JP2003338816A - Service providing system for verifying personal information - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a service providing system which includes a control center and more improves security of personal information management, stability and reliability during operations, and a service providing method therefor. <P>SOLUTION: Personal information of a service user verified by a user information verification apparatus 11 and attached with a digital signature (signed- personal information) is stored in a highly secure form within a service user apparatus 12. For receiving services, the service user apparatus 12 transmits the signed-personal information stored therein to a service provider apparatus 13. The service provider apparatus 13 verifies the signed-personal information based on the digital signature, and then provides services based on the personal information. <P>COPYRIGHT: (C)2004,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention is a service in which various services (for example, sales of products, paid distribution of digital contents such as music and video) are provided to users through a network such as the Internet. The present invention relates to a providing system, and particularly to a service providing system that guarantees confidentiality of user's personal information in providing a service. The invention also relates to a similar service providing method.

[0002]

2. Description of the Related Art In recent years, along with the spread of the Internet in ordinary households, businesses for providing various services (sales of products, distribution of digital contents (music and video)) via a network for a fee have become popular. In providing such a service, the service user needs to send personal information necessary for shipping the product and paying the price to the service provider. As such personal information, a name, address, telephone number, credit card number, etc. are generally used. The service provider verifies the legitimacy of the transmitted personal information, authenticates the legitimacy, and then provides the service.

However, when the service user repeatedly receives the service from the same service provider, it is inconvenient for the user to transmit the personal information every time. Also,
Even on the service provider side, it is a heavy load to authenticate the legitimacy of many users' personal information every time a service is provided. Therefore, there is a need for a service providing system that can improve the convenience of service users and reduce the load on service providers.

As a basic aspect of such a system,
There are the following. The service user transmits the personal information only when using a certain service provider for the first time, and when the legitimacy is authenticated by the service provider, the personal information is sent together with the user ID and password set by the user. Register with your service provider. After that, when receiving the service provision, the service user sends only the registered user ID and password to the service provider. The service provider authenticates the legitimacy of the service user with the password and obtains the personal information of the service user from the registered personal information based on the user ID. In this system, the service user does not have to send personal information each time the service is used. Further, the service provider only has to perform the legitimacy authentication of the personal information once for each service user.

However, in the above system, a service user who uses a plurality of service providers needs to register a separate user ID and password for each service provider and store them, and the user ID and the password must be stored. Password management becomes complicated. On the other hand, on the service provider side as well, if the number of service users increases, the processing load for authenticating the personal information is heavy even once for each person.

Therefore, a service providing system including a management center for professionally authenticating the authenticity of personal information and managing authenticated personal information has been devised. A typical example is the ".NET Passport" method (the document "Microsoft .NET P on the Internet.
support Technical Overview
w (as of September 2001) (described in Non-Patent Document 1) "
There is a system that adopted.

In this system, the service user registers his / her personal information together with the user ID and password in the management center in advance. When registering personal information, the management center confirms the legitimacy performed by the service provider in the above system. Then, the service user who has registered the personal information once receives the user ID from the service provider when receiving the service from the service provider.
And the registered personal information is acquired by transmitting the password, and the acquired personal information is transmitted to the service provider. The management center shares a unique secret key encryption key with each service provider, and when transmitting personal information to a service user, it must be encrypted with the key shared with the other service provider. Send with. The service user sends the encrypted personal information to the service provider, and the service provider uses the shared key to decrypt the personal information sent from the service user.

In this system, the service user need only register one type of user ID and password in the management center. Further, the service provider is relieved of the load of personal information authentication processing.

[0009]

[Non-Patent Document 1] Microsoft. NET Pa
ssport Technical Overview
(September 2001)

[0010]

However, the service providing system including the management center has the following problems. First, the management center manages personal information for all service users who have used any one of the service providers in the system. That is, a large number of personal information of service users are concentrated in the management center. Due to the concentration of personal information, the management center is likely to be targeted by hackers who attempt to illegally obtain personal information. If the database of personal information is illegally accessed, a large amount of personal information will be leaked. This may cause service users to feel uncertain about the safety of the system and may hesitate to receive the service via the network. That is, the above security concerns may hinder the spread and promotion of the service providing business via the network.

Further, since the service user always accesses the management center when using the service, the processing load on the management center is large. When many service users access the management center at the same time, the management center may be down due to the load exceeding the allowable limit. In view of the above problems, the present invention is a service providing system including a management center, in which the safety of personal information management and the stability and reliability during operation are higher, and The purpose is to provide various service provision methods.

[0012]

In order to achieve the above object, the present invention provides a service from a service providing device to a service using device via a network based on personal information of a user authenticated by a personal information authenticating device. In the service providing system, the personal information authenticating device includes a personal information authenticating means for confirming the validity of the personal information of the user received from the service using device, and the personal information authenticating means. A signed information generation unit for sending personal information with a signature generated by adding an electronic signature to the personal information whose validity has been confirmed, to the service using apparatus, wherein the service using apparatus is Signed information acquisition means for sending user personal information to the information authentication device to obtain signed personal information, and before acquisition by the signed information acquisition means Storing the signed personal information, a management information storage managing unit reads the signed personal information from said information storage managing unit, and the service request unit for sending with the service providing request to the service providing device,
A service acquisition unit that receives a service from the service providing apparatus in response to the service providing request sent by the service requesting unit, wherein the service providing apparatus includes a service providing request and a signed individual from the service using apparatus. Accepting means for accepting information, verifying means for judging whether or not the signed personal information accepted by the accepting means is valid based on the added electronic signature; and when the verifying means determines that the And a service providing means for providing a service to the service using device,
A service providing device characterized by the above.

According to this configuration, the personal information whose authenticity has been authenticated (signed personal information) is not held in a centralized manner by the personal information authentication device in the management center, but is kept in the hands of each service user. It is stored in a certain service utilizing device. Therefore, it is possible to prevent a situation in which a large amount of personal information is leaked from the personal information authentication device by one unauthorized access. Therefore, the safety of the system is improved. In addition, since it is not necessary to access the personal information authentication device from the service using device when using the service, even if a large number of users request service at the same time in the service providing system, the personal information authenticating device can be used. It is not overloaded. Therefore, the stability and reliability of the service providing system in operation are improved.

Further, in the conventional service providing system, since the service utilizing apparatus accesses the authentication center every time the service is provided, the authentication center uses which service providing apparatus by which user at what frequency. They are in a position to collect information such as whether they are doing (service user preference, service provider sales record, etc.).
In the service providing system of the present embodiment, since the service using device that is going to receive the service does not need to access the authentication center, the user or the dealer may say that this information is leaked to the outside via the authentication center. Anxiety disappears.

