JP2004343442A - Disclosure-oriented identifier distribution method and system, and disclosure-oriented identifier certification device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a distribution method for a disclosure-oriented identifier and a system by which appropriate distribution is achieved while preventing the unauthorized use of the disclosure-oriented identifier. <P>SOLUTION: A service recipient terminal 20 generates a random number Kc. A user terminal 10 generates a message authenticator S based on the random number Kc and returns the message authenticator S as well as the disclosure-oriented identifier T to the service recipient terminal 20. The service recipient terminal 20 transmits the disclosure-oriented identifier T, the message authenticator, and the random number Kc to a disclosure-oriented identifier certification device 40. As the result of verification, service provision is received from a service provision device 50 by using the disclosure-oriented identifier T, provided that the disclosure-oriented identifier T has legality. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a technology for distributing a disclosure identifier used in place of a user identifier when receiving a service in a service providing device, on a network.
[0002]
[Prior art]
With the spread of the Internet in recent years, the use of e-mail, IP telephones, and the like has been increasing, and along with this, a large amount of information that can identify users, such as mail addresses and telephone numbers for IP telephones, has been distributed on networks. . Also, in electronic commerce using the Internet, information that can identify a user, such as the user's membership number and credit card number, is distributed on the network. Since such information that can identify a user relates to the privacy of the user, it is necessary to prevent leakage to a third party.
[0003]
As a method for managing such personal information, a technique described in JP-A-2002-229953 has been proposed.
[0004]
Hereinafter, this conventional technique will be described with reference to FIG. Here, a person who uses personal information, such as an EC (Electronic Commerce), is called an information user, and a person who registers personal information is called a registrant.
[0005]
7, reference numeral 1001 denotes a personal information management server for storing and managing personal information, 1002 denotes an information user terminal, and 1003 denotes a registrant terminal. The operation when the information user desires to acquire personal information in such a configuration will be described.
[0006]
First, the registrant registers personal information in advance in the personal information management server 1001 using the terminal 1003 (step S101). The information user transmits a personal information access request to the registrant terminal 1003 using the terminal 1002 (step S102). The registrant checks the received personal information access request, and if the request does not include a request for a matter that the user does not want to disclose to the information user, transmits a request for generating an access code to the personal information management server 1001 (step S103). . The personal information management server 1002 generates an access code for accessing the personal information (Step S104), and sends it back to the registrant (Step S105). Then, the registrant returns this access code to the information user (step S106).
[0007]
The information user who has obtained the access code accesses the personal information management server 1001 using the access code (step S107). The personal information management server 1001 verifies the received access code, and if the code is appropriate, extracts the personal information corresponding to the code (step S108), and returns the extraction result to the information user (step S109). .
[0008]
Through such processing, the information user can obtain the access code from the registrant, and can obtain the personal information by presenting the access code to the personal information management server.
[0009]
[Patent Document 1]
JP-A-2002-229953
[0010]
[Problems to be solved by the invention]
However, in the above method, when an access code used for acquiring personal information is distributed on a network, the following problem may occur. That is, even if a third party who is neither a registrant nor an information user illegally obtains the access code and the third party presents the illegally obtained access code to the information user, Cannot recognize that the access code has been illegally obtained, and can obtain personal information from the personal information management server. That is, there is a problem that the third party can impersonate a so-called registrant. Therefore, it has been difficult for the related art to achieve appropriate distribution on the network while preventing unauthorized use of the access code.
[0011]
Although an access code used in a service that discloses personal information has been described here, a similar problem occurs with an access code used in providing another service. Therefore, in the present application, such an access code is referred to as “a user identifier that can uniquely identify a user and can request a service related to the user from the service providing system by presenting the user. , A disclosure identifier for disclosing the user identifier to a service provider who wants to use the user identifier. "
[0012]
The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a method and system for distributing a disclosure identifier that can achieve appropriate distribution while preventing unauthorized use of the disclosure identifier. Is to do.
[0013]
[Means for Solving the Problems]
In order to achieve the above object, in the present invention, in place of a user identifier capable of uniquely identifying a user, a disclosure identifier for disclosing the user identifier to another user who wants to use the user identifier is provided on a network. In the method of distributing, a first user terminal (first user terminal) transmits a message based on related information relating to communication with a second user terminal (second user terminal). A message authenticator generating step of generating an authenticator, a first user terminal transmitting a disclosure identifier of the first user to the second user terminal together with the message authenticator; A verification requesting step in which the second user terminal transmits a disclosure identifier verification request including the disclosure identifier and the message authenticator received from the first user terminal to the disclosure identifier certifying device; Certification device A disclosure identifier acquiring step of acquiring a user identifier of the first user based on the disclosure identifier included in the verification request, and the disclosure identifier certifying device acquires the acquired user identifier of the first user and the association A message authenticator verifying step of verifying the message authenticator included in the verification request based on the information.
[0014]
According to the present invention, the second user using the disclosure identifier acquires the message identifier along with the disclosure identifier from the first user, and transmits the disclosure identifier and the message authenticator to the disclosure identifier certifying device. , The device can verify the validity of the disclosure identifier. Therefore, even when the second user obtains the disclosure identifier from a third party different from the original owner, the second user can recognize the unauthorized use of the disclosure identifier. That is, "spoofing" by a third party using the disclosure identifier can be prevented. As a result, the disclosure identifier can be widely distributed on the network.
