JP2002279098A - Method, system and program for representing authority authentication and storage medium stored with the program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To report authentication information in a person in charge to an enterprise being a counterparty in the case of authentication by previously registering the person in charge in a center (e.g. an authentication center) being a third organ when the person in charge of a contract etc., between the enterprises etc., is authenticated. SOLUTION: The representative of the enterprise to receive authentication previously registers information of the managerial position, etc., of the person in charge and information of rules concerning the contract and a transaction, etc., in the authentication center. When the person in charge makes the contract etc., the authentication of the person using an IC card is transmitted to a counterparty enterprise terminal by an authentication center unit. The counterparty enterprise terminal compares authentication information obtained from the authentication result of the person with transaction data.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an authority authentication agent method and system, an authority authentication agent program, and a storage medium storing the authority authentication agent program, and more particularly to an authority authentication agent method and system for authenticating an individual. And a storage medium storing the authority authentication agent program and the authority authentication agent program.

More specifically, an authority authentication agent method and system for authenticating a contract person in the case of contracting with a business partner company between companies, a storage medium storing an authority authentication agent program and an authority authentication agent program About.

[0003]

2. Description of the Related Art Conventionally, personal authentication has been performed by various methods such as a method using an IC card in which personal information and information for authentication are stored, and a method using an ID or a password. .

Further, a single sign-on product that can limit resources (information resources, etc.) that can be used for each individual by one-time authentication by applying rules registered in advance to the individual is used. Have been.

[0005]

SUMMARY OF THE INVENTION However,
The conventional method has a problem that it is inflexible when used in various business scenes.

For example, when contracts are made between companies, a contract person is determined for each company in accordance with company rules such as the type of contract and contract amount, and when the person in charge is authenticated, simply
IC card storing the person in charge information, ID for each person in charge
In addition, since the process of performing authentication using a password is a process that is performed only within the company, the partner company cannot determine whether the person in charge is an authorized person. For this,
Business partner A and business partner B who do not know the person in charge
It is also conceivable that a wrongful person (for example, if not a contracting party) impersonates the person in charge of improper contracting, or a problem such as leakage of information in the company occurs.

[0007] The present invention has been made in view of the above points, and when authenticating a person who makes a contract or the like between companies,
Register the person in charge with a third-party center (for example, an authentication center).
An object of the present invention is to provide a method and a system for authority authentication acting and a system capable of notifying authentication information of the person in charge to a contract partner company, and a storage medium storing an authority authentication agent program and an authority authentication agent program.

[0008]

Means for Solving the Problems The present invention (claim 1) provides:
In an authority authentication acting method for authenticating an individual to a terminal of a company to be authenticated and a terminal of a partner company connected via a network, an authentication center device connected to the network authenticates authentication information of the company to be authenticated. Stores in the information storage means, receives from the authenticated company terminal the information of the contract person to which the digital signature of the representative of the authenticated company is assigned, the authority information which is a rule on contracts and transactions, and the authentication information, Refers to the authentication information storage means based on the authentication information, authenticates the representative of the company to be authenticated, and if authenticated, registers the authority information in the authority information storage means and allows the authenticated company to At the time of the transaction request, the authentication information of the person in charge transmitted from the terminal of the company to be authenticated and the transaction data with the electronic signature of the person in charge are received, and the person in charge of authentication is referred to the authentication information storage means. The person in charge is authenticated from the information, and when the person is authenticated, the authority information with the electronic signature of the representative of the company to be authenticated is obtained from the authority information storage means, and the authentication information and the electronic information of the person in charge are acquired. The signed transaction data and the authority information with the digital signature of the representative of the company to be authenticated are transmitted to the partner company terminal, and the transaction data and the authority information acquired from the authentication center device are transmitted to the partner company terminal. From the verified company's electronic signature of the person in charge of the certified company and the digital signature of the representative of the company to be certified, compare the authority information of the identified person in charge with the contents of the transaction data, and Confirms authorization in the transaction.

[0009] The present invention (claim 2) provides an authority authentication proxy method for authenticating an individual to a terminal of a company to be authenticated and a terminal of a partner company connected via a network.
In the authentication center device connected to the network, the authentication information of the company to be authenticated is stored in the authentication information storage means, and the authentication information of the partner company is stored in the authentication information storage means. The authority information of the person to whom the representative's digital signature has been added is registered in the authority authentication storage means in the terminal, and the authentication center device sends the person's authentication information and the person's electronic information from the terminal to be authenticated. Receiving the transaction data with the signature, referring to the authentication information storage means based on the authentication information, authenticates the person in charge, and, if authenticated,
The transaction data with the authentication information and the electronic signature of the person in charge is transmitted to the partner company terminal. The partner company terminal verifies the electronic signature of the person in charge from the transaction data obtained from the authentication center device, and checks the authority information. The acquisition is transmitted to the company to be authenticated through the authentication center device, and the terminal of the company to be authenticated requests the terminal of the partner company to authenticate the person in charge of the partner company. The contact information is transmitted to the authentication center device, and the authentication center device authenticates the person in charge at the partner company by referring to the authentication information and the person information by referring to the authentication information storage means. Information and the person in charge information are transmitted to the terminal of the company to be certified, and the terminal of the company to be certified acquires the authority information by referring to the authority information storage means based on the person in charge information, and the information of the company to be certified is stored in the authority information. With the digital signature of the representative The signature is sent to the client company terminal, and the partner company terminal verifies the signature of the representative from the authority information obtained from the terminal of the company to be certified. Authority information,
The contents of the transaction data acquired from the authentication center device are compared, and if they correspond, the authorization of the transaction is confirmed.

[0010] The present invention (claim 3) provides the above-described authentication information of a representative and a person in charge created by an IC card issuer based on a request of a representative of a company to be authenticated or a partner company. It is obtained from the IC card in which the authentication information is stored.

