JP2023181362A - Authentication information signature system, authentication information signature program, and authentication information signature method - Google Patents

Abstract

To provide an electronic signature system that can be used without installation on a terminal device, with improved convenience when signing, and that reduces the burden on a user and ensures security when signing by making it possible to use an IC card all the time and omit input of authentication information when signing by linking authentication information and a private key for signature.SOLUTION: An authentication information signature system according to the present disclosure includes: a signature processing unit that accepts received data including a signature request from a terminal device operated by a signature requesting user who requests a signature, and determines whether authentication information is included in the received data; and an authentication information issuing unit that issues authentication information corresponding to the signature requesting user and transmits the same to the terminal device when the signature processing unit determines that the received data does not include authentication information. The signature processing unit accepts received data including the signature request and the authentication information issued by the authentication information issuing unit again from the terminal device.SELECTED DRAWING: Figure 2

Description

The present disclosure relates to an electronic signature system.

In electronic signatures using public key cryptography, a private key is used to generate an electronic signature, and a public key is used to verify the authenticity of the electronic signature. An electronic signature has the same meaning as a handwritten signature in that only the owner has the private key used to generate the signature.
In the electronic signature system, it was necessary to perform installation work in order to equip the terminal device with a personal authentication function using highly secure possessions, biometrics, etc., but by providing a separate authentication device, it is possible to An electronic signature system can be equipped with a highly secure personal authentication function without any installation work (Patent Document 1).

Japanese Patent Application Publication No. 2010-81418

The method disclosed in Patent Document 1 requires inputting authentication information when signing a signature, which poses a problem in that it is inconvenient.
Furthermore, in the conventional electronic signature, in order to strictly manage the private key, it is stored in an IC (Integrated Circuit) card or the like together with the electronic certificate. Although private key management using an IC card can ensure a certain level of security, the user must always hold the IC card and read the private key into an IC card reader, which still poses a problem in terms of convenience.
The present disclosure has been made to improve convenience when signing in an electronic signature system that can be used without installing on a terminal device, and by linking authentication information and a private key for signature, It is now possible to use an IC card all the time and to omit the input of authentication information when signing a signature, thereby reducing the burden on the user when signing and ensuring security.

The authentication information signature system according to the present disclosure includes a signature processing unit that receives received data including a signature request from a terminal device operated by a signature requesting user who requests a signature, and determines whether or not the received data includes authentication information. , an authentication information issuing unit that issues authentication information corresponding to the signature requesting user and transmits it to the terminal device when the signature processing unit determines that the received data does not include authentication information; The received data including the request and the authentication information issued by the authentication information issuing unit is received again from the terminal device.

According to the present disclosure, in an electronic signature system that can be used without installation work on a terminal device, it is possible to reduce the burden on the user when signing and ensure security.

1 is a configuration diagram of an authentication information signature system according to Embodiment 1. FIG. 1 is a functional configuration diagram of an authentication information signature system according to Embodiment 1. FIG. 1 is a hardware configuration diagram of an authentication information signature system according to Embodiment 1. FIG. FIG. 2 is a data configuration diagram of the authentication information signature system according to the first embodiment. FIG. 3 is a flow diagram of signature processing according to the first embodiment. FIG. 3 is a flow diagram of authentication information issuance processing according to the first embodiment. FIG. 2 is a hardware configuration diagram of an authentication information signature system according to Modification 1 of Embodiment 1; FIG. 2 is a functional configuration diagram of an authentication information signature system according to a second embodiment. FIG. 3 is a data configuration diagram of an authentication information signature system according to a second embodiment. FIG. 3 is a functional configuration diagram of an authentication information signature system according to a third embodiment. FIG. 7 is a data configuration diagram of the authentication information signature system according to Embodiment 3;

Embodiment 1.
Embodiment 1 describes processing for signing in an authentication information signature system having a system configuration of a terminal device, an authentication device, a signature device, and a key management device.
In this embodiment, the data to be signed is some kind of electronic file, and any configuration may be used as long as it can be attached with an electronic signature.
It is assumed that the signature key, which is a private key used for signatures, is prepared in advance by the system administrator.
The signature process involves signing data to be signed using a signature key to generate a signature value, and generating signature data by associating the data to be signed with the generated signature value.
The authentication information is information necessary for user authentication issued for each logged-in user of the terminal device. The authentication information may be encrypted and decrypted when used to increase security. A specific example of the authentication information is a token. The token includes an ID (Identification) token that includes information about the user such as a user name and user attributes, and an access token that includes information about the user's access rights.

