JP2000261428A - Authentication device in decentralized processing system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To attain an authentication function that can be used even for an agent system. SOLUTION: For example, a computer 1-2 is selected as a master computer among computers 1-1 to 1-3. An agent management section 112 of the computer 1-2 uses a public key sent from each of agent management sections 112, 312 to an encryption processing section 223 so as to encrypt a master private key and distributes the encrypted key to the computers 1-1, 1-3. The computers 1-1, 1-3 decode the encrypted master private key by using its own private key, give respectively the master private key to public key certificate generating sections 125, 325 and the master public key to digital signature verification sections 122, 322.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an authentication apparatus in a distributed processing system for authenticating whether a sender of communication data is a holder of a correct private key and a public key by using a digital signature system. About.

[0002]

2. Description of the Related Art In a distributed processing system, a plurality of computers are connected to a network to perform various processes in a distributed manner, so that data communication is frequently performed between the computers.

When data communication is performed in such a distributed processing system, there is a possibility that a third party may pretend to have transmitted data, or that a transmitter / receiver denies data transmission / reception. Further, while the data moves through the network, there is a possibility that the transmission data may be maliciously altered or destroyed by a third party.

In order to eliminate such a possibility, it is necessary to first guarantee that the data to be transmitted is correct, and then perform the other party authentication to determine whether or not the communication partner is genuine.
As an authentication device having such an authentication function, there are an authentication device using a digital signature method and an authentication device using a symmetric key encryption method.

In an authentication device using a digital signature method as a first authentication device, a communication device adds a digital signature to communication data and transmits the data to the other party.

[0006] This digital signature method is an encryption using two encryption keys: a private key (PrivateKey) kept secret by the user himself and a public key (PublicKey) disclosed to others.
This is a method for performing decryption. This digital signature is one of the cryptographic techniques, and a private key and a public key are used in pairs.
Data encrypted with a private key cannot be decrypted unless it is a corresponding public key.

[0007] To perform a digital signature, communication data is encrypted using a private key of the sender. Although the communication data may be encrypted as it is, the load increases, so usually, a characteristic pattern is extracted from the entire communication data using a one-way hash function, and a digest is generated. Perform encryption. This encrypted form becomes a digital signature.

[0008] The receiver receiving the communication data to which the digital signature has been added verifies the digital signature.
To verify the digital signature, the received data is decrypted using the public key of the sender who is the signer of the digital signature.

When the communication data is a digest, a hash operation is performed on the communication data in the same manner as the sender, and the calculated data is compared with the decrypted data. If they match, it can be verified that the digital signature was indeed signed by the sender who held the private key, and that the communication data was from that sender.

This makes it possible to prevent the sender from being rejected, and when the third party falsifies or the receiver falsifies the data, the data becomes inconsistent. Can prevent the data from being tampered with, and the validity of the data to be transmitted is guaranteed.

Next, the sender must be authenticated by associating whether the sender is indeed the holder of the secret key. That is, it is necessary to authenticate that the sender of the communication data is the holder of the correct private key and public key.

[0012] This is because if such an association is not made, a person who attempts to impersonate a true sender, for example,
If the true sender's public key is replaced with your own public key and a digital signature encrypted with your own private key is sent to the recipient, communication even if the recipient decrypts with the public key of the impersonator This is because the data matches, and the other party is incorrectly authenticated.

For this reason, a CA that manages the sender's public key
A trusted authority called (Certification Authority) is set up, the authority CA certifies the public key of the sender with a public key certificate, and distributes this public key certificate to third parties.

In order to create this public key certificate, the institution C
A uses the private key of agency CA for the sender's public key,
A digital signature as described above is performed. The secret key of this agency CA is strictly self-managed.

The institution CA adds a digital signature of the institution CA to the sender information, issuer information, validity period, public key, and the like. This is the public key certificate. This public key certificate has high reliability equivalent to a seal certificate issued by a public organization in the real world.

The recipient of the communication data receives the public key certificate, decrypts the digital signature using the sender public key included in the public key certificate, and obtains a correct verification result. , The sender can be associated with the private key holder. This confirms that the sender is genuine.