The present invention (claim 4) is an authority authentication proxy system comprising an authentication center device for authenticating an individual to a terminal of a company to be authenticated and a terminal of a partner company connected via a network, The terminal of the company to be certified adds the electronic signature of the representative of the company to be certified to the information of the person in charge and the authority information that is the rules for contracts and transactions, and the authentication center together with the authentication information of the representative of the company to be certified. A first authentication requesting means for transmitting the authentication information to a person to be authenticated, an authentication information of the person in charge of the company to be authenticated, an electronic signature of the person in charge to the transaction data, and a transmission to the authentication center apparatus together with the authentication information; Authentication center device, wherein the authentication center device includes: authentication information of a representative of a company to be authenticated; authentication information registration means for registering authentication information of a person in charge in the authentication information storage means; Means to be certified Receiving the authority information with the electronic signature of the representative of the representative and the authentication information of the representative, authenticating the representative by referring to the authentication information storage means based on the authentication information, and authenticating Authority information registering means for registering the authority information in the authority information storage means; and when the business to be authenticated requests the partner company for a transaction, the authentication information of the person in charge of the business to be authenticated from the terminal of the business to be authenticated. Receiving the transaction data with the electronic signature of the person in charge, authenticating the person in charge from the authentication information of the person in charge by referring to the authentication information storage means, and, if the authentication is successful, the authority information storage means Obtains the authority information to which the digital signature of the representative of the company to be certified is given from, and provides the authentication information, the transaction data with the digital signature of the person in charge, and the digital signature of the representative of the company to be certified. Sent authority information to the partner company terminal The partner company terminal verifies the electronic signature of the person in charge of the company to be certified in the transaction data received from the authentication center device and the electronic signature of the representative of the company to be certified in the authority information. Then, it has an authority authentication means for comparing the authority information of the specified person in charge with the contents of the transaction data, and confirming the authority authentication in the transaction when corresponding.

[0012] The present invention (claim 5) is an authority authentication proxy system comprising an authentication center device for authenticating an individual to a terminal of a company to be authenticated and a terminal of a partner company connected via a network, The authenticated company terminal includes an authority authentication information registration unit for registering the authority information of the person in charge of the representative of the authenticated company with the electronic signature in the authority authentication storage unit in the terminal, and a terminal for the partner company terminal. Means for requesting authentication of a person in charge of a partner company, and means for requesting the person in charge of the person in charge of the partner company, and sending the transaction data to the authentication center device by attaching an electronic signature of the person in charge to the transaction data and authenticating information of the person in charge Means, and obtains authority information by referring to the authority information storage means based on the contact information of the partner company obtained from the terminal of the partner company, and attaches an electronic signature of a representative of the certified company to the authority information And the other party First authentication information registering means for receiving registration of authentication information of a company to be authenticated and registering the authentication information in the authentication information storage means; A second authentication information registration unit that accepts registration of the authentication information of the person in charge and stores the authentication information in the authentication information storage unit, the authentication information obtained from the terminal of the company to be authenticated, and an electronic signature of the person in charge of the company to be authenticated are given. Receiving the transaction data, referring to the authentication information storage means based on the authentication information, performing authentication of the person in charge, and, if authenticated, transferring the transaction information with the authentication information and the electronic signature of the person in charge. Means for transferring transaction data to be sent to the terminal of the partner company;
Receiving the authentication information of the person in charge and the information of the person in charge sent from the terminal of the partner company, referring to the authentication information storage means for the authentication information of the person in charge, authenticates the person in charge of the partner company, and The authentication information and the person in charge are transmitted to the terminal of the company to be authenticated, and the terminal of the partner company is assigned to the terminal of the company to be authenticated from the transaction data transmitted from the authentication center device. Person verification means for verifying the electronic signature of the person and transmitting the acquisition of the authority information to the company to be certified via the authentication center device, and transmitting the authentication information for transmitting the person's authentication information and the person's information to the authentication center device Means, verifying the electronic signature of the representative attached to the authority information obtained from the terminal of the company to be authenticated, and, if verified, the authority information of the person in charge of the company to be authenticated, and the transaction data obtained from the authentication center device. Compare the contents of If you are response includes a authorization confirmation means for confirming authorization of transactions.

According to the present invention (claim 6), the authentication information is transmitted based on a request from a company to be authenticated or a representative of a partner company.
It is assumed that the authentication information is obtained from an IC card created by a C card issuer and storing the authentication information of the representative and the person in charge.

[0014] The present invention (claim 7) provides an authority authentication agent system comprising an authentication center device for authenticating an individual to an authenticated company terminal and a partner company terminal connected via a network. An authority authentication agent program executed on a terminal of an authenticated company, which acquires authentication information of a representative of a company to be authenticated, and obtains information of the person in charge, contract information,
A first authentication requesting process of adding a digital signature of a representative of the company to be authenticated to authority information, which is a rule relating to a transaction, and transmitting the digital signature together with the authentication information of the representative to the authentication center device; And a second authentication requesting process of adding the electronic signature of the person in charge to the transaction data and transmitting the transaction data together with the authentication information to the authentication center device.

The present invention (claim 8) provides an authorization authentication agent system comprising an authentication center device for authenticating an individual to a terminal of a company to be authenticated and a terminal of a partner company connected via a network. An authorization authentication acting program executed in the center device, comprising: an authentication information registration process for registering authentication information of a representative of a company to be authenticated and authentication information of a person in charge in an authentication information storage means; Receiving the authority information with the digital signature of the company representative and the authentication information of the representative, referring to the authentication information storage means based on the authentication information, and authenticating the representative of the company to be authenticated. An authorization information registration process for registering the authorization information in the authorization information storage means when authenticated; and Electronic signature of the person in charge of the authentication information and the person in charge of the authentication company has received and granted transaction data,
The person in charge is authenticated from the authentication information of the person in charge with reference to the authentication information storage means, and when the person is authenticated, the authority information to which the digital signature of the representative of the company to be authenticated is given from the authority information storage means An authorization information transfer process of transmitting the authentication information, the transaction data with the electronic signature of the person in charge and the authority information with the electronic signature of the representative of the certified company to the terminal of the partner company. Having.

