP to the user mobile phone 4 via the mobile communication network 8 (S224).

  Referring to FIG. 16, when receiving the OTP issue signal S10, the user mobile phone 4 displays the OTP included in the OTP issue signal S10 on the display of the user mobile phone 4. The user confirms the OTP on the display of the user mobile phone 4, enters the OTP in the OTP input area 318 of the OTP input screen 312 shown in FIG. 18, and depresses the OK button 320. When the OK button 320 is pushed down, the user PC 2 transmits an authentication request S11 including the OTP input in the OTP input area 318 to the certificate authority server 18 via the Internet 6 (S226).

  The OTP receiver 120 of the certificate authority server 18 receives the authentication request S11. When the authentication request S11 is received by the OTP receiving unit 120, the second distributed key obtaining unit 122 of the certificate authority server 18 inquires about the distributed key information for the user ID “A001” and the service ID “Ko Bank Normal Settlement @EC”. . The second distributed key acquisition unit 122 refers to the first distributed key acquisition destination table 44 and identifies the bank A settlement server 14, the designated credit information institution server 16 and the certificate authority server 18 themselves as inquiry destinations. The second distributed key acquisition unit 122 extracts the third distributed key ID “SS3A” corresponding to both the user ID “A001” and the service ID “Extraordinary bank settlement @EC” from the third distributed key management table 42, The third shared key information specified by the extracted third shared key ID “SS3A” is acquired from the holding unit 116. In addition, the second distributed key acquisition unit 122 sends the second SS inquiry signals S12 and S13 including the user ID “A001” and the service ID “Kou Bank Normal Settlement @EC” to the Internet 6 for each inquiry destination other than the certificate authority server 18 itself. (S228).

  Upon receipt of the second SS inquiry signals S13 and S12, the bank A settlement server 14 and the designated credit information institution server 16 perform original authentication based on the criteria set by themselves (S230 and S232). The result of the original authentication here constitutes a necessary condition for successful use authentication, but it is not a sufficient condition.

  If the user specified by the user ID “A001” included in the received second SS inquiry signal S13 is registered as an object that should not be authenticated in the bank A settlement server 14, Transmission of the first distributed key information corresponding to the user ID “A001” held by the holding unit of the bank settlement server 14 to the certificate authority server 18 is restricted.

  FIG. 19 is a flowchart showing an example of unique authentication processing in the Bank A settlement server 14. The processing unit of the Bank A settlement server 14 receives the second SS inquiry signal S13 (S302), and extracts the user ID “A001” and the service ID “Bank A normal settlement @EC” from the received second SS inquiry signal S13. (S304). The processing unit determines whether or not the combination of the extracted service ID “Extraordinary bank settlement @EC” and the certificate authority server 18 that is the transmission source of the second SS inquiry signal S13 is registered in the service authentication management table 28. (S306). If not registered (N in S306), the processing unit notifies the certificate authority server 18 that authentication is not permitted (S310). Thereby, for example, it is possible to confirm whether or not the inquiry about the distributed key information is an inquiry from a certificate authority server entrusted with usage authentication by the Bank.

  If it is registered (Y in S306), the processing unit identifies the user identified by the extracted user ID “A001” and the normal settlement network identified by the service ID “Extraordinary Bank settlement @EC” extracted. Whether or not the settlement service may be used is determined with reference to the first availability table 32 (S308). When it is determined that it cannot be used (No in S308), the processing unit notifies the certification authority server 18 via the Internet 6 that authentication is not permitted (S310). If it is determined that the service can be used (Yes in S308), the processing unit determines from the first distributed key management table 26 that the first distributed key corresponding to both the user ID “A001” and the service ID “Bank A normal settlement @ EC”. The ID “SS1A” is extracted (S312). The processing unit acquires the first distributed key information specified by the extracted first distributed key ID “SS1A” from the holding unit of the A-bank settlement server 14, and the second SS response including the acquired first distributed key information The signal S14 is transmitted to the certificate authority server 18 via the Internet 6 (S314).

  When the designated credit information institution server 16 is registered as a target that the user specified by the user ID “A001” included in the received second SS inquiry signal S12 should not be authenticated in the designated credit information institution server 16, Transmission of the second distributed key information corresponding to the user ID “A001” held by the holding unit of the designated credit information organization server 16 to the certificate authority server 18 is restricted. An example of a unique authentication process in the designated credit information agency server 16 is the same as that shown in FIG.

