JP2019185633A - Application system, application method and application relay server - Google Patents

Abstract

To provide an application system, an application method and an application relay server capable of enhancing a security against a leak of application information.SOLUTION: An application system includes an input terminal 10 into which application information is input, an application relay server 20 connected to the input terminal 10 via a first network and a reception terminal 30 connected to the application relay server 20 via a second network. The first network is the Internet. The second network is a closed network or the Internet, in which a communication between the application relay server 20 and the reception terminal 30 is permitted by a use of a fixed IP address. The application relay server 20 is configured to receive application information from the input terminal 10 and transmit the application information to the reception terminal 30 as encrypted data. An application is accepted based on that the encrypted data of the application information is decrypted at a reception system including the reception terminal 30.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an application system, an application method, and an application relay server used for the application system using information exchange via a server.

  Conventionally, various applications such as opening a bank account, loan contract, and various member registrations have been made using transmission and reception of information through a network. Specifically, application information, which is information necessary for application, is first input to an input terminal such as a smartphone or a tablet terminal. Then, the input application information is transmitted from the input terminal to the reception terminal that accepts the application (see, for example, Patent Document 1). When the reception terminal accepts the application, processing according to the application content is advanced based on the application information.

Japanese Patent Laying-Open No. 2006-152035

  By the way, in order to improve the convenience of the applicant, it is preferable that a general-purpose terminal is used as the input terminal and the Internet that can be used by an unspecified number of users is used as the network.

  However, if the reception terminal is connected to a network that can be used by an unspecified number of users, security against unauthorized access to the reception terminal is inevitably lowered. Since application information for a large number of applications is collected at the reception terminal, if the security is low, the risk of leakage of personal information included in the application information increases.

  An object of the present invention is to provide an application system, an application method, and an application relay server that can enhance security against leakage of application information.

  An application system that solves the above problems includes an input terminal to which application information, which is information necessary for application, is input, an application relay server connected to the input terminal via a first network, the application relay server, An application system comprising: a receiving terminal connected by two networks, wherein the first network is the Internet, and the second network is a closed network or the Internet, and uses the fixed IP address. Communication between the relay server and the reception terminal is permitted, and the application relay server transmits data contributing to generation of a screen displayed on the input terminal to the input terminal in order to input the application information. The first communication unit, the second communication unit that receives the application information from the input terminal, and the application information are encrypted. Based on the fact that the encrypted data transmitted by the third communication unit is decrypted by a reception system including the reception terminal. Application using the application information is accepted.

  An application system that solves the above problems includes an input terminal for inputting application information, which is information necessary for application, a Web server connected to the input terminal via a first network, and the Web server and the network. An application relay server connected to the application relay server and a reception terminal connected to the application relay server via a second network, wherein the first network is the Internet and the second network is a closed network. Or, communication between the application relay server and the receiving terminal is permitted by using a fixed IP address in the Internet, and the Web server displays data for displaying a screen for inputting the application information. Is transmitted to the input terminal, the application information is received from the input terminal, and the application relay server A second communication unit that receives the application information from the Web server, and a third communication unit that transmits the application information to the reception terminal as encrypted data. The application using the application information is accepted based on the fact that the transmitted encrypted data is decrypted by a reception system including the reception terminal.

  An application method for solving the above problems is performed using an input terminal, an application relay server connected to the input terminal via a first network, and a reception terminal connected to the application relay server by a second network. The first network is the Internet, the second network is a closed network or the Internet, and communication between the application relay server and the receiving terminal is permitted by using a fixed IP address. The application relay server transmits to the input terminal data that contributes to the generation of a screen displayed on the terminal so that the application terminal can input application information that is information necessary for the application. The application information is input to the input terminal, and the application relay server receives the application information from the input terminal. And the application relay server transmits the application information to the reception terminal as encrypted data, and the reception system including the reception terminal receives the encrypted data received from the application relay server. Receiving an application using the application information based on decrypting the received data.

  An application relay server that solves the above problem is connected to an input terminal to which application information, which is necessary information for application, is input via the first network, and is connected to the reception terminal and the second network. The first network is the Internet, and the second network is a closed network or the Internet, and communication between the application relay server and the receiving terminal is permitted by using a fixed IP address. A first communication unit that transmits to the input terminal data that contributes to generation of a screen displayed on the input terminal for inputting the application information; and a second communication unit that receives the application information from the input terminal A third communication unit that transmits the application information to the reception terminal as encrypted data, and the third communication unit Based on the signal with said encrypted data is decrypted at the reception system including the receiving terminal, application using the application information is received.

  According to the above configuration, the reception terminal is connected to a network that can communicate only with a predetermined partner, and an unspecified number of accesses to the reception terminal is not allowed. Therefore, illegal access to the reception terminal can be avoided as compared with a mode in which the reception terminal is connected to the Internet and accepts an unspecified number of accesses. Accordingly, the security against leakage of application information is improved as compared with the case where a network that can be used by an unspecified number of people is used in the entire route from the input terminal to the reception terminal. In addition, since the application information is transmitted from the application relay server in an encrypted state and received by the reception terminal, it is possible to suppress application information from being leaked during communication between these apparatuses.

  In the system, the web server may generate data for displaying the screen to be transmitted to the input terminal based on data received from the application relay server.

  According to the above configuration, data related to the application may leak to the outside of the application relay server as compared with the form in which the Web server stores all data necessary for generating the data for displaying the screen. It can be suppressed. Therefore, security against information leakage is improved.

  In the above system, the input terminal generates terminal application data that is data obtained by encrypting the application information and transmits the application information as the application information. In the application relay server, the second communication unit includes the application information as the application information. The third communication unit may receive the terminal application data, and the third communication unit may transmit the terminal application data to the reception terminal as the encrypted data.

  According to the above configuration, the application information encrypted at the input terminal is not decrypted until it is received by the reception terminal via the application relay server. Therefore, the risk of leakage of application information can be reduced over the entire route from the input terminal to the reception terminal.

  In the system, the application relay server includes an encryption processing unit that encrypts the application information. In the application relay server, the second communication unit receives the application information as plaintext data, and The third communication unit may transmit the data generated by the encryption processing unit as the encrypted data to the reception terminal.

  According to the above configuration, since the application information is not encrypted at the input terminal, it is possible to reduce the processing load on the input terminal and also reduce the load on the software environment and programming related to the input terminal. . Therefore, it is possible to relax the specifications and software requirements required for the input terminal, and as a result, the versatility of the application system is enhanced.

  In the above system, the input terminal generates terminal application data which is data obtained by encrypting the application information and transmits it as the application information, and the application relay server decrypts the terminal application data. And an encryption processing unit that encrypts the application information. In the application relay server, the second communication unit receives the terminal application data as the application information, and the third communication unit As the encrypted data, the decryption processing unit transmits data obtained by encrypting the application information obtained by decrypting the terminal application data to the reception terminal. May be.

  According to the above configuration, the application information is once decrypted by the application relay server and then encrypted again. Therefore, even if the encryption algorithm used differs depending on the reception system, the application information can be encrypted and transmitted to the reception terminal in a format adapted to each reception system. The application information is transmitted and received between the input terminal and the application relay server and between the application relay server and the reception terminal in an encrypted state. Therefore, it is possible to suppress leakage of application information during transmission between the input terminal and the application relay server and during transmission between the application relay server and the reception terminal.

  In the above system, the data transmitted by the third communication unit may be data obtained by encrypting the application information using data unique to each application information as data for encryption.

  According to the above configuration, it is possible to avoid leakage of a large amount of application information due to leakage of one encryption data. Therefore, security against leakage of application information is further enhanced.

  In the above system, the second network may be the Internet, and communication between the application relay server and the receiving terminal may be permitted by using a fixed IP address.

  According to the said structure, compared with the form whose 2nd network is a closed network, the burden concerning the construction | assembly of the network between an application relay server and a reception terminal is reducible. Therefore, the versatility of the application system is enhanced.

