JP2013175040A - Authentication authority transfer system, information terminal, token issuing station, service providing device, authentication authority transfer method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To transfer authentication authority from a first information terminal to a second information terminal to enable the second information terminal to receive the same authentication service and the same authentication authority as the first information terminal.SOLUTION: A token issuing station 30 generates a challenge P when confirming that a first open key certificate of a first information terminal 20-1 and a second open key certificate of a second information terminal 20-2 are valid. The second information terminal 20-2 generates and transmits a response Q to the challenge P to the token issuing station 30, transmits the response Q as a challenge to the first information terminal 20-1, and when receiving a response R to the challenge Q from the first information terminal 20-1, transmits the response R to the token issuing station 30. The token issuing station 30, when confirming that the responses Q and R received from the second information terminal 20-2 are valid, issues a token on the basis of attribute information included in the first open key certificate and second open key certificate.

Description

  The present invention relates to an authentication authority transfer system, an information terminal, a token issuing authority, a service providing apparatus, an authentication authority transfer, which enables transfer of authentication authority related to use of an authentication service from one information terminal to another information terminal. The present invention relates to a method and a program.

  Conventionally, a challenge (random number) generated by the authenticator returns a response signed by the authenticated party with a private key (signed) to the authenticator, and the authenticator decrypts the response with the public key of the authenticated party to obtain a response hash value A client authentication method using PKI (Public Key Infrastructure) that verifies the authenticity of the authenticated side by collation is known (for example, see Non-Patent Document 1).

  In normal client authentication using PKI, a key pair of a secret key and a public key is generated inside an IC card as a client or a portable terminal, and the public key is disclosed with a signature of a certificate authority (CA). Below, assuming that the client is an IC card, the public key certificate with a signature of the certificate authority issued by a trusted method and the private key are stored in the tamper-resistant area in the IC card. An authentication operation to the server using the card (operation in which the server authenticates the IC card) will be described.

  First, the IC card receives a challenge from the server. The IC card generates a response with a secret key in response to the challenge, and returns a public key certificate and response to the server. The server verifies the signature of the certificate authority included in the public key certificate received from the IC card, using the public key of the certificate authority. If the signature is correct, the server extracts the public key of the IC card included in the public key certificate, decrypts the response received from the IC card with the public key of the IC card, and compares it with the original challenge. Since response processing usually goes through a process of hashing and encryption with a secret key, the server checks whether the hash value of the original challenge matches the decrypted value of the response, and if they match, the IC card is correct The authentication is completed. When an ID is defined as attribute information in the public key certificate of the IC card, login to the server using the ID is permitted.

“7 PKI Application”, [online], October 25, 2002, IPA, [Search February 17, 2012], Internet <URL: http://www.ipa.go.jp/security/pki /071.html>

  However, in the conventional PKI client authentication method, it is possible to authenticate such as login and identity information in an information terminal in which a public key certificate and a private key are registered in advance, but authentication authority for the same user is given to different information terminals. There was a problem that it was not possible to transfer and authenticate.

  An object of the present invention made in view of such circumstances is to safely transfer the authentication authority issued to a certain first information terminal to another second information terminal, and It is an object to provide a certification authority transfer system, an information terminal, a token issuing authority, a service providing apparatus, an authentication authority transfer method, and a program that can receive the same authentication service with the same authentication authority as that of an information terminal.

  In order to solve the above-described problem, an authentication authority transfer system according to the present invention acquires a first information terminal that acquires a first public key certificate from a certificate authority, and a second public key certificate from a certificate authority. An authentication authority transfer system comprising a second information terminal, a token issuing authority, and a service providing device, and transferring an authentication authority related to use of an authentication service from the first information terminal to the second information terminal. The second information terminal includes a public key certificate receiving unit that receives the first public key certificate from the first information terminal, and a first public key received by the public key certificate receiving unit. A public key certificate transmitting unit that transmits the key certificate and the second public key certificate to the token issuing authority, wherein the token issuing authority receives the first information received from the second information terminal. Public key certificate and the second public key certificate A public key certificate verifying unit that verifies the validity of the first public key certificate and the public key certificate verifying unit when the validity of the first public key certificate and the second public key certificate is confirmed. And a challenge generator for transmitting the challenge P to the second information terminal, the second information terminal generates a response Q to the challenge P received from the token issuing station, The response Q is sent back to the token issuing station, the response Q is sent to the first information terminal as a challenge, and when the response R to the challenge Q is received from the first information terminal, the response R is sent to the token issuing station. A response generation unit that sends a response to the token issuing authority, and the token issuing authority receives the response Q and response R received from the second information terminal. When the validity of the response Q and the response R is confirmed by the response verification unit that verifies the validity, and the response verification unit, the attribute information included in the first public key certificate, and the second A token issuing unit that issues a token used for authentication of the second information terminal, which has been assigned authentication authority from the first information terminal, to the second information terminal based on the attribute information included in the public key certificate The second information terminal has a token receiving unit that receives and stores the token from the token issuing authority.

  In order to solve the above problem, an information terminal according to the present invention obtains a first public key certificate from a certification authority in a system including an information terminal, a token issuing authority, and a service providing apparatus. An information terminal that obtains a second public key certificate from a certificate authority that receives an authentication authority related to the use of an authentication service from the information terminal, wherein the first public key is transferred from the information terminal that transfers the authentication authority. A public key certificate receiving unit for receiving a certificate, a first public key certificate received by the public key certificate receiving unit, and a public key for transmitting the second public key certificate to the token issuing authority When a challenge P is received from the certificate transmitting unit and the token issuing authority, a response Q to the challenge P is generated, the response Q is returned to the token issuing authority, and the response Q is When the response R to the response Q is received from the information terminal to which the authentication authority is transferred, the response R is returned to the token issuing station, and the challenge is received from the service providing apparatus. When S is received, a response T is generated for the challenge S, the response T is returned to the service providing device, and the attribute information included in the first public key certificate from the token issuing authority And a token receiving unit that receives and stores a token based on attribute information included in the second public key certificate.

