JP2004147019A - Server device and communication controller - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To use a system of cipher communication using a public key cipher system in a facsimile terminal by a person who cannot operate a PC terminal. <P>SOLUTION: A pair of keys used for cipher communication by a public key cipher system, which is issued by a server device 300, and a certificate of a public key constituting a pair of the keys are converted into bar codes, information transmitted from FAX 100 is ciphered based on bar code information in proof paper where the bar codes are arranged and it is transmitted to a radio operator license electronic application server 600 being a transmission destination in a communication controller 400. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a server device and a communication control device that enable a facsimile terminal to perform encrypted communication on a network using a public key cryptosystem.
[0002]
[Prior art]
In recent years, when transmitting and receiving information on a network, it has become important to secure the confidentiality of the information. As a technique for securing confidentiality, there is cipher communication for encrypting and transmitting information. Cryptographic communication is used to secretly transmit information only to a specific partner. When encrypting information by a specific algorithm in this cryptographic communication, a parameter called a key is set in the algorithm, and this key is kept secret between the sender and the receiver, so There is a technology to ensure the nature.
[0003]
For example, when encrypting the information "This is a pen" with an algorithm of "shift each character of the alphabet backward by a specific number", if the "specific number" in the algorithm is "3 characters", The information is encrypted to “Wklp lv d shq”. Here, the parameter "3 characters" is a key, and confidentiality is ensured by keeping this secret between the sender and the receiver. The receiver decrypts the encrypted information using the same key “3 characters” to obtain the information “This is pen.”
[0004]
The cipher communication uses a common key for encryption and decryption, and is therefore called a common key cryptosystem.
[0005]
In this common key cryptosystem, how to securely transmit the common key is a problem.
[0006]
As a method for solving this problem, there is a public key cryptosystem.
[0007]
The public key cryptosystem is a system for encrypting and decrypting information using two keys. One of the two keys is called a public key, and the other is called a secret key. A combination of two keys is called a key pair. Then, the information encrypted by one key is decrypted by the other key.
[0008]
For example, Mr. A obtains a public key and a secret key. Mr. A keeps the secret key secret, but makes the public key public on the network so that anyone can obtain it. Assume that Mr. B has obtained the public key. When Mr. B communicates with Mr. A in an encrypted manner, Mr. B encrypts information using a public key, while Mr. A decrypts information using a secret key owned by himself. At this time, by assuming that the encrypted information can be decrypted only with the private key and cannot be decrypted with the public key, only the person A having the private key can decrypt the information, and the confidentiality of the information is secured. You.
[0009]
In this public key cryptosystem, there is a problem in guaranteeing the owner of the key.
[0010]
That is, Mr. C obtains his / her private key and public key, and Mr. C impersonates Mr. A, and publishes his / her own public key as Mr. A's public key. In this case, Mr. B may think that the other party is Mr. A, encrypt information using the public key of Mr. C, and transmit the information to Mr. C. As a result, Mr. B's confidential information leaks to Mr. C who is not involved.
[0011]
To solve this problem, there is a method in which a third party guarantees the key owner as a certificate authority. In this method, a certificate authority verifies the identity of the key owner and issues a certificate certifying the key and its owner. And when transmitting information by encryption communication, the said certificate is transmitted to a receiver. This allows the recipient to verify that the sender is the correct owner of the key based on the certificate. Note that some certification authorities are operated by government agencies.
[0012]
As described above, confidentiality in cryptographic communication using public key cryptography is ensured by a trusted third party as a certificate authority guaranteeing the owner of the key used in public key cryptography. (For example, see Non-Patent Document 1).
[0013]
[Non-patent document 1]
Information Processing Promotion Agency of Japan, PKI-related technical commentary, [online], July 19, 2002, [August 7, 2002 search], Internet <http: // www. ipa. go. jp / security / pki / index. html>
[0014]
[Problems to be solved by the invention]
However, according to such a conventional technique, the following problems have occurred.
[0015]
That is, in the cipher communication system using the public key cryptosystem, since the sender and the receiver operate by operating the PC terminal, there is a problem that a person who cannot operate the PC terminal cannot use the system. Was.
[0016]
SUMMARY OF THE INVENTION The present invention has been made in view of the above-described problems, and has been made in view of the above circumstances. A server that enables a person who cannot operate a PC terminal to use a system for encrypted communication using a public key cryptosystem by a facsimile terminal. It is an object to provide a device and a communication control device.
[0017]
[Means for Solving the Problems]
According to the present invention, a pair key used for encrypted communication by a public key cryptosystem issued by a server device and a certificate of a public key constituting the pair key are each converted into a barcode, and the certificate is stored in a certification sheet on which the barcode is arranged. The information transmitted from the facsimile terminal is encrypted and transmitted to the destination PC terminal based on the barcode information described above.
[0018]
According to this, the encrypted communication by the public key cryptosystem can be performed based on the barcode information in the certification paper. Therefore, even a person who cannot operate the PC terminal can use the facsimile terminal to perform the public key encryption. It is possible to perform encrypted communication using the method.
[0019]
BEST MODE FOR CARRYING OUT THE INVENTION
A server device according to a first aspect of the present invention generates a pair key used for cryptographic communication by a public key cryptosystem and a certificate of a public key constituting the pair key based on predetermined information specifying an applicant. Means, a certificate issuing means for converting the pair key and the certificate into bar codes and issuing a certificate with the bar code arranged therein, and communication for facsimile transmitting the certificate in response to a request from the applicant Means is provided.
[0020]
According to this configuration, when the server device as the certificate authority receives an application for the pair key used for the encryption communication by the public key cryptosystem and the certificate of the public key constituting the pair key from the facsimile terminal, the server device transmits the pair key. And issue a certification paper in which the certificate of the public key is converted into a bar code and transmit it to the applicant. As a result, when performing facsimile communication using public key cryptography with a facsimile terminal, using a certification paper eliminates the need to enter a pair key and attach a public key certificate. Even so, using a facsimile terminal, it is possible to perform cipher communication by a public key cryptosystem in which the guarantee of the key owner is secured by a third party organization.
[0021]
In addition, by using a certification key obtained by converting a pair key and a certificate of a public key constituting the pair key into a barcode, it is not possible to determine what is written just by looking at the certification sheet. Therefore, even if the certification paper is stolen, the information of the pair key and the certificate of the public key will not be stolen. Thus, even when the facsimile terminal performs the encrypted communication using the certification paper, the confidentiality can be reliably ensured by a simple method.
[0022]
A communication control device according to a second aspect of the present invention includes a first communication unit for receiving image data from a facsimile terminal via a general line, and a second communication for transmitting encrypted information to a PC terminal via the Internet. Means, registration means for registering an IP address corresponding to a destination designated by the facsimile terminal, a pair key for using the image data for encrypted communication by a public key cryptosystem, and certification of a public key constituting the pair key The certificate is divided into a certification paper on which bar-coded information is arranged and information to be communicated, and the bar code in the certification paper is analyzed to extract the pair key and the certificate. The communication target information is encrypted using the originally generated common key, and the encrypted information is forwarded to the IP address corresponding to the destination specified by the facsimile terminal. It adopts a configuration comprising a control means for transmitting to the second communication means.
[0023]
According to this configuration, the image data transmitted from the facsimile terminal is a certificate paper in which a pair key used for encryption communication by the public key cryptosystem and information obtained by converting a certificate of the public key constituting the pair key into a bar code are arranged. And the information to be communicated is transmitted to the destination after the information to be communicated is encrypted using a common key generated based on the barcode information in the certification paper. For this reason, even a person who cannot operate the PC terminal can perform encrypted communication using the public key cryptosystem using the facsimile terminal.
