JP4778242B2 - Personal information communication system and method - Google Patents

Description

  The present invention relates to a communication system that ensures the security of personal information, which is secret information notified via the Internet, and in particular, records a personal information transfer confirmation and disposal certificate input by a user in a log file. The present invention relates to a personal information communication system and method for identifying a leaking source user from the log file when personal information is leaked.

  Conventionally, personal information is treated as confidential information that is not disclosed to the discreet, and when necessary, personal information is recorded and handed on magnetic media or paper when it is exchanged with a contractor or partner. It was. On the other hand, when sending personal information over a communication line, a user authentication server for authenticating a user and a certificate authority server for managing an encryption key are provided, and encrypted mail executed by a large-scale system is technically known. However, it is not widely used in general society.

  Therefore, when notifying the confidential information to the related party, the user may adopt a measure of notifying only the confidential information part required by the parties who need the confidential information but not the unnecessary confidential information part. This will be described using an example of online shopping. When the user keeps the address confidential to the merchandise ordering party and informs the address only to the merchandise delivery company, the user first creates the first and second pieces of secret information created separately. One of the two tallys, the address information of the user's own terminal, and the order data are notified to the order destination. The ordering party processes the order data by itself and transfers the tally and address information to the delivery company. The delivery company sends a tally to the address information terminal and requests the user's address. The user determines that the requester of the address is valid based on the returned tally and the tally remaining at hand, and sends the remaining tally to the delivery company. The delivery company restores the user address using the previous tally and the obtained tally and delivers the product to the user's address. This method realizes security that prevents leakage and impersonation of confidential information in a simple manner in which confidential information is divided to generate tally and cannot be restored without obtaining all the tally (see, for example, Japanese Patent Application Laid-Open No. 2004-2005). -240917).

  Furthermore, there is a case where it is unavoidable to suppress the use of confidential information that is unavoidably notified to a business partner for purposes other than the purpose. In the personal information sent to the other party through the network, by changing the item that can be changed so that the other party can be specified and sending it, if the personal information is diverted or leaked outside the purpose, it is leaked by verifying the changed part There is a method of specifying the source (for example, JP-A-2003-223414).

JP 2004-240917 A (column number 0017) JP 2003-223414 A (column number 0035)

  The first problem with the prior art is that it is not possible to obtain confirmation from the other user during data communication. The reason for this is that an encrypted mail signed / received certificate is a proof of delivery, but it cannot be proved that the user has received it.

  The second problem is that it is impossible to prove that the user has surely discarded the personal information after use. The reason for this is that, regardless of whether it is a medium or an e-mail, a means of communication that considers the security of personal information is provided. Had to be exchanged separately.

  The third problem is that when personal information is illegally leaked, the leak source cannot be specified. The reason for this is that encrypted mail is encrypted and prevented from being tampered with on the network, but it is decrypted after being received and stored on the PC in plain text. When handling a large amount of data, the amount of data is large, and it is difficult to identify the source of leakage in a short time.

  As can be seen from the above problem, the security of personal information given to the user depends on the trust of the user. Therefore, from the other party who sent and received the personal information, the transfer confirmation and the discard certificate of the confidential information are recorded as a system procedure, and if the confidential information is leaked, the user of the leakage source can be specified by the record It is to realize the mechanism including prevention of impersonation.

  The object of the present invention is that when personal information to be handled in a confidential manner is transferred to the user, it is surely obtained from the user in accordance with the system procedure, and the transfer confirmation and disposal certificate is obtained and stored as a log. An object of the present invention is to provide a personal information communication system and a method thereof having a mechanism capable of specifying a leak source user.

  Therefore, the present invention has an authentication server that has an authentication data registration file for registering a user identifier and password and performs authentication processing for the user, and an encryption key management file for managing a public key and its private key. A certificate authority server that manages the public key and private key sent to the user and verifies the electronic signature, a personal information transfer server that encrypts and sends the personal information requested by the user with the public key, and the user In a personal information communication system comprising a personal information transfer server having a personal information request and a user personal computer used for browsing the personal information transfer server, the personal information transfer server stores an exchange confirmation log file for accumulating an exchange confirmation log for confirming the exchange of personal information. And the personal information held by the user personal computer and the public key and the secret key thereof are discarded, and the certificate authority server stores the public key and the secret thereof. A discontinuation certification log file for accumulating a disposition certification log that proves that the user authentication server has deleted the user authentication data, and an applet file for accumulating a personal information management applet to be downloaded to the user PC And a notification process for the data request and notification of the user personal computer, a transfer process of a personal information applet that preserves personal information and a public key and its private key, and a log creation process for creating an exchange confirmation log and a disposal certification log And a user search process for searching for leaked personal information.