Next, Kerberos is used as the second authentication device.
Is well known. Kerberos is an authentication device using a symmetric key cryptosystem that performs encryption and decryption with a single secret key. In this system, each entity (service user, provider) in the system stores a secret key in advance in a KDC (Key Dist
registration in a server called a ribution center (key distribution center), a service user who uses a certain service in the system requests a ticket to the service provider from the KDC,
The KDC returns the ticket to the service user, and the service user receives the service by presenting the ticket to the service provider.

In this Kerberos, during this time, encryption is performed according to the communication path using a secret key registered in the KDC or a session key used temporarily so that the contents are not known to a third party. Authenticate the other party with a third party.

In recent years, an agent system using an agent which is software having a message communication function, a function of moving between computers, and the like has been actively researched.

[0020] The agent here (Agent: agent)
An agent is software that works on behalf of a person and works independently. Agents are generated and disappear in computers, and messages are exchanged between agents on each computer or moved to another computer. You can also do.

Since the agent is an object having a strong anthropomorphic element as the name implies, it is desirable that the agent can authenticate the source agent at the time of message communication. An authentication function is required because objects that are not obvious must be excluded.

[0022]

However, in such an agent system, a standard agent authentication function has not yet been established.

This is because an agent is dynamically generated or moves between computers. In a conventional authentication apparatus using a digital signature system, a public key certificate is issued to an institution CA every time an agent is generated. It is also considered that the public key certificate must be issued and the agent's identity is required to be authenticated, which makes the load extremely large and makes it difficult to apply the existing asymmetric key cryptography. Because it can be done.

When Kerberos using symmetric key cryptography is used for an agent system, KD
C must be installed, and a secret key must be registered in the KDC each time an agent is generated, and a ticket must be requested from the KDC every time message communication or agent communication is performed. For this reason, the load becomes extremely large, and it is similarly difficult to apply Kerberos to the agent system. Especially when using Kerberos, it is difficult to distribute the load on the system.

Therefore, in order to realize an authentication function that can be used for an agent system, it is necessary to distribute such a load. In order to distribute the load, a digital signature method must be used. Can be considered.

[0026]

The present invention employs the following structure to solve the above problems. <Configuration 1> An authentication apparatus in a distributed processing system according to claim 1, wherein each computer includes an encryption key pair generation unit that generates an encryption key pair including a public key and a secret key of the computer. And the master computer encrypts the master secret key generated by the encryption key pair generating means of the master computer using the sender public key of the sender of the communication data. Master secret key encryption means for encrypting, the sender of the communication data receives the master secret key encrypted by the encryption means in the master computer, and transmits the encrypted master secret key to the sender. Master secret key decryption means for decrypting the original master secret key using the secret key, and encrypting the communication data with the sender's secret key to encrypt the communication data; Digital signature processing means for generating a digital signature, encrypting the sender's own public key using the master secret key decrypted by the master secret key decryption means, and generating a digital signature of the sender public key; Public key certificate generation means for generating a public key certificate by attaching a digital signature of a sender public key generated by the digital signature processing means to a sender public key; Transmitting means for transmitting a signature and a public key certificate, wherein the receiver of the communication data receives communication data from the sender, a digital signature of the communication data and a public key certificate; The receiving unit decrypts the digital signature of the sender public key included in the public key certificate received by the receiving unit into the original sender public key using the master public key, and obtains the digital signature of the sender public key. As well as verification and to and a digital signature verification means for verifying the digital signature of the communication data by using the sender's public key decrypted.

<Configuration 2> In the authentication apparatus in the distributed processing system according to the second aspect of the present invention, an agent for a sender and a receiver is generated in each of the computers to manage the agent, and the generated agent is An agent management means is provided for assigning a public key certificate certifying that the sender is a public key using the sender's own private key and master secret key.

<Structure 3> In the authentication apparatus in the distributed processing system according to the third aspect of the present invention, the agent management means on the sender side extracts a secret key of the sender from the agent, and uses the secret key to perform a predetermined operation. And generating a digital signature using the digital signature, and generating an authenticator for authenticating the agent using the digital signature. When the digital signature is received, the digital signature verification unit is configured to verify the received authenticator.