  In order to solve the above problem, the token issuing authority according to the present invention acquires the first information terminal that acquires the first public key certificate from the certificate authority, and the second public key certificate from the certificate authority. Used for authentication of the second information terminal that transfers the authentication authority related to the use of the authentication service from the first information terminal in the system including the second information terminal, the token issuing authority, and the service providing apparatus. A token issuing authority that issues a token, and a public key certificate verification unit that verifies the validity of the first public key certificate and the second public key certificate received from the second information terminal; When the validity of the first public key certificate and the second public key certificate is confirmed by the public key certificate verification unit, a challenge P is generated, and the challenge P is used as the second information. A challenge generator to send to the terminal, When receiving the response Q to the challenge P and the response R to the response Q from the second information terminal, the response verification unit that verifies the validity of the response Q and the response R, and the response verification unit And when the validity of the response R is confirmed, the first information is based on the attribute information included in the first public key certificate and the attribute information included in the second public key certificate. And a token issuing unit that issues a token used for authentication of the second information terminal to which the authentication authority has been transferred from the terminal to the second information terminal.

  In order to solve the above problem, the service providing apparatus according to the present invention acquires a first information terminal that acquires a first public key certificate from a certificate authority, and a second public key certificate from a certificate authority. In a system comprising a second information terminal, a token issuing authority, and a service providing device, a service is provided to the second information terminal that has transferred the authentication authority related to the use of the authentication service from the first information terminal. A service providing apparatus that provides the public key certificate of the second information terminal and the use of the authentication service from the first information terminal issued by the token issuing authority from the second information terminal. Public key certificate / token receiving unit that receives a token used for authentication of the second information terminal to which the authentication authority has been transferred, and disclosure of the second information terminal received by the public key certificate / token receiving unit Key certificate The attribute information included in the public key certificate of the second information terminal and the attribute information of the second information terminal included in the token are the same. When the validity of the public key certificate and token of the second information terminal is confirmed by the public key certificate / token verifier and the public key certificate / token verifier, the challenge S And a challenge generator that transmits the challenge S to the second information terminal, and a response verification that receives the response T to the challenge S from the second information terminal and verifies the validity of the response T. A service providing unit that provides a service to the second information terminal when the response verification unit confirms the validity of the response T; Characterized in that it has.

  In order to solve the above-described problem, an authentication authority transfer method according to the present invention includes a first information terminal that acquires a first public key certificate from a certificate authority, and a second public key certificate from a certificate authority. Authentication for transferring an authentication authority related to use of an authentication service from the first information terminal to the second information terminal in a system including a second information terminal to be acquired, a token issuing authority, and a service providing apparatus. (A) receiving the first public key certificate from the first information terminal by the second information terminal; and (b) by the second information terminal. Transmitting the first public key certificate received in step (a) and the second public key certificate to the token issuing authority; and (c) the second information by the token issuing authority. The first public received from the terminal Verifying the validity of the key certificate and the second public key certificate; and (d) the first public key certificate and the second public key by the token issuing authority according to the step (c). If the validity of the certificate is confirmed, generating a challenge P and transmitting the challenge P to the second information terminal; and (e) the token issuing authority by the second information terminal. Generating a response Q to the received challenge P, transmitting the response Q to the token issuing station, and transmitting the response Q as a challenge to the first information terminal; (f) the second When the information terminal receives a response R to the challenge Q from the first information terminal, the response terminal transmits the response R to the token issuing station; (g Verifying the legitimacy of the response Q and the response R received from the second information terminal by the token issuing authority; and (h) the response Q and the response by the token issuing authority in the step (g). When the validity of R is confirmed, based on the attribute information included in the first public key certificate and the attribute information included in the second public key certificate, from the first information terminal Issuing a token used for authentication of the second information terminal to which the authentication authority has been transferred to the second information terminal; and (i) receiving the token from the token issuing station by the second information terminal. And storing.

  In order to solve the above problems, a program according to the present invention causes a computer to function as the token issuing authority.

  According to the present invention, authentication authority such as login and identity information issued to a certain first information terminal is safely transferred to another second information terminal, and the first information terminal performs the first information It becomes possible to receive the same authentication service safely with the same authentication authority as the terminal.

  For example, when the first information terminal is an IC card and the second information terminal is a mobile terminal, the attribute information transferred to the mobile terminal is used as an identification card, or the IC card ID authority is stored in the mobile terminal. It becomes possible to log in to the site with a mobile terminal instead of the IC card.

It is a block diagram which shows the structural example of the authentication authority transfer system which concerns on one Embodiment of this invention. It is a block diagram which shows the structural example of the information terminal in the authentication authority transfer system which concerns on one Embodiment of this invention. It is a block diagram which shows the structural example of the token issuing authority in the authentication authority transfer system which concerns on one Embodiment of this invention. It is a block diagram which shows the structural example of the service provision apparatus in the authentication authority transfer system which concerns on one Embodiment of this invention. It is a flowchart which shows the operation example at the time of the secure chip issue of the information terminal in the authentication authority transfer system which concerns on one Embodiment of this invention. It is a flowchart which shows the operation example at the time of the authentication authority transfer in the authentication authority transfer system which concerns on one Embodiment of this invention. It is a flowchart which shows the operation example at the time of authentication service utilization in the authentication authority transfer system which concerns on one Embodiment of this invention.

  Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings.

[Configuration of authentication authority transfer system]
FIG. 1 is a block diagram illustrating a configuration example of an authentication authority transfer system according to an embodiment. As shown in FIG. 1, the authentication authority transfer system 1 includes a certificate authority 10 (first certificate authority 10-1 and second certificate authority 10-2) and an information terminal 20 (first information terminal 20-1). , Second information terminal 20-2), token issuing station 30, and service providing apparatus 40.

  The certificate authority that authenticates the first information terminal 20-1 and the certificate authority that authenticates the second information terminal 20-2 may be the same, but in the present embodiment, the first certificate authority 10- Assume that 1 authenticates the first information terminal 20-1, and the second certificate authority 10-2 authenticates the second information terminal 20-2. Also, it is assumed that the authentication authority relating to the use of the authentication service is transferred from the first information terminal 20-1 to the second information terminal 20-2.

  The certificate authority 10 examines the public key received from the information terminal 20, and if the validity of the public key can be confirmed, the certificate authority 10 issues a public key certificate signed by the certificate authority 10 to the information terminal 20.

  The public key certificate issued by the certificate authority 10 includes a public key, attribute information, and a signature of the certificate authority 10. The attribute information is personal information such as ID and personal authentication data (name, address, date of birth, gender) when the information terminal 20 is an IC card, and when the information terminal 20 is a mobile phone. Is a unique number such as a mobile phone number.

  FIG. 2 is a block diagram illustrating a configuration example of the information terminal 20. This figure shows only the characteristic configuration of the present invention. As shown in FIG. 2, the information terminal 20 includes a key pair generation unit 21, an identity verification unit 22, a public key certificate reception unit 23, a public key certificate transmission unit 24, a response generation unit 25, a token A receiving unit 26 and a token transmitting unit 27 are included. The token reception unit 26 and the token transmission unit 27 are used when functioning as the second information terminal 20-2 that receives the authentication authority.

  The processing by the key pair generation unit 21, the person verification unit 22, and the response generation unit 25 is preferably performed in a tamper resistant unit 28 having tamper resistance. The tamper resistant unit 28 performs processing by the key pair generation unit 21, the person verification unit 22, and the response generation unit 25, and stores (registers) secure information such as a private key, a public key certificate, and personal verification information. The personal verification information refers to biometric information such as PIN (Personal Identification Number) and fingerprint data.

  The key pair generation unit 21 generates a key pair of a secret key and a public key. Then, the private key is stored in the tamper resistant unit 28 and the public key is transmitted to the certificate authority 10.

  The personal verification unit 22 performs personal verification by verifying the PIN (password) and biometric information acquired from the user with previously registered personal verification information.

  The public key certificate receiving unit 23 receives a public key certificate from the certificate authority 10. Further, when the public key certificate information terminal receiving unit 22 functions as the second information terminal 20-2 to which the authentication authority is transferred, the public key certificate information terminal receiving unit 22 changes from the first information terminal 20-1 to the first information terminal 20-1. Receive the public key certificate.

  When the public key certificate transmission unit 24 functions as the first information terminal 20-1 to which the authentication authority is transferred, the public key certificate of the first information terminal 20-1 is used as the second information terminal 20-. 2 to send. Further, when the public key certificate transmission unit 24 functions as the second information terminal 20-2 to which the authentication authority is transferred, the first information terminal 20-1 received from the first information terminal 20-1 is used. And the public key certificate of the second information terminal 20-2 are transmitted to the token issuing authority 30.

  When the response generation unit 25 functions as the second information terminal 20-2 to which the authentication authority is transferred, the response generation unit 25 receives the challenge (random number) P and the response request for the challenge P from the token issuing station 30. On the other hand, a response (signature) Q signed using the secret key of the second information terminal 20-2 is generated. Then, the response Q is returned to the token issuing station 30, and the response Q is set as the challenge Q and transmitted to the first information terminal 20-1 to which the authentication authority is transferred.

  When the response generation unit 25 functions as the first information terminal 20-1 to transfer the authentication authority, the response generation unit 25 receives the challenge Q and the response request for the challenge Q from the second information terminal 20-2. In response to this, a response (signature) R signed using the private key of the first information terminal 20-1 is generated and returned to the response generation unit 25 of the second information terminal 20-2. Then, the response generation unit 25 of the second information terminal 20-2 returns a response R to the token issuing station 30.

  In addition, the response generation unit 25 receives a challenge (random number) S from the service providing apparatus 40 when functioning as the second information terminal 20-2 to which the authentication authority is transferred. Then, a response (signature) T signed for the challenge S using the secret key of the second information terminal 20-2 is generated, and the response T is returned to the service providing apparatus 40.

  The token receiving unit 26 is used when functioning as the second information terminal 20-2 to transfer the authentication authority, and receives a token from the token issuing authority 30.

  The token transmission unit 27 is used when functioning as the second information terminal 20-2 to which the authentication authority is transferred. By transmitting the token received by the token reception unit 26 to the service providing device 40, the first information Receive the same authentication service with the same authentication authority as the terminal 20-1.

  FIG. 3 is a block diagram illustrating a configuration example of the token issuing authority 30. This figure shows only the characteristic configuration of the present invention. As shown in FIG. 3, the token issuing authority 30 includes a public key certificate receiving unit 31, a public key certificate verifying unit 32, a challenge generating unit 33, a response verifying unit 34, and a token issuing unit 35. .