  According to the present invention, security against leakage of application information can be enhanced.

The figure which shows the structure of an application system about 1st Embodiment of an application system. It is the structure of the apparatus which comprises the application system of 1st Embodiment, Comprising: (a) is a figure which shows the structure of an input terminal, (b) is a figure which shows the structure of an application relay server, (c) is reception The figure which shows the structure of a terminal. The sequence diagram which shows the process sequence of the application system of 1st Embodiment. (A) is a figure which shows the structure of an input terminal about 2nd Embodiment of an application system, (b) is a figure which shows the structure of an application relay server. The sequence diagram which shows the process sequence of the application system of 2nd Embodiment. The figure which shows the structure of an application relay server about 3rd Embodiment of an application system. The sequence diagram which shows the process sequence of the application system of 3rd Embodiment. The sequence diagram which shows the process sequence of the application system of a modification.

(First embodiment)
A first embodiment of an application system, an application method, and an application relay server will be described with reference to FIGS. The application system of this embodiment receives input of application information that is information necessary for application, and passes the application information to a system that performs processing for realizing application contents.

  The type of the target application is not particularly limited as long as it is a request made by a user who is an applicant providing information. Examples of application types include opening a bank account, various contracts such as credit card contracts and loan contracts, various member registrations, and product purchases. In particular, in the application for a financial contract, there is a high necessity for protection of information to be exchanged, and therefore, the benefit of applying this embodiment is high.

[Overall configuration of application system]
The configuration of the application system will be described with reference to FIG. As shown in FIG. 1, the application system includes an input terminal 10, an application relay server 20, and a reception terminal 30. Of the terminals constituting the application system, the number of input terminals 10 may be one or more, and the number of reception terminals 30 may be one or more. The function of the application relay server 20 may be realized by a single server device or may be realized by a plurality of server devices.

  The input terminal 10 and the application relay server 20 are connected to the network NW1, and mutually transmit and receive data through the network NW1. The network NW1 is a public network and includes at least the Internet that can be used by an unspecified number of users. The network NW1 may be a network aggregate including a network for mobile data communication in addition to the Internet. In short, it is only necessary that the Internet be interposed between the input terminal 10 and the application relay server 20 on the network, that is, these devices only need to be connected via the Internet.

  The application relay server 20 and the reception terminal 30 are connected to the network NW2, and transmit and receive data to and from each other through the network NW2. The network NW2 is the Internet, and communication between the application relay server 20 and the reception terminal 30 is permitted by using a fixed IP address. That is, a fixed IP address is assigned to each of the application relay server 20 and the reception terminal 30, and communication between the reception terminal 30 and the application relay server 20 is enabled based on the designation of this IP address. Communication between an unspecified number of devices other than the reception terminal 30 and the application relay server 20 is not permitted.

  Alternatively, the network NW2 may be a closed network. A specific example of the network NW2 that is a closed network is an intranet in a business operator that processes an application. The network NW2 that is a closed network may be a network aggregate including a plurality of closed networks. When the network NW2 is a closed network, communication between the receiving terminal 30 and an unspecified number of devices outside the closed network is not permitted. When the network NW2 is a closed network, the plurality of receiving terminals 30 may be connected to the network NW2 that is an independent closed network for each receiving terminal 30, or may be connected to one common network NW2. Good.

  The input terminal 10 is a terminal to which application information Im provided by the applicant is input, and is a computer terminal such as a smartphone or a tablet terminal. The input terminal 10 may be, for example, a terminal that is carried by the applicant. When the application is performed at a business operator or agency store that processes the application, the input terminal 10 is a terminal prepared at the store. There may be. The input terminal 10 is operated by an applicant or a person in charge of the store.

The application relay server 20 is a server that receives application information Im input to the input terminal 10 from the input terminal 10 and transmits the application information Im to the reception terminal 30.
The reception terminal 30 is a device included in a reception system that is a system managed by a business operator that processes an application. Specifically, the reception system receives an application and performs registration and examination of information as a process for realizing the application content. The reception terminal 30 is a terminal that receives the application information Im from the outside of the reception system, and is a computer terminal such as a personal computer or a server device.

  For example, when the application targeted for the application system is an application for opening a bank account, the reception terminal 30 is connected to an intranet in the bank and constitutes a system managed by the bank. At this time, each of the plurality of reception terminals 30 may constitute, for example, reception systems of different banks, and in this case, an independent network NW2 is constructed for each reception terminal 30.

[Configuration of devices that make up the application system]
With reference to FIG. 2, the structure of each of the input terminal 10, the application relay server 20, and the reception terminal 30 will be described.

  As illustrated in FIG. 2A, the input terminal 10 includes a communication unit 11, a control unit 12, a storage unit 13, and an input / output unit 14. The communication unit 11 performs a connection process between the input terminal 10 and the application relay server 20 through the network NW1, and transmits and receives data between these devices.

  The input / output unit 14 is an input / output device that receives data and signals from the control unit 12 and outputs information to the outside, and inputs information from the outside to the control unit 12 as data and signals. The input / output unit 14 includes a display unit such as a display that displays information, an operation unit such as a touch panel that receives a user operation, a photographing unit such as a camera that captures an image, and the like.

  The control unit 12 includes a CPU and a volatile memory such as a RAM. Based on the program and data stored in the storage unit 13, the control unit 12 controls communication by the communication unit 11, processes information input to and output from the input / output unit 14, reads and writes information in the storage unit 13, Control of each part with which the input terminal 10 is provided, such as various arithmetic processing. Such a control unit 12 includes an input management unit 12a and an encryption processing unit 12b as functional units for realizing an application method by the application system.

  The input management unit 12a manages the progress of input of the application information Im to the input terminal 10. Specifically, the input management unit 12a receives the progress data Da from the application relay server 20 via the communication unit 11 prior to the input of the application information Im. The progress data Da includes data that contributes to the generation of a screen displayed on the input terminal 10 when the input of the application information Im progresses. The input management unit 12a causes the display unit to display the screen using the progress data Da and the data stored in the storage unit 13. Such a screen includes an input form which is a form in which application information Im to be input is instructed. When the input of the application information Im is completed according to the input form based on the operation of the operation unit, the input management unit 12a sends the terminal application data Ct, which is the encrypted application information Im, to the communication unit 11. Via the application relay server 20.

  Prior to the input of the application information Im, the encryption processing unit 12b receives the encryption data Kc from the application relay server 20 via the communication unit 11. The encryption data Kc includes a key for encrypting the application information Im. This key is a unique key for each application. The encryption processing unit 12b uses the encryption data Kc to encrypt the input application information Im using an encryption algorithm executed by a program stored in the storage unit 13. Thereby, terminal application data Ct is generated.

  The storage unit 13 has a configuration including a non-volatile memory, and stores programs and data necessary for processing executed by the control unit 12. The functions of the input management unit 12a and the encryption processing unit 12b are embodied by software that gives a plurality of functions to one common hardware, for example. Such software is stored in the storage unit 13 as application software for application, for example. This application software may be software distributed from the application relay server 20, or may be software distributed from a server different from the application relay server 20.

  As illustrated in FIG. 2B, the application relay server 20 includes a communication unit 21, a control unit 22, and a storage unit 23. The communication unit 21 performs connection processing between the application relay server 20 and the input terminal 10 through the network NW1, and transmits and receives data between the connected devices. In addition, the communication unit 21 performs a connection process between the application relay server 20 and the reception terminal 30 through the network NW2, and transmits and receives data between the connected devices. The communication unit 21 functions as a first communication unit, a second communication unit, and a third communication unit in the application system.

  The control unit 22 includes a CPU and a volatile memory such as a RAM. Based on the program and data stored in the storage unit 23, the control unit 22 controls each unit included in the application relay server 20 such as control of communication by the communication unit 21, reading and writing of information in the storage unit 23, and various arithmetic processes. Control. Such a control unit 22 includes an application management unit 22a as a functional unit that realizes an application method by the application system.