  Returning to FIG. 16, when the processing unit 114 of the certificate authority server 18 receives a notification that the authentication is not permitted from the Bank A settlement server 14 or the designated credit information institution server 16, the processing unit 114 informs the user PC 2 that the authentication is not successful. (S234) to interrupt or end the use authentication process.

  The second distributed key acquisition unit 122 of the certificate authority server 18 receives the second SS response signals S14 and S15 from all of the inquiry destinations, that is, the former bank settlement server 14 and the designated credit information institution server 16 (S236). The second distributed key acquisition unit 122 receives the two distributed key information (that is, the user ID “A001” and the service ID “Extraordinary bank settlement @EC”) from the received second SS response signals S14 and S15. First shared key information and second shared key information) corresponding to both are extracted (S238).

  The second secret key generation unit 124 of the certificate authority server 18 uses the first distributed key information and the first distributed key information acquired by the second distributed key acquisition unit 122 for the user ID “A001” and the service ID “Extraordinary bank settlement @EC”. Secret key information is generated from the two distributed key information and the third distributed key information in accordance with the combination rule (S240).

  The verification unit 126 of the certificate authority server 18 generates an OTP based on the generated secret key information (S242), and determines whether or not the generated OTP matches the OTP included in the authentication request S11 ( S244). If they do not match, the processing unit 114 of the certificate authority server 18 notifies the user PC 2 of unsuccessful use authentication via the Internet 6 (S246), and interrupts or ends the use authentication process. If they match, the verification unit 126 of the certificate authority server 18 transmits an authentication success signal S16 including the signature key information to the user PC 2 via the Internet 6 (S248).

  Upon receiving the authentication success signal S16, the user PC 2 extracts signature key information from the received authentication success signal S16. The user PC 2 transmits a signature key presentation signal S17 including the extracted signature key information to the electronic store server 12 via the Internet 6 (S250).

  When receiving the signature key presentation signal S17, the processing unit of the electronic store server 12 verifies the signature key information included in the received signature key presentation signal S17 with the verification key information held in advance (S252). As a result of the verification, if it is determined that the verification key information and the signature key information do not correspond, the processing unit of the electronic store server 12 notifies the user PC 2 of unsuccessful use authentication via the Internet 6 (S254). Suspend or end the usage authentication process. As a result of the verification, if it is determined that the verification key information and the signature key information correspond to each other, the processing unit of the electronic shopping server 12 displays an authentication success screen on the display of the user PC 2 and the user PC 2 displays the user PC 2 on the bank settlement server 14. Redirect to the settlement site to be provided (S256). Thereafter, settlement processing is performed between the bank A settlement server 14 and the user PC 2 through the settlement site (S258).

FIG. 20 is a representative screen diagram of the authentication success screen 322.
FIG. 21 is a representative screen diagram of the settlement screen 324. In the settlement process in step S258, the Bank A settlement server 14 displays the settlement screen 324 on the display of the user PC2.

  In the above-described embodiment, examples of the holding unit are a hard disk and a memory. Based on the description in this specification, each unit is realized by a CPU (not shown), an installed application program module, a system program module, a memory that temporarily stores the contents of data read from the hard disk, and the like. It is understood by those skilled in the art who have touched this specification that they can do this.

According to the authentication system 10 according to the present embodiment, a use authentication mechanism that is more difficult to break can be realized. We will explain how this mechanism works in the following four situations.
(1) Up to two of the first distributed key information, the second distributed key information, and the third distributed key information from the inside of the Bank, designated credit information agency, Sakai Security Service Company, or by communication interception on the Internet 6 In this case, since the secret key information cannot be generated unless all of the first distributed key information, the second distributed key information, and the third distributed key information are prepared, the distributed key leaked by a malicious third party Even if the information is obtained, the OTP required for authentication in the certificate authority server 18 cannot be generated.

(2) When an OTP transmitted from the issuing station server 20 to the user mobile phone 4 is intercepted In this case, a genuine user who is generally in the authentication process generally receives an OTP earlier than a malicious third party. Send to 18. Then, after the OTP is verified in the certificate authority server 18, the OTP is discarded. Therefore, even if the intercepted OTP is transmitted from a malicious third party, the verification does not pass. Further, even if a malicious third party sends the OTP to the certificate authority server 18 earlier than the authentic user, the authentic user may notice the presence of the malicious third party when his OTP is denied. it can.

