JP5414425B2 - Electronic signature verification device - Google Patents

Description

  The present invention verifies an electronic certificate of a signer who applied an electronic signature to a signature target and signed electronic data having a signature time as a part of the signature data in response to a verification request, and responds with a verification result. Relates to the device.

  Conventionally, in an electronic signature system having an electronic signature server, a certificate authority, and a user terminal, the electronic signature server uses an electronic certificate issued to the user by the certificate authority when an electronic signature is requested from the user terminal. The electronic data was signed and stored.

  In such an electronic signature system, an electronic signature or a time stamp is applied to electronic data to be put in a tampering detection state, and the electronic data to which the electronic signature or the time stamp is applied is stored as a storage target.

  When the user terminal accesses the stored electronic data, the user terminal makes an electronic signature verification request to the electronic signature server, and the electronic signature server verifies the electronic signature of the electronic data in response to the electronic signature verification request. I do. Therefore, the electronic signature server also functions as an electronic signature verification device. In verifying the electronic signature of such electronic data, the electronic signature verification device determines whether the electronic data has been tampered with, the issuer, owner, expiration date, expiration date, etc. of the electronic certificate used for the signature. The determination is made using data acquired from the certificate authority that issued the electronic certificate, and the validity of the electronic data is confirmed (for example, Patent Document 1).

JP 2008-98783 A

  However, verification of an electronic signature requires a certain amount of processing time to execute a series of processes. If a large number of electronic signature verification requests are concentrated on the electronic signature verification apparatus, the processing load on the electronic signature verification apparatus is reduced. There is a problem that the time until the electronic signature verification apparatus outputs the verification result increases as the number increases.

  In order to shorten the time until the electronic signature verification device outputs the verification result, instead of verifying the electronic signature every time an electronic signature verification request is made, the verification result obtained by verifying the past electronic signature is used. It is also possible to output the verification result as the current verification result and simply verify the electronic signature. However, considering that the threat of tampering with electronic data will gradually increase after digital signatures, reuse of verification results obtained by verifying past digital signatures as they are is not possible with respect to verification results output over time. There was a problem that reliability was lowered.

  An object of the present invention is to provide an electronic signature verification apparatus capable of performing electronic signature verification at high speed and with high reliability.

  In order to solve such a problem, the present invention verifies a signed electronic data having a signature time as a part of the signature data with a digital signature of a signer who has signed an electronic signature on a signature target in response to a verification request, An electronic signature verification device that returns a verification result, and stores a storage unit that stores the signed electronic data and the verification result in association with each other, obtains revocation information of the electronic certificate from the certificate authority, and validates the electronic certificate And verifying whether the signature target has been tampered with, verifying the signed electronic data, storing the verification result in the storage unit, and using the verification result stored in the storage unit A simple verification unit that verifies the completed electronic data, and if the signed electronic data that received the verification request is unauthenticated by the verification unit or if a predetermined time has elapsed from the signature time, the verification unit performs verification, and other states To provide an electronic signature verification apparatus characterized by having a verification selection unit to execute the simple verification by the simple verification unit, if any.

  The electronic signature verification apparatus further includes an expiration date confirmation unit that confirms the expiration date of the revocation information, and the verification selection unit determines that the expiration date is valid even if the verification request is after a predetermined time from the signature time. If it is confirmed that it is within, it is preferable to execute the simple verification by the simple verification unit.

  In addition, the present invention verifies an electronic certificate of a signer who applied an electronic signature to a signature object and signed electronic data having a signature time as part of the signature data in response to a verification request, and returns an electronic verification result. A signature verification device that stores signed electronic data and verification results in association with each other, obtains certificate revocation information from a certificate authority, verifies the validity of the digital certificate, and signs it Verifying whether the electronic data has been tampered with, verifying the signed electronic data, storing the verification result in the storage unit, and verifying the signed electronic data using the verification result stored in the storage unit Simple verification unit to perform, expiration date confirmation unit to confirm the expiration date of the revocation information, and verification unit if the signed electronic data that received the verification request confirms that the verification unit is unauthenticated or the expiration date is outside the expiration date Validation It is the row, to provide an electronic signature verification apparatus characterized by having a verification selection unit to execute the simple verification by simple verification unit if other conditions.