[0024]
Further, when performing encryption, a certification paper is used in which a pair key used for cryptographic communication by the public key cryptosystem and information obtained by converting a certificate of a public key constituting the pair key into a bar code are arranged. For this reason, the facsimile terminal does not need to perform an operation of inputting the pair key used for the encryption communication by the public key cryptosystem or attaching the certificate of the public key, and simply transmits the certification paper with the information to be communicated placed thereon. It only needs to. As a result, even a person who cannot operate the PC terminal can perform encrypted communication extremely easily using the facsimile terminal.
[0025]
Further, since the certificate of the pair key and the certificate of the public key is converted into a barcode, it is not possible to determine what is written just by looking at the certificate. Therefore, even if the certification paper is stolen, the information of the pair key and the public key certificate will not be stolen, and even if the facsimile terminal uses the certification paper to perform encrypted communication, a simple method is used. Confidentiality can be guaranteed.
[0026]
A communication control device according to a third aspect of the present invention includes a first communication unit that transmits image data to a facsimile terminal via a general line, and a second communication unit that receives encrypted information from a PC terminal via the Internet. A communication unit; a registration unit for registering a telephone number corresponding to a destination designated by the PC terminal and a public key used for encryption communication by a public key encryption method held by the destination; Storage means for storing the encrypted information, a pair key used for encrypted communication by the public key encryption system held by the apparatus when the encrypted information is received, and a certificate of a public key constituting the pair key Is decrypted using the common key generated based on the public key, and is encrypted using the public key held by the destination designated by the PC terminal and is stored in the storage means, while the destination corresponding to the destination is It adopts a configuration comprising a control means for notifying that there is a received document to the facsimile terminal phone number to the first communication means.
[0027]
According to this configuration, the encrypted information from the transmission source PC terminal is generated based on the pair key and the certificate of the public key used for the encrypted communication by the public key encryption method held by the communication control device. Decryption is performed using the common key, encrypted using the public key held by the destination specified by the PC terminal, and stored, while notifying that the specified destination has a received document. As a result, the information can be communicated with the transmission source PC terminal in an encrypted state, and the reception operation can be prompted by notifying that the reception destination document is present.
[0028]
In addition, since the information is encrypted with the public key held by the designated transmission destination and stored in the storage unit, this information can be presented only to the person holding the secret key that is the decryption key. As a result, unauthorized access by a third party who does not hold the secret key can be prevented, and the confidentiality of the information can be ensured.
[0029]
According to a fourth aspect of the present invention, in the communication control apparatus according to the third aspect, the control means includes: a pair key used for encrypted communication by a public key cryptosystem from the facsimile terminal that has notified that there is a received document; Upon receiving a certification sheet in which information obtained by converting a certificate of a public key constituting a pair key into a bar code is arranged, bar code information in the certification sheet is analyzed, the pair key and the certificate are taken out, and the pair key is extracted. A configuration is adopted in which the encrypted information is decrypted using the secret key to be configured, and the decrypted information is transmitted to the facsimile terminal to the first communication unit.
[0030]
According to this configuration, when the certification paper is received from the facsimile terminal that has notified that the received document is present, the information encrypted using the secret key obtained by analyzing the barcode information in the certification paper is transmitted. The decrypted information is transmitted to the facsimile terminal. Thus, the encrypted information can be decrypted only when there is access from the person who holds the formal certification paper. Therefore, it is possible to prevent unauthorized acquisition of information by a third party who does not hold the secret key, and it is possible to ensure the confidentiality of the information.
[0031]
Also, when receiving the notification that there is a received document, when requesting the received document, the user converts the pair key used for the encryption communication by the public key cryptosystem and the certificate of the public key constituting the pair key into a bar code. All that is required is to transmit the certification paper on which the information is placed. Therefore, the facsimile terminal does not need to perform the operation of inputting the pair key or attaching the certificate of the public key, and can perform the encryption communication by the public key cryptosystem simply by transmitting the certification paper. As a result, even a person who cannot operate the PC terminal can perform encrypted communication extremely easily using the facsimile terminal.
[0032]
According to a fifth aspect of the present invention, in the communication control apparatus according to the fourth aspect, the control unit is configured to perform a process when the encrypted information cannot be decrypted using a secret key constituting the pair key. The first communication means transmits an error notification to the facsimile terminal.
[0033]
According to this configuration, if the encrypted information cannot be decrypted, it is determined that the pair keys do not match, and an error notification is performed. Accordingly, if the pair keys do not match, no information is transmitted, so that the confidentiality of the encrypted communication can be reliably maintained even when the facsimile terminal is used.
[0034]
In addition, by performing an error notification when the pair keys do not match, the receiver can determine why the information cannot be obtained. As a result, it is possible to prevent a situation in which the certification paper is transmitted but the corresponding information cannot be received forever, and the next response can be easily taken.
[0035]
Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings.
[0036]
FIG. 1 is a diagram illustrating a configuration example of a network to which a server device and a communication control device according to an embodiment of the present invention are connected.
[0037]
As shown in FIG. 1, a facsimile apparatus (hereinafter, referred to as “FAX”) 100 is capable of performing facsimile communication with a server apparatus 300 and a communication control apparatus 400 via a public line network (hereinafter, referred to as “PSTN”) 200. It has become. The communication control device 400 is in a state where it can communicate with the electronic application server 600 that receives an electronic application via the Internet 500.
[0038]
Note that, between the communication control device 400 and the electronic application server 600, encrypted communication using a public key cryptosystem is performed in order to ensure the confidentiality of information. In the present embodiment, a description is given using a wireless worker license electronic application server (hereinafter, referred to as “wireless license application server”) 600 of the Ministry of Internal Affairs and Communications as an example of the electronic application server 600.
[0039]
The present invention realizes a cryptographic communication system using a public key cryptosystem using the FAX 100. When performing encrypted communication using public key cryptography by using the FAX 100, a key pair composed of a public key and a private key, and certifying that the user is the owner of the public key in this key pair A public key certificate is required in the same manner as in the case where a personal computer (hereinafter, referred to as a “PC”) is used to perform encrypted communication using a public key cryptosystem.
[0040]
The server device 300 is operated under the management of a certificate authority that performs a public key certificate issuing procedure. Under the instruction of the person in charge of the certification authority, the above-mentioned key pair and public key certificate are generated in response to an application from the user of the FAX 100, and the generated key pair and public key certificate are arranged as bird images. Issue a form (hereinafter referred to as “certification paper”).
[0041]
The communication control device 400 performs encrypted communication using a public key encryption method with the wireless license application server 600 based on the barcode image placed on the certification sheet issued by the server device 300. That is, the information from the user of the FAX 100 is encrypted and transmitted to the wireless license application server 600, while the information from the wireless license application server 600 is encrypted and received.
[0042]
Here, a rough flow of information in a case where the FAX 100 applies for the issuance of a wireless worker license (hereinafter referred to as a “wireless license”) to the wireless license application server 600 and the applicant receives the wireless license with the FAX 100 Will be described.
[0043]
The applicant first requests the server 300 to issue a certification sheet, and receives the certification sheet from the server apparatus 300. Then, facsimile transmission to the communication control device 400 is performed with the first certificate sheet and the second wireless license application form.
[0044]
The communication control device 400 performs encrypted communication with the wireless license application server 600 based on the barcode image placed on the certification sheet, and receives a wireless license file from the wireless license application server 600. Then, a reception notification is transmitted to FAX 100.
[0045]
The applicant who has received the reception notification transmits the certification paper from the FAX 100 to the communication control device 400 again. The communication control device 400 authenticates the applicant based on the barcode image of the certification paper, and transmits the image of the wireless license to the FAX 100 by facsimile.
[0046]
Hereinafter, the configuration of the server device 300 will be described, and a process in which the server device 300 issues a certification paper will be described. As shown in FIG. 1, the server device 300 includes a communication unit 301, a generation unit 302, and a certification paper issuing unit 303.