[0015]
Further, according to the present invention, in a method of distributing a disclosure identifier for disclosing to a user who wants to use the user identifier on a network instead of a user identifier capable of uniquely identifying a user, The terminal of the first user (the first user terminal) is used for disclosure of related information related to communication with the terminal of the second user (the second user terminal) and the first user. A certificate issuance requesting step of transmitting a certificate issuance request including the identifier to the disclosure identifier certifying device, and a user who authenticates the first user who has issued the certificate issuance request. An authentication step, a disclosure identifier obtaining step in which the disclosure identifier certifying device obtains a user identifier based on the disclosure identifier included in the certificate issuance request, and Authenticate at the user authentication stage A user verification step of verifying whether the user identifier is related to the first user, and a disclosure identifier certifying device relating to the first user whose acquired user identifier is authenticated in the user authentication step. An authentication certificate generating step of generating an authentication certificate in a certain case; an authentication certificate transmitting step of transmitting the authentication certificate to the requesting first user terminal by the disclosure identifier certifying device; A user terminal transmitting a disclosure identifier of a first user to a second user terminal together with an authentication certificate received from the disclosure identifier certifying device; and a second user terminal comprising: A disclosure identifier verifying step of verifying the disclosure identifier received from the first user terminal based on the authentication certificate received from the first user terminal.
[0016]
According to the present invention, the second user using the disclosure identifier obtains the authentication certificate from the first user together with the disclosure identifier. Therefore, by verifying the authentication certificate, the second user can use the disclosure identifier. Can be verified. As a result, similarly to the above invention, "spoofing" by a third party using the disclosure identifier can be prevented, and therefore, the disclosure identifier can be widely distributed on a network.
[0017]
BEST MODE FOR CARRYING OUT THE INVENTION
(First Embodiment)
A method of distributing the disclosure identifier according to the first embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a system configuration diagram illustrating a method of distributing a disclosure identifier.
[0018]
In FIG. 1, 1 is a user who uses a disclosure identifier, 2 is a service provider (hereinafter simply abbreviated to “provider”) that is a user who receives a service from a service providing apparatus, and 10 is a user 1 , A user terminal 20 used by the provider 2, a disclosure identifier generation device 30 for generating a disclosure identifier T, and a verification of a disclosure identifier from the provider terminal 20. A disclosure identifier certifying device that verifies a disclosure identifier in response to a request, 50 is a service providing device that provides a predetermined service to the recipient terminal 20, and 60 is a public key management that stores and manages a user's public key. Server.
[0019]
In the present invention, when the recipient terminal 20 presents the disclosure identifier T to the service providing apparatus 50 and receives a predetermined service from the service providing apparatus 50, the validity of the disclosure identifier T is verified. Here, the service received by the provider terminal 20 relates to the user 1 associated with the disclosure identifier T. For example, a service for acquiring the personal information of the user 1 and a service for relaying an e-mail or an IP telephone from the provided person 2 to the user 1 can be cited. The present invention verifies that such a disclosure identifier T is indeed circulated from the user 1 related to the disclosure identifier T, so that the disclosure identifier T obtained by a third party is illegal. Prevent distribution and use.
[0020]
The user terminal 10 includes a message authenticator generation unit 11 that generates a message authenticator S from the random number Kc included in the acquisition request in response to the acquisition request for the disclosure identifier T received from the provided terminal 20. I have. The message authenticator generating unit 11 returns the generated message authenticator S and the disclosure identifier T owned by the user 1 to the requestor-provided terminal 20. The message authenticator S indicates that the disclosure identifier T has been authenticated by its owner, and is distributed together with the disclosure identifier T. The message authenticator S is generated by encrypting data (for example, a character string combining the random number Kc and the disclosure identifier T) including the random number Kc received from the recipient terminal 20 with the secret key of the user 1. You. Note that the disclosure identifier T of the user 1 is obtained in advance from the disclosure identifier generation device 30.
[0021]
When receiving the provision of the service from the service providing apparatus 50, the recipient terminal 20 first obtains the disclosure identifier T from the user terminal 10, and sends the disclosure identifier verification request including the obtained disclosure identifier T to the disclosure. It is transmitted to the identifier certifying device 40. In the figure, reference numeral 21 denotes a random number generation unit for generating a random number Kc, and 22 transmits a disclosure identifier acquisition request including the random number Kc generated by the random number generation unit to the user terminal 10, and the user terminal 10 transmits the disclosure identifier. T, a disclosure identifier requesting means for acquiring the message authenticator S; 23, a disclosure identifier verification request for a disclosure identifier verification request including the disclosure identifier T, the message authenticator S, and the random number Kc acquired by the disclosure identifier requesting means 22; This is a disclosure identifier verification request unit that is transmitted to the device 40. Based on the verification result from the disclosure identifier certifying device 40, the recipient terminal 20 receives a service from the service providing device 50 using the disclosure identifier T if the disclosure identifier T is valid.
[0022]
The disclosure identifier generation device 30 obtains a disclosure identifier T from a user ID (R), which is an identifier capable of uniquely identifying the user 1, and provision condition information C, which is a condition for providing a service to the recipient 2. Generate The disclosure identifier T is uniquely generated for a set of the user ID (R) and the provision condition information C, and only the disclosure identifier certifying device 40 and the service providing device 50 have the user ID (R) and the provision condition. The information C can be restored. As the provision condition information C, for example, information for specifying the recipient 2 as a service provider, expiration date of service provision, item information for permitting service provision (for example, disclosure of only an address in a service for disclosing personal information). Various conditions are arbitrarily combined, such as permission, and a form of service provision (for example, specifying that information of age 25 is expressed in a service for disclosing personal information such as age 20s). The user ID (R) and the provision condition information C required for generating the disclosure identifier T are acquired from the user terminal 10. A method for generating the disclosure identifier T will be described later.