According to a ninth aspect of the present invention, there is provided an authority authentication agent system comprising an authentication center device for authenticating an individual to a terminal of a company to be authenticated and a terminal of a partner company connected via a network. An authority authentication acting program executed in the terminal of the partner company, the electronic signature of the person in charge of the partner company of the transaction data received from the terminal of the partner company via the authentication center device, and the representative of the partner company in the authority information. A verification process for verifying the electronic signature of the person concerned, an authority confirmation process for comparing the authority information of the specified person in charge with the contents of the transaction data, and confirming the authorization of the transaction if they correspond. Having.

The present invention (claim 10) provides an authority authentication agent system comprising an authentication center device for authenticating an individual to a terminal of a company to be authenticated and a terminal of a partner company connected via a network. An authorization authentication agent registration program to be executed in the authenticated enterprise terminal, the authorization authentication information registration process for registering the authorization information of the person in charge of the representative of the authenticated enterprise with the electronic signature in the authorization authentication storage means in the terminal; A requester authentication requesting process for requesting the terminal of the partner company to authenticate the person in charge of the partner company, and adding the electronic signature of the person in charge to the transaction data created by the person in charge. Refers to the authority information storage means based on the transaction data transmission process that is transmitted to the authentication center device together with the authentication information of the partner and the contact information of the partner company obtained from the terminal of the partner company Te obtains the authority information, and a rights information transmission process for transmitting by attaching an electronic signature representative of the authenticated company to the authority information to the partner company terminal.

The present invention (Claim 11) provides an authority authentication agent system comprising an authentication center device for authenticating an individual to a terminal of a company to be authenticated and a terminal of a partner company connected via a network. A first authentication information registration process for accepting registration of authentication information of a representative and a person in charge of a company to be authenticated and registering the authentication information in an authentication information storage unit; We accept registration of the credentials of the person in charge
A second authentication information registration process stored in the authentication information storage means, receiving the authentication information from the terminal of the authenticated company and the transaction data to which the person in charge of the authenticated company has been given an electronic signature; A transaction data transfer process of referring to the authentication information storage means, performing authentication of the person in charge, and, if authenticated, transmitting transaction data with the authentication information and the electronic signature of the person in charge to the terminal of the partner company; , Receives the contact ’s authentication information and contact information sent from the partner company ’s terminal,
The person in charge of the partner company is authenticated with reference to the authentication information storage means for the authentication information of the person in charge, and when the person is authenticated, the person who sends the authentication information and the person in charge information to the terminal of the company to be authenticated Prior authentication process.

The present invention (claim 12) provides an authority authentication agent system comprising an authentication center device for authenticating an individual to an authenticated company terminal and a partner company terminal connected via a network. An authority authentication acting program executed in a terminal of a partner company, which verifies an electronic signature of a person in charge of a company to be authenticated from transaction data transmitted from the authentication center device, and obtains authority information via the authentication center device. A person verification process for sending to the authentication company, an authentication information transmission process for sending the authentication information of the person in charge and the person information to the authentication center device, and the authentication company assigned to the authority information obtained from the authentication company terminal. The representative's digital signature is verified, and if verified, the authority information of the person in charge of the company to be certified is compared with the contents of the transaction data obtained from the authentication center device, If you are response includes a authorization verification process to confirm the authorization of the transaction.

The present invention (claim 13) provides an authority authentication agent system comprising an authentication center device for authenticating an individual to a terminal of a company to be authenticated and a terminal of a partner company connected via a network. A storage medium storing an authentication company terminal, the partner company terminal, or an authority authentication agent program executed by the authentication center device, wherein the storage medium stores the authorization company terminal according to claim 7 or 10. And a program to be executed by the authentication center device according to claim 8 or 11, and a program to be executed by the partner company terminal according to claim 9 or 12. At least one of the programs is stored. Generally, contracts and the like in a company are not only made by the representative of the company, but authority is often delegated to the person in charge. Therefore, the method of delegating authority is determined according to in-house rules based on a combination of information on each individual, each department, or the position of the individual or the position in charge, and information such as the type of contract and the transaction amount. Is common.

Therefore, in the present invention, a contract person is authenticated in an authentication center using an ID card storing authentication information, and the result of the authentication is notified to a contract partner. As a result, the contract partner company can compare the transaction data with the authority information obtained from the result of the authentication of the person in charge.

Further, according to the present invention, when registering and comparing information on contractors and rules relating to contracts, transactions, etc., X
By using the ML data, it is possible to set conditions flexibly.

[0023]

DESCRIPTION OF THE PREFERRED EMBODIMENTS According to the present invention, a contract person is strictly authenticated at a center using an IC card, and the result is used to obtain the authority information given to the contract person, This is a system that performs authentication, and for that purpose, consists of the following four stages of processing.

In the first stage, a company to be certified (hereinafter, referred to as a company)
The representative of the certified company)
An IC card for personal identification (representative) is issued, and the authentication information is registered in the authentication center.

In the second stage, the representative of the company to be authenticated registers the authority information described in the XML data for authority authentication in the authentication center.

In the third stage, when the person in charge of the company to be certified makes a transaction request to the partner company, the partner company requests the certification center to authenticate the authority of the company to be certified. The authentication center authenticates the person in charge of the company to be authenticated, and transmits the authentication information and the transaction data to the partner company.

In the fourth stage, the partner company compares the transaction data acquired from the authentication center with the authority information, and confirms the authority authentication.

First, a system configuration for performing the above processing will be described.

FIG. 1 shows the relationship of the authority authentication acting system in one embodiment of the present invention. The system shown in FIG. 1 includes a company 100 to be authenticated, a partner company 200 having a contract with the company 100, and an IC card issuer 3 that issues an IC card used for authentication.
The authentication center 400 authenticates the company 100 to be authenticated. Each of these companies (entrepreneurs) has a communicable device.
Connected via

FIG. 2 shows the configuration of an authority authentication acting system according to an embodiment of the present invention. The system shown in FIG. 1 includes an authenticated company terminal 100, a partner company terminal 200, a card issuing company device 300, an authentication center device 400, and a network 500.