  Such an electronic signature verification device generates a falsification detection data for detecting falsification of a verification result when the verification result is stored in a storage unit, and uses the falsification detection data to detect a falsification of the verification result. The simple verification unit preferably sets verification NG as the verification result when the verification result alteration detection unit detects falsification.

  ADVANTAGE OF THE INVENTION According to this invention, the electronic signature verification apparatus which can perform electronic signature verification at high speed and high reliability can be provided.

1 is a configuration diagram of an electronic signature system in which an electronic signature verification apparatus according to the present invention is used. It is a figure which shows the data structure of a file storage record. It is a figure which shows the 1st data structure of a verification result storage record. It is a process flowchart of the electronic signature server of FIG. It is a figure which shows the 2nd data structure of a verification result storage record. It is a modification of the process flowchart of the electronic signature server of FIG. It is a figure which shows the 3rd data structure of a verification result storage record. It is a modification of the process flowchart of the electronic signature server of FIG. It is a modification of the process flowchart of the electronic signature server of FIG.

An embodiment of an electronic signature verification apparatus according to the present invention will be described with reference to the drawings.
The electronic signature verification apparatus according to the present invention, when it is necessary to ensure the reliability of verification of the electronic signature, selects to perform the verification of the electronic signature by executing a series of processes, and the reliability of verification of the electronic signature This is a device that selects simple verification using the past verification result of the electronic signature when the security is ensured.

  FIG. 1 is a configuration diagram of an electronic signature system in which an electronic signature verification apparatus according to the present invention is used. The electronic signature system shown in FIG. 1 is applied to, for example, an in-house system, and includes a storage device 1, an electronic signature server 2 as an electronic signature verification device, a user terminal 3, a certificate authority 4, and a communication network 5. Have.

  The storage device 1 stores a user information management database (DB) that stores information on a user who is an electronic certificate issuer (for example, information such as a user identification number (ID), name, email address, affiliation, etc.). . For this purpose, the storage device 1 includes at least one of a rewritable nonvolatile memory such as a flash memory and an EEPROM, a magnetic hard disk, a rewritable optical disk, and a drive thereof. The data recorded in the user information management DB can be added, updated or deleted by the system administrator.

  The electronic signature server 2 realizes functions such as verification of an electronic file stored as a signature target stored in the electronic signature server 2 and signed electronic data generated by applying an electronic signature to the electronic file. For this purpose, the electronic signature server 2 performs various controls of the electronic signature server 2 and the communication interface (I / F) unit 21 that communicates with the storage device 1, the user terminal 3, and the certificate authority 4 through the communication network 5. A control unit 22, a storage unit 23, and a timer unit 24 are included.

  The communication I / F unit 21 includes a communication interface and a driver that perform communication using a predetermined communication protocol. The control unit 22 includes a CPU, a ROM, a RAM, and the like, and performs overall control of the electronic signature server 2 according to a program. For this purpose, the control unit 22 includes an electronic signature unit 221, a verification unit 222, a simple verification unit 223, a verification selection unit 224, an expiration date confirmation unit 225, and a verification result alteration detection unit 226.