  Further, the processing device includes an Internet communication unit that connects a user personal computer to the Internet by CGI, a notification processing unit that receives an authentication request or a data request from the user personal computer, and a response to the data request. A data transfer processing unit that receives a personal information management applet, a public key and its private key, a personal information file name, and encrypted personal information in response to a processing request from the processing unit; In response to a processing request for an authentication request, an authentication processing unit for sending a user authentication request and a user authentication data deletion request to the user authentication server, and obtaining a public key and its private key and processing for verifying an electronic signature Key and verification processing unit for sending a request to the certificate authority server and receiving the public key and its private key and the result of verifying the electronic signature A log creation processing unit for creating an exchange confirmation log and a disposal certification log based on the electronic signature verification result attached to the notification of the user personal computer, and registering in the delivery confirmation log file and the disposal certification log file; When leaked, based on the secret key attached to the encrypted personal information, a user search processing unit that searches for the user of the leak source, and an intranet communication unit that connects the user authentication server and the certificate authority server And.

  Furthermore, the user personal computer maintains a public key downloaded from the personal information transfer server, its private key, and encrypted personal information in a storage area, and generates and adds an electronic signature to a user request. It is characterized in that it is provided with means for operating it in the storage area.

  Further, the notification processing unit includes a user accepting means for accepting a connection request using an initial password sent from the user personal computer and a newly registered password, and a password requesting means for requesting the user personal computer to input a new password. The personal information transfer server sends a redirect request for requesting connection to a download site, and outputs / receives to / from the user personal computer by the output of the transfer confirmation log or output of the discard proof log. A completion notification means for notifying, a completion notification receiving means for receiving a notification of completion of transfer of the encrypted personal information with an electronic signature, a discard instruction means for notifying an instruction for discarding the encrypted personal information with an electronic signature, and an electronic signature Request acceptor who accepts personal information requests and download site connection requests Characterized in that it comprises a and.

  Further, the data transfer processing unit includes an applet downloading means for downloading the personal information management applet to a user personal computer, a key sending means for sending the public key and its private key to the user personal computer, and a personal information file name. File name sending means for sending the personal information to the user personal computer, and personal information downloading means for sending the encrypted personal information obtained by encrypting the personal information with the public key to the user personal computer.

  Further, the authentication processing unit attaches an identifier of the personal information transfer server itself to the password of the user, and sends authentication information sending means for sending a user authentication request to the user authentication server, a user identifier and a password And an authentication stop means for requesting the suspension of use.

  Further, the key and verification processing unit sends a key generation request to the certificate authority server, sends a public key and a secret key thereof, and a digital signature verification request to the certificate authority server, Electronic signature verification means for obtaining a verification result.

  In addition, the log creation processing unit includes a transfer confirmation log unit that creates a transfer confirmation log of personal information and outputs it to a transfer confirmation log file, and a discard certificate log unit that generates a discard certificate log and outputs it to the discard certificate log file. It is characterized by providing.

  Further, the user search processing unit searches for the leakage source identifying means for detecting the secret key from the maintenance form personal information, and the search key log file and the discard certification log file with the public key corresponding to the secret key. And a user search means for specifying.

  Further, the personal information management applet includes means for maintaining in the storage area the maintenance type personal information obtained by adding the public key downloaded from the personal information transfer server, its private key, and the private key to the encrypted personal information. A means for accepting a discard instruction with an electronic signature and verifying the electronic signature; a means for discarding the public key and its private key and the personal information in the form of preservation in accordance with the discard instruction with an electronic signature; and an electronic signature. Means for generating and adding an electronic signature to a personal information transfer completion notification and a public key invalid certificate issuance request, and means for terminating the personal information management applet itself.

  Further, the transfer confirmation log file includes an identifier of a user who has transferred personal information, a date and time when the personal information was transferred, a personal information file name in which the personal information is registered, and an electronic signature attached to completion of the transfer. And a public key.

Further, the discard certification log file includes an identifier of a user who has exchanged personal information, a date and time when the personal information is discarded, a personal information file name in which the personal information is registered, and an electronic signature attached to the completion of the disposal. And a public key.
[Action] The user sends the identifier and the initial password in advance by mail or by encrypted mail, and when the user requests personal information, the user must change the initial password to a new password unknown to others. And accepting personal information requests. By using a new password that only the user knows, it is possible to detect the misappropriation of the password or the impersonation that another person requests for personal information.

  Further, the private key is attached to the encrypted personal information obtained by encrypting the personal information with the public key, and the personal information is stored in a secure format in which the encrypted personal information and the private key are paired. With this mechanism, plaintext personal information is not stored, so it is possible to prevent others from browsing. Further, since the encrypted personal information cannot be decrypted if the secret key is separated, the personal information is preserved only by discarding the secret key.

  Furthermore, by performing the confirmation of sending and receiving personal information with an electronic signature, interference from others can be eliminated.

  In addition, when the user himself / herself has received or received personal information or confirmed that it has been discarded, it is recorded in the transfer confirmation log or the disposal certification log, and personal information is leaked or used inappropriately , Identify users of leak sources.

  The effect of the present invention is that personal information can be safely communicated over the Internet. The reason is not asynchronous communication like e-mail, but after authenticating the user, issuing the encryption key, encrypting it, sending it while preventing tampering with the electronic signature, and then electronically signing with the private key A transfer confirmation log is generated and stored in response to the transfer completion notification. When discarding personal information, an invalid certificate issue request with an electronic signature is sent to the personal information transfer server when the personal information is discarded. User authentication data is deleted, and a discard certification log is generated and saved. This is because in the unlikely event of a personal information leakage accident, the public key is obtained from the certificate authority server by using the private key added to the encrypted personal information, the log is searched, and the leakage source user can be easily identified. Also, since personal information is stored on the user's personal computer as personal information in a secure format consisting of the encrypted personal information encrypted with the public key and its private key, plain text personal information can only be displayed for viewing. This is because if it does not exist and the secret key is deleted, it cannot be decrypted and personal information is preserved.