***Configuration of Embodiment 1***
FIG. 1 is a configuration diagram of the authentication information signature system 1. As shown in FIG.
The authentication information signature system 1 includes a network 2, a terminal device 10, an authentication device 20, a signature device 30, and a key management device 40.
The authentication information signature system 1 may have other configurations.

FIG. 2 is a functional configuration diagram showing the functional configuration of the system.
The terminal device 10 includes a storage section 11, a communication section 12, and an input/output section 13. The storage unit 11 stores signature target data 111 and authentication information 112. The input/output unit 13 receives a signature request from a signature requesting user and displays the result of the signature processing to the signature requesting user. In this embodiment, it is assumed that the input/output unit 13 operates on a WEB browser.
The authentication device 20 includes a storage section 21 , a communication section 22 , an authentication information issuing section 23 , and an authentication information verification section 24 . The storage unit 21 stores user management data 211. The authentication information issuing unit 23 issues authentication information 112. The authentication information verification unit 24 verifies the authentication information 112.
The signature device 30 includes a storage section 31, a communication section 32, and a signature processing section 33. The signature processing unit 33 performs signature processing.
The key management device 40 includes a storage section 41 , a communication section 42 , a signature value generation section 43 , and a key management section 44 . The storage unit 41 stores a signature key 411 and key management data 412. The signature value generation unit 43 generates a signature value. The key management unit 44 acquires data from key management data.
The communication unit of each device communicates with other devices via the network 2 based on information necessary for communication. The storage section of each device stores data received from other devices via the communication section. Although not shown, it is assumed that the storage section of each device stores information necessary for communication, such as the IP (Internet Protocol) address of each device.

Each function of the authentication information signature system 1 configured as described above is realized by hardware as shown in FIG. 3. This hardware includes a processing device 101 such as a CPU (CENTRAL PROCESSING UNIT), a storage device 102 such as a ROM (READ ONLY MEMORY) or a hard disk device, a communication device 103 connected to other hardware via a network 2, a keyboard, etc. It has a configuration in which input/output devices 104 such as a mouse, a speaker, and a display are connected via a bus.
The CPU may include its own memory.
There may be a plurality of processing apparatuses 101, and the plurality of processing apparatuses 101 may cooperate to execute programs that implement each function.
In the first embodiment, the terminal device 10 includes a processing device 101, a storage device 102, a communication device 103, and an input/output device 104, and the authentication device 20, the signature device 30, and the key management device 40 are connected to the processing device 101. , a storage device 102 , and a communication device 103 .

FIG. 4 is a data configuration diagram.
The authentication information 112 includes an authentication information ID that identifies the authentication information, a user ID that identifies the signature requesting user who requested the issuance of the authentication information, and an expiration date of the issued authentication information.
The user management data 211 includes items such as a user ID for identifying the signature requesting user and a signature requesting user's password.
The key management data 412 consists of items including a user ID for identifying the signature requesting user who uses the signature key, and a user signature key for storing the signature key itself.
As will be described later, the user management data 211 and the key management data 412 are information set in advance by the system administrator.
Here, it is assumed that the authentication information 112 includes authentication information ID "T001", user ID "U001", and expiration date "2022/3/30 18:00".
It is assumed that data of a user ID "U001" and a password "P001" are registered as the user management data 211.
Assume that data of a user ID "U001" and a user signature key "signature key 411" are registered as the key management data 412.

***Operation of Embodiment 1***
FIG. 5 is a flow diagram of signature processing.
The signature processing operation of the authentication information signature system 1 will be explained using this flow diagram.
In this process, the terminal device 10 receives a signature request from a signature requesting user and generates signature data. Note that the user ID of the signature requesting user is "U001."
The operation procedure of the authentication information signature system 1 according to the first embodiment corresponds to the authentication information signature method according to the first embodiment. Further, a program that realizes the operation of the authentication information signature system 1 according to the first embodiment corresponds to the authentication information signature program according to the first embodiment.