  In response to an electronic signature request from the user terminal 3, the electronic signature unit 221 performs an electronic signature on an electronic file that is a signature target stored in the storage unit 23. At this time, signed electronic data having the electronic certificate of the signer who applied the electronic signature to the signature target and the signature time as part of the signature data is generated. The electronic signature unit 221 stores the cache usable period in the storage unit 23 in association with the electronic file. The verification unit 222 obtains the latest certificate revocation list (CRL (Certificate Revocation List)) necessary for verifying the validity of the electronic certificate used for the electronic signature from the certificate authority 4 as revocation information, Data is verified and the verification result is stored in the storage unit 23. The simple verification unit 223 performs simple verification that is output as a verification result of signed electronic data using a cache that is a past verification result of the signed electronic data obtained by the verification unit 222 and stored in the storage unit 23. The verification selection unit 224 performs verification by the verification unit 222 and the simple verification unit 223 according to the presence / absence of the verification result cache, the cache usable period or the CRL validity period as a predetermined period of time during which the verification result cache can be used. Select whether to perform simple verification by. The expiration date confirmation unit 225 manages the CRL update schedule acquired by the verification unit 222 as the CRL expiration date. The verification result alteration detection unit 226 generates alteration detection data, saves the generated alteration detection data in the storage unit 23, and detects alteration of the detection result cache using the alteration detection data.

  The storage unit 23 includes at least one of a rewritable nonvolatile memory such as a flash memory and an EEPROM, a magnetic hard disk, a rewritable optical disk, and a drive thereof. The storage unit 23 also includes signed electronic data, an electronic file, a file name of the electronic file, a cache usable period of the electronic file, a verification result cache, tampering detection data for detecting tampering with the verification result cache, CRL, Various control information used by the control unit 22 is stored.

  The time measuring unit 24 provides the verification selecting unit 224 with the current time used to determine which of the verification by the verification unit 222 and the simple verification by the simple verification unit 223 is selected. For this purpose, the timer unit 24 is constituted by a clock or the like.

  The user terminal 3 stores the electronic file in the storage unit 23, browses the electronic file stored in the storage unit 23, signs the electronic file stored in the storage unit 23, and stores the electronic file stored in the storage unit 23. Performs signature verification of file-signed electronic data, setting of cache usable period, etc. For this purpose, the user terminal 3 is constituted by, for example, a personal computer (PC). Further, the user terminal 3 performs various controls of the user terminal 3 such as a communication I / F unit 31 that communicates with the electronic signature server 2 through the communication network 5 and designation of an electronic file in the storage unit 23 or the storage unit 35. A control unit 32 to perform, an input unit 33 for inputting a password such as a PIN (Personal Identification Number), a cache usable period, a display unit 34 for displaying the contents of an electronic file, a signature result, a verification result, and the like, and a control And a storage unit 35 for storing various control information used in the unit 32. Note that the cache usable period input by the input unit 33 is, for example, predicted to frequently access the electronic file from the user terminal 3 and reliable even if the verification result cache is used. The start date and time and the end date and time of the period assumed to be secured are set, and the start date and time can be set as the signature time, or can be set as an arbitrary period such as 24 hours or 48 hours.

  The communication I / F unit 31 includes a communication interface and a driver that perform communication using a predetermined communication protocol. The control unit 32 includes at least one of a CPU, a ROM, a RAM, and the like, and performs overall control of the user terminal 3 according to a program. The input unit 33 includes a mouse, a keyboard, and the like. The display unit 34 is configured by an LCD or the like. The storage unit 35 includes at least one of a rewritable nonvolatile memory such as a flash memory and an EEPROM, a magnetic hard disk, a rewritable optical disk, and a drive thereof.

  Based on the request from the electronic signature server 2, the certificate authority 4 is a P12 (PKCS (Public Key Cryptography Standards) # 12) file composed of an electronic certificate including a public key and user information, a private key, and a PIN. An electronic certificate with a simple password. Here, PKCS is a standard that defines the format of electronic certificates and private keys used in PKI (Public Key Infrastructure). PKCS # 12 is the twelfth standard, and includes private keys and electronic certificates. A format for exchanging documents is defined. Further, the certificate authority 4 manages information on whether each certificate issued by itself is revoked within the expiration date. This information is periodically updated, and a list of data in a list format is called a CRL, and the certificate authority 4 supplies the CRL to the outside. For this purpose, the certificate authority 4 includes a communication I / F unit 41 that communicates with the electronic signature server 2 through the communication network 5, a control unit 42 that performs various controls of the certificate authority 4, and various types that are used in the control unit 42. And a storage unit 43 that stores control information and the like.