In order to achieve the above object, the service providing method of the present invention provides a service from the service providing device to the service using device via the network based on the personal information of the user authenticated by the personal information authenticating device. A personal information authentication step of confirming the validity of personal information of a user received from the service utilizing apparatus in the personal information authenticating apparatus, wherein the personal information authenticating apparatus comprises: In the information authentication device, a signed information generation step of sending the signed personal information generated by adding an electronic signature to the personal information whose validity is confirmed in the personal information authentication step to the service using device, In the service utilizing device, the user personal information is sent to the personal information authenticating device, A signed information acquisition step of obtaining information; an information storage management step of storing and managing the signed personal information acquired in the signed information acquisition step in the service using apparatus; A service request step of reading the attached personal information and sending it to the service providing device together with a service providing request; and a service acquiring step of receiving a service provided from the service providing device in response to the service providing request in the service using device. In the service providing device, a reception step of accepting the previous period service providing request and the signed personal information from the service using device, and whether or not the received previous period signed personal information is valid in the service providing device are added. Based on electronic signature A service providing method comprising: a verification step of determining; and a service providing step of providing a service to the service using apparatus when the personal information with a signature in the previous term is determined to be valid in the service providing apparatus. And

[0016]

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. (Embodiment 1) (Outline) FIG. 1 is a diagram showing a rough configuration of a service providing system according to a first embodiment of the present invention. The service providing system 1 in this embodiment is
This is a system in which a service provider provides a paid service to a service user, and when the service user receives the service, the service provider provides the signed personal information whose legitimacy has been verified by an authentication center in advance. To present.

The service providing system 1 has, as its device configuration, a personal information authenticating device 11 in an authentication center for authenticating the personal information of the service user, a service using device 12 used by the service user, and a service provider. Service providing device 13 used by the user to provide a service
Are connected by a network N. Although there are a plurality of service using devices and a plurality of service providing devices, only one is shown for convenience of explanation.

As a specific example, the personal information authentication device 11 is a computer or a server that executes a program for personal authentication. Further, the service using device 12 is a personal computer connected to the network N or a mobile terminal having a communication function, and operates as the service using device 12 by executing an installed program provided in advance from the authentication center ( The program is installed, for example, by downloading from a homepage managed by the authentication center). The service providing device 13 is a computer or a server that executes a program for providing a service.

The personal information authentication device 11 authenticates the personal information of the user transmitted from the service use device 12. The personal information authentication device 11 adds an electronic signature to the authenticated personal information and returns it to the service using device 12. The electronic signature is a guarantee to the service provider that the personal information to which the electronic signature is added is “it is reliable without any error or falsehood”. Then, the personal information authentication device 11 does not hold the personal information.

The service use device 12 sends the user personal information input by the user to the personal information authentication device 11 to be authenticated, and internally stores the signed personal information after authentication.
The storage location of the signed personal information is in a memory card which is restricted from external reference. After that, when the user obtains a service acquisition instruction, the signed personal information is transmitted to the service providing apparatus 13 together with the service providing request, and the service content is received from the service providing apparatus 13. However, this signed personal information is valid
Only for the service providing device 13 managed by a service provider who has contracted with the authentication center in advance and participates in the service providing system 1.

The service providing device 13 provides a service in accordance with the signed personal information transmitted by the user who requests the service using the service using device 12. In providing the service, the service providing device 13 confirms only the validity of the electronic signature added to the signed personal information, and does not confirm the validity of the personal information. Signature confirmation data (for example, a public key) previously obtained from the personal information authentication device 11 is used to confirm the validity of the electronic signature. This confirmation data may be transmitted from the personal information authentication device 11 to the service providing device 13 when the service provider managing the service providing device 13 makes a contract with the authentication center, for example.

As described above, in the service providing system 1 according to the present embodiment, the personal information with a signature after authentication is not held in the personal information authenticating device 11 in the authentication center, but is stored in the hands of each user. It is stored in the service using device 12 located at. In addition, the service use device 12 that is going to receive the service provision is also the personal information authentication device 11
Do not access. Therefore, the security and operational stability of the system will not be adversely affected by the concentration of personal information and the concentration of access to the authentication center.

Further, by strengthening the security in the management of the signed personal information in the service utilizing apparatus 12, the risk of leakage or falsification of the signed personal information is prevented from increasing as compared with the conventional case. That is, the service providing system 1 according to the present embodiment solves the conventional problem by holding the signed personal information in the service use device in the hands of each user, while the signed personal information is stored in the service use device. By strictly managing the information, the reliability of the signed personal information is prevented from decreasing. (Processing Flow) Hereinafter, a processing flow executed in the service providing system 1 according to the present embodiment will be described.

As can be seen from the above outline description, the processing performed in the service providing system 1 is roughly divided into two.
Divided into types. One is a process performed by the personal information authentication device 11 and the service use device 12 in connection with the personal information authentication of the service user (hereinafter, "personal information authentication procedure").
The other is a process (hereinafter, “service utilization procedure”) performed by the service utilization device 12 and the service provision device 13 in connection with the service provision from the service provider to the service user. The flow of each procedure will be described below with reference to the drawings. -Flow of personal information authentication procedure First, the flow of personal information registration procedure will be described with reference to the drawings.

FIG. 2 is a diagram showing the flow of the personal information registration procedure executed by the personal information authentication device 11 and the service use device 12. (1) Input of User Personal Information First, the service use device 12 receives input of personal information from a service user. The service using device 12 transmits the input personal information to the personal information authenticating device 11 in the authentication center.

FIG. 3 is a schematic diagram showing a structure of user personal information transmitted from the service utilizing apparatus 12 to the personal information authenticating apparatus 11. The user personal information shown in the figure is "name",
It consists of "phone number", "address", "date of birth", "credit card number", "height / weight", and "blood type". The example shown in the figure is an example, and the items of the user personal information must cover the items required in each service providing apparatus in the system.

(2) Confirmation of user's personal information Next, the personal information authentication device 11 operates the service utilization device 1
By inquiring the user personal information received from 2 from the information about the service user obtained from an external and reliable information source (which has been input to the personal information authentication device 11 in advance), the user individual Check the validity of the information.

(3) ID Number / Signature Assignment The personal information authentication device 11 adds a user ID number unique to the user and an electronic signature to each item of the user personal information that can authenticate the validity. To generate signed personal information. FIG. 4 is a schematic diagram showing an example of the configuration of the signed user personal information 400. The signed personal information is composed of a plurality of items, and each item is the personal information transmitted from the service using apparatus 12 to the main body unit 410 and the user ID unit 4.
20 and a signature unit 430 are added.

First of all, the personal information authentication device 11 uses the user I.
One D number is generated and added to each item of user personal information. After that, an electronic signature using the public key cryptosystem is generated and added to each item after the user ID number is added. The value of the electronic signature should be different for each item. As a method of generating the signature data, for example, the ElGamal signature method may be used. The ElGamal signature method is described, for example, in “Modern Cryptography” by Tatsuaki Okamoto and Hirosuke Yamamoto (Industrial Books).