When the input/output unit 13 of the terminal device 10 receives a signature request from the signature requesting user specifying the user ID “U001” and signature target data 111, the input/output unit 13 receives the authentication information 112 from the storage unit 11. get. Thereafter, the input/output unit 13 uses the communication unit 12 to transmit a signature request to the signature device 30 along with the user ID "U001", the acquired signature target data 111, and the authentication information 112 (step S101).
Note that when the authentication information 112 is not stored in the storage unit 11 because the authentication information has not been issued, such as during the first signature processing, the input/output unit 13 uses the communication unit 12 to send the data to be signed 111 and the signature request. is transmitted to the signature device 30.
Further, the user ID may be acquired from the login information of the terminal device 10.

The signature processing unit 33, which receives the signature request through the communication unit 32, checks the presence or absence of authentication information included in the received data.
If there is authentication information, the signature processing unit 33 stores the received signature target data 111 in the storage unit 31.
If there is no authentication information, the process advances to step S201 (described later) (step S102).

Subsequently, the signature processing unit 33 uses the communication unit 32 to transmit a signature value generation request to the key management device 40 along with the received user ID “U001”, signature target data 111, and authentication information 112 (step S103). .

The signature value generation unit 43 that receives the signature value generation request through the communication unit 42 stores the received signature target data 111 in the storage unit 41. Thereafter, the signature value generation unit 43 uses the communication unit 42 to transmit an authentication information verification request to the authentication device 20 along with the received user ID “U001” and the authentication information 112 (step S104).

The authentication information verification unit 24, which receives the authentication information verification request through the communication unit 22, performs authentication information verification processing.
Note that the authentication information verification process may be performed as follows.
The expiration date “2022/3/30 18:00” included in the received authentication information 112 is acquired. After that, the expiration date and the current date and time are compared, and if the expiration date has not expired, that is, the current date and time is within the expiration date and time, the result of the authentication information verification process is determined as "success", and in other cases, , the result of the authentication information verification process is set as "failure".
The result of the authentication information verification process is information for permitting the generation of a signature value, and in the case of "success", it is permitted to generate a signature value, and in the case of "failure", generation of a signature value is permitted. not allowed.
Note that the authentication information verification process may additionally include a comparison to determine whether the user ID included in the authentication information 112 and the received user ID are the same.
If the result of the authentication information verification process is "success", the authentication information verification unit 24 acquires the user ID "U001" included in the authentication information. Thereafter, the authentication information verification unit 24 uses the communication unit 22 to transmit the authentication information verification result “success” and the acquired user ID “U001” to the key management device 40 as a response to the authentication information verification request.
If the result of the authentication information verification process is “failure”, the authentication information verification unit 24 uses the communication unit 22 to transmit the authentication information verification result “failure” to the key management device 40 as a response to the authentication information verification request ( Step S105).

The signature value generation unit 43, which receives the authentication information verification request response through the communication unit 42, obtains the authentication information verification result from the authentication information verification request response.
If the authentication information verification result is "successful", generation of a signature value is permitted, so the signature value generation unit 43 acquires the user ID "U001" from the authentication information verification request response. Thereafter, the signature value generation unit 43 uses the acquired user ID "U001" to acquire the signature key 411 corresponding to the user ID "U001" from the key management data 412. Thereafter, the signature value generation unit 43 acquires the signature target data 111 from the storage unit 41. Thereafter, the signature value generation unit 43 signs the signature target data 111 using the signature key 411 and generates a signature value. Thereafter, the signature value generation unit 43 uses the communication unit 42 to transmit the processing result “success” and the generated signature value to the signature device 30 as a response to the signature value generation request.
If the authentication information verification result is "failure", generating a signature value is not permitted, so the signature value generation unit 43 uses the communication unit 42 to send the processing result "failure" as a response to the signature value generation request. and is transmitted to the signature device 30 as (step S106).