  The communication I / F unit 41 includes a communication interface and a driver that perform communication using a predetermined communication protocol. The control unit 42 includes a CPU, a ROM, a RAM, and the like, and performs the overall control of the certificate authority 4 according to a program. The storage unit 43 includes at least one of a rewritable nonvolatile memory such as a flash memory and an EEPROM, a magnetic hard disk, a rewritable optical disc, and a drive thereof.

  The communication network 5 is connected to the storage device 1, the electronic signature server 2, the user terminal 3, and the certificate authority 4. For this reason, the communication network 5 is configured by a communication line capable of transmitting and receiving data between remote places such as a dedicated line, the Internet, a mobile phone line, and a general public line, or between indoor and remote places.

  FIG. 2 is a diagram illustrating a data structure of a file storage record. The file storage record shown in FIG. 2 is stored in the storage unit 23, and has a file name and a cache usable period (start date / time and end date / time). Such a file storage record is referred to by the verification selection unit 224 in order to select between verification by the verification unit 222 and simple verification by the simple verification unit 223.

  FIG. 3 is a diagram illustrating a first data structure of the verification result storage record. The verification result storage record illustrated in FIG. 3 is stored in the storage unit 23 and includes a key file name, a verification result, a verification data hash, and falsification detection data. Such a verification result storage record is referred to the simple verification unit 223 in order to perform simple verification using the verification result cache, and is also referred to by the verification result alteration detection unit 226 to detect falsification of the verification result. The

  Data that is preferably displayed on the display unit 34 is used as the verification result. In this case, information on the signer name, the signature time, and the signature certificate is used. The data hash at the time of verification is unique data acquired from the electronic file stored in the storage unit 23 by passing the electronic file through a hash function, and is, for example, a fixed value having a predetermined number of bits (for example, 160 bits). It becomes. As will be described later, the alteration of the electronic file can be detected by using the data hash at the time of verification. The tampering detection data is, for example, hash data composed of verification result storage records in order to prevent tampering of the verification result storage records.

  Next, the processing flow of the electronic signature server in FIG. 1 will be described. Note that the processing flow described below is controlled by a program executed by the control unit 22.

  FIG. 4 is a process flowchart of the electronic signature server of FIG. In this processing flow, the file management record having the data structure shown in FIG. 2 and the verification result storage record having the data structure shown in FIG. 3 are used.

  In the processing flow shown in FIG. 4, first, the verification selection unit 224 receives a signature verification request from the user terminal 3 trying to refer to the electronic file so as to verify the signed electronic data corresponding to the electronic file (step S1). ). Next, the verification selection unit 224 determines whether the verification result cache of the electronic file requested for signature verification is stored in the storage unit 23, that is, whether the verification by the verification unit 222 is unverified (first time). (Step S2). If it is determined that the verification result cache is not stored in the storage unit 23, that is, the verification by the verification unit 222 is unverified (first time), the verification selection unit 224 uses the verification unit 222 to verify the signed electronic data. Choose to perform verification. As a result, the verification unit 222 acquires the electronic file requested by the user terminal 3 for signature verification from the storage unit 23 (Step S3), acquires revocation information from the certificate authority 4, and performs verification processing of the electronic signature (Step S3). S4) The verification result cache is stored in the storage unit 23 together with the hash of the electronic file (step S5). The hash of the electronic file stored at this time corresponds to the verification data hash in FIG. Next, the verification result alteration detection unit 226 generates alteration detection data by applying a hash function to the verification result cache, and stores the alteration detection data in the storage unit 23 (step S6). Next, the verification unit 222 transmits to the user terminal 3 a report that the verification by the verification unit 222 has been completed, that is, information about the verification result of the signed electronic data of the electronic file verified by the verification unit 222. (Step S7), this routine is finished.