Then, the personal information authentication device 11 encrypts the generated signed user personal information and sends it to the service use device 12. Specifically, SSL (Secur
Confidential communication is performed by the eSocket Layer protocol. In the processing of (2), if the validity of the personal information cannot be authenticated, the personal information authentication device 11
Transmits a message requesting the transmission of correct personal information to the service utilizing apparatus 12, and the procedure returns to (1).

(4) Storing personal information with signature When the service using apparatus 12 receives the personal information with signature transmitted from the personal information authentication apparatus 11, it first decrypts the personal information. Further, the personal information with a signature once decrypted is encrypted with a unique storage encryption key and stored in a built-in memory card.

(Service Utilization Procedure) Next, a procedure (service utilization procedure) in which the service utilization apparatus 12 receives a service from the service provision apparatus 13 in response to a request from the service user will be described. FIG. 5 is a diagram showing a procedure of a service use procedure.

(1) Issuing a service providing request First, the service using device 12 which receives an instruction from the user
Sends a service providing request to the service providing apparatus 13 via the network N. (2) Issuing the personal information request The service providing apparatus 13 that has received the service providing request
A personal information request specifying the items of personal information necessary for providing the service is transmitted to the service using device 12. The personal information request is described in a predetermined format (predetermined by the personal information authentication device 11), and necessary items are serial numbers of the items (for example, in the example of FIG. 4, the serial number of “name” is “1”). , "Address" becomes "3", etc.).

(3) Sending partial personal information The service using apparatus 12 that has received the personal information request decrypts the encrypted personal information with a signature and retains only the items designated by the personal information request. The extracted one (partial personal information) is transmitted to the service providing device 13. When transmitting, secret communication based on the SSL protocol is performed. At this time, the service using device 12
Check the description format of personal information request,
It is determined whether the request is from the correct service providing device 13, and if the request format is not correct, it is determined that the request is an unauthorized request from a third party impersonating the trader, and the personal information is not transmitted. It is assumed that the format has been notified from the personal information authentication device 11 in advance. Further, this determination may be made based on the electronic signature added to the request instead of the format. In that case, the service provider uses the request for the description content that has been previously authenticated by the personal information authentication device 11 and added with the electronic signature, and the service use device 12 uses the public key for checking the signature in advance in the personal information authentication device. It has been given from 11.

FIG. 6 is a schematic diagram showing an example of the partial personal information 600. The figure shows the contents when four items of “name”, “phone number”, “address”, and “credit card number” are requested from the signed personal information. (4) Confirmation of user ID number / signature The service providing apparatus 13, which has received the partial personal information, decrypts the partial personal information and determines the validity of the partial personal information based on the user ID number and the signature. . Details of the determination process will be described later.

(5) Providing service If the partial personal information is confirmed to be valid as a result of the above determination, the service providing apparatus 13 causes the service using apparatus 12 to operate.
Provide services to. The services provided are
For example, network distribution of digital music contents. (Configuration of Each Device) Next, each device (personal information authentication device 11, service utilization device 1) that realizes the above-described processing.
2. Detailed description will be given of the configuration of the service providing apparatus 13).

(Structure of Personal Information Authentication Device 11) The personal information authentication device 11 performs only the processing related to the personal information authentication procedure. FIG. 7 is a block diagram showing the configuration of the personal information authentication device 11. The personal information authentication device 11 exchanges data with the service use device 12 (user personal information before authentication,
An authentication device transmitting / receiving unit 111 that transmits / receives signed personal information after authentication, a personal information confirmation unit 112 that checks the legitimacy of personal information before authentication received from the service using device 12, an individual whose legitimacy has been confirmed. It has a signature generation unit 113 that adds signature data, which is an authentication certificate, to information to generate personal information with a signature.

Authentication device transmitting / receiving unit 111 The authentication device transmitting / receiving unit 111 transmits / receives data to / from an external device, and in particular receives personal information from the service utilizing device 12 and sends the signed personal information after authentication to the service utilizing device 1
Send to 2. When sending and receiving personal information (before and after authentication), the data is encrypted and kept secret. Specifically, SSL
Confidential communication by protocol is performed.

Personal Information Confirmation Unit 112 The personal information confirmation unit 112 confirms the legitimacy of the personal information to be authenticated received by the authentication device transmission / reception unit 111 (that is, determines whether or not the personal information can be authenticated). . For the validity check, the same kind of information that the administrator who belongs to the authentication center has previously acquired from the other reliable information source and input into the personal information confirmation unit 112 the content of the personal information transmitted by the user is confirmed. It is done in the form of comparison. The information to be compared is
Specifically, the information written on the resident's card mailed to the user or the user information (including the credit card number) obtained from the credit card company with the user's permission.
And so on.

Signature Generation Unit 113 The signature generation unit 113 adds an electronic signature to the personal information whose validity is confirmed by the personal information confirmation unit 112. The signature generation unit 113 receives the personal information from the personal information confirmation unit 112. Then, for the personal information, one unique user ID number is generated for each user, and this is added to the beginning of each item of the personal information.

Then, a digital signature is generated and added to each item of the personal information to which the user ID number is added. The method of generating the digital signature is the public key cryptosystem (specifically, the ElGamal signature system can be used). That is, the electronic signature is generated based on the data obtained by concatenating the user ID number and the target item by using the signature private key that is held in advance in a form in which external reference is prohibited. The signature public key corresponding to this signature private key is the service providing device 1 in the service providing system 1.
3 is distributed in advance.

Since the electronic signature generated by the above procedure is generated based on the contents of the personal information and the user ID number whose value is different for each user, the value naturally varies from user to user. Further, even in the signed personal information of one user, the value is different for each item. (Configuration of Service Utilization Device 12) Service Utilization Device 12
Performs processing related to personal information authentication procedures and service usage procedures.

FIG. 8 shows the configuration of the service utilizing device 12. The service using device 12 uses a device transmitting / receiving unit 121 for transmitting / receiving data to / from the personal information authenticating device 11 and the service providing device 13, a memory card 123 for storing signed personal information, and a memory card control for controlling the memory card 123. The memory card 123 has a section 122, of which the memory card 123 is inserted into the slot of the service using apparatus 12 in a detachable manner.

Utilizing device transmitting / receiving unit 121 The utilizing device transmitting / receiving unit 121 transmits / receives personal information before and after authentication to / from the personal information authenticating device 11 in the personal information authentication procedure, and in the service utilizing procedure, the service providing device 13 Various information (personal information request, partial personal information, service content) is transmitted and received between and. In either case, transmission / reception is performed by secret communication based on the SSL protocol.

Memory Card Control Unit 122 The memory card control unit 122 manages the input / output of signed personal information to / from the memory card 123. In the personal information authentication procedure, the signed personal information memory card 123
To store. Specifically, the signed personal information received in the encrypted state is decrypted and then output to the memory card 123 together with the storage instruction.