[0047]
The communication unit 301 performs facsimile communication with the FAX 100 via the PSTN 200. The communication unit 301 prepares FAX numbers for requesting a certification sheet, transmitting a personal identification document, and removing a certification sheet. When there is an incoming call at each FAX number, the communication unit 301 executes a process according to the purpose of the FAX number. .
[0048]
The generation unit 302 generates a pair key and a public key certificate used for encryption communication by the public key encryption method based on information for specifying a user of the facsimile 100, which is described in the certification paper request sheet received by the communication unit 301. I do.
[0049]
The certification paper issuance unit 303 converts the pair key and the public key certificate generated by the generation unit 302 into a two-dimensional barcode image (hereinafter, referred to as a “barcode image”) at a predetermined specified resolution. A certification paper image in which an image and a timing mark are arranged is generated.
[0050]
Note that a PC 304 operated by a person in charge of the certificate authority is connected to the server device 300. The person in charge of the certification authority uses the PC 304 to confirm whether the person described on the certification request sheet and the person described on the identification document are the same person.
[0051]
FIGS. 2 to 4 are flowcharts in the case where the server 300 issues a certification paper. The process of issuing a certification paper in the server device 300 is divided into a process of receiving a certification paper issuance request shown in FIG. 2, a process of issuing a certification paper shown in FIG. 3, and a process of taking out a certification paper shown in FIG. . Hereinafter, each process will be individually described.
[0052]
When requesting the server 300 to issue a certification paper, the applicant first fills in a certification paper request form and sends it to a FAX number for transmitting the certification paper (ST201). It is assumed that the certification paper request form has been distributed to the user of the FAX 100 in advance, and the FAX number for transmitting the certification paper is described in the certification paper request form.
[0053]
FIG. 5 shows the configuration of the certification paper request form. As shown in the figure, the certification paper request form is provided with an entry field for information for identifying an applicant who applies for issuance of the certification paper. Further, the FAX number (11-222-9990) for transmitting the certification paper is described.
[0054]
In the server device 300, when the communication unit 301 receives the certification paper request form from the facsimile number for facsimile certification transmission, it generates a reception number. Then, the communication section 301 transmits the certification paper request acceptance notice describing this acceptance number to the FAX 100 (ST202).
[0055]
FIG. 6 shows the structure of the certification paper acceptance notice. As shown in the drawing, the receipt number (123456789) and the FAX number (11-222-9991) for transmitting the identity verification document generated by the server device 300 are described in the certification paper reception notification. Is described.
[0056]
Upon receiving the certification paper reception notice, the applicant connects to the FAX number for transmitting the identity verification document, and then inputs the reception number described in the certification paper reception notice from the input button of the FAX 100 according to the voice guidance ( ST203).
[0057]
Server device 300 checks whether there is a certification paper request that matches the input receipt number (ST204). If there is a certification paper request with the matching reception number, a voice guidance notifying that the identification document is to be transmitted is played.
[0058]
The applicant transmits an identification document in accordance with the voice guidance (ST205). As the personal identification document, a driver's license as shown in FIG. 7, which can confirm the contents entered in the certification paper request form, is preferable. The applicant reads an identity verification document such as a driver's license using a handy scanner or the like, and transmits it to the server device 300.
[0059]
When server unit 300 receives the personal identification document from communication unit 301 from the facsimile number for transmitting the personal identification document, it stores the data of this personal identification document together with the data of the certification paper request form received earlier (ST206).
[0060]
Then, server apparatus 300 notifies PC 304 of the person in charge of the certification authority by e-mail that the certification paper request has been made (ST207). Thus, the process of receiving the certification paper issuance request ends.
[0061]
In ST204, if there is no request to issue a certification sheet that matches the input receipt number, server apparatus 300 transmits a document (error document) indicating that to FAX 100 (ST208). In addition, it may be notified that there is no request for issuing a certification paper whose reception number matches in the voice guidance.
[0062]
Next, a process of issuing a certification paper in the server device 300 will be described.
[0063]
Upon receiving an e-mail indicating that a request for issuing a certification paper has been received, the person in charge of the certification authority accesses the server device 300, and obtains a certification paper request form and an identification document stored in the server device 300 using a WWW browser or the like. Display the applicant confirmation screen where is displayed.
[0064]
FIG. 8 shows an example of an applicant confirmation screen displayed on the PC 304 of the person in charge of the certificate authority. As shown in the figure, on the applicant confirmation screen, the data of the certification paper request form and the identification document are displayed.
[0065]
The person in charge of the certification authority visually confirms the certification paper request form and the personal identification document on the applicant confirmation screen, and confirms the consistency between the two (ST301). After confirming the consistency between the two, the person in charge of the certificate authority displays an applicant re-input screen.
[0066]
FIG. 9 shows an example of the applicant re-input screen displayed on the PC 304 of the person in charge of the certificate authority. As shown in the figure, the applicant re-entry screen is provided with a column for re-entering information for identifying the applicant such as an address and a name, and a confirmation button indicating that the re-entry has been completed.
[0067]
After re-entering the information identifying the applicant, the person in charge of the certification authority selects the confirmation button. When the confirmation button is selected, server 300 is instructed to generate a certification sheet for the applicant (ST302).
[0068]
Upon receiving this instruction, in server device 300, generating section 302 generates the applicant's key pair (private key and public key) and public key certificate (ST303). These key pairs and public key certificates are generated based on the information identifying the applicant entered in the certification paper request form.
[0069]
When the key pair and the public key certificate are generated, the certification paper issuance unit 303 converts the key pair and the public key certificate into a barcode image at a predetermined specified resolution (ST304).
[0070]
Then, the certification paper issuing unit 303 generates a certification paper image in which the barcode image is arranged in the order of the secret key, the public key, and the effect key certificate (ST305). A timing mark is arranged on the certification paper image together with the barcode image. The certification paper issuing unit 303 assigns a number for managing the certification paper (hereinafter, referred to as “certificate paper number”) when generating the certification paper image.
[0071]
FIG. 10 shows an example of a certification paper image generated by the certification paper issuing unit 303. As shown in the figure, a barcode image is arranged on the certification paper image in correspondence with a secret key, a public key, and a public key certificate. A timing mark 1001 for specifying the position of each barcode image is arranged around the barcode image.
[0072]
When the certification paper image is generated, in the server device 300, the communication unit 301 transmits a certification paper issuance notice to the FAX 100 (ST306). Thus, the process of issuing the certification paper in server device 300 ends.
[0073]
FIG. 11 shows the structure of the certification paper issuance notice. As shown in the figure, the certification paper issuance notification includes a statement that the certification paper has been issued and the certification paper number (8888). Also, a FAX number (11-222-9992) for taking out the certification paper is described.
[0074]
Next, a process in which the applicant takes out the certification paper from the server device 300 will be described.
[0075]
Upon receipt of the certificate issuance notice, the applicant connects to the FAX number for taking out the certificate, and inputs the certificate number described in the certificate issuance notice from the input button of the FAX 100 according to the voice guidance ( ST401).
[0076]
Server device 300 checks whether there is a certification paper image that matches the inputted certification paper number (ST402). If there is a certification paper image having the same certification paper number, server apparatus 300 transmits a certification paper image corresponding to the certification paper number to FAX 100 through communication unit 301 (ST403). Thus, the process of taking out the certification paper from the server device 300 ends.
[0077]
If there is no certification paper image that matches the inputted certification paper number in ST402, server device 300 transmits a document (error document) indicating that to FAX 100 (ST404). In addition, it may be notified that there is no certification paper image whose certification paper number entered in the voice guidance matches.
[0078]
Through such a series of processes, the user of the FAX 100 can obtain a certificate sheet on which the key pair assigned to the user and the barcode image of the public key certificate are arranged.