The company terminal 100 to be authenticated has an input unit 110,
It is assumed that the information acquisition unit 120 is composed of an information acquisition unit 120, a communication unit 130, and an authority information database 140, and an IC card reader 150 is connected to the information acquisition unit 120. In addition,
The IC card read by the IC card reader 150 is
It is assumed that the authentication information of the representative and the person in charge of the certified company that has been issued and distributed by the IC card issuing business 300 is stored.

The partner company terminal 200 has an input unit 210,
Information acquisition unit 220, verification unit 230, communication unit 240, IC
It comprises a card reader 250.

The authentication center device 400 includes a communication unit 410,
Authentication unit 420, registration unit 430, information acquisition unit 440, personal authentication database 450, authority information database 460
Consists of

In the personal authentication database 450, it is assumed that the authentication information of the representative and the person in charge of the company that has issued the IC card obtained from the device of the IC card issuing business 300 is stored together with the ID.

The authority information database 460 includes an XLM
It is assumed that information such as the position of the person in charge described in the data, information on rules relating to contracts and transactions, and the like are stored. [First Embodiment] The operation of the above configuration will be described below.

In the present embodiment, of the configuration shown in FIG. 2, the authenticated company terminal 100 does not use the authority information database 140, and the partner company terminal 200 does not use the IC card reader 250.

First, the operation of the first stage (issue of the personal identification IC card) will be described. In the present embodiment,
The IC card issuing business 300 issues IC cards of a representative of a company to be authenticated and a person in charge as an IC card.

FIG. 3 is a sequence chart of the operation at the time of issuing the personal identification IC card according to the first embodiment of the present invention.

Step 101) The representative of the company 100 to be authenticated requests the IC card issuer 300 to issue an IC card by mail or the like.

Step 102) The IC card issuing business 300 conducts the examination based on the request of the representative of the company 100 to be authenticated.

Step 103) When the examination is passed,
An IC card for authentication of the representative of the certified company 100 and the person in charge of the contract is issued, and the certified company 10
Distribute to 0.

Step 104) The IC card issuer 300 issues the contents of the issued IC card (identification information).
To the authentication center device 400 of the authentication center,
In the authentication center device 400, the personal authentication information is stored in the personal authentication database 450.

Next, the operation of the second stage (registration of authority information for authority authentication) will be described.

Step 201) The representative of the company to be authenticated requests the authentication center device 400 to register the authority information described in XML data from the input unit 110 of the terminal 100 for the company to be authenticated. Thereby, the authentication center device 400 communicates with the authenticated company terminal 100 via the communication unit 410.
Request the certification of the representative of the company to be certified. Here, the authority information registered by the representative of the company to be certified refers to information such as the position of an employee, information of rules relating to contracts, transactions, and the like.

Step 202) Company terminal 100 to be authenticated
Then, a representative of the authentication company inputs a password through the input unit 110.

Step 203) If the password is correct, the information acquisition section 120 checks the card issuing business 30
The IC card acquired from 0 is read by the IC card reader 150, and the authority information stored in the IC card is acquired.

Spec 204) In the information acquisition unit 120,
Authentication is performed using information obtained from the IC card.

Step 205) If the authentication is successful, the authority information is acquired from the authority information database 140, and the authority information is given an electronic signature by the representative of the company to be authenticated. Step 206) Replace the authority information with the ID of the certified company
And authentication information comprising PIN information and PIN information.
0 to the authentication center 400.

Here, XML (Extensible Markup Lang)
uage) is an ideal format for sharing and exchanging data with meaningful data in a Web page with a third party.

Step 207) Authentication center device 400
Then, when the communication unit 410 receives the authentication information and the authority information, the authentication unit 420
With reference to 50, authentication is performed.

Step 208) If the authentication is successful, the registration unit 430 registers the authority information in the authority information database 460. At this time, the authority information registered in the authority information database 460 includes the XML data and the digital signature of the representative. Next, the operation of the third step (transmission of transaction data) will be described.

The third-stage process is a process when the person in charge wants to make a contract or the like.

FIG. 5 is a sequence chart of an operation of transmitting transaction data according to the first embodiment of the present invention.

Step 301) Terminal 100 to be authenticated
, The person in charge transmits a transaction request to the partner company terminal 200 from the input unit 110.

Step 302) Accordingly, the partner company terminal 200 issues an authority authentication request to the company terminal 100 to be authenticated.

Step 303) The terminal 100 to be authenticated
Then, a password is input from the input unit 110.

Step 304) The information acquisition section 120 acquires authentication information (ID and PIN) stored in the IC card from the IC card reader 150.

Step 305) The person in charge enters the input section 11
Input transaction data from 0.

Step 306) In the information acquisition section 120, an electronic signature of the person in charge is given to the transaction data.

Step 307) The transaction data to which the electronic signature of the person in charge and the authentication information are transmitted from the communication unit 130 to the authentication center 400.

Step 308) When the authentication center 400 receives the authentication information and the transaction data from the communication unit 410, the authentication unit 420 causes the personal authentication database 45 to be received.
0 is searched and the person in charge is authenticated. If the authentication is OK, the process proceeds to step 309. If the authentication is not successful, an authentication error is output.

Step 309) The information acquisition unit 440
When the authentication is OK, the authority information including the XML data and the electronic signature of the representative is acquired with reference to the authority information database 460.

Step 310) The communication unit 410 transmits the authentication information (ID), the transaction data with the electronic signature of the person in charge, and the authority information described in the XML data with the digital signature of the representative to the destination. It transmits to the corporate terminal 200.

Next, the fourth stage (confirmation of authority of transaction data)
Will be described.

The process at the fourth stage is a process in which the partner company 200 compares the transaction data with the authority information obtained from the result of the personal authentication.

FIG. 6 is a sequence chart of a transaction data authority confirmation operation according to the first embodiment of the present invention.