The memory card control unit 122 also reads out personal information from the memory card 123 in the service utilization procedure. Specifically, first, the personal information request transmitted from the service providing apparatus 13 in response to the service utilization request is acquired via the utilization apparatus transmitting / receiving unit 121. Then, the personal information request is analyzed to specify the item requested by the service providing device 13. Then, the personal information output command is issued to the memory card 123 together with the information indicating the above items.

Memory Card 123 The memory card 123 has an IC card chip capable of executing a program inside. In addition to storing the signed personal information, the processing is internally executed according to the instruction from the memory card control unit 122 in relation to its input / output. FIG. 9 is a block diagram showing the structure of the memory card 123. The substance of the memory card 123 is a memory card having a tamper resistant IC card chip (protected from unauthorized access from the outside). The IC card chip has functions for storing and executing programs. The memory card 123 has a tamper resistant protected storage area 12
4 (IC card chip) has a general storage area 125 capable of storing a large amount of data. The protected storage area 124 stores an encryption / decryption unit 126 that performs encryption / decryption processing of signed personal information, and a key generation unit 127 that generates a key used for the encryption / decryption processing. Also,
The protected storage area 124 includes a key storage area 128 for storing a key. The encryption / decryption unit 12
6. The substance of the key generation unit 127 is a program stored in the protected storage area 124, and these programs are encrypted / executed by being executed by a built-in arithmetic unit (not shown).
It operates as the decryption unit 126 and the key generation unit 127. Less than,
The processing contents of the main components will be described separately for the "personal information authentication procedure" and the "service use procedure".

Encryption / Decryption Unit 126 The encryption / decryption unit 126 is associated with the personal information authentication procedure.
Encrypts the signed personal information transferred from the memory card control unit 122 and stores it in the general storage area 125. Specifically, the encryption / decryption unit 126 instructs the key generation unit 127 to generate a key at the timing of receiving the signed user personal information transferred from the memory card control unit 122. When the encryption key is received from the key generation unit 127, the signed user personal information is encrypted using this encryption key and stored in the general storage area 125.

In connection with the service use procedure, encryption /
The decryption unit 126 performs a process of decrypting and outputting the saved signed personal information in response to a request from the memory card control unit 122. Specifically, the encryption / decryption unit 126
Receives a request from the memory card controller 122,
The decryption key is stored in the key storage area 128 and stored in the general storage area 125.
The encrypted personal information with signature is read from each of them and the personal information with signature is decrypted using the decryption key. At this time, the items to be read and decrypted are only the items designated by the memory card control unit 122 in the personal information. Then, the encryption / decryption unit 126 sends the decrypted signed personal information to the memory card control unit 122.

Key Generation Unit 127 The key generation unit 127 performs processing only in the personal information authentication procedure. The key generation unit 127 generates an encryption key and a decryption key for the signed personal information according to the instruction from the encryption / decryption unit 126. Then, the encryption key is encrypted by the encryption / decryption unit 12
6, while the decryption key is stored in the key storage area 128.
Since the key storage area 128 is inside the protected storage area 124, the decryption key is held in a state where it cannot be read directly from the outside of the card. The data encryption method used here may be a public key encryption method or a secret key encryption method. For example, DE, which is one of the secret key cryptosystems
S (Data Encryption Standard)
d) A cryptosystem can be used. In the case of the secret key cryptosystem, the encryption key and the decryption key are the same. Regarding the DES encryption method, for example, "modern encryption"
(Takaaki Okamoto, Hirosuke Yamamoto, Industrial Books). (Configuration of Service Providing Device 13) Service Providing Device 13
Performs processing in the service use procedure.

FIG. 10 shows the configuration of the service providing device 13. The service providing device 13 is the service using device 12
A providing device transmitting / receiving unit 131 for transmitting / receiving data to / from
It has a signature confirmation unit 132 for confirming the validity of the signed personal information transmitted from the service using apparatus 12 together with the service providing request, and a memory apparatus 133 in which the service contents to be provided are stored.

The providing device transmitting / receiving unit 131 receives a service providing request from the service using device 12 and sends a personal information request to the service providing request. And the service utilization device 1
When partial personal information is received from 2, the signature verification unit 1
Send to 32. If the signature confirmation unit 132 confirms the validity of the personal information, the providing device transmitting / receiving unit 131 determines that the memory device 1
The service content requested by 33 is read and transmitted to the service using device 12. If the validity is not confirmed, the providing device transmitting / receiving unit 131 transmits an error message to the service using device 12. When the service content is transmitted to the service using device 12,
The providing device transmitting / receiving unit 131 stores information necessary for charging the service charge (user name, credit card number, details of provided content, etc.) in a history database (not shown). This information is referred to separately when the service fee is settled.

The signature confirming unit 132 is the providing device transmitting / receiving unit 1
31 analyzes the content of the service providing request received from the service using device 12, and determines the item of personal information necessary for using the requested service. Then, a personal information request for requesting the transmission of the item is generated and sent to the providing device transmitting / receiving unit 131, and the service using device 12 is instructed to transmit it.

After that, when the partial personal information transmitted from the service utilizing apparatus 12 is acquired from the providing apparatus transmitting / receiving section 131, the signature confirming section 132 confirms its validity based on the added signature and user ID. . First, the signature confirmation unit 132 confirms, based on the signature, whether or not each item of the personal information is information authenticated by the personal information authentication device 11. The signature confirmation method is a publicly known method that uses a signature public key that has been notified from the personal information authentication device 11 in advance. Specifically, the signature public key, the signature unit 430 added to the item (see FIG. 4), and the data that is the source of the signature (the data obtained by linking the user ID unit 410 and the personal information unit 420). It is checked whether or not a predetermined relationship called a signature verification formula is established between the three types of data).

Next, the signature confirmation unit 132 confirms whether or not the user ID number added to each item of the partial personal information is common to all items. This is because only the legitimacy of each item can be confirmed by the signature.For example, only some items are extracted from the personal information with signatures of multiple users, and these are combined and signed by a person who does not exist. This is because it is impossible to detect forgery in the form of generating personal information. Therefore, it is checked whether or not the user IDs match in all items, and if they do not match, it is determined that the personal information with signatures of a plurality of users are mixed and the information is forged.

As a result of the check by the user ID or the electronic signature, if the validity is not confirmed by both, the signature confirmation unit 132 sends fraud detection to the providing device transmitting / receiving unit 131, and an error message is sent to the service using device 12. Instruct to send. (Summary) As can be seen from the above description, in the service providing system 1 according to the present embodiment, the personal information authentication device 1
In No. 1, after confirming the legitimacy of personal information, a signature is added and returned to the service utilizing apparatus 12, and the collective management of personal information with a signature as in the conventional case is not performed. That is, the signed personal information is stored in the service utilizing device 12 in the hands of each user. Therefore, unlike the conventional system, there is no problem in terms of safety that personal information for a large number of people collectively leaks from the authentication center, and when using the service, the service using device 12 becomes the authentication center. It also improves system stability by not accessing it.