The signature processing unit 33 that receives the signature value generation request response through the communication unit obtains a processing result from the signature value generation request response.
If the processing result is "success", the signature processing unit 33 acquires the signature value from the signature value generation request response. Thereafter, the signature processing unit 33 acquires the signature target data 111 from the storage unit 31. Thereafter, the signature processing unit 33 associates the signature target data 111 with the signature value to generate signature data. Thereafter, the signature processing unit 33 uses the communication unit 32 to transmit the processing result “success” and the generated signature data to the terminal device 10 as a response to the signature request.
If the processing result is "failure", the signature processing unit 33 uses the communication unit 32 to transmit the processing result "failure" to the terminal device 10 as a signature request response (step S107).

The input/output unit 13, which receives the signature request response through the communication unit 12, obtains a processing result from the signature request response.
If the processing result is "success", the input/output unit 13 acquires signature data from the signature request response. Thereafter, the input/output unit 13 stores the acquired signature data in the storage unit 11. Thereafter, the input/output unit 13 determines that the processing result is "success" and ends the processing.
If the processing result is "failure", the input/output unit 13 determines that the processing result is "failure" and ends the process (step S108).

FIG. 6 is a flow diagram of authentication information issuing processing.
The operation of authentication information issuance processing will be explained using this flow diagram.
This process is an operation when there is no authentication information in step S102.

If there is no authentication information in step S102, the signature processing unit 33 of the signature device 30 transmits an authentication information sending request to the terminal device 10 together with information on a predetermined authentication information acquisition source (step S201).
The authentication information is acquired from the authentication device 20.

The input/output unit 13 of the terminal device 10, which has received the authentication information sending request through the communication unit 12, acquires information about the authentication information acquisition source from the received authentication information sending request. Thereafter, the input/output unit 13 uses the communication unit 12 to transmit an authentication information issuance request to the authentication device 20 from which the authentication information is obtained (step S202).
This process may be executed by opening the redirect URL with a web browser.

The authentication information issuing unit 23, which has received the authentication information issuance request through the communication unit 22, uses the communication unit 22 to transmit the login screen information to the terminal device 10 as a response to the authentication information issuance request (step S203).
In this process, the URL of the login screen may be sent as the login screen information.

The input/output unit 13, which receives the response to the authentication information issue request through the communication unit 12, acquires login screen information from the response to the authentication information issue request. Thereafter, the input/output unit 13 displays a login screen based on the login screen information. Thereafter, the input/output unit 13 obtains the user identification information input by the signature requesting user from the login screen. Thereafter, the input/output unit 13 uses the communication unit 12 to transmit the authentication information issuance request together with the user identification information to the authentication device 20 (step S204).
Note that the user identification information includes a user ID and a password.
This process may be executed by opening the URL of the login screen with a web browser.

The authentication information issuing unit 23, which has received the authentication information issuance request through the communication unit 22, acquires user identification information from the received authentication information issuance request. Thereafter, the authentication information issuing unit 23 obtains a user ID and password from the user identification information. Thereafter, the authentication information issuing unit 23 uses the user ID and password to determine whether the same user ID and password combination is registered in the user management data 211.
If the same user ID and password combination is registered, user authentication is "successful".
In other cases, the user authentication is deemed to be "failed."
If the user authentication is "successful", the authentication information issuing unit 23 issues a new authentication information ID for identifying the authentication information. Thereafter, the authentication information issuing unit 23 determines the expiration date according to the expiration date setting rule. Thereafter, the authentication information issuing unit 23 issues authentication information 112 including the newly issued authentication information ID, the acquired user ID, and the determined expiration date. Thereafter, the authentication information issuing unit 23 uses the communication unit 22 to transmit the authentication information issuance request response to the terminal device 10 along with the acquired user ID and the issued authentication information 112.
If the user authentication is "failed", the process ends (step S205).
In addition, in the expiration date setting rule, the expiration date can be set after a certain period of time, such as 8 hours after the current date and time, or it can be determined to be a specified date and time, such as the expiration date until 18:00 on the same day. good.

The input/output unit 13 that has received the authentication information issuance request response through the communication unit 12 acquires the authentication information 112 from the received authentication information issuance request response. Thereafter, the input/output unit 13 stores the acquired authentication information 112 in the storage unit 11. Thereafter, the input/output unit 13 acquires the signature target data 111 from the storage unit 11. Thereafter, the input/output unit 13 uses the communication unit 12 to transmit the signature request to the signature device 30 along with the received user ID, the acquired signature target data 111, and the received authentication information 112 (step S206).