Prior to the input of the application information Im at the input terminal 10, the application management unit 22 a transmits the progress data Da and the encryption data Kc to the input terminal 10 via the communication unit 21.
In addition, the application management unit 22a manages the identification of the application and also manages the association between the application and the key for encryption. For example, the application management unit 22a assigns a unique management number to each application made through the input terminal 10, associates the management number with the key included in the encryption data Kc transmitted to the input terminal 10, and manages the application management. The data 23a is stored in the storage unit 23. The management number functions as application identification information.

  Further, the application management unit 22 a transmits the terminal application data Ct received from the input terminal 10 and the decryption data Kd to the reception terminal 30 via the communication unit 21. The decryption data Kd includes a key for decrypting the terminal application data Ct. That is, the key included in the decryption data Kd is a key corresponding to the key included in the encryption data Kc transmitted to the input terminal 10 and is a unique key for each application.

  The storage unit 23 has a configuration including a nonvolatile memory, and stores programs and data necessary for processing executed by the control unit 22. As a part of such data, the storage unit 23 stores the application management data 23a described above. The function of the application management unit 22a may be embodied separately by various hardware such as a plurality of CPUs, a memory such as a RAM, and software that allows them to function, or a common piece of hardware May be embodied by software that provides a plurality of functions. Such software is stored in the storage unit 23.

  As shown in FIG. 2C, the reception terminal 30 includes a communication unit 31, a control unit 32, and a storage unit 33. The communication unit 31 performs a connection process between the reception terminal 30 and the application relay server 20 through the network NW2, and transmits and receives data between these devices.

  The control unit 32 includes a CPU and a volatile memory such as a RAM. Based on the programs and data stored in the storage unit 33, the control unit 32 controls the communication by the communication unit 31, reads and writes information in the storage unit 33, various arithmetic processes, and the like of each unit included in the reception terminal 30. Take control. Such a control unit 32 includes a reception processing unit 32a and a decryption processing unit 32b as functional units for realizing an application method by the application system.

  The decryption processing unit 32 b receives the terminal application data Ct and the decryption data Kd from the application relay server 20 via the communication unit 31. Then, the decryption processing unit 32b decrypts the terminal application data Ct using the decryption data Kd by an encryption algorithm executed by the program stored in the storage unit 33. Thereby, the reception terminal 30 acquires the application information Im which is information obtained by decrypting the terminal application data Ct.

  The reception processing unit 32a performs application reception processing using the application information Im. The reception process is determined according to the type of application and the configuration of the reception system. For example, in the reception process, the application information Im is transmitted to another device connected to the reception terminal 30 in the reception system, the application information Im is stored in the reception terminal 30 or the other device, the application information For example, generation of predetermined data using Im may be included.

  The storage unit 33 has a configuration including a nonvolatile memory, and stores programs and data necessary for processing executed by the control unit 32. The functions of the reception processing unit 32a and the decryption processing unit 32b may be embodied separately by various types of hardware such as a plurality of CPUs, a memory such as a RAM, and software that allows them to function. It may be embodied by software that gives a plurality of functions to one common hardware. Such software is stored in the storage unit 33.

[Application system operation]
With reference to FIG. 3, the procedure of the process performed by the application system will be described.
First, initial processing is performed at the input terminal 10 (step S10). The initial process is performed, for example, when the application software for application is activated on the input terminal 10. The initial processing includes connection processing between the input terminal 10 and the application relay server 20 and transmission of initial information from the input terminal 10 to the application relay server 20.

  The initial information includes identification information of the input terminal 10, information necessary for communication between the input terminal 10 and the application relay server 20, identification information of the type of application, etc., for selecting the progress data Da in the application relay server 20. Contains necessary information. The identification information of the type of application is, for example, information indicating which bank's account opening application is applied, and may be embedded in the application software and stored in the input terminal 10 in advance. The type may be selected based on the operation of the applicant. One application is started by transmission of initial information.

  When the initial information is received, the application management unit 22a of the application relay server 20 assigns a management number to the application. Then, the application management unit 22a transmits the progress data Da and the encryption data Kc to the input terminal 10 (step S11).

  As described above, the progress data Da includes display data that is data for generating a screen to be displayed on the display unit of the input terminal 10. The display data may be data for displaying the input form, data for displaying the background of the input form, or displayed before or after the input form is displayed. It may be data used for generating a screen to be displayed. Further, the display data may be a command that determines the display contents of the input form displayed on the input terminal 10 and other screens. In short, the display data may be data that contributes to the generation of a screen that is displayed in order for the applicant to input the application information Im. For example, the display data is different for each application type, and the application management unit 22a determines display data to be transmitted to the input terminal 10 according to the application type identification information.

In addition to the display data, the progress data Da may include data for application management and progress, such as a management number.
As described above, the encryption data Kc includes a key for encrypting the application information Im. This key is, for example, a key composed of random numbers, and a different key is used for each application. That is, a unique key is used for each application information Im for encrypting the application information Im. This key may be generated each time by the application management unit 22 a based on the program and data stored in the storage unit 23, or may be generated in advance and stored in the storage unit 23.

  The encryption algorithm used for encryption and decryption of the application information Im in the application system is not particularly limited as long as it is a known algorithm. The storage unit 13 of the input terminal 10 that performs encryption and the storage unit 33 of the reception terminal 30 that performs decryption store programs that execute encryption algorithms corresponding to each other. It only needs to be configured to be usable.

  When the progress data Da and the encryption data Kc are received from the application relay server 20, the input management unit 12a of the input terminal 10 performs input processing (step S12). The input process includes displaying the screen on the display unit using the display data included in the progress data Da and the data stored in the storage unit 13. The operator of the input terminal 10 operates the operation unit to input information corresponding to the displayed input form to the input terminal 10. The input process includes display on the display unit of application information Im, which is information input in this way, and temporary storage.

  The type of information that needs to be input as the application information Im may be set according to the type of application and the specific contents of the application. The application information Im includes, for example, personal information such as the applicant's name, gender, age, income, work place, address, contact information, and authentication information such as a password. The application information Im may include image information such as various certificates necessary for application. For example, the input management unit 12a sequentially prompts the input of a plurality of information set as the application information Im by sequentially changing the displayed input forms.

  When it is determined that all the input of the application information Im has been completed, the encryption processing unit 12b of the input terminal 10 performs an encryption process (step S13). In other words, the encryption processing unit 12b uses the key included in the encryption data Kc to encrypt the input application information Im using the encryption algorithm expressed by the program stored in the storage unit 13 to obtain the terminal application data Ct. Generate.

  The generated terminal application data Ct is transmitted from the input terminal 10 to the application relay server 20 (step S14). Thereby, the process performed by the input terminal 10 in one application is completed.

  Upon receiving the terminal application data Ct, the application management unit 22a of the application relay server 20 refers to the application management data 23a and specifies a key corresponding to the key used for generating the received terminal application data Ct. That is, the key corresponding to the key transmitted as the encryption data Kc in step S11 is specified. For example, when sending and receiving data in one application, the management number is transmitted and received together, and the application management unit 22a identifies the application based on the management number. Alternatively, other identification information such as identification information of the input terminal 10 and a session key may be used for identification of the application. Then, the application management unit 22a transmits the decryption data Kd including the identified key and the terminal application data Ct to the reception terminal 30 (Step S15). When there are a plurality of reception terminals 30, for example, data is transmitted to the reception terminal 30 that receives the application according to the type of application.

  When the terminal application data Ct and the decryption data Kd are received, the decryption processing unit 32b of the receiving terminal 30 performs a decryption process (step S16). That is, the decryption processing unit 32b decrypts the terminal application data Ct using the key included in the decryption data Kd by the encryption algorithm expressed by the program stored in the storage unit 33, and obtains the application information Im.

  The reception processing unit 32a of the reception terminal 30 performs application reception processing using the obtained application information Im (step S17). That is, the reception processing unit 32a performs predetermined processing such as storage and transmission of the application information Im. This completes acceptance of the application.