Step 401) Counterpart company terminal 200
In, the information acquisition unit 220 acquires the electronic signature of the person in charge attached to the transaction data acquired from the authentication center device 400 via the communication unit 210, and transfers the electronic signature to the verification unit 230. The verification unit 230 verifies the electronic signature of the person in charge of the company 100 to be authenticated.
If it cannot be verified, an authentication error is output.

Step 402) The authentication section 230 specifies the person in charge of the company 100 to be authenticated from the electronic signature.

Step 403) The authentication section 230 further verifies the digital signature of the representative of the company 100 to be authenticated from the acquired authority information.
If it cannot be verified, an authentication error is output.

Step 404) Further, the authentication unit 230
Then, the authority information of the person in charge of the identified company to be certified 100 is compared with the transaction content, and if the transaction information corresponds to the authority information, the process proceeds to step 405, and if not, a verification error is output. .

Step 405) Confirm the authorization of the transaction.

As described above, the representative of the company to be authenticated who wants to receive the authentication first registers the authority information in the authentication center 400, and when the person in charge wants to make a contract, the authentication center 40
0, the person in charge is authenticated, and the authentication result is transmitted to the terminal 200 of the partner company, so that the partner company compares the authority information obtained from the result of the person authentication of the person with the transaction data. Thus, it is possible to make a transaction with a company to be certified.

In addition, in the registration and comparison of information about the person in charge, rules relating to contracts, transactions, etc., the conditions can be flexibly set by using XML data.

[Second Embodiment] In the above-described first embodiment, an example in which the representative of the company to be authenticated registers the authority information in the authentication center 400 has been described. An example is shown in which a representative of a company to be certified registers in its own system.

First, the operation of the first stage (issue of the personal identification IC card) will be described. FIG. 7 is a sequence chart of an issuance operation of the personal identification IC card according to the second embodiment of the present invention.

Step 501) The representative of the company 100 to be authenticated sends an IC card issue request to the IC card issuer 300 by mail or the like.

Step 502) The IC card issuing business 300 conducts the examination based on the IC card issuance request.

Step 503) If an IC card can be issued in the examination, an IC card for the representative and the person in charge of the company is issued and distributed to the company 100 to be certified by mail or the like.

Step 504) The IC card issuing business 300 transmits the personal authentication information to the authentication center device 400. As a result, the authentication center device 400 registers the personal authentication information in the personal authentication database 450.

Step 505) Counterpart company terminal 200
Sends an IC card issuance request to the IC card issuing business 300 by mail or the like.

Step 506) The IC card issuing business 300 conducts the examination based on the IC card issuance request.

Step 507) If an IC card can be issued in the examination, an IC card for the person in charge of the partner company 200 is issued and distributed to the partner company 200 by mail or the like.

Step 508) The IC card issuing business 300 transmits the personal authentication information to the authentication center device 400. As a result, the authentication center device 400 registers the personal authentication information in the personal authentication database 450.

In the above processing, in the present embodiment,
The authentication center device 4 also transmits the personal authentication information to the partner company.
Register at 00.

Next, the operation of the second stage (registration of authority information for authority authentication) will be described.

FIG. 8 is a sequence chart of an authority information registration operation for authority authentication according to the second embodiment of the present invention.

Step 601) Terminal 100 to be Authenticated
The input unit 110 inputs authority information (information such as the position of an officer, rules regarding contracts, transactions, and the like) described in XML data, and registers the authority information in the authority information database 140 in the terminal 100.

Next, the operation of the third step (transmission of transaction data) will be described.

FIG. 9 is a sequence chart of a transaction data transmitting operation according to the second embodiment of the present invention.

Step 701) The terminal 100 to be authenticated
From the above, a request for a transaction is made to the partner company terminal 200, and the partner company terminal 200 issues an identity authentication request to the authenticated company terminal 100 via the authentication center 400.

Step 702) The person in charge of the company to be authenticated inputs the password from the input section 110 of the terminal 100 for the company to be authenticated.

Step 703) Terminal 100 to be authenticated
Of the IC card reader 150
Acquire the authentication information stored in the C card.

Step 704) The information acquisition section 120
The transaction data input from the input unit 110 is acquired, and XM
Create transaction data using L data.

Step 705) The information acquisition section 120
The created transaction data is given an electronic signature of the person in charge and transferred to the communication unit 130.

Step 706) The communication unit 130 transmits the authentication information (ID, PIN) and the transaction data with the electronic signature of the person in charge to the authentication center device 400.

Step 707) Authentication center device 400
In the authentication unit 420, the authentication unit 420 performs personal authentication of the person in charge by referring to the personal authentication database 450. If the authentication information is OK, Proceed to step 708,
Otherwise, output an authentication error.

Step 708) The communication section 410 transmits the transaction data to which the authentication information (ID) and the electronic signature of the person in charge of the company to be authenticated are attached to the partner company terminal 200.

Next, the fourth stage (confirmation of authority of transaction data)
The operation will be described.

FIG. 10 is a sequence chart for confirming the authority of transaction data according to the second embodiment of the present invention.

Step 801) Destination company terminal 200
The communication unit 240 receives the transaction information to which the authentication information (ID) of the company to be authenticated and the electronic signature of the person in charge of the company to be authenticated, and verifies the electronic signature of the person in charge in the authentication unit 230. And if OK, step 802
Otherwise, output an authentication error.

Step 802) The authentication unit 230 specifies the person in charge of the company to be authenticated from the electronic signature.

Step 803) Communication unit 2 of the partner company
40 issues an authority information acquisition request to the authenticated company terminal 100, and in response, the authenticated company terminal 100
A personal authentication request is issued to the partner company terminal 200 via the authentication center device 400.

Step 804) Destination company terminal 200
Inputs a password through the input unit 210.

Step 805) The information acquisition section 220 reads the IC card by the IC card reader 250 connected to the terminal 200, and acquires the authentication information of the person in charge.

Step 806) The acquired authentication information (I
D, PIN) and personal information of the person in charge of the partner company are transmitted from the communication unit 240 to the authentication center 400.