Note that when performing the authentication information issuing process, additional authentication such as FIDO authentication may be performed to improve security and confirm the validity of the user identification information.

***Effects of Embodiment 1***
By linking the authentication information and the private key for signing, it is possible to omit the input of authentication information each time a signature is made, which reduces the burden on the user when signing while ensuring security. It is possible to ensure safety at the same time.
Furthermore, there is no need to always carry an IC card or the like in which the private key is stored.
Furthermore, since the authentication information 112 has an expiration date, a certain level of security can be ensured against leakage of the authentication information 112.

***Other configurations***
<Modification 1>
In the first embodiment, each functional component is realized by software. However, as a first modification, each functional component may be realized by hardware. Regarding this first modification, differences from the first embodiment will be explained.

With reference to FIG. 7, the configuration of the authentication information signature system 1 according to Modification 1 will be described.
When each functional component is realized by hardware, an electronic circuit 105 is provided in place of the processing device 101 and the storage device 102. The electronic circuit 105 is a dedicated circuit that realizes the functions of the processing device 101 and the storage device 102.

The electronic circuit 105 includes a single circuit, a composite circuit, a programmed processor, a parallel programmed processor, a logic IC (INTEGRATED CIRCUIT), a GA (GATE ARRAY), and an ASIC (APPLICATION SPECIFIC).
INTEGRATED CIRCUIT), FPGA (FIELD-PROGRAMMABLE GATE ARRAY) are assumed.
Each functional component may be realized by one electronic circuit 105, or each functional component may be realized by being distributed among a plurality of electronic circuits 105.

<Modification 2>
As a second modification, some of the functional components may be realized by hardware, and other functional components may be realized by software.

The processing device 101, storage device 102, and electronic circuit 105 are referred to as a processing circuit. That is, the functions of each functional component are realized by the processing circuit.

<Modification 3>
As a third modification, some or all of the functions of the authentication device 20, signature device 30, and key management device 40 of the authentication information signature system 1 may be combined into one device.

<Modification 4>
As a fourth modification, some or all of the functions of the authentication information signature system 1 may be realized on a cloud server.

Embodiment 2.
Embodiment 1 has described the process when the authentication information 112 includes information necessary for user authentication.
In the second embodiment, the authentication information 112 includes only the authentication information ID that identifies the authentication information, and the processing when information necessary for user authentication is managed by the authentication information management data 212 differs from the first embodiment. Explain the point.

FIG. 8 is a functional configuration diagram showing the functional configuration of the system.
Authentication information management data 212 is stored in the storage unit 21 of the authentication device 20. The other configurations are the same as in the first embodiment.

FIG. 9 is a data configuration diagram.
Authentication information 112 includes an authentication information ID that identifies authentication information.
The authentication information management data 212 includes items such as an authentication information ID, a user ID that identifies the signature requesting user who requested the issuance of the authentication information, and an expiration date of the issued authentication information.
As will be described later, the authentication information management data 212 is information generated by the authentication information issuing unit 23 when issuing authentication information.
User management data 211 and key management data 412 are the same as in the first embodiment.

***Operation of Embodiment 2***
The signature processing operation of the authentication information signature system 1 will be explained using the flow diagram of FIG.
In this process, the terminal device 10 receives a signature request from a signature requesting user and generates signature data. Note that the user ID of the signature requesting user is "U001."
The steps other than step S105 are the same as in the first embodiment.

The authentication information verification unit 24, which receives the authentication information verification request through the communication unit 22, performs authentication information verification processing.
Note that the authentication information verification process may be performed as follows.
The authentication information ID "T001" included in the authentication information 112 is acquired. Thereafter, using the acquired authentication information ID, the user ID "U001" and the expiration date "2022/3/30 18:00" are acquired from the authentication information management data 212. Then, compare the expiration date with the current date and time, and if the expiration date has not expired, the result of the authentication information verification process is set as "success"; otherwise, the result of the authentication information verification process is set as "failure". .
If the result of the authentication information verification process is "successful", the authentication information verification unit 24 uses the communication unit 22 to send the authentication information verification result "success" and the user ID "U001" acquired in the authentication information verification process. It is sent to the key management device 40 as a response to the authentication information verification request.
If the result of the authentication information verification process is “failure”, the authentication information verification unit 24 uses the communication unit 22 to transmit the authentication information verification result “failure” to the key management device 40 as a response to the authentication information verification request ( Step S105).