  On the other hand, if the verification result cache is stored in the storage unit 23 in step S2, that is, if it is determined that the verification by the verification unit 222 is not unverified (first time), the verification selection unit 224 Whether the current time is within the cache available period by inquiring the time and referring to the cache available period of the file management record stored in the storage unit 23 and comparing the current time with the cache available period. Judgment is made (step S8). If it is determined that the current time is not within the cache available period, the process proceeds to step S3. On the other hand, when it is determined that the current time is within the cache usable period, the verification selection unit 224 selects the simple verification unit 223 to perform simple verification of the signed electronic data using the verification result cache. . As a result, the simple verification unit 223 determines whether or not the hash of the latest electronic file created by passing the target electronic file through the hash function matches the verification data hash (step S9). When it is determined that the hash of the electronic file does not match the data hash at the time of verification, the simple verification unit 223 determines that the electronic file has been tampered with, and reports the NG report of the simple verification, that is, information that the tampering has occurred to the user terminal 3 (step S10), and this routine is terminated.

  On the other hand, when it is determined in step S9 that the hash of the electronic file matches the data hash at the time of verification, the simple verification unit 223 acquires the verification result cache from the storage unit 23, and performs simple verification using the verification result cache. It performs (step S11). Next, the verification result alteration detection unit 226 determines whether or not the verification result cache stored in the storage unit 23 has been altered using the alteration detection data (step S12). That is, the verification result alteration detection unit 226 determines whether or not the verification result cache matches the falsification detection data. If they match, the verification result alteration detection unit 226 determines that the verification result has not been altered. If they are different, it is determined that the verification result has been tampered with. If the verification result cache has been tampered with, the process proceeds to step S10. On the other hand, when the verification result cache has not been tampered with, the simple verification unit 223 sends a report to the user terminal 3 that the simple verification by the simple verification unit 223 is OK, that is, information that there is no tampering. (Step S13), this routine is finished.

  According to the processing flow shown in FIG. 4, if it is determined in step S2 that the verification result cache is not stored in the storage unit 23, the verification process by the verification unit 222 is performed in step S4. If it is determined that the time is within the cache available period and the verification result cache is stored in the storage unit 23 in step S2, simple verification processing by the simple verification unit 223 is performed in step S11. Yes. Therefore, it is predicted that access to the electronic file from the user terminal 3 is frequently performed, and the verification result cache is stored in the storage unit 23 and reused for a certain period of time when the reliability of the verification result is ensured. By doing so, the electronic signature verification can be performed at high speed.

  Even when it is determined in step S8 that the current time is not within the cache usable period, the verification process by the verification unit 222 is performed in step S4. Therefore, it is predicted that access to the electronic file from the user terminal 3 is frequently performed, the reliability of the verification result is ensured, and if the predetermined time specified by the cache usable period is exceeded, the verification result is cached. By prohibiting reuse, it is possible to perform electronic signature verification with high reliability.

  Further, falsification detection data is generated in step S6, and whether or not the verification result cache is falsified in step S12 is determined by using the falsification detection data, thereby detecting the falsification of the verification result cache. Therefore, the reliability of electronic signature verification can be further increased. If tampering of the verification result is detected in step S12, the process may proceed to step S3 without proceeding to step S10, and the verification by the verification unit 222 may be executed from the simple verification unit 223.

  FIG. 5 is a diagram illustrating a second data structure of the verification result storage record. The verification result storage record illustrated in FIG. 5 is stored in the storage unit 23 and includes a verification data hash that is a key, a verification result, and falsification detection data.

  FIG. 6 is a modification of the processing flowchart of the electronic signature server of FIG. In this processing flow, the file management record having the data structure shown in FIG. 2 and the verification result storage record having the data structure shown in FIG. 5 are used.

  In the processing flow shown in FIG. 6, after receiving the signature verification request in step S1, the verification selection unit 224 acquires the hash of the electronic file as the data hash at the time of verification (step S21), and then proceeds to step S2. If it is determined in step S2 that the verification result cache is stored in the storage unit 23, it is determined in step S8 that the current time is within the cache available period, and then the determination in step S9 is performed. The simple verification process by the simple verification unit 223 is performed in step S11 without performing it. In this way, the processing can be simplified by using the data hash at the time of verification as the key of the verification result management record instead of the file name.