  The public key certificate receiving unit 31 receives the public key certificate of the first information terminal 20-1 and the public key certificate of the second information terminal 20-2 from the second information terminal 20-2. .

  The public key certificate verification unit 32 obtains the validity of the public key certificate of the first information terminal 20-1 received by the public key certificate reception unit 31 from the first certificate authority 10-1. This is verified by decrypting using the public key of the certificate authority 10-1. The public key certificate verification unit 32 acquires the validity of the public key certificate of the second information terminal 20-2 received by the public key certificate reception unit 31 from the second certificate authority 10-2. Verification is performed by decrypting using the public key of the second certificate authority 10-2.

  The challenge generation unit 33 generates a challenge (random number) P and transmits the challenge P to the second information terminal 20-2 when the public key certificate verification unit 32 confirms the validity of the public key certificate. To do.

  When the response verification unit 34 receives the response Q to the challenge P from the second information terminal 20-2, the response verification unit 34 determines the validity of the response Q from the public key certificate extracted from the public key certificate of the second information terminal 20-2. And verify by decrypting. When the response verification unit 34 receives the response R to the challenge P from the second information terminal 20-2, the validity of the response R is extracted from the public key certificate of the first information terminal 20-1. Verify by decrypting with the key.

  When the validity of the response Q and the response R is confirmed by the response verification unit 34, the token issuing unit 35 and the attribute information of the public key certificate of the first information terminal 20-1 and the second information terminal 20 -2 issues a token used for authentication of the second information terminal 20-2 to which the authentication authority has been transferred from the first information terminal 20-1. For example, the token includes all or part of the attribute information included in the public key certificate of the first information terminal 20-1 and all of the attribute information included in the public key certificate of the second information terminal 20-2. Alternatively, it is assumed that a part is signed using the secret key of the token issuing authority 30.

  The token issuing unit 35 may issue a token with an expiration date. In that case, the token issuing unit 35 periodically obtains the revocation list of the public key certificate of the information terminal 20 from the certificate authority 10. Then, the token corresponding to the public key certificate newly added to the revocation list of the public key certificate is added to the revocation list for the token, and the revocation list for the token is updated to the latest state. Thereby, the state regarding the validity of the token can be synchronized with the revocation information of the public key certificate of the information terminal 10.

  FIG. 4 is a block diagram illustrating a configuration example of the service providing apparatus 40. This figure shows only the characteristic configuration of the present invention. As shown in FIG. 4, the service providing device 40 includes a public key certificate / token receiving unit 41, a public key certificate / token verifying unit 42, a challenge generating unit 43, a response verifying unit 44, and a service providing unit. 45.

  The public key certificate / token receiving unit 41 receives the public key certificate and token of the second information terminal 20-2 from the second information terminal 20-2.

  The public key certificate / token verification unit 42 verifies the validity of the public key certificate of the second information terminal 20-2 received by the public key certificate / token reception unit 41 from the second certificate authority 10-2. Verification is performed by decrypting the acquired public key of the second certificate authority 10-2. Further, the public key certificate / token verification unit 42 decrypts the validity of the token received by the public key certificate / token reception unit 41 by using the public key of the token issuing station 30 received from the token issuing station 30. To verify. Then, the public key certificate / token verification unit 42 receives attribute information included in the public key certificate of the second information terminal 20-2 and attribute information of the second information terminal 20-2 included in the token. Verify that they are the same.

  When the public key certificate / token verification unit 42 confirms that the public key certificate and token of the second information terminal 20-2 are valid, the challenge generation unit 43 generates a challenge (random number) S. . Then, the generated challenge S is transmitted to the second information terminal 20-2.

  When the response verification unit 44 receives the response T to the challenge S from the second information terminal 20-2, the response verification unit 44 determines the validity of the response T by using the public key extracted from the public key certificate of the second information terminal 20-2. And verify by decrypting.

  The service providing unit 45 provides a service to the second information terminal 20-2 when the response verification unit 44 confirms the validity of the response T. For example, when the information terminal 20-1 to which the authentication authority is transferred is an IC card, the information terminal 20-2 to which the authentication authority has been transferred is permitted to log in and provide services such as settlement.

[Operation when transferring authentication authority]
Next, an operation at the time of transfer of authentication authority in the authentication authority transfer system 1 configured as described above will be described. In the following description, an example is given in which the first information terminal 20-1 to which the authentication authority is transferred is an IC card, and the second information terminal 20-2 to which the authentication authority is transferred is a mobile phone terminal (mobile terminal). For the sake of explanation, the first information terminal 20-1 is referred to as an IC card 20-1, and the second information terminal 20-2 is referred to as a portable terminal 20-2. Further, the portable terminal 20-2 has a secure chip 28 as the tamper resistant part 28, and performs security processing and secure information storage in the secure chip 28.

  First, the preparations required for transferring the authentication authority will be described. When issuing the IC card 20-1, the attribute information of the IC card 20-1, the private key of the IC card 20-1, the public key certificate with the signature of the first certificate authority 10-1, and the IC card The identity verification information of the user 20-1 is registered in the tamper resistant unit 28.

  When issuing the secure chip 28 mounted on the portable terminal 20-2, the attribute information of the portable terminal 20-2, the private key of the portable terminal 20-2, and the public with the signature of the second certificate authority 10-2 The key certificate and the personal verification information of the user of the second information terminal 20-2 are registered in the secure chip 28.