[0079]
As described above, when the server device 300 receives, from the FAX 100, an application for a pair key used for encrypted communication by the public key cryptosystem and a certificate of a public key constituting the pair key, the server device 300 certifies the pair key and the public key. Issue a bar-coded certification paper and send it to the applicant. As a result, when performing cryptographic communication using the public key cryptography by the FAX 100, the use of a certification paper eliminates the need to enter a pair key and attach a public key certificate, and thus a person who cannot operate the PC terminal. Even by using the FAX 100, it is possible to perform encrypted communication by a public key cryptosystem in which the guarantee of the key owner is secured by a third party organization.
[0080]
In addition, by using a certification key obtained by converting a pair key and a certificate of a public key constituting the pair key into a barcode, it is not possible to determine what is written just by looking at the certification sheet. Therefore, even if the certification paper is stolen, the information of the pair key and the certificate of the public key will not be stolen. Thereby, even when the encrypted communication is performed by the FAX 100 using the certification paper, the confidentiality can be reliably ensured by a simple method.
[0081]
Next, the configuration of the communication control device 400 will be described, and a process when information is transmitted from the FAX 100 via the communication control device 400 and a process when the FAX 100 receives information via the communication control device 400 will be described. I do.
[0082]
As shown in FIG. 1, the communication control device 400 includes a first communication unit 401, a second communication unit 402, a control unit 403, a registration unit 404, and a storage unit 405.
[0083]
The first communication unit 401 performs facsimile communication with the FAX 100 via the PSTN 200. The first communication unit 401 prepares FAX numbers for FAX transmission and for taking out an order document, and when there is an incoming call at each FAX number, executes a process according to the purpose of the FAX number.
[0084]
The second communication unit 402 communicates the encrypted information with the wireless license application server 600 via the Internet 500. The second communication unit 402 communicates with the wireless license application server 600 according to an FTP (File Transfer Protocol).
[0085]
The control unit 403 controls the entire communication control device 400. Specifically, it controls the first communication unit 401 and the second communication unit 402 to communicate with the FAX 100 and the wireless license application server 600, respectively. When communication is performed, the information registered in the registration unit 404 is referred to, and the obtained information is stored in the storage unit 405.
[0086]
Registered in the registration unit 404 are an electronic application server management table 700 for managing information on each electronic application server on the Internet 500 and a FAX management table 800 for managing information on FAX of the applicant.
[0087]
FIG. 12 shows an example of information managed by the electronic application server management table 700 registered in the registration unit 404, and FIG. 13 shows an example of information managed by the FAX management table 800.
[0088]
As shown in FIG. 12, in the electronic application server management table 700, a management number 701 is assigned to each electronic application server. The FTP IP address / SSL port 702, FTP user / password 703, and error notification mail address 704 of each electronic application server are registered in association with the management number 701. It is assumed that the management number 701 of the wireless license application server 600 is “1001”.
[0089]
13, the FAX number 801 of the applicant is registered in the FAX management table 800, and the FTP user / password 802 and the public key certificate 803 of the applicant are associated with the FAX number 801. It is registered. It is assumed that the FAX number of the FAX 100 is “1234-56-7890”.
[0090]
The storage unit 405 stores information received from the wireless license application server 600. The information stored in the storage unit 405 is transmitted to the FAX 100 via the first communication unit 401 in response to a request from the applicant.
[0091]
Next, a process for transmitting information from the FAX 100 via the communication control device 400 will be described with reference to the sequence diagrams shown in FIG. 14 and the flowcharts shown in FIGS. FIG. 14 is a sequence diagram when information is transmitted from the FAX 100, and FIGS. 15 to 21 are flowcharts thereof. Here, it is assumed that the applicant wishes to issue a wireless license from the wireless license application server 600, and a process for transmitting the wireless worker license application (hereinafter referred to as “wireless license application”) will be described. I do.
[0092]
When transmitting a wireless license application form from the FAX 100 to the wireless license application server 600, as shown in FIG. 14, after the facsimile certificate and the wireless license application form are transmitted from the FAX 100 to the communication control apparatus 400 by facsimile, the communication control apparatus The encrypted wireless license application form is transmitted from 400 to wireless license application server 600.
[0093]
When communicating with the wireless license application server 600, the communication control device 400 first performs communication according to the SSL protocol, and then performs encrypted communication using a common key generated according to the SSL protocol. In FIGS. 14 and 15 to 21, communication processing according to the SSL protocol is indicated by a dotted line, and encrypted communication processing using a common key is indicated by a double line.
[0094]
When transmitting a wireless license application, the applicant first connects from the FAX 100 to a FAX number for FAX transmission of the communication control device 400 (ST1401, ST1501).
[0095]
In communication control apparatus 400, control section 403 searches for FTP user / password 802 of the applicant from FAX management table 800 according to the FAX number of the transmission source, and saves it in the applicant information file (ST1502). The applicant information file is stored in a certain area of the storage unit 405. Here, “fax001” is stored as the FTP user of the applicant, and “none” is stored as the password.
[0096]
After connecting to the FAX number for FAX transmission, the applicant enters the desired electronic application server management number in accordance with the output voice guidance (ST1402). Here, the management number (1001) of wireless license application server 600 is input (ST1403, ST1503). It is assumed that the management number of each electronic application server has been recognized by the applicant in advance.
[0097]
Further, the applicant inputs, according to the voice guidance, the presence or absence of an electronic signature indicating whether or not to apply an electronic signature when transmitting information from communication control device 400 to wireless license application server 600 (ST1404, ST1504). .
[0098]
Then, the applicant sets the first obtained certification sheet and the second or later wireless license application form in which necessary items have been entered, and transmits them to the communication control device 400 (ST1405, ST1505). It is assumed that the applicant has obtained the wireless license application form from the Ministry of Internal Affairs and Communications in advance.
[0099]
FIG. 22 shows the structure of the wireless license application form. As shown in the figure, in the radio license application form, in addition to the information for specifying the applicant, there are provided columns for entering information such as a pass number for passing the national examination and a place for implementing the training process.
[0100]
On the other hand, in the communication control device 400, the first communication unit 401 receives the designated management number “1001”, and sets a document image (TIFF) of the first certificate sheet and the second or later wireless license application form. (ST1506).
[0101]
The control unit 403 divides this document image into the first document and the second and subsequent sheets (ST1507), stores the first document image in the certification paper image file, and wirelessly transmits the second and subsequent document images. The license application form is saved in the image file (ST1601). Note that the certification paper image file and the wireless license application image file are stored in certain areas of the storage unit 405, respectively.
[0102]
The control unit 403 performs OMR recognition of the timing mark from the certification paper image file, specifies the secret key, the public key, and the image area of the public key certificate on the certification paper image (ST1602). A barcode image of the key certificate is cut out (ST1603). Further, these barcode images are decoded and the secret key and the public key are converted into numerical values, while the public key certificate is converted into text data (ST1604).
[0103]
Then, control section 403 determines whether or not the digital signature has been added (ST1605). That is, it is determined whether or not the digital signature input by the applicant in ST1404 and ST1504 has been added. If an instruction to add an electronic signature has been given, control section 403 calculates a hash value from the wireless license application image file (ST1606).
[0104]
Further, control section 403 encrypts this hash value with the applicant's private key obtained in ST1604 to obtain an electronic signature, and stores this in an electronic signature file (ST1607). Note that the electronic signature file is stored in a certain area of the storage unit 405.
[0105]
When the processing up to this point is completed, the control unit 403 determines the IP address of the FTP of the wireless license application server 600 from the electronic application server management table 700 registered in the registration unit 404 based on the management number “1001” received earlier. / SSL port number 702 (192.168.2.1/989, 990) and FTP user / password 703 (user1001 / none) are obtained (ST1701).
[0106]
Upon acquiring such information, the control unit 403 communicates with the wireless license application server 600 according to the SSL protocol. First, the second communication unit 402 connects to the SSL port (989, 990) of the FTP of the wireless license application server 600 (ST1406, ST1702).