<Structure 4> In the authentication apparatus in the distributed processing system according to the invention of claim 4, the agent on the sender side adds an authenticator and a public key certificate to the communication data and sends the data to the agent on the receiver side. It is configured to transmit.

<Structure 5> In the authentication device in the distributed processing system according to the invention of claim 5, at least one of the plurality of computers is provided with a cooperative space shared by all agents, and the agent performs authentication. The data to which the child and the public key certificate are added is transmitted to the cooperative space.

<Structure 6> In the authentication apparatus in the distributed processing system according to the invention of claim 6, a server for connecting computer resources to the network and using the computer resources for at least one of the plurality of computers. And the agent is configured to transmit data to which the authenticator and the public key certificate are added to the server.

[0032]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments of the present invention will be described below using specific examples. <Example 1> In Example 1, a master encryption key pair is safely distributed using one of a plurality of computers connected to a network as a master computer, and each computer is made public using the master encryption key pair. A key certificate is generated, digital signature is performed on communication data, and message communication is performed between agents.

FIG. 1 is a block diagram showing the configuration of the first embodiment. The network 11 includes a plurality of computers, for example, three computers 1-1, 1-2, 1-
3 are connected.

The computer 1-1 includes an application program 101, an agent system 110,
It is configured to include an encryption-related processing unit 120 and a network interface unit 130.

Similarly, the computer 1-2 includes the application program 201 and the agent system 21.
0, an encryption-related processing unit 220, and a network interface unit 230.
-3 includes an application program 301, an agent system 310, an encryption-related processing unit 320, and a network interface unit 330.

Next, the detailed configuration will be described.
Since the configurations of the computers 1-1 to 1-3 are exactly the same, only the configuration of the computer 1-1 will be described here. The application program 101 is a program that performs actual application processing. The agent system 110 includes an agent 111,
This is a system in which an agent management unit 112 is arranged to operate the agent 111. Note that, as described above, the substance of the agent means software in the system, and the same applies to the sender and the receiver. Hereinafter, these terms will be used as they are.

The agent management unit 112 is an agent management unit that manages the agent 111.
It supports the functions of generating the agent 111, message communication, and moving between computers.

The agent management unit 112 performs lower protocol processing when the agent 111 performs message communication and moves between computers in cooperation with the agent management units 212 and 312 of other computers.

The encryption-related processing section 120 includes a digital signature processing section 121, a digital signature verification section 122, an encryption processing section 123, a decryption processing section 124, a public key certificate generation section 125, and an encryption key generation section. And a part 126.

The encryption key generation unit 126 responds to the generation instruction
It outputs an encryption key pair consisting of a secret key and a public key of an asymmetric key cryptosystem that can be used for both encryption and digital signature.

The public key certificate generation unit 125 holds a master private key (described later) for digital signature in advance, and stores user information,
This is a block for inputting a user public key and outputting a public key certificate.

The encryption processing unit 123 is a block for inputting the data to be encrypted and the public key and outputting the encrypted data. The decryption processing unit 124 is a block that inputs encrypted data and a secret key and outputs encrypted data.

The digital signature processing section 121 is a block for inputting data to be signed and a signature private key, and outputting digital signature data. The digital signature verifying unit 122 is a block that holds a master public key (described later) obtained from the agent managing unit 112 at the time of system initialization, and verifies a digital signature added to communication data received from another computer. is there. The network interface unit 130 is an interface for communicating with other computers 1-2 and 1-3 via the network 11.

The computer 1-1 in this system
1 to 3 is a master computer. In the first specific example, the computer 1-2 will be described as a master computer.
-3 may be always used as the master, or the master may be changed each time it is started.

Here, when the computer 1-2 becomes the master computer and transmits communication data from the agent management unit 112 on the computer 1-1 to the agent management unit 212 on the computer 1-2, the computer 1-1 , The digital signature processing unit 121 as the digital signature processing unit, the public key certificate generation unit 125 as the public key certificate generation unit, and the network interface unit 130 as the transmission unit. And the encryption processing unit 22 on the computer 1-2.
3 corresponds to a master key encryption unit, the network interface unit 230 corresponds to a reception unit, and the digital signature verification unit 222 corresponds to a digital signature verification unit.