  FIG. 5 is a flowchart showing an operation example when issuing the secure chip 28 mounted on the portable terminal 20-2. A PC (not shown) is a computer that performs a public key certificate acquisition procedure when issuing a secure chip. The PC acquires the attribute information (for example, telephone number) of the portable terminal 20-2 from the operator of the PC and transmits it to the secure chip 28 (step S301), and the secure chip 28 registers the attribute information received from the PC. (Step S302).

  Next, the PC requests the secure chip 28 to generate a key pair (step S303). In response to the key pair generation request, the secure chip 28 generates a private key / public key pair of the portable terminal 20-2 (step S304). The PC receives the public key from the secure chip 28 (step S305).

  Next, the PC requests the secure chip 28 to generate a signature of attribute information (step S306). In response to the signature generation request, the secure chip 28 generates a signature for the registered attribute information using the private key of the portable terminal 20-2 generated in step S304, and returns the signature to the PC (step S307). ).

  Next, the PC transmits the attribute information acquired in step S301, the public key acquired in step S305, and the signature received in step S307 to the second certificate authority 10-2 (step S308). The second certificate authority 10-2 issues a public key certificate in which the signature of the second certificate authority 10-2 is added to the attribute information and public key received from the PC to the PC (step S309).

  When receiving the public key certificate from the second certificate authority 10-2, the PC transmits the public key certificate to the secure chip 28 (step S310), and the secure chip 28 registers the public key certificate (step S311). Further, the PC acquires the personal verification information of the portable terminal 20-2 from the operator of the PC and transmits it to the secure chip 28 (step S312). The secure chip 28 registers the personal verification information received from the PC (step S313). .

  FIG. 6 is a flowchart showing an operation example at the time of authority transfer in the authentication authority transfer system 1. When the user starts an application for personal authentication of the portable terminal 20-2 and requests authentication authority transfer (step S101), an operation at the time of authority transfer starts. When there is a request for transfer of authentication authority, the portable terminal 20-2 selects an application for personal authentication from the application of the IC card 20-1 (step S102). For example, it is realized by holding the IC card 20-1 over the portable terminal 20-2.

  The portable terminal 20-2 acquires the personal verification information of the portable terminal 20-2 input from the user (step S103). The secure chip 28 collates the entered personal verification information of the portable terminal 20-2 with the previously registered personal verification information (step S104). If the collation result is NG in step S102 (both do not match), this is notified to the portable terminal 20-2, and the process is terminated. On the other hand, if the collation result is OK (both match) in step S104, that fact is notified to the portable terminal 20-2, and the process is continued.

  When the collation result is OK in step S102, the portable terminal 20-2 acquires the personal collation information of the IC card 20-1 input from the user and transmits it to the IC card 20-1 (step S105). The IC card 20-1 collates the personal verification information of the IC card 20-1 received from the mobile terminal 20-2 and the personal verification information registered in the tamper resistant unit 28 (step S106). If the collation result is NG in step S106, this is notified to the portable terminal 20-2, and the process is terminated. On the other hand, if the collation result is OK in step S106, that fact is notified to the portable terminal 20-2, and the process is continued.

  Subsequently, the portable terminal 20-2 requests the public key certificate from the IC card 20-1 (step S107), and receives the public key certificate from the IC card 20-1 (step S108). The portable terminal 20-2 transmits the public key certificate of the IC card 20-1 received in step S108 and the public key certificate of the portable terminal 20-2 registered in the secure chip 28 to the token issuing authority 30. (Step S109).

  The token issuing authority 30 determines that the public key certificate of the IC card 20-1 is not in the revocation list issued by the first authentication authority 10-1, and the public key certificate of the portable terminal 20-2 is the second authentication. Confirm that it is not in the revocation list issued by the station 10-2. Then, the token issuing authority 30 verifies the public key certificate of the IC card 20-1 using the public key of the first certificate authority 10-1, and the second public key certificate of the portable terminal 20-2. Is verified using the public key of the certificate authority 10-2 (step S110), and the verification result is determined (step S111). If the verification result is OK in step S111 (the public key certificate is valid), the fact is notified and the process ends. On the other hand, if the verification result is NG in step S111 (the public key certificate is not valid), the attribute information of the IC card 20-1 is extracted and acquired from the public key certificate of the IC card 20-1. At the same time, the attribute information of the mobile terminal 20-2 is extracted and acquired from the public key certificate of the mobile terminal 20-2 (step S112).

  Subsequently, the token issuing station 30 generates a challenge (random number) P and transmits it to the portable terminal 20-2 in order to perform challenge / response authentication (step S113). When receiving the challenge P, the portable terminal 20-2 requests a response to the challenge P from the secure chip 28 (step S114). When the secure chip 28 receives a response request for the challenge P, the secure chip 28 generates a response Q for the challenge P using the private key of the portable terminal 20-2 (step S115). The portable terminal 20-2 returns the response Q generated by the secure chip 28 to the token issuing station 30 (step S116).

  In addition, the mobile terminal 20-2 transmits the response Q as a challenge Q to the IC card 20-1, and requests the IC card 20-1 for a response to the challenge Q (step S117). When the IC card 20-1 receives the response request for the response Q, the IC card 20-1 generates a response R for the response Q using the secret key of the IC card 20-1, and sends it back to the portable terminal 20-2 (step S118). The portable terminal 20-2 returns the response R received from the IC card 20-1 to the token issuing station 30 (step S119).

  The token issuing station 30 may start the timer after generating the challenge P of the token issuing station 30 in step S113 and measure the time until the response Q and the response R are received. If the response Q and the response R cannot be received even after a predetermined time has elapsed, a time-out process is performed (step S120).