[0023]
The disclosure identifier certifying device 40 restores the user ID (R) corresponding to the identifier T and the provision condition information C from the disclosure identifier T included in the disclosure identifier verification request received from the recipient terminal 20. An identifier restoring unit 41 and a message authenticator verifying unit 42 that verifies the message authenticator S included in the disclosure identifier verification request received from the provided terminal 20 are provided. The restoration method in the disclosure identifier restoring means 41 corresponds to the generation method in the disclosure identifier generation device 30. The method of restoring the disclosure identifier T will be described later.
[0024]
The message authenticator verification unit 42 acquires the public key Kp of the user 1 from the public key management server 60 using the user ID (R) restored by the disclosure identifier restoring unit 41, and uses the public key Kp. The verification is performed by decrypting the message authenticator S by using the key. That is, if the decryption is possible, it is verified that the disclosure identifier T received together with the message authenticator S has been sent from the owner of the disclosure identifier T. Further, the message authentication code verification unit 42 performs verification by comparing the random number obtained by decrypting the message authentication code S with the random number included in the disclosure identifier verification request. That is, if they match, it is authenticated that the disclosure identifier T is transmitted by the user 1 in response to a request from the user 2 to the user 1. The verification result by the message authenticator verification unit 42 is notified to the provider terminal 20.
[0025]
The service providing apparatus 50 is restored by the disclosure identifier restoring means for restoring the user ID (R) and the provision condition information C from the disclosure identifier T, similarly to the message authenticator verifying means 42, and by the disclosure identifier restoring means. Service providing means for providing a predetermined service to the recipient terminal 20 using the user ID (R) (not shown). At this time, the service is provided under the condition according to the providing condition information C restored by the disclosure identifier restoring unit. That is, for example, when the provision condition information C includes information for specifying the service provider and the service provider is different from the recipient terminal 20 that transmitted the disclosure identifier T, the service provision is not permitted. Also, for example, even when the expiration date is included in the provision condition information C and the expiration date has already passed, service provision is not permitted.
[0026]
Various services can be provided by the service providing apparatus 50. For example, there is a service in which personal information such as the name, address, and credit card number of the user 1 is separately stored in a database using the user ID (R) as a key, and the personal information is disclosed to the recipient terminal 20. . Further, for example, a service for relaying mails or IP telephones to the user 1 can be cited. In this case, the user's mail address or the telephone number of the IP phone is used as the user's user ID (R), the user's mail address or the like is restored from the disclosure identifier T, and relaying is performed using this mail address or the like. Processing may be performed.
[0027]
Here, the disclosure identifier generating device 30, the disclosure identifier certifying device 40, and the service providing device 50 are each implemented as a program that operates on a computer. What is the positional relationship between each program and the computer on which the program is implemented? It may be something. That is, all of the above devices may be implemented on one computer, may be implemented on different computers, or may be implemented on the computer in any combination. Further, a mode in which one means is distributed and mounted on a plurality of computers may be adopted. When a plurality of computers are used, it goes without saying that data transmission between the computers is performed via a network.
[0028]
Next, the flow of the disclosure identifier according to the present embodiment will be described with reference to FIG. FIG. 2 is a sequence chart illustrating the flow of the disclosure identifier. Here, it is assumed that the user terminal 10 has already acquired the disclosure identifier T from the disclosure identifier generation device 30.
[0029]
First, the recipient terminal 20 generates a random number Kc in the random number generation unit 21 (step S1), and transmits a disclosure identifier acquisition request including the random number Kc to the user terminal 10 in the disclosure identifier request unit 22 (step S1). Step S2).
[0030]
Next, the user terminal 10 generates a message authenticator S in the message authenticator generating means 11 (step S3), and returns the generated message authenticator S and the disclosure identifier T to the recipient terminal 20 (step S4). ).
[0031]
Next, the recipient terminal 20 transmits the disclosure identifier verification request including the message authenticator S, the random number Kc, and the disclosure identifier T to the disclosure identifier certifying device 40 in the disclosure identifier verification request means 23. (Step S5).
[0032]
Next, the disclosure identifier certifying device 40 restores the user ID (R) and the provision condition information C from the disclosure identifier T in the disclosure identifier restoring means 41 (step S6). Next, in the disclosure identifier certifying device 40, the message authenticator S is verified by the message authenticator verifying means 42 (step S7). Specifically, the public key Kp of the user 1 is obtained from the public key management server 60 using the restored user ID (R), and whether the message authenticator S can be decrypted using the public key Kp is determined. And verifies whether the decrypted random number matches the random number included in the disclosure identifier verification request. The verification result is notified to the recipient terminal 20 (step S8).
[0033]
With the above processing, the recipient 2 can confirm the validity of the disclosure identifier T, and thereafter makes a service provision request including the disclosure identifier T to the service providing apparatus 50 (step S9), and provides the service. The service may be received from the device 50 (step S10). Here, service provision by the service providing apparatus 50 is performed according to the user ID (R) and the provision condition information C obtained by restoring the disclosure identifier T.