<Operation> When the system is started, distribution processing of a master encryption key pair is performed. FIG. 2 is a flowchart showing the distribution process of the master encryption key pair.
FIG. 4 is an explanatory diagram showing the relationship between keys in this processing.

In step 1 (in the figure, the step is described as “S”), the agent management units 112, 212, 31
2 generates an encryption key pair of a secret key and a public key. This process is performed by the encryption key generation units 126, 226, and 326. The encryption key pair generated by the master computer 1-2, that is, the secret key and the public key become the master secret key and the master public key.

In step 2, it is determined whether or not the user is a master. If it is determined that the user is not the master, the process proceeds to step 3. In step 3, the agent management units 112 and 312 other than the master
1 and sends its public key to the master.

If it is determined in step 2 that the user is the master, the process proceeds to step 8. In step 8, the agent management unit 212 of the master computer 1-2 receives the public key sent from the agent management units 112 and 312.

In step 9, the master agent management unit 212 publishes the master public key, encrypts the master secret key with the public key transmitted from each of the agent management units 112 and 312, and transmits the encrypted master secret key. ,
The public key is sent to the agent management units 112 and 312 via the network 11.

In step 4, the agent management unit 11
2 and 312 receive the master public key transmitted from the master agent management unit 212 and the master private key encrypted with its own public key. In step 5, the decryption processing units 12 of the computers 1-1 and 1-3 other than the master
4,324 decrypts the master secret key using its own secret key.

In step 6, each of the computers 1-1 to 1-1
1-3, the agent management units 112, 212, and 312 respectively transmit the master secret key to the public key certificate generation units 125, 2
25, 325. In step 7, the agent management units 112, 212 and 312 pass the master public key to the digital signature verification units 122, 222 and 322.

Thus, the encryption key pair of the master can be securely stored in the agent management units 112, 212, 312 of each computer.
Can be distributed. Then, the encryption-related processing units 120, 220, and 320 of each computer share the master key pair, and each computer has the above-described CA function.

FIG. 4 is an explanatory diagram for explaining the agent generation processing. Here, an operation in which the agent management unit 112 generates an agent will be described as an example.

A public key certificate that certifies that the generated public key is its own is created by the public key certificate generation unit 125. That is, in the public key certificate generation unit 125, the generated own public key is encrypted with the master secret key together with the agent information including ID information, a digital signature is created, and the digital signature is added to the public key and the like. Is done. This is the agent public key certificate.
The agent 111 is provided with the agent public key certificate and its own private key, so that the agent 111 has a digital signature function.

Since the agent 111 has a digital signature function, the application program 101
Agent 211 of another computer in place of
And the like can perform message communication and the like.

FIG. 5 is a flowchart showing the operation at the time of message communication in the first embodiment. Here, as an example, an operation in which the agent 111 is a sender and performs message communication with the agent 211 of the computer 1-2 as a receiver will be described.

Steps 11 and 12 are executed by the transmitting agent 111. Step 11
Then, the digital signature processing unit 121 inputs its own agent private key and a communication object as communication data. The digital signature processing unit 121 performs a digital signature on the communication object using the agent secret key given to the agent 111 at the time of generation.

As described above, the digital signature is generated by encrypting a digest generated by extracting a characteristic pattern from the communication data itself or the entire communication data by using a one-way hash function. It is a thing.

In step 12, the agent 111
Sends the communication object, the digital signature of the communication object, and the public key certificate as a message to the agent 211 as a message.

It should be noted that the transmission source agent 111 can designate an agent to receive a message as described above, and can perform multicast message communication.

Steps 21 and 22 are executed by the receiving computer 1-2. Step 2
In step 1, the agent 211 delivers the received message to the digital signature verification unit 222.

In step 22, the digital signature verification unit 2
22 verifies the digital signature. To verify, first
By using the public key certificate of the agent 111, it is confirmed whether or not the public key of the agent 111 belongs to the agent 111. That is, the digital signature attached to the public key certificate is decrypted using the master public key, and the decrypted data is compared with the original data to confirm that they match.