  Embodiments of the present invention will be described with reference to the drawings. Referring to FIG. 1, the embodiment of the personal information communication system includes an exchange confirmation log file 16 for confirming that personal information has been exchanged with a user, and discarding that proves that the user has surely discarded personal information. A certificate log file 17 for storing a certification log; and an applet file 18 for storing a personal information management applet to be incorporated in a user's personal computer. The certificate authority server 2 verifies the electronic signature, and the public key and its secret. It has an encryption key management file 22 for managing keys, a user authentication server 3 has an authentication data registration file 31 for managing user identifiers and passwords, and a user personal computer 4 is connected to the personal information transfer server 1 through the Internet. A browser to be connected is installed, and a personal information request and confirmation / invalidation confirmation with electronic signature are sent to the personal information transfer server 1. Made by actuating the person information management applet.

  The certificate authority server 2, the user authentication server 3, and the personal information transfer server 1 are connected by an intra network 6 and disconnected from an external network.

  Referring to FIG. 2, the processing device 10 of the user transfer server 1 returns a response in response to an authentication request or data request from the Internet communication unit 101 that connects the user PC to the Internet via the CGI and the user PC. Upon receiving the processing request of the notification processing unit 102 and the notification processing unit 102 for the data request, the user receives the personal information management applet, the public key and its private key, the personal information file name, and the encrypted personal information. A data transfer processing unit 103 to be downloaded to a personal computer; an authentication processing unit 104 that receives a processing request for an authentication request and sends a user authentication request and a user authentication data deletion request to the user authentication server 3; Request and the electronic signature verification request are sent to the certificate authority server 2 and the public key and its private key and the electronic signature verification result are received. The transfer confirmation log and the discard certification log are created based on the key to be taken and the verification processing unit 105, the completion of the transmission / reception of the personal information from the user personal computer 4, and the verification result of the electronic signature attached to the discard certification request. A log creation processing unit 106 registered in the file 16 and the discard certification log file 17, and a user search processing unit for searching for a user of a leakage source by a secret key attached to the encrypted personal information when personal information is leaked 107 and an intranet communication unit 108 for connecting the user authentication server 3 and the certificate authority server 2.

  Referring to FIG. 3A, the notification processing unit 102 includes a user acceptance unit 1021 that accepts a connection request using an initial password and a new password sent by the user personal computer 4, and a new password for the user personal computer 4. Password request means 1022 for requesting input, redirection request means 1023 for requesting connection to the download site of the personal information transfer server 1, completion of transmission / reception to the user personal computer 4 by output of the transfer confirmation log and output of the discard certification log, and Completion notification means 1024 for notifying completion of disposal, completion notification receiving means 1025 for receiving notification of completion of sending / receiving of encrypted personal information with an electronic signature, discard instruction means 1026 for notifying an instruction for discarding encrypted personal information with an electronic signature, Accepts personal information request with electronic signature and download site connection request Provided that a request receiving means 1027, the.

  Referring to FIG. 3B, the data transfer processing unit 103 includes an applet download unit 1031 for downloading the personal information management applet to the user personal computer, and a key sending unit for sending the public key and its private key to the user personal computer. 1032; file name sending means 1033 for sending the personal information file name to the user personal computer; and personal information download means 1034 for sending the encrypted personal information encrypted with the public key to the user personal computer. .

  Referring to FIG. 3C, the authentication processing unit 104 adds an identifier of the personal information transfer server 1 itself to the user password, and sends an authentication information sending means for sending a user authentication request to the user authentication server 3. 1041 and authentication stop means 1042 for requesting stop of use of the user identifier and password.

  Referring to FIG. 3D, the key and verification processing unit 105 sends a key generation request to the certificate authority server 2 and receives a public key and its private key, and a digital signature verification request. Is sent to the certificate authority server 2 and electronic signature verification means 1052 for obtaining the verification result is provided.

  Referring to FIG. 3 (e), the log creation processing unit 106 creates an exchange confirmation log means 1061 that creates an exchange confirmation log of personal information and outputs it to the exchange confirmation log file 16; A discard proof log means 1062 for outputting to the log file 17.

  Referring to FIG. 3 (f), the user search processing unit 107 secretly stores the leakage source specifying means 1071 for detecting the secret key attached to the encrypted personal information, the transfer confirmation log file 16 and the discard certification log file 17. User search means 1072 for searching by a public key corresponding to the key and identifying a user.

  Referring to FIG. 4A, the encrypted personal information 412 downloaded to the user personal computer 4 is stored in the storage area 40 as the maintenance form personal information 41 to which the secret key 411 is added.

  Referring to FIG. 4B, the user personal computer 4 includes a browser 42 that connects the personal information transfer server 1 via the Internet 5, a personal information management applet 43 that is downloaded from the personal information transfer server 1 and incorporated into the browser 42. Are provided in the storage area 40.