Next, the operation of the authentication information issuing process will be explained using the flow diagram of FIG. 6.
This process is an operation when there is no authentication information in step S102.
The steps other than step S205 are the same as in the first embodiment.

The authentication information issuing unit 23, which has received the authentication information issuance request through the communication unit 22, acquires user identification information from the received authentication information issuance request. Thereafter, the authentication information issuing unit 23 obtains a user ID and password from the user identification information. Thereafter, the authentication information issuing unit 23 uses the user ID and password to determine whether the same user ID and password combination is registered in the user management data 211.
If the same user ID and password combination is registered, the user authentication is determined to be "successful"; otherwise, the user authentication is determined to be "failed".
If the user authentication is "successful", the authentication information issuing unit 23 issues a new authentication information ID for identifying the authentication information. Thereafter, the authentication information issuing unit 23 determines the expiration date according to the expiration date setting rule. Thereafter, the authentication information issuing unit 23 generates authentication information management data 212 from the newly issued authentication information ID, the acquired user ID, and the determined expiration date. Thereafter, the authentication information issuing unit 23 issues authentication information 112 including the newly issued authentication information ID. Thereafter, the authentication information issuing unit 23 uses the communication unit 22 to transmit the acquired user ID and the issued authentication information 112 to the terminal device 10 .
If the user authentication is "failed", the process ends (step S205).

***Effects of Embodiment 2***
By including only the authentication information ID in the authentication information 112, the risk of information leakage due to leakage of the authentication information 112 can be suppressed, and safety can be improved.

Embodiment 3.
In the first embodiment, the process of signing using one signature key has been described.
Embodiment 3 will explain the difference from Embodiment 1 regarding the process of signing a signature using a signature key (split key) generated by dividing one signature key.
Split keys are multiple signature keys generated by dividing one signature key, and by signing with all the split keys, the signature value is the same as when signing with the signature key before division. It is divided so that it can be generated.
In this embodiment, two signature keys are used: a first signature key 213 and a second signature key 413, which are generated by dividing one signature key. It is assumed that the first signature key 213 and the second signature key 413 are prepared in advance by the system administrator.

***Configuration of Embodiment 3***
The configuration of the third embodiment is similar to that of the first embodiment.
Note that the functions of each device may be combined into a single device, but in order to reduce the risk of the signature key being leaked, the first signature key 213 and the second signature key 413 are stored in separate locations. It is desirable to make it into a device.

FIG. 10 is a functional configuration diagram showing the functional configuration of the system.
The authentication device 20 includes a first signature value generation section 25 . A first signature key 213 is stored in the storage unit 21 . The first signature value generation unit 25 generates a signature value. The other configurations are the same as in the first embodiment.
The key management device 40 includes a storage section 41 , a communication section 42 , a key management section 44 , and a second signature value generation section 45 . The storage unit 41 stores key management data 412 and a second signature key 413. The second signature value generation unit 45 generates a signature value.

FIG. 11 is a data configuration diagram.
The key management data 412 consists of the following items: a user ID that identifies the signature requesting user who uses the signature key, a first key ID that identifies the signature key, and a second signature key that stores the signature key itself.
Here, it is assumed that data of a user ID "U001", a first key ID "K001", and a second signature key "second signature key 413" are registered as the key management data 412.
The key ID "K101" is a key ID indicating the first signature key 213.
User management data 211 is the same as in the first embodiment.

***Operation of Embodiment 3***
The signature processing operation of the authentication information signature system 1 will be explained using the flow diagram of FIG.
In this process, the terminal device 10 receives a signature request from a signature requesting user and generates signature data. Note that the user ID of the signature requesting user is "U001."
Steps S101 to S103 and step S108 are the same as in the first embodiment.