[0107]
When connected to communication control apparatus 400, wireless license application server 600 transmits its own public key certificate held in advance to communication control apparatus 400 (ST1407, ST1703). The wireless license application server 600 also holds its own private key and public key in advance.
[0108]
In the communication control device 400, when the second communication unit 402 receives the public key certificate of the wireless license application server 600, the control unit 403 uses the public key certificate of the certificate authority held in advance to set up the wireless license application server. The validity of the public key certificate of 600 is confirmed (ST1704).
[0109]
Specifically, the hash value is extracted by decrypting the signature value data from the contents of the public key certificate of the wireless license application server 600 shown in FIG. 23 using the public key included in the public key certificate of the certificate authority. On the other hand, the hash value of the certificate data of the wireless license application server 600 before the signature of the public key certificate is calculated. Then, the validity of the public key certificate of the wireless license application server 600 is confirmed by comparing the two hash values.
[0110]
After confirming the validity of the public key certificate of wireless license application server 600, in communication control device 400, second communication section 402 transmits the public key certificate of the applicant to wireless license application server 600 (ST1408, ST1705). ).
[0111]
Upon receiving the applicant's public key certificate, the wireless license application server 600 uses the certificate authority's public key certificate held in advance in the same manner as the communication control device 400, and Is verified (ST1706).
[0112]
After transmitting the applicant's public key certificate, the communication control device 400 generates a master secret, which is the base of the common key, in the control unit, and encrypts the master secret with the public key of the wireless license application server 600. Thereafter, the encrypted master secret is transmitted from second communication section 402 to wireless license application server 600 (ST1409, ST1801).
[0113]
Here, the reason why the master secret is encrypted with the public key of the wireless license application server 600 is that only the wireless license application server 600 that holds the public key certificate whose validity has been confirmed can receive the master secret. That is to ensure.
[0114]
Upon receiving the master secret, wireless license application server 600 decrypts it with its own secret key to obtain a master secret (ST1802).
[0115]
Communication control apparatus 400 causes control section 403 to generate a common key (session key) from the master secret (ST1803). On the other hand, wireless license application server 600 generates a common key (session key) from the master secret obtained in ST1802 (ST1804).
[0116]
After generating the common key, the communication control device 400 generates a hash value from the data received so far from the wireless license application server 600 by the control unit 403 and encrypts the hash value with the private key of the applicant. After that, the second communication unit 402 transmits the encrypted hash value to the wireless license application server 600 (ST1410, ST1805).
[0117]
Upon receiving the encrypted hash value, the wireless license application server 600 decrypts the hash value with the applicant's public key. On the other hand, a hash value is generated from the data transmitted to the communication control apparatus 400 so far, and compared with the decrypted hash value (ST1901).
[0118]
As a result, the validity of the applicant's key pair is confirmed. Here, by confirming the validity of the applicant's key pair and confirming the validity of the applicant's public key certificate performed earlier, it is proved that the applicant holds an appropriate key pair. That is, at this point, the authentication of the applicant is established.
[0119]
Subsequently, communication control apparatus 400 generates a hash value from data received from wireless license application server 600 so far in control section 403 and encrypts the hash value with the common key generated in ST1803. After that, the second communication unit 402 transmits the encrypted hash value to the wireless license application server 600 (ST1411, ST1902).
[0120]
Upon receiving the encrypted hash value, wireless license application server 600 decrypts the hash value with the common key generated in ST1804. On the other hand, a hash value is generated from the data transmitted to communication control apparatus 400 so far and compared with the decrypted hash value (ST1903). As a result, the validity of the common key generated by the communication control device 400 is confirmed.
[0121]
This time, wireless license application server 600 generates a hash value from the data received so far from communication control device 400, and encrypts the hash value with the common key generated in ST1804. Thereafter, this encrypted hash value is transmitted to communication control apparatus 400 (ST1412, ST1904).
[0122]
When the encrypted hash value is received by second communication section 402, communication control apparatus 400 causes control section 403 to decrypt the hash value with the common key generated in ST1803. On the other hand, a hash value is generated from the data transmitted to wireless license application server 600 so far, and compared with the decrypted hash value (ST1905). As a result, the validity of the common key generated by the wireless license application server 600 is confirmed. At this point, it is confirmed that the correct common key has been shared, and the authentication of the wireless license application server 600 is established.
[0123]
When the authentication of the wireless license application server 600 is established, the communication control device 400 determines whether or not all the processes performed so far by the control unit 403 are normal (ST2001). If everything is normal, the process shifts to encrypted communication using the shared common key. All subsequent communications are encrypted using the common key at the transmission source (communication control device 400) and transmitted, and are decrypted at the transmission destination (wireless license application server 600) using the common key.
[0124]
Communication control device 400 first logs in to FTP of wireless license application server 600 using second communication unit 402 (ST1413, ST2002). At this time, the second communication unit 402 logs in using the FTP user / password (user1001 / none) of the wireless license application server 600 in the electronic application server management table 700 registered in the registration unit 404.
[0125]
Subsequently, the second communication unit 402 transmits the wireless license application image file stored in a certain area of the storage unit 405 to the wireless license application server 600 by FTP (ST1414, ST2003).
[0126]
Further, second communication section 402 transmits the applicant information file stored in a fixed area of storage section 405 to wireless license application server 600 by FTP (ST1415, ST2004).
[0127]
Communication control apparatus 400 determines whether control unit 403 has given an instruction to give an electronic signature from the applicant (ST2005). If an instruction to add an electronic signature has been given, the electronic signature file stored in a fixed area of the storage unit 405 is transmitted by FTP to the wireless license application server 600 by the second communication unit 402 (ST1416, ST2006).
[0128]
When the transmission of the electronic signature file is completed, the communication control device 400 logs out the FTP of the wireless license application server 600 through the second communication unit 402 (ST1417, ST2101).
[0129]
Further, second communication section 402 disconnects the connection with SSL port (989, 990) of wireless license application server 600 connected in ST1406 (ST1418, ST2102).
[0130]
After disconnecting the connection with the SSL port of the wireless license application server 600, in the communication control device 400, the control unit 403 discards the applicant's private key, public key, and public key certificate stored in the storage unit 405. (ST2103).
[0131]
Finally, the communication control device 400 disconnects the connection with the FAX 100 of the applicant by the first communication unit 401 (ST1419, ST2104). Thus, the process of transmitting the wireless worker license application form from the FAX 100 to the wireless license application server 600 via the communication control device 400 ends.
[0132]
If it is determined in ST2001 that the processing performed so far has not been completed normally, the communication control device 400 transmits a document indicating this to the FAX 100 through the first communication unit 401. (ST2105), the process proceeds to ST2103.
[0133]
As described above, according to the communication apparatus of the present embodiment, the image data transmitted from FAX 100 converts the pair key used for the encryption communication by the public key cryptosystem and the certificate of the public key constituting the pair key into a bar code. Is divided into the certification paper on which the information is placed and the information to be communicated, and the information to be communicated is encrypted using the common key generated based on the barcode information in the certification paper, and then the transmission destination The license is transmitted to the wireless license application server 600. Therefore, even a person who cannot operate the PC terminal can perform encrypted communication using the public key cryptosystem by using the FAX 100.
[0134]
Further, when performing encryption, a certification paper is used in which a pair key used for cryptographic communication by the public key cryptosystem and information obtained by converting a certificate of a public key constituting the pair key into a bar code are arranged. For this reason, in the FAX 100, there is no need to perform an operation of inputting a pair key used for encrypted communication by the public key cryptosystem or attaching a certificate of the public key. Only needs to be done. As a result, even a person who cannot operate the PC terminal can perform encrypted communication using the FAX 100 extremely easily.