  Referring to FIG. 4 (c), the personal information management applet 43 includes an encryption key maintaining means 431 for storing a public key (not shown) and its private key and the secure personal information 41 in the storage area 40, and a personal information transfer server. The electronic signature verifying means 432 for the electronic signature attached to the notification from No. 1, the encryption key invalidating means 433 for invalidating the protected public key and its private key, and the secure form personal information 41, and the electronic signature. An electronic signature adding means 434 for generating and adding and means 435 for terminating the personal information management applet 43 itself are provided.

  Referring to FIG. 5, the transfer confirmation log file 16 is a file that records the transfer of personal information possessed by the personal information transfer server 1 by the user personal computer 4. The transfer confirmation log record 161 includes a user identifier 162, It includes an exchange date / time 163, an exchanged personal information file name 164, an electronic signature 165, and a public key 166.

  Referring to FIG. 6, the discard certification log file 17 is a certification record file in which the personal information transfer server 1 discards the encryption key and personal information held in the user personal computer 4, and the discard certification log record 171 is a user identifier. 172, discard date 173, discarded personal information file name 174, invalidity certificate 175, and public key 176.

  Next, the operation of the personal information transfer server 1 will be described with reference to FIG. The personal information transfer server 1 authenticates the user using the user authentication server 3 with an identifier and a password, and then requests the certificate authority server 2 to issue a public key and a secret key thereof. The public key and its private key are sent and stored in the storage area 40 by the downloaded personal information management applet 43.

  The personal information is transmitted / received by transmitting the personal information obtained by encrypting the personal information obtained from the personal information file (not shown) by the personal information transfer server 1 using the public key to the user personal computer 4, and using the personal information management applet 43. In the storage area 40, the storage format personal information 41 to which the secret key is added is stored.

  After the user personal computer 4 receives and sends the encrypted personal information, the personal information management applet 43 sends a completion notice with an electronic signature digitally signed with a private key to the personal information transfer server 1. The personal information transfer server 1 requests the certificate authority server 2 to verify the electronic signature, and generates and records an exchange confirmation log 161 including a certificate and a public key based on the verification result. The personal information transfer server 1 sends a completion notice to the user personal computer 4 and ends the personal information exchange.

  After decrypting and browsing the maintenance form personal information 41 on the user personal computer 4, when the maintenance form personal information 41 is discarded, the personal information transfer server 1 uses the user authentication server 3 to identify the user with an identifier and a password. After the authentication, the user personal computer 4 sends a request for discard instruction with an electronic signature to the personal information transfer server 1 in order to discard the maintenance form personal information 41. The personal information transfer server 1 requests the certificate authority server 2 to verify the electronic signature, and sends a discard instruction with an electronic signature to the user personal computer 4 based on the verification result of the electronic signature. The user personal computer 4 verifies the electronic signature by the personal information management applet 43, discards the private key 411 of the maintenance form personal information 41 according to the discard instruction, and invalidates the encrypted personal information 412.

  Next, in order to invalidate the public key, the personal information management applet 43 sends to the personal information transfer server 1 an invalid certificate issuance request with an electronic signature generated by the private key. The personal information transfer server 1 requests the certificate authority server 2 to verify the invalid certificate issuance request with the electronic signature. Based on the verification result, the certificate authority server 2 stops using the public key, and the user authentication server 3 After deleting the user identifier and password, a discard certificate log 171 is generated and registered in the discard certificate log file 17. The personal information transfer server 1 sends a completion notice to the user personal computer 4, and the personal information management applet 43 deletes and discards the public key to be maintained and its private key, and terminates itself.

  Since the secret key 411 is attached to the secure format encrypted personal information 41 when the secure format encrypted personal information 41 is leaked, the certificate authority server 2 uses the encrypted personal information 412 handled by the personal information transfer server 1. Whether or not there is can be determined by the encryption key management file 21 that manages the secret key 411. In such a case, it is possible to easily identify the user by estimating the leakage source from the public key, the personal information transfer confirmation log file 16 or the personal information discard certification log file 17.

  The personal information transfer server 1 and the user personal computer 4 are connected by the Internet 5 and communicate by http. The personal information transfer server 1, the user authentication server 2, and the certificate authority server 3 are connected by an intranet 6 and communicate by a protocol defined by the intranet.

  Next, a description will be given with reference to FIG. 7 showing an operation of executing the personal information transfer confirmation method in this embodiment. On the premise that the user of this personal information communication system is registered in advance, the identifier, initial password, and URL of the user himself / herself are sent by mail or encrypted mail prior to sending / receiving the personal information. Shall.

  The user connects the user personal computer 4 to the Internet 5, inputs a URL to connect to the personal information transfer server 1, sends an identifier and an initial password by CGI of the Internet communication means 101 of the personal information transfer server 1, and notifies The user accepting means 1021 of the processing unit 102 accepts it (Step 501). The authentication processing unit 104 of the personal information transfer server 1 sends the server's own identifier, user identifier, and initial password to the user authentication server 3 and makes an authentication request (step 502). The user authentication server 3 verifies the user identifier and the initial password with the authentication data registration file 31 and, when authentication is possible, sends OK to the authentication processing unit 104 (step 503). The authentication processing unit 104 confirms that the user has received the initial password in advance by the OK, and sends the password input screen for requesting a new password to the user personal computer 4 by the notification processing unit 102 (step). 504). The user inputs a new password not known to others into the user personal computer 4 and sends it to the personal information transfer server 1 (step 505).