Step 807) The authentication unit 420 of the authentication center 400 performs authentication by referring to the personal authentication database 450 based on the authentication information (ID, PIN) and the personal information of the person in charge, and if the authentication result is OK. If so, the process proceeds to step 808; otherwise, an authentication error is output.

Step 808) The communication unit 410 of the authentication center 400 transmits the authentication information (ID) and the personal information of the person in charge to the terminal 100 of the company to be authenticated.

Step 809) Terminal 100 to be authenticated
The communication unit 130 of the information acquisition unit 1 receives the received authentication information (ID) of the person in charge of the partner company 200 and the personal information of the person in charge.
The information acquisition unit 120 refers to the authority information database 140 and acquires authority information.

Step 810) The information acquiring section 120
A digital signature of a representative of the company to be certified is given to the acquired authority information.

Step 811) The terminal 10 to be authenticated
0 of the communication unit 130, the digital signature of the representative
The authority information, which is the ML data, is transmitted to the partner company terminal 200.

Step 812) Destination company terminal 200
The verification unit 230 verifies the digital signature of the representative attached to the authority information received by the communication unit 240. If the authentication result is OK, the process proceeds to step 813; otherwise, an authentication error is output. I do.

Step 813) The verification section 230 compares the correspondence between the authority information of the person in charge specified in step 802 and the contents of the acquired transaction information. If not, it outputs an authentication error.

Step 814) The authorization of the transaction is confirmed.

In the above-described first embodiment, the authentication center device 400 acquires the authority information of the company to be authenticated. In this embodiment, however, the authority information database 140 in the terminal 100 of the enterprise to be authenticated acquires the authority information. The information is acquired from the registered authority information and transmitted to the partner company terminal 200, but the effect is the same as in the first embodiment.

The operations of the terminals 100 and 200 and the authentication center device 400 can be constructed as a program, and the constructed program is stored in the CP of each device.
It is also possible to install in U or distribute via a network.

Further, a hard disk connected to a computer used as a terminal or an authentication center device, a floppy (registered trademark) disk,
The present invention can be easily realized by storing it in a portable storage medium such as a CD-ROM and installing it in a CPU or the like when implementing the present invention.

The present invention is not limited to the above-described embodiments, but can be variously modified and applied within the scope of the claims.

[0118]

As described above, according to the present invention, the authority information delegated in relation to a transaction in a company or the like is:
It is flexibly applied according to the employee information (individual name, person in charge, title) and the content of the transaction / contract, and it is possible to notify the partner company.

In addition, since XML data is used for registering and comparing information on the person in charge and rules relating to contracts and transactions, the conditions can be set flexibly.

[Brief description of the drawings]

FIG. 1 is a diagram showing the relationship of an authority authentication acting system according to an embodiment of the present invention.

FIG. 2 is a configuration diagram of an authority authentication acting system according to an embodiment of the present invention.

FIG. 3 is a sequence chart of an operation at the time of issuing the personal identification IC card according to the first embodiment of the present invention.

FIG. 4 is a sequence chart of an operation of registering authority information for authority authentication according to the first embodiment of the present invention.

FIG. 5 is a sequence chart of an operation of transmitting transaction data according to the first embodiment of the present invention.

FIG. 6 is a sequence chart of an operation for confirming authority of transaction data according to the second embodiment of the present invention.

FIG. 7 is a sequence chart of an operation of confirming the authority of personal data according to the second embodiment of the present invention.

FIG. 8 is a sequence chart of an operation of registering authority information for authority authentication according to the second embodiment of the present invention.

FIG. 9 is a sequence chart of a transaction data transmission operation according to the second embodiment of the present invention.

FIG. 10 is a sequence chart of a transaction data authority confirmation operation according to the second embodiment of the present invention.

[Explanation of symbols]

 REFERENCE SIGNS LIST 100 certified company terminal, certified company terminal 110 input unit 120 information acquisition unit 130 communication unit 140 authority information database 150 IC card reader 200 partner company, partner company terminal 210 input unit 220 information acquisition unit 230 verification unit 240 communication unit 250 IC card reader 300 IC card issuer 400 Authentication center, authentication center device 410 Communication unit 420 Authentication unit 430 Registration unit 440 Information acquisition unit 450 Identity authentication database 460 Authority information database

──────────────────────────────────────────────────の Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G09C 1/00 640 G09C 1/00 640B H04L 9/32 H04L 9/00 673E 675D (72) Inventor Hiroyasu Matsuda (1) Inventor Ayako Takasaki 1-6-1 Uchisaiwai-cho, Chiyoda-ku, Tokyo NTT Communications Corporation (72) Inventor Hiroshi Yusa 1-6 Uchisaiwaicho, Chiyoda-ku, Tokyo NTT Communications Corporation F-term (reference) 5J104 AA07 AA09 KA01 LA06 MA01 NA05 NA35 NA36 PA07

Claims (13)