(3) When the private key information is leaked to the outside and a malicious third party can copy the OTP. In this case, for example, at least one of the Bank A, designated credit information agency, and Sakai Security Service Company However, the risk of OTP duplication can be avoided by updating its own distributed key information at an arbitrary timing, for example, periodically. That is, the leaked (possible) secret key information can be invalidated at an arbitrary timing.

(4) When the user forges the signature key information and provides the forged electronic store server 12 with the forged signature key information without passing through the certificate authority server 18 or the issuing authority server 20 In this case, the signature in the electronic store server 12 Although the key verification may pass, the bank settlement server 14 has not received a request for the distributed key information from the certificate authority server 18 for the net settlement service related to the forged signature key information. Can be detected. That is, when the distributed key information related to the use authentication is distributed to the Bank A settlement server 14, it is possible to detect such a case where the signature key is forged.

  In the authentication system 10 according to the present embodiment, the Bank A settlement server 14 has the first distributed key information, and the first distributed key information in response to an inquiry from the certificate authority server 18 at the time of use authentication. It will participate in the use authentication through whether or not to provide. Accordingly, the bank itself entrusting the use authentication to the Sakai Security Service Company can control the authentication risk. In addition, the Bank A can make an authentication judgment to the user in light of a black list that can be set by itself, that is, the first availability table 32.

  Further, in the authentication system 10 according to the present embodiment, the designated credit information agency server 16 has the second distributed key information, and the second distributed key in response to an inquiry from the certificate authority server 18 at the time of use authentication. You will participate in user authentication through whether or not you provide information. Therefore, the designated credit information organization entrusted with credit authentication from the Bank A can make an authentication judgment for the user in light of the credit information. As a result, Bank A can set the outsourcer appropriately, and can incorporate authentication judgment based on the judgment axis, which is difficult to set by itself or Sakai Security Service, into the use authentication.

  In the authentication system 10 according to the present embodiment, the issuing authority server 20 inquires and acquires the distributed key information regardless of the acquisition request from the user. Therefore, the amount of communication necessary for one use authentication can be reduced as compared with the case where distributed key information is inquired upon acquisition of an issuance request from a user. Further, since it is not necessary for the issuing authority server 20 to inquire about the distributed key information in synchronization with acquisition of the issue request from the user, it is possible to collect the distributed key information during a relatively small period of traffic such as at night. Efficient.

  Further, the authentication system 10 according to the present embodiment issues an OTP based on the secret key information to the user. Thereby, compared with the case where other more complicated authentication information is used, a user's burden and trouble can be reduced. In particular, it is relatively easy to type the OTP into the user PC 2, and a realistic authentication system that uses both the user PC 2 and the user mobile phone 4 is provided. Usage authentication can be made more secure by increasing the number of user terminals involved in usage authentication.

  The configuration and operation of the authentication system 10 according to the embodiment has been described above. This embodiment is an exemplification, and it is understood by those skilled in the art that various modifications can be made to each component and combination of processes, and such modifications are within the scope of the present invention.

  In the embodiment, the authentication system 10 has described the case of using three pieces of distributed key information and the secret key information generated from the three pieces of distributed key information according to the combining rule. However, the present invention is not limited to this. When N is an integer greater than or equal to 2, any authentication system that uses N pieces of distributed key information and secret key information generated from the N pieces of distributed key information according to a predetermined rule may be used. The authentication system may include a certificate authority server and N-1 authentication-related servers, and N pieces of distributed key information may be distributed to N-1 authentication-related servers and certificate authority servers one by one. The Bank A settlement server may be one of N-1 authentication-related servers. The designated credit information agency server may be one of N-1 authentication-related servers. The electronic store server may be one of N-1 authentication-related servers.

  In the embodiment, the case where the certification authority server 18 and the issuing authority server 20 are separate servers and communicate with each other via the Internet 6 has been described. Instead of the station server 20, a single server having both the function of the certificate authority server 18 and the function of the issuing station server 20 may be provided.

  In the embodiment, the case where the bank A settlement server 14 provides a network settlement function to the electronic store server 12 via the Internet 6 has been described, but the present invention is not limited to this. For example, the authentication system uses a certificate authority server 18, an issuing authority server 20, a service providing server that provides a service that uses a result of OTP verification in the certificate authority server 18, and a service provided by the service providing server. A service use server.