  When the notification processing unit 102 receives the new password, the authentication processing unit 104 sends the identifier of the personal information transfer server 1 itself, the identifier of the user, the initial password, and the new password to the user authentication server 3. The user authentication server 3 changes the password of the authentication data registration file 31 (step 506). The user authentication server 3 sends OK for the password change to the authentication processing unit 104 (step 507). The notification processing unit 102 sends a redirect request for connection to the download site of the personal information management applet to the user personal computer 4 (step 508).

  The user personal computer 4 requests a download site connection, and the notification processing unit 102 accepts the connection request (step 509). In response to the connection request, the data transfer processing unit 103 obtains a personal information management applet from the applet file 18 and downloads it to the user personal computer 4 (step 510). The browser 42 of the user personal computer 4 operates by incorporating the downloaded personal information management applet into the browser 42 of the storage area 40, and sends a key acquisition request to the personal information transfer server 1 (step 511).

  The notification processing unit 102 makes a key acquisition request to the certificate authority server 2 through the key and verification processing unit 105 (step 512). The certificate authority server 2 obtains the public key and its private key from the encryption key management file 21, and sends them to the key and verification processing unit 105 (step 513). The key and verification processing unit 105 sends the key to the user personal computer 4 through the data transfer processing unit 10103, and the personal information management applet 43 maintains the key in the predetermined storage area 40 (step 514).

  The user personal computer 4 sends a personal information download site connection request to the personal information transfer server 1 (step 515). The notification processing 102 accepts the connection request, and the data transfer processing unit 103 sends a personal information file name list that can be referred to by the user from the personal information management table (not shown) to the user personal computer 4 (step 516). . The user personal computer 4 displays a list of personal information file names, and the user designates personal information. The personal information management applet 43 generates an electronic signature and sends a personal information request with an electronic signature to the personal information transfer server 1 (step 517). The notification processing unit 102 sends a personal information request with an electronic signature to the certificate authority server 2 by the key and verification unit 105, and requests verification of the electronic signature (step 518). The certificate authority server 2 obtains and verifies the public key for verifying the electronic signature from the encryption key management file 21, and obtains a certificate indicating that the verification result is valid and the public key, and a key and verification processing unit. 105 (step 519).

  The data transfer processing unit 103 sends the encrypted personal information encrypted using the public key to the user personal computer 4, and the personal information management applet 43 of the user personal computer 4 stores the secret key 411 in the encrypted personal information 412. Is stored in the storage area 40 (step 520). The user decrypts the encrypted personal information 412 with the private key 411 of the maintenance format personal information 41, displays it, and browses the contents. Personal information is confirmed by browsing to complete the exchange of personal information, and the user inputs the completion of the exchange of personal information. The personal information management applet 43 generates an electronic signature using the private key, and sends an exchange completion notice with an electronic signature to the personal information transfer server 1 (step 521).

  The notification processing unit 102 receives the notification of completion of transfer with an electronic signature, sends it to the certificate authority server 2, and requests verification of the electronic signature (step 522). When the verification result of the electronic signature is correct, the certificate authority server 2 sends the certificate and the public key used for verification to the key and verification processing unit 105 (step 523). Based on the certificate, the log creation means 106 outputs a log including the user identifier, date and time, personal information file name, electronic signature, and public key to the transfer confirmation log file 15 (step 524). ), The completion is sent to the user personal computer 4 (step 525). The personal information management applet 43 of the user personal computer 4 invalidates itself and ends.

  Next, the operation of executing the personal information discarding method in this embodiment will be described with reference to FIG. The user connects the user personal computer 4 to the Internet 5, inputs a URL, connects to the personal information transfer server 1, and follows the instruction by the CGI of the Internet communication means 100 of the personal information transfer server 1, A password is sent (step 601). The notification processing unit 102 of the personal information transfer server 1 sends its own identifier, user identifier, and password to the user authentication server 3 through the authentication processing unit 104 and makes an authentication request (step 602). The user authentication server 3 refers to the authentication data registration file 31 using the user identifier and password, authenticates the user, and sends OK to the authentication processing unit 104 (step 603).

  After authenticating the user, the authentication processing unit 104 sends a redirection request, which is a request for connection to the download (DL) site of the personal information management applet, to the user personal computer 4 through the notification processing unit 102 (step). 604). The user personal computer 4 connects to the download site of the personal information transfer server 1 (step 605). The data transfer processing unit 103 downloads the personal information discard applet of the applet file 18 to the user personal computer 4 and operates by being incorporated in the browser 42 of the user personal computer 4 (step 606).