[Claims] 1. An authority authentication acting method for authenticating an individual to a terminal of a company to be authenticated and a terminal of a partner company connected via a network, wherein the authentication center device connected to the network comprises: Store the authentication information of the company in the authentication information storage means, information of the contract person to which the digital signature of the representative of the company to be authenticated is given from the terminal of the company to be authenticated, and authority information which is a rule on contracts and transactions. Receiving the authentication information, referring to the authentication information storage means based on the authentication information, performing authentication of the representative of the company to be authenticated, and, if authenticated, storing the authority information in the authority information storage means At the time of a transaction request from the certified company to the partner company, the transaction data to which the certification information of the person in charge transmitted from the terminal of the certified company and the electronic signature of the person in charge are added. The authentication information storage means is referred to, and the person in charge is authenticated from the authentication information of the person in charge with reference to the authentication information storage means. When the person is authenticated, the representative of the company to be authenticated is read from the authority information storage means. Acquires the authorization information with an electronic signature, and transmits the authentication information, the transaction data with the electronic signature of the person in charge, and the authorization information with the electronic signature of the representative of the certified company to the partner company. Transmitting the electronic signature of the person in charge of the company to be authenticated and the electronic signature of the representative of the company to be authenticated from the transaction data and the authority information acquired from the authentication center device. An authority authentication acting method, wherein the authority information of the person in charge is verified and compared with the contents of the transaction data, and if they correspond, the authority authentication in the transaction is confirmed. 2. An authority authentication acting method for authenticating an individual to a terminal of a company to be authenticated and a terminal of a partner company connected via a network, wherein the authentication center device connected to the network comprises: The authentication information of the company is stored in the authentication information storage unit, the authentication information of the partner company is stored in the authentication information storage unit, and the terminal of the company to be authenticated has an electronic signature of a representative of the company to be authenticated. The authority information of the person in charge is registered in the authority authentication storage means in the terminal. In the authentication center device, the authentication information of the person in charge from the terminal to be authenticated and the transaction data to which the electronic signature of the person in charge is attached Receiving the authentication information, referring to the authentication information storage means based on the authentication information, performing authentication of a person in charge, and, if authenticated, a transaction data with the authentication information and the electronic signature of the person in charge. Is transmitted to the partner company terminal, and the partner company terminal verifies the electronic signature of the person in charge from the transaction data acquired from the authentication center device, and acquires authority information via the authentication center device. The authenticated company terminal requests the authenticated company terminal to authenticate the person in charge of the partner company terminal with respect to the partner company terminal, and in the partner company terminal, authentication information and contact information Is transmitted to the authentication center device, the authentication center device refers to the authentication information storage means with the authentication information and the person in charge information, performs authentication of the person in charge of the partner company, Transmitting authentication information and the person in charge information to the terminal of the company to be authenticated, wherein the terminal of the company to be authenticated obtains authority information by referring to the authority information storage means based on the person in charge information, and information An electronic signature of a representative of the certified company is given and transmitted to the partner company terminal.The partner company terminal verifies the representative signature from the authority information obtained from the certified company terminal, If the verification is successful, the electronic signature is verified, the authority information of the identified person in charge of the company to be authenticated is compared with the contents of the transaction data acquired from the authentication center device, and if they correspond, , A method of acting as an authority authentication agent, comprising confirming the authority authentication in a transaction. 3. The authentication information stores authentication information of a representative and a person in charge created by an IC card issuing company based on a request of a representative of the company to be authenticated or the partner company. 4. The authority authentication substituting method according to claim 2, wherein the method is obtained from an IC card. 4. An authority authentication agent system comprising an authentication center device for performing personal authentication on a terminal of a company to be authenticated and a terminal of a partner company connected via a network, wherein the terminal of the company to be authenticated is: The information of the person in charge or the authority information, which is a rule relating to the contract / transaction, is given an electronic signature of the representative of the company to be certified, and transmitted to the authentication center device together with the authentication information of the representative of the company to be certified. A second authentication request that acquires authentication information of a person in charge of the company to be authenticated, adds an electronic signature of the person in charge to the transaction data, and transmits the transaction information to the authentication center device. An authentication information registering means for registering authentication information of a representative of the terminal to be authenticated, authentication information of the person in charge in authentication information storage means, and first authentication. Request means Receiving the authority information to which the digital signature of the representative of the company to be authenticated and the authentication information of the representative, and referring to the authentication information storage means based on the authentication information to authenticate the representative. And when the user is authenticated, an authority information registering means for registering the authority information in an authority information storage means; and Receiving the authentication information of the person in charge of the certified company and the transaction data to which the person in charge has been given an electronic signature, and referring to the authentication information storage means, authenticates the person in charge from the person's authentication information. Acquiring, when authenticated, authorization information with an electronic signature of a representative of the company to be authenticated from the authorization information storage means, the authentication information, transaction data with the electronic signature of the person in charge, and Electronic of the representative of the certified company Authority information transfer means for transmitting the signed authority information to the partner company terminal, wherein the partner company terminal is a person in charge of the certified company of the transaction data received from the authentication center device. Electronic signature and the electronic signature of the representative of the company to be certified in the authority information is verified, and the authority information of the identified person in charge is compared with the contents of the transaction data. Is an authority authentication agency system, characterized by having authority authentication means for confirming authority authentication in a transaction. 5. An authority authentication proxy system comprising an authentication center device for performing personal authentication on a terminal of a company to be authenticated and a terminal of a partner company connected via a network, wherein the terminal of the company to be authenticated is: An authority authentication information registering unit for registering authority information of a person in charge of an electronic signature of a representative of the company to be authenticated in an authority authentication storage unit in the own terminal; and A person authentication requesting means for requesting authentication of a person in charge, a transaction data transmitting means for attaching an electronic signature of the person in charge to the transaction data, and transmitting the transaction data together with the authentication information of the person to the authentication center device; Based on the contact information of the partner company obtained from the terminal of the partner company, acquire the authority information by referring to the authority information storage means, and attach the electronic signature of the representative of the certified company to the authority information First authentication information registration means for receiving registration of authentication information of the company to be authenticated and registering the authentication information in an authentication information storage means. Accepting the registration of the authentication information of the person in charge of the partner company,