Moreover, in the service utilizing device 12,
The signed personal information is encrypted and then stored in the memory card, and the decryption key is stored in an area that cannot be referenced from the outside. In this way, since it is stored strictly, it does not mean that the reliability of the signed personal information is inferior to that of the conventional system because the management center of the signed personal information is changed from the authentication center to the user. .

Further, since a unique user ID number is added to each item of the signed personal information issued to the user, for example, the name of the user A and the address of the user B are given. Even if the personal information with a signature of a person who does not exist is forged and the service is provided by using this, the user ID numbers do not match between the items, and the forgery is detected. As a result, the reliability of the signed personal information seen by the service provider is increased.

Further, since the signed personal information is stored in the removable memory card, if it becomes necessary to replace the service utilizing device due to a failure or the like, the memory card is simply moved and new information is immediately added. Service can be provided by the device. In the conventional service providing system, since the service using device needs to access the authentication center every time the service is provided, the authentication center uses which service providing device by which user. Whether or not (in other words, the preference of the service user, the sales record of the service provider, etc.) and the information about the service usage situation were available. In the service providing system according to the present embodiment, since the service using device that is going to receive the service does not need to access the authentication center, there is no possibility that the authentication center knows this information. Therefore, as a service user or a service provider, there is no fear that information that should not be known to others will be leaked through the authentication center, and the trust of the provider in the system is increased.

(Modification) In the service providing system 1 according to the above-mentioned embodiment, the signed personal information is strictly stored in the service utilizing apparatus 12, but the signature is still attached by an unauthorized means such as communication wiretapping. When personal information is stolen, the stolen person can impersonate the user by presenting the information to the service providing device. Therefore, in this modification, even if the signed personal information is stolen, it cannot be used for impersonation.
A service providing system in which a service provider can authenticate the identity of a personal information transmission source by an authentication method using a public key cryptosystem is shown.

The features of the service providing system in this modification are as follows. The service using device creates in advance a set of a public key and a private key for identity authentication necessary for receiving the service provision, and the public key for identity authentication is authenticated by the personal information authentication device as a part of personal information. I will receive it.
When receiving the service provision, the service using device transmits the signed personal information including the public key for identity authentication to the service provider, and the service provider uses this to identify the identity of the transmitting service using device. We will provide the service after confirming.

As a configuration peculiar to this modification, an identity authentication key generation unit that generates a public key / private key for identity authentication at the timing when the personal information to be authenticated is input by the user to the service utilizing apparatus. Is added. In addition to the processing in the above-described embodiment, the signature verification unit in the service providing apparatus performs processing for authenticating the identity of the personal information transmission source using the public key for identity authentication.

The "personal information registration procedure" and "service utilization procedure" in this modification will be described below with reference to the drawings. Description of the same parts as those in the embodiment will be omitted. FIG. 11 is a diagram showing the procedure of the personal information registration procedure in the present modification. The process unique to this modification is “(1a) generation of an identity authentication key”. Here, the identity authentication key generation unit that receives the input of personal information from the user creates a public / private key pair for identity authentication based on the public key cryptosystem. Then, the identity authentication public key is sent to the utilization device transmitting / receiving device 121 (see FIG. 8) together with the input personal information, and an instruction is sent to the personal information authenticating device. On the other hand, the identity authentication secret key is stored in the key storage area 128 (see FIG. 9) in the protected storage area 124 in the memory card 123. The public key cryptosystem used here may be of any type, but for example, the ElGamal cryptosystem can be used.

Subsequent processes (2) and (3) in the personal information authentication device 11 are the same as those in the embodiment. The identity authentication public key is handled in the same way as other items. FIG. 12 shows an example of the configuration of personal information in this modification. The same figure (a) shows personal information before authentication and signature addition, and the same figure (b) shows personal information with a signature after authentication. It differs from the personal information in the embodiment only in that an identity authentication public key 1201 is added as one of the items. Naturally, the user ID number is also added to the identity authentication public key, and then the electronic signature is added.

The process (4) after the signed personal information is sent to the service utilizing apparatus is also the same as in the embodiment. FIG. 13 is a diagram showing a procedure of a service use procedure in this modification. The process unique to this modification is “(4a) Identity confirmation using public key encryption”. The processing from “(1) service request” to “(4) confirmation of ID number / signature” is almost the same as the processing in the embodiment. However, in (2), the personal information request sent from the service providing device to the service using device includes
Be sure to include the public key for identity authentication as the target personal information item.

The signature verification unit (see FIG. 10) of the service providing apparatus performs the process (4a). The signature verification section
After the processing of (4) (checking the signed partial personal information with the user ID number and the signature), the sender uses the authorized service by using the identity authentication public key included in the signed partial personal information. It is verified whether or not it is a device (a device holding a corresponding private key for identity authentication). The verification system may be of any type as long as it is based on the public key cryptosystem. For example, it is possible to use the method described in "9.4 Modern-key cryptography / method using digital signature" of "Modern cryptography" (Tatsuaki Okamoto, Hirosuke Yamamoto, Sangyo Tosho).

In this modification, the identity authentication of the personal information sender by the public key cryptosystem is performed when executing the service utilization procedure. Therefore, it is not possible to use the device that does not hold the private key for identity authentication corresponding to the public key for identity authentication included in the signed personal part to receive the service. Therefore, a person who illegally obtains the signed personal information cannot impersonate a legitimate service user to receive the service. The reliability of the signed personal information in the service providing system is further increased. It is possible to realize high security by preventing the private key for identity authentication from being output to the outside from the protected storage area of the memory card once created and stored. (Note) An expiration date may be set for the signed personal information. Specifically, the personal information authentication device adds the expiration date information to the signed personal information. The service provider refers to the expiration date when providing the service,
If the validity has expired, the service using apparatus that has transmitted the signed personal information is requested to reacquire the signed personal information based on the latest personal information. In this way, the reliability of the signed personal information is improved.

Further, the decryption processing of the encrypted signature-added personal information executed inside the memory card during the service use procedure may not be executed unless the password preset by the service user is input. In this way, even if the service-using device is stolen with the memory card still inserted, unless the thief knows the password, he / she will not be able to use the personal information in the memory card to receive the service. Is improved. In addition to the password, biometric information (fingerprint, iris, voiceprint, etc.) of the service user can be used.

Further, regarding the communication between the personal information authentication device and the service using device, and the communication in the communication between the service using device and the service providing device, in the present embodiment, the confidential communication based on the SSL protocol is performed. However, the means for realizing the confidential communication is not limited to this. Further, in the above embodiment, the personal information authentication device 11 and the service use device 12 in the personal information registration procedure.
The exchange of personal information between them is supposed to be performed by communication via a network, but the method of exchange is not limited to this. It is also conceivable that the service user carries the service utilization device 12 to visit the authentication center 1 and operates the service utilization device 12 and the personal information authentication device 11 to directly input / output data. Alternatively, personal information may be recorded on a memory card and exchanged by mail. By doing so, it is possible to prevent the personal information from being leaked due to wiretapping on the communication path. That is, a service providing system in which the personal information authentication device and the service using device are not network-connected is possible.