[0034]
Next, a method of generating and restoring the disclosure identifier T in the disclosure identifier generation device 30 and the disclosure identifier restoring means 41 will be described in detail. The same applies to the restoration of the disclosure identifier in the service providing apparatus 50. The present invention proposes two methods for generating and restoring the disclosure identifier T. The first method is to embed the user ID (R) and the provision condition information C in the disclosure identifier T, and the second method is to store the user ID (R) and the provision condition information C separately in another storage means. It is a way to keep.
[0035]
First, the first method will be described. In this method, the disclosure identifier generating device 30 performs an encryption process on the information describing the user ID (R) and the provision condition information C so that the disclosure identifier restoring unit 41 can decrypt the information. Generate an identifier T. Various types of encryption processing, such as a common key encryption method and a public key encryption method, can be used. For example, when the public key encryption method is used, the disclosure identifier generating device 30 uses the public key of the disclosure identifier certifying device 40 for information describing the user ID (R) and the provision condition information C. To generate the disclosure identifier T. On the other hand, the disclosure identifier restoring means 41 can restore the user ID (R) and the provision condition information C by decrypting the disclosure identifier T using its own secret key.
[0036]
Next, the second method will be described with reference to FIGS. FIG. 3 is a system configuration diagram illustrating a method of generating and restoring a disclosure identifier, and FIG. 4 is a diagram illustrating an example of a data structure in a storage device. In the present method, the provision condition information C is divided into an identifier S of the recipient 2 which is a condition for specifying a service provider and another condition information C1 such as an expiration date.
[0037]
In the present method, as shown in FIG. 3, the storage for storing the association between the disclosure identifier T, the user ID (R), and the provision condition information C separately from the disclosure identifier generating device 30 and the disclosure identifier restoring means 41. A device 71, a key management device 72 for encryption processing, and an authentication device 73 are provided. The mounting positions of the storage device 71, the key management device 72, and the authentication device 73 do not matter.
[0038]
The disclosure identifier generation device 30 includes a provisional disclosure identifier generation unit 30a, a provisional disclosure identifier selection unit 30b, and a block encryption unit 30c.
[0039]
When the user 1 generates a request including the user ID (R) and the provision condition information C, the temporary disclosure identifier generation unit 30a stores the temporary disclosure identifier corresponding to the user ID (R) in the storage device 71. If not, a temporary disclosure identifier corresponding to the user ID (R) is newly generated, and the temporary disclosure identifier is associated with a set of the user ID (R) and the provision condition information C, and the storage device 71. To memorize. Here, the temporary disclosure identifier generation unit 30a generates and stores a plurality of temporary disclosure identifiers as shown in FIG.
The provisional disclosure identifier selecting unit 30b selects one of the plurality of provisional disclosure identifiers using the identifier S of the recipient included in the provision condition information C. Examples of a method of selecting a disclosure identifier include a method of selecting at random and a method of using an appropriate function (for example, a hash function) depending on the identifier S of the recipient. In the present embodiment, the latter method is adopted. As a more specific procedure when the hash function is used, for example, the temporary disclosure identifier is obtained by using a remainder obtained by dividing a hash value calculated from the identifier S of the provider by the number of temporary disclosure identifiers. Is selected.
[0040]
The block encryption unit 30c obtains an encryption key corresponding to the identifier S of the recipient included in the provision condition information C from the key management device 72, and selects the temporary encryption identifier selection unit 30b using the obtained encryption key. The identifier for provisional disclosure is encrypted. Here, in the encryption processing, one encryption key is selected from a plurality of encryption keys managed by the key management device 72 using an appropriate function (for example, a hash function) depending on the identifier S of the recipient. The encryption process is performed using the selected encryption key. Then, the encrypted provisional disclosure identifier is set as the disclosure identifier T. As a more specific procedure when the hash function is used, for example, a remainder obtained by dividing a hash value calculated from the identifier S of the recipient by the number of encryption keys managed by the key management device 72 is used. And a method of selecting an encryption key by using an encryption key.
[0041]
The disclosure identifier restoring unit 41 includes a decoding unit 41a and a registration information restoring unit 41b.
[0042]
The decryption unit 41a restores the provisional disclosure identifier by decrypting the disclosure identifier T encrypted by the block encryption unit 30c. Here, in the decryption process, an appropriate function (for example, a hash function) depending on the identifier S of the recipient is selected from a plurality of encryption keys managed by the key management device 72, as in the encryption process. Is used to select one encryption key, and decryption processing is performed using the selected encryption key. Thereby, if the provisional disclosure identifier cannot be decrypted in the decryption process, it can be determined that the request is from a third party different from the recipient, and the request may be rejected. .
[0043]
When the temporary disclosure identifier selecting unit 30b selects the provisional disclosure identifier using an appropriate function depending on the identifier S of the recipient, the registration information restoration unit 41b Is determined. Specifically, a temporary disclosure identifier is selected from a plurality of temporary disclosure identifiers stored in the storage device 71 using the same logic as the temporary disclosure identifier selection unit 30b, and the selected temporary disclosure identifier is selected. The identifier is compared with the temporary disclosure identifier T decoded by the decoding unit 41a. However, in the selection of the provisional disclosure identifier here, the identifier S of the recipient authenticated by the authentication device 73 at the time of the disclosure request is used. If the selected provisional disclosure identifier and the decrypted provisional disclosure identifier do not match, the request can be determined to be a request from a third party different from the recipient, and the request may be rejected. . Note that the determination here may be omitted because the same processing is performed by the decoding unit 41a. Also, the description will be omitted when the temporary disclosure identifier selecting unit 30b uses another selection method such as randomly selecting a temporary disclosure identifier.