  In addition to the encryption of the application information Im, that is, in addition to the encryption of the data itself transmitted / received between the devices of the input terminal 10, the application relay server 20, and the reception terminal 30, the communication between the devices is also encrypted. It is preferred that Specifically, encrypted communication is preferably used for communication between the input terminal 10 and the application relay server 20 and communication between the application relay server 20 and the reception terminal 30. . For such communication, for example, SSL communication using an electronic signature is used together with a common key encryption method or a public key encryption method.

[Action]
The operation of the first embodiment will be described. In the application system of the first embodiment, the reception terminal 30 is connected to the network NW2 that can communicate only with a predetermined partner, and an unspecified number of accesses to the reception terminal 30 is not allowed. Therefore, illegal access to the reception terminal 30 can be avoided as compared with a mode in which the reception terminal 30 is connected to the Internet and accepts an unspecified number of accesses. Therefore, security against leakage of the application information Im is improved.

  Furthermore, in the first embodiment, the application information Im encrypted at the input terminal 10 is not decrypted until it is received by the reception terminal 30 via the application relay server 20. Therefore, the risk of leakage of the application information Im can be reduced over the entire route from the input terminal 10 to the reception terminal 30.

  Further, a key for each application information Im is used for encrypting the application information Im. Therefore, unlike the case where the application information Im of a large number of applications is encrypted with a common key, it is possible to avoid the leakage of a large number of application information Im due to leakage of one key.

As described above, according to the first embodiment, the effects listed below can be obtained.
(1) Since the reception terminal 30 that receives the application information Im and receives the application can communicate only with a predetermined partner, unauthorized access to the reception terminal 30 can be avoided. Therefore, security against leakage of the application information Im is improved.

  (2) Since the application information Im encrypted at the input terminal 10 is not decrypted until it is received by the reception terminal 30, the application information Im is leaked over the entire route from the input terminal 10 to the reception terminal 30. Can reduce the risk. In addition, the processing load of the application relay server 20 can be reduced as compared with a mode in which the application relay server 20 performs encryption and decryption processing.

(3) Since the encryption data Kc for each application information Im is used for encrypting the application information Im, security against leakage of the application information Im is further enhanced.
(4) If the network NW2 is the Internet and the communication between the application relay server 20 and the receiving terminal 30 is permitted by using a fixed IP address, the network NW2 is compared with the closed network. Thus, it is possible to reduce the burden on the construction of the network between the application relay server 20 and the reception terminal 30. Therefore, the versatility of the application system is enhanced. In particular, when a plurality of receiving terminals 30 and the application relay server 20 are connected, the burden and cost required for constructing the network NW2 as a closed network increases. Preferably it is done.

(Second Embodiment)
The second embodiment of the application system, the application method, and the application relay server will be described with reference to FIGS. 4 and 5. The second embodiment is different from the first embodiment in that the application relay server performs encryption of the application information Im instead of the input terminal. Below, it demonstrates centering around the difference between 2nd Embodiment and 1st Embodiment, about the structure similar to 1st Embodiment, the same code | symbol is attached | subjected and the description is abbreviate | omitted.

[Configuration of devices that make up the application system]
With reference to FIG. 4, the structure of each of the input terminal 15 and the application relay server 25 of 2nd Embodiment is demonstrated. In addition, the structure of the reception terminal 30 is the same in 1st Embodiment and 2nd Embodiment.

  As illustrated in FIG. 4A, the input terminal 15 includes a communication unit 11, a control unit 12, a storage unit 13, and an input / output unit 14. The communication unit 11 and the input / output unit 14 have the same configuration as in the first embodiment.

  The control unit 12 includes an input management unit 12a having the same configuration as that of the first embodiment as a functional unit that realizes an application method by the application system, but does not include an encryption processing unit. The input management unit 12a transmits the input application information Im as plaintext data to the application relay server 25 via the communication unit 11.

  In the second embodiment, since the input terminal 15 does not encrypt the application information Im as data, the storage unit 13 does not have to store a program for executing an encryption algorithm for such encryption. . The function of the input management unit 12a in the second embodiment may be realized by application software stored in the storage unit 13, or may be realized by a Web application. In 2nd Embodiment, since the encryption process of the application information Im by the control part 12 is unnecessary, the function of the control part 12 can be easily actualized also by a Web application.

  As illustrated in FIG. 4B, the application relay server 25 includes a communication unit 21, a control unit 22, and a storage unit 23. The communication unit 21 has the same configuration as that of the first embodiment, and functions as a first communication unit, a second communication unit, and a third communication unit in the application system.

The control unit 22 includes an encryption processing unit 22b in addition to the application management unit 22a.
Prior to the input of the application information Im at the input terminal 15, the application management unit 22 a transmits the progress data Da to the input terminal 15 via the communication unit 21. Unlike the first embodiment, the application management unit 22a does not transmit the data for encryption to the input terminal 15.

  Further, the application management unit 22a sends the server application data Cs, which is data obtained by encrypting the application information Im by the application relay server 25, and the decryption data Kd to the reception terminal 30 via the communication unit 21. Send. The decryption data Kd is a key for decrypting the server application data Cs, and includes a key corresponding to the key used for encrypting the application information Im.

  The encryption processing unit 12b encrypts the application information Im received from the input terminal 15 using an encryption key executed by a program stored in the storage unit 23 using a unique key for each application. Thereby, the server application data Cs is generated.

  The storage unit 23 stores a program that executes an encryption algorithm. The storage unit 23 may store application management data 23a in which identification information such as a management number is associated with a key used for encrypting the application information Im for each application.

  Along with the processing of the application information Im in the application relay server 25, the application information Im is stored only in the volatile memory of the application relay server 25, or stored in the non-volatile memory and erased after a lapse of a predetermined time. It is preferable. For example, the application information Im may be included in the application management data 23a and stored in the storage unit 23 in association with the application identification information. However, the stored application information Im is erased after a predetermined time has elapsed. It is preferable. According to such a configuration, leakage of the application information Im from the application relay server 25 can be suppressed.

[Application system operation]
With reference to FIG. 5, the procedure of the process which the application system of 2nd Embodiment performs is demonstrated.
First, as in the second embodiment, initial processing is performed at the input terminal 15 (step S20).

  When receiving the initial information, the application management unit 22a of the application relay server 25 assigns a management number to the application and transmits the progress data Da to the input terminal 15 (step S21). The progress data Da includes display data that contributes to the generation of the screen displayed on the input terminal 15 as in the first embodiment.

  When the progress data Da is received, the input management unit 12a of the input terminal 15 performs input processing (step S22). The input process proceeds in the same manner as in the first embodiment, and application information Im is input to the input terminal 15.

  When it is determined that the input of the application information Im has been completed, the input management unit 12a transmits the application information Im to the application relay server 25 as input data Pt that is plaintext data (step S23). That is, the application information Im is transmitted from the input terminal 15 to the application relay server 25 in a state where the data itself is not encrypted. As will be described later, the communication between the input terminal 15 and the application relay server 25 is preferably encrypted.

  When receiving the input data Pt, the encryption processing unit 22b of the application relay server 25 performs encryption processing (step S24). That is, the encryption processing unit 22b uses the unique key for each application, and generates the server application data Cs by encrypting the application information Im using an encryption algorithm expressed by the program stored in the storage unit 23. The key may be generated each time by the application management unit 22a or the encryption processing unit 22b, or may be generated in advance and stored in the storage unit 23.

  Subsequently, the application management unit 22a transmits the server application data Cs and the decryption data Kd including the key corresponding to the key used for generating the server application data Cs to the reception terminal 30 (step S25). .

  When the server application data Cs and the decryption data Kd are received, the decryption processing unit 32b of the receiving terminal 30 performs decryption processing (step S26). That is, the decryption processing unit 32b uses the key included in the decryption data Kd to decrypt the server application data Cs by the encryption algorithm expressed by the program stored in the storage unit 23 to obtain the application information Im.