Next, the digital signature of the communication object is decrypted using the public key included in the public key certificate, and it is verified whether or not the decrypted data matches the original communication object. If they match, it is determined that a correct verification result has been obtained, and it is verified that this communication object has been transmitted from the transmission agent 111. As described above, the message communication is performed while the other party is being authenticated.

Each of the agents 111, 211, and 311 can move between computers. For example, if the agent 111 of the computer 1-1 is the computer 1
-2, the application program 1
01 calls the agent management unit 112 and instructs the agent 111 to move.

FIG. 6 is a flowchart showing processing when the agent 111 moves. Steps 31 to 3
Step 3 is executed by the agent management unit 112 at the transfer source. In step 31, the agent management unit 112
Extracts the agent private key from the agent 111 to be moved and delivers it to the digital signature processing unit 121.

In step 32, the digital signature processing unit 1
21 creates an authenticator for the agent 111. This authenticator is data for transmitting its identity to the other party, and cannot be easily generated by a third party. The authenticator is generated, for example, by applying a digital signature to a representation of the current time as an integer.

In step 33, the agent management unit 1
12 transmits the agent 111 to be moved and the created authenticator to the agent management unit 212 of the computer 1-2 at the destination. As described above, the mobile agent 111 includes its own agent private key and agent public key certificate.

Steps 41 to 46 are executed by the destination agent management unit 212. In step 41, the agent management unit 212
1 and the authenticator are received.

In step 42, the agent management unit 2
12 takes out the agent public key certificate from the mobile agent 111. In step 43, the authenticator is verified using the digital signature verification unit 222. Verification of the authenticator is performed by decrypting the digital signature using the public key of the agent 111 that has been proved to belong to the sender by the agent public key certificate.

In step 44, it is determined whether or not a correct authentication result has been obtained as a result of verifying the authenticator. For example, if the authenticator is generated by applying a digital signature to an integer representing the current time, if the decrypted data is within the allowable range for the current time, a correct authentication result will be obtained. If it is obtained, the process proceeds to step 45, and the movement of the agent 111 is permitted.

If the correct verification result is not obtained, the process proceeds to step 46, and the movement of the agent 111 is rejected. This prevents a third party from impersonating.

<Effects of Specific Example 1> As described above, according to Specific Example 1, the encryption processing unit 223 of the master computer 1-2 uses the public key transmitted from each of the agent management units 112 and 312 to execute the master processing. The secret key is encrypted and distributed to the computers 1-1 and 1-3.
Since this master secret key is decrypted in 1-3,
Since the computers 1-1 and 1-3 can securely hold the master private key and can create a digital signature and a public key certificate, the load for performing authentication is distributed and the computer is open to the public. There is no need to install a dedicated server for issuing a key certificate or a ticket, and it is possible to prevent impersonation of a third party, denial of data transmission / reception by a sender / receiver, and falsification or destruction of transmission data.

Therefore, even in an agent system in which the authentication function is not standardized, the agent system can easily cooperate with the agent authentication.

In the first embodiment, the case where the present invention is applied to an agent system has been described. However, a network system that does not use an agent system can be widely used.

<Example 2> In Example 2, a cooperative space is arranged in a computer. FIG. 7 is a block diagram showing the configuration of the second embodiment. In specific example 2,
The cooperative space 240 is arranged in the computer 1-2, and the printer 2 as a computer resource is connected to the network 11. The computer 1-3 includes a printer server 350 for the printer 2.

The cooperative space 240 is a server program, but functionally all the agents 11 in the system
Agents 111, 211, and 311 can read, write, and write entries to the cooperative space 240.

A write notification request is a request to make a notification when another agent writes an entry. In the cooperative space 240, the cooperative space 24
0 includes a cooperative space access policy data 241 that defines an access policy to access.

The access policy is, for example, a policy for determining whether or not the agent 111 can access the cooperative space 240. The printer server 350 of the computer 1-3 includes printer access policy data 351. The same elements as those in the first embodiment are denoted by the same reference numerals, and description thereof will be omitted.

<Operation> Agent 1 of each computer
11, 211, and 311 can request the cooperative space 240 to access the read, write, and write notification requests of the entry.