[0044]
Next, the registration information restoring unit 41b refers to the storage device 71 using the temporary disclosure identifier decrypted by the decryption unit 41a, and thereby obtains the user ID (R) and provision condition corresponding to the temporary disclosure identifier. Obtain information C. Here, a plurality of provision condition information C may be registered in the storage device 71 for one user ID (R), but as described above, the provision condition information C includes the identifier of the recipient. S is included. Therefore, by referring to the storage device 71 using the identifier S of the recipient authenticated by the authentication device 73 at the time of the disclosure request, the user ID (R) corresponding to the disclosure identifier T and one provision condition information C are stored. Can be restored.
[0045]
As described above, in the disclosure identifier generation / restoration method according to the second method, the disclosure target identifier S is included as the provision condition information C, and the request source identifier S acquired by the authentication device 73 at the time of the disclosure request is used. Since the disclosure identifier T is used to restore the request, a request from a third party different from the recipient can be appropriately rejected. Since the number of disclosure identifiers T to be issued is on the order of the number of users, the amount of management data in the storage device 71 does not increase explosively even if the frequency of requests increases. Therefore, an increase in load can be prevented. In addition, since it is possible to suppress an increase in the number of disclosure identifiers T, it is possible to prevent the number of digits from being lengthened when encoding each disclosure identifier T, and thus to use a simple code system. .
[0046]
As described above, according to the method of distributing the disclosure identifier according to the present embodiment, the recipient 2 who intends to receive the provision of the service using the disclosure identifier T, together with the disclosure identifier T from the user terminal 10, By acquiring the message authenticator S and transmitting the disclosure identifier T and the message identifier S to the disclosure identifier certifying device 40, the device 40 can verify the validity of the disclosure identifier T. Therefore, even when the service provider 2 obtains the disclosure identifier T from a third party different from the original owner, the service provider 2 can recognize the unauthorized use of the disclosure identifier T. That is, "spoofing" by a third party using the disclosure identifier T can be prevented. Thus, the disclosure identifier T can be widely distributed on the network.
[0047]
In the above embodiment, the public key encryption process is used as a method for generating and restoring the message authenticator S, but a common key encryption process may be used. In this case, the user terminal 10 generates the message authenticator S by encrypting the character string including the random number Kc using the common key. On the other hand, the message authenticator verification unit 42 generates a message authenticator with the same logic as that of the user terminal 10, and compares the message authenticator with the message authenticator S received from the provided terminal 20 by comparing it. You only need to verify it.
[0048]
Further, in the above-described embodiment, the message authenticator is verified by encrypting / decrypting the challenge information using the random number Kc, but the method is used, but the verification may be performed by another method. For example, the user terminal 10 calculates a value of data including the random number Kc, which is the challenge information received from the service provider terminal 20, and the common key using a predetermined function (for example, a hash function). As a message authenticator. In this case, the message authentication code verification unit 42 generates a message authentication code with the same logic as that of the user terminal 10 and compares the message authentication code with the message authentication code S received from the provider terminal 20. Can be verified by
[0049]
In the above embodiment, the disclosure identifier T is obtained by communication between the provided terminal 20 and the user terminal 10 by using a so-called challenge and response method using a random number Kc. Has been verified, but another method can be adopted instead of the random number Kc which is the challenge information. For example, when transmitting the disclosure identifier T from the user terminal 10 to the recipient terminal 20, there is a method of using a message authenticator obtained by encrypting expiration date information. In this case, the message authentication code verification unit 42 compares the expiration date information obtained by decrypting the message authentication code with the current time, and if the current time is within the expiration date, the disclosure identifier T is received. What is necessary is just to determine that it was acquired by the communication between the provider terminal 20 and the user terminal 10.
[0050]
(Second embodiment)
A method of distributing the disclosure identifier according to the second embodiment of the present invention will be described with reference to FIG. FIG. 5 is a system configuration diagram illustrating a method of distributing the disclosure identifier.
[0051]
The difference between the first embodiment and the method of distributing the disclosure identifier according to the present embodiment is that before the user terminal 10 transmits the disclosure identifier T to the service provided terminal 20, the disclosure identifier certifying device is used. At 40, the authentication certificate P is generated by certifying the validity of the disclosure identifier T, and the authentication certificate P is attached to the disclosure identifier T and transmitted to the recipient terminal 20. The service provider terminal 20 can confirm the validity of the disclosure identifier T by verifying the authentication certificate P. The details will be described below.
[0052]
The user terminal 10 includes an authentication certificate issuance requesting unit 12 that requests the disclosure identifier certifying device 40 to issue an authentication certificate P in response to a request to obtain the disclosure identifier T received from the provided terminal 20. And a disclosure identifier transmitting means 13 for returning the disclosure identifier T of the user to the recipient terminal 20 together with the authentication certificate P received from the disclosure identifier certifying device 40. The request for issuing the authentication certificate P includes the disclosure identifier T of the user and the random number Kc received from the recipient terminal 20.
[0053]
The disclosure identifier certifying device 40 authenticates the user 1 requesting the authentication certificate issuance request and obtains the user ID (R) of the user 1, and the disclosure identifier included in the issuance request. Disclosure identifier restoring means 44 for restoring the user ID (R) corresponding to the identifier T from T; And a part 45. Here, the user authentication by the authentication unit 43 may be performed by any method, for example, a password method using a set of a user ID (R) and a password. Note that the disclosure identifier restoring means 44 is the same as that of the first embodiment, so that the details are omitted here.