  The reception processing unit 32a of the reception terminal 30 performs an application reception process using the obtained application information Im (step S27). That is, the reception processing unit 32a performs predetermined processing such as storage and transmission of the application information Im. This completes acceptance of the application.

  As in the first embodiment, encrypted communication is used as communication between the input terminal 10 and the application relay server 25 and communication between the application relay server 25 and the reception terminal 30. It is preferable.

  In the second embodiment, it is preferable that the processes from the reception of the input data Pt to the encryption of the application information Im in the application relay server 25 are performed continuously. If encrypted communication such as SSL communication is used for communication between the input terminal 10 and the application relay server 25 and data reception to encryption are continuously performed, the application relay server 25 Opportunities for unauthorized access to intercept plaintext data of the application information Im are limited. For example, if the application information Im is stored in the volatile memory only during the period required for processing by the application relay server 25, the data received by the application relay server 25 by encrypted communication is decrypted and the input data Unless it is the moment when Pt is obtained, the plaintext data of the application information Im cannot be intercepted. Therefore, even in the configuration of the present embodiment in which the application information Im is sent from the input terminal 10 to the application relay server 25 in a state where the data itself is not encrypted, the possibility of the application information Im leaking can be further reduced.

[Action]
The operation of the second embodiment will be described. Also in the application system of the second embodiment, since the reception terminal 30 can communicate only with a predetermined partner, the reception terminal 30 is unlikely to receive unauthorized access. Therefore, the security against leakage of the application information Im is enhanced as compared to the case where a network that can be used by an unspecified number of people is used in the entire route from the input terminal 15 to the reception terminal 30. Furthermore, since the application information Im is transmitted from the application relay server 25 and received by the receiving terminal 30 in a state where the data itself is encrypted, the application information Im is leaked during transmission between these devices. Is also suppressed.

  In the second embodiment, since the application information Im is not encrypted at the input terminal 15, the software environment for causing the control unit 12 to function in addition to reducing the processing load on the control unit 12 at the input terminal 15. It is possible to reduce the load of building and programming.

As described above, according to the second embodiment, in addition to the effects (1), (3), and (4) of the first embodiment, the following effects can be obtained.
(5) Since the application information Im is not encrypted at the input terminal 15, specifications and software conditions required for the input terminal 15 are relaxed. Therefore, the versatility of the application system is enhanced.

(Third embodiment)
With reference to FIGS. 6 and 7, a third embodiment of the application system, the application method, and the application relay server will be described. The third embodiment is different from the first embodiment in that the application information Im is encrypted by both the input terminal and the application relay server. Below, it demonstrates centering around the difference between 3rd Embodiment and 1st Embodiment, about the structure similar to 1st Embodiment, the same code | symbol is attached | subjected and the description is abbreviate | omitted.

  The third embodiment is preferably used when a plurality of receiving terminals 30 receive data encrypted by different encryption algorithms. For example, it is assumed that a plurality of reception terminals 30 receive different types of applications, in particular, applications processed by different operators.

  The encryption algorithm used by the plurality of reception terminals 30 includes an encryption algorithm different from the encryption algorithm used by the input terminal 10. An algorithm used for encryption and decryption of data exchanged between the input terminal 10 and the application relay server 26 is a first encryption algorithm, and is exchanged between the application relay server 26 and the reception terminal 30. An algorithm used for data encryption and decryption is the second encryption algorithm.

  The storage unit 13 of the input terminal 10 stores a program that executes encryption using the first encryption algorithm, and the storage unit 23 of the application relay server 26 stores a program that executes decryption using the first encryption algorithm. ing. In addition, the storage unit 23 of the application relay server 26 stores a program that performs encryption using the second encryption algorithm, and the storage unit 33 of the receiving terminal 30 stores a program that performs decryption using the second encryption algorithm. It is remembered.

[Configuration of devices that make up the application system]
With reference to FIG. 6, the structure of the application relay server 26 of 3rd Embodiment is demonstrated. Note that the configurations of the input terminal 10 and the reception terminal 30 are the same in the first embodiment and the third embodiment.

  As shown in FIG. 6, the application relay server 26 includes a communication unit 21, a control unit 22, and a storage unit 23. The communication unit 21 has the same configuration as that of the first embodiment, and functions as a first communication unit, a second communication unit, and a third communication unit in the application system.

The control unit 22 includes an application management unit 22a, an encryption processing unit 22b, and a decryption processing unit 22c.
Similar to the first embodiment, the application management unit 22a transmits the progress data Da and the encryption data Kc to the input terminal 10 via the communication unit 21 prior to the input of the application information Im at the input terminal 10. . The encryption data Kc includes a key that is unique to each application and that can be used in the first encryption algorithm.

  As in the first embodiment, the application management unit 22a manages application identification through generation of the application management data 23a, and also manages the association between the application and a key for encryption at the input terminal 10. To do. In the application management data 23a, a management number or the like as application identification information is associated with a key included in the encryption data Kc transmitted to the input terminal 10.

  Further, the application management unit 22a sends the server application data Cs, which is data obtained by encrypting the application information Im by the application relay server 26, and the decryption data Kd to the reception terminal 30 via the communication unit 21. Send. The decryption data Kd is a key that can be used in the second encryption algorithm, and includes a key for decrypting the server application data Cs.

  The decryption processing unit 22c uses a key corresponding to the key included in the encryption data Kc transmitted to the input terminal 10 and uses the first encryption algorithm executed by the program stored in the storage unit 23 to input the input terminal 10 The terminal application data Ct received from is decrypted. Thereby, the application relay server 26 acquires the application information Im.

  The encryption processing unit 12b encrypts the application information Im decrypted by the decryption processing unit 22c by a second encryption algorithm executed by a program stored in the storage unit 23, using a unique key for each application. . Thereby, the server application data Cs is generated.

  The storage unit 23 stores application management data 23a and a program for executing an encryption algorithm. Along with the processing of the application information Im in the application relay server 26, the application information Im is stored only in the volatile memory of the application relay server 26, or stored in the non-volatile memory and deleted after a lapse of a predetermined time. It is preferable. According to such a configuration, the application information Im is prevented from leaking from the application relay server 26.

  The information associated with the application identification information in the application management data 23a may include the key used for encryption by the encryption processing unit 12b and the application information Im. However, as described above, the stored application information Im is preferably deleted after a predetermined time.

[Application system operation]
With reference to FIG. 7, the procedure of the process which the application system of 3rd Embodiment performs is demonstrated.
The process of step S30 to step S34 is the same as the process of step S10 to step S14 of the first embodiment. That is, initial processing is performed at the input terminal 10 (step S30), and the application management unit 22a of the application relay server 26 that has received the initial information transmits the progress data Da and the encryption data Kc to the input terminal 10. (Step S31).

  When the progress data Da and the encryption data Kc are received from the application relay server 26, the input management unit 12a of the input terminal 10 performs input processing (step S32). When the application information Im is input by the input process, the encryption processing unit 12b of the input terminal 10 performs the encryption process (step S33). That is, the encryption processing unit 12b uses the key included in the encryption data Kc to generate the terminal application data Ct by encrypting the application information Im using the first encryption algorithm expressed by the program stored in the storage unit 13. To do. The generated terminal application data Ct is transmitted from the input terminal 10 to the application relay server 26 (step S34).

  When the terminal application data Ct is received, the decryption processing unit 22c of the application relay server 26 refers to the application management data 23a and specifies a key corresponding to the key used to generate the received terminal application data Ct. That is, the key corresponding to the key transmitted as the encryption data Kc in step S32 is specified. And the decoding process part 22c performs a decoding process (step S35). That is, the decryption processing unit 22c uses the specified key to decrypt the terminal application data Ct by the first encryption algorithm expressed by the program stored in the storage unit 23 to obtain the application information Im.