FIG. 8 is a flowchart showing the operation when accessing the cooperative access space according to the second embodiment. still,
Here, an operation when the agent 111 of the computer 1-1 accesses the cooperative space 240 will be described as an example. Steps 51 and 52 are executed by the agent 111.

In step 51, the agent 111 connects to the cooperative space 240, which is a server program, and creates an authenticator for the agent 111 using its own agent private key.

At step 52, the agent 111
Transmits an access command such as reading or writing to the cooperative space 240 together with the created authenticator and public key certificate. Steps 61 to 67 are executed by the cooperative space 240 requested to access. In step 61, the cooperative space 240 receives the transmitted access command.

In step 62, the cooperative space 240 verifies the authenticator using the digital signature verification unit 222. In step 63, it is determined whether a correct authentication result has been obtained as a result of verifying the authenticator.

When a correct verification result is obtained, the process proceeds to step 64. In step 64, the cooperative space access policy data 241 is referred to. In step 65, it is determined whether or not the access command of the agent 111 complies with the access policy of the cooperative space 240.

If it is determined that the access policy is followed, the process proceeds to step 66, where access to the cooperative space 240 is permitted. As a result, the agent 111 requests reading, writing, and writing of the entry to the cooperative space 240.

Next, at step 63, when the authenticator is verified, no correct verification result is obtained, or at step 65, it is determined that the access command of the agent 111 does not comply with the access policy of the cooperative space 240. Goes to the step, cooperative space 2
Deny access to 40. As a result, access to the cooperative space 240 by the person impersonating the true transmission source is prevented.

Next, the agent 11 of each computer
1, 211, and 311 can request the printer 2 for output via the network 11. FIG. 9 is a flowchart showing the operation at that time, and the operation when the agent 111 accesses the printer 2 will be described as an example. Steps 71 and 72 are Agent 1
11 is executed by the agent management unit 112 that manages 11.

In step 71, the agent management unit 1
12 extracts the agent secret key from the agent 111, inputs the agent secret key and, for example, the current time to the digital signature processing unit 121, and creates an authenticator for the agent 111.

In step 72, the agent 111 sends a printer output command to the printer server 350 together with the authenticator of the agent 111 and the public key certificate.

Steps 81 to 87 correspond to the printer server 35.
Performed by 0. In step 81, a printer output command is received. In step 82, the authenticator is verified using the digital signature verification unit 322. Step 8
In 3, it is determined whether or not a correct verification result is obtained as a result of verifying the authenticator.

When a correct verification result is obtained, the process proceeds to step 84. In step 84, the printer access policy data 351 is referred to. In step 85, it is determined whether the printer output command of the agent 111 complies with the printer access policy.

If the printer output command complies with the printer access policy, the flow advances to step 86 to permit the printer output. Next, in step 83, when a correct verification result is not obtained as a result of verifying the authenticator,
Alternatively, if it is determined in step 85 that the access policy has not been complied with, the process proceeds to step 87, where the printer output is rejected.

<Effects of Specific Example 2> As described above, according to Specific Example 2, the cooperative space 24 of the computer 1-2 can be used.
0, since the printer server 350 of the computer 1-3 performs authentication, the agent management units 112, 212, and 312 cooperate without installing a dedicated server for issuing a public key certificate or a ticket in the system. , An agent authentication mechanism can be formed.

Further, by using this agent system, when an agent accesses the cooperative space 240 or accesses a resource, access control can be performed in combination with an access policy created by a system administrator.

Although the printer has been described as the computer resource in the specific example 2, various other computer resources such as a file and an external network connection may be used.

For example, if the present apparatus is used for a search service, video distribution, communication karaoke, video-on-demand, translation service, etc., it is possible to exclude those who intend to use such services illegally.

[Brief description of the drawings]

FIG. 1 is a configuration diagram showing a configuration of a specific example 1 of the present invention.

FIG. 2 is a flowchart illustrating a process at the time of distributing a master encryption key pair according to the first embodiment.

FIG. 3 is an explanatory diagram showing a relationship between keys at the time of distributing a master encryption key pair according to the first embodiment.