[0054]
When the user ID (R) of the user 1 acquired by the authentication unit 43 matches the user ID (R) restored by the disclosure identifier restoring unit 44, the authentication certificate generation unit 45 Generate The authentication certificate P includes the disclosure identifier T and the random number Kc received from the user terminal 10, and encrypted information generated by encrypting the information with its own secret key.
[0055]
When receiving the provision of the service from the service providing apparatus 50, the recipient terminal 20 first obtains the disclosure identifier T and the authentication certificate P from the user terminal 10, and verifies the authentication certificate P to perform the disclosure. Check the validity of the identifier T. In the figure, reference numeral 24 denotes a random number generating means for generating a random number Kc; 25, a disclosure identifier acquisition request including the random number Kc generated by the random number generating means to the user terminal 10; T is a disclosure identifier requesting unit that obtains the authentication certificate P. 26 is an authentication certificate that verifies the authentication certificate P based on the disclosure identifier T and the authentication certificate P obtained by the disclosure identifier obtaining unit 25 and the random number Kc. Verification means.
[0056]
The authentication certificate verifying unit 26 obtains the public key of the disclosure identifier certifying device 40, decrypts the encryption information included in the authentication certificate P using the public key, and obtains the disclosure information obtained by the decryption. It is determined whether the identifier T and the random number Kc match the disclosure identifier T received from the user terminal 10 and the random number Kc generated by the random number generation means 24, respectively. In this determination, if they match, it is determined that the disclosure identifier T is valid.
[0057]
Based on the verification result of the authentication certificate verification unit 26, if the disclosure identifier T is valid, the recipient terminal 20 receives a service from the service providing apparatus 50 using the disclosure identifier T.
[0058]
Note that the disclosure identifier generation device 30 and the service providing device 50 are the same as those in the first embodiment, and thus description thereof will be omitted.
[0059]
Next, the flow of a disclosure identifier according to the present embodiment will be described with reference to FIG. FIG. 6 is a sequence chart for explaining the flow of the disclosure identifier. Here, it is assumed that the user terminal 10 has already acquired the disclosure identifier T from the disclosure identifier generation device 30.
[0060]
First, the recipient terminal 20 generates a random number Kc in the random number generation means 24 (step S21), and transmits a disclosure identifier acquisition request including the random number Kc to the user terminal 10 in the disclosure identifier requesting means 25 (step S21). Step S22).
[0061]
Next, the user terminal 10 transmits an authentication certificate issuance request including the random number Kc and the disclosure identifier T to the disclosure identifier certifying device 40 in the authentication certificate issuance requesting means 12 (step S23).
[0062]
Next, the disclosure identifier certifying device 40 authenticates the requesting user 1 by the authentication means 43 (step S24), and also restores the disclosure identifier T included in the authentication certificate issuance request to restore the user ID (R ) Is obtained (step S25). Next, when the user ID (R) obtained by the authentication means 43 matches the user ID (R) obtained by restoring the disclosure identifier T, the authentication certificate P is generated based on the disclosure identifier T and the random number Kc. The authentication certificate P is generated (step S26), and the authentication certificate P is returned to the user terminal 10 (step S27).
[0063]
Next, the user terminal 10 returns the disclosure identifier T of the user 1 to the provided terminal 20 together with the authentication certificate P received from the disclosure identifier certifying device 40 (step S28).
[0064]
The recipient terminal 20 verifies the validity of the disclosure identifier T received together with the authentication certificate P by verifying the authentication certificate P received from the user terminal 10 (step S29).
[0065]
With the above processing, the recipient 2 can confirm the validity of the disclosure identifier T, and thereafter makes a service provision request including the disclosure identifier T to the service providing apparatus 50 (step S30), and provides the service. The service may be received from the device 50 (step S31). Here, service provision by the service providing apparatus 50 is performed according to the user ID (R) and the provision condition information C obtained by restoring the disclosure identifier T.
[0066]
As described above, according to the method for distributing the disclosure identifier according to the present embodiment, the service provider 2 who intends to receive the service using the disclosure identifier T is authenticated by the user together with the disclosure identifier T. Since the certificate P is obtained, the validity of the disclosure identifier T can be verified by verifying the authentication certificate P. As a result, similarly to the first embodiment, “spoofing” by a third party using the disclosure identifier T can be prevented, and therefore, the disclosure identifier T can be widely distributed on a network.
[0067]
The first and second embodiments of the present invention have been described above, but the present invention is not limited to these embodiments. For example, in each of the above embodiments, the disclosure identifier certifying device 40 and the service providing device 50 are described as separate devices, but they may be configured integrally. In this case, it is preferable that the service providing apparatus 50 determines whether or not the service can be provided based on the verification result of the disclosure identifier.
[0068]
In the above-described embodiment, the disclosure identifier T is used in association with the provision condition information C which is a condition of service provision when receiving service provision from the service provision device 50. The present invention can be implemented even with a disclosure identifier that is not associated.
[0069]
【The invention's effect】
As described in detail above, according to the present invention, a recipient who intends to receive a service using a disclosure identifier can confirm the validity of the disclosure identifier before receiving the service. That is, it is possible to confirm whether the disclosure identifier has been illegally distributed, in other words, whether the source of the disclosure identifier is impersonating the original owner. As a result, the disclosure identifier can be widely distributed on the network.
