JP2004274480A - System, apparatus and program for agreeing on secret communication specifications - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enable secret communication without agreeing on the secret communication specifications of an apparatus having a low security level, when both secret communication specifications are different from each other. <P>SOLUTION: In a secret communication specifications agreeing system, a transmitter apparatus and a receiver apparatus agree with each other in secret communication specifications. Each apparatus is provided with a secret communication specifications module section 25 in which a secret communication specifications module is stored for each own secret communication specifications; a session management section 23 by which one of the apparatuses presents its own secret communication specifications to the other apparatus by a message of agreeing processing of secret communication, a secret communication specifications determining section 31 used for agreeing to the secret communication specifications of an apparatus having higher security level, among the presented or its own secret communication specifications, by a message of agreeing processing of secret communication; and a message control section 22 by which the apparatus having a secret communication specifications module corresponding to the agreed specifications distributes the secret communication specifications module to the other apparatus by a message of agreeing processing of secret communication. <P>COPYRIGHT: (C)2004,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a confidential communication specification agreement system, apparatus, and program for agreeing confidential communication specifications, and among the confidential communication specifications of both communicators, a confidential communication specification agreement system, apparatus, and apparatus that can agree on the highest security level. About the program.
[0002]
[Prior art]
In recent years, with the spread of the Internet, communication in an open environment has become common, and protection of communication on a communication path has been demanded. 2. Description of the Related Art In a WWW (World Wide Web) system or the like on the Internet, in order to protect communication between a WWW client device and a WWW server device, a confidential communication protocol is generally used.
[0003]
Here, the confidential communication protocol is a communication protocol for integrally processing concealment of communication contents, authentication of a communication partner, authentication of communication contents, exchange of an encryption key, and the like. Specifically, there are SSL (Secure Sockets Layer), TLS (Transport Layer Security), S-HTTP (Secure HTTP) and the like.
[0004]
For example, SSL or TLS targets the session layer of the OSI (Open Systems Interconnection) 7-layer model and provides transparent confidential communication to the upper layer. For this reason, SSL and TLS are widely used as standard secure communication protocols (for example, see Non-Patent Documents 1 and 2).
[0005]
In addition, there is IPsec (IP Security Protocol) as confidential communication for IP (Internet Protocol), which is a communication protocol in the network layer of the OSI 7-layer model. This IPsec is a communication protocol for authentication and encryption at the IP packet level, realizes confidential communication on a host basis, and is used for a VPN (Virtual Private Network) or the like.
[0006]
When using the above confidential communication, it is assumed that the specifications of the confidential communication (encryption specification, compression specification, data authentication specification, key exchange specification, mutual authentication specification, etc.) are held in advance by the communication entities. Often it is.
[0007]
Even when the confidential communication specification is not fixed, confidential communication is determined by negotiating a confidential communication specification that can be agreed (satisfies each other's security policy) among the confidential communication specifications of both entities. If there is no agreed-upon confidential communication specification, confidential communication is not performed.
[0008]
[Non-patent document 1]
T. Dierks and C.I. Allen, "The TLS Protocol Version 1.0", RFC 2246, [online], January 1999, IETF (Internet Engineering Task Force), [Search October 19, 2001], Internet <URL:
http: // www. ief. org / rfc / frc2246. txt>
[0009]
[Non-patent document 2]
S. Blake-Wilson, M.A. Nystrom, D.S. Hopwood, J .; Mikkelsen and T.M. Wright, "TLS Extensions", Internet-Draft, [online], June 20, 2001, IETF (Internet Engineering Task Force), [Search October 19, 2001], Internet <URL:
http: // www. ief. org / internet-drafts / draft-ietf-tls-extensions-00. txt>
[0010]
[Problems to be solved by the invention]
However, there is no problem in the negotiation of the above-mentioned confidential communication agreement if the confidential communication specifications of both entities are the same, but if the confidential communication specifications of both entities are different from each other, the confidential communication of the lower security level The specification needs to be agreed. The current agreement negotiations on confidential communications are so conducted.