FIG. 4 is an explanatory diagram for describing an agent generation process of a specific example 1.

FIG. 5 is a flowchart illustrating an operation at the time of message communication according to the first embodiment;

FIG. 6 is a flowchart illustrating a process when the agent according to the first specific example moves.

FIG. 7 is a configuration diagram illustrating a configuration of a specific example 2 of the present invention.

FIG. 8 is a flowchart showing an operation when accessing the cooperative access space according to the second embodiment.

FIG. 9 is a flowchart illustrating a printer output process according to a specific example 2.

[Explanation of symbols]

1-1 to 1-3 Computer 2 Printer 11 Network 110, 210, 310 Agent System 112, 212, 312 Agent Management Unit 120, 220, 320 Cryptographic Processing Unit 130, 230, 330 Network Interface Unit 240 Cooperative Space 350 Printer Server

Claims (6)

[Claims] In a distributed processing system in which a plurality of computers and computer resources used by each computer are connected to a network, a sender of communication data sends a predetermined communication data to a receiver on the plurality of computers. When a digital signature encrypted using a secret key kept secret by the sender is transmitted, the recipient is proved to be the sender's identity by a predetermined public key certificate. Using the sender's public key, the encrypted digital signature is decrypted, and whether the decrypted data and the communication data match or not is verified. If the verification result indicates that the communication data is correct, the sender of the communication data is correct. An authentication device for authenticating a holder of a private key and a public key, wherein each computer has an encryption key pair including its own public key and a secret key. A plurality of computers, and one of the plurality of computers is used as a master computer. The master computer uses the sender public key of the sender of the communication data to send the communication data to the master computer. Master secret key encryption means for encrypting the master secret key generated by the encryption key pair generation means, wherein the sender of the communication data receives the master secret key encrypted by the encryption means in the master computer And
Master secret key decryption means for decrypting the encrypted master secret key into the original master secret key using the sender's secret key, and encrypting the communication data with the sender's secret key to obtain the communication data. Digital signature processing means for generating a digital signature, encrypting the sender's own public key using the master secret key decrypted by the master secret key decryption means, and generating a digital signature of the sender public key; Public key certificate generation means for generating a public key certificate by attaching a digital signature of a sender public key generated by the digital signature processing means to a sender public key; and the communication data; Transmitting means for transmitting a signature and a public key certificate, wherein a recipient of the communication data is communication data from a sender,
Receiving means for receiving a digital signature and a public key certificate of the communication data; and a digital signature of a sender public key contained in the public key certificate received by the receiving means, Digital signature verifying means for decrypting the sender's public key, verifying the digital signature of the sender's public key, and verifying the digital signature of the communication data using the decrypted sender's public key. An authentication device in a distributed processing system. 2. An agent for each of the computers, which creates an agent for a sender and a receiver, and manages the agent. In addition, the created agent uses the sender's own private key and master secret key to publish the sender. 2. The authentication apparatus according to claim 1, further comprising an agent management unit that assigns a public key certificate certifying that the key is a key. 3. The agent management means on the sender side extracts a secret key of the sender from the agent, encrypts predetermined data using the secret key, generates a digital signature, and generates the digital signature. Is used to generate an authenticator for authenticating the agent. When the agent managing unit on the receiver side receives the authenticator, the agent managing unit transmits the authenticating unit to the digital signature verifying unit. The authentication device according to claim 2, wherein the authentication device is configured to perform verification of a child. 4. The apparatus according to claim 3, wherein the agent on the sender side is configured to add an authenticator and a public key certificate to the communication data and transmit the data to the agent on the receiver side. Authentication device in a distributed processing system. 5. A cooperative space shared by all agents is provided in at least one of the plurality of computers, and the agent transmits data with an authenticator and a public key certificate added to the cooperative space. The authentication device in the distributed processing system according to claim 3, wherein the authentication device is configured as described above. 6. A server for connecting computer resources to the network and using a computer resource for at least one of the plurality of computers, wherein the agent is provided with an authenticator and a public key certificate. The authentication device in the distributed processing system according to claim 3, wherein the authentication device is configured to transmit the data to the server.