  If the timeout has not occurred in step S120, the token issuing station 30 verifies the response Q using the public key of the portable terminal 20-2 and verifies the response R using the public key of the IC card (step S121). The verification result is determined (step S122). If the response is signed after the hashing of the challenge, the hash value of the challenge P is compared with the responses Q and R. If the verification result is NG in step S121, the token issuing authority 30 ends the process. On the other hand, if the verification result is OK in step S121, the token issuing authority 30 generates data based on the attribute information of the IC card public key certificate and the attribute information of the mobile terminal as a token, and the mobile terminal 20-2 is issued (step S123). For example, the token is data obtained by adding the signature of the token issuing authority 30 to the attribute information of the IC card public key certificate and the attribute information of the portable terminal. When the portable terminal 20-2 receives the token from the token issuing station 30, the portable terminal 20-2 stores the token in the secure chip 28 which is a tamper-resistant region (step S124).

[Operation when using authentication service]
Next, an operation when using the authentication service after transferring the above-mentioned authentication authority will be described. FIG. 7 is a flowchart showing an operation example when using the authentication service in the authentication authority transfer system 1.

  Although not shown in the flowchart of FIG. 7, when using the authentication service, the service providing apparatus 40 registers the public key of the second certification authority 10-2 and the public key of the token issuing authority 30 in the tamper-resistant area. Suppose you are.

  The portable terminal 20-2 acquires the personal verification information input from the user (step S201). The secure chip 28 collates the input personal verification information with the registered personal verification information (step S202). If the collation result is NG in step S202, this is notified to the portable terminal 20-2, and the process is terminated. On the other hand, if the collation result is OK in step S202, the fact is notified to the portable terminal 20-2, and the process is continued. If the verification of the personal verification information has already been performed in the authentication authority transfer operation, the processing in steps S201 and 202 may be omitted.

  If the collation result is OK in step S202, the portable terminal 20-2 requests the secure chip 28 to acquire the public key certificate and token of the portable terminal (step S203). The public key certificate and token of the portable terminal are acquired from (step S204). Then, the mobile terminal 20-2 transmits the acquired public key certificate and token of the mobile terminal to the service providing apparatus 40 (step S205).

  The service providing apparatus 40 acquires the public key certificate and token of the mobile terminal 20-2 from the mobile terminal 20-2 (Step S206). Then, the service providing apparatus 40 has the public key certificate of the mobile terminal 20-2 not in the revocation list issued by the second certificate authority 10-2 and the token not in the revocation list issued by the issuing authority 30. Confirm. Then, the service providing apparatus 40 verifies the public key certificate of the portable terminal 20-2 using the public key of the second certificate authority 10-2, and uses the public key of the token issuing authority 30 for signature of the token. (Step S207). Furthermore, the service providing apparatus 40 verifies that the attribute information included in the token is the same as the attribute information included in the mobile terminal public key certificate (step S207). Then, these verification results are determined (step S208). If the verification result is NG in step S208, the process ends. On the other hand, if the verification result is OK in step S208, a challenge (random number) S is generated and transmitted to the portable terminal 20-2 in order to perform challenge / response authentication (step S209).

  When receiving the challenge S, the portable terminal 20-2 requests a response to the challenge S from the secure chip 28 (step S210). When the secure chip 28 receives the response request for the challenge S, the secure chip 28 generates a response T to the challenge S using the private key of the portable terminal 20-2 (step S211). The portable terminal 20-2 returns the response T generated by the secure chip 28 to the service providing apparatus 40 (step S212).

  The service providing apparatus 40 verifies the response T received from the mobile terminal 20-2 using the public key of the mobile terminal 20-2 (Step S213), and determines the verification result (Step S214). When the response is signed after the challenge is hashed, the hash value of the challenge S is compared with the response T. If the verification result is NG in step S214, it is determined that the authentication of the personal information has failed, and the process ends. On the other hand, if the verification result is OK in step S214, it is assumed that the authentication of the personal information is successful, and the service is provided to the portable terminal 20-2 (step S215).

  As described above, according to the authentication authority transfer system 1, the token issuing authority 30 performs the first public key certificate of the first information terminal 20-1 and the second public key certificate of the second information terminal 20-2. When the validity of the key certificate can be confirmed, a challenge P is generated. The second information terminal 20-2 generates a response Q to the challenge P and transmits it to the token issuing station 30, and transmits the response Q as a challenge to the first information terminal 20-1. And the 2nd information terminal 20-2 will transmit the response R to the token issuing authority 30, if the response R with respect to the challenge Q is received from the 1st information terminal 20-1. When the token issuing authority 30 can confirm the validity of the responses Q and R received from the second information terminal 20-2, the token issuing authority 30 adds the attribute information included in the first public key certificate and the second public key certificate. Based on this, a token is issued. Therefore, the validity of the authentication authority transferred from the first information terminal 20-1 to the second information terminal 20-2 can be proved by the token issued by the token issuing authority 30. Thus, the authentication authority can be safely transferred between the information terminals, and the second information terminal 20-2 can safely receive the same authentication service with the same authentication authority as the first information terminal 20-1. Become.