[0011]
At this time, if the lower secure communication specification does not satisfy the security policy of the other entity, that is, if there is no agreeable secure communication specification, the secure communication cannot be performed. In this case, the session establishment of the confidential communication is refused, and the agreement negotiation is stopped.
[0012]
The present invention has been made in consideration of the above-described circumstances, and in the case where the two confidential communication specifications are different, a confidential communication specification agreement system capable of executing confidential communication without agreeing to the confidential communication specification with a lower security level. , An apparatus and a program.
[0013]
Another object of the present invention is to provide a confidential communication that can execute confidential communication without stopping agreement negotiation when the confidential communication specification of the lower security level does not satisfy the security policy of the higher security level. It is intended to provide a specification agreement system, device and program.
[0014]
[Means for Solving the Problems]
A first invention is a secure communication specification agreement system for agreeing a secure communication specification between two entity devices when performing secure communication between a first entity device and a second entity device via a network. In each of the entity devices, for each of the secret communication specifications that the device itself has, means for storing a secret communication specification module for executing the secret communication specification, and at least one entity device stores the secret communication specifications that the device itself has. Means for presenting to the other entity device using the message of the agreement processing of the confidential communication, and confidential communication of the confidential communication specification having the higher security level among the presented confidential communication specification and the confidential communication specification owned by itself. Means for making an agreement using a message of communication agreement processing, and a secret communication specification model corresponding to the secret communication specification agreed upon. The entity device is the confidential communication specification module reader has Yuru a confidential communication specifications agreed system and means for delivering using the message of agreement process of secret communications to the other entity device.
[0015]
Thereby, when the two confidential communication specifications are different, the confidential communication can be performed without agreeing to the confidential communication specification with the lower security level. Further, when the confidential communication specification of the lower security level does not satisfy the security policy of the higher security level, the confidential communication can be executed without stopping the agreement negotiation.
[0016]
Although the first invention is expressed as a “system” including a set of devices, the present invention is not limited to this, and a “device”, a “program”, and a “computer-readable storage” may be set for each device or each device. It goes without saying that the expression may be expressed in a different category such as “medium” or “method”.
[0017]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[0018]
(1st Embodiment)
FIG. 1 is a schematic diagram showing a configuration example of the secret communication specification agreement system according to the first embodiment of the present invention. In this confidential communication specification agreement system, a sender (Initiator) device 10 as a first entity device is connected to a receiver (Responder) as a second entity device via a network Nw such as an open network represented by the Internet. It is configured to be connected to the device 40.
[0019]
Note that the sender device 10 may be a device dedicated to transmission, but here, this means a case where a device capable of transmitting and receiving is used for transmission. Similarly, the receiver device 40 may be a device dedicated to reception, but here, this means a case where a device capable of transmitting and receiving is used for reception.
[0020]
Here, the sender device 20 includes a confidential communication device 20 for performing confidential communication with another device 40 via the network Nw, in addition to a normal computer function.
[0021]
The confidential communication device 20 sends a request for establishing confidential communication to the receiver device 40, transmits and receives application data after agreeing on confidential communication, and has a function of determining a confidential communication specification according to a preset security policy.
[0022]
Here, the confidential communication device 20 has a confidential communication agreement function and a confidential communication specification distribution function according to the present invention, in addition to a well-known confidential communication protocol realizing function, and includes an input / output unit 21, a message control unit 22, Management unit 23, concealment unit (encryption unit 24a, compression unit 24b, data authentication unit 24c and key exchange unit 24d) 24, confidential communication specification module unit 25, confidential communication specification module verification unit 26, confidential communication specification module control unit 27 , A public key verification unit 28, an authentication unit 29, a security policy unit 30, and a secret communication specification determination unit 31.
[0023]
Among the units 21 to 31, functions other than the well-known functions include a part of the message control unit 22, a part of the session management unit 23, the secret communication specification module verification unit 26, the secret communication specification module control unit 27, and the secret The communication specification determining unit 31 and the like.