  FIG. 7 is a diagram illustrating a third data structure of the verification result storage record. The verification result storage record illustrated in FIG. 7 is stored in the storage unit 23 and includes a key file name, a verification result, a CRL expiration date, a verification data hash, and falsification detection data.

  FIG. 8 is a modification of the processing flowchart of the electronic signature server of FIG. In this processing flow, the file management record having the data structure shown in FIG. 2 and the verification result storage record having the data structure shown in FIG. 7 are used.

  In the processing flow shown in FIG. 8, when it is determined in step S2 that the cache of the verification result is stored in the storage unit 23, the verification selection unit 224 inquires the time measurement unit 24 about the current time and also stores the storage unit. It is determined whether the current time is within the CRL validity period by referring to the CRL validity period of the verification result storage record stored in 23 and comparing the current time with the CRL validity period (step S31). If it is determined that the current time is not within the CRL expiration date, the process proceeds to step S3. On the other hand, if it is determined that the current time is within the CRL validity period, the process proceeds to step S9.

  In step S3, after acquiring the electronic file from the storage unit 23, the verification unit 222 acquires the CRL from the certificate authority 4 (step S32), and the process proceeds to step S4. Further, after the verification result cache is stored in the storage unit 23 in step S5, the authentication unit 222 stores the latest CRL effective date in the storage unit 23, and proceeds to step S6.

  According to the processing flow shown in FIG. 8, when it is determined in step S2 that the cache of the verification result is not stored in the storage unit 23, or when it is determined in step S31 that the current time is not within the CRL expiration date. In step S4, verification processing by the verification unit 222 is performed. If it is determined in step S31 that the current time is within the CRL validity period, simple verification processing by the simple verification unit 223 is performed in step S11. Accordingly, by updating the verification result cache stored in the storage unit 23 in accordance with the update of the CRL, the verification result cache is reused only during a period in which the validity of the electronic certificate does not change. It can be performed at high speed and with high reliability.

  FIG. 9 is a modification of the processing flowchart of the electronic signature server of FIG. In this processing flow, the file management record having the data structure shown in FIG. 2 and the verification result storage record having the data structure shown in FIG. 7 are used.

  In the processing flow shown in FIG. 9, when it is determined in step S2 that the verification result cache is stored in the storage unit 23, the verification selection unit 224 inquires the time measurement unit 24 about the current time and also stores the storage unit. It is determined whether or not the current time is within the cache usable period by referring to the cache usable period of the file storage record stored in 23 and comparing the current time with the cache usable period (step S41). If it is determined that the current time is not within the cache available period, the process proceeds to step S31. On the other hand, if it is determined that the current time is within the cache available period, the process proceeds to step S9.

  According to the processing flow shown in FIG. 9, if it is determined in step S41 that the current time is not within the cache usage period, and if it is determined in step S31 that the current time is within the CRL validity period, then in step S11. If the simple verification process by the simple verification unit 223 is performed and it is determined in step S41 that the current time is not within the cache usage period, and the current time is determined not to be within the CRL validity period in step S31, then in step S4 Verification processing by the verification unit 222 is performed. Therefore, it is predicted that access to the electronic file from the user terminal 3 is frequently performed, and the reliability of the verification result is ensured. Even if a certain time specified by the cache usable period is exceeded, the verification result Reuse of the cache is allowed. Further, by updating the verification result cache stored in the storage unit 23 in accordance with the update of the CRL, the verification result cache is reused only during a period in which the validity of the electronic certificate does not change. As a result, electronic signature verification can be performed at high speed and with high reliability.

  The present invention is not limited to the above-described embodiment, and many changes and modifications can be made. For example, the case where the electronic signature system having the electronic signature verification apparatus according to the present invention is applied to the in-house system has been described. However, the electronic signature system having the electronic signature verification apparatus according to the present invention is applied to a system other than the internal system. can do.