  Subsequently, the encryption processing unit 22b of the application relay server 26 performs encryption processing (step S36). That is, the encryption processing unit 22b encrypts the application information Im decrypted in step S35 by using the unique key for each application and the second encryption algorithm expressed by the program stored in the storage unit 23. Thereby, server application data Cs is generated.

  Here, when the encryption algorithm used for each reception terminal 30 is different, the encryption processing unit 22b encrypts the application information Im with the second encryption algorithm corresponding to the reception terminal 30 that is the transmission destination of the application information Im. To do. Such identification may be performed based on, for example, identification information of the type of application included in the initial information. In other words, the application relay server 26 manages the application type identification information and the encryption algorithm used by the receiving terminal 30 that receives the application in association with each other, according to the application type identification information received as the initial information. A program that executes the second encryption algorithm may be selected.

  When the server application data Cs is generated, the application management unit 22a receives the server application data Cs and the decryption data Kd including the key corresponding to the key used for generating the server application data Cs. (Step S37).

  When the server application data Cs and the decryption data Kd are received, the decryption processing unit 32b of the receiving terminal 30 performs decryption processing (step S38). That is, the decryption processing unit 32b uses the key included in the decryption data Kd to decrypt the server application data Cs by the second encryption algorithm expressed by the program stored in the storage unit 33 to obtain the application information Im. .

  The reception processing unit 32a of the reception terminal 30 performs application reception processing using the obtained application information Im (step S39). That is, the reception processing unit 32a performs predetermined processing such as storage and transmission of the application information Im. This completes acceptance of the application.

  As in the first embodiment, in addition to the encryption of the application information Im, each of communication between the input terminal 10 and the application relay server 26 and communication between the application relay server 26 and the reception terminal 30. As described above, encrypted communication is preferably used.

  In the third embodiment, it is preferable that the processes from the reception of the terminal application data Ct in the application relay server 25 to the encryption of the application information Im after being decrypted are preferably performed continuously. According to such a configuration, the opportunity to illegally access the application relay server 26 and intercept the plaintext data of the application information Im is limited to the moment when the application relay server 26 decrypts the terminal application data Ct. Therefore, the possibility of leakage of the application information Im can be further reduced.

  In the third embodiment, one of the key used for encryption at the input terminal 10 and the key used for encryption at the application relay server 26 is a unique key for each application. However, a common key may be used for a plurality of applications. Since the network NW1 and the network NW2 have lower security against unauthorized access, the key used for encryption of data transmitted through the network NW1, that is, the key used for encryption at the input terminal 10 However, it is preferable that the key can realize higher security, that is, a unique key for each application.

[Action]
The operation of the third embodiment will be described. Also in the application system of the third embodiment, since the reception terminal 30 can communicate only with a predetermined partner, the reception terminal 30 is unlikely to receive unauthorized access. Therefore, the security against leakage of the application information Im is enhanced as compared to the case where a network that can be used by an unspecified number of people is used in the entire route from the input terminal 10 to the reception terminal 30.

  The application information Im is once decrypted by the application relay server 26 and then encrypted again. Therefore, even when the plurality of reception terminals 30 include terminals using different encryption algorithms, each reception information The application information Im can be encrypted and transmitted in a format suitable for the terminal 30.

  The application information Im is transmitted and received between the input terminal 10 and the application relay server 26 and between the application relay server 26 and the reception terminal 30 in a state where the data itself is encrypted. Therefore, it is possible to prevent the application information Im from being leaked during transmission between the input terminal 10 and the application relay server 26 and during transmission between the application relay server 26 and the reception terminal 30.

As described above, according to the third embodiment, in addition to the effects (1), (3), and (4) of the first embodiment, the following effects can be obtained.
(6) Since the application information Im is once decrypted by the application relay server 26 and then encrypted again, the application information Im can be encrypted and transmitted in a format suitable for each receiving terminal 30. is there.

  (7) By encrypting the application information Im, the application information Im is transmitted during transmission between the input terminal 10 and the application relay server 26 and during transmission between the application relay server 26 and the reception terminal 30. Is prevented from leaking.

(Modification)
The above embodiments can be implemented with the following modifications.
[Modification using Web server]
In the first embodiment and the third embodiment, the functions as the input management unit 12a and the encryption processing unit 12b in the control unit 12 of the input terminal 10 may be embodied by a Web application. For example, JavaScript (registered trademark) or the like may be used for the realization of the encryption processing unit 12b by the Web application.

  In each of the first to third embodiments, when a Web application is used, the input terminals 10 and 15 provide the Web application every time processing such as screen switching for inputting application information Im is performed. The Web server is accessed, and data required for display and encryption processing on the input terminals 10 and 15 is acquired from the Web server. In the form of using a Web application, an application can be made by using a Web browser generally installed in a general-purpose terminal without installing dedicated application software for application in the input terminals 10 and 15. It is possible to proceed. Therefore, the versatility of the application system is enhanced and the convenience for the user is improved.

  Hereinafter, a specific description will be given of a mode in which the application relay servers 20, 25, and 26 function as the Web server and a mode in which a server different from the application relay servers 20, 25, and 26 functions as the Web server. To do.

<The application relay server has a function as a Web server>
In the above embodiment, data is exchanged between the input terminals 10 and 15 and the application relay servers 20, 25 and 26 during the input processing at the input terminals 10 and 15. The application proceeds according to the same processing flow as in FIG. In this case, the display data included in the progress data Da is data of a Web page that can be displayed by the Web browser included in the input terminal 10, and is data for displaying a screen for inputting the application information Im. is there.

<Mode in which a server different from the application relay server functions as a Web server>
An example of processing in the above embodiment will be described with reference to FIG. FIG. 8 shows a processing procedure when a form using a Web application is applied to the first embodiment.

  The Web server 40 transmits and receives data to and from the input terminal 10 through the network. The network to which the input terminal 10 and the Web server 40 are connected is a public network, like the network NW1, and includes at least the Internet that can be used by an unspecified number of users.

  The web server 40 transmits and receives data to and from the application relay server 20 through the network. The network to which the application relay server 20 and the Web server 40 are connected may be a public network similar to the network NW1, and may include at least the Internet that can be used by an unspecified number of users. Alternatively, the network to which the application relay server 20 and the Web server 40 are connected is a closed network or the Internet like the network NW2, and the communication between the application relay server 20 and the Web server 40 can be performed by using a fixed IP address. It may be allowed.

  The Web server 40 includes a communication unit that performs connection processing between the Web server 40 and each of the input terminal 10 and the application relay server 20 to transmit and receive data, a CPU, and a volatile memory. A control unit that performs control and a non-volatile memory are provided, and a storage unit that stores programs and data necessary for processing executed by the control unit is provided.

  As shown in FIG. 8, the connection process between the input terminal 10 and the application relay server 20 is performed as an initial process when the URL of the Web site provided by the Web server 40 is selected on the input terminal 10. (Step S40). The initial processing may include processing for transmitting initial information used for processing in the Web server 40 such as identification information of the input terminal 10 from the input terminal 10 to the Web server 40.

  When receiving an access from the input terminal 10, the Web server 40 requests the application relay server 20 to transmit the server processing data Db as a start process (step S41). When making a request, the Web server 40 may transmit start information including information acquired from the input terminal 10 to the application relay server 20 as necessary.

Upon receiving a request from the Web server 40, the application relay server 20 assigns a management number to the application and transmits server processing data Db to the application relay server 20 (step S42).
The server processing data Db is data used to generate terminal processing data Dc that is data to be sent from the Web server 40 to the input terminal 10 in order to advance the input of the application information Im. The terminal processing data Dc includes data for the input terminal 10 to display a screen for inputting the application information Im, and the server processing data Db includes, for example, display contents such as images and characters included in the screen. Includes information that defines The server processing data Db includes encryption data Kc including a key for encrypting the application information Im. Further, the server processing data Db may include data for managing and progressing applications such as a management number.