[0135]
Further, since the certificate of the pair key and the certificate of the public key is converted into a barcode, it is not possible to determine what is written just by looking at the certificate. Therefore, even if the certification paper is stolen, the information of the pair key and the public key certificate will not be stolen, and even if the facsimile terminal uses the certification paper to perform encrypted communication, a simple method is used. Confidentiality can be guaranteed.
[0136]
Next, a process when information is received by the facsimile 100 via the communication control device 400 will be described with reference to the sequence diagrams shown in FIG. 24 and the flowcharts shown in FIGS. FIG. 24 is a sequence diagram in the case where information is received by the FAX 100 via the communication control device 400, and FIGS. 25 to 33 are flowcharts thereof. Here, a description will be given of a process in a case where the wireless license applied in advance is received from the wireless license application server 600 by the FAX 100.
[0137]
In the process of receiving a wireless license from the wireless license application server 600 via the communication control device 400, the communication control device 400 transmits a reception notification notifying that the communication control device 400 has received the wireless license from the wireless license application server 600. The process of receiving from the control device 400 (the process of (1) shown in FIG. 24) and the process of receiving the wireless license from the communication control device 400 in response to the reception notice (the process of (2) shown in FIG. 24) And divided into
[0138]
First, a process of receiving from the communication control device 400 a reception notification notifying that the communication control device 400 has received the wireless license from the wireless license application server 600 will be described.
[0139]
When communicating with the communication control device 400, the wireless license application server 600 first performs communication according to the SSL protocol, and then performs encrypted communication using a common key generated according to the SSL protocol. 24 and 25 to 33, the communication processing according to the SSL protocol is indicated by a dotted line, and the encrypted communication processing using the common key is indicated by a double line.
[0140]
When transmitting the wireless license to the FAX 100 via the communication control device 400, the wireless license application server 600 communicates with the communication control device 400 according to the SSL protocol. First, the wireless license application server 600 connects to the FTP SSL port (989, 990) of the communication control device 400 (ST2401, ST2501).
[0141]
When connected to wireless license application server 600, communication control apparatus 400 transmits its own public key certificate to wireless license application server 600 through second communication section 402 (ST2402, ST2502).
[0142]
Upon receiving the public key certificate of the communication control device 400, the wireless license application server 600 confirms the validity of the public key certificate of the communication control device 400 using the public key certificate of the certificate authority held in advance. (ST2503).
[0143]
Specifically, the hash value is extracted by decrypting the signature value data from the contents of the public key certificate of the communication control device 400 with the public key included in the public key certificate of the certificate authority. On the other hand, the hash value of the certificate data of the communication control device 400 before the signature of the public key certificate is calculated. Then, the validity of the public key certificate of the communication control device 400 is confirmed by comparing both hash values.
[0144]
After confirming the validity of the public key certificate of the communication control device 400, the wireless license application server 600 transmits the public key certificate of the wireless license application server 600 to the communication control device 400 (ST2403, ST2504).
[0145]
Upon receiving the public key certificate of the wireless license application server 600, the communication control device 400 uses the public key certificate of the certificate authority held in advance by the control unit 403 in the same manner as the wireless license application server 600. The validity of the public key certificate of the wireless license application server 600 is confirmed (ST2505).
[0146]
After transmitting the public key certificate of the wireless license application server 600, the wireless license application server 600 generates a master secret that is a prime of the common key, and encrypts the master secret with the public key of the communication control device 400. Thereafter, the encrypted master secret is transmitted to communication control apparatus 400 (ST2404, ST2601).
[0147]
Here, the master secret is encrypted with the public key of the communication control device 400 so that only the communication control device 400 holding the public key certificate whose validity has been confirmed first can receive the master secret. To do that.
[0148]
Receiving the master secret, communication control apparatus 400 decrypts it with its own secret key and obtains the master secret (ST2602).
[0149]
Wireless license application server 600 generates a common key (session key) from the master secret (ST2603). On the other hand, communication control apparatus 400 causes control section 403 to generate a common key (session key) from the master secret obtained in ST2602 (ST2604).
[0150]
After generating the common key, the wireless license application server 600 generates a hash value from the data received so far from the communication control device 400, and encrypts the hash value with the secret key of the wireless license application server 600. Thereafter, the encrypted hash value is transmitted to communication control apparatus 400 (ST2405, ST2605).
[0151]
Upon receiving the encrypted hash value, communication control device 400 decrypts the hash value with the public key of wireless license application server 600. On the other hand, a hash value is generated from the data transmitted to the wireless license application server 600 so far and compared with the decrypted hash value (ST2701).
[0152]
As a result, the validity of the key pair of the wireless license application server 600 is confirmed. Here, by confirming the validity of the key pair of the wireless license application server 600 and the validity of the public key certificate of the wireless license application server 600 performed earlier, the wireless license application server 600 Proven to retain. That is, at this point, authentication of the wireless license application server 600 is established.
[0153]
Subsequently, communication wireless license application server 600 generates a hash value from the data received so far from communication control device 400, and encrypts the hash value with the common key generated in ST2603. Thereafter, the encrypted hash value is transmitted to communication control apparatus 400 (ST2406, ST2702).
[0154]
When receiving the encrypted hash value, communication control device 400 decrypts the hash value with the common key generated in ST 2604. On the other hand, a hash value is generated from the data transmitted to wireless license application server 600 so far, and compared with the decrypted hash value (ST2703). As a result, the validity of the common key generated by the wireless license application server 600 is confirmed.
[0155]
This time, communication control apparatus 400 generates a hash value from the data received from wireless license application server 600 so far, and encrypts the hash value with the common key generated in ST 2604. Thereafter, the encrypted hash value is transmitted to wireless license application server 600 (ST2407, ST2704).
[0156]
Upon receiving the encrypted hash value, wireless license application server 600 decrypts the hash value with the common key generated in ST 2603. On the other hand, a hash value is generated from the data transmitted to the communication control apparatus 400 so far and compared with the decrypted hash value (ST2705). As a result, the validity of the common key generated by the communication control device 400 is confirmed. At this point, it is confirmed that the correct common key has been shared, and the authentication of the communication control device 400 is established.
[0157]
After the authentication of the communication control device 400 is established, the wireless license application server 600 shifts to encrypted communication using the shared common key. All subsequent communications are encrypted using the common key at the transmission source (wireless license application server 600) and transmitted, and are decrypted at the transmission destination (communication control device 400) using the common key.
[0158]
Wireless license application server 600 first logs in to the FTP of communication control device 400 (ST2408, ST2801). At this time, wireless license application server 600 logs in using the FTP user / password (fax001 / none) in the applicant information file received in ST1417 (ST2004) of the process of receiving the wireless license application form from FAX 100. .
[0159]
Subsequently, the wireless license application server 600 transmits the wireless worker license file (hereinafter, referred to as “wireless license file”) generated in advance in accordance with the wireless license application to the communication control device 400 by FTP (ST2409, ST2802). ). This wireless license file is created by a word processor or the like. Communication control device 400 receives the wireless license file by FTP in second communication section 402 (ST2803).
[0160]
Next, wireless license application server 600 transmits the electronic signature file to communication control device 400 by FTP (ST2410, ST2804). Communication control apparatus 400 receives the electronic signature file by FTP in second communication section 402 (ST2805).
[0161]
Here, communication control apparatus 400 determines whether or not there is an electronic signature file (ST2806). If there is an electronic signature file, the control unit 403 obtains a hash value by decrypting the data of the electronic signature file with the public key of the wireless license application server 600. On the other hand, a hash value is generated from the wireless license file received in ST2803 and compared with the decrypted hash value (ST2807).
[0162]
By confirming whether or not the hash value comparison results match, it is determined whether the data of the electronic signature file has been successfully decrypted (ST2808). Thereby, it can be confirmed that the wireless license file is a valid electronic signature. If decoding has been successful, the mobile terminal shifts the process to ST2901. If there is no digital signature file in ST2806, the process skips ST2807 and ST2808 and proceeds directly to the process of ST2901.