[0024]
The message control unit 22 has a function of distributing the confidential communication specification module transferred from the confidential communication module control unit 27 based on the determination of the confidential communication specification determining unit 31, in addition to the well-known message control function.
[0025]
The session management unit 23 has a function of managing a session related to the distribution of the secret communication specification module, in addition to a well-known session management function. The secret communication specification module is a module for executing the secret communication specification.
[0026]
When using the confidential communication specification module of the other device 40, the confidential communication specification module verification unit 26 verifies the confidential communication specification module of the other device 40 received from the message control unit 22, and transmits the verification result to the confidential communication specification module control unit 27. Has a function to notify
[0027]
When the result of the verification performed by the confidential communication specification module verification unit 26 indicates validity, the confidential communication specification module control unit 27 executes the confidential communication specification module distributed from the receiver device 40 and the confidential communication of the own device 20. When the specification module is used, it has a function of executing the secret communication specification module received from the secret communication specification determining unit 31.
[0028]
The confidential communication specification determining unit 31 refers to the security policy stored in the security policy unit 30, compares the confidential communication specifications of the own device 20 with the other device 40, and uses the confidential communication specification with the higher security level. When the determined result indicates that the confidential communication specification module of the other device 40 is to be used, the session management unit 23 is notified.
[0029]
On the other hand, when the determined result indicates that the confidential communication specification module of the own apparatus 40 is used, the confidential communication specification module in the confidential communication specification module unit 25 is transferred to the confidential communication specification module control unit 27. .
[0030]
The receiver device 40 is the same device as the sender device 20, and includes the same confidential communication device 50. The secret communication device 50 is configured similarly to the above-described secret communication device 20 except for the content of the security policy and the content of the secret communication specification module.
[0031]
Further, each of the secret communication devices 20 and 50 can be realized by, for example, a combination of a hardware configuration and a software configuration. In this case, a program for realizing the functions of the secret communication devices 20 and 50 is installed in advance in the computer of each device 10 and 40 from a storage medium or a network.
[0032]
In addition, the secret communication devices 20 and 50 are not limited to a form in which a program is installed and are realized, for example, are realized as separate devices such as a chip device, a card device, and a board device, and are mounted on each of the devices 10 and 40. May be done.
[0033]
Next, the operation of the secret communication specification agreement system configured as described above will be described with reference to the sequence diagrams of FIGS.
The secure communication device 20 of the sender device 10 transmits a secure communication establishment request to the receiver device 40 in order to establish a secure communication channel with the receiver device 40. When agreement negotiation of the confidential communication is necessary, the confidential communication device 20 of the sender device presents a confidential communication specification list indicating the confidential communication specifications of the sender device (ST1).
[0034]
The confidential communication device 50 of the receiver device 40 determines the confidential communication specification by the confidential communication specification determining unit according to its own security policy. At this time, if the confidential communication specification of the confidential communication device 20 of the sender device 10 satisfies the security policy more than its own confidential communication specification (for example, the security level of the confidential communication specification is higher), it is presented. One of the confidential communication specifications is selected, and the confidential communication specification for communication used in the session (= established confidential communication channel) is used.
[0035]
At the same time, a secret communication specification for distribution for distributing the secret communication specification module is determined. This selects the highest security level among the subsets of the confidential communication specifications possessed by both entities. However, a configuration defined by default may be used instead of this selection.
[0036]
The secure communication device 50 of the receiver device 40 specifies the secure communication specification for communication and the secure communication specification for distribution to the sender device 20 (ST2).
[0037]
The confidential communication device 20 of the sender device 10 determines whether each of the specified confidential communication specifications satisfies its own security policy, and if so, continues the negotiation of the agreement.
[0038]
After agreement on the confidential communication specification is made, the communication parameters are exchanged and the entity of the communication partner is authenticated according to the confidential communication specification for distribution (ST3). For these processes, those specified in each secret communication specification are used.
[0039]
Using the communication parameters of the confidential communication specification for distribution shared by the above procedure, the confidential communication specification module for communication that satisfies the security policy is encrypted and distributed. This distribution is performed by the device 40 or 10 having the communication confidential communication specification module (ST4 in FIG. 3 or ST4a in FIG. 4).
[0040]
The device 10 or 40 that has received the encrypted communication confidential communication specification module stores the communication confidential communication specification module in a memory or the like, and then verifies the digital signature previously applied to the communication confidential communication specification module. Then, the validity of the received module is confirmed. This digital signature may be given by either the creator of the confidential communication specification module or the certification authority.
[0041]
Next, the confidential communication devices 20 and 50 of the devices 10 and 40 exchange communication parameters in accordance with the confidential communication specification for communication (ST5). This exchange may be performed at the same time as the communication parameter exchange of the secret communication specification for distribution.
[0042]
The application data (communication data to be concealed) is transmitted and received on the confidential communication channel using the communication parameters of the confidential communication specification for communication shared by the above procedure (ST6).
[0043]
As described above, according to the present embodiment, when the confidential communication specifications of both the sender device 10 and the receiver device 40 are different, the confidential communication specification determination unit 31 determines the confidential communication specifications of the own device 20 and the other device 40. In comparison, with the configuration that determines to use the confidential communication specification with the higher security level, the confidential communication can be executed without agreeing to the confidential communication specification with the lower security level.
[0044]
Further, thereby, when the confidential communication specification of the lower security level does not satisfy the security policy of the higher security level, the confidential communication can be performed without stopping the agreement negotiation.
[0045]
Further, as a more preferable usage, it is possible to select a secret communication specification having the highest security level among secret communication specifications possessed by both parties. Also, the secret communication specification can be dynamically changed.
[0046]
(Second embodiment)
FIG. 5 is a schematic diagram showing a configuration example of a secret communication agreement system according to the second embodiment of the present invention.
[0047]
This embodiment is a specific example of the first embodiment, and uses SSL / TLS, which is a common secure communication protocol in a WWW system or the like, as an example.
[0048]
The communication mode and the entity performing the confidential communication will be described assuming communication between the client device 10 'and the server device 40' in a general WWW system. The secure communication devices 20 and 50 of the devices 10 ′ and 40 ′ have a hardware configuration that satisfies the basic specifications of SSL / TLS, or a combination configuration of hardware and software.
[0049]
The confidential communication specifications to be agreed upon are cipher specifications (CipherSuites) indicating an encryption algorithm, a key exchange algorithm, and a one-way function. However, modules to be distributed exclude the key exchange algorithm.
[0050]
The exchange of encryption specifications that do not correspond to each other is realized by transmitting an encryption specification module (a module for executing the encryption specification: a DLL (Dynamic Link Library) file, a class file, or the like). It is assumed that the encryption specification module has been digitally signed by the creator of the encryption specification module or a certification authority to assure the validity.
[0051]
Next, the operation of the secret communication specification agreement system configured as described above will be described with reference to the sequence diagrams of FIGS. Note that each sequence diagram shows a handshake protocol of confidential communication.
[0052]
First, the confidential communication device 20 of the client device 10 'transmits a session establishment request to a server device 40' such as a service provider that provides a desired service (ST1-1).
[0053]
The secret communication device 50 of the server device 40 'transmits a Hello Request message declaring the start of handshake to the client device 10' (ST1-2).
[0054]
The confidential communication device 20 of the client device 10 'transmits a client Hello (ClientHello) message including a client random number (ClientRandom) and an encryption specification list including its own encryption specification (CipherSuites) and compression specification (CompressionMethod) to the server. The data is transmitted to the device 40 '(ST1-3).
[0055]
Here, the encryption specification list is added with an extended encryption specification (ExtensionCipherSuite) code indicating that the confidential communication device 20 of the client device 10 'corresponds to a confidential communication specification distribution process described later. Note that the extended encryption specification code has a value that does not collide with a code indicating an encryption specification defined in the standard. The extended encryption specification indicates that the client device 10 'can accept the encryption specification of the confidential communication device 20 without corresponding to the specific encryption specification. If necessary, information such as the operation system of the client device 10 'may be included.
[0056]
The secure communication device 50 of the server device 40 'selects an encryption specification that satisfies its own security policy from the received encryption specification list.
[0057]
<Distribution of encryption specification from server device 40 ′ to client device 10 ′>
If there is no encryption specification that satisfies its own security policy in the received encryption specification list, the confidential communication device 50 of the server device 40 ′ transmits a server hello (ServerHello) message including the specification of its own encryption specification to the client device. 10 '(ST2-1).
[0058]
At the same time, the confidential communication device 50 of the server device 40 'designates the encryption specification for distribution from the received encryption specification list. The distribution encryption specification is an encryption specification used when distributing the encryption specification module.
[0059]
The confidential communication device 20 of the client device 10 'continues the handshake if the encryption specification specified by the server hello message is acceptable, and transmits an alert (Alert) message if the encryption specification is rejected and accepts the handshake. To stop.
[0060]
In the case of continuing handshake, a sequence up to a client key exchange (ClientKeyExchange) message is performed (ST2-2 to ST3-5). By the client key exchange message, the pre-master secret generated by the client device 10 'is transmitted to the server device 40' (ST3-5, ST3-6), and the session key (in the session) between the client device 10 'and the server device 40'. (Communication parameters used: state) are shared.
[0061]
The main parameters used in the standard state are generated from random numbers (server random, client random) transmitted in the server hello message and the client hello message, and the premaster secret. Here, the main parameters are a client write MAC secret, a server write MAC secret, a client write key, a server write key, a client write initial vector, and a server write initial vector.
[0062]
A value obtained as an input of a pseudo-random function PRF (server-random, client-random, and pre-master secret) is defined as a master secret.
[0063]
Next, a value obtained by similarly inputting the master secret, the server random, and the client random to the pseudo-random number generating function PRF is used as a key block, and the key block is divided into a required size to obtain each parameter. At this time, the extra key blocks are originally discarded, but in the present embodiment, extra key blocks for the distribution encryption parameters (the distribution write key and the distribution write initial vector) are generated.
[0064]
When each of the confidential communication devices 20 and 50 of the server device 40 ′ and the client device 10 ′ generates each parameter normally, they transmit a delivery specification exchange (DeliveryCipherSpec) message (ST3-7, ST3-8). Enable mutual encryption parameters for distribution.
[0065]
The confidential communication device 50 of the server device 40 'encrypts the encryption specification module to be distributed based on the validated distribution encryption parameter, and transmits the encrypted encryption specification module in an encrypted distribution (DeliveryCipher) message. It transmits (ST4-1). If there is a certificate (public key certificate) for verifying the digital signature of the encryption specification module, a certificate delivery (DeliveryCertificate) message is transmitted to the client device 10 '(ST4-2).
[0066]
The confidential communication device 20 of the client device 10 'decrypts the encryption specification from the received encrypted distribution message and verifies the validity with the public key certificate of the certificate distribution message.
[0067]
The secret communication device 20 of the client device 10 'transmits a delivery completion (DeliveryDone) message if the received encryption specification module is to be accepted (ST4-3), and sends an alert message if the acceptance is rejected.
[0068]
After transmitting the distribution completion message, the confidential communication device 20 of the client device 10 'imports the encryption specification module to make it usable.
[0069]
Each of the confidential communication devices 20 and 50 of the client device 10 'and the server device 40' transmits an encryption specification exchange (ChangeCipherSpec) message to each other to notify that the state has been switched to the communication state (ST5-1 to ST5-1). ST5-3), end the handshake with an end (Finish) message (ST5-4).
[0070]
After the end of the handshake, application data is transmitted and received using the exchanged encryption specification (ST6).
[0071]
<Distribution of encryption specification from client device 10 ′ to server device 40 ′>
When the encryption specification is distributed from the client device 10 'to the server device 40', when the encryption specification is specified in the server hello message, the encryption specification desired to be distributed is obtained from the encryption specification list of the client device 10 '. Is selected, and at the same time, the encryption specification for distribution is specified from the encryption specification list of the client device 10 '. At this time, if necessary, information such as the operation system of the server device 40 'may be included.
[0072]
The confidential communication device 20 of the client device 10 'continues the handshake if the encryption specification specified by the server hello message can be distributed, and if the distribution is rejected, transmits an alert message and stops the handshake.
[0073]
The subsequent sequence is the same as the sequence described above. However, the encrypted delivery message and the certificate delivery message are transmitted from the secure communication device 20 of the client device 10 'to the server device 40' (ST4a-1, ST4a-2).
[0074]
As described above, according to the present embodiment, in addition to the effects of the first embodiment, it can be realized on a specific secure communication protocol such as SSL / TSL.
[0075]
As a modification of the present embodiment, when a private encryption specification is used, an extended item indicating a detailed description of the encryption specification may be added to the client hello message and the server hello message.
[0076]
As a modification of the present embodiment, when interconnection is considered, the extension items used may be extended as in the TLS general-purpose extension specification “TLS Extensions”. The present invention relates to a method of expressing and describing an extension item, and any method can be used.
[0077]
The method described in each of the above-described embodiments includes, as programs that can be executed by a computer, a magnetic disk (floppy (registered trademark) disk, hard disk, or the like), an optical disk (CD-ROM, DVD, or the like), a magneto-optical disk ( MO) and a storage medium such as a semiconductor memory.
[0078]
The storage medium may be in any form as long as it can store a program and can be read by a computer.
[0079]
Further, an OS (Operating System) running on the computer based on an instruction of a program installed in the computer from the storage medium, MW (Middleware) such as database management software, network software, etc. realize the present embodiment. May be partially executed.
[0080]
Further, the storage medium in the present invention is not limited to a medium independent of a computer, but also includes a storage medium in which a program transmitted via a LAN, the Internet, or the like is downloaded and stored or temporarily stored.
[0081]
Further, the number of storage media is not limited to one, and the case where the processing in the present embodiment is executed from a plurality of media is also included in the storage medium of the present invention, and any media configuration may be used.
[0082]
The computer according to the present invention executes each process according to the present embodiment based on a program stored in a storage medium, and includes a device such as a personal computer and a system in which a plurality of devices are connected to a network. Or any other configuration.
[0083]
Further, the computer in the present invention is not limited to a personal computer, but also includes an arithmetic processing unit, a microcomputer, and the like included in an information processing device, and is a general term for devices and devices capable of realizing the functions of the present invention by a program. .
[0084]
Note that the present invention is not limited to the above embodiments, and various modifications can be made in the implementation stage without departing from the scope of the invention. In addition, the embodiments may be implemented in appropriate combinations as much as possible, in which case the combined effects can be obtained. Furthermore, the above embodiments include inventions at various stages, and various inventions can be extracted by appropriately combining a plurality of disclosed constituent elements. For example, when an invention is extracted by omitting some constituent elements from all constituent elements described in the embodiment, when implementing the extracted invention, the omitted part is appropriately supplemented by well-known conventional techniques. It is something to be done.
[0085]
In addition, the present invention can be variously modified and implemented without departing from the gist thereof.
[0086]
【The invention's effect】
As described above, according to the present invention, when the two confidential communication specifications are different, the confidential communication can be executed without agreeing to the confidential communication specification with the lower security level. Further, when the lower confidential communication specification does not satisfy the higher security policy, the confidential communication can be executed without stopping the agreement negotiation.
[Brief description of the drawings]
FIG. 1 is a schematic diagram showing a configuration example of a secret communication specification agreement system according to a first embodiment of the present invention;
FIG. 2 is a functional block diagram showing a configuration of a secret communication device according to the embodiment;
FIG. 3 is a sequence diagram for explaining the operation in the embodiment.
FIG. 4 is a sequence diagram for explaining the operation in the embodiment;
FIG. 5 is a schematic diagram showing a configuration example of a secret communication specification agreement system according to a second embodiment of the present invention;
FIG. 6 is a sequence diagram for explaining the operation in the embodiment.
FIG. 7 is a sequence diagram for explaining the operation in the embodiment;
[Explanation of symbols]
10 ... Sender device
20, 40 ... Secret communication device
20 '... Client device
21 ... Input / output unit
22 Message control unit
23: Session management unit
24 ... Hidden part
24a: Encryption unit
24b ... Compression part
24c: Data authentication unit
24d Key exchange unit
25: Secret communication specification module
26 ... Confidential communication specification module verification unit
27 ... Confidential communication specification module control unit
28 Public key verification unit
29 ... Authentication department
30 Security Policy Department
31 ... Confidential communication specification determination unit
Nw ... Network
40 ... Recipient
40 '... server device

Claims (6)

A confidential communication specification agreement system for agreeing confidential communication specifications between two entity devices when performing confidential communication between a first entity device and a second entity device via a network,
Each of the entity devices,
Means for storing a confidential communication specification module for executing the confidential communication specification for each confidential communication specification that the self has,
Means that at least one entity device presents its own confidential communication specification to the other entity device using a message for confidential communication agreement processing,
Among the presented confidential communication specifications and the confidential communication specifications of the self, a means for agreeing the higher security level confidential communication specification using a message of the confidential communication agreement processing,
Means that the entity device having the confidential communication specification module corresponding to the agreed confidential communication specification distributes the confidential communication specification module to the other entity device using a message of the confidential communication agreement process,
A confidential communication specification agreement system comprising: The secret communication specification agreement system according to claim 1,
Each of the entity devices,
Means for verifying the validity of the delivered secret communication specification module,
Means for executing the secret communication specification module when the result of the verification indicates validity,
A confidential communication specification agreement system comprising: When performing confidential communication between the first entity device and the second entity device via a network, each entity device used in a confidential communication specification agreement system for agreeing a confidential communication specification between the two entity devices. So,
Means for storing a confidential communication specification module for executing the confidential communication specification for each confidential communication specification that the self has,
Means that at least one entity device presents its own confidential communication specification to the other entity device using a message for confidential communication agreement processing,
Among the presented confidential communication specifications and the confidential communication specifications of the self, a means for agreeing the higher security level confidential communication specification using a message of the confidential communication agreement processing,
Means that the entity device having the confidential communication specification module corresponding to the agreed confidential communication specification distributes the confidential communication specification module to the other entity device using a message of the confidential communication agreement process,
An entity device comprising: The entity device according to claim 3,
Means for verifying the validity of the delivered secret communication specification module,
Means for executing the secret communication specification module when the result of the verification indicates validity,
An entity device comprising: A confidential communication specification agreement system for agreeing confidential communication specifications between two entity devices when performing confidential communication between a first entity device and a second entity device via a network, which is used for each entity device. A program,
The computer of each of the entity devices,
Means for storing, in a memory, a secret communication specification module for executing the secret communication specification,
Means that at least one entity device presents its own confidential communication specification to the other entity device using a message of the confidential communication agreement process,
Among the presented confidential communication specifications and the confidential communication specifications that the self has, a means for agreeing the higher confidential communication specification using a message of the confidential communication agreement processing,
The entity device having the confidential communication specification module corresponding to the agreed confidential communication specification reads the confidential communication specification module from the memory, and transmits the obtained confidential communication specification module to the other entity device in the confidential communication agreement processing. Means to deliver using messages,
Program to function as The program according to claim 5,
The computer of each of the entity devices,
Means for storing the delivered secret communication specification module in a memory,
Means for verifying the validity of the stored secret communication specification module,
Means for executing the secure communication specification module when the result of the verification indicates validity,
Program to function as

Images