  The case where the electronic file, the cache usable period of the electronic file and the cache of the verification result are stored in the storage unit 23 has been described, but the file storage device that stores the electronic file and the cache usable period of the electronic file, and the cache of the verification result Can be provided separately from the electronic signature server 2. In this case, the electronic signature server 2 reads the electronic file stored in the file storage device and the cache usable period of the electronic file and the verification result cache stored in the verification result storage device via the communication network 5. To be able to.

  The case where the CRL is used as the revocation information has been described. As the revocation information, a result obtained by using an OCSP (Online Certificate Status Protocol) that inquires whether or not the certificate in the certificate authority 4 has been revoked. , Instead of CRL or in combination with CRL.

  Although the case where only the electronic signature is applied to the electronic file has been described, it is possible to apply the electronic signature to the electronic file and to apply the time stamp to the electronic file by a time stamp authority (not shown) connected to the communication network 5.

  Although the case where falsification detection data is created by passing the verification result cache through the hash function has been described, the falsification detection data can also be created by passing the verification result cache through a function other than the hash function.

DESCRIPTION OF SYMBOLS 1 Storage device 2 Electronic signature server 3 User terminal 4 Authentication station 5 Communication network 21, 31, 41 Communication I / F part 22, 32, 42 Control part 23, 35, 43 Storage part 33 Input part 34 Display part 221 Electronic signature part 222 Verification Unit 223 Simple Verification Unit 224 Verification Selection Unit 225 Expiration Date Confirmation Unit 226 Verification Result Tampering Detection Unit

Claims (4)

An electronic signature verification apparatus that verifies an electronic certificate of a signer who has signed an electronic signature and a signed electronic data having a signature time as part of the signature data in response to a verification request and returns a verification result. ,
A storage unit for storing the signed electronic data and the verification result in association with each other;
Revocation information of the electronic certificate is obtained from a certificate authority, the validity of the electronic certificate is confirmed, the signed object is confirmed to be falsified, and the signed electronic data is verified. A verification unit to be stored in the storage unit;
A simple verification unit that verifies the signed electronic data using the verification result stored in the storage unit;
If the signed electronic data for which the verification request has been received is unauthenticated by the verification unit or if a predetermined time has elapsed from the signature time, verification by the verification unit is executed, and in other states, simple verification by the simple verification unit A verification selection unit for executing
An electronic signature verification apparatus comprising: It further has an expiration date confirmation unit for confirming the expiration date of the revocation information,
2. The simple verification unit according to claim 1, wherein the verification selection unit causes the simple verification unit to execute simple verification if the verification request confirms that the expiration date is within the expiration date even if the verification request is after the predetermined time from the signature time. Electronic signature verification device. An electronic signature verification apparatus that verifies an electronic certificate of a signer who has signed an electronic signature and a signed electronic data having a signature time as part of the signature data in response to a verification request and returns a verification result. ,
A storage unit for storing the signed electronic data and the verification result in association with each other;
Revocation information of the electronic certificate is obtained from a certificate authority, the validity of the electronic certificate is confirmed, the signed object is confirmed to be falsified, and the signed electronic data is verified. A verification unit to be stored in the storage unit;
A simple verification unit that verifies the signed electronic data using the verification result stored in the storage unit;
An expiration date confirmation unit for confirming the expiration date of the revocation information;
If the signed electronic data that has received the verification request is unauthenticated by the verification unit or the expiration date is confirmed to be out of the expiration date, verification by the verification unit is executed. A verification selector for performing verification;
An electronic signature verification apparatus comprising: A tamper detection unit that generates tamper detection data for detecting tampering of the verification result when storing the verification result in the storage unit, and detects tampering of the verification result using the tamper detection data;
The electronic signature verification apparatus according to any one of claims 1 to 3, wherein when the verification result alteration detection unit detects falsification, the simple verification unit sets verification NG as a verification result.

Images