The signature value generation unit 43 that receives the signature value generation request through the communication unit 42 stores the received signature target data 111 in the storage unit 41. Thereafter, the signature value generation unit 43 uses the received user ID "U001" to obtain the first key ID "K101" corresponding to the user ID "U001" from the key management data 412. Thereafter, the signature value generation unit 43 uses the communication unit 42 to authenticate the authentication information verification request along with the received user ID “U001”, the acquired first key ID “K101”, the signature target data 111, and the authentication information 112. The information is transmitted to the device 20 (step S104).

The authentication information verification unit 24, which receives the authentication information verification request through the communication unit 22, performs authentication information verification processing.
Note that the authentication information verification process may be performed as follows.
The expiration date “2022/3/30 18:00” included in the received authentication information 112 is acquired. Then, compare the expiration date with the current date and time, and if the expiration date has not expired, the result of the authentication information verification process is set as "success"; otherwise, the result of the authentication information verification process is set as "failure". .
If the result of the authentication information verification process is "success", the first signature value generation unit 25 performs the first signature value generation process.
Note that the first signature value generation process may be performed as follows.
Based on the received first key ID "K101", the first signature key 213 corresponding to the first key ID is acquired from among the signature keys stored in the storage unit 21. Thereafter, the first signature value generation unit 25 signs the received signature target data 111 using the first signature key 213 to generate a first signature value.
Next, the authentication information verification unit 24 uses the communication unit 22 to send the authentication information verification result “success”, the received user ID “U001”, and the generated first signature value to key management as a response to the authentication information verification request. Send to device 40.
If the result of the authentication information verification process is “failure”, the authentication information verification unit 24 uses the communication unit 22 to transmit the authentication information verification result “failure” to the key management device 40 as a response to the authentication information verification request ( Step S105).

The signature value generation unit 43, which receives the authentication information verification request response through the communication unit 42, obtains the authentication information verification result from the authentication information verification request response.
If the authentication information verification result is "success", the signature value generation unit 43 uses the received user ID "U001" to obtain the second signature key 413 corresponding to the user ID "U001" from the key management data 412. do. Thereafter, the signature value generation unit 43 acquires the first signature value from the authentication information verification request response. Thereafter, the signature value generation unit 43 signs the acquired first signature value using the second signature key 413 to generate a second signature value. Thereafter, the signature value generation unit 43 uses the communication unit 42 to transmit the processing result “success” and the generated second signature value to the signature device 30 as a response to the signature value generation request.
If the authentication information verification result is “failure”, the signature value generation unit 43 uses the communication unit 42 to transmit the processing result “failure” to the signature device 30 as a response to the signature value generation request (step S106).

The signature processing unit 33 that receives the signature value generation request response through the communication unit obtains a processing result from the signature value generation request response.
If the processing result is "success", the signature processing unit 33 acquires the second signature value from the signature value generation request response. Thereafter, the signature processing unit 33 acquires the signature target data 111 from the storage unit 31. Thereafter, the signature processing unit 33 associates the signature target data 111 with the second signature value to generate signature data. Thereafter, the signature processing unit 33 uses the communication unit 32 to transmit the processing result “success” and the generated signature data to the terminal device 10 as a response to the signature request.
If the processing result is "failure", the signature processing unit 33 uses the communication unit 32 to transmit the processing result "failure" to the terminal device 10 as a signature request response (step S107).

***Effects of Embodiment 3***
By dividing the signature key, the risk of the signature key being leaked can be reduced and security can be improved compared to when there is only one signature key.

Note that "unit" in the above description may be read as "circuit", "step", "procedure", "process", or "processing circuit".

The embodiments and modifications of the present disclosure have been described above. Some of these embodiments and modifications may be implemented in combination. Moreover, any one or some of them may be partially implemented. Note that the present disclosure is not limited to the above embodiments and modifications, and various changes can be made as necessary.