  When the server processing data Db is received, the Web server 40 generates terminal processing data Dc based on the server processing data Db, and transmits the terminal processing data Dc to the input terminal 10 (step S43). The terminal processing data Dc is Web page data that can be displayed by the Web browser provided in the input terminal 10.

  When the terminal processing data Dc is received, the input management unit 12a of the input terminal 10 performs input processing (step S44). That is, the input terminal 10 displays a screen on the display unit using the terminal processing data Dc, and displays or temporarily stores the application information Im input according to the displayed input form. Do. For example, the input management unit 12a sequentially prompts input of a plurality of information set as the application information Im by sequentially changing the displayed input forms. Each time the screen displayed on the input terminal 10 changes, the input terminal 10 acquires data from the Web server 40. All of the data acquired by the input terminal 10 from the Web server 40 constitutes the terminal processing data Dc.

  When it is determined that all the input of the application information Im has been completed, the encryption processing unit 12b of the input terminal 10 performs an encryption process (step S45). That is, the encryption processing unit 12b encrypts the input application information Im using the key included in the encryption data Kc to generate the terminal application data Ct. A program required for encryption is included in the terminal processing data Dc and transmitted from the Web server 40 to the input terminal 10.

  The generated terminal application data Ct is transmitted from the input terminal 10 to the Web server 40 (step S46). Then, the web server 40 transmits the received terminal application data Ct to the application relay server 20 (step S47).

  Upon receiving the terminal application data Ct, the application management unit 22a of the application relay server 20 refers to the application management data 23a, specifies the key corresponding to the key transmitted as the encryption data Kc in step S42, The decryption data Kd including the identified key and the terminal application data Ct are transmitted to the receiving terminal 30 (step S48).

  When the terminal application data Ct and the decryption data Kd are received, the decryption processing unit 32b of the receiving terminal 30 performs decryption processing (step S49). That is, the decryption processing unit 32b decrypts the terminal application data Ct using the key included in the decryption data Kd to obtain the application information Im.

The reception processing unit 32a of the reception terminal 30 performs an application reception process using the obtained application information Im (step S50). This completes acceptance of the application.
As described above, when a Web application is provided by the Web server 40 that communicates with the application relay server 20, the Web server 40 transmits information to these apparatuses between the input terminal 10 and the application relay server 20. Send and receive. The same applies to the case where a form using a Web application is applied to the second embodiment and the third embodiment. That is, in the second embodiment and the third embodiment, transmission / reception of data performed from the application relay server 25, 26 to the input terminals 10, 15 is performed to the Web server 40, and the input terminals 10, 15 are performed. Data transmission / reception to / from the application relay servers 25, 26 is performed to the Web server 40. As described above, even if the web application is used, the same effects as those described in the first to third embodiments can be obtained.

  In the above description, a mode in which the Web server 40 generates the terminal processing data Dc based on the server processing data Db that is data acquired from the application relay server 20 has been exemplified. Instead, the Web server 40 may store all data necessary for generating the terminal processing data Dc in the storage unit of the Web server 40. In this case, when receiving access from the input terminal 10, the Web server 40 generates terminal processing data Dc and transmits it to the input terminal 10 without receiving provision of data from the application relay server 20. However, in the form in which the data necessary for generating the terminal processing data Dc is stored in the application relay server 20, data related to the application is prevented from leaking outside the application relay server 20. Security against is increased.

[Other variations]
In each of the above-described embodiments and modifications, a unique key is used for each application information Im for encrypting the application information Im. Instead, a common key may be used for encrypting the plurality of pieces of application information Im.

  The encryption method used in each of the above embodiments and modifications may be a common key encryption method or a public key encryption method. If a different key is used for each application, and the encryption key and the decryption key are different, the application relay servers 20, 25, and 26 apply, for example, as application management data 23a. By associating the identification information with the key for encryption and the key for decryption, the correspondence of the key for each application may be managed.

  In addition to the key, unique data for each application information Im may be used for encryption of the application information Im. Examples of such unique data include data for generating a derived key from the master key that is the key.

  Specifically, in the first embodiment and the third embodiment, the encryption data Kc is data for encryption different from the master key, and may be unique data for each application. . That is, the encryption of the application information Im may be realized by performing an operation using the master key, the encryption data Kc, and the application information Im. In this case, the program for realizing the encryption algorithm and the master key are stored in the storage unit 13 of the input terminal 10, and unique encryption data Kc is transmitted from the application relay servers 20 and 26 to the input terminal 10 for each application. May be. Alternatively, a program for realizing the encryption algorithm is stored in the storage unit 13 of the input terminal 10, and the encryption data Kc and master key unique to each application are transmitted from the application relay servers 20 and 26 to the input terminal 10. Also good. The master key may be unique for each application, or may be common for a plurality of applications. In the second embodiment, the application relay server 25 may encrypt the application information Im using a master key and data unique to each application.

  Similarly, in addition to the key, unique data for each application information Im may be used to decrypt the application information Im. That is, the decryption data Kd may be data for decryption different from the key, and may be data corresponding to the data used for encryption. Then, a program and a key for realizing the encryption algorithm are stored in the storage unit 33 of the reception terminal 30, and the decryption data Kd unique to each application is transmitted from the application relay server 20, 25, 26 to the reception terminal 30. May be. Alternatively, a program for realizing the encryption algorithm is stored in the storage unit 33 of the reception terminal 30, and the decryption data Kd and the key unique to each application are transmitted from the application relay server 20, 25, 26 to the reception terminal 30. May be.

  For each application, the correspondence between the specific data for encryption and the specific data for decryption may be managed by the application relay servers 20, 25, and 26, for example, as application management data 23a.

  The encryption and decryption of the application information Im may be performed by using common data for a plurality of applications without using data unique to each application information Im as a key or data different from the key. In this case, the application relay servers 20, 25, and 26 do not need to manage the correspondence between the specific data for encryption and the specific data for decryption for each application. Further, the encryption data Kc and the decryption data Kd are not transmitted from the application relay servers 20, 25, and 26, the data necessary for the encryption is stored in the input terminal 10, and the data necessary for the decryption is It may be stored in the reception terminal 30.

  In the first embodiment and the third embodiment, a program that realizes an encryption algorithm is stored in the input terminal 10 and the reception terminal 30, and a key used for encryption and decryption is sent from the application relay servers 20 and 26 to each device. The form transmitted to is described. Not only this but the program which implement | achieves an encryption algorithm, and the data required for the encryption containing a key may be memorize | stored in the input terminal 10 in advance, or one part may be beforehand input 10 and the remainder may be sent from the application relay servers 20 and 26 to the input terminal 10 at the start of application, or all of them may be sent from the application relay servers 20 and 26 to the input terminal 10 at the start of application. Also good. Further, the program for realizing the encryption algorithm and the data necessary for decryption including the key may all be stored in advance in the receiving terminal 30, or a part thereof may be stored in the receiving terminal 30 in advance. The remainder may be sent from the application relay server 20 or 26 to the reception terminal 30 together with the application information Im, or all of the remaining information may be sent from the application relay server 20 or 26 to the reception terminal 30 together with the application information Im. The same applies to the reception terminal 30 of the third embodiment.

  In the form in which at least a part of the program and data necessary for the encryption process is sent from the application relay server 20 or 26 to the input terminal 10, at least a part of the data transmitted to the input terminal 10 is the application relay server 20. 26, data acquired by the application relay server 20, 26 from a device different from the application relay server 20, 26, or data generated by the application relay server 20, 26 based on information acquired from a device different from the application relay server 20, 26 Good. Such a configuration is realized by using, for example, an HSM (hardware security module).

  Similarly, in a form in which at least a part of the program and data necessary for the decryption process is sent from the application relay server 20, 25, 26 to the reception terminal 30, at least a part of the data transmitted to the reception terminal 30 is The application relay server based on data acquired by the application relay server 20, 25, 26 from a device different from the application relay server 20, 25, 26 or information acquired from a device different from the application relay server 20, 25, 26. Data generated by 20, 25, and 26 may be used.