Further, when the service using apparatus transmits the personal partial information in response to the request from the service providing apparatus, the request content may be checked by the service user. Specifically, the service use apparatus may be provided with an interface unit that receives an instruction from the service user after displaying the request content on the screen. Alternatively, the interface unit may accept in advance the setting of the item of personal information that may be presented to the service provider from the service user.

Regarding the contents of the personal information request transmitted by the service providing device to the service using device when the service is provided, the personal information authenticating device confirms the validity and the validity in advance, like the personal information of the service user. However, a signature may be added to the personal information request data that can be authenticated as legitimacy, and the personal information request data may be returned to the service providing apparatus. Then, when receiving the personal information request, the service utilizing apparatus responds only to the personal information request whose content can be confirmed by the signature. The public key for checking the signature is transmitted from the personal information authentication device to the service using device in advance. By doing so, it is possible to prevent an unauthorized request for personal information due to spoofing of the service providing device, and the safety of personal information in the system is improved.

The configuration for the service using apparatus to store the signed personal information does not necessarily have to be a memory card. A storage area protected from unauthorized access may be provided inside the storage device built in the service utilizing apparatus and stored therein.

[0073]

As is apparent from the above description, the service providing system of the present invention provides a service from the service providing device to the service using device via the network based on the personal information of the user authenticated by the personal information authenticating device. In the service providing system, the personal information authenticating device includes a personal information authenticating means for confirming the validity of the personal information of the user received from the service using device, and the personal information authenticating means. A signature-added information generation unit for sending personal information with a signature generated by adding an electronic signature to the personal information whose validity is confirmed, to the service utilization apparatus, wherein the service utilization apparatus includes
Signed information acquisition means for sending user personal information to the personal information authentication device to obtain signed personal information, and information storage management means for storing and managing the signed personal information acquired by the signed information acquisition means A service request means for reading the signed personal information from the information storage management means and sending it to the service providing device together with a service providing request; and a service providing device for the service providing request sent by the service requesting device. A service acquisition unit for receiving service provision, wherein the service providing apparatus includes a receiving unit that receives the service providing request and the signed personal information from the service using apparatus, and a signed personal information that the receiving unit receives. The verification means for determining whether or not it is valid based on the added digital signature, and the verification means And if it is determined, and a service providing means for providing a service to the service using apparatus, and wherein the configuration of.

According to this configuration, the personal information whose authenticity has been authenticated (personal information with a signature) is not centrally held by the personal information authenticating device in the management center, but is kept by each service user. It is stored in a certain service utilizing device. Therefore, it is possible to prevent a situation in which a large amount of personal information is leaked from the personal information authentication device by one unauthorized access. Therefore, the safety of the system is improved. In addition, since it is not necessary to access the personal information authentication device from the service using device when using the service, even if a large number of users request service at the same time in the service providing system, the personal information authenticating device can be used. It is not overloaded. Therefore, the stability and reliability of the service providing system in operation are improved.

Furthermore, in the conventional service providing system, since the service utilizing apparatus accesses the authentication center every time the service is provided, which user uses which service providing apparatus and how often. They are in a position to collect information such as whether they are doing (service user preference, service provider sales record, etc.).
In the service providing system of the present embodiment, since the service using device that is going to receive the service does not need to access the authentication center, the user or the dealer may say that this information is leaked to the outside via the authentication center. Anxiety disappears.

Further, the information storage management means stores the signed personal information in a state protected from external access, and only when the preset key information is input, the signed personal information is stored. It may be allowed to read information. According to this configuration, it is difficult for a person other than the service user to illegally read and misuse the signed personal information stored in the service use device in the hands of the service user from the outside. Therefore, the reliability of the signed personal information is not inferior to the conventional one. In addition, specifically,
The key information may be a password or biometric information.

Further, the information storage management means includes an encryption key for encrypting the signed personal information and a key generation means for generating a decryption key for decrypting the encrypted signed personal information. A key storage unit for storing the decryption key, an encryption unit for encrypting the signed personal information with the encryption key, and information for storing the signed personal information encrypted by the encryption unit The storage means and the decryption means for decrypting the encrypted signed personal information from the information storage means using the decryption key read from the key storage means may be included.

According to this configuration, the reliability of the signed personal information stored in the service utilizing apparatus is further enhanced. This is because the signed personal information is encrypted and the key for decryption is stored in the protected area. In addition, only the key with a small amount of data is stored in the protected area.
The storage medium in the present invention can be realized by an inexpensive medium in which the ratio of the protected area to the entire storage area is small. Specifically, the information storage management means includes an IC memory card having a protected storage area protected from external access, a general storage area accessible from the outside, and an arithmetic unit for executing a program. The encryption means and the decryption means are each realized by the program stored in the protected storage area being executed by the arithmetic unit, and the key storage means includes the protected storage area. The decryption key may be stored in the information storage means, and the information storage means may store the encrypted signed personal information in the general storage area.

Further, in order to guarantee the reliability of the signed personal information, the reception means in the service providing apparatus requests the personal information before receiving the signed personal information from the service using apparatus. When the personal information request is transmitted to the service utilization device, the service request means in the service utilization device receives the personal information request before the transmission of the signed personal information, and the received personal information request satisfies a predetermined condition. It is also possible to send the signed personal information to the service providing device only.

According to this configuration, the signed personal information is
When transmitted to a service provider, it can be prevented from being illegally acquired by a malicious third party impersonating the service provider. Therefore, the reliability of the signed personal information in the system is increased. In addition, specifically, the personal information request is generated in a predetermined format, and a dedicated electronic signature for request is added after being authenticated by the personal information authentication device. The digital signature for verification is verified using the public key for request signature distributed in advance from the personal information authentication device, and if the digital signature for request is valid, the personal information request satisfies the predetermined condition. It will be decided. That is, as in the case where personal information is authenticated in advance, the content of the personal information request is previously authenticated by the personal information authentication device.

Regarding the electronic signature, the user personal information is composed of a plurality of item data, and the signature generation means in the personal information authentication device adds an electronic signature to each item data to make the service. The verification means in the providing device may verify the signature for each of the item data. According to this, a strict signature check can be performed in item units.

The user personal information comprises a plurality of item data, and the signature generation means in the personal information authentication device adds a unique user ID for each user to each item data. Then, an electronic signature is added to the user personal information, and the verification means in the service providing device has the same user ID added to each item data of the signed personal information accepted by the acceptance means. It may be verified that if the two are not the same, it is determined that the signed personal information is not valid.

This configuration prevents a malicious service user from tampering with the signed personal information about himself and receiving the service illegally. For example,
This is a case where two service users join some of the signed personal information to generate the signed personal information of a person who does not exist. In this case, a correct signature is added to each item of the created personal information, but the service provider can recognize that the information is invalid because the IDs are not uniform among the items. Furthermore, specifically, the signature generation means in the personal information authentication device generates an electronic signature generated from the content of each item data and the user ID number for each item data to which the user ID is added. A signature may be added, and the verification means in the service providing apparatus may determine the validity based on the electronic signature for each item data.

Further, the service using apparatus stores the identity authentication key generation means for generating a pair of a public key and a secret key for identity authentication, and the identity authentication secret key generated by the identity authentication key generation means. , Private key holding means for holding the access from the outside in a restricted form, wherein the signed information acquisition means has the private key for identity authentication generated by the key generation means for identity authentication In the user personal information to be transmitted to the information authentication device, the service request means, the signed personal information to be transmitted to the service providing device, including the identity authentication secret key, the verification means in the service providing device, With reference to the private key for identity authentication of the signed personal information transmitted from the service requesting means, identity authentication by public key cryptosystem is performed, and the authenticity of the identity is verified. The signed personal information to determine the authenticity may be the case that.

According to this structure, when the signed personal information is transmitted from the service using apparatus to the service providing apparatus, the identity of the sender is authenticated. Therefore, even if the signed personal information transmission transmitted from the transmission service utilizing apparatus to the service providing apparatus is wiretapped, the eavesdropper cannot illegally receive the service by using the wiretapped personal information. Therefore, the reliability of the signed personal information is further enhanced. Further, specifically, the private key holding means may be a storage medium having a protected storage area that is restricted from being accessed from the outside, and the private key for identity authentication may be stored in the protected storage area. .

The effects described above can also be achieved by a service providing method having steps corresponding to the processes sequentially executed in the service providing system, and a program that causes a computer system to execute the service providing method. In addition, the personal information authentication device, the service providing device, the service using device (and the information management device possessed by the same) that compose the service providing system,
You can achieve some effects.

[Brief description of drawings]

FIG. 1 is a block diagram showing an overall configuration in an embodiment of a service providing system according to the present invention.

FIG. 2 is a diagram showing a flow of a personal information authentication procedure in the same embodiment.

FIG. 3 is a diagram showing a configuration example of personal information before authentication in the same embodiment.

FIG. 4 is a diagram showing a configuration example of personal information with a signature in the same embodiment.

FIG. 5 is a diagram showing a flow of a service use procedure in the same embodiment.

FIG. 6 is a diagram showing a configuration example of partial personal information in the same embodiment.

FIG. 7 is a block diagram showing a configuration of a personal information authentication device according to the same embodiment.

FIG. 8 is a block diagram showing a configuration of a service using device according to the same embodiment.

FIG. 9 is a block diagram showing a configuration of a memory card included in the service using apparatus according to the same embodiment.

FIG. 10 is a block diagram showing a configuration of a service providing apparatus according to the same embodiment.

FIG. 11 is a diagram showing a flow of a personal information authentication procedure in a modified example of the same embodiment.

FIG. 12 is a diagram showing personal information before and after authentication in the modification.

FIG. 13 is a diagram showing a flow of a service use procedure in the modification.

[Explanation of symbols]

1 Service providing system 11 Personal information authentication device 111 Authentication device transceiver 112 Personal Information Confirmation Department 113 signature generator 12 Service utilization equipment 121 Utilizing device transceiver 122 Memory Card Control Unit 123 memory card 124 Protected storage area 125 general storage area 126 encryption / decryption unit 127 Key generator 128 key storage area 13 Service providing device 131 Providing device transmitting / receiving unit 132 Signature Confirmation Section

   ─────────────────────────────────────────────────── ─── Continued front page    (72) Inventor Makoto Tatebayashi             1006 Kadoma, Kadoma-shi, Osaka Matsushita Electric             Sangyo Co., Ltd. F term (reference) 5J104 AA07 AA09 KA01 KA04 KA05                       KA06 KA16 LA03 LA06 MA01                       NA02 NA05 NA27 PA07

Claims (18)

[Claims] 1. A service providing system in which a service is provided from a service providing device to a service using device via a network based on personal information of a user authenticated by the personal information authenticating device. The apparatus is to add a digital signature to the personal information authenticating means for confirming the correctness of the personal information of the user received from the service utilizing apparatus, and the personal information of which the correctness is confirmed by the personal information authenticating means. And a signed information generating means for sending the signed personal information generated in step 1 to the service using device, wherein the service using device sends the user personal information to the personal information authenticating device to obtain the signed personal information. A signed information acquisition unit, and an information storage manager that stores and manages the signed personal information acquired by the signed information acquisition unit. A service requesting unit for reading the signed personal information from the information storage managing unit and sending it to the service providing device together with a service providing request; and the service providing device for the service providing request sent by the service requesting unit. A service obtaining unit that receives a service from the service providing apparatus, the service providing apparatus receiving the service providing request and the signed personal information from the service using apparatus; and the signed personal information received by the receiving section. Has a validating unit that determines whether or not is valid based on the added digital signature, and a service providing unit that provides a service to the service using apparatus when the validating unit determines that it is valid. Characteristic service providing device. 2. The information storage management means stores the signed personal information in a state protected from external access, and stores the signed personal information only when preset key information is input. 2. The service providing system according to claim 1, wherein reading is permitted. 3. The service providing system according to claim 2, wherein the key information is a password or biometric information. 4. The information storage management means includes an encryption key for encrypting the signed personal information, and a key generation means for generating a decryption key for decrypting the encrypted signed personal information. A key storing means for storing the decryption key, an encrypting means for encrypting the signed personal information with the encryption key, and information for storing the signed personal information encrypted by the encrypting means 2. A storage unit, and a decryption unit that decrypts the encrypted signed personal information from the information storage unit using the decryption key read from the key storage unit. The service providing system according to any one of 3 above. 5. The IC memory card, wherein the information storage management means has a protected storage area protected from external access, a general storage area accessible from the outside, and an arithmetic unit for executing a program. The encryption means and the decryption means are each realized by the program stored in the protected storage area being executed by the arithmetic unit, and the key storage means is the protected storage area. The service providing system according to claim 4, wherein the decryption key is stored in the information storage unit, and the information storage unit stores the encrypted signed personal information in the general storage area. 6. The reception means in the service providing apparatus transmits a personal information request to the service utilizing apparatus before receiving the signed personal information from the service utilizing apparatus, The service request means receives the personal information request prior to starting the transmission of the signed personal information, and transmits the signed personal information to the service providing apparatus only when the received personal information request satisfies a predetermined condition. It is characterized by the above-mentioned.
The service providing system according to any one of 1. 7. The personal information request is generated in a predetermined format, a digital electronic signature for a form is added after being authenticated by the personal information authentication device, and the service requesting unit outputs the electronic digital signature for the form. Verifying using the form signature public key distributed from the personal information authentication device in advance, and determining that the personal information request satisfies the predetermined condition when the electronic signature for the form is valid. 7. The service providing system according to claim 6. 8. The user personal information comprises a plurality of item data, the signature generation means in the personal information authentication device adds an electronic signature to each item data, and the verification in the service providing device. 8. The service providing system according to claim 1, wherein the means verifies the signature for each of the item data. 9. The user personal information comprises a plurality of item data, and the signature generation means in the personal information authentication device has a user I unique to each item data.
After adding D, a digital signature is added to the user personal information, and the verification means in the service providing apparatus adds the user to each item data of the signed personal information accepted by the acceptance means. 9. The service providing system according to claim 1, wherein it is verified whether the IDs are the same, and if they are not the same, it is determined that the signed personal information is not valid. 10. The signature generation means in the personal information authentication device, for each item data to which the user ID is added, an electronic signature generated from the content of each item data and the user ID number. 10. The service providing system according to claim 9, wherein the verification unit in the service providing apparatus determines validity of each item data based on an electronic signature. 11. The service using apparatus includes an identity authentication key generating unit for generating a pair of a public key and a private key for identity authentication, and the identity authentication private key generated by the identity authentication key generating unit. And private key holding means for holding the access from the outside in a restricted form, wherein the signed information acquisition means has the private key for identity authentication generated by the key generation means for identity authentication Including in the user personal information to be transmitted to the information authentication device, the service request means, in the signed personal information to be transmitted to the service providing device, including the identity authentication secret key, the verification means in the service providing device, With reference to the private key for identity authentication of the signed personal information transmitted from the service requesting means, identity authentication by public key cryptosystem is performed, and the authenticity of the identity is verified. Service providing system according to any one of claims 1 to 10 to determine the signed personal information to be valid, and wherein if it is. 12. The secret key holding means is a storage medium having a protected storage area that is restricted from being accessed from the outside, and stores the private key for identity authentication in the protected storage area. Item 11. The service providing system according to Item 11. 13. The personal information authentication device in a service providing system, wherein a service is provided from a service providing device to a service using device through a network based on personal information of a user authenticated by the personal information authenticating device. A personal information authenticating means for confirming the authenticity of the personal information of the user received from the service using device, and an electronic signature is added to the personal information whose authenticity is confirmed by the personal information authenticating means. A personal information authenticating device, comprising: a signed information generating unit for transmitting the generated personal information with a signature to the service using device. 14. A service using apparatus in a service providing system, wherein a service is provided from the service providing apparatus to the service using apparatus based on the personal information of the user authenticated by the personal information authenticating apparatus, Signed information acquisition means for sending user personal information to the personal information authentication device to obtain signed personal information, and information storage management means for storing and managing the signed personal information acquired by the signed information acquisition means A service requesting means for reading the signed personal information from the information storage managing means and sending it to the service providing apparatus together with a service providing request; and a service providing apparatus for the service providing request sent by the service requesting apparatus. And a service acquisition means for receiving the service provision. -Bis utilization device. 15. A service providing system in which a service is provided from a service providing device to a service using device via a network based on personal information of a user authenticated by the personal information authenticating device. An information management device for holding the personal information of, the encryption key for encrypting the signed personal information, and a key for generating a decryption key for decrypting the encrypted signed personal information Generating means, key storage means for storing the decryption key, encryption means for encrypting the signed personal information using the encryption key, and signed personal information encrypted by the encryption means. An information storage unit for storing the encrypted personal information with a signature read from the information storage unit, and the decryption key read from the key storage unit. And a decryption unit that decrypts the information, wherein the information storage management unit includes a protected storage area protected from external access, a general storage area accessible from the outside, and an arithmetic unit that executes a program. The encryption means and the decryption means are each realized by the program stored in the protected storage area being executed by the arithmetic unit, and the key storage An information management apparatus, wherein the means stores the decryption key in the protected storage area, and the information storage means stores the encrypted signed personal information in the general storage area. 16. A service providing device in a service providing system, wherein a service is provided from a service providing device to a service using device based on personal information of a user authenticated by the personal information authenticating device, Receiving means for accepting a service providing request and signed personal information from the service using device, and verification means for determining whether or not the signed personal information accepted by the accepting means is valid based on the added electronic signature, A service providing device that provides a service to the service using device when the verification device determines that the service providing device is valid. 17. A service providing method in a service providing system, wherein a service is provided from a service providing device to a service using device based on personal information of a user authenticated by a personal information authenticating device, In the personal information authentication device, a personal information authentication step of confirming the legitimacy of the user's personal information received from the service utilization device; and in the personal information authentication device, the legitimacy is confirmed in the personal information authentication step. A signed information generation step of sending the signed personal information generated by adding an electronic signature to the personal information to the service using apparatus, and sending the user personal information to the personal information authenticating apparatus in the service using apparatus Obtaining the signed personal information, obtaining the signed information, and using the service In the storage device, an information storage management step of storing and managing the signed personal information acquired in the signed information acquisition step; and, in the service using apparatus, reading the signed personal information and providing the service together with a service providing request. A service request step of sending to the device, a service acquisition step of receiving a service provided from the service providing device in response to the service providing request in the service using device, A reception step of receiving a service provision request and a signed personal information; a verification step of determining whether or not the received previous personal information with a signature is valid in the service providing device, based on the added electronic signature; In the providing device Service providing method, wherein when a previous period signed personal information is determined to be valid, to have a service providing step of providing a service to the service device. 18. A service providing method in a service providing system, wherein a service is provided from a service providing device to a service using device via a network based on personal information of a user authenticated by a personal information authenticating device, and the computer executes the service providing method. Is a program to
In the personal information authenticating apparatus, the service providing method in the previous term comprises: a personal information authenticating step of confirming the legitimacy of the personal information of the user received from the service utilizing apparatus; and a personal information authenticating step of the personal information authenticating apparatus. A signed information generating step of sending signed personal information generated by adding an electronic signature to the personal information of which the validity has been confirmed to the service using apparatus; and the personal information authenticating apparatus in the service using apparatus. A signed information acquisition step of sending user personal information to obtain signed personal information; and an information storage management step of storing and managing the signed personal information acquired in the signed information acquisition step in the service using apparatus. And the service using device reads the signed personal information and A service request step of sending to the service providing device together with a service request; a service obtaining device, in the service using device, a service acquisition step of receiving a service provided from the service providing device in response to the service providing request; and the service providing device, An acceptance step of accepting a previous term service provision request and signed personal information from the service utilizing apparatus, and determining whether or not the accepted previous term signed personal information is valid in the service providing apparatus based on the added electronic signature A program comprising: a verification step; and a service providing step of providing a service to the service using apparatus when the service providing apparatus determines that the personal information with a previous term is valid.