  When the user inputs a personal information discard request to the user personal computer 4, the personal information management applet 43 generates an electronic signature, and sends a discard instruction request with an electronic signature to the personal information transfer server 1 (step 607). The notification processing unit 102 sends an electronic signature verification request with its own identifier to the certificate authority server 2 through the key and verification processing unit 105 (step 608). The certificate authority server 2 verifies the electronic signature, and if it can be verified that the electronic signature is correct, sends the certificate and the public key to the key and verification processing unit 105 (step 609). Based on the certificate, the key and verification processing unit 105 electronically signs a personal information discard instruction and sends it to the user personal computer 4 (step 610).

  The personal information management applet 43 of the user personal computer 4 verifies the electronic signature and verifies the validity of the discard instruction. Then, the personal information management applet 43 discards the stored maintenance-type personal information 41 and completes the disposal. In order to invalidate the public key, an electronic signature is generated and an invalid certificate issue request with an electronic signature is sent to the personal information transfer server 1 (step 611). The key and verification processing unit 105 sends a request for issuing an invalid certificate with its own identifier and electronic signature to the certificate authority server 2 (step 612). The certificate authority server 2 verifies the electronic signature, and if it is verified that the electronic signature is valid, the public key of the encryption key management file 22 is invalidated and the use is stopped, and the invalid certificate and the public key are keyed. And sent to the verification processing unit 105 (step 613).

  The authentication processing unit 104 sends its own identifier, user identifier, and password to the user authentication server 3 and makes a user authentication stop request (step 614). The user authentication server 3 deletes the user identifier and password from the authentication data file 31, and sends OK to the authentication processing unit 104 (step 615). Based on the invalid certificate, the log creation processing unit 106 outputs a discard certificate log including a user identifier, date and time, personal information file name, invalid certificate, and public key to the discard certificate log file 17 (step 616). The notification processing unit 102 sends the completion to the user personal computer 4 when the stop of the public key, the output of the discard certification log, and the stop of the user authentication are all completed (step 617). Upon receipt of the completion, the user personal computer 4 discards the public key and the secret key that have been maintained, returns the control to the browser 42, and terminates the disposal of personal information.

  Next, the operation of executing the personal information leakage source search method in the personal information communication system will be described with reference to FIG. When leaked personal information is input to the personal information transfer server 1 (step 701), the user search processing unit 107 extracts the secret key 411 added to the maintenance form personal information 41 (step 702). The key and verification processing unit 105 sends the secret key 411 to the certificate authority server 2 and requests verification (step 703). The certificate authority server 2 searches the encryption key management file 21 for a public key corresponding to the secret key, and sends it to the key and verification processing unit 105 (step 705). The user search processing unit 107 searches the transfer confirmation log file 16 and the discard certificate file 17 using the public key, and detects a user who leaked personal information (step 706). Leakage investigation based on the contents recorded in the transfer confirmation log and the disposal certification log can be implemented for the corresponding user.

  The above description is based on the assumption that the personal information transfer server 1 and the personal computer 7 communicate with each other using the well-known http protocol over the Internet 5 and the authentication server 3 and the certificate authority 2 with the standard intranet 6 protocol. However, as a matter of course, the security of the intranet 6 can be enhanced by using SSL or a dedicated protocol. Further, it is clear that more secure personal information communication can be realized on the premised Internet 5 using a dedicated line, a wide area Ethernet, a VPN, or the like.

  Further, it is obvious that each processing unit in the above description is executed by a program unit, and the program unit is mounted on a system file (not shown) and loaded into a storage area to operate.

  As an application example of the present invention, it can be used for exchanging personal information and personnel information with a contractor of a personnel information system or a joint venture.

It is a figure which shows embodiment of this invention. It is a figure which shows the processing apparatus structure of the personal information transfer server in this embodiment. 2 shows details of the configuration of the processing apparatus shown in FIG. 2, where a part (a) is a notification processing part, a part (b) is a data transfer part, part (c) is an authentication part, and part (d) is a key and verification. The processing part, part (e) is a log creation part, and part (f) is a diagram showing a user search part. The partial diagram (a) shows the configuration of the maintenance form personal information, the partial diagram (b) shows the configuration of the storage area of the user personal computer, and the partial diagram (c) shows the configuration of the personal information management applet. It is a figure which shows the record structure of an exchange confirmation log file. It is a figure which shows the record structure of a discard proof log file. It is a figure which shows the operation | movement which performs the transfer confirmation method of personal information. It is a figure which shows the operation | movement which performs the destruction certification | authentication method of personal information. It is a figure which shows the operation | movement which performs the leakage source identification method of personal information.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Personal information transfer server 2 Certification authority server 3 User authentication server 4 User personal computer 5 Internet 6 Intranet 10 Processing device 16 Transfer confirmation log file 17 Disposal certification log file 18 Applet file 21 Encryption key management file 31 Authentication data registration file 40 Storage Area 41 Encrypted personal information 42 Browser 43 Personal information management applet 101 Internet communication means 102 Notification processing unit 103 Data transfer processing unit 104 Authentication processing unit 105 Key and verification processing unit 106 Log creation processing unit 107 User search processing unit 108 Intranet communication Part

Claims (18)