  In the embodiment, the case where Bank A entrusts credit authentication to a designated credit information organization has been described. However, the present invention is not limited to this. For example, Bank A may entrust predetermined authentication other than user authentication to a predetermined organization. . The predetermined organization is, for example, an industry standard organization, a public jurisdiction organization (for example, the Financial Services Agency or the National Police Agency), or an organization that manages a speech log on the Internet. In this case, distributed key information is distributed to servers managed by the predetermined organization.

  In the embodiment, the case where the use authentication is performed using the user PC 2 and the user mobile phone 4 has been described. However, the present invention is not limited to this. In this case, for example, the OTP input screen may have an OTP generation button, and when this button is pressed, the user PC accesses the issuing station server 20 via the Internet 6 and requests issuance of OTP. The OTP issued in response to this request may be displayed on another screen on the display of the user PC, for example. Alternatively, the user may request issuance of an OTP using e-mail from the user PC or the user mobile phone.

  In the embodiment, the description has been given of the case where the electronic store server 12 has the authentication destination management table 22 and the authentication destination management table 22 is referred to when redirecting the user PC 2. However, the present invention is not limited to this. May inquire the bank settlement server of the redirect destination when redirecting the user PC2.

  In the embodiment, the case where the second distributed key acquisition unit 122 of the certificate authority server 18 acquires the distributed key information when the OTP is received by the OTP reception unit 120 has been described. However, the present invention is not limited to this. The acquisition unit may acquire distributed key information when verification of authentication information is requested. For example, the second distributed key acquisition unit may acquire the distributed key information when the user PC 2 has been redirected. This is because the redirection of the user PC 2 can also be regarded as an OTP verification request.

  In the embodiment, the case where the original authentication processing is performed in response to the inquiry of the distributed key information from the certificate authority server 18 in the bank A settlement server 14 and the designated credit information agency server 16 has been described, but the present invention is not limited thereto. For example, a unique authentication process may be performed in response to a query for distributed key information from the issuing authority server 20.

  In the charts shown in FIG. 15 and FIG. 16 of the embodiment, the case where the user has designated the normal payment net payment service and three pieces of distributed key information are used for the use authentication has been described. Absent. For example, when the simple payment net payment service is designated by the user, the second distributed key acquisition unit 122 of the certificate authority server 18 and the first distributed key acquisition unit 106 of the issuing station server 20 are respectively shown in FIG. A total of two pieces of distributed key information may be acquired from the first bank settlement server 14 and the certificate authority server 18 by referring to the first distributed key acquisition destination table 44 and the second distributed key acquisition destination table 52 similar thereto.

  In the embodiment, the authentication system 10 includes a bank settlement server 14 that is managed by the bank as a service providing server, and a designated credit information agency server 16 that is managed by a designated credit information agency as a consignee server. However, the service providing server may be a server managed by a subsidiary, a Japanese branch, or an acquirer, for example, and a consignee server is a server managed by a parent company corresponding to them, an overseas head office, or an issuer. It may be.

  2 user PC, 4 user mobile phone, 6 internet, 8 mobile communication network, 10 authentication system, 12 OE electronic store server, 14 Bank A settlement server, 16 designated credit information agency server, 18 certificate authority server, 20 issuing authority server .

Claims (11)