  Further, when the second information terminal 20-2 that has transferred the authentication authority receives a service from the service providing apparatus 40, the service providing apparatus 40 includes the public key certificate and token of the second information terminal 20-2. The attribute information included in the public key certificate of the second information terminal 20-2 and the attribute information of the second information terminal 20-2 included in the token are the same. After verification, a challenge S is generated and transmitted to the second information terminal 20-2. Then, the service providing apparatus 40 receives the response T to the challenge S from the second information terminal 20-2, and verifies the validity of the response T, so that the service providing apparatus 40 allows the second information terminal 20- The validity of the authentication authority transferred to 2 can be confirmed. Thus, it is possible to safely transfer the authentication authority between the information terminals and further enhance the safety when receiving the same authentication service by the second information terminal 20-2 with the same authentication authority as the first information terminal 20-1. Can be raised.

  It should be noted that a computer can be suitably used to cause the information terminal 20 to function as described above, and such a computer stores a program describing processing contents for realizing each function of the information terminal 20 in a storage unit of the computer. This can be realized by storing the program and executing it by the CPU of the computer.

  In addition, a computer can be suitably used to function as the token issuing authority 30 described above, and such a computer stores a program describing processing contents for realizing each function of the token issuing authority 30 in the memory of the computer. The program can be realized by reading out and executing the program by the CPU of the computer.

  In addition, a computer can be suitably used to function as the service providing device 40 described above, and such a computer stores a program describing processing contents for realizing each function of the service providing device 40. The program can be realized by reading out and executing the program by the CPU of the computer.

  Although the above embodiment has been described as a representative example, it will be apparent to those skilled in the art that many changes and substitutions can be made within the spirit and scope of the invention. Therefore, the present invention should not be construed as being limited by the above-described embodiments, and various modifications and changes can be made without departing from the scope of the claims. For example, in the above-described embodiment, the first information terminal 20-1 to which the authentication authority is transferred is described as an IC card, and the second information terminal 20-2 to which the authentication authority is transferred is described as a mobile terminal. It is not limited to the transfer of authentication authority between the IC card and the portable terminal, and the authentication authority can be safely transferred between any information terminals.

DESCRIPTION OF SYMBOLS 1 Authentication authority transfer system 10-1 1st certification authority 10-2 2nd certification authority 20-1 1st information terminal 20-2 2nd information terminal 21 Key pair production | generation part 22 Personal verification part 23 Public key certification Document receiving unit 24 Public key certificate transmitting unit 25 Response generating unit 26 Token receiving unit 27 Token transmitting unit 28 Tamper resistant unit (secure chip)
30 Token Issuing Authority 31 Public Key Certificate Receiving Unit 32 Public Key Certificate Verification Unit 33 Challenge Generation Unit 34 Response Verification Unit 35 Token Issuing Unit 40 Service Providing Device 41 Public Key Certificate / Token Receiving Unit 42 Public Key Certificate / Token Verification unit 43 Challenge generation unit 44 Response verification unit 45 Service provision unit

Claims (8)