A user authentication server having an authentication data registration file for registering a user identifier and password, and performing the user authentication process;
A certificate authority server that has an encryption key management file for managing a public key and its private key, manages the public key and private key sent to the user, and verifies the electronic signature, and is connected to the first network. A personal information transfer server;
The user uses a personal computer to request and view personal information, and the personal information transfer server and the user personal computer are connected via a second network;
The personal information transfer server is
An exchange confirmation log file for accumulating an exchange confirmation log including the public key and the exchange time of the personal information for confirming that personal information has been exchanged;
The user personal computer discards the personal information held by the user personal computer, the public key and the private key thereof, the certificate authority server stops using the public key and the private key, and is used by the user authentication server. A proof log file for accumulating a proof log including the public key and the trash time of the personal information certifying that the authentication data of the person has been deleted;
A completion notice receiving means for receiving a completion notice with an electronic signature generated with the private key sent from the user personal computer, a discard instruction means for notifying the user personal computer of a discard instruction with an electronic signature, and the user A request accepting means for accepting a request for personal information with an electronic signature generated from the private key sent from a personal computer;
Based on a key acquisition request from the user personal computer, key sending means for sending the public key and its private key to the user personal computer, and file name sending means for sending a personal information file name to the user personal computer And a personal information download means for sending encrypted personal information obtained by encrypting the personal information with the public key based on the personal information request from the user personal computer, and a data transfer processing unit,
A transfer confirmation log means for creating the transfer confirmation log based on the transfer completion notification from the user personal computer and outputting it to the transfer confirmation log file, and an invalid with electronic signature generated with the private key from the user personal computer A log creation processing unit including a discard certification log means for creating a discard certification log based on a certificate issuance request and outputting the log to a discard certification log file;
The leakage source specifying means for detecting the secret key attached to the encrypted personal information and the public key corresponding to the detected secret key are used to search the transfer confirmation log file and the discard certification log file, and A user search means for identifying a user, and a user search processing unit including:
A personal information communication system in which the user personal computer creates and saves secure personal information by adding the secret key to the encrypted personal information. The data transfer processing unit further includes applet download means for downloading a personal information management applet to the user personal computer ,
The personal information management applet, and conservation said a public key and its private key is downloaded from the personal information transfer server, and the conservation format personal information created when憶領area,
That sends the personal information request, the added electronic signature generated by the secret key to the transfer completion notification and the disabled certificate issue request
The personal information communication system according to claim 1. The notification processing unit
And user acceptance means that accepts the connection request by the initial password and the registered password is sent from the user's personal computer,
The personal information communication system according to claim 1, further comprising password request means for requesting the user personal computer to input a new password. 4. The personal information communication system according to claim 1, wherein the notification processing unit further includes a redirect request unit that sends a redirect request for requesting connection to the download site from the personal information transfer server. 5. An authentication information sending means for attaching an identifier of the personal information transfer server itself to the password of the user and sending the user authentication request to the user authentication server;
Personal information communication system according to any one of claims 1 to 4 authentication further comprises a stop means, including the authentication processing unit of the requesting use stop of the user identifier and password. Key management means for sending a key generation request to the certificate authority server and receiving the public key and its private key;
Send a verification request of the electronic signature to the authentication station server, personal information communication according an electronic signature verification means for obtaining a verification result, to one of the claims 1 to 5 further comprising an including key and the verification processing unit system. Comprises a user authentication server to perform authentication processing of the user has the authentication data registration file to register the user identifier and password, the encryption key management file that manages the public key and its private key A certificate authority server that manages and verifies the digital key and the public key and private key sent to the user, a personal information transfer server connected to the first network, and the user requests and browses the personal information. The user computer to be used is connected to the second network,
To confirm that you have exchanged personal information, including the transfer time of the public Kagi及 beauty the personal information, and the exchange confirmation log file that stores the exchange confirmation log,
The user personal computer discards the personal information held by the user personal computer, the public key and the private key thereof, the certificate authority server stops using the public key and the private key, and is used by the user authentication server. The personal information transfer server including a discard certification log file for accumulating a discard certification log, which includes the public key and the discard time of the personal information, certifying that the authentication data of the person has been deleted,
Sent from the user's personal computer, and the completion notification receiving step to receive physical electronic signature with transfer completion notification generated by the secret key,
And discard instruction step to notify the electronic signature with a discard instruction to the user PC,
And the request acceptance step to receive physical and electronic signature with personal information request generated by the secret key to be sent from the user's personal computer,
Based on the key obtaining request from the user's personal computer, and a key sending step subjecting send the public key and its private key to the user PC,
And file name sending step subjecting send a personal information file name to the user PC,
A personal information download step of sending encrypted personal information obtained by encrypting the personal information with the public key based on the personal information request from the user personal computer;
And transfer confirmation log step to force out the exchange confirmation log file to create the exchange confirmation log on the basis of the transfer completion notification from the user's personal computer,
And disposal certification log step for the force out to the disposal certificate log files to create a disposal certificate log on the basis of the electronic signature with invalid certification issue request generated by the secret key from the user's personal computer,
A leakage source specifying step of detect the secret key attached to the encrypted personal information,
Includes, and user search step to identify the the user to search for the transfer confirmation log file and the disposal proof log file by using the public key corresponding to the private key that is the detection,
A method comprising : an encryption key preservation step in which the user personal computer creates and saves secure form personal information by adding the secret key to the encrypted personal information. The personal information transfer server further includes a step of downloading a personal information management applet to the user personal computer prior to the key sending step ;
The personal information applet is
Prior to the discard proof log step, an electronic signature added to the personal information transfer server by adding the electronic signature generated with the private key to the personal information request, the transfer completion notification and the invalid certificate issuance request. step includes a flop,
The said encryption key preservation | save step WHEREIN: The said public key downloaded from the said personal information transfer server, its private key, and the created said preservation | save form personal information are preserve | saved in the storage area of the said user personal computer . Method. The personal information transfer server is
Prior to the key sending step, a user accepting step for accepting a connection request with an initial password and a registered password sent from the user personal computer,
The method according to claim 7, further comprising a password requesting step of requesting the user personal computer to input a new password prior to the key sending step . 8. The personal information transfer server further includes a redirect request step of sending a redirect request for requesting connection to a download site from the personal information transfer server to the user personal computer prior to the key sending step. The method in any one of thru | or 9. The personal information transfer server is
Prior to the key sending step, a first authentication information sending for sending the user authentication request to the user authentication server by attaching the personal information transfer server's own identifier to the password of the user. Steps,
Prior to the discarding instruction step, a second authentication information sending for sending the user authentication request to the user authentication server by attaching the personal information transfer server's own identifier to the password of the user. Steps,
The method according to any one of claims 7 to 10, further comprising: an authentication stop step for requesting stop of use of the user identifier and password after the execution of the discard instruction step . The personal information transfer server is
Prior to the key sending step, a key management step of sending a key generation request to the certificate authority server and accepting the public key and its private key;
A first electronic signature verification step of sending an electronic signature verification request to the certificate authority server after obtaining the request, and obtaining a verification result;
12. The method according to claim 7, further comprising: a second electronic signature verification step of sending an electronic signature verification request to the certificate authority server and obtaining a verification result after execution of the completion notification acceptance step. the method of.