When N is an integer equal to or greater than 2, the authentication system uses N pieces of distributed key information and secret key information generated from the N pieces of distributed key information according to a predetermined rule,
N-1 authentication-related servers to which N-1 distributed key information is distributed one by one;
An authentication unit that holds the remaining one distributed key information;
Generating secret key information in accordance with the above rule from N-1 distributed key information acquired from the N-1 authentication-related servers via the network and distributed key information acquired from the authentication unit, An issuance unit that obtains an issuance request from the network via the network and transmits authentication information based on the secret key information to the user via the network, and
When the authentication unit is requested to verify authentication information, the N-1 distributed key information acquired from the N-1 authentication-related servers via the network and the distributed key information held by the authentication unit And generating the secret key information according to the above-mentioned rule, and verifying the authentication information acquired from the user via the network based on the secret key information generated by the authentication unit.   The authentication system according to claim 1, wherein the N-1 authentication-related servers include a service providing server that provides a service that uses a result of verification of authentication information in the authentication unit.   The authentication system according to claim 2, wherein the N-1 authentication-related servers include a consignee server managed by a consignee entrusted with authentication by a subject that manages the service providing server. A combination of N pieces of distributed key information and secret key information generated from the N pieces of distributed key information is set for one user, and a different combination is set for each of a plurality of users. ,
When the authentication unit is requested to verify authentication information, the authentication unit transmits a user ID for identifying the user to the N-1 authentication-related servers via the network.
At least one of the N-1 authentication-related servers is held by the authentication-related server when the user specified by the received user ID is registered as a target that should not be authenticated in the authentication-related server 4. The authentication system according to claim 1, wherein transmission of the distributed key information corresponding to the user ID to the authentication unit is limited. 5.   The issuing unit acquires N-1 pieces of distributed key information from the N-1 authentication-related servers through a network regardless of acquisition of an issue request from a user, and receives the distributed key information from the authentication unit. The authentication system according to claim 1, wherein the authentication system is acquired.   6. The authentication system according to claim 1, wherein the authentication information is a one-time password generated based on secret key information.   The authentication system according to any one of claims 1 to 6, wherein the number of distributed key information is set for each service that uses a result of verification of authentication information in the authentication unit. An authentication method in an authentication system using N distributed key information and secret key information generated from the N distributed key information according to a predetermined rule when N is an integer of 2 or more. The authentication system includes N-1 authentication-related servers, and N-1 pieces of distributed key information are distributed to the N-1 authentication-related servers one by one.
Obtaining an issuance request from the user via the network, transmitting authentication information based on the secret key information generated according to the above-mentioned rule from the N distributed key information to the user via the network;
When verification of authentication information is requested, obtaining N-1 pieces of distributed key information from the N-1 authentication-related servers via a network;
Secret key information is generated according to the above-mentioned rule from the acquired N-1 distributed key information and the remaining one distributed key information, and the authentication information acquired from the user via the network is generated by the secret key. And a step of verifying based on the information. When N is an integer greater than or equal to 2, a distributed key holding unit that holds one of N pieces of distributed key information;
When the user receives authentication information based on secret key information generated in advance from N pieces of distributed key information in accordance with a predetermined rule, authentication information is received by the user via the network in response to the reception. A receiver,
When authentication information is received by the authentication information receiving unit, N-1 pieces of authentication-related information in which N-1 pieces of distributed key information other than the distributed key information held by the distributed key holding unit are distributed one by one. A distributed key acquisition unit that acquires N-1 pieces of distributed key information from a server via a network;
A secret key generation unit that generates secret key information according to the law from N-1 pieces of distributed key information acquired by the distributed key acquisition unit and distributed key information held by the distributed key holding unit;
An authentication management server comprising: a verification unit that verifies the authentication information received by the authentication information receiving unit based on the secret key information generated by the secret key generation unit. Regardless of acquisition of an issue request from a user, when N is an integer of 2 or more, N pieces of distributed key information are transmitted via N from N authentication-related servers to which N pieces of distributed key information are distributed one by one. A distributed key acquisition unit for acquiring
A secret key generating unit that generates secret key information according to a predetermined rule from the N distributed key information acquired by the distributed key acquiring unit;
An issue request acquisition unit for acquiring an issue request from a user via a network;
When an issue request is acquired by the issue request acquisition unit, an authentication information transmission unit that transmits authentication information based on the secret key information generated by the secret key generation unit to a user via a network, and
In response to receiving the authentication information transmitted by the authentication information transmitting unit, the user transmits authentication information to one of the N authentication related servers via the network, and the authentication related server transmits the authentication information from the user via the network. When the authentication information is received, the N-1 distributed key information acquired from the other N-1 authentication related servers via the network and the distributed key information distributed to the authentication related server are followed by the above rule. Accordingly, an authentication management server that generates secret key information and verifies authentication information acquired from a user via a network based on the secret key information generated by the authentication-related server. When N is an integer of 2 or more, an authentication unit that holds one of N pieces of distributed key information;
N-1 distributed keys acquired via the network from N-1 authentication related servers in which N-1 distributed key information other than the distributed key information held by the authentication unit is distributed one by one. The private key information is generated from the information and the distributed key information acquired from the authentication unit according to a predetermined rule, and when an issuance request is acquired from the user via the network, the authentication information based on the secret key information is transmitted to the user. And an issuing unit for transmitting via
When the authentication unit is requested to verify authentication information, the N-1 distributed key information acquired from the N-1 authentication-related servers via the network and the distributed key information held by the authentication unit An authentication management server characterized in that secret key information is generated in accordance with the above-mentioned rule and the authentication information acquired from the user via the network is verified based on the secret key information generated by the authentication unit.

Images