A first information terminal that obtains a first public key certificate from a certificate authority, a second information terminal that obtains a second public key certificate from a certificate authority, a token issuing authority, and a service providing apparatus; An authentication authority transfer system for transferring authentication authority related to use of an authentication service from the first information terminal to the second information terminal,
The second information terminal is
A public key certificate receiving unit for receiving the first public key certificate from the first information terminal;
A first public key certificate received by the public key certificate receiver, and a public key certificate transmitter that transmits the second public key certificate to the token issuing authority,
The token issuing authority is
A public key certificate verification unit that verifies the validity of the first public key certificate and the second public key certificate received from the second information terminal;
When the validity of the first public key certificate and the second public key certificate is confirmed by the public key certificate verification unit, a challenge P is generated, and the challenge P is used as the second information terminal. A challenge generator for sending to
The second information terminal is
A response Q to the challenge P received from the token issuing station is generated, the response Q is transmitted to the token issuing station, the response Q is transmitted to the first information terminal as a challenge, and the first information terminal When receiving a response R to the challenge Q from the information terminal, it has a response generation unit that transmits the response R to the token issuing station,
The token issuing authority is
A response verification unit that verifies the validity of the response Q and the response R received from the second information terminal;
The attribute information included in the first public key certificate and the attribute information included in the second public key certificate when the response verification unit confirms the validity of the response Q and the response R. A token issuing unit for issuing a token used for authentication of the second information terminal to which the authentication authority has been transferred from the first information terminal to the second information terminal,
The second information terminal is
An authentication authority transfer system comprising: a token receiving unit that receives and stores the token from the token issuing authority. The service providing apparatus further includes:
A public key certificate of the second information terminal and a public key certificate / token receiving unit for receiving the token from the second information terminal;
The public key certificate of the second information terminal received by the public key certificate / token receiving unit, and the attribute included in the public key certificate of the second information terminal while verifying the validity of the token A public key certificate / token verification unit that verifies that the information and the attribute information of the second information terminal included in the token are the same;
When the public key certificate of the second information terminal and the validity of the token are confirmed by the public key certificate / token verification unit, a challenge S is generated, and the challenge S is converted to the second information. A challenge generation unit to be transmitted to the terminal,
The response generation unit of the second information terminal further includes means for generating a response T to the challenge S received from the service providing apparatus and returning the response T to the service providing apparatus;
The service providing apparatus further includes:
A response verification unit that verifies the validity of the response T received from the second information terminal;
A service providing unit that provides a service to the second information terminal when the response verification unit confirms the validity of the response T;
The authentication authority transfer system according to claim 1, further comprising: An authentication system that includes an information terminal, a token issuing authority, and a service providing apparatus, and that obtains a first public key certificate from a certificate authority and transfers authentication authority related to the use of the authentication service from another information terminal. An information terminal for obtaining a second public key certificate from a station,
A public key certificate receiving unit that receives the first public key certificate from the information terminal to which the authentication authority is transferred;
A public key certificate transmission unit that transmits the first public key certificate received by the public key certificate reception unit and the second public key certificate to the token issuing authority;
When the challenge P is received from the token issuing authority, a response Q to the challenge P is generated, the response Q is transmitted to the token issuing authority, and the response Q is transmitted as a challenge to the information terminal that transfers the authentication authority. When receiving a response R to the response Q from the information terminal that transfers the authentication authority, the response R is transmitted to the token issuing authority,
Upon receiving the challenge S from the service providing device, a response generation unit that generates a response T to the challenge S and returns the response T to the service providing device;
A token receiving unit for receiving and storing the token based on the attribute information included in the first public key certificate and the attribute information included in the second public key certificate from the token issuing authority;
An information terminal comprising: A first information terminal that obtains a first public key certificate from a certificate authority, a second information terminal that obtains a second public key certificate from a certificate authority, a token issuing authority, and a service providing apparatus; A token issuing authority that issues a token to be used for authentication of the second information terminal that transfers the authentication authority related to the use of the authentication service from the first information terminal in the system comprising:
A public key certificate verification unit that verifies the validity of the first public key certificate and the second public key certificate received from the second information terminal;
When the validity of the first public key certificate and the second public key certificate is confirmed by the public key certificate verification unit, a challenge P is generated, and the challenge P is used as the second information terminal. A challenge generator to send to
When receiving a response Q to the challenge P and a response R to the response Q from the second information terminal, a response verification unit that verifies the validity of the response Q and the response R;
The attribute information included in the first public key certificate and the attribute information included in the second public key certificate when the response verification unit confirms the validity of the response Q and the response R. A token issuing unit for issuing a token to be used for authentication of the second information terminal to which the second information terminal has been assigned authentication authority from the first information terminal,
A token issuing authority characterized by comprising: A first information terminal that obtains a first public key certificate from a certificate authority, a second information terminal that obtains a second public key certificate from a certificate authority, a token issuing authority, and a service providing apparatus; A service providing apparatus that provides a service to a second information terminal that has transferred the authentication authority related to the use of the authentication service from the first information terminal in the system comprising:
Second information obtained from the second information terminal by the public key certificate of the second information terminal and the authentication authority related to the use of the authentication service issued by the token issuing authority from the first information terminal. A public key certificate / token receiving unit for receiving a token used for terminal authentication;
The public key certificate of the second information terminal received by the public key certificate / token receiving unit, and the attribute included in the public key certificate of the second information terminal while verifying the validity of the token A public key certificate / token verification unit that verifies that the information and the attribute information of the second information terminal included in the token are the same;
When the public key certificate of the second information terminal and the validity of the token are confirmed by the public key certificate / token verification unit, a challenge S is generated, and the challenge S is converted to the second information. A challenge generator to send to the terminal;
A response verification unit that receives a response T to the challenge S from the second information terminal and verifies the validity of the response T;
A service providing unit that provides a service to the second information terminal when the response verification unit confirms the validity of the response T;
A service providing apparatus comprising: A first information terminal that obtains a first public key certificate from a certificate authority, a second information terminal that obtains a second public key certificate from a certificate authority, a token issuing authority, and a service providing apparatus; An authentication authority transfer method for transferring an authentication authority related to use of an authentication service from the first information terminal to the second information terminal in the system comprising:
(A) receiving the first public key certificate from the first information terminal by the second information terminal;
(B) transmitting, by the second information terminal, the first public key certificate received in step (a) and the second public key certificate to the token issuing authority;
(C) verifying the validity of the first public key certificate and the second public key certificate received from the second information terminal by the token issuing authority;
(D) When the token issuing authority confirms the validity of the first public key certificate and the second public key certificate in step (c), it generates a challenge P, and the challenge P Transmitting to the second information terminal;
(E) The second information terminal generates a response Q to the challenge P received from the token issuing station, transmits the response Q to the token issuing station, and uses the response Q as a challenge. Sending to the information terminal of
(F) When receiving a response R to the challenge Q from the first information terminal by the second information terminal, transmitting the response R to the token issuing station;
(G) verifying the validity of the response Q and the response R received from the second information terminal by the token issuing authority;
(H) When the validity of the response Q and the response R is confirmed by the token issuing authority in the step (g), the attribute information included in the first public key certificate, and the second Issuing a token to be used for authentication of the second information terminal, which has been assigned authentication authority from the first information terminal, to the second information terminal based on the attribute information included in the public key certificate;
(I) receiving and storing the token from the token issuing authority by the second information terminal;
An authentication authority transfer method comprising: When the second information terminal receives a service from the service providing apparatus,
(J) receiving the public key certificate of the second information terminal and the token by the service providing apparatus;
(K) The service providing apparatus verifies the public key certificate of the second information terminal received in step (j) and the validity of the token, and the public key certificate of the second information terminal. Verifying that the attribute information included in the document is the same as the attribute information of the second information terminal included in the token;
(L) When the service providing apparatus confirms the validity of the public key certificate of the second information terminal and the token in the step (k), a challenge S is generated, and the challenge S is Transmitting to the second information terminal;
(M) generating a response T to the challenge S received from the service providing apparatus by the second information terminal, and returning the response T to the service providing apparatus;
(N) verifying the validity of the response T received from the second information terminal by the service providing device;
(O) providing a service to the second information terminal when the validity of the response T is confirmed by the service providing apparatus in the step (n);
The authentication authority transfer method according to claim 6, further comprising: The program for functioning a computer as a token issuing authority of Claim 4.

Images