  A user authentication server that performs an authentication process of the user with an authentication data registration file for registering a user identifier and password, and an encryption key management file that manages a public key and a secret key thereof. Connected to the certificate authority server that manages the public key and private key sent to the user and verifies the electronic signature, via the first network,
  A user who creates and saves personal information in a secure format by adding the secret key to encrypted personal information obtained by encrypting the personal information with the public key, which the user uses to request and browse the personal information. Connected to a computer via a second network,
  An exchange confirmation log file for accumulating an exchange confirmation log including the public key and the exchange time of the personal information for confirming that personal information has been exchanged;
  The user personal computer discards the personal information held by the user personal computer, the public key and the private key thereof, the certificate authority server stops using the public key and the private key, and is used by the user authentication server. A proof log file for accumulating a proof log including the public key and the trash time of the personal information certifying that the authentication data of the person has been deleted;
  A completion notice receiving means for receiving a completion notice with an electronic signature generated with the private key sent from the user personal computer, a discard instruction means for notifying the user personal computer of a discard instruction with an electronic signature, and the user A request accepting means for accepting a request for personal information with an electronic signature generated from the private key sent from a personal computer;
  Based on a key acquisition request from the user personal computer, key sending means for sending the public key and its private key to the user personal computer, and file name sending means for sending a personal information file name to the user personal computer And a personal information download means for sending the encrypted personal information based on the personal information request from the user personal computer, a data transfer processing unit including:
  A transfer confirmation log means for creating the transfer confirmation log based on the transfer completion notification from the user personal computer and outputting it to the transfer confirmation log file, and an invalid with electronic signature generated with the private key from the user personal computer A log creation processing unit including a discard certification log means for creating a discard certification log based on a certificate issuance request and outputting the log to a discard certification log file;
  The leakage source specifying means for detecting the secret key attached to the encrypted personal information and the public key corresponding to the detected secret key are used to search the transfer confirmation log file and the discard certification log file, and A user search processing unit including a user search means for identifying a user,
  Personal information transfer server.   The data transfer processing unit maintains the public key downloaded from the personal information transfer server and the private key thereof, and the created personal information in the storage area in a storage area.
  Applet download means for downloading a personal information management applet that transmits the personal information request, the transfer completion notification, and the invalid certificate issuance request with an electronic signature generated with the secret key.
  The personal information transfer server according to claim 13.   The notification processing unit
  User accepting means for accepting a connection request with an initial password and a registered password sent from the user personal computer;
  Password request means for requesting the user personal computer to input a new password.
The personal information transfer server according to claim 13 or 14.   The notification processing unit further includes redirect request means for sending a redirect request for requesting connection from the personal information transfer server to the download site.
  The personal information transfer server according to claim 13.   An authentication information sending means for attaching an identifier of the personal information transfer server itself to the password of the user and sending the user authentication request to the user authentication server;
  And an authentication processing unit that requests to stop using the user identifier and password.
  The personal information transfer server according to claim 13.   Key management means for sending a key generation request to the certificate authority server and receiving the public key and its private key;
  An electronic signature verification means for sending an electronic signature verification request to the certificate authority server and obtaining a verification result;
  The personal information transfer server according to any one of claims 13 to 17.

Images