  In the application relay servers 20, 25, and 26 of each embodiment, the reception terminal 30 that is the transmission destination of the application information Im may be specified as follows. That is, when the functions of the input management unit 12a and the encryption processing unit 12b of the input terminal 10 are realized by application software downloaded to the input terminal 10, the storage unit 13 stores application software for each type of application, Application identification information which is identification information of the software is stored. In the application relay servers 20, 25, and 26, the application identification information is associated with information that can identify the reception terminal 30 that receives an application carried by application software corresponding to the application identification information. For example, the application relay servers 20, 25, and 26 may store a table in which application identification information and the address of the receiving terminal 30 are associated with each other. The application relay servers 20, 25, and 26 receive the application identification information together with the application information Im from the input terminal 10, refer to the association, and specify the destination reception terminal 30 based on the application identification information. According to such a configuration, information such as the address of the reception terminal 30 is stored in the application relay server 20 as compared with the form in which the information of the reception terminal 30 that is the transmission destination of the application information Im is stored in the input terminal 10 together with the application software. , 25 and 26 are prevented from leaking outside.

  If there is one reception terminal 30 included in the application system and it is not necessary to select a reception terminal 30 as a transmission destination, the application relay servers 20, 25, and 26 receive the reception terminal 30 based on the application identification information. The application information Im may be transmitted to the reception terminal 30 without specifying the above. Specifically, for example, the application relay servers 20, 25, and 26 determine whether the application identification information received together with the application information Im is valid as a series of processes after receiving the application information Im from the input terminal 10. If it is determined that it is valid, the application information Im may be transmitted to the reception terminal 30.

  In addition, when the functions of the input management unit 12a and the encryption processing unit 12b of the input terminal 10 are embodied by a Web application, instead of the application identification information, identification information of a website accessed by the input terminal 10, for example, The website address may be used.

In each embodiment, instead of the management number or the like, the application identification information or the website identification information may be used for application identification or application type identification.
In each embodiment, transmission of the encrypted application information Im from the application relay server 20, 25, 26 to the reception terminal 30 is performed by transmitting the encrypted data of the application information Im to the application relay servers 20, 25, It may be performed continuously after 26 is generated or received. Alternatively, the application relay servers 20, 25, and 26 store the encrypted application information Im for a plurality of applications, and when the stored data reaches a certain amount, the stored data May be transmitted to the reception terminal 30. For example, the application relay servers 20, 25, and 26 store at a predetermined time so that the number of transmissions per day is a predetermined number. Data may be transmitted to the reception terminal 30.

  In place of the reception terminal 30, another device such as a server connected to the reception terminal 30 in the reception system acquires the application information Im by decrypting the data received by the reception terminal 30, and performs the reception process. You may go. In short, the encrypted data of the application information Im transmitted from the application relay server 20, 25, 26 may be decrypted by the reception system including the reception terminal 30, and the application information Im based on this decryption. It is sufficient that an application using the is accepted by the reception system.

  Ct ... Terminal application data, Cs ... Server application data, Da ... Progress data, Db ... Server processing data, Dc ... Terminal processing data, Im ... Application information, Kc ... Encryption data, Kd ... Decryption data , NW1, NW2 ... Network, 10,15 ... Input terminal, 11 ... Communication unit, 12 ... Control unit, 12a ... Input management unit, 12b ... Encryption processing unit, 13 ... Storage unit, 14 ... Input / output unit, 20, 25, 26 ... application relay server, 21 ... communication unit, 22 ... control unit, 22a ... application management unit, 22b ... encryption processing unit, 22c ... decryption processing unit, 23 ... storage unit, 23a ... application management data, 30 ... reception terminal, 31 ... communication unit, 32 ... control unit, 32a ... reception processing unit, 32b ... decryption processing unit, 33 ... storage unit, 40 ... Web server.

Claims (10)

An input terminal for entering application information, which is necessary information for application,
An application relay server connected to the input terminal via a first network;
A reception terminal connected to the application relay server by a second network;
An application system comprising:
The first network is the Internet, the second network is a closed network or the Internet, and communication between the application relay server and the receiving terminal is permitted by using a fixed IP address,
The application relay server
A first communication unit for transmitting data contributing to generation of a screen displayed on the input terminal to input the application information to the input terminal;
A second communication unit that receives the application information from the input terminal;
A third communication unit that transmits the application information to the reception terminal as encrypted data;
An application system in which an application using the application information is accepted based on the fact that the encrypted data transmitted by the third communication unit is decrypted by a reception system including the reception terminal. An input terminal for entering application information, which is necessary information for application,
A web server connected to the input terminal via a first network;
An application relay server connected to the Web server via a network;
A reception terminal connected to the application relay server by a second network;
An application system comprising:
The first network is the Internet, the second network is a closed network or the Internet, and communication between the application relay server and the receiving terminal is permitted by using a fixed IP address,
The Web server transmits data for displaying a screen for inputting the application information to the input terminal, receives the application information from the input terminal,
The application relay server includes a second communication unit that receives the application information from the Web server, and a third communication unit that transmits the application information to the reception terminal as encrypted data.
An application system in which an application using the application information is accepted based on the fact that the encrypted data transmitted by the third communication unit is decrypted by a reception system including the reception terminal. The application system according to claim 2, wherein the Web server generates data for displaying the screen to be transmitted to the input terminal based on data received from the application relay server. The input terminal generates terminal application data, which is data obtained by encrypting the application information, and transmits the application information as the application information.
In the application relay server,
The second communication unit receives the terminal application data as the application information,
The application system according to any one of claims 1 to 3, wherein the third communication unit transmits the terminal application data to the reception terminal as the encrypted data. The application relay server has an encryption processing unit that encrypts the application information,
In the application relay server,
The second communication unit receives the application information as plain text data,
The application system according to any one of claims 1 to 3, wherein the third communication unit transmits data generated by the encryption processing unit as the encrypted data to the reception terminal. The input terminal generates terminal application data, which is data obtained by encrypting the application information, and transmits the application information as the application information.
The application relay server includes a decryption processing unit that decrypts the terminal application data, and an encryption processing unit that encrypts the application information.
In the application relay server,
The second communication unit receives the terminal application data as the application information,
The third communication unit is, as the encrypted data, data obtained by the encryption processing unit encrypting the application information obtained by the decryption processing unit decrypting the terminal application data, The application system according to claim 1, which is transmitted to the reception terminal. The data transmitted by the third communication unit is data obtained by encrypting the application information using data unique to each application information as data for encryption. The application system described in the section. The application system according to any one of claims 1 to 7, wherein the second network is the Internet, and communication between the application relay server and the reception terminal is permitted by using a fixed IP address. An application method performed using an input terminal, an application relay server connected to the input terminal via a first network, and a reception terminal connected to the application relay server by a second network,
The first network is the Internet, the second network is a closed network or the Internet, and communication between the application relay server and the receiving terminal is permitted by using a fixed IP address,
Sending data to the input terminal that contributes to generation of a screen displayed on the terminal in order for the application relay server to input application information, which is information necessary for application, to the input terminal;
The application information is input to the input terminal;
The application relay server receiving the application information from the input terminal;
The application relay server transmits the application information as encrypted data to the reception terminal;
A reception system including the reception terminal receives an application using the application information based on decrypting the encrypted data received from the application relay server;
Application method including. An application relay server connected via the first network to the input terminal for inputting application information, which is necessary information for application, and connected by the receiving terminal and the second network,
The first network is the Internet, the second network is a closed network or the Internet, and communication between the application relay server and the receiving terminal is permitted by using a fixed IP address,
A first communication unit for transmitting data contributing to generation of a screen displayed on the input terminal to input the application information to the input terminal;
A second communication unit that receives the application information from the input terminal;
A third communication unit that transmits the application information to the reception terminal as encrypted data;
An application relay server that accepts an application using the application information based on decryption of the encrypted data transmitted by the third communication unit by a reception system including the reception terminal.

Images