1 authentication information signature system, 2 network, 10 terminal device, 11 storage unit, 12 communication unit, 13 input/output unit, 20 authentication device, 21 storage unit, 22 communication unit, 23 authentication information issuing unit, 24 authentication information verification unit, 25 first signature value generation section, 30 signature device, 31 storage section, 32 communication section, 33 signature processing section, 40 key management device, 41 storage section, 42 communication section, 43 signature value generation section, 44 key management section, 45 2nd signature value generation unit, 101 processing device, 102 storage device, 103 communication device, 104 input/output device, 105 electronic circuit, 111 signature target data, 112 authentication information, 211 user management data, 212 authentication information management data, 213 No. 1 signature key, 411 signature key, 412 key management data, 413 second signature key.

Claims (11)

a signature processing unit that receives received data including a signature request from a terminal device operated by a signature requesting user who requests a signature, and determines whether or not the received data includes authentication information;
an authentication information issuing unit that issues authentication information corresponding to the signature requesting user and transmits it to the terminal device when the signature processing unit determines that the received data does not include the authentication information;
The signature processing unit re-receives received data including the signature request and the authentication information issued by the authentication information issuing unit from the terminal device. The authentication information has an expiration date set as a period after a certain period of time from the time of issue or until a specified date and time,
moreover,
The authentication information signature system according to claim 1, further comprising an authentication information verification unit that acquires the expiration date of the authentication information and determines that the authentication information is verified successfully if the acquired expiration date has not expired. moreover,
Authentication according to claim 2, further comprising a signature value generation unit that generates a signature value by signing with a user signature key that is a private key for signature of the signature requesting user when the verification by the authentication information verification unit is successful. Information signature system. The terminal device includes an input/output unit that acquires user identification information of the signature requesting user from login information of the signature requesting user to the terminal device,
moreover,
Upon receiving a request for issuing authentication information together with the user identification information of the signature requesting user from the terminal device,
It is determined whether information identifying the signature requesting user is registered in user management data that is information identifying the user, and if the user identification information of the signature requesting user is registered in the user management data. The authentication information signature system according to claim 3, further comprising an authentication information issuing unit that issues the authentication information when the authentication information is determined. The authentication information issuing unit includes:
When receiving the authentication information issuance request together with the user identification information of the signature requesting user,
Issue a new authentication information ID, determine the expiration date,
The authentication information signature system according to claim 4, wherein the authentication information includes the newly issued authentication information ID, user identification information for identifying the signature requesting user, and the determined expiration date. The authentication information issuing unit includes:
When receiving the authentication information issuance request together with the user identification information of the signature requesting user,
Issue a new authentication information ID, determine the expiration date,
The authentication information signature system according to claim 4, wherein authentication information management data including the authentication information ID, information of the signature requesting user, and the expiration date is generated, and authentication information including the authentication information ID is issued. The authentication information verification unit includes:
obtaining the authentication information ID based on the authentication information;
acquiring the expiration date from the authentication information management data using the acquired authentication information ID;
If the acquired expiration date has not expired, the verification of the authentication information is considered successful;
The authentication information signature system according to claim 6. The user signature key is composed of a first signature key and a second signature key,
a first signature value generation unit that performs a signature using the first signature key and generates a signature value;
a second signature value generation unit that performs a signature using the second signature key and generates a signature value;
If the authentication information verification unit successfully verifies the authentication information,
The authentication information signature system according to any one of claims 3 to 7, wherein the first signature value generation unit and the second signature value generation unit perform a signature to generate a signature value. The authentication information signature system according to any one of claims 1 to 8, wherein the authentication information signature system is constructed on a cloud server. a signature process of accepting received data including a signature request from a terminal device operated by a signature requesting user who requests a signature, and determining whether or not the received data includes authentication information;
an authentication information issuing process of issuing authentication information corresponding to the signature requesting user and transmitting it to the terminal device when the signature processing determines that the authentication information is not included in the received data;
The signature process is an authentication information signature program in which received data including the signature request and the authentication information issued in the authentication information issuing process is received again from the terminal device. a signature processing unit receives received data including a signature request from a terminal device operated by a signature requesting user who requests a signature, and determines whether or not the received data includes authentication information;
When the signature processing unit determines that the received data does not include the authentication information, the authentication information issuing unit issues authentication information corresponding to the signature requesting user and transmits it to the terminal device,
The authentication information signature method, wherein the signature processing unit receives received data including the signature request and the authentication information issued by the authentication information issuing unit again from the terminal device.

Images