Second authentication information registration means stored in authentication information storage means, authentication information obtained from the terminal of the company to be authenticated, and transaction data to which an electronic signature of a person in charge of the company to be authenticated is received; Referring to the authentication information storage means based on the information, the person in charge is authenticated, and if authenticated, the authentication information and the transaction data with the electronic signature of the person in charge are transferred to the partner company terminal. Means for transmitting transaction data to be transmitted, receiving the authentication information of the person in charge and the information of the person in charge transmitted from the terminal of the partner company, referring to the authentication information storage means for the authentication information of the person in charge, and The authentication device includes a partner authentication unit that authenticates a person in charge of a company and, when authenticated, transmits authentication information and the person in charge information to the terminal of the company to be authenticated. Sent from the center unit Person verification means for verifying the electronic signature of the person in charge of the company to be certified from the transaction data obtained and transmitting the acquisition of the authority information to the company to be certified through the authentication center device; and authentication information of the person in charge. And authentication information transmitting means for transmitting the person in charge information to the authentication center device; and verifying the electronic signature of the representative attached to the authority information obtained from the authenticated company terminal. Comparing the authority information of the person in charge of the certified company with the contents of the transaction data acquired from the authentication center device,
An authority authentication acting system, comprising: an authority authentication confirming means for confirming authority authentication in a transaction when the system is compatible. 6. The authentication information stores authentication information of a representative and a person in charge created by an IC card issuing company based on a request of a representative of the company to be authenticated or the partner company. 6. The authority authentication agent system according to claim 4, wherein the authority authentication agent system is obtained from an IC card. 7. An authority authentication agent system comprising an authentication center device for performing personal authentication on a terminal of a company to be authenticated and a terminal of a partner company connected via a network, wherein the authority to be executed on the terminal of the company to be authenticated A certification agent program that acquires the authentication information of the representative of the company to be certified and assigns an electronic signature of the representative of the company to be certified to the information of the person in charge and the authority information that is a rule on contracts and transactions. A first authentication requesting process for transmitting to the authentication center device together with the authentication information of the representative, acquiring authentication information of a person in charge, and attaching a digital signature of the person in charge to transaction data, And a second authentication request process for transmitting to the authentication center device. 8. An authority authentication agent system comprising an authentication center device for authenticating individuals to a terminal of a company to be authenticated and a terminal of a partner company connected via a network, wherein the authority authentication executed by the authentication center device An authentication program, an authentication information registration process for registering authentication information of a representative of a company to be authenticated and authentication information of a person in charge in authentication information storage means, Receiving the authority information with the electronic signature and the authentication information of the representative, referring to the authentication information storage means based on the authentication information, and authenticating the representative of the company to be authenticated; An authorization information registration process for registering the authority information in an authority information storage means when the transaction is requested by the certified company to a partner company. Receiving the authentication information of the person in charge of the company to be authenticated and the transaction data with the electronic signature of the person in charge from the business terminal, and referring to the authentication information storage means, Authentication is performed, and when the authentication is performed, the authority information to which the digital signature of the representative of the company to be authenticated is attached is acquired from the authority information storage means, and the authentication information and the electronic signature of the person in charge are acquired. An authority information transfer process for transmitting, to the terminal of the partner company, authority information to which the transaction data obtained and the digital signature of the representative of the certified company are added. 9. An authority authentication agent system comprising an authentication center device for authenticating an individual to a terminal of a company to be authenticated and a terminal of a partner company connected via a network, the authority to be executed at the terminal of the partner company. An authentication acting program, comprising: an electronic signature of a person in charge of a company to be authenticated of the transaction data received from the terminal of the enterprise to be authenticated via the authentication center device; and an electronic signature of a representative of the company to be authenticated in authority information. A verification process for comparing the authority information of the person in charge identified with the contents of the transaction data, and confirming the authorization of the transaction if corresponding. Authorization authentication agency program characterized by the following. 10. An authority to be executed in a terminal of a company to be authenticated in an authority authentication acting system comprising an authentication center device for performing personal authentication for a terminal of a company to be authenticated and a terminal of a partner company connected via a network. An authentication agent program, an authority authentication information registration process for registering authority information of a person in charge of an electronic signature of a representative of a company to be authenticated in an authority authentication storage unit in the terminal, and A requester authentication requesting process for requesting authentication of a person in charge of the counterpart company, and adding a digital signature of the person in charge to the transaction data created by the person in charge to authenticate the person in charge. And a transaction data transmission process for transmitting to the authentication center device together with the authorization information storage means based on the contact information of the partner company obtained from the partner terminal. A permission information transmission process for acquiring the permission information, adding an electronic signature of a representative of the certified company to the permission information, and transmitting the electronic signature to the terminal of the partner company. . 11. An authority authentication agent system comprising an authentication center device for authenticating an individual to a terminal of a company to be authenticated and a terminal of a partner company connected via a network. A first authentication information registration process for accepting registration of authentication information of a representative and a person in charge of a company to be authenticated and registering it in authentication information storage means, and registering authentication information of a person in charge of a partner company Receiving a second authentication information registration process stored in an authentication information storage unit, authentication information from the terminal of the authenticated company, and transaction data to which an electronic signature of a person in charge of the authenticated company is attached; With reference to the authentication information storage means based on the authentication information,
Authenticating the person in charge and, if authenticated, a transaction data transfer process for transmitting authentication information and transaction data with the person's digital signature to the partner company terminal; and Receiving the authentication information of the person in charge and the information of the person in charge, and referring to the authentication information storage means for the authentication information of the person in charge, authenticates the person in charge of the partner company. And a partner authentication process for transmitting authentication information and the person in charge information to the terminal of the company to be authenticated. 12. In an authority authentication agent system comprising an authentication center device for authenticating an individual to a terminal of a company to be authenticated and a terminal of a partner company connected via a network, the authority executed in the terminal of the partner company. An authentication agent program, which verifies an electronic signature of a person in charge of the company to be authenticated from the transaction data transmitted from the authentication center device, and obtains authority information to the company to be authenticated via the authentication center device. A person verification process for transmitting, an authentication information transmission process for transmitting the authentication information of the person in charge and the person's information to the authentication center device, and a representative of the company to be authenticated given to the authority information obtained from the terminal for the company to be authenticated Verifies the electronic signature of the person, and if the verification is successful, the authority information of the person in charge of the company to be authenticated and the transaction data acquired from the authentication center device. An authority authentication confirmation process for comparing the contents and confirming the authority authentication in the transaction when corresponding. 13. An authority authentication agent system comprising an authentication center device for authenticating an individual to a terminal of a company to be authenticated and a terminal of a partner company connected via a network. A company terminal or a storage medium storing an authority authentication acting program executed by the authentication center device, wherein the program to be executed by the authenticated enterprise terminal according to claim 7 or claim 10, At least one of a program to be executed by the authentication center device according to claim 8 or 11, and a program to be executed by the partner company terminal according to claim 9 or 12.
A storage medium storing an authority authentication agent program characterized by storing two programs.