[Brief description of the drawings]
FIG. 1 is a system configuration diagram illustrating a distribution method of a disclosure identifier.
FIG. 2 is a sequence chart illustrating a flow of a disclosure identifier;
FIG. 3 is a system configuration diagram illustrating an example of a method of generating and restoring a disclosure identifier;
FIG. 4 is a view for explaining an example of a data structure in a first storage means in FIG. 3;
FIG. 5 is a system configuration diagram illustrating a method of distributing a disclosure identifier;
FIG. 6 is a sequence chart for explaining the flow of a disclosure identifier;
FIG. 7 is a diagram illustrating a personal information providing service using a conventional access code.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... User, 2 ... Service provider, 10 ... User terminal, 11 ... Message authenticator generation means, 12 ... Authentication certificate issue request means, 13 ... Disclosure identifier transmission means, 20 ... Service provider terminal , 21 ... random number generation means, 22 ... disclosure identifier request means, 23 ... disclosure identifier verification request means, 24 ... random number generation means, 25 ... disclosure identifier verification request means, 26 ... authentication certificate verification means, 30 ... disclosure Identifier generating device, 30a temporary discriminating identifier generating unit, 30b temporary discriminating identifier selecting unit, 30c block encrypting unit, 40 discriminating identifier certifying device, 41 disclosing identifier restoring means, 41a decoding Unit, 41b: registration information restoring unit, 42: message authenticator verification unit, 43: authentication unit, 44: disclosure identifier restoring unit, 45: authentication certificate generation unit, 50: service providing device, 0 ... public key management server, 71 ... storage device, 72 ... key management device, 73 ... authentication device

Claims (14)

In a method of distributing a disclosure identifier for disclosing to a user who wants to use the user identifier in place of a user identifier capable of uniquely identifying the user on a network,
A terminal of a first user (first user terminal) generates a message authenticator based on related information related to communication with a terminal of a second user (second user terminal). A message authenticator generation stage;
A first user terminal transmitting a disclosure identifier of the first user to a second user terminal together with a message authenticator;
A verification requesting step in which the second user terminal transmits a disclosure identifier verification request including the disclosure identifier and the message authenticator received from the first user terminal to the disclosure identifier certifying device;
A disclosure identifier certifying device for acquiring a user identifier of the first user based on the disclosure identifier included in the verification request;
The disclosure identifier certifying device includes a message authenticator verifying step of verifying a message authenticator included in a verification request based on the acquired user identifier of the first user and the related information. Disclosure identifier distribution method. A challenge information generating step in which the second user terminal generates challenge information in a challenge-response method as related information;
A challenge information transmitting step in which the second user terminal transmits the related information to the first user terminal,
In the message authenticator generating step, a message authenticator is generated based on the challenge information received from the second user terminal,
In the verification requesting step, the challenge request includes the challenge information,
The method according to claim 11, wherein in the message authenticator verifying step, the message authenticator is verified based on the acquired user identifier of the first user and the message authenticator and the challenge information received from the second user terminal. 2. The disclosure identifier distribution method according to item 1. In the message authenticator generating step, the message authenticator is generated by encrypting data including the challenge information received from the second user terminal with its own secret key,
The step of verifying the message authenticator includes the step of obtaining a public key of the first user using the obtained user identifier of the first user, and the step of verifying the message authenticator received from the second user terminal. The method includes the steps of obtaining challenge information by decrypting using the public key of the first user, and comparing the restored challenge information with the challenge information received from the second user terminal. 3. The method for circulating a disclosure identifier according to claim 2. In the message authenticator generating step, the message authenticator is generated by encrypting data including the challenge information received from the second user terminal with a shared key shared with the disclosure identifier certifying device. ,
In the message authenticator verification step, a step of obtaining a shared key shared with the first user using the obtained first user identifier, and a step of obtaining challenge information received from the second user terminal. 3. The method according to claim 2, further comprising the step of comparing data contained in the encrypted data with the shared key and a message authenticator received from a second user terminal. In the message authenticator generating step, the message authenticator is generated using a predetermined function based on the challenge information received from the second user terminal and the shared key shared with the disclosure identifier certifying device,
In the message authenticator verification step, a step of obtaining a shared key shared with the first user using the obtained first user identifier; and a step of obtaining the challenge information received from the second user terminal. Comparing the message authenticator generated using the same function as in the message authenticator generating step based on the shared key with a message authenticator received from a second user terminal. 3. The method for distributing an identifier for disclosure according to claim 2. In the message authentication code generation step, a message authentication code is generated by generating expiration date information as related information and encrypting data including the expiration date information,
The message authenticator verifying step includes decoding the message authenticator received from the second user terminal to obtain expiration date information, and verifying the message authenticator based on the decrypted expiration date information and the current time. 2. The method according to claim 1, further comprising the step of: 2. The method according to claim 1, wherein the disclosing identifier certifying device includes a verification result notifying step of notifying the second user terminal of a verification result in the message authenticator verifying step. A service providing system for providing a service to a user using a user identifier obtained based on the disclosure identifier in response to a service providing request including the disclosure identifier provides a service based on a verification result in a message authentication code verification step. 2. The method according to claim 1, further comprising the step of determining whether or not to provide a service. In a method of distributing a disclosure identifier for disclosing to a user who wants to use the user identifier in place of a user identifier capable of uniquely identifying the user on a network,
The first user terminal (first user terminal) discloses information related to communication with the second user terminal (second user terminal) and the first user. A certificate issuance request for transmitting a certificate issuance request including the identifier for use to the disclosure identifier certifying device;