[0163]
In ST2901, communication control apparatus 400 generates hash value file by control section 403 encrypting the hash value of the wireless license file with the public key of the applicant. Then, the hash value file, the wireless license file, and the IP address of the wireless license application server 600 are stored in the storage unit 405. At this time, the control unit 403 gives a reception number described later as a file name, and saves the file in the directory of the FAX number of the destination applicant.
[0164]
Wireless license application server 600 logs out the FTP of communication control device 400 after completing the transmission of the electronic signature file by FTP (ST2411, ST2902).
[0165]
Further, wireless license application server 600 disconnects the connection with SSL port (989, 990) of communication control device 400 connected in ST2401 (ST2412, ST2903).
[0166]
After disconnecting the connection with the wireless license application server 600, the communication control device 400 makes a call to the FAX 100 through the first communication unit 401 to connect (ST2413). Then, a reception notification indicating that there is reception data addressed to the applicant is transmitted by fax (ST2414, ST2904).
[0167]
FIG. 34 shows the configuration of the reception notice. As shown in the figure, the receipt with reception describes the reception number (6666) and the FAX number (11-222-7771) for taking out the received document. Is described.
[0168]
After transmitting the reception notice, communication control device 400 disconnects the line connection with FAX 100 (ST2415). In this manner, the process of receiving from the communication control device 400 a reception notification notifying that the communication control device 400 has received the wireless license from the wireless license application server 600 ends.
[0169]
If it is determined in ST2808 that the data of the electronic signature file has not been successfully decrypted, communication control device 400 notifies the error to FTP logout from wireless license application server 600 (ST2902). (ST2905). The communication control device 400 notifies the wireless license application server 600 of the error by returning, for example, “501 Syntax error in parameters or arguments”.
[0170]
As described above, according to the communication control device 400 of the present embodiment, the encrypted information from the wireless license application server 600, which is the source PC terminal, is transmitted by the public key cryptosystem held by the communication control device 400. The decryption is performed using the common key generated based on the pair key and the public key certificate used for the encrypted communication, and the encryption is performed using the public key held by the destination (FAX 100) designated by the wireless license application server 600. While facsimile, the FAX 100 is notified that there is a received document. As a result, information can be communicated with the wireless license application server 600 in an encrypted state, and the fact that there is a received document can be notified to the FAX 100 to prompt the receiving operation.
[0171]
Further, since the data is encrypted with the public key held by the designated transmission destination and stored in the storage unit 405, this information can be presented only to the person holding the secret key which is the decryption key. As a result, unauthorized access by a third party who does not hold the secret key can be prevented, and the confidentiality of the information can be ensured.
[0172]
Next, a process of receiving a wireless license from the communication control device 400 according to the reception notification will be described.
[0173]
When receiving the wireless license from the communication control device 400 in accordance with the reception notification, the applicant first connects to the FAX number (11-222-7771) for extracting the received document described in the reception notification ( ST2416, ST3001).
[0174]
After connecting to the FAX number for extracting the received document, the applicant inputs the reception number (6666) described in the reception notice (ST2418, ST3002) in accordance with the output voice guidance (ST2417). Further, the applicant faxes the certification paper to communication control device 400 according to the voice guidance (ST2419, ST3003).
[0175]
Communication control apparatus 400 receives the reception number and the document image (TIFF image) of the certification paper through second communication section 401 (ST3004). The control unit 403 saves the document image of the certification paper in the certification paper image file (ST3005).
[0176]
Next, the control unit 403 performs OMR recognition of the timing mark from the certification paper image file, specifies the secret key, the public key, and the image area of the public key certificate on the certification paper image (ST3006). The barcode image of the key and the public key certificate is cut out (ST3007). Further, these barcode images are decoded, and the secret key and the public key are converted into numerical values, while the public key certificate is converted into text data (ST3101).
[0177]
On the other hand, control section 403 obtains the wireless license file and the hash value file saved in ST2901 from the applicant's FAX number and the input reception number (ST3102).
[0178]
Next, the control unit 403 obtains a hash value by decrypting the hash value file with the applicant's private key. Then, the hash value generated from the wireless license file is compared with the decrypted hash value (ST3103).
[0179]
Control unit 403 determines whether both hash values match (ST3104). If they match, the file format is determined from the extension or the like of the wireless license file and converted to a fax image (ST3105). Thus, a fax image of the wireless license file as shown in FIG. 35 is obtained.
[0180]
After the conversion into the facsimile image, control section 403 determines whether or not an electronic signature file is added (ST3106). When an electronic signature file is given, the hash value generated from the wireless license file, the electronic signature file, and the public key certificate of the wireless license application server 600 are converted into a barcode image in a prescribed size (ST3107).
[0181]
After converting to a barcode image, control unit 403 reduces the fax image of the wireless license file by the size of these barcode images (ST3201). Then, a hash value, an electronic signature file, and a barcode image of the public key certificate of the wireless license application server 600 are overlaid on this FAX image (ST3202). As a result, a FAX image of the wireless license file to which the electronic signature is given as shown in FIG. 36 is obtained.
[0182]
By overlaying the hash value, the electronic signature file, and the barcode image of the public key certificate of the wireless license application server 600 on the FAX image in this way, if the validity of the wireless license becomes a problem at a later date. The validity can be confirmed by the Ministry of Internal Affairs and Communications. Specifically, after reading these barcode images with a barcode reader, the electronic signature is decrypted with the public key included in the public key certificate, and the validity can be confirmed by comparing with the hash value. .
[0183]
Then, communication control apparatus 400 transmits the FAX image of the wireless license file thus generated to FAX 100 by first communication section 401 (ST2420, ST3203). If the digital signature file is not added in ST3106, the process directly proceeds to ST3203, and the FAX image of the wireless license file without the electronic signature is transmitted to FAX100.
[0184]
After transmitting the FAX image of the wireless license file, in communication control device 400, control section 403 discards the applicant's private key, public key, and public key certificate stored in storage section 405 (ST3301).
[0185]
Finally, the communication control device 400 disconnects the connection with the FAX 100 of the applicant by the first communication unit 401 (ST2421, ST3302). In this manner, the process of receiving the wireless license from the communication control device 400 according to the reception notification is completed.
[0186]
As described above, according to the communication control apparatus 400 of the present embodiment, when the certification paper is received from the FAX 100 that has notified that there is a received document, the secret key obtained by analyzing the barcode information in the certification paper is received. , And decrypts the encrypted information, and transmits the decrypted information to the FAX 100. Thus, the encrypted information can be decrypted only when there is access from the person who holds the formal certification paper. Therefore, it is possible to prevent unauthorized acquisition of information by a third party who does not hold the secret key, and it is possible to ensure the confidentiality of the information.
[0187]
Also, when receiving the notification that there is a received document, when requesting the received document, the user converts the pair key used for the encryption communication by the public key cryptosystem and the certificate of the public key constituting the pair key into a bar code. All that is required is to transmit the certification paper on which the information is placed. Therefore, in the FAX 100, there is no need to perform an operation of inputting a pair key or attaching a certificate of a public key, and it is possible to perform cipher communication by a public key cryptosystem simply by transmitting a certification paper. As a result, even a person who cannot operate the PC terminal can perform encrypted communication using the FAX 100 extremely easily.
[0188]
If it is determined in ST3104 that the two hash values do not match, control unit 403 of communication control apparatus 400 registers registration unit 404 in accordance with the IP address of wireless license application server 600 stored in ST2901. An error notification mail address on the electronic application server management table 700 managed in step (3120) is acquired (ST3204).
[0189]
While the second communication unit 404 sends an error notification to the error notification mail address of the wireless license application server 600 by e-mail (ST3205), the first communication unit 401 sends a document indicating the error to the applicant's FAX 100. After transmitting (ST3206), the mobile terminal shifts the process to ST3301.
[0190]
When the information thus encrypted cannot be decrypted, it is determined that the pair keys do not match, and an error notification is performed. As a result, no information is transmitted when the pair keys do not match, so that the confidentiality of the encrypted communication can be reliably maintained even when the FAX 100 is used.
[0191]
In addition, by performing an error notification when the pair keys do not match, the receiver can determine why the information cannot be obtained. As a result, it is possible to prevent a situation in which the certification paper is transmitted but the corresponding information cannot be received forever, and the next response can be easily taken.
[0192]
【The invention's effect】
As described above, according to the present invention, there is provided a server device and a communication control device that can use a cryptographic communication system using a public key cryptosystem by a facsimile terminal even for a person who cannot operate a PC terminal. Can be provided.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration example of a network to which a server device and a communication control device according to an embodiment of the present invention are connected;
FIG. 2 is a flowchart in a case where a certification paper is issued in the server device according to the embodiment.
FIG. 3 is a flowchart in the case where a certification paper is issued in the server device according to the embodiment.
FIG. 4 is a flowchart for taking out a certification paper in the server device according to the embodiment.
FIG. 5 is a diagram showing a configuration of a certification request sheet transmitted to the server device according to the embodiment.
FIG. 6 is a diagram showing a configuration of a certification paper acceptance notice transmitted from the server device according to the embodiment.
FIG. 7 is a diagram showing a configuration of a driver's license as an identity verification document transmitted to the server device according to the above embodiment;
FIG. 8 is a diagram showing an example of an applicant confirmation screen displayed on a PC of a person in charge of a certificate authority connected to the server device according to the embodiment.
FIG. 9 is a diagram showing an example of an applicant re-input screen displayed on a PC of a person in charge of a certificate authority connected to the server device according to the embodiment.
FIG. 10 is a diagram showing an example of a certification paper image generated by a certification paper issuing unit of the server device according to the embodiment.
FIG. 11 is a diagram showing a configuration of a certification paper issuance notice transmitted from the server device according to the embodiment.
FIG. 12 is a diagram showing an example of information managed by an electronic application server management table registered in a registration unit of the server device according to the embodiment.
FIG. 13 is a diagram showing an example of information managed by a facsimile management table registered in a registration unit of the server device according to the embodiment.
FIG. 14 is a sequence diagram when transmitting information from a facsimile via the communication control device according to the above embodiment;
FIG. 15 is a flowchart in a case where information is transmitted from a facsimile via the communication control device according to the above embodiment.
FIG. 16 is a flowchart for transmitting information from a facsimile via the communication control device according to the above embodiment.
FIG. 17 is a flowchart in the case where information is transmitted from a facsimile via the communication control device according to the above embodiment.
FIG. 18 is a flowchart for transmitting information from a facsimile via the communication control device according to the above embodiment.
FIG. 19 is a flowchart for transmitting information from a facsimile via the communication control device according to the above embodiment.
FIG. 20 is a flowchart for transmitting information from a facsimile via the communication control device according to the above embodiment.
FIG. 21 is a flowchart for transmitting information from a facsimile via the communication control device according to the above embodiment.
FIG. 22 is a diagram showing a configuration of a wireless license application transmitted to the communication control device according to the embodiment.
FIG. 23 is a diagram showing the contents of a public key certificate of a wireless license application server connected to the communication control device according to the embodiment.
FIG. 24 is a sequence diagram in a case where information is received by facsimile via the communication control device according to the above embodiment;
FIG. 25 is a flowchart in the case where information is received by facsimile via the communication control device according to the above embodiment.
FIG. 26 is a flowchart in the case where information is received by facsimile via the communication control device according to the above embodiment.
FIG. 27 is a flowchart in the case where information is received by facsimile via the communication control device according to the above embodiment.
FIG. 28 is a flowchart in the case where information is received by facsimile via the communication control device according to the above embodiment.
FIG. 29 is a flowchart in the case of receiving information by facsimile via the communication control device according to the above embodiment.
FIG. 30 is a flowchart in the case where information is received by facsimile via the communication control device according to the above embodiment.
FIG. 31 is a flowchart in the case where information is received by facsimile via the communication control device according to the above embodiment.
FIG. 32 is a flowchart in the case where information is received by facsimile via the communication control device according to the above embodiment.
FIG. 33 is a flowchart in the case of receiving information by facsimile via the communication control device according to the above embodiment.
FIG. 34 is a diagram showing a configuration of a reception notice transmitted from the communication control apparatus according to the embodiment to a facsimile.
FIG. 35 is a diagram showing a configuration of a FAX image of a wireless license file transmitted from the communication control device according to the embodiment to a FAX.
FIG. 36 is a diagram showing a configuration of a FAX image of a wireless license file transmitted from the communication control device according to the embodiment to a FAX.
[Explanation of symbols]
100 fax
200 Public Line Network (PSTN)
300 server device
301 Communication unit
302 generator
303 Certification Paper Issuing Department
400 communication control device
401 first communication unit
402 Second Communication Unit
403 control unit
404 registration section
405 storage unit
500 Internet
600 Wireless Worker License Electronic Application Server (Wireless License Application Server)

Claims (5)

Generating means for generating a pair key used for encrypted communication by public key cryptography based on predetermined information specifying an applicant and a certificate of a public key constituting the pair key, and a bar code for each of the pair key and the certificate A server device comprising: a certification paper issuing unit for issuing a certification paper in which the barcode is converted into a certification paper; and a communication unit for facsimile transmitting the certification paper in response to a request from the applicant. . A first communication unit that receives image data from the facsimile terminal via a general line, a second communication unit that transmits encrypted information to the PC terminal via the Internet, and a transmission destination designated by the facsimile terminal. A registration unit for registering a corresponding IP address, a pair key for using the image data for encrypted communication by a public key cryptosystem, and a certification sheet in which bar code information of a certificate of a public key constituting the pair key is arranged. Divided into information to be communicated, the barcode in the certification paper is analyzed to extract the pair key and the certificate, and the communication object is generated using a common key generated based on the pair key and the certificate. Control means for encrypting said information and transmitting said encrypted information to said second communication means to an IP address corresponding to a destination specified by said facsimile terminal; Communication control apparatus characterized by comprising. A first communication unit for transmitting image data to the facsimile terminal via a general line, a second communication unit for receiving encrypted information from the PC terminal via the Internet, and a destination designated by the PC terminal. Registration means for registering a corresponding telephone number and a public key used for encrypted communication by the public key encryption method held by the transmission destination; storage means for storing encrypted information received by the second communication means; Upon receiving the encrypted information, the encrypted information is decrypted using a pair key used for encrypted communication by the public key encryption method held by the apparatus and a common key generated based on a certificate of a public key constituting the pair key, While encrypting using the public key held by the destination designated by the PC terminal and storing it in the storage unit, the destination is received by the facsimile terminal of the telephone number corresponding to the destination. Communication control apparatus characterized by comprising a control means for notifying that there is a write to the first communication means. The control means transmits a pair key used for cryptographic communication by the public key cryptosystem from the facsimile terminal notifying that there is a received document, and a certificate in which a bar code information of a certificate of the public key constituting the pair key is arranged. When the paper is received, the barcode information in the certification paper is analyzed, the pair key and the certificate are taken out, and the encrypted information is decrypted using a secret key constituting the pair key, and the decryption is performed. 4. The communication control device according to claim 3, wherein the first communication unit transmits the information to the facsimile terminal. The control means causes the first communication means to transmit an error notification to the facsimile terminal when the encrypted information cannot be decrypted using a secret key constituting the pair key. The communication control device according to claim 4, wherein

Images