A user authentication step in which the disclosure identifier certifying device authenticates the first user who is the source of the certificate issuance request;
Disclosure identifier certifying device, a disclosure identifier obtaining step of obtaining a user identifier based on the disclosure identifier included in the certificate issuance request,
A disclosure identifier certifying device, a user verification step of verifying whether the acquired user identifier is related to the first user authenticated in the user authentication step,
An authentication certificate generating step of generating an authentication certificate when the disclosure identifier certifying device relates to the first user authenticated in the user authentication step;
An authentication certificate transmitting step in which the disclosure identifier certifying device transmits the authentication certificate to the first user terminal requesting the authentication certificate;
A disclosure identifier transmitting step in which the first user terminal transmits the disclosure identifier of the first user together with the authentication certificate received from the disclosure identifier certifying device to the second user terminal;
A second user terminal verifying a disclosure identifier received from the first user terminal based on the authentication certificate received from the first user terminal. Disclosure method to be disclosed. A challenge information generating step in which the second user terminal generates challenge information in a challenge-response method as related information;
A challenge information transmitting step in which the second user terminal transmits the related information to the first user terminal,
In the authentication certificate generation step, encryption information is generated by encrypting the user identifier and the challenge information, and an authentication certificate is generated by attaching the encrypted information to the user identifier and the challenge information;
In the disclosure identifier verification step, the encrypted information included in the authentication certificate received from the first user terminal is decrypted, and the challenge information obtained by the decryption and the challenge information generated in the challenge information generating step are decrypted. 10. The disclosure identifier distribution method according to claim 9, wherein the disclosure identifier is verified by comparing the following. In a system in which a disclosure identifier for disclosing a user identifier that can uniquely identify a user to another user who wants to use the user identifier is distributed on a network,
The first user terminal (first user terminal) generates a message authenticator based on related information related to communication with the second user terminal (second user terminal). Message authentication code generation means, and disclosure identifier transmission means for transmitting the disclosure identifier of the first user of the user to the second user terminal together with the message authentication code,
The second user terminal includes verification request means for transmitting a disclosure identifier verification request including the disclosure identifier and the message authenticator received from the first user terminal to the disclosure identifier certifying device,
The disclosure identifier certifying device obtains a first identifier of the first user based on the disclosure identifier included in the verification request, and a first message identifier obtained by acquiring the message authenticator included in the verification request. And a message authenticator verifying means for verifying based on the user identifier of the user and the related information. In a system in which a disclosure identifier for disclosing a user identifier that can uniquely identify a user to another user who wants to use the user identifier is distributed on a network,
The first user's terminal (first user terminal) is a terminal of the second user (second user terminal) and related information related to communication with the first user and disclosure of the first user. Requesting means for transmitting a certificate issuance request including a discriminating identifier to the disclosing identifier certifying device, and a disclosing identifier of the first user together with the authentication certificate received from the disclosing identifier certifying device. A disclosure identifier transmitting means for transmitting to the user terminal;
The disclosure identifier certifying device includes a user authentication unit that authenticates a first user who has issued a certificate issuance request, and a disclosure authentication unit that acquires a user identifier based on a disclosure identifier included in the certificate issuance request. Identifier obtaining means, user verification means for verifying whether the obtained user identifier is related to the first user authenticated by the user authentication means, and user authentication means for obtaining the obtained user identifier Authentication certificate generation means for generating an authentication certificate when the authentication certificate belongs to the first user authenticated in step 1, and authentication certificate transmission means for transmitting the authentication certificate to the requesting first user terminal With
The second user terminal includes a disclosure identifier verifying unit that verifies the disclosure identifier received from the first user terminal based on the authentication certificate received from the first user terminal. Disclosure identifier distribution system. A disclosure identifier certifying device for certifying the validity of a disclosure identifier for disclosing to a user who wants to use the user identifier instead of a user identifier capable of uniquely identifying the user,
In response to a request from a user terminal for verifying a disclosure identifier including a message authenticator and a disclosure identifier generated based on related information related to communication between user terminals, a disclosure identifier included in the verification request A disclosure identifier acquiring means for acquiring a user identifier based on:
A disclosure identifier certifying device comprising: a message authentication code verification unit that verifies a message authentication code included in a verification request based on a user identifier acquired by the disclosure identifier acquisition unit and the related information. A disclosure identifier certifying device for certifying the validity of a disclosure identifier for disclosing to a user who wants to use the user identifier instead of a user identifier capable of uniquely identifying the user,
In response to a certificate issuance request from the user terminal that includes related information relating to communication between the user terminals and an identifier for disclosure of the user, authenticates the user that has issued the certificate issuance request. User authentication means,
Disclosure identifier acquisition means for acquiring a user identifier based on the disclosure identifier included in the certificate issuance request,
User verification means for verifying whether the user identifier acquired by the disclosure identifier acquisition means relates to the user authenticated by the user authentication means,
Authentication certificate generation means for generating an authentication certificate when the user identifier acquired by the disclosure identifier acquisition means relates to the user authenticated by the user authentication means,
A disclosure identifier certifying device, comprising: an authentication certificate transmitting means for transmitting an authentication certificate to a